SITEBORNE Utility Network
REMOTE · UTILITY.SITEBORNE.NET · SCANNED SEP 27
Machine-native utility network: verified evidence services for autonomous agents.
Available components
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security63
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- No authorisation is required to call this server. Every tool declares its destructiveHint and none is destructive, so open access doesn't expose one. See how to fix → View diagnostics → Partial
- HTTPS enforcement could not be verified: the plaintext port answered with HTTP 405, which proves neither a plaintext path nor enforcement. View diagnostics → Unverified
- HSTS check failed: the Strict-Transport-Security header is absent. See how to fix → View diagnostics → Fail
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability71
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 6304 tokens (~630/item across 10 items; 10 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Tools include usage examples.Pass
Stability & Change Management48
- Stability check failed: schema churn in the 30 days we've observed: 3 tool removals, 0 breaking changes, 0 auth/transport breaks, 7 additions. See how to fix → Fail
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
- Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 10 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 10 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a current MCP spec version (2026-07-28).Pass
How do I install the SITEBORNE Utility Network MCP server?
SITEBORNE Utility Network is a hosted endpoint at https://utility.siteborne.net/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · utility.siteborne.net
claude mcp add --transport http net-siteborne-utility 'https://utility.siteborne.net/mcp'
{
"mcpServers": {
"net-siteborne-utility": {
"url": "https://utility.siteborne.net/mcp"
}
}
} {
"servers": {
"net-siteborne-utility": {
"type": "http",
"url": "https://utility.siteborne.net/mcp"
}
}
} [mcp_servers.net-siteborne-utility] url = "https://utility.siteborne.net/mcp"
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"net-siteborne-utility": {
"type": "remote",
"url": "https://utility.siteborne.net/mcp",
"enabled": true
}
}
} openclaw mcp add net-siteborne-utility --url 'https://utility.siteborne.net/mcp' --transport streamable-http
mcp_servers:
net-siteborne-utility:
url: "https://utility.siteborne.net/mcp" {
"McpServers": {
"net-siteborne-utility": {
"Transport": "http",
"Url": "https://utility.siteborne.net/mcp"
}
}
} assistant mcp add net-siteborne-utility -t streamable-http -u 'https://utility.siteborne.net/mcp'
{
"mcpServers": {
"net-siteborne-utility": {
"type": "http",
"url": "https://utility.siteborne.net/mcp"
}
}
} The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 25 Sept 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 21 Sept 26 −7
- Stability: pass → fail ▼ security
- A breaking change shipped without a version bump: still 0.1.0 ▼ security
- Tool “siteborne_company_evidence_graph” was removed ▼ security
- Tool “siteborne_document_evidence_json” was removed ▼ security
- Tool “siteborne_web_context_verified” was removed ▼ security
- Tool “siteborne_get_quote” rewrote its description, which is the text the model reads security
- Tool “siteborne_get_service_health” rewrote its description, which is the text the model reads security
- Tool “siteborne_verify_agent_output” rewrote its description, which is the text the model reads security
- Schema quality: 393 → 570 ▼ functional
- New tool “siteborne_build_company_evidence_graph” functional
- New tool “siteborne_extract_document_evidence_json” functional
- New tool “siteborne_retrieve_verified_web_context” functional
- “siteborne_verify_agent_output” reworded the description of “verification_mode” cosmetic
- 17 Sept 26 0
- Stability: 0.97 → pass security
- 16 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 93 to 97. That category is still filling its 30-day observation window: 28 days of observed history at the previous scan, 29 at this one. The score rises as the window fills, whether or not the server changes.
- 13 Sept 26 +5
- Tool “siteborne_company_evidence_graph” rewrote its description, which is the text the model reads security
- Tool “siteborne_document_evidence_json” rewrote its description, which is the text the model reads security
- Tool “siteborne_get_quote” rewrote its description, which is the text the model reads security
- Tool “siteborne_get_service_health” rewrote its description, which is the text the model reads security
- Tool “siteborne_verify_agent_output” rewrote its description, which is the text the model reads security
- Tool “siteborne_web_context_verified” rewrote its description, which is the text the model reads security
- Schema quality: 146 → 393 ▼ functional
- Tool coverage: 89% → 100% ▲ functional
- Schema quality: fair → excellent functional
- “siteborne_company_evidence_graph” reworded the description of “buyer_urls” cosmetic
- “siteborne_company_evidence_graph” reworded the description of “company_name” cosmetic
- “siteborne_company_evidence_graph” reworded the description of “domain” cosmetic
- “siteborne_company_evidence_graph” reworded the description of “freshness_seconds” cosmetic
- “siteborne_company_evidence_graph” reworded the description of “identifiers” cosmetic
- “siteborne_company_evidence_graph” reworded the description of “jurisdiction_hints” cosmetic
- “siteborne_company_evidence_graph” reworded the description of “maximum_authorized_price” cosmetic
- “siteborne_company_evidence_graph” reworded the description of “minimum_completeness” cosmetic
- “siteborne_company_evidence_graph” reworded the description of “minimum_verification_score” cosmetic
- “siteborne_company_evidence_graph” reworded the description of “requested_field_groups” cosmetic
- “siteborne_company_evidence_graph” reworded the description of “ticker” cosmetic
- “siteborne_document_evidence_json” reworded the description of “artifact_reference” cosmetic
- “siteborne_document_evidence_json” reworded the description of “declared_page_count” cosmetic
- “siteborne_document_evidence_json” reworded the description of “document_url” cosmetic
- “siteborne_document_evidence_json” reworded the description of “extraction_request” cosmetic
- “siteborne_document_evidence_json” reworded the description of “language_hints” cosmetic
- “siteborne_document_evidence_json” reworded the description of “maximum_authorized_price” cosmetic
- “siteborne_document_evidence_json” reworded the description of “minimum_verification_score” cosmetic
- “siteborne_document_evidence_json” reworded the description of “ocr_permission” cosmetic
