Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, email [email protected] and we’ll put it right.

Opedd — Licensed Content for AI

NPM · OPEDD-MCP · 2 COMPONENTS · SCANNED AUG 3

Licensed, rights-cleared content for AI agents - verifiable license keys + EU AI Act attestation.

+24 this week 67 Trust /100
Trust breakdown (6 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score →

Supply Chain Security87
  • No malware found by supply-chain analysis.Pass
  • Only part of the dependency tree could be resolved (108 of 109), so this covers what we could see, not the whole tree.Partial
  • No install/post-install scripts declared.Pass
  • Only part of the dependency tree could be resolved (108 of 109), so this covers what we could see, not the whole tree. View diagnostics → Partial
Provenance & Transparency45
Schema Quality & AI Usability63
  • AI-judged instruction clarity (good).Pass
  • Context-footprint check failed: tool/resource definitions use about 1603 tokens (~200/item across 8 items; 8 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management27
  • Stability observed for 8 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 100% of tool parameters carry a description.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Install

Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.

npm · opedd-mcp

# add to Claude Code
claude mcp add com-opedd-opedd-mcp -- npx -y opedd-mcp
# add to Codex CLI
codex mcp add com-opedd-opedd-mcp -- npx -y opedd-mcp
// opencode.json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "com-opedd-opedd-mcp": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "opedd-mcp"
      ],
      "enabled": true
    }
  }
}
# add to OpenClaw
openclaw mcp add com-opedd-opedd-mcp --command npx --arg -y --arg opedd-mcp
# ~/.hermes/config.yaml
mcp_servers:
  com-opedd-opedd-mcp:
    command: "npx"
    args: ["-y", "opedd-mcp"]
// mcp.json
{
  "mcpServers": {
    "com-opedd-opedd-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "opedd-mcp"
      ]
    }
  }
}
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 3 Aug 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 23 to 27. That category is still filling its 30-day observation window: 7 days of observed history at the previous scan, 8 at this one. The score rises as the window fills, whether or not the server changes.

  • 2 Aug 26 +43
    • Provenance: unverified → fail security
    • Malware scan: unverified → pass security
    • Install scripts: unverified → pass security
    • Known CVEs: unverified → partial security
    • Stability: unverified → 0.23 functional
    • Dependency health: unverified → partial functional
    • Maintenance: unverified → pass functional
    • Schema quality: unverified → good functional
    • License: unverified → pass functional
    • Licence: MIT functional
  • 1 Aug 26 +18
    • Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window). security
    • MCP protocol: unverified → pass functional
    • Tool coverage: unverified → 100 functional
  • 31 Jul 26 −20
    • We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
  • 30 Jul 26 −18
    • Malware scan: pass → unverified security
  • 27 Jul 26 43

    First indexed and scored.

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 3 Aug 2026 · Analysed npm/[email protected]

Provenance none

Ecosystem: npm · Outcome: none

Dependencies 108 packages

108 packages in the resolved dependency tree · 108 deprecated · 32 stale.

The dependency tree was only partially resolved, so these counts may be incomplete.

MCP tools — 8 exposed · ~1,603 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.

Tool Tokens
browse_registry ~107

Browse the public Opedd license registry. Returns recently issued licenses and licensable content. Filter by publisher_id to explore all content from a specific publisher. Filter by article_id to see all licenses issued for a specific article.

NameTypeReqDescription
article_idstringFilter results to a specific article (UUID)
limitnumberNumber of results to return (default: 10, max: 50)
publisher_idstringFilter results to a specific publisher (UUID)

No output schema declared.

No examples provided.

detect_platform ~203

Detect the content platform behind a URL via POST /detect-platform (Phase 12 Wave 3 W3.1). Public no-auth lookup. Given a URL, identifies what platform powers it (Substack / Beehiiv / Ghost / Medium / Brevo / custom) and returns the suggested onboarding workflow. Hostname-detectable platforms (Substack subdomain, Beehiiv suffix, etc.) resolve in milliseconds; custom domains may take ~few seconds while the detector probes well-known platform endpoints in parallel. Returns: {platform, confidence, archive_method, forward_method, required_credentials, instructions}. The archive_method + forward_method fields are the two onboarding-workflow inputs Opedd's setup wizard reads (one for historical content backfill, one for new-content forward stream). instructions is human-readable operator copy explaining the inferred path.

NameTypeReqDescription
urlstringyesPublisher URL to inspect (any well-formed URL works; hostname-match short-circuits the probe path).

No output schema declared.

No examples provided.

lookup_content ~82

Look up a piece of content on the Opedd registry by URL. Returns the article title, publisher, available license types, and pricing (human republication price and AI training/inference price). Always call this first to check if content is licensable and what it costs.

NameTypeReqDescription
urlstringyesThe canonical URL of the article or content to look up

No output schema declared.

