# Council of AI GSPC (remote · councilof.ai)

12 HTTP tools (8 free, 4 x402). GSPC board + Ed25519 + trust counts. Measure, never certify.

- Trust score: 67/100 (medium)
- Change this week: +3
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-09-21

## Components

- remote · `councilof.ai`: 67/100 (this document), [markdown](https://verifymcp.io/servers/csoai-org-gspc/councilof.md), [page](https://verifymcp.io/servers/csoai-org-gspc/councilof)
- npm · `csoai-gspc-mcp`: 79/100, [markdown](https://verifymcp.io/servers/csoai-org-gspc/csoai-gspc-mcp.md), [page](https://verifymcp.io/servers/csoai-org-gspc/csoai-gspc-mcp)

## Channel facts

- Endpoint: `https://councilof.ai/mcp`
- Transports: `streamable-http`
- Auth: `none`
- Version: `1.4.2`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-09-21.

- **Endpoint Security**: 57/100
  - The endpoint's TLS certificate is valid, in date, and uses a strong key.
  - Authorisation not fully verified: no authorisation is required to call this server, and 13 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.
  - HTTPS is enforced; there's no plaintext access path.
  - HSTS check failed: the Strict-Transport-Security header is absent.
  - DNSSEC check failed: this domain isn't protected by DNSSEC.
- **Transport & Reachability**: 100/100
  - Verified streamable-http transport via a live MCP handshake.
- **Schema Quality & AI Usability**: 70/100
  - AI-judged instruction clarity (excellent).
  - Context-footprint check failed: tool/resource definitions use about 2251 tokens (~173/item across 13 items; 13 tools + 0 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 27/100
  - Stability check failed: schema churn in the 23 days we've observed: 4 tool removals, 0 breaking changes, 0 auth/transport breaks, 9 additions.
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
  - Structured output schemas are declared (15% of tools); any adoption earns full credit.
- **Tool Safety**: 100/100
  - No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.
  - We read all 13 captured tool definition(s), and no name or description among them implies an irreversible operation.
  - An AI judge read all 14 captured unit(s) of tool text and found none that tries to manipulate the model reading it.
- **Capabilities**: 100/100
  - Implements a current MCP spec version (2026-07-28).

## Install

### How do I install the Council of AI GSPC MCP server?

Council of AI GSPC is a hosted endpoint at https://councilof.ai/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

### Claude

```bash
claude mcp add --transport http csoai-org-gspc 'https://councilof.ai/mcp'
```

### Cursor

```json
{
  "mcpServers": {
    "csoai-org-gspc": {
      "url": "https://councilof.ai/mcp"
    }
  }
}
```

### VS Code

```json
{
  "servers": {
    "csoai-org-gspc": {
      "type": "http",
      "url": "https://councilof.ai/mcp"
    }
  }
}
```

### Codex

```toml
[mcp_servers.csoai-org-gspc]
url = "https://councilof.ai/mcp"
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "csoai-org-gspc": {
      "type": "remote",
      "url": "https://councilof.ai/mcp",
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add csoai-org-gspc --url 'https://councilof.ai/mcp' --transport streamable-http
```

### Hermes

```yaml
mcp_servers:
  csoai-org-gspc:
    url: "https://councilof.ai/mcp"
```

### Netclaw

```json
{
  "McpServers": {
    "csoai-org-gspc": {
      "Transport": "http",
      "Url": "https://councilof.ai/mcp"
    }
  }
}
```

### Vellum

```bash
assistant mcp add csoai-org-gspc -t streamable-http -u 'https://councilof.ai/mcp'
```

### Other

```json
{
  "mcpServers": {
    "csoai-org-gspc": {
      "type": "http",
      "url": "https://councilof.ai/mcp"
    }
  }
}
```

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-09-20 (score 67, +1)

No change was recorded against any check on this day. Stability & Change Management went from 20 to 23.

### 2026-09-18 (score 66, +1)

No change was recorded against any check on this day. Stability & Change Management went from 13 to 17.