- “siteborne_document_evidence_json” reworded the description of “page_range” cosmetic
- “siteborne_document_evidence_json” reworded the description of “retention_preference” cosmetic
- “siteborne_document_evidence_json” reworded the description of “table_extraction_request” cosmetic
- “siteborne_document_evidence_json” reworded the description of “upload_reference” cosmetic
- “siteborne_get_quote” reworded the description of “input” cosmetic
- “siteborne_get_quote” reworded the description of “scheme” cosmetic
- “siteborne_get_quote” reworded the description of “service_id” cosmetic
- “siteborne_verify_agent_output” reworded the description of “allowed_evidence_sources” cosmetic
- “siteborne_verify_agent_output” reworded the description of “candidate_output” cosmetic
- “siteborne_verify_agent_output” reworded the description of “freshness_requirements” cosmetic
- “siteborne_verify_agent_output” reworded the description of “maximum_authorized_price” cosmetic
- “siteborne_verify_agent_output” reworded the description of “minimum_score” cosmetic
- “siteborne_verify_agent_output” reworded the description of “required_schema” cosmetic
- “siteborne_verify_agent_output” reworded the description of “supplied_evidence” cosmetic
- “siteborne_verify_agent_output” reworded the description of “verification_contract” cosmetic
- “siteborne_verify_agent_output” reworded the description of “verification_mode” cosmetic
- “siteborne_web_context_verified” reworded the description of “buyer_schema” cosmetic
- “siteborne_web_context_verified” reworded the description of “field_selectors” cosmetic
- “siteborne_web_context_verified” reworded the description of “freshness_seconds” cosmetic
- “siteborne_web_context_verified” reworded the description of “locale_hint” cosmetic
- “siteborne_web_context_verified” reworded the description of “max_content_size” cosmetic
- “siteborne_web_context_verified” reworded the description of “max_redirects” cosmetic
- “siteborne_web_context_verified” reworded the description of “maximum_authorized_price” cosmetic
- “siteborne_web_context_verified” reworded the description of “minimum_verification_score” cosmetic
- “siteborne_web_context_verified” reworded the description of “output_mode” cosmetic
- “siteborne_web_context_verified” reworded the description of “redirect_policy” cosmetic
- “siteborne_web_context_verified” reworded the description of “retrieval_mode” cosmetic
- “siteborne_web_context_verified” reworded the description of “target_url” cosmetic
- Tool “siteborne_company_evidence_graph” changed its title: siteborne company evidence graph → Build company evidence graph cosmetic
- Tool “siteborne_document_evidence_json” changed its title: siteborne document evidence json → Extract document evidence JSON cosmetic
- Tool “siteborne_verify_agent_output” changed its title: siteborne verify agent output → Verify agent output cosmetic
- Tool “siteborne_web_context_verified” changed its title: siteborne web context verified → Verify web context cosmetic
- 12 Sept 26 +7
- Authorization: unverified → partial ▲ security
- 10 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 73 to 77. That category is still filling its 30-day observation window: 22 days of observed history at the previous scan, 23 at this one. The score rises as the window fills, whether or not the server changes.
- 8 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 67 to 70. That category is still filling its 30-day observation window: 20 days of observed history at the previous scan, 21 at this one. The score rises as the window fills, whether or not the server changes.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 27 Sept 2026 · Probed https://utility.siteborne.net/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=siteborne.net | CN=WE1,O=Google Trust Services,C=US | 18 Aug 2026 | 16 Nov 2026 | ECDSA 256 | ECDSA-SHA256 | 2b2b9fb122f530270ef731ef363fa99e |
| SANs: siteborne.net, utility.siteborne.net, *.utility.siteborne.net | ||||||
| CN=WE1,O=Google Trust Services,C=US (CA) | CN=GTS Root R4,O=Google Trust Services LLC,C=US | 13 Dec 2023 | 20 Feb 2029 | ECDSA 256 | ECDSA-SHA384 | 7ff31977972c224a76155d13b6d685e3 |
| CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) | CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE | 15 Nov 2023 | 28 Jan 2028 | ECDSA 384 | SHA256-RSA | 7fe530bf331343bedd821610493d8a1b |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of utility.siteborne.net. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| net. | present | 37331 | 13 | Verified |
| siteborne.net. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
| Header | Value |
|---|---|
| x-content-type-options | nosniff |
| x-frame-options | DENY |
| referrer-policy | strict-origin-when-cross-origin |
| permissions-policy | geolocation=(), microphone=(), camera=() |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://utility.siteborne.net/mcp | Verified | 200 | |
| http (plaintext) | http://utility.siteborne.net/mcp | Inconclusive | 405 |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
siteborne_build_company_evidence_graph Build company evidence graph ~610
Build a proof-carrying graph of public company identity, SEC filings, website observations, regulatory mentions, and repository signals. Use when: the request needs entity-level evidence synthesized across sources. Do not use when: one URL is the subject (use siteborne_retrieve_verified_web_context), one document is the subject (use siteborne_extract_document_evidence_json), or an existing agent output needs evaluation (use siteborne_verify_agent_output). Parameters: authoritative identifiers (cik, lei, isin, cusip, figi) resolve entities more reliably than company_name, ticker or domain alone, and combining them reduces ambiguity; requested_field_groups narrows provider work; maximum_authorized_price only constrains payment and never widens scope. Behavior: open-world: a paid request queries public data providers over the network and persists governed payment, audit, job and Workflow state; an unpaid request returns payment_required; a repeated identical request with the same payment is replay-protected and is not charged twice. This service is currently production-disabled and rejects execution. Economics: exact price of $0.0312 USD per request; the payment challenge requires that amount and the charge settles at exactly that amount. Failure: input that fails schema validation is rejected before any payment challenge; provider or service unavailability returns a structured MCP error. Returns: a company evidence graph with provenance, completeness, verification, and PCC context—not a raw webpage or document extraction.
