# Council of AI GSPC (npm · csoai-gspc-mcp)

12 HTTP tools (8 free, 4 x402). GSPC board + Ed25519 + trust counts. Measure, never certify.

- Trust score: 78/100 (medium)
- Change this week: +8
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-09-20

## Components

- remote · `councilof.ai`: 67/100, [markdown](https://verifymcp.io/servers/csoai-org-gspc/councilof.md), [page](https://verifymcp.io/servers/csoai-org-gspc/councilof)
- npm · `csoai-gspc-mcp`: 78/100 (this document), [markdown](https://verifymcp.io/servers/csoai-org-gspc/csoai-gspc-mcp.md), [page](https://verifymcp.io/servers/csoai-org-gspc/csoai-gspc-mcp)

## Channel facts

- Registry: `npm`
- Package: `csoai-gspc-mcp`
- Version: `0.2.2`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-09-20.

- **Supply Chain Security**: 100/100
  - No malware found by supply-chain analysis.
  - No known CVEs affecting this package version or its production dependencies.
  - No install/post-install scripts declared.
  - No production dependencies, so there is no dependency health to assess.
- **Provenance & Transparency**: 71/100
  - Repository check failed: the declared repository URL returned HTTP 404.
  - Cryptographically verified build provenance (signed, bound to CSOAI-ORG/councilof-ai).
  - Clear OSI-approved license (Apache-2.0).
  - Actively maintained (last published 6 days ago).
  - Security-disclosure policy not yet verified: we couldn't inspect the source repository.
- **Schema Quality & AI Usability**: 71/100
  - AI-judged instruction clarity (excellent).
  - Context-footprint check failed: tool/resource definitions use about 2017 tokens (~168/item across 12 items; 12 tools + 0 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 45/100
  - Stability check failed: the tool surface changed between 0.2.1 and 0.2.2: 1 tool removals, 0 breaking changes, 1 additions.
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
  - Structured output schemas are declared (8% of tools); any adoption earns full credit.
- **Tool Safety**: 100/100
  - No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.
  - We read all 12 captured tool definition(s), and no name or description among them implies an irreversible operation.
  - An AI judge read all 12 captured unit(s) of tool text and found none that tries to manipulate the model reading it.
- **Capabilities**: 20/100
  - Spec-recency check failed: implements MCP spec 2024-11-05; the latest is 2026-07-28.

## Install

### How do I install the Council of AI GSPC MCP server?

Council of AI GSPC runs locally as an npm package, launched with npx -y csoai-gspc-mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

### Claude

```bash
claude mcp add csoai-org-gspc -- npx -y csoai-gspc-mcp
```

### Cursor

```json
{
  "mcpServers": {
    "csoai-org-gspc": {
      "command": "npx",
      "args": [
        "-y",
        "csoai-gspc-mcp"
      ]
    }
  }
}
```

### VS Code

```json
{
  "servers": {
    "csoai-org-gspc": {
      "command": "npx",
      "args": [
        "-y",
        "csoai-gspc-mcp"
      ]
    }
  }
}
```

### Codex

```bash
codex mcp add csoai-org-gspc -- npx -y csoai-gspc-mcp
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "csoai-org-gspc": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "csoai-gspc-mcp"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add csoai-org-gspc --command npx --arg -y --arg csoai-gspc-mcp
```

### Hermes

```yaml
mcp_servers:
  csoai-org-gspc:
    command: "npx"
    args: ["-y", "csoai-gspc-mcp"]
```

### Netclaw

```json
{
  "McpServers": {
    "csoai-org-gspc": {
      "Transport": "stdio",
      "Command": "npx",
      "Arguments": [
        "-y",
        "csoai-gspc-mcp"
      ]
    }
  }
}
```

