Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, email [email protected] and we’ll put it right.

io.github.lemmaoracle/mcp

REMOTE · MCP.LEMMA.WORKERS.DEV · 2 COMPONENTS · SCANNED AUG 3

Verifiable provenance for AI agents — ZK proofs over confidential documents, no plaintext exposure.

+5 this week 67 Trust /100
Trust breakdown (6 categories)

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score →

Endpoint Security63
Transport & Reachability100
Schema Quality & AI Usability64
  • AI-judged instruction clarity (good).Pass
  • Context-footprint check failed: tool/resource definitions use about 949 tokens (~189/item across 5 items; 5 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management27
  • Stability observed for 8 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 100% of tool parameters carry a description.Pass
  • Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Install

Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.

remote · mcp.lemma.workers.dev

# add to Claude Code
claude mcp add --transport http lemmaoracle-mcp https://mcp.lemma.workers.dev/mcp
# ~/.codex/config.toml
[mcp_servers.lemmaoracle-mcp]
url = "https://mcp.lemma.workers.dev/mcp"
// opencode.json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "lemmaoracle-mcp": {
      "type": "remote",
      "url": "https://mcp.lemma.workers.dev/mcp",
      "enabled": true
    }
  }
}
# add to OpenClaw
openclaw mcp add lemmaoracle-mcp --url https://mcp.lemma.workers.dev/mcp --transport streamable-http
# ~/.hermes/config.yaml
mcp_servers:
  lemmaoracle-mcp:
    url: "https://mcp.lemma.workers.dev/mcp"
// mcp.json
{
  "mcpServers": {
    "lemmaoracle-mcp": {
      "type": "http",
      "url": "https://mcp.lemma.workers.dev/mcp"
    }
  }
}

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 3 Aug 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 23 to 27. That category is still filling its 30-day observation window: 7 days of observed history at the previous scan, 8 at this one. The score rises as the window fills, whether or not the server changes.

  • 31 Jul 26 +2
    • We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
  • 30 Jul 26 0
    • We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
  • 29 Jul 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 7 to 10. That category is still filling its 30-day observation window: 2 days of observed history at the previous scan, 3 at this one. The score rises as the window fills, whether or not the server changes.

  • 28 Jul 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 3 to 7. That category is still filling its 30-day observation window: 1 days of observed history at the previous scan, 2 at this one. The score rises as the window fills, whether or not the server changes.

  • 27 Jul 26 0
    • We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
  • 26 Jul 26 62

    First indexed and scored.

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 3 Aug 2026 · Probed https://mcp.lemma.workers.dev/mcp

TLS valid

Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .

Subject Issuer Valid from Valid until Key Signature Serial
CN=lemma.workers.dev CN=YE2,O=Let's Encrypt,C=US 2 Jul 2026 30 Sept 2026 ECDSA 256 ECDSA-SHA384 6dcd1bbc6e7362b8a0b0b07b99f19d7bf5e
SANs: *.lemma.workers.dev, lemma.workers.dev
CN=YE2,O=Let's Encrypt,C=US (CA) CN=Root YE,O=ISRG,C=US 3 Sept 2025 2 Sept 2028 ECDSA 384 ECDSA-SHA384 4df3b15dd6c0784c507cd37b58e6f115
CN=Root YE,O=ISRG,C=US (CA) CN=ISRG Root X2,O=Internet Security Research Group,C=US 13 May 2026 2 Sept 2032 ECDSA 384 ECDSA-SHA384 872165fc34b6e5fba8add5b3705fb53a
CN=ISRG Root X2,O=Internet Security Research Group,C=US (CA) CN=ISRG Root X1,O=Internet Security Research Group,C=US 13 May 2026 2 Sept 2032 ECDSA 384 SHA256-RSA 6c8f1dc727c7117f7baf853ac980f9cd
DNSSEC insecure

Validation of mcp.lemma.workers.dev. Not signed

Zone DS Keys Algorithms Outcome
. trust_anchor 20326, 38696 8, 8 Verified
dev. present 60074 8 Verified
workers.dev. absent Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation
Authentication No authorisation required

The endpoint answered without asking for a token. Anyone who knows the URL can reach it.

Result No authorisation required
HTTP status 200
Transports 2 probes
Transport URL Outcome Status Location
streamable-http https://mcp.lemma.workers.dev/mcp Verified 200
http (plaintext) http://mcp.lemma.workers.dev/mcp Inconclusive 406
MCP tools — 5 exposed · ~949 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.

Tool Tokens
lemma_get_circuit ~200

Retrieve a zero-knowledge proof circuit by its circuitId via GET /v1/circuits/{circuitId}. A circuit defines the constraints that proofs must satisfy and binds to a single schema. Returns CircuitMeta { circuitId, schema, description?, inputs?, verifier?: { type: 'onchain'|'offchain', address?, chainId? }, artifact?: { location: { type: 'ipfs'|'https', wasm, zkey } } }. Use this before lemma_submit_proof to confirm the circuit's schema, public inputs, and verifier configuration. Circuits are immutable; new variants get new circuitIds.