| Name | Type | Req | Description |
|---|---|---|---|
| buyer_urls | array | – | Up to twenty public supplemental evidence URLs supplied by the buyer; these are additional sources, not replacements for entity resolution. |
| company_name | string | – | Legal or commonly used company name; supplies an entity-resolution signal when authoritative identifiers are unavailable. |
| domain | string | – | Primary website hostname only, without a URL path; links first-party web evidence to the company identity. |
| freshness_seconds | integer | – | Maximum acceptable source age in seconds, from 0 through 2,592,000; lower values demand fresher evidence. |
| identifiers | object | – | Known authoritative entity identifiers; supplying precise identifiers reduces ambiguous name, ticker, or domain matching. |
| jurisdiction_hints | array | – | Up to five two-letter uppercase jurisdiction codes used to focus regulatory context; hints do not assert incorporation. |
| maximum_authorized_price | object | – | Buyer’s decimal-safe maximum authorized price; constrains the payment requirement and never expands provider scope. |
| minimum_completeness | number | – | Required completeness ratio from 0 through 1; results below this threshold fail the requested acceptance condition. |
| minimum_verification_score | number | – | Required PCC verification ratio from 0 through 1; raising it makes result acceptance stricter. |
| requested_field_groups | array | – | Unique evidence categories to collect; omitted values use the schema default, while a smaller list limits provider work and result scope. |
| ticker | string | – | One-to-five uppercase exchange ticker symbols; narrows public-company resolution but is not globally unique without other signals. |
Structured output declared, but exposes no named fields.
{"company_name":"Acme Corporation","domain":"acme.example.com","freshness_seconds":86400,"minimum_verification_score":0.7,"requested_field_groups":["identity","sec_submissions","website_evidence"]}siteborne_build_company_evidence_graph_v3_candidate Build company evidence graph (v3 candidate) ~613
Build a proof-carrying graph of public company identity, SEC filings, website observations, regulatory mentions, and repository signals. Use when: the request needs entity-level evidence synthesized across sources. Do not use when: one URL is the subject (use siteborne_retrieve_verified_web_context), one document is the subject (use siteborne_extract_document_evidence_json), or an existing agent output needs evaluation (use siteborne_verify_agent_output). Parameters: authoritative identifiers (cik, lei, isin, cusip, figi) resolve entities more reliably than company_name, ticker or domain alone, and combining them reduces ambiguity; requested_field_groups narrows provider work; maximum_authorized_price only constrains payment and never widens scope. Behavior: open-world: a paid request queries public data providers over the network and persists governed payment, audit, job and Workflow state; an unpaid request returns payment_required; a repeated identical request with the same payment is replay-protected and is not charged twice. This service is currently production-disabled and rejects execution. Economics: exact price of $0.0312 USD per request; the payment challenge requires that amount and the charge settles at exactly that amount. Failure: input that fails schema validation is rejected before any payment challenge; provider or service unavailability returns a structured MCP error. Returns: a company evidence graph with provenance, completeness, verification, and PCC context—not a raw webpage or document extraction.
| Name | Type | Req | Description |
|---|---|---|---|
| buyer_urls | array | – | Up to twenty public supplemental evidence URLs supplied by the buyer; these are additional sources, not replacements for entity resolution. |
| company_name | string | – | Legal or commonly used company name; supplies an entity-resolution signal when authoritative identifiers are unavailable. |
| domain | string | – | Primary website hostname only, without a URL path; links first-party web evidence to the company identity. |
| freshness_seconds | integer | – | Maximum acceptable source age in seconds, from 0 through 2,592,000; lower values demand fresher evidence. |
| identifiers | object | – | Known authoritative entity identifiers; supplying precise identifiers reduces ambiguous name, ticker, or domain matching. |
| jurisdiction_hints | array | – | Up to five two-letter uppercase jurisdiction codes used to focus regulatory context; hints do not assert incorporation. |
| maximum_authorized_price | object | – | Buyer’s decimal-safe maximum authorized price; constrains the payment requirement and never expands provider scope. |
| minimum_completeness | number | – | Required completeness ratio from 0 through 1; results below this threshold fail the requested acceptance condition. |
| minimum_verification_score | number | – | Required PCC verification ratio from 0 through 1; raising it makes result acceptance stricter. |
| requested_field_groups | array | – | Unique evidence categories to collect; omitted values use the schema default, while a smaller list limits provider work and result scope. |
| ticker | string | – | One-to-five uppercase exchange ticker symbols; narrows public-company resolution but is not globally unique without other signals. |
Structured output declared, but exposes no named fields.