### 2026-09-17 (score 65, 0)

- [security] The server rewrote its instructions, which are the text every model session reads

### 2026-09-16 (score 65, +1)

- [functional improvement] Tool coverage: 8% → 15%
- [functional] New tool “mcp_trust”

### 2026-09-14 (score 64, +1)

No change was recorded against any check on this day. Stability & Change Management went from 0 to 3.

### 2026-09-10 (score 63, +3)

- [security] The server rewrote its instructions, which are the text every model session reads
- [functional improvement] MCP protocol: fail → pass
- [functional] MCP protocol version: 2024-11-05 → 2026-07-28
- [functional] Server version: 1.4.0 → 1.4.2

### 2026-09-08 (score 60, +1)

- [security] The server rewrote its instructions, which are the text every model session reads
- [functional] First check of Tool coverage: 8
- [functional] Server version: 1.3.0 → 1.4.0
- [functional] New tool “x402_trust”

### 2026-09-05 (score 59, −1)

- [security regression] Tool “witness_hash” was removed
- [security] The server rewrote its instructions, which are the text every model session reads
- [functional] Server version: 0.1.0 → 1.3.0

## MCP tools (13)

### `board_totals` (~116 tokens)

Live GSPC board totals from https://councilof.ai/api/gspc. Returns the slot count and the measured count as two labelled numbers WITH their kind — a slot is a declared position on the board, a measurement is a real run behind it; the two are never summed and never swapped — plus as_of dates for the board and for this fetch. We measure, never certify. If the board cannot be fetched the answer is a distinct UNREACHABLE state: no cached number is ever presented as live.

### `get_axis` (~136 tokens)

One axis row from the live GSPC board at https://councilof.ai/api/gspc: n, accuracy, interval, MEASURED or UNMEASURED status, family, and dates. An unmeasured axis is a first-class answer — a declared slot with no run behind it, published so the gap is visible — never an error and never a zero. Never a certification.

Input parameters:

- `axis` (string, required): The axis name as it appears on the board, e.g. governance, safety, jail, provenance-controls. Case-insensitive. An unknown name returns the list of names the board actually carries.

### `verify_card` (~220 tokens)

Verify a signed gspc.measurement-card under the published rule (https://councilof.ai/signed/HOW-TO-VERIFY.md): recompute the id from the canonical body bytes, then check the Ed25519 signature under the PINNED key published at did:web:csoai.org#card-attestation-1. A card that carries its own key proves only that the file is self-consistent — anyone can alter a body and sign it with a key they just generated — so a signer other than the published key is reported INVALID. Three verdicts, never two: VALID, INVALID (with the reason), or UNCHECKABLE when the check could not be completed — 'could not check' is a different claim from 'forged'. Accepts the card as a JSON object, a JSON string, or a councilof.ai / csoai.org URL. Never a certification.

Input parameters:

- `card` (required): The signed card: an object, a JSON string, or a councilof.ai / csoai.org URL to one.

### `list_cards` (~159 tokens)

The published signed-card index (https://councilof.ai/signed/card_index.json): what the index declares (n_cards) and how many rows it actually carries, reported next to — never reconciled with — the count the card store endpoint (https://councilof.ai/api/cards) reports for itself. Two labelled numbers from two surfaces; if they disagree, this tool shows the disagreement rather than picking one. Optional filters return recent rows: axis, limit.

Input parameters:

- `axis` (string): Only list rows whose axis matches this name (case-insensitive).
- `limit` (integer): How many rows to include in the listing (newest first). Default 10. The two counts are always reported in full regardless of this limit.

### `get_root` (~78 tokens)

GET the permissionless public-root at https://councilof.ai/root.json. Returns merkle_root, card_count, as_of, and UNMEASURED notes. Separate from GSPC. Three states: VALID (fetched), UNREACHABLE (could not fetch), UNCHECKABLE (body unreadable). Never a certificate.

### `get_card` (~101 tokens)

GET one public-root card-v0 leaf by sha256 (64 hex) from https://councilof.ai/cards/{sha16}.json. UNMEASURED cells stay visible. Three states: VALID (fetched), INVALID (not a leaf of the live root), UNCHECKABLE (fetch failed). Not a GSPC measurement-card.