### Vellum

```bash
assistant mcp add csoai-org-gspc -t stdio -c npx -a -y csoai-gspc-mcp
```

### Other

```json
{
  "mcpServers": {
    "csoai-org-gspc": {
      "command": "npx",
      "args": [
        "-y",
        "csoai-gspc-mcp"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-09-19 (score 78, +1)

No change was recorded against any check on this day. Stability & Change Management went from 38 to 42.

### 2026-09-17 (score 77, +1)

- [functional regression] Security disclosure: fail → unverified

### 2026-09-16 (score 76, −5)

- [security regression] Source repository: pass → fail

### 2026-09-15 (score 81, +16)

- [security improvement] Malware scan: unverified → pass

### 2026-09-14 (score 65, −5)

- [security regression] Malware scan: pass → unverified
- [security regression] Stability: 0.30 → fail
- [security improvement] Provenance: fail → pass
- [security] The attested source repository moved: CSOAI-ORG/councilof-ai
- [functional improvement] Schema quality: 187 → 168
- [functional] First check of Tool coverage: 8
- [functional] Package version: 0.2.1 → 0.2.2

### 2026-09-12 (score 70, +4)

- [functional improvement] Stability: unverified → 0.27

### 2026-09-05 (score 66, +15)

- [security improvement] Malware scan: unverified → pass

### 2026-09-04 (score 51, −14)

- [security regression] Stability: 0.43 → unverified
- [security] First check of Provenance: fail
- [security] First check of Source repository: pass
- [security] First check of Install scripts: pass
- [security] First check of Known CVEs: pass
- [security] First check of Malware scan: unverified
- [functional regression] Schema quality: pass → fail
- [functional regression] MCP protocol: pass → fail
- [functional] First check of Maintenance: pass
- [functional] First check of Dependency health: pass
- [functional] First check of License: pass
- [functional] First check of Security disclosure: fail
- [functional] Schema quality: good → excellent

## MCP tools (12)

### `board_totals` (~116 tokens)

Live GSPC board totals from https://councilof.ai/api/gspc. Returns the slot count and the measured count as two labelled numbers WITH their kind — a slot is a declared position on the board, a measurement is a real run behind it; the two are never summed and never swapped — plus as_of dates for the board and for this fetch. We measure, never certify. If the board cannot be fetched the answer is a distinct UNREACHABLE state: no cached number is ever presented as live.

### `get_axis` (~136 tokens)

One axis row from the live GSPC board at https://councilof.ai/api/gspc: n, accuracy, interval, MEASURED or UNMEASURED status, family, and dates. An unmeasured axis is a first-class answer — a declared slot with no run behind it, published so the gap is visible — never an error and never a zero. Never a certification.

Input parameters:

- `axis` (string, required): The axis name as it appears on the board, e.g. governance, safety, jail, provenance-controls. Case-insensitive. An unknown name returns the list of names the board actually carries.

### `verify_card` (~220 tokens)

Verify a signed gspc.measurement-card under the published rule (https://councilof.ai/signed/HOW-TO-VERIFY.md): recompute the id from the canonical body bytes, then check the Ed25519 signature under the PINNED key published at did:web:csoai.org#card-attestation-1. A card that carries its own key proves only that the file is self-consistent — anyone can alter a body and sign it with a key they just generated — so a signer other than the published key is reported INVALID. Three verdicts, never two: VALID, INVALID (with the reason), or UNCHECKABLE when the check could not be completed — 'could not check' is a different claim from 'forged'. Accepts the card as a JSON object, a JSON string, or a councilof.ai / csoai.org URL. Never a certification.

Input parameters:

- `card` (required): The signed card: an object, a JSON string, or a councilof.ai / csoai.org URL to one.

### `list_cards` (~159 tokens)

The published signed-card index (https://councilof.ai/signed/card_index.json): what the index declares (n_cards) and how many rows it actually carries, reported next to — never reconciled with — the count the card store endpoint (https://councilof.ai/api/cards) reports for itself. Two labelled numbers from two surfaces; if they disagree, this tool shows the disagreement rather than picking one. Optional filters return recent rows: axis, limit.