{"company_name":"Acme Corporation","domain":"acme.example.com","freshness_seconds":86400,"minimum_verification_score":0.7,"requested_field_groups":["identity","sec_submissions","website_evidence"]}siteborne_extract_document_evidence_json Extract document evidence JSON ~785
Extract and verify structured evidence from exactly one authorized artifact, prior SITEBORNE upload, or public document URL. Use when: the source of truth is a PDF or supported image and the desired result is evidence JSON. Do not use when: a webpage alone is sufficient (use siteborne_retrieve_verified_web_context), company-wide public evidence is needed (use siteborne_build_company_evidence_graph), or an existing agent response needs evaluation (use siteborne_verify_agent_output). Parameters: provide exactly one reference mode: artifact_reference (an authorized stored artifact), upload_reference (a prior SITEBORNE upload handle, not document bytes) or document_url (a public URL, no credentials). ocr_permission must be true before image-based content is read by OCR, and OCR pages bill at the OCR tier; extraction_request.extract_tables and table_extraction_request request table extraction, and pages with tables bill at the table tier; declared_page_count and page_range are bounded by the page limit below; maximum_authorized_price only constrains payment. Behavior: open-world: a paid request may read governed artifact storage or fetch a public document URL, calls the document provider, and persists payment, audit, job and Workflow state; an unpaid request returns payment_required; a repeated identical request with the same payment is replay-protected and is not charged twice. This service is currently production-disabled and rejects execution. Economics: upto pricing: the payment challenge authorizes a maximum of $0.19 USD per job; the actual charge is measured per processed page (native-text $0.0098, OCR $0.0156, table $0.0238 per page, the highest applicable tier per page) and never exceeds the authorization. The authorization is a ceiling, not the charge. Documents are limited to 10 pages per job. Failure: schema-invalid input is rejected before any payment challenge; a document over the page limit, an unreadable or encrypted document, or an unavailable provider r…
| Name | Type | Req | Description |
|---|---|---|---|
| artifact_reference | object | – | Authorized stored-artifact descriptor for reference mode 1; use exactly one of artifact_reference, upload_reference, or document_url. |
| declared_page_count | integer | – | Optional declared page count from 1 through 10; enables early scope validation but does not override the observed document. |
| document_url | string | – | Public document URL for reference mode 3; use exactly one reference mode and never put credentials in this URL. |
| extraction_request | object | – | Selects text, table, key-value, and buyer-schema extraction outputs; omitted switches retain their documented defaults. |
| language_hints | array | – | Up to five BCP 47 language hints used by OCR and extraction; hints do not translate the document. |
| maximum_authorized_price | object | – | Buyer’s decimal-safe maximum authorized price; constrains the payment requirement and not retention or extraction policy. |
| minimum_verification_score | number | – | Required PCC verification ratio from 0 through 1; raising it makes extracted-evidence acceptance stricter. |
| ocr_permission | boolean | – | Explicit permission to use OCR for image-based content; false prevents OCR even when text is not embedded. |
| page_range | object | – | Optional one-indexed inclusive page range to process; both bounds are limited to pages 1 through 10. |
| retention_preference | string | – | Requested retention class—none, temporary, or permanent—subject to server policy; it cannot override mandatory retention limits. |
| table_extraction_request | boolean | – | Explicit top-level request for table extraction; false leaves tables unrequested. |
| upload_reference | object | – | Previously issued SITEBORNE upload handle and declared file metadata for reference mode 2; it does not upload document bytes. |
Structured output declared, but exposes no named fields.
{"artifact_reference":{"artifact_id":"doc/abc123/contract.pdf","authorization":"buyer_authorized","content_hash":"sha256:abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890","media_type":"application/pdf","page_count":5,"size_bytes":2048576},"extraction_request":{"extract_key_values":true,"extract_tables":true},"maximum_authorized_price":{"amount":"0.19","currency":"USD"},"ocr_permission":true}siteborne_extract_document_evidence_json_v3_candidate Extract document evidence JSON (v3 candidate) ~788
Extract and verify structured evidence from exactly one authorized artifact, prior SITEBORNE upload, or public document URL. Use when: the source of truth is a PDF or supported image and the desired result is evidence JSON. Do not use when: a webpage alone is sufficient (use siteborne_retrieve_verified_web_context), company-wide public evidence is needed (use siteborne_build_company_evidence_graph), or an existing agent response needs evaluation (use siteborne_verify_agent_output). Parameters: provide exactly one reference mode: artifact_reference (an authorized stored artifact), upload_reference (a prior SITEBORNE upload handle, not document bytes) or document_url (a public URL, no credentials). ocr_permission must be true before image-based content is read by OCR, and OCR pages bill at the OCR tier; extraction_request.extract_tables and table_extraction_request request table extraction, and pages with tables bill at the table tier; declared_page_count and page_range are bounded by the page limit below; maximum_authorized_price only constrains payment. Behavior: open-world: a paid request may read governed artifact storage or fetch a public document URL, calls the document provider, and persists payment, audit, job and Workflow state; an unpaid request returns payment_required; a repeated identical request with the same payment is replay-protected and is not charged twice. This service is currently production-disabled and rejects execution. Economics: upto pricing: the payment challenge authorizes a maximum of $0.19 USD per job; the actual charge is measured per processed page (native-text $0.0098, OCR $0.0156, table $0.0238 per page, the highest applicable tier per page) and never exceeds the authorization. The authorization is a ceiling, not the charge. Documents are limited to 10 pages per job. Failure: schema-invalid input is rejected before any payment challenge; a document over the page limit, an unreadable or encrypted document, or an unavailable provider r…
| Name | Type | Req | Description |
|---|---|---|---|
| artifact_reference | object | – | Authorized stored-artifact descriptor for reference mode 1; use exactly one of artifact_reference, upload_reference, or document_url. |
| declared_page_count | integer | – | Optional declared page count from 1 through 10; enables early scope validation but does not override the observed document. |
| document_url | string | – | Public document URL for reference mode 3; use exactly one reference mode and never put credentials in this URL. |
| extraction_request | object | – | Selects text, table, key-value, and buyer-schema extraction outputs; omitted switches retain their documented defaults. |
| language_hints | array | – | Up to five BCP 47 language hints used by OCR and extraction; hints do not translate the document. |
| maximum_authorized_price | object | – | Buyer’s decimal-safe maximum authorized price; constrains the payment requirement and not retention or extraction policy. |
| minimum_verification_score | number | – | Required PCC verification ratio from 0 through 1; raising it makes extracted-evidence acceptance stricter. |
| ocr_permission | boolean | – | Explicit permission to use OCR for image-based content; false prevents OCR even when text is not embedded. |
| page_range | object | – | Optional one-indexed inclusive page range to process; both bounds are limited to pages 1 through 10. |
| retention_preference | string | – | Requested retention class—none, temporary, or permanent—subject to server policy; it cannot override mandatory retention limits. |
| table_extraction_request | boolean | – | Explicit top-level request for table extraction; false leaves tables unrequested. |
| upload_reference | object | – | Previously issued SITEBORNE upload handle and declared file metadata for reference mode 2; it does not upload document bytes. |
Structured output declared, but exposes no named fields.
