# com.babyblueviper/invinoveritas (remote · api.babyblueviper.com)

Second opinion before an irreversible agent action; signed proofs, free verify, public ledger.

- Trust score: 78/100 (medium)
- Change this week: +3
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-10-04

## Components

- remote · `api.babyblueviper.com`: 78/100 (this document), [markdown](https://verifymcp.io/servers/com-babyblueviper-invinoveritas/mcp-verify.md), [page](https://verifymcp.io/servers/com-babyblueviper-invinoveritas/mcp-verify)

## Channel facts

- Endpoint: `https://api.babyblueviper.com/mcp/verify`
- Transports: `streamable-http`
- Auth: `none`
- Version: `1.14.1`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-10-04.

- **Endpoint Security**: 80/100
  - The endpoint's TLS certificate is valid, in date, and uses a strong key.
  - No authorisation is required to call this server. Every tool declares its destructiveHint and none is destructive, so open access doesn't expose one.
  - HTTPS is enforced; there's no plaintext access path.
  - The HSTS (Strict-Transport-Security) header is present.
  - DNSSEC check failed: this domain isn't protected by DNSSEC.
- **Transport & Reachability**: 100/100
  - Verified streamable-http transport via a live MCP handshake.
- **Schema Quality & AI Usability**: 85/100
  - 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).
  - AI-judged instruction clarity (good).
  - Tool/resource definitions use about 39112 tokens (~50/item across 767 items; 8 tools + 759 resources), lean.
  - Tools include usage examples.
- **Stability & Change Management**: 23/100
  - Stability observed for 7 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 98/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 95% of tool parameters carry a description.
- **Tool Safety**: 100/100
  - No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.
  - We read all 8 captured tool definition(s), and no name or description among them implies an irreversible operation.
  - An AI judge read all 10 captured unit(s) of tool text and found none that tries to manipulate the model reading it.
- **Capabilities**: 100/100
  - Implements a current MCP spec version (2026-07-28).

## Install

### How do I install the com.babyblueviper/invinoveritas MCP server?

com.babyblueviper/invinoveritas is a hosted endpoint at https://api.babyblueviper.com/mcp/verify, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

### Claude

```bash
claude mcp add --transport http com-babyblueviper-invinoveritas 'https://api.babyblueviper.com/mcp/verify'
```

### Cursor

```json
{
  "mcpServers": {
    "com-babyblueviper-invinoveritas": {
      "url": "https://api.babyblueviper.com/mcp/verify"
    }
  }
}
```

### VS Code

```json
{
  "servers": {
    "com-babyblueviper-invinoveritas": {
      "type": "http",
      "url": "https://api.babyblueviper.com/mcp/verify"
    }
  }
}
```

### Codex

```toml
[mcp_servers.com-babyblueviper-invinoveritas]
url = "https://api.babyblueviper.com/mcp/verify"
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "com-babyblueviper-invinoveritas": {
      "type": "remote",
      "url": "https://api.babyblueviper.com/mcp/verify",
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add com-babyblueviper-invinoveritas --url 'https://api.babyblueviper.com/mcp/verify' --transport streamable-http
```

### Hermes

```yaml
mcp_servers:
  com-babyblueviper-invinoveritas:
    url: "https://api.babyblueviper.com/mcp/verify"
```

### Netclaw

```json
{
  "McpServers": {
    "com-babyblueviper-invinoveritas": {
      "Transport": "http",
      "Url": "https://api.babyblueviper.com/mcp/verify"
    }
  }
}
```

### Vellum

```bash
assistant mcp add com-babyblueviper-invinoveritas -t streamable-http -u 'https://api.babyblueviper.com/mcp/verify'
```

### Other

```json
{
  "mcpServers": {
    "com-babyblueviper-invinoveritas": {
      "type": "http",
      "url": "https://api.babyblueviper.com/mcp/verify"
    }
  }
}
```

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-10-02 (score 78, +1)

No change was recorded against any check on this day. Stability & Change Management went from 13 to 17. That category is still filling its 30-day observation window: 4 days of observed history at the previous scan, 5 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-10-01 (score 77, 0)

- [cosmetic] “review” added an optional parameter “verdict_relay”

### 2026-09-30 (score 77, +1)

No change was recorded against any check on this day. Stability & Change Management went from 7 to 10. That category is still filling its 30-day observation window: 2 days of observed history at the previous scan, 3 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-09-28 (score 76, +1)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-09-27 (score 75)

First indexed and scored.

