{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-06T17:20:22.587Z","url":"https://verifymcp.io/servers/julesnsenda-behalf/behalf","markdownUrl":"https://verifymcp.io/servers/julesnsenda-behalf/behalf.md","server":{"slug":"julesnsenda-behalf","name":"Behalf (PXP v0)","registryName":"io.github.JulesNsenda/behalf","description":"Negotiate for your human under PXP: tagged claims, escalation, decision brief, hash-chained ledger","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"behalf","type":"remote","identifier":"https://behalf.dropkit.sh/mcp","withdrawn":false,"url":"https://verifymcp.io/servers/julesnsenda-behalf/behalf","version":"0.2.0","transport":null,"scoredAt":"2026-11-06T03:21:38.234Z"},"score":{"total":74,"tier":"medium","status":"scored","weekDelta":3,"history":[{"date":"2026-11-06","total":74},{"date":"2026-11-05","total":74},{"date":"2026-11-04","total":73},{"date":"2026-11-03","total":73},{"date":"2026-11-02","total":73},{"date":"2026-11-01","total":72},{"date":"2026-10-31","total":72},{"date":"2026-10-30","total":71},{"date":"2026-10-29","total":71},{"date":"2026-10-28","total":70},{"date":"2026-10-27","total":70},{"date":"2026-10-26","total":69},{"date":"2026-10-25","total":69},{"date":"2026-10-24","total":68},{"date":"2026-10-23","total":68},{"date":"2026-10-22","total":67},{"date":"2026-10-21","total":67},{"date":"2026-10-20","total":66},{"date":"2026-10-19","total":66},{"date":"2026-10-18","total":66},{"date":"2026-10-17","total":65},{"date":"2026-10-16","total":65},{"date":"2026-10-15","total":64},{"date":"2026-10-14","total":64},{"date":"2026-10-13","total":63},{"date":"2026-10-12","total":63},{"date":"2026-10-10","total":62},{"date":"2026-10-08","total":61}]},"categories":[{"name":"Endpoint Security","score":57,"verdict":"fail","reasons":["The endpoint's TLS certificate is valid, in date, and uses a strong key.","Authorisation not fully verified: no authorisation is required to call this server, and 1 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.","HTTPS is enforced; there's no plaintext access path.","HSTS check failed: the Strict-Transport-Security header is absent.","DNSSEC check failed: this domain isn't protected by DNSSEC."],"codes":[{"code":"tls.valid","args":{}},{"code":"auth.none_undeclared","args":{"undeclared_tools":"1"}},{"code":"https.enforced","args":{}},{"code":"headers.hsts_absent","args":{}},{"code":"dnssec.absent","args":{}}]},{"name":"Transport & Reachability","score":100,"verdict":"pass","reasons":["Verified streamable-http transport via a live MCP handshake."],"codes":[{"code":"transport.verified","args":{"transport":"streamable-http"}}]},{"name":"Schema Quality & AI Usability","score":67,"verdict":"fail","reasons":["AI-judged instruction clarity (excellent).","Context-footprint check failed: tool/resource definitions use about 1528 tokens (~191/item across 8 items; 8 tools + 0 resources), over budget; trim descriptions and params.","Usage-examples check failed: none of the tools include examples."],"codes":[{"code":"schema.ai_quality","args":{"band":"excellent"}},{"code":"schema.footprint_heavy","args":{"avg":"191","items":"8","tools":"8","tokens":"1528","resources":"0"}},{"code":"schema.examples_absent","args":{}}]},{"name":"Stability & Change Management","score":100,"verdict":"pass","reasons":["No destabilizing schema changes in the last 30 days."],"codes":[{"code":"stability.stable","args":{}}]},{"name":"Tool Coverage","score":90,"verdict":"partial","reasons":["100% of tools have a non-trivial description (not blank, and not just the tool's name).","70% of tool parameters carry a description."],"codes":[{"code":"toolquality.descriptions","args":{"pct":"100"}},{"code":"toolquality.param_docs","args":{"pct":"70"}}]},{"name":"Tool Safety","score":100,"verdict":"pass","reasons":["No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.","All 1 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.","An AI judge read all 9 captured unit(s) of tool text and found none that tries to manipulate the model reading it."],"codes":[{"code":"toolsafety.injection_clean","args":{}},{"code":"toolsafety.destructive_declared","args":{"pct":"100","annotated":"1","destructive":"1"}},{"code":"toolsafety.manipulation_clean","args":{"units":"9","judged":"9"}}]},{"name":"Capabilities","score":60,"verdict":"fail","reasons":["Spec-recency check failed: implements MCP spec 2025-06-18; the latest is 2026-07-28."],"codes":[{"code":"protocol.outdated","args":{"latest":"2026-07-28","version":"2025-06-18"}}]}],"inconclusive":["Authorisation not fully verified: no authorisation is required