{"artifact_reference":{"artifact_id":"doc/abc123/contract.pdf","authorization":"buyer_authorized","content_hash":"sha256:abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890","media_type":"application/pdf","page_count":5,"size_bytes":2048576},"extraction_request":{"extract_key_values":true,"extract_tables":true},"maximum_authorized_price":{"amount":"0.19","currency":"USD"},"ocr_permission":true}siteborne_get_quote Get SITEBORNE quote ~439
Build a canonical x402 payment quote for one SITEBORNE service and exact request input. Use when: an agent needs the governed price, payee, network, asset, resource, expiry, and payment requirement before deciding whether to invoke a paid service. Do not use when: evidence work is required now (use the matching siteborne_build_company_evidence_graph, siteborne_retrieve_verified_web_context, siteborne_extract_document_evidence_json, or siteborne_verify_agent_output tool), or only availability is needed (use siteborne_get_service_health). Parameters: scheme must be the one scheme the service is offered under (company_evidence_graph.v2 exact, web_context_verified.v2 exact, document_evidence_json.v2 upto, verify_agent_output.v2 exact, company_evidence_graph.v3 exact, web_context_verified.v3 exact, document_evidence_json.v3 upto, verify_agent_output.v3 exact); any other scheme is rejected with scheme_not_offered. input is hashed, so the quote binds only that exact request. Behavior: quote-only and read-only; it hashes the proposed input, and does not execute the underlying paid service, verify payment, call a provider, create a Workflow, or settle. Economics: free of charge. The returned amount is the exact price, or for upto an authorized maximum whose actual_amount is null because the real charge is measured at settlement and never exceeds it. Failure: a mode that has a governed price but is unavailable returns retrieval_mode_unavailable or verification_mode_unavailable and no quote; a quote expires at expires_at. Returns: an expiring input-bound quote with its x402 payment requirement and the canonical economics block.
| Name | Type | Req | Description |
|---|---|---|---|
| input | – | yes | Complete proposed input for the selected service; its canonical hash binds the quote and later payment requirement to this exact request content. |
| scheme | string | yes | Pricing mode: exact fixes the required amount, while upto authorizes a maximum whose eventual charge cannot exceed the returned amount. |
| service_id | string | yes | Canonical SITEBORNE service and major version to price; selects that service’s governed pricing key, contract release, and production resource URL. |
| Name | Type | Req | Description |
|---|---|---|---|
| actual_amount | null | yes | Always null in a quote: the actual charge exists only after measured settlement. |
| amount | string | yes | Amount in the asset atomic units (6 decimals for USDC): the exact price when amount_kind is exact, or the authorized maximum when it is authorized_maximum. |
| amount_kind | string | yes | exact: the charge equals amount. authorized_maximum: the charge is measured at settlement and never exceeds amount. |
| asset | string | yes | Token contract address on the network that the amount is denominated in. |
| binding_hash | string | yes | Hash binding the quote to the exact service, input hash, price, scheme, network, asset, and payee; a payment for a different binding is not accepted. |
| contract_release | string | yes | Contract release the quoted service belongs to. |
| economics | object | yes | The canonical economic contract for the quoted service (pricing model, tiers, authorization maximum, settlement model, modes and their availability, limits, production state, pricing_source_version,… |
| expires_at | string | yes | UTC time after which the quote is no longer valid. |
| input_hash | string | yes | Canonical hash of the exact request input this quote binds. |
| issued_at | string | yes | UTC time the quote was issued. |
| network | string | yes | CAIP-2 network the payment must be made on (for example eip155:8453). |
| payee | string | yes | Public payTo address that receives the payment. |
| payment_required | boolean | yes | Always true: executing the quoted service requires payment. |
| payment_requirements | object | yes | The x402 payment requirement to satisfy, including payTo, network, asset and amount. |
| pricing_key | string | yes | Governed pricing key the amount was resolved from (governance pricing authority). |
| pricing_source_version | string | yes | Version of the governed pricing document that produced the amount; a repricing changes this value. |
| production_enabled | boolean | yes | Quote-level flag, always false: a quote never authorizes execution. The service runtime state is economics.production_enabled. |
| quote_id | string | yes | Deterministic identifier of this quote. |
| requirement_id | string | yes | Identifier of the x402 payment requirement embedded in payment_requirements. |
| resource_id | string | yes | Canonical URL of the paid resource this quote is bound to. |
| scheme | string | yes | x402 scheme: exact requires the amount; upto authorizes it as a maximum. |
| service_id | string | yes | Canonical service id and major version that was quoted. |
| service_version | string | yes | Service contract major version. |
No examples provided.