Input parameters:

- `axis` (string): Only list rows whose axis matches this name (case-insensitive).
- `limit` (integer): How many rows to include in the listing (newest first). Default 10. The two counts are always reported in full regardless of this limit.

### `get_root` (~78 tokens)

GET the permissionless public-root at https://councilof.ai/root.json. Returns merkle_root, card_count, as_of, and UNMEASURED notes. Separate from GSPC. Three states: VALID (fetched), UNREACHABLE (could not fetch), UNCHECKABLE (body unreadable). Never a certificate.

### `get_card` (~101 tokens)

GET one public-root card-v0 leaf by sha256 (64 hex) from https://councilof.ai/cards/{sha16}.json. UNMEASURED cells stay visible. Three states: VALID (fetched), INVALID (not a leaf of the live root), UNCHECKABLE (fetch failed). Not a GSPC measurement-card.

Input parameters:

- `sha256` (string, required): 64-char hex payload SHA-256 of the card-v0 leaf.

### `verify_inclusion` (~89 tokens)

Check a sha256 against the live public-root merkle via GET /api/proof?sha=. Three states only: VALID (included), INVALID (not a leaf), UNCHECKABLE (proof endpoint unreachable). Does not claim Ed25519 unless sig_ed25519 is present and checked separately. Never a grade.

Input parameters:

- `sha256` (string, required): 64-char hex digest to test for inclusion.

### `x402_trust` (~64 tokens)

GET the latest x402 catalog trust snapshot: counts of how many catalogued x402 resources open a correct 402 challenge vs how many are phantom on the wire. Counts only by doctrine — host details withheld; a 402 is NOT delivery; measurement, never certification.

Output parameters:

- `as_of` (string)
- `counts` (object)
- `headline` (string)

### `commission_card` (~233 tokens)

PAID (x402). Commission one signed card-v0 receipt (surface ras.commission) for a named subject on the frozen bank via https://councilof.ai/api/request-attestation. Re-serves every signed measurement card already on file for the subject; a payment never mints a MEASURED cell (fresh_run stays UNMEASURED until a published run exists). Without x_payment the tool returns the 402 challenge (accepts[] with asset, amount, payTo) plus a free preview of the cards already on file. Measurement, not certification — never a rank, a grade or a certificate. Verification stays free.

Input parameters:

- `axis` (string): Optional axis slug; omit for the subject-level commission.
- `subject` (string, required): Subject to commission: a model id, instrument id or card sha (1-120 chars of [A-Za-z0-9._:/@+-]).
- `x_payment` (string): The X-PAYMENT header value (base64 x402 payload) signed by your wallet against accepts[] from the previous 402. Omit to receive the challenge.

### `art50_marking_evidence` (~305 tokens)

PAID (x402 or CSOAI LTD invoice). Article 50 marking-evidence pack via https://councilof.ai/api/art50/marking-evidence: is a machine-readable mark DETECTABLE in these bytes right now (C2PA manifest store, assertion hashes, hard binding, claim signature; IPTC digitalSourceType), beside the verbatim Art 50(2) excerpt hash and the Art 99(4) ceiling. Watermarks are UNCHECKABLE where no public detector exists and the pack says so. Point-in-time detection — never a conformity opinion, never a compliance word of any kind. preview=true is free and returns the same measurement unsigned. Without x_payment the tool returns the 402 challenge. If the route is not deployed on this origin the tool says NOT_DEPLOYED rather than inventing a result.

Input parameters:

- `bytes_b64` (string): Alternatively the output bytes, base64 (≤20 MiB decoded).
- `manifest_b64` (string): Alternatively a detached C2PA manifest store, base64 (manifest-only mode).
- `preview` (boolean): true = free unsigned measurement (no card sha, no signature).
- `url` (string): Public http(s) URL of the generative output to measure (≤20 MiB).
- `x_payment` (string): The X-PAYMENT header value signed against accepts[] from the previous 402. Omit to receive the challenge.