## MCP tools (8)

### `review` (~2154 tokens)

Independent verdict on a proposed action before it is taken: a code diff, shell command, deployment plan, configuration change, another agent's output, or a proposed transaction. Returns approve / approve_with_concerns / reject with a confidence score, issues ranked by severity, suggested fixes and alternatives. With sign=true the verdict is returned as a signed proof that anyone can check later with verify_proof. The verdict is a reasoned second opinion, not a guarantee of outcome. Docs: https://api.babyblueviper.com/docs

Input parameters:

- `action_binding` (object): Optional: the exact real-world action this verdict authorizes — tool identity, materialized (not templated) arguments, and the id of the agent that will execute it, e.g. {'tool': 'place_order', 'agen…
- `artifact` (string, required): The artifact to review: unified diff / patch, shell command, plan, config, analysis, agent output, or raw text
- `artifact_type` (string): Type of artifact. 'code_diff' or 'patch' triggers deep code review. 'plan' for architecture/strategy. 'trade' triggers the capital-scale-aware risk-manager review of a proposed entry/exit. 'onchain_a…
- `concerns` (string): Specific things to check (e.g. 'production safety', 'edge cases in trading logic', 'regulatory risk')
- `confidentiality_tier` (string): Which privacy/evidentiary tradeoff this verdict should use, only meaningful with sign=true. 'hash_only' (default): the proof carries only artifact_hash, raw content never disclosed — strongest privac…
- `context` (string): What you are trying to accomplish, why now, success criteria
- `disclosed_summary` (string): Only used when confidentiality_tier='partial_disclosure'. A real, human-readable description of the reviewed artifact/decision you're choosing to make public — bound raw into decision_ref. Ignored fo…
- `external_evidence` (array): Optional (v17, 2026-09-10): third-party evidence this judgment relied on — e.g. a tool-reliability registry's own historical PASS/FAIL record, worked out live with arian-gogani/nobulex-registry#1. Ar…
- `intended_audience` (string): Optional: declare who/what this verdict is intended for (your own DID, endpoint URL, or gateway identifier). Bound into decision_ref so it can't be silently stripped or altered once issued. NOT indep…
- `intended_verifier` (string): Optional: a CAIP-10 string naming the specific on-chain verifier/gate this verdict is meant to be checked against, e.g. 'eip155:8453:0x8004A169FB4a3325136EB29fA0ceB6D2e539a432'. Bound into decision_r…
- `mediator_attestation` (object): Optional (v22): your mediator proves control of its own key. {key_url (https, mediator's own domain), public_key_ed25519_b64, requested_at (unix s, +-600 s), nonce (8-128 ASCII), signature_ed25519_b6…
- `related_claims` (object): Optional (policy v20): a structured claim about related_proof_event -- a non-empty subset of {artifact_hash, verdict, verified_at, policy_version, decision_ref}. Compared by exact equality against th…
- `related_proof_event` (object): Optional: if the artifact being reviewed IS another party's already-signed verdict proof (a verdict-of-verdict re-review), pass that proof's full signed event ({id, pubkey, created_at, kind, tags, co…
- `request_capture_ref` (string): Optional: a requester-controlled commitment (a hash/id you generated and can independently prove existed at request-time) that this artifact was submitted for review — the captured-admission-v0 revie…
- `severity_threshold` (string): Minimum severity to report
- `sign` (boolean): Return the verdict as a portable signed proof (binds verdict, artifact hash and invinoveritas's public key, plus a content-addressed decision_ref). Anyone can check it later with verify_proof.
- `verdict_relay` (object): Optional (verdict-relay/v2): also return a BIP-340 signature an ERC-8414 InvinoveritasVerdictAuthoritySigned contract verifies on-chain (garyyang-finchip/task-token-standard#2). {chain_id, authority,…

### `verify_proof` (~414 tokens)

Checks a signed invinoveritas proof without trusting whoever handed it over: recomputes the event id, checks the Schnorr signature, and confirms the signing key is invinoveritas's published key. Optionally pass expect_artifact_hash (sha256 of the content you received) to confirm the proof covers that exact content. Accepts the full event, or an event_id to look up. Returns {valid, checks, proof_payload}. Free, no sign-in. Docs: https://api.babyblueviper.com/verify

Input parameters:

- `event` (object): The signed proof event {id,pubkey,created_at,kind,tags,content,sig} the counterparty handed you (from a /prove or /review sign=true response).
- `event_id` (string): Alternatively, the Nostr event id alone (from a /review sign=true, /prove, or /witness proof) — fetches the durably-stored full event, independent of relay retention, and verifies it.
- `expect_artifact_hash` (string): Optional sha256 hex of the output you received — asserts the proof is ABOUT that exact artifact.
- `expect_intended_verifier` (string): Optional (added 2026-08-16) — asserts the proof's declared intended_verifier matches you, the consumption-identity check alongside expect_artifact_hash's content-identity check. A match confirms the…
- `proof_id` (string): Alternatively, a stored attestation proof_id to fetch + verify.
- `verifier_signature` (string): Optional (added 2026-08-16) — an EIP-191 personal_sign signature over 'invinoveritas-verify-proof:<event_id>', signed by the key controlling the address in expect_intended_verifier (eip155 CAIP-10 na…

### `witness` (~122 tokens)

Timestamps and signs a third party's exact claim, unmodified and unjudged: 'we received this text, attributed to source X, at time T', not 'we agree with it'. The source is recorded as self-declared. The resulting proof checks with verify_proof. Docs: https://api.babyblueviper.com/docs

Input parameters:

- `body` (string, required): The exact claim to anchor, byte-for-byte (max 16000 chars)
- `source` (string, required): Who this claim is attributed to (self-declared, NOT verified by us)