to call this server, and 1 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe."],"malware":[],"components":[{"slug":"behalf","type":"remote","identifier":"https://behalf.dropkit.sh/mcp","withdrawn":false,"score":74,"current":true,"url":"https://verifymcp.io/servers/julesnsenda-behalf/behalf","markdownUrl":"https://verifymcp.io/servers/julesnsenda-behalf/behalf.md"}],"facts":[{"label":"Endpoint","value":"https://behalf.dropkit.sh/mcp"},{"label":"Transports","value":"streamable-http"},{"label":"Auth","value":"none"},{"label":"Version","value":"0.2.0"}],"install":{"available":true,"bundleSha256":null},"tools":[{"name":"create_room","title":"Create a Behalf room","description":"Open a new room. Your principal takes seat A, and you get a private invite link for the other person (seat B). Send the invite only to that person. Use this when your principal wants to negotiate with someone and has no room yet. This server requires sign-in: your MCP client must send your principal's agent key as an Authorization: Bearer header (not as an argument). Your principal gets a key at https://behalf.dropkit.sh/key. No passcode is needed. counterpart_proxy \"builtin\" also needs \"Use our AI\" access, which your principal asks for at https://behalf.dropkit.sh/start; without it, use \"external\".","inputs":[{"name":"counterpart","type":"string","required":true,"description":"The other person's name"},{"name":"counterpart_proxy","type":"string","required":false,"description":"\"external\" (default): they bring their own agent. \"builtin\": the room provides a Claude proxy for them (only if the server has it enabled)."},{"name":"passcode","type":"string","required":false,"description":"Only if the server requires one"},{"name":"topic","type":"string","required":true,"description":"What the two sides are aligning on"},{"name":"your_principal","type":"string","required":true,"description":"Your principal's name"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":235},{"name":"join_room","title":"Join a room as a proxy","description":"Take your principal's seat with their private link. Returns the room state, your principal's card (if sealed), and what to do next.","inputs":[{"name":"agent_name","type":"string","required":false,"description":"How you will be labelled in the room, e.g. \"Claude Desktop\""},{"name":"link","type":"string","required":true,"description":"Your principal's private seat link (https://.../room/ID?seat=A&t=TOKEN). Keep it secret."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":91},{"name":"seal_intent_card","title":"Seal the Intent Card","description":"Seal your principal's Intent Card. Only after they confirmed every line. Once sealed it cannot change except through escalation answers.","inputs":[{"name":"card","type":"object","required":true,"description":"Your principal's Intent Card. Every field must come from your principal, not from you."},{"name":"link","type":"string","required":true,"description":"Your principal's private seat link (https://.../room/ID?seat=A&t=TOKEN). Keep it secret."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":89},{"name":"get_room","title":"Read the room","description":"Current state from your seat: status, whose turn, transcript, claims you still need to review, unverified assumptions, and the next action.","inputs":[{"name":"link","type":"string","required":true,"description":"Your principal's private seat link (https://.../room/ID?seat=A&t=TOKEN). Keep it secret."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":68},{"name":"wait_for_turn","title":"Wait for your turn","description":"Blocks up to timeout_seconds (max 25) until it is your turn, your principal must answer a question, or the room ends. Call it again if it times out.","inputs":[{"name":"link","type":"string","required":true,"description":"Your principal's private seat link (https://.../room/ID?seat=A&t=TOKEN). Keep it secret."},{"name":"timeout_seconds","type":"number","required":false,"description":null}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":84},{"name":"send_envelope","title":"Take your turn","description":"Send one PXP envelope on your turn. The server enforces the rules: untagged or unreferenced claims become \"assumed\", agreeing while raising a conflict is refused. The enforced envelope is returned.","inputs":[{"name":"claims","type":"array","required":false,"description":null},{"name":"escalation","type":"object","required":false,"description":null},{"name":"link","type":"string","required":true,"description":"Your principal's private seat link (https://.../room/ID?seat=A&t=TOKEN). Keep it secret."