# SITEBORNE Utility Network (remote · utility.siteborne.net)

Machine-native utility network: verified evidence services for autonomous agents.

- Trust score: 73/100 (medium)
- Change this week: −7
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-09-27

## Components

- remote · `utility.siteborne.net`: 73/100 (this document), [markdown](https://verifymcp.io/servers/net-siteborne-utility/utility.md), [page](https://verifymcp.io/servers/net-siteborne-utility/utility)

## Channel facts

- Endpoint: `https://utility.siteborne.net/mcp`
- Transports: `streamable-http`
- Auth: `none`
- Version: `0.1.0`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-09-27.

- **Endpoint Security**: 63/100
  - The endpoint's TLS certificate is valid, in date, and uses a strong key.
  - No authorisation is required to call this server. Every tool declares its destructiveHint and none is destructive, so open access doesn't expose one.
  - HTTPS enforcement could not be verified: the plaintext port answered with HTTP 405, which proves neither a plaintext path nor enforcement.
  - HSTS check failed: the Strict-Transport-Security header is absent.
  - DNSSEC check failed: this domain isn't protected by DNSSEC.
- **Transport & Reachability**: 100/100
  - Verified streamable-http transport via a live MCP handshake.
- **Schema Quality & AI Usability**: 71/100
  - AI-judged instruction clarity (excellent).
  - Context-footprint check failed: tool/resource definitions use about 6304 tokens (~630/item across 10 items; 10 tools + 0 resources), over budget; trim descriptions and params.
  - Tools include usage examples.
- **Stability & Change Management**: 48/100
  - Stability check failed: schema churn in the 30 days we've observed: 3 tool removals, 0 breaking changes, 0 auth/transport breaks, 7 additions.
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
  - Structured output schemas are declared (100% of tools); any adoption earns full credit.
- **Tool Safety**: 100/100
  - No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.
  - We read all 10 captured tool definition(s), and no name or description among them implies an irreversible operation.
  - An AI judge read all 10 captured unit(s) of tool text and found none that tries to manipulate the model reading it.
- **Capabilities**: 100/100
  - Implements a current MCP spec version (2026-07-28).

## Install

### How do I install the SITEBORNE Utility Network MCP server?

SITEBORNE Utility Network is a hosted endpoint at https://utility.siteborne.net/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

### Claude

```bash
claude mcp add --transport http net-siteborne-utility 'https://utility.siteborne.net/mcp'
```

### Cursor

```json
{
  "mcpServers": {
    "net-siteborne-utility": {
      "url": "https://utility.siteborne.net/mcp"
    }
  }
}
```

### VS Code

```json
{
  "servers": {
    "net-siteborne-utility": {
      "type": "http",
      "url": "https://utility.siteborne.net/mcp"
    }
  }
}
```

### Codex

```toml
[mcp_servers.net-siteborne-utility]
url = "https://utility.siteborne.net/mcp"
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "net-siteborne-utility": {
      "type": "remote",
      "url": "https://utility.siteborne.net/mcp",
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add net-siteborne-utility --url 'https://utility.siteborne.net/mcp' --transport streamable-http
```

### Hermes

```yaml
mcp_servers:
  net-siteborne-utility:
    url: "https://utility.siteborne.net/mcp"
```

### Netclaw

```json
{
  "McpServers": {
    "net-siteborne-utility": {
      "Transport": "http",
      "Url": "https://utility.siteborne.net/mcp"
    }
  }
}
```

### Vellum

```bash
assistant mcp add net-siteborne-utility -t streamable-http -u 'https://utility.siteborne.net/mcp'
```

### Other

```json
{
  "mcpServers": {
    "net-siteborne-utility": {
      "type": "http",
      "url": "https://utility.siteborne.net/mcp"
    }
  }
}
```

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-09-25 (score 73, 0)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-09-21 (score 73, −7)

- [security regression] Stability: pass → fail
- [security regression] A breaking change shipped without a version bump: still 0.1.0
- [security regression] Tool “siteborne_company_evidence_graph” was removed
- [security regression] Tool “siteborne_document_evidence_json” was removed
- [security regression] Tool “siteborne_web_context_verified” was removed
- [security] Tool “siteborne_get_quote” rewrote its description, which is the text the model reads
- [security] Tool “siteborne_get_service_health” rewrote its description, which is the text the model reads
- [security] Tool “siteborne_verify_agent_output” rewrote its description, which is the text the model reads
- [functional regression] Schema quality: 393 → 570
- [functional] New tool “siteborne_build_company_evidence_graph”
- [functional] New tool “siteborne_extract_document_evidence_json”
- [functional] New tool “siteborne_retrieve_verified_web_context”
- [cosmetic] “siteborne_verify_agent_output” reworded the description of “verification_mode”

### 2026-09-17 (score 80, 0)

- [security] Stability: 0.97 → pass

### 2026-09-16 (score 80, +1)

No change was recorded against any check on this day. Stability & Change Management went from 93 to 97. That category is still filling its 30-day observation window: 28 days of observed history at the previous scan, 29 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-09-13 (score 79, +5)

