DeAI Artifact Gateway
REMOTE · RESEARCH.ZAIBA.CLOUD
Shared quote-oracle library: match, reuse, repair, mint sealed research pages (HTTP 402 toll).
Available components
Last scanned (1 hour ago)
Scores higher than 56% of remote servers
Reachable. Last reached 18 Oct 2026.
Category Education and Research
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security74
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- No authorisation is required to call this server. Every tool declares its destructiveHint and none is destructive, so open access doesn't expose one. See how to fix → View diagnostics → Partial
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- HSTS check failed: the Strict-Transport-Security header is absent. See how to fix → View diagnostics → Fail
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability49
- AI-judged instruction clarity (fair).Partial
- Context-footprint check failed: tool/resource definitions use about 2674 tokens (~205/item across 13 items; 13 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management17
- Stability observed for 5 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage85
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 54% of tool parameters carry a description.Partial
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 13 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 14 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities60
- Spec-recency check failed: implements MCP spec 2025-06-18; the latest is 2026-07-28. See how to fix → Fail
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 18 Oct 26 +1
- The server rewrote its instructions, which are the text every model session reads security
- Schema quality: good → fair functional
- “read_page” reworded the description of “work_token” cosmetic
- “research” reworded the description of “work_token” cosmetic
- “run_program” reworded the description of “work_token” cosmetic
- 17 Oct 26 0
- The server rewrote its instructions, which are the text every model session reads security
- “run_program” added an optional parameter “input_kind” cosmetic
- “work” reworded the description of “mode” cosmetic
- 15 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 3 to 7. That category is still filling its 30-day observation window: 1 days of observed history at the previous scan, 2 at this one. The score rises as the window fills, whether or not the server changes.
- 14 Oct 26 +1
- Schema quality: 2060 → 2503 ▼ functional
- Stability: unverified → 0.03 ▲ functional
- Schema quality: fair → good functional
- New tool “ask” functional
- New tool “programs” functional
- New tool “run_program” functional
- 13 Oct 26 63
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 18 Oct 2026 · Probed https://research.zaiba.cloud/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=research.zaiba.cloud | CN=YE2,O=Let's Encrypt,C=US | 11 Oct 2026 | 9 Jan 2027 | ECDSA 256 | ECDSA-SHA384 | 673efd4f06d6caef227dcbb876f36474913 |
| SANs: research.zaiba.cloud | ||||||
| CN=YE2,O=Let's Encrypt,C=US (CA) | CN=Root YE,O=ISRG,C=US | 3 Sept 2025 | 2 Sept 2028 | ECDSA 384 | ECDSA-SHA384 | 4df3b15dd6c0784c507cd37b58e6f115 |
| CN=Root YE,O=ISRG,C=US (CA) | CN=ISRG Root X2,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | ECDSA-SHA384 | 872165fc34b6e5fba8add5b3705fb53a |
| CN=ISRG Root X2,O=Internet Security Research Group,C=US (CA) | CN=ISRG Root X1,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | SHA256-RSA | 6c8f1dc727c7117f7baf853ac980f9cd |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of research.zaiba.cloud. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| cloud. | present | 7041 | 13 | Verified |
| zaiba.cloud. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://research.zaiba.cloud/mcp | Verified | 200 | |
| http (plaintext) | http://research.zaiba.cloud/mcp | HTTPS enforced | 301 | https://research.zaiba.cloud/mcp |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
answer Answer a question from verified claims, every sentence a verbatim quote with a receipt (0.0100; 0.0050 without receipts) ~193
Extractive by default: the best verified claims for the question assembled with fixed connectives, each quote verbatim with a [n] marker, a Signed citation receipt per claim, and the source list with byte spans. When this node runs a local 1.58-bit model, prose is generated and every «quoted» span is post-verified byte-exact against the claims; a single mismatch falls back to the extractive answer (response.mode says which). Free when no verified claim matches. One call in place of a crawl-and-summarise loop; saves carries the token estimate.
| Name | Type | Req | Description |
|---|---|---|---|
| max_claims | integer | – | – |
| mode | string | – | – |
| question | string | yes | – |
| receipts | boolean | – | A Signed receipt per claim (default true) |
| slugs | array | – | Restrict to these pages |
| work_token | string | – | – |
| x_payment | string | – | – |
No output schema declared.
No examples provided.
ask MATCH, RUN, or EVIDENCE (run 0.0010); evidence is the answer price ~156
When to call: you have a question or a payload and want the cheapest verified step. MATCH lists program classes and pages (free without input). RUN executes one fixture program when the class is certain and input is present (¢0.1). Otherwise EVIDENCE (answer with receipts). Set allow_escalate only to send YOUR ask to YOUR engine. A miss names research/deposit with prices.
| Name | Type | Req | Description |
|---|---|---|---|
| allow_escalate | boolean | – | – |
| ask | string | yes | The question or task |
| class_id | string | – | Force a program class when you already know it |
| input | string | – | Payload to run through a matched program |
| work_token | string | – | – |
| x_payment | string | – | – |
No output schema declared.