},{"name":"message","type":"string","required":true,"description":"What the other side and both people will read, in short plain sentences (2-4)"},{"name":"proposal","type":"object","required":false,"description":null},{"name":"reviews","type":"array","required":false,"description":null},{"name":"status","type":"string","required":true,"description":null}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":143},{"name":"answer_escalation","title":"Relay your principal's answer","description":"When the room is paused for your principal, ask them the question verbatim and relay their exact answer. It is sealed into their card as an amendment. Never answer on their behalf.","inputs":[{"name":"answer","type":"string","required":true,"description":"Your principal's answer, in their words"},{"name":"link","type":"string","required":true,"description":"Your principal's private seat link (https://.../room/ID?seat=A&t=TOKEN). Keep it secret."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":93},{"name":"get_brief","title":"Read the decision brief","description":"The decision brief once the room has ended: agreed terms, authority per term, unverified assumptions, escalations, ledger head.","inputs":[{"name":"link","type":"string","required":false,"description":"Your principal's private seat link (https://.../room/ID?seat=A&t=TOKEN). Keep it secret."},{"name":"room_id","type":"string","required":false,"description":null}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":74}],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-06T03:21:38.000Z","track":"remote","endpoint":"https://behalf.dropkit.sh/mcp","declaredUrl":null,"truncated":false,"tls":{"outcome":"valid","label":"Valid","version":"TLS 1.3","cipherSuite":"TLS_AES_128_GCM_SHA256","chainError":null,"certificates":[{"subject":"CN=behalf.dropkit.sh","issuer":"CN=YE1,O=Let's Encrypt,C=US","notBefore":"2026-10-03T07:30:15Z","notAfter":"2027-01-01T07:30:14Z","keyType":"ECDSA","keyBits":256,"isCa":false},{"subject":"CN=YE1,O=Let's Encrypt,C=US","issuer":"CN=Root YE,O=ISRG,C=US","notBefore":"2025-09-03T00:00:00Z","notAfter":"2028-09-02T23:59:59Z","keyType":"ECDSA","keyBits":384,"isCa":true},{"subject":"CN=Root YE,O=ISRG,C=US","issuer":"CN=ISRG Root X2,O=Internet Security Research Group,C=US","notBefore":"2026-05-13T00:00:00Z","notAfter":"2032-09-02T23:59:59Z","keyType":"ECDSA","keyBits":384,"isCa":true},{"subject":"CN=ISRG Root X2,O=Internet Security Research Group,C=US","issuer":"CN=ISRG Root X1,O=Internet Security Research Group,C=US","notBefore":"2026-05-13T00:00:00Z","notAfter":"2032-09-02T23:59:59Z","keyType":"ECDSA","keyBits":384,"isCa":true}]},"dnssec":{"result":"insecure","label":"Not signed","name":"behalf.dropkit.sh.","steps":[{"zone":".","outcome":"verified","label":"Verified"},{"zone":"sh.","outcome":"verified","label":"Verified"},{"zone":"dropkit.sh.","outcome":"insecure_proven","label":"Unsigned (proven)"}]},"auth":{"outcome":"none","label":"No authorisation required","gate":null,"gateLabel":null,"status":200,"authorizationServers":[]},"httpsRedirect":{"outcome":"https_enforced","label":"HTTPS enforced","status":301},"transports":[{"transport":"streamable-http","outcome":"verified","label":"Verified","status":200,"followed":false}],"provenance":null,"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[],"vulnerabilitiesTotal":null,"dependencies":null},"mismatches":[],"changelog":{"trackingSince":"2026-10-08","recent":[{"id":"chg_01a1aee0-4ed3-7b0c-9427-1354fad77852","kind":"score.rubric_changed","summary":"We updated how we score, so this day's move reflects our rubric, not a change to the server","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-06","url":"https://verifymcp.io/servers/julesnsenda-behalf/behalf#chg-chg_01a1aee0-4ed3-7b0c-9427-1354fad77852"},{"id":"chg_01a1a9bd-467f-7b9d-bb96-e2d6cf970e8d","kind":"score.total_changed","summary":"Trust score (73 → 74)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/julesnsenda-behalf/behalf#chg-chg_01a1a9bd-467f-7b9d-bb96-e2d6cf970e8d"},{"id":"chg_01a19a49-a06a-71bf-a414-9df07c42b77a","kind":"score.total_changed","summary":"Trust score (72 → 73)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/julesnsenda-behalf/behalf#chg-chg_01a19a49-a06a-71bf-a414-9df07c42b77a"},{"id":"chg_01a18ffc-9a62-78d9-b060-5a5dc009dec3","kind":"score.total_changed","summary":"Trust score (71 → 72)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-31","url":"https://verifymcp.io/servers/julesnsenda-behalf/behalf#chg-chg_01a18ffc-9a62-78d9-b060-5a5dc009dec3"},{"id":"chg_01a185b1-23cc-7e3c-a328-031f8d4c2e80","kind":"score.total_changed","summary":"Trust