Input parameters:

- `sha256` (string, required): 64-char hex payload SHA-256 of the card-v0 leaf.

### `verify_inclusion` (~89 tokens)

Check a sha256 against the live public-root merkle via GET /api/proof?sha=. Three states only: VALID (included), INVALID (not a leaf), UNCHECKABLE (proof endpoint unreachable). Does not claim Ed25519 unless sig_ed25519 is present and checked separately. Never a grade.

Input parameters:

- `sha256` (string, required): 64-char hex digest to test for inclusion.

### `x402_trust` (~64 tokens)

GET the latest x402 catalog trust snapshot: counts of how many catalogued x402 resources open a correct 402 challenge vs how many are phantom on the wire. Counts only by doctrine — host details withheld; a 402 is NOT delivery; measurement, never certification.

Output parameters:

- `as_of` (string)
- `counts` (object)
- `headline` (string)

### `mcp_trust` (~116 tokens)

GET the latest MCP handshake trust snapshot (https://councilof.ai/interop/mcp-trust/latest.json): counts of how many internet-facing MCP servers answer a correct initialize handshake, how many respond with an auth challenge, and how many are unreachable. Counts only by doctrine — host details withheld by design. A partial round or a cap change is disclosed in the snapshot. Measurement, never certification. Three states: VALID (fetched), UNREACHABLE (could not fetch), UNCHECKABLE (body unreadable).

Output parameters:

- `as_of` (string)
- `counts` (object)
- `enumeration` (object)
- `partial` (boolean)

### `commission_card` (~233 tokens)

PAID (x402). Commission one signed card-v0 receipt (surface ras.commission) for a named subject on the frozen bank via https://councilof.ai/api/request-attestation. Re-serves every signed measurement card already on file for the subject; a payment never mints a MEASURED cell (fresh_run stays UNMEASURED until a published run exists). Without x_payment the tool returns the 402 challenge (accepts[] with asset, amount, payTo) plus a free preview of the cards already on file. Measurement, not certification — never a rank, a grade or a certificate. Verification stays free.

Input parameters:

- `axis` (string): Optional axis slug; omit for the subject-level commission.
- `subject` (string, required): Subject to commission: a model id, instrument id or card sha (1-120 chars of [A-Za-z0-9._:/@+-]).
- `x_payment` (string): The X-PAYMENT header value (base64 x402 payload) signed by your wallet against accepts[] from the previous 402. Omit to receive the challenge.

### `art50_marking_evidence` (~305 tokens)

PAID (x402 or CSOAI LTD invoice). Article 50 marking-evidence pack via https://councilof.ai/api/art50/marking-evidence: is a machine-readable mark DETECTABLE in these bytes right now (C2PA manifest store, assertion hashes, hard binding, claim signature; IPTC digitalSourceType), beside the verbatim Art 50(2) excerpt hash and the Art 99(4) ceiling. Watermarks are UNCHECKABLE where no public detector exists and the pack says so. Point-in-time detection — never a conformity opinion, never a compliance word of any kind. preview=true is free and returns the same measurement unsigned. Without x_payment the tool returns the 402 challenge. If the route is not deployed on this origin the tool says NOT_DEPLOYED rather than inventing a result.

Input parameters:

- `bytes_b64` (string): Alternatively the output bytes, base64 (≤20 MiB decoded).
- `manifest_b64` (string): Alternatively a detached C2PA manifest store, base64 (manifest-only mode).
- `preview` (boolean): true = free unsigned measurement (no card sha, no signature).
- `url` (string): Public http(s) URL of the generative output to measure (≤20 MiB).
- `x_payment` (string): The X-PAYMENT header value signed against accepts[] from the previous 402. Omit to receive the challenge.