### `rwa_evidence` (~237 tokens)

PAID (x402). Per-request signed evidence card of ONE XRPL issued asset's deterministic on-ledger state via https://councilof.ai/api/rwa/evidence: AccountRoot lsf* flags, Domain, the two-way xrp-ledger.toml check (PASS / FAIL / UNCHECKABLE — unreachable is never FAIL), gateway_balances obligation, holders as the free reader has them, every raw fetch sha256'd. preview=true is free (unsigned state). Historical state at fetched_at — not a rating, not a guarantee, not a conformity mark; /api/xrpl and /root.json stay free. Without x_payment the tool returns the 402 challenge. If the route is not deployed on this origin the tool says NOT_DEPLOYED.

Input parameters:

- `asset` (string, required): Symbol (as listed by https://councilof.ai/api/xrpl) or issuer r-address.
- `preview` (boolean): true = free unsigned state.
- `x_payment` (string): The X-PAYMENT header value signed against accepts[] from the previous 402. Omit to receive the challenge.

### `receipts_batch` (~279 tokens)

PAID (x402 or CSOAI LTD invoice). A historical batch of the estate's measurement receipts via https://councilof.ai/api/receipts/batch: every signed card-v0 leaf whose as_of falls in [from,to] (≤200), each with its Merkle inclusion path and the public root(s) that carried it, plus the root index for the window and one signed manifest card citing the batch sha256. preview=true is free and returns count, span, root count and the sha256 of the exact bytes the paid call returns. Recent leaves are free at /root.json, /cards/ and /api/proof?sha= — the batch sells assembly across history, never a conclusion. No settlement-receipt stream exists (/api/receipts/latest is UNPUBLISHED) and this tool never claims one. Without x_payment the tool returns the 402 challenge.

Input parameters:

- `from` (string, required): Window start, ISO-8601. Required.
- `preview` (boolean): true = free: count, span, roots and batch sha256 without the leaves.
- `to` (string): Window end, ISO-8601. Defaults to now.
- `x_payment` (string): The X-PAYMENT header value signed against accepts[] from the previous 402. Omit to receive the challenge.

## Diagnostics

Captured diagnostic sections: Provenance, Dependencies. The full working is on the page: https://verifymcp.io/servers/csoai-org-gspc/csoai-gspc-mcp#diagnostics

## Score history

- 2026-09-20: 78
- 2026-09-19: 78
- 2026-09-18: 77
- 2026-09-17: 77
- 2026-09-16: 76
- 2026-09-15: 81
- 2026-09-14: 65
- 2026-09-13: 70
- 2026-09-12: 70
- 2026-09-11: 66
- 2026-09-10: 66
- 2026-09-09: 66
- 2026-09-08: 66
- 2026-09-07: 66
- 2026-09-06: 66
- 2026-09-05: 66
- 2026-09-04: 51
- 2026-08-29: 65
- 2026-08-28: 64
- 2026-08-27: 64
- 2026-08-26: 63
- 2026-08-25: 62
- 2026-08-24: 61
- 2026-08-19: 59
- 2026-08-18: 58
- 2026-08-17: 58
- 2026-08-16: 57

## Common questions

### What is the Council of AI GSPC MCP server?

Council of AI GSPC is an MCP server listed in the public MCP registry as io.github.CSOAI-ORG/gspc. 12 HTTP tools (8 free, 4 x402). GSPC board + Ed25519 + trust counts. Measure, never certify. This page covers its npm package (csoai-gspc-mcp).

### Is the Council of AI GSPC MCP server safe to use?

Council of AI GSPC scores 78 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 20 September 2026. It declares no install or post-install scripts. Its build provenance is signed and verified. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

### What tools does the Council of AI GSPC MCP server expose?

Council of AI GSPC exposes 12 tools: board_totals, get_axis, verify_card, list_cards, get_root, and 7 more. Their descriptions and schemas cost roughly 2,017 tokens of context every time the server is loaded.

### Is the Council of AI GSPC MCP server still maintained?

Council of AI GSPC is still listed as active in the MCP registry. We last reached this channel on 20 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

### What licence is the Council of AI GSPC MCP server under?

Council of AI GSPC declares the Apache-2.0 licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.

## Links

- npm package: https://www.npmjs.com/package/csoai-gspc-mcp
- Socket report: https://socket.dev/npm/package/csoai-gspc-mcp
- Website: https://councilof.ai/
- Changelog RSS feed: https://verifymcp.io/servers/csoai-org-gspc/csoai-gspc-mcp.xml
- Changelog JSON feed: https://verifymcp.io/servers/csoai-org-gspc/csoai-gspc-mcp.json
- HTML version of this page: https://verifymcp.io/servers/csoai-org-gspc/csoai-gspc-mcp