score (70 → 71)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-29","url":"https://verifymcp.io/servers/julesnsenda-behalf/behalf#chg-chg_01a185b1-23cc-7e3c-a328-031f8d4c2e80"},{"id":"chg_01a17b61-bafa-7cd4-a226-7eb02362e162","kind":"score.total_changed","summary":"Trust score (69 → 70)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-27","url":"https://verifymcp.io/servers/julesnsenda-behalf/behalf#chg-chg_01a17b61-bafa-7cd4-a226-7eb02362e162"},{"id":"chg_01a17114-1ba7-79ac-aa74-6732d8fc95db","kind":"score.total_changed","summary":"Trust score (68 → 69)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-25","url":"https://verifymcp.io/servers/julesnsenda-behalf/behalf#chg-chg_01a17114-1ba7-79ac-aa74-6732d8fc95db"},{"id":"chg_01a166c6-5618-7f01-b44b-5a42d1014a0b","kind":"score.total_changed","summary":"Trust score (67 → 68)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-23","url":"https://verifymcp.io/servers/julesnsenda-behalf/behalf#chg-chg_01a166c6-5618-7f01-b44b-5a42d1014a0b"},{"id":"chg_01a15c79-1e6e-75ee-9c44-432fb1d34db4","kind":"score.total_changed","summary":"Trust score (66 → 67)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-21","url":"https://verifymcp.io/servers/julesnsenda-behalf/behalf#chg-chg_01a15c79-1e6e-75ee-9c44-432fb1d34db4"},{"id":"chg_01a14d07-bb77-708b-b231-b2268521e0b2","kind":"score.total_changed","summary":"Trust score (65 → 66)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-18","url":"https://verifymcp.io/servers/julesnsenda-behalf/behalf#chg-chg_01a14d07-bb77-708b-b231-b2268521e0b2"},{"id":"chg_01a142bf-6451-7983-8ac5-c6dad7a2b26c","kind":"score.total_changed","summary":"Trust score (64 → 65)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-16","url":"https://verifymcp.io/servers/julesnsenda-behalf/behalf#chg-chg_01a142bf-6451-7983-8ac5-c6dad7a2b26c"},{"id":"chg_01a13872-dac8-7e7e-bf33-9b125b4fb098","kind":"score.total_changed","summary":"Trust score (63 → 64)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-14","url":"https://verifymcp.io/servers/julesnsenda-behalf/behalf#chg-chg_01a13872-dac8-7e7e-bf33-9b125b4fb098"},{"id":"chg_01a12dc0-4da8-7579-b9f7-c681ebe288b7","kind":"score.total_changed","summary":"Trust score (62 → 63)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-12","url":"https://verifymcp.io/servers/julesnsenda-behalf/behalf#chg-chg_01a12dc0-4da8-7579-b9f7-c681ebe288b7"},{"id":"chg_01a1262b-7cb1-7bdf-9484-f390c9129852","kind":"tool.description_changed","summary":"Tool “create_room” rewrote its description, which is the text the model reads","materiality":"security","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-10","url":"https://verifymcp.io/servers/julesnsenda-behalf/behalf#chg-chg_01a1262b-7cb1-7bdf-9484-f390c9129852"},{"id":"chg_01a1262b-7cb2-7d54-aca0-e78026963996","kind":"server.version_changed","summary":"Server version (0.2.0 → 0.3.0)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-10","url":"https://verifymcp.io/servers/julesnsenda-behalf/behalf#chg-chg_01a1262b-7cb2-7d54-aca0-e78026963996"},{"id":"chg_01a1262b-7cb3-77b5-be56-a0f6f4c89612","kind":"server.instructions_changed","summary":"The server rewrote its instructions, which are the text every model session reads","materiality":"security","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-10","url":"https://verifymcp.io/servers/julesnsenda-behalf/behalf#chg-chg_01a1262b-7cb3-77b5-be56-a0f6f4c89612"},{"id":"chg_01a1262b-7cb4-75a0-b2b8-fe39db69a766","kind":"score.total_changed","summary":"Trust score (61 → 62)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-10","url":"https://verifymcp.io/servers/julesnsenda-behalf/behalf#chg-chg_01a1262b-7cb4-75a0-b2b8-fe39db69a766"},{"id":"chg_01a11908-f1d9-7259-bc23-c86e578f45ae","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-08","url":"https://verifymcp.io/servers/julesnsenda-behalf/behalf#chg-chg_01a11908-f1d9-7259-bc23-c86e578f45ae"}],"truncated":false,"feedUrl":"https://verifymcp.io/servers/julesnsenda-behalf/behalf/changelog.json"},"links":{"html":"https://verifymcp.io/servers/julesnsenda-behalf/behalf","markdown":"https://verifymcp.io/servers/julesnsenda-behalf/behalf.md","changelogJson":"https://verifymcp.io/servers/julesnsenda-behalf/behalf/changelog.json","changelogRss":"https://verifymcp.io/servers/julesnsenda-behalf/behalf.xml","external":[{"label":"Remote endpoint","href":"https://behalf.dropkit.sh/mcp"},{"label":"Repository","href":"https://github.com/JulesNsenda/behalf"},{"label":"Website","href":"https://behalf.dropkit.sh/"}]}}