No examples provided.

publisher_directory ~209

Browse the public Opedd publisher catalog via GET /publisher-directory. Returns paginated publishers with article counts, pricing (per-article + annual + monthly-forward-feed), plan, and sample articles (RAG-extended metadata). **The primary discovery surface for AI labs to find Opedd-licensable publishers** — distinct from `browse_registry` (which lists issued LICENSES, not publishers). Filter by category (case-insensitive substring), min_articles, or verified status. Public no-auth — useful pre-purchase scoping before buyers commit to enterprise-license POST.

NameTypeReqDescription
categorystringCase-insensitive substring filter on publisher category (e.g. 'finance', 'AI').
limitnumberPage size cap.
min_articlesnumberFilter to publishers with at least this many licensable articles.
offsetnumberPagination offset.
verifiedstring'true' to show only verified publishers (default), 'false' for unverified.

No output schema declared.

No examples provided.

purchase_enterprise_license ~322

Purchase a bulk enterprise license covering multiple publishers (Phase 10). Returns a Stripe client_secret for payment completion + the enterprise_license_id. After payment, an ent_* access key is emailed to buyer_email. Scopes: 'custom' (pass-through publisher_ids), 'platform_wide' (auto-resolve all opted-in publishers), 'filtered' (Phase 10 filter_rules). License tiers: 'rag' (= ai_retrieval), 'training' (= ai_training, flat-fee not metered), 'inference' (= ai_retrieval), 'full_ai' (writes both retrieval + training records).

NameTypeReqDescription
billing_typestringBilling cadence (default: annual)
buyer_emailstringyesEmail to deliver the access key after payment
buyer_orgstringyesBuyer organization name (for billing + audit ledger)
buyer_webhook_urlstringOptional HMAC-signed webhook for content.published events on covered publishers
duration_monthsnumberLicense duration in months (default: 12)
filter_rulesobjectRequired when scope='filtered'. See Phase 10 docs for shape: excluded_publisher_ids / direct_license_carveouts / categories / max_price_per_event.
license_tierstringLicense tier (default: rag)
publisher_idsarrayyesArray of publisher UUIDs. Required for scope='custom'; ignored for platform_wide/filtered (resolved server-side).
scopestringCoverage scope (default: custom)

No output schema declared.

No examples provided.

purchase_license ~279

Purchase a content license from the Opedd protocol using a Stripe payment method. Returns a license key (format: OP-XXXX-XXXX) and a certificate URL. The buyer receives a Handshake Email with their license key. Set OPEDD_BUYER_EMAIL and OPEDD_PAYMENT_METHOD_ID env vars to avoid passing them on every call. License types: 'human' = republication rights, 'ai' = training dataset rights, 'ai_inference' = inference/RAG rights.

NameTypeReqDescription
article_idstringOpedd article UUID (use this OR article_url)
article_urlstringURL of the article to license (use this OR article_id)
buyer_emailstringEmail address for the license. Falls back to OPEDD_BUYER_EMAIL env var.
buyer_namestringFull name of the buyer (for the license record and certificate)
buyer_organizationstringOrganization or company name (for enterprise/editorial licenses)
intended_usestringIntended use of the licensed content
license_typestringyeshuman = republication/editorial rights, ai = training dataset rights, ai_inference = inference/RAG rights
payment_method_idstringStripe payment method ID (pm_...). Falls back to OPEDD_PAYMENT_METHOD_ID env var.

No output schema declared.

No examples provided.

rsl_get ~322

Fetch a publisher's RSL Standard manifest via GET /rsl-manifest (Phase 12 Wave 1 W1.1). Public no-auth endpoint — discovery surface for AI agents/crawlers wanting to know what's licensable from a publisher BEFORE going through the buyer-account signup flow. Returns the 4 canonical license types (ai_retrieval, ai_training, human_per_article, human_full_archive) the publisher has opted into, plus the EU CDSM Article 4(3) opt-out posture (`tdm_reservation`). Set `jsonld: true` to request the JSON-LD shape with embedded HMAC-SHA256 signed receipt over the CDSM Article 4(3) reservation state + `tdm:reservationSignedAt` timestamp — regulators can post-hoc verify the reservation was the claimed value at the claimed time. Default `jsonld: false` returns the raw RSL Standard JSON manifest. Per INVARIANTS.md W1.6: this is the PUBLISHER-side CDSM Article 4(3) declaration surface. It is NOT an EU AI Act Article 53 attestation (which is buyer-side, JWT-auth, via article_53_attestation tool).

NameTypeReqDescription
jsonldbooleanIf true, request JSON-LD shape (Accept: application/ld+json) with embedded HMAC-SHA256 signed receipt. Default false returns raw RSL Standard JSON shape.
publisher_idstringyesUUID of the publisher whose RSL manifest to fetch. Publisher must be verified.

No output schema declared.

No examples provided.

verify_license ~79

Verify the authenticity of an Opedd license key. Returns license details including: article title, publisher, license type, issue date, amount paid, buyer info, and blockchain proof status. Use this to confirm a license is valid before using licensed content.

NameTypeReqDescription
license_keystringyesThe license key to verify (format: OP-XXXX-XXXX)

No output schema declared.

No examples provided.