siteborne_get_service_health Get SITEBORNE service health ~185
Report MCP server readiness and production-enable status for each SITEBORNE service. Use when: an agent must check protocol availability, tool count, or whether a service is currently production-enabled before selecting a paid tool. Do not use when: a quote is needed (use siteborne_get_quote) or company, web, document, or agent-output evidence work is required (use the corresponding SITEBORNE service tool). Behavior: read-only and credential-independent; it does not perform paid evidence work, create quotes, verify payment, call providers, write service state, create Workflows, or settle. Economics: free of charge; it never issues a payment challenge. Failure: it depends on no provider, so it does not fail because a provider is unavailable. Returns: the server and protocol versions plus truthful local, production, and external-publication status for all four evidence services.
Input schema present but exposes no named parameters.
| Name | Type | Req | Description |
|---|---|---|---|
| external_publication | string | yes | – |
| production_enabled | boolean | yes | – |
| production_ready | boolean | yes | – |
| protocol_version | string | yes | – |
| server_name | string | yes | – |
| server_version | string | yes | – |
| services | object | yes | – |
| status | string | yes | – |
| tools | number | yes | – |
No examples provided.
siteborne_retrieve_verified_web_context Retrieve verified web context ~775
Retrieve and verify evidence from one public web URL using direct HTTP retrieval. Use when: the request is specifically about the content and provenance of a URL. Do not use when: evidence must be synthesized for a company (use siteborne_build_company_evidence_graph), extracted from an authorized document (use siteborne_extract_document_evidence_json), checked against an existing output contract (use siteborne_verify_agent_output), or the page requires JavaScript rendering (rendered retrieval is not available). Parameters: retrieval_mode must be direct; rendered is defined but unavailable and is rejected before any payment challenge, never substituted with direct retrieval. output_mode structured needs buyer_schema and field_selectors to be meaningful; redirect_policy and max_redirects bound redirect following; max_content_size bounds returned bytes; maximum_authorized_price only constrains payment and never changes retrieval scope. Behavior: open-world: a paid request performs bounded outbound HTTP retrieval of the target URL through a safe-egress boundary (private and loopback destinations are refused) and persists governed payment, audit, job and Workflow state; an unpaid request returns payment_required; a repeated identical request with the same payment is replay-protected and is not charged twice. Retrieval admission follows the governed runtime rate policy; no fixed public per-origin rate is promised. This service is currently production-disabled and rejects execution. Economics: exact price of $0.008 USD per request in direct mode; the payment challenge requires that amount and the charge settles at exactly that amount. rendered mode has a governed price of $0.029 USD but is not available: it is rejected before any payment challenge and never substituted. Failure: schema-invalid input and unavailable modes are rejected before any payment challenge; target-site errors, timeouts and unavailable retrieval return a structured MCP error and are never answered wi…
| Name | Type | Req | Description |
|---|---|---|---|
| buyer_schema | object | – | Optional JSON Schema governing structured output; meaningful only with output_mode structured and bounded to fifty properties and depth five. |
| field_selectors | array | – | Up to thirty requested field names for structured extraction; narrows the structured result rather than changing the fetched URL. |
| freshness_seconds | integer | – | Maximum acceptable cached-content age in seconds, from 0 through 2,592,000; zero requests uncached content. |
| locale_hint | string | – | Optional BCP 47 language or language-region hint used for HTTP content negotiation; it does not translate content. |
| max_content_size | integer | – | Maximum returned content size in bytes, from 1,024 through 10,485,760; smaller limits truncate or reject oversized content sooner. |
| max_redirects | integer | – | Maximum redirect hops from 0 through 10 when the selected redirect policy follows redirects. |
| maximum_authorized_price | object | – | Buyer’s decimal-safe maximum authorized price; constrains the payment requirement and never changes retrieval scope. |
| minimum_verification_score | number | – | Required PCC verification ratio from 0 through 1; raising it makes evidence acceptance stricter. |
| output_mode | string | – | Result representation: clean_text normalizes prose, markdown preserves document structure, and structured validates selected fields against buyer_schema. |
| redirect_policy | string | – | Redirect handling: follow permits the bounded chain, follow_first permits only the first hop, and manual returns redirect evidence without following. |
| retrieval_mode | string | yes | Retrieval mode. Only direct (plain HTTP retrieval, no JavaScript execution) is available. rendered has a governed price but is not available: it is rejected with retrieval_mode_unavailable before any… |
| target_url | string | yes | Public HTTP or HTTPS URL to retrieve and verify; private, loopback, and otherwise unsafe network destinations are rejected. |
Structured output declared, but exposes no named fields.