### `rwa_evidence` (~237 tokens)

PAID (x402). Per-request signed evidence card of ONE XRPL issued asset's deterministic on-ledger state via https://councilof.ai/api/rwa/evidence: AccountRoot lsf* flags, Domain, the two-way xrp-ledger.toml check (PASS / FAIL / UNCHECKABLE — unreachable is never FAIL), gateway_balances obligation, holders as the free reader has them, every raw fetch sha256'd. preview=true is free (unsigned state). Historical state at fetched_at — not a rating, not a guarantee, not a conformity mark; /api/xrpl and /root.json stay free. Without x_payment the tool returns the 402 challenge. If the route is not deployed on this origin the tool says NOT_DEPLOYED.

Input parameters:

- `asset` (string, required): Symbol (as listed by https://councilof.ai/api/xrpl) or issuer r-address.
- `preview` (boolean): true = free unsigned state.
- `x_payment` (string): The X-PAYMENT header value signed against accepts[] from the previous 402. Omit to receive the challenge.

### `receipts_batch` (~279 tokens)

PAID (x402 or CSOAI LTD invoice). A historical batch of the estate's measurement receipts via https://councilof.ai/api/receipts/batch: every signed card-v0 leaf whose as_of falls in [from,to] (≤200), each with its Merkle inclusion path and the public root(s) that carried it, plus the root index for the window and one signed manifest card citing the batch sha256. preview=true is free and returns count, span, root count and the sha256 of the exact bytes the paid call returns. Recent leaves are free at /root.json, /cards/ and /api/proof?sha= — the batch sells assembly across history, never a conclusion. No settlement-receipt stream exists (/api/receipts/latest is UNPUBLISHED) and this tool never claims one. Without x_payment the tool returns the 402 challenge.

Input parameters:

- `from` (string, required): Window start, ISO-8601. Required.
- `preview` (boolean): true = free: count, span, roots and batch sha256 without the leaves.
- `to` (string): Window end, ISO-8601. Defaults to now.
- `x_payment` (string): The X-PAYMENT header value signed against accepts[] from the previous 402. Omit to receive the challenge.

## Diagnostics

Captured diagnostic sections: TLS, DNSSEC, Authorisation, Transports. The full working is on the page: https://verifymcp.io/servers/csoai-org-gspc/councilof#diagnostics

## Score history

- 2026-09-21: 67
- 2026-09-20: 67
- 2026-09-19: 66
- 2026-09-18: 66
- 2026-09-17: 65
- 2026-09-16: 65
- 2026-09-15: 64
- 2026-09-14: 64
- 2026-09-13: 63
- 2026-09-12: 63
- 2026-09-11: 63
- 2026-09-10: 63
- 2026-09-09: 60
- 2026-09-08: 60
- 2026-09-07: 59
- 2026-09-06: 59
- 2026-09-05: 59
- 2026-09-04: 60
- 2026-09-03: 60
- 2026-09-02: 60
- 2026-09-01: 61
- 2026-08-31: 64
- 2026-08-30: 64
- 2026-08-29: 64

## Common questions

### What is the Council of AI GSPC MCP server?

Council of AI GSPC is an MCP server listed in the public MCP registry as io.github.CSOAI-ORG/gspc. 12 HTTP tools (8 free, 4 x402). GSPC board + Ed25519 + trust counts. Measure, never certify. This page covers its hosted endpoint (https://councilof.ai/mcp).

### Is the Council of AI GSPC MCP server safe to use?

Council of AI GSPC scores 67 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

### What tools does the Council of AI GSPC MCP server expose?

Council of AI GSPC exposes 13 tools: board_totals, get_axis, verify_card, list_cards, get_root, and 8 more. Their descriptions and schemas cost roughly 2,133 tokens of context every time the server is loaded.

### Does the Council of AI GSPC MCP server require authentication?

No. We connected to Council of AI GSPC without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.

### Is the Council of AI GSPC MCP server still maintained?

Council of AI GSPC is still listed as active in the MCP registry. We last reached this channel on 21 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

## Links

- Remote endpoint: https://councilof.ai/mcp
- Website: https://councilof.ai/
- Changelog RSS feed: https://verifymcp.io/servers/csoai-org-gspc/councilof.xml
- Changelog JSON feed: https://verifymcp.io/servers/csoai-org-gspc/councilof.json
- HTML version of this page: https://verifymcp.io/servers/csoai-org-gspc/councilof