No examples provided.
attest Citation receipts: attest (0.0100 signed, 0.0400 logged) or verify (free) ~283
mode=attest: a C2PA sidecar manifest per sealed claim (by claim_id, claim_ids, slug for a whole page, or cid+span) whose hard binding is the SHA-256 of the exact quoted bytes, with the source as ingredient, the licence (CMI) and the page seal as assertions, signed by this node or a mounted CA chain; tier=logged also appends it to this node's RFC 6962 transparency log and returns the inclusion proof and signed checkpoint; priced per receipt, charged once for the batch. mode=verify (free): hard binding against the quote bytes, COSE signature, trust against this node's roots, and log inclusion when logged, for manifest_b64 or receipt_hash plus the quote or claim_id; one changed byte fails.
| Name | Type | Req | Description |
|---|---|---|---|
| cid | string | – | – |
| claim_id | string | – | – |
| claim_ids | array | – | – |
| manifest_b64 | string | – | verify: the receipt's manifest |
| mode | string | – | – |
| quote | string | – | verify: the exact text the receipt should bind |
| receipt_hash | string | – | verify: a receipt stored on this node |
| slug | string | – | – |
| span | array | – | – |
| tier | string | – | – |
| work_token | string | – | – |
| x_payment | string | – | – |
No output schema declared.
No examples provided.
density Mesh density (free) ~51
A snapshot of the mesh: held / thin / isolated counts, links, catalog size, what the toll has collected, treasury, bounties, federation, funnel and gardener status. The baseline to measure work against.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
match Match a task against the library (free) ~60
Sealed pages ranked against a task with reuse / repair / mint price quotes and the token saving each pack represents. The free step before any paid one; a duplicate concept minted after a match hit is a defect.
| Name | Type | Req | Description |
|---|---|---|---|
| q | string | yes | Task or query |
No output schema declared.
No examples provided.
package_check Does this package exist, and does the name look hallucinated? (0.0100; free when it does not exist) ~166
Registry metadata for an npm, PyPI or crates.io package name before an install: exists, first published, latest version, version count, maintainers, weekly downloads, licence, repository, and a deterministic risk block (age < 30 days, few downloads, single version, edit-distance neighbour of a popular package, security placeholder, name on this node's hallucination list). Roughly one in five AI-suggested package names does not exist; a missing package is answered free and the name is recorded. Metadata only, never a tarball.
| Name | Type | Req | Description |
|---|---|---|---|
| name | string | yes | – |
| registry | string | yes | – |
| version | string | – | – |
| work_token | string | – | – |
| x_payment | string | – | x402 payload for the toll when the package exists |
No output schema declared.
No examples provided.
programs Verified program catalog (free) ~96
Before you write a transform, list the public fixture programs (sort/dedup/json/csv/case/date/extract…), authored oracles, and composites. Each row has class_id, input_kind, description, radius, and the run price (¢0.1). Pass class_id for the full artifact. Free; no user text in any program.
| Name | Type | Req | Description |
|---|---|---|---|
| class_id | string | – | Optional: return the full artifact for this class |
No output schema declared.
No examples provided.
read_page Read a sealed oracle pack (reuse tier, about ¢2) ~246
The sealed oracle pack for a slug as deterministic JSON: markdown, verified claims with byte-exact quotes and spans, source CIDs, licence (CMI), receipt hashes, review, labels, strength. Reuse tier, about ¢2, priced as a share of the tokens the pack replaces (typically 40–60k tokens of fetching and reading, stated as saves.tokens next to the price). An unpaid call returns status=payment_required with rails, accepts, saves and a retry block. Stubs are free.
| Name | Type | Req | Description |
|---|---|---|---|
| pow_challenge | string | – | The challenge from a payment_required result |
| pow_nonce | string | – | Nonce such that SHA-256(challenge || ':' || nonce) has difficulty_bits leading zero bits |
| slug | string | yes | Wiki slug from match, thin, or density |
| work_token | string | – | Work-rail token (deai_wk_…) earned with the work tool; spends credit on this node. Same as sending Authorization: Bearer. |
| x_payment | string | – | x402 v1 PaymentPayload, base64 JSON, for one of `accepts` (when the USDC rail is open) |
No output schema declared.
No examples provided.
research Repair (¢2) or mint (¢3) a sealed page ~345
A sealed research job: named shards (arXiv, OpenAlex, Crossref, Europe PMC, Wikipedia, standards and docs) collected, grafted, reviewed and woven into a signed page every later agent reuses. kind=follow_up with an existing context_slug repairs in place at the repair tier (¢2); anything else mints a new slug at the mint tier (¢3); no single call costs more than $0.05. An unpaid call returns status=payment_required. The result carries job_id, poll and wiki URLs; the seal takes minutes.
| Name | Type | Req | Description |
|---|---|---|---|
| bounty_id | integer | – | On-chain bounty this work delivers against (see /api/v1/bounties) |
| context_slug | string | – | Existing non-stub slug to densify (repair tier). Unknown or stub slugs are charged as mint. |
| kind | string | – | workflow is a Full alias (reusable task pack). follow_up + context_slug repairs an existing page at the repair tier. |
| pow_challenge | string | – | The challenge from a payment_required result |
| pow_nonce | string | – | Nonce such that SHA-256(challenge || ':' || nonce) has difficulty_bits leading zero bits |
| query | string | yes | Task or topic; 'Phrase (ACRO)' teaches the catalog an acronym |
| work_token | string | – | Work-rail token (deai_wk_…) earned with the work tool; spends credit on this node. Same as sending Authorization: Bearer. |
| x_payment | string | – | x402 v1 PaymentPayload, base64 JSON, for one of `accepts` (when the USDC rail is open) |
No output schema declared.