### `validate` (~260 tokens)

Statistical reality-check of a backtest from its realized returns (or trade rows), not the strategy itself. Returns likely_real / borderline / overfit_or_noise using the Deflated Sharpe Ratio (adjusted for the number of variants tried), a sign-flip permutation test, and out-of-sample decay across purged folds. Inputs are not retained beyond a redacted audit hash. Docs: https://api.babyblueviper.com/docs

Input parameters:

- `agent_id` (string): Optional caller agent ID
- `k_folds` (integer)
- `n_perms` (integer)
- `n_trials` (integer): How many strategy variants/params you tried before selecting this one. Be honest — more trials = bigger Deflated-Sharpe haircut.
- `periods_per_year` (number): Optional, for annualized-Sharpe display only.
- `returns` (array): Per-trade (or per-period) realized returns.
- `trades` (array): Alternative to 'returns': rows with a return field (ret/pnl/net_bps) and optional 'coin'/'ts'/'entry'/'exit' fields.
- `trial_sharpes` (array): Optional: Sharpes of all variants tried → exact DSR variance.

### `ledger` (~126 tokens)

Reads invinoveritas's public track record of signed verdicts, including ones that turned out wrong. Each entry is a signed Nostr event whose id and signature can be recomputed against invinoveritas's published key; entries are append-only and Bitcoin-timestamped, so they can't be edited after the fact. No arguments returns the index; pass entry to read one. Free, no sign-in. Docs: https://api.babyblueviper.com/ledger

Input parameters:

- `entry` (string): Optional entry number (e.g. '1'); omit for the full index.

### `ledger_submit` (~134 tokens)

Publishes one of your own signed review proofs (from review with sign=true) as a public entry on the invinoveritas ledger. Publication is immediate and permanent: the entry is broadcast to Nostr relays and Bitcoin-timestamped. Only genuine invinoveritas-signed proofs are accepted. Docs: https://api.babyblueviper.com/ledger

Input parameters:

- `event` (object, required): The signed Nostr event from a prior /review(sign=true) call — the exact proof.event object that response returned.
- `note` (string): Optional short context: what this verdict was for, why it's worth featuring.

### `conformance_certify` (~121 tokens)

Publishes a verifier's current conformance grade from the public registry (conformance.json) as a permanent, signed ledger entry, labeled 'certified as of this measurement'. It records the registry's existing measurement and cannot change it. Only works for a verifier currently listed as certified. Docs: https://api.babyblueviper.com/conformance

Input parameters:

- `name` (string, required): The verifier's exact name as listed on GET /conformance.json (must currently show certified:true).
- `note` (string): Optional short context for the ledger entry.

### `audit_agent_readiness` (~113 tokens)

Audits a public agent or API URL for verifiability: discovery files (llms.txt, MCP card, robots, sitemap), handshake endpoints, and whether presented signed proofs validate. Returns a 0-100 score, a grade, ranked fixes, and a signed proof of the audit. Every result re-derives from a public fetch. Docs: https://api.babyblueviper.com/docs

Input parameters:

- `url` (string, required): The agent endpoint/site URL to audit (public http(s) only)

## Diagnostics

Captured diagnostic sections: TLS, DNSSEC, Authorisation, Transports. The full working is on the page: https://verifymcp.io/servers/com-babyblueviper-invinoveritas/mcp-verify#diagnostics

## Score history

- 2026-10-04: 78
- 2026-10-03: 78
- 2026-10-02: 78
- 2026-10-01: 77
- 2026-09-30: 77
- 2026-09-29: 76
- 2026-09-28: 76
- 2026-09-27: 75

## Common questions

### What is the com.babyblueviper/invinoveritas MCP server?

com.babyblueviper/invinoveritas is an MCP server listed in the public MCP registry as com.babyblueviper/invinoveritas. Second opinion before an irreversible agent action; signed proofs, free verify, public ledger. This page covers its hosted endpoint (https://api.babyblueviper.com/mcp/verify).

### Is the com.babyblueviper/invinoveritas MCP server safe to use?

com.babyblueviper/invinoveritas scores 78 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

### What tools does the com.babyblueviper/invinoveritas MCP server expose?

com.babyblueviper/invinoveritas exposes 8 tools: review, verify_proof, witness, validate, ledger, and 3 more. Their descriptions and schemas cost roughly 3,444 tokens of context every time the server is loaded.

### Does the com.babyblueviper/invinoveritas MCP server require authentication?

No. We connected to com.babyblueviper/invinoveritas without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.

### Is the com.babyblueviper/invinoveritas MCP server still maintained?

com.babyblueviper/invinoveritas is still listed as active in the MCP registry. We last reached this channel on 4 October 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

## Links

- Remote endpoint: https://api.babyblueviper.com/mcp/verify
- Repository: https://github.com/babyblueviper1/invinoveritas-mcp
- Changelog RSS feed: https://verifymcp.io/servers/com-babyblueviper-invinoveritas/mcp-verify.xml
- Changelog JSON feed: https://verifymcp.io/servers/com-babyblueviper-invinoveritas/mcp-verify.json
- HTML version of this page: https://verifymcp.io/servers/com-babyblueviper-invinoveritas/mcp-verify