NameTypeReqDescription
circuitIdstringyesCircuit ID. Returned in the `proof.circuitId` field of VerifiedAttributesQueryResponseItem from lemma_query_verified_attributes, or registered via POST /v1/circuits. NOTE: this matches the OpenAPI fi…
NameTypeReqDescription
artifactobjectCircuit artifact location (WASM + zkey).
circuitIdstringyesCircuit ID, echoing the request.
descriptionstring
inputsarrayOrdered names of the circuit's public/private inputs.
schemastringyesSchema ID this circuit is bound to.
verifiersarrayAvailable verifier configurations for this circuit.

No examples provided.

lemma_get_generator ~168

Retrieve a Lemma document generator by generatorId via GET /v1/doc-generators/{generatorId}. A generator describes how a class of source documents is produced (e.g., what fields a 'KYC-v2' issuer must populate). Returns GeneratorMeta { generatorId, schema, description?, language?, source?: { type: 'url', uri }, inputsSpec?, outputsSpec? }. Each generator is bound to one schema. Use this when onboarding a new issuer or auditing how an existing schema is being populated.

NameTypeReqDescription
generatorIdstringyesGenerator ID. Each generator is bound to a single schema and describes how source documents are produced. Registered via POST /v1/doc-generators. NOTE: this matches the OpenAPI field name `generatorI…
NameTypeReqDescription
descriptionstring
generatorIdstringyesGenerator ID, echoing the request.
inputsSpecobjectSpecification of fields the issuer must populate.
languagestringImplementation language (e.g. 'rust', 'typescript').
outputsSpecobjectSpecification of fields the generator produces.
schemastringyesSchema ID this generator is bound to (1:1 binding).
sourceobjectReference to the generator's source code.

No examples provided.

lemma_get_proof_status ~204

Get the verification status of a proof. NOTE: the v2 API does not yet expose a dedicated GET /v1/proofs/{id} endpoint, so this tool internally calls POST /v1/verified-attributes/query filtered by docHash (treating the verificationId returned from lemma_submit_proof as a docHash filter). Returns { status, circuitId, chainId, docHash } extracted from the matched item, or undefined if the verificationId is unknown. Status enum: received | verified | onchain-verified | rejected. Use the SDK's isVerified() helper (or check status === 'verified' || status === 'onchain-verified') to determine cryptographic validity.

NameTypeReqDescription
verificationIdstringyesverificationId returned by lemma_submit_proof. Internally treated as a docHash filter on POST /v1/verified-attributes/query (no dedicated GET /v1/proofs/{id} endpoint in v2 API).
NameTypeReqDescription
chainIdnumberEVM chain ID where the proof was verified, if applicable.
circuitIdstringCircuit ID this proof was generated against.
docHashstringDocument hash this proof attests to.
statusstringVerification status enum: 'received' | 'verified' | 'onchain-verified' | 'rejected'. Use the SDK's isVerified() helper (or check status === 'verified' || status === 'onchain-verified') for cryptograp…

No examples provided.

lemma_get_schema ~133

Retrieve a Lemma schema by its ID via GET /v1/schemas/{id}. A schema declares how documents of a given type are interpreted and normalized. Returns SchemaMeta { id, description? } with additionalProperties open — implementations commonly include a `normalize` artifact (WASM that maps raw documents to canonical form) and its content hash. Use this when you need to interpret attribute keys returned by lemma_query_verified_attributes.

NameTypeReqDescription
idstringyesSchema ID. Returned in the `schema` field of VerifiedAttributesQueryResponseItem from lemma_query_verified_attributes, or registered via POST /v1/schemas.
NameTypeReqDescription
descriptionstringHuman-readable description of the schema.
idstringyesSchema ID, echoing the request.
normalizeobjectyesNormalize artifact — WASM that maps raw documents to canonical form.

No examples provided.

lemma_query_verified_attributes ~244

Query cryptographically verified attributes from Lemma. Use this as the primary tool for finding documents whose attributes match given conditions (e.g., "subject's birthYear lt 2008"). Returns { results: Array<{ docHash, schema, issuerId, subjectId, attributes, isVerified, proof?: { status, circuitId, chainId }, disclosure? }>, hasMore }. The MCP layer enriches each item with an `isVerified` flag derived from `proof.status` (true when status is 'verified' or 'onchain-verified'). Use lemma_get_proof_status to monitor a specific proof; use lemma_get_schema to interpret the keys returned in `attributes`.

NameTypeReqDescription
attributesarrayAttribute predicates to AND-combine.
chainIdsarrayRestrict results to attributes verified on these chain IDs (EVM).
limitnumberMax results per page (1–200). Defaults to API server default (50).
offsetnumberPagination offset. Pair with `hasMore` in the response to walk pages.
schemasarrayRestrict results to documents conforming to these schema IDs.
NameTypeReqDescription
hasMorebooleanyesTrue when more results exist beyond this page; pair with `offset` to walk pages.
resultsarrayyesResult set; each item has been MCP-enriched with `isVerified`.

No examples provided.