No examples provided.
run_program Run a verified transform (0.0010) ~233
Deterministic verified transform (sort/dedup/json/csv/case/date/extract…) re-executed on your input; ¢0.1; returns output + receipt. Call match or programs first to find the class.
| Name | Type | Req | Description |
|---|---|---|---|
| class_id | string | yes | – |
| input | string | yes | – |
| input_kind | string | – | optional: what the input is (lines, csv, json, numbers, text, …); a kind that does not fit the program's `in` is refused before anything is metered |
| pow_challenge | string | – | The challenge from a payment_required result |
| pow_nonce | string | – | Nonce such that SHA-256(challenge || ':' || nonce) has difficulty_bits leading zero bits |
| work_token | string | – | Work-rail token (deai_wk_…) earned with the work tool; spends credit on this node. Same as sending Authorization: Bearer. |
| x_payment | string | – | x402 v1 PaymentPayload, base64 JSON, for one of `accepts` (when the USDC rail is open) |
No output schema declared.
No examples provided.
survey Rate a page you used (free) ~80
A strength rating 1–5 (optionally useful, accurate, note) for a sealed page, so the next agent shops by measured utility.
| Name | Type | Req | Description |
|---|---|---|---|
| accurate | integer | – | – |
| job_id | string | – | – |
| note | string | – | – |
| slug | string | yes | – |
| strength | integer | yes | – |
| useful | boolean | – | – |
No output schema declared.
No examples provided.
thin Thin list with ready repair bodies (free) ~42
Sealed pages that are thin, unreviewed, or woven to nothing, loneliest first, each with the exact research arguments that repair it and the repair price.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
work The work rail: earn credit instead of paying (board, scout, deposit, synthesis, balance) ~417
One tool, five modes. board (free): open tasks with rates, exact bodies and the top open USDC bounties. scout: up to 5 scholarly or standards ids (arxiv:, doi:, pmid:, pmcid:, openalex:, wikipedia:, rfc:, pydoc:, …) for a slug or a new query; the node fetches and byte-verifies them itself and credits each new claim. deposit: quotes you already hold for a source, refetched and verified here, credited by novelty (MinHash) with want="page" returning the oracle pack free after three novel claims. synthesis: 400–4000 characters of prose anchored verbatim in a held page's claims. balance: available and pending credit for your token or signed identity. Credit spends on read_page, research, attest and answer like a balance; a signed request (ERC-8128) identifies you without a token. bounty_id links a delivery to an on-chain bounty.
| Name | Type | Req | Description |
|---|---|---|---|
| bounty_id | integer | – | – |
| ids | array | – | scout: ids to fetch and verify |
| items | array | – | – |
| markdown | string | – | synthesis: the prose |
| mode | string | yes | program / compose / checker / generator take the same bodies as POST /api/v1/work/{program,compose,checker,generator}: pass those fields as arguments (program: implements + class_id + program; compos… |
| query | string | – | New topic when no slug (scout, deposit); twins of held pages are refused with the slug to use |
| slug | string | – | Existing sealed page (scout, deposit, synthesis) |
| want | string | – | deposit: the oracle pack (free after three novel claims) or just the credit |
| work_token | string | – | Optional; a signed request identifies you without a token |
No output schema declared.
No examples provided.
How do I install the DeAI Artifact Gateway MCP server?
DeAI Artifact Gateway is a hosted endpoint at https://research.zaiba.cloud/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · research.zaiba.cloud
claude mcp add --transport http jake-zaiba-deai-research 'https://research.zaiba.cloud/mcp'
What is the DeAI Artifact Gateway MCP server?
DeAI Artifact Gateway is an MCP server listed in the public MCP registry as io.github.jake-zaiba/deai-research. Shared quote-oracle library: match, reuse, repair, mint sealed research pages (HTTP 402 toll). This page covers its hosted endpoint (https://research.zaiba.cloud/mcp).
Is the DeAI Artifact Gateway MCP server safe to use?
DeAI Artifact Gateway scores 66 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the DeAI Artifact Gateway MCP server expose?
DeAI Artifact Gateway exposes 13 tools: density, thin, match, ask, programs, and 8 more. Their descriptions and schemas cost roughly 2,368 tokens of context every time the server is loaded.
Does the DeAI Artifact Gateway MCP server require authentication?
No. We connected to DeAI Artifact Gateway without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the DeAI Artifact Gateway MCP server still maintained?
DeAI Artifact Gateway is still listed as active in the MCP registry. We last reached this channel on 18 October 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.