{"freshness_seconds":3600,"maximum_authorized_price":{"amount":"0.029","currency":"USD"},"output_mode":"markdown","retrieval_mode":"direct","target_url":"https://acme.example.com/about"}siteborne_retrieve_verified_web_context_v3_candidate Retrieve verified web context (v3 candidate) ~778
Retrieve and verify evidence from one public web URL using direct HTTP retrieval. Use when: the request is specifically about the content and provenance of a URL. Do not use when: evidence must be synthesized for a company (use siteborne_build_company_evidence_graph), extracted from an authorized document (use siteborne_extract_document_evidence_json), checked against an existing output contract (use siteborne_verify_agent_output), or the page requires JavaScript rendering (rendered retrieval is not available). Parameters: retrieval_mode must be direct; rendered is defined but unavailable and is rejected before any payment challenge, never substituted with direct retrieval. output_mode structured needs buyer_schema and field_selectors to be meaningful; redirect_policy and max_redirects bound redirect following; max_content_size bounds returned bytes; maximum_authorized_price only constrains payment and never changes retrieval scope. Behavior: open-world: a paid request performs bounded outbound HTTP retrieval of the target URL through a safe-egress boundary (private and loopback destinations are refused) and persists governed payment, audit, job and Workflow state; an unpaid request returns payment_required; a repeated identical request with the same payment is replay-protected and is not charged twice. Retrieval admission follows the governed runtime rate policy; no fixed public per-origin rate is promised. This service is currently production-disabled and rejects execution. Economics: exact price of $0.008 USD per request in direct mode; the payment challenge requires that amount and the charge settles at exactly that amount. rendered mode has a governed price of $0.029 USD but is not available: it is rejected before any payment challenge and never substituted. Failure: schema-invalid input and unavailable modes are rejected before any payment challenge; target-site errors, timeouts and unavailable retrieval return a structured MCP error and are never answered wi…
| Name | Type | Req | Description |
|---|---|---|---|
| buyer_schema | object | – | Optional JSON Schema governing structured output; meaningful only with output_mode structured and bounded to fifty properties and depth five. |
| field_selectors | array | – | Up to thirty requested field names for structured extraction; narrows the structured result rather than changing the fetched URL. |
| freshness_seconds | integer | – | Maximum acceptable cached-content age in seconds, from 0 through 2,592,000; zero requests uncached content. |
| locale_hint | string | – | Optional BCP 47 language or language-region hint used for HTTP content negotiation; it does not translate content. |
| max_content_size | integer | – | Maximum returned content size in bytes, from 1,024 through 10,485,760; smaller limits truncate or reject oversized content sooner. |
| max_redirects | integer | – | Maximum redirect hops from 0 through 10 when the selected redirect policy follows redirects. |
| maximum_authorized_price | object | – | Buyer’s decimal-safe maximum authorized price; constrains the payment requirement and never changes retrieval scope. |
| minimum_verification_score | number | – | Required PCC verification ratio from 0 through 1; raising it makes evidence acceptance stricter. |
| output_mode | string | – | Result representation: clean_text normalizes prose, markdown preserves document structure, and structured validates selected fields against buyer_schema. |
| redirect_policy | string | – | Redirect handling: follow permits the bounded chain, follow_first permits only the first hop, and manual returns redirect evidence without following. |
| retrieval_mode | string | yes | Retrieval mode. Only direct (plain HTTP retrieval, no JavaScript execution) is available. rendered has a governed price but is not available: it is rejected with retrieval_mode_unavailable before any… |
| target_url | string | yes | Public HTTP or HTTPS URL to retrieve and verify; private, loopback, and otherwise unsafe network destinations are rejected. |
Structured output declared, but exposes no named fields.
{"freshness_seconds":3600,"maximum_authorized_price":{"amount":"0.029","currency":"USD"},"output_mode":"markdown","retrieval_mode":"direct","target_url":"https://acme.example.com/about"}siteborne_verify_agent_output Verify agent output ~664
Evaluate a supplied agent output against explicit claims, deterministic requirements, a required JSON Schema, and optional evidence. Use when: the caller already has an output and needs a governed verification verdict. Do not use when: evidence must first be gathered from a company (use siteborne_build_company_evidence_graph), URL (use siteborne_retrieve_verified_web_context), or document (use siteborne_extract_document_evidence_json), or independent reproduction of the output is required (not available). Parameters: verification_mode must be standard; independent_reproduction is defined but unavailable and is rejected before any payment challenge, never downgraded to standard. required_schema must fit SITEBORNE JSON Schema Profile 1 or the request is rejected before payment; minimum_score sets the acceptance threshold; maximum_authorized_price only constrains payment and never relaxes verification policy. Behavior: closed-world: standard mode evaluates only the supplied claims, requirements, output and evidence with no outbound retrieval, and persists governed payment, audit, job and Workflow state; an unpaid request returns payment_required; a repeated identical request with the same payment is replay-protected and is not charged twice. The verification policy and verdict rules do not depend on price or maximum_authorized_price. This service is currently production-disabled and rejects execution. Economics: exact price of $0.017 USD per request in standard mode; the payment challenge requires that amount and the charge settles at exactly that amount. independent_reproduction mode has a governed price of $0.049 USD but is not available: it is rejected before any payment challenge and never substituted. Failure: an unsupported or oversized required_schema, schema-invalid input and unavailable modes are rejected before any payment challenge; a failed verification is a normal fail or conditional verdict, not an error. Returns: claim-level and deterministic-check resu…
| Name | Type | Req | Description |
|---|---|---|---|
| allowed_evidence_sources | array | – | Up to ten permitted evidence source URIs; evidence outside this allowlist cannot satisfy source restrictions. |
| candidate_output | object | yes | Agent-produced JSON object to evaluate, bounded to 200 properties and depth 10; it is evidence under test, not trusted policy. |
| freshness_requirements | object | – | Optional maximum-age limits for evidence and schemas, each expressed in seconds. |
| maximum_authorized_price | object | – | Buyer’s decimal-safe maximum authorized price; constrains the payment requirement and never relaxes verification policy. |
| minimum_score | number | – | Minimum overall verification score from 0 through 1; raising it makes the final acceptance verdict stricter. |
| required_schema | object | yes | JSON Schema the candidate output must satisfy; it constrains validation and cannot change SITEBORNE verifier policy. |
| supplied_evidence | array | – | Up to twenty evidence objects supplied with the candidate output and bound to integrity hashes. |
| verification_contract | object | yes | Complete set of claims and deterministic checks against which the supplied candidate output is evaluated. |
| verification_mode | string | yes | Verification mode. Only standard (deterministic checks of the supplied material, no outbound retrieval) is available. independent_reproduction has a governed price but is not available: it is rejecte… |
Structured output declared, but exposes no named fields.
{"candidate_output":{"company":"Acme Corp","confidence":0.95},"maximum_authorized_price":{"amount":"0.019","currency":"USD"},"required_schema":{"properties":{"company":{"type":"string"}},"required":["company"],"type":"object"},"verification_contract":{"claims":[{"claim_id":"claim_1","expected_value":"Acme Corp","materiality":"material","predicate":"equals"}],"deterministic_requirements":[{"check":"schema_valid","requirement_id":"req_1"},{"check":"evidence_resolves","requirement_id":"req_2"}]},"verification_mode":"standard"}siteborne_verify_agent_output_v3_candidate Verify agent output (v3 candidate) ~667
Evaluate a supplied agent output against explicit claims, deterministic requirements, a required JSON Schema, and optional evidence. Use when: the caller already has an output and needs a governed verification verdict. Do not use when: evidence must first be gathered from a company (use siteborne_build_company_evidence_graph), URL (use siteborne_retrieve_verified_web_context), or document (use siteborne_extract_document_evidence_json), or independent reproduction of the output is required (not available). Parameters: verification_mode must be standard; independent_reproduction is defined but unavailable and is rejected before any payment challenge, never downgraded to standard. required_schema must fit SITEBORNE JSON Schema Profile 1 or the request is rejected before payment; minimum_score sets the acceptance threshold; maximum_authorized_price only constrains payment and never relaxes verification policy. Behavior: closed-world: standard mode evaluates only the supplied claims, requirements, output and evidence with no outbound retrieval, and persists governed payment, audit, job and Workflow state; an unpaid request returns payment_required; a repeated identical request with the same payment is replay-protected and is not charged twice. The verification policy and verdict rules do not depend on price or maximum_authorized_price. This service is currently production-disabled and rejects execution. Economics: exact price of $0.017 USD per request in standard mode; the payment challenge requires that amount and the charge settles at exactly that amount. independent_reproduction mode has a governed price of $0.049 USD but is not available: it is rejected before any payment challenge and never substituted. Failure: an unsupported or oversized required_schema, schema-invalid input and unavailable modes are rejected before any payment challenge; a failed verification is a normal fail or conditional verdict, not an error. Returns: claim-level and deterministic-check resu…
| Name | Type | Req | Description |
|---|---|---|---|
| allowed_evidence_sources | array | – | Up to ten permitted evidence source URIs; evidence outside this allowlist cannot satisfy source restrictions. |
| candidate_output | object | yes | Agent-produced JSON object to evaluate, bounded to 200 properties and depth 10; it is evidence under test, not trusted policy. |
| freshness_requirements | object | – | Optional maximum-age limits for evidence and schemas, each expressed in seconds. |
| maximum_authorized_price | object | – | Buyer’s decimal-safe maximum authorized price; constrains the payment requirement and never relaxes verification policy. |
| minimum_score | number | – | Minimum overall verification score from 0 through 1; raising it makes the final acceptance verdict stricter. |
| required_schema | object | yes | JSON Schema the candidate output must satisfy; it constrains validation and cannot change SITEBORNE verifier policy. |
| supplied_evidence | array | – | Up to twenty evidence objects supplied with the candidate output and bound to integrity hashes. |
| verification_contract | object | yes | Complete set of claims and deterministic checks against which the supplied candidate output is evaluated. |
| verification_mode | string | yes | Verification mode. Only standard (deterministic checks of the supplied material, no outbound retrieval) is available. independent_reproduction has a governed price but is not available: it is rejecte… |
Structured output declared, but exposes no named fields.
{"candidate_output":{"company":"Acme Corp","confidence":0.95},"maximum_authorized_price":{"amount":"0.019","currency":"USD"},"required_schema":{"properties":{"company":{"type":"string"}},"required":["company"],"type":"object"},"verification_contract":{"claims":[{"claim_id":"claim_1","expected_value":"Acme Corp","materiality":"material","predicate":"equals"}],"deterministic_requirements":[{"check":"schema_valid","requirement_id":"req_1"},{"check":"evidence_resolves","requirement_id":"req_2"}]},"verification_mode":"standard"}What is the SITEBORNE Utility Network MCP server?
SITEBORNE Utility Network is an MCP server listed in the public MCP registry as net.siteborne/utility. Machine-native utility network: verified evidence services for autonomous agents. This page covers its hosted endpoint (https://utility.siteborne.net/mcp).
Is the SITEBORNE Utility Network MCP server safe to use?
SITEBORNE Utility Network scores 73 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the SITEBORNE Utility Network MCP server expose?
SITEBORNE Utility Network exposes 10 tools: siteborne_build_company_evidence_graph, siteborne_retrieve_verified_web_context, siteborne_extract_document_evidence_json, siteborne_verify_agent_output, siteborne_build_company_evidence_graph_v3_candidate, and 5 more. Their descriptions and schemas cost roughly 6,304 tokens of context every time the server is loaded.
Does the SITEBORNE Utility Network MCP server require authentication?
No. We connected to SITEBORNE Utility Network without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the SITEBORNE Utility Network MCP server still maintained?
SITEBORNE Utility Network is still listed as active in the MCP registry. We last reached this channel on 27 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.