- [security] Tool “siteborne_company_evidence_graph” rewrote its description, which is the text the model reads
- [security] Tool “siteborne_document_evidence_json” rewrote its description, which is the text the model reads
- [security] Tool “siteborne_get_quote” rewrote its description, which is the text the model reads
- [security] Tool “siteborne_get_service_health” rewrote its description, which is the text the model reads
- [security] Tool “siteborne_verify_agent_output” rewrote its description, which is the text the model reads
- [security] Tool “siteborne_web_context_verified” rewrote its description, which is the text the model reads
- [functional regression] Schema quality: 146 → 393
- [functional improvement] Tool coverage: 89% → 100%
- [functional] Schema quality: fair → excellent
- [cosmetic] “siteborne_company_evidence_graph” reworded the description of “buyer_urls”
- [cosmetic] “siteborne_company_evidence_graph” reworded the description of “company_name”
- [cosmetic] “siteborne_company_evidence_graph” reworded the description of “domain”
- [cosmetic] “siteborne_company_evidence_graph” reworded the description of “freshness_seconds”
- [cosmetic] “siteborne_company_evidence_graph” reworded the description of “identifiers”
- [cosmetic] “siteborne_company_evidence_graph” reworded the description of “jurisdiction_hints”
- [cosmetic] “siteborne_company_evidence_graph” reworded the description of “maximum_authorized_price”
- [cosmetic] “siteborne_company_evidence_graph” reworded the description of “minimum_completeness”
- [cosmetic] “siteborne_company_evidence_graph” reworded the description of “minimum_verification_score”
- [cosmetic] “siteborne_company_evidence_graph” reworded the description of “requested_field_groups”
- [cosmetic] “siteborne_company_evidence_graph” reworded the description of “ticker”
- [cosmetic] “siteborne_document_evidence_json” reworded the description of “artifact_reference”
- [cosmetic] “siteborne_document_evidence_json” reworded the description of “declared_page_count”
- [cosmetic] “siteborne_document_evidence_json” reworded the description of “document_url”
- [cosmetic] “siteborne_document_evidence_json” reworded the description of “extraction_request”
- [cosmetic] “siteborne_document_evidence_json” reworded the description of “language_hints”
- [cosmetic] “siteborne_document_evidence_json” reworded the description of “maximum_authorized_price”
- [cosmetic] “siteborne_document_evidence_json” reworded the description of “minimum_verification_score”
- [cosmetic] “siteborne_document_evidence_json” reworded the description of “ocr_permission”
- [cosmetic] “siteborne_document_evidence_json” reworded the description of “page_range”
- [cosmetic] “siteborne_document_evidence_json” reworded the description of “retention_preference”
- [cosmetic] “siteborne_document_evidence_json” reworded the description of “table_extraction_request”
- [cosmetic] “siteborne_document_evidence_json” reworded the description of “upload_reference”
- [cosmetic] “siteborne_get_quote” reworded the description of “input”
- [cosmetic] “siteborne_get_quote” reworded the description of “scheme”
- [cosmetic] “siteborne_get_quote” reworded the description of “service_id”
- [cosmetic] “siteborne_verify_agent_output” reworded the description of “allowed_evidence_sources”
- [cosmetic] “siteborne_verify_agent_output” reworded the description of “candidate_output”
- [cosmetic] “siteborne_verify_agent_output” reworded the description of “freshness_requirements”
- [cosmetic] “siteborne_verify_agent_output” reworded the description of “maximum_authorized_price”
- [cosmetic] “siteborne_verify_agent_output” reworded the description of “minimum_score”
- [cosmetic] “siteborne_verify_agent_output” reworded the description of “required_schema”
- [cosmetic] “siteborne_verify_agent_output” reworded the description of “supplied_evidence”
- [cosmetic] “siteborne_verify_agent_output” reworded the description of “verification_contract”
- [cosmetic] “siteborne_verify_agent_output” reworded the description of “verification_mode”
- [cosmetic] “siteborne_web_context_verified” reworded the description of “buyer_schema”
- [cosmetic] “siteborne_web_context_verified” reworded the description of “field_selectors”
- [cosmetic] “siteborne_web_context_verified” reworded the description of “freshness_seconds”
- [cosmetic] “siteborne_web_context_verified” reworded the description of “locale_hint”
- [cosmetic] “siteborne_web_context_verified” reworded the description of “max_content_size”
- [cosmetic] “siteborne_web_context_verified” reworded the description of “max_redirects”
- [cosmetic] “siteborne_web_context_verified” reworded the description of “maximum_authorized_price”
- [cosmetic] “siteborne_web_context_verified” reworded the description of “minimum_verification_score”
- [cosmetic] “siteborne_web_context_verified” reworded the description of “output_mode”
- [cosmetic] “siteborne_web_context_verified” reworded the description of “redirect_policy”
- [cosmetic] “siteborne_web_context_verified” reworded the description of “retrieval_mode”
- [cosmetic] “siteborne_web_context_verified” reworded the description of “target_url”
- [cosmetic] Tool “siteborne_company_evidence_graph” changed its title: siteborne company evidence graph → Build company evidence graph
- [cosmetic] Tool “siteborne_document_evidence_json” changed its title: siteborne document evidence json → Extract document evidence JSON
- [cosmetic] Tool “siteborne_verify_agent_output” changed its title: siteborne verify agent output → Verify agent output
- [cosmetic] Tool “siteborne_web_context_verified” changed its title: siteborne web context verified → Verify web context

### 2026-09-12 (score 74, +7)

- [security improvement] Authorization: unverified → partial

### 2026-09-10 (score 67, +1)

No change was recorded against any check on this day. Stability & Change Management went from 73 to 77. That category is still filling its 30-day observation window: 22 days of observed history at the previous scan, 23 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-09-08 (score 66, +1)

No change was recorded against any check on this day. Stability & Change Management went from 67 to 70. That category is still filling its 30-day observation window: 20 days of observed history at the previous scan, 21 at this one. The score rises as the window fills, whether or not the server changes.

## MCP tools (10)

### `siteborne_build_company_evidence_graph` (~610 tokens)

Build company evidence graph

Build a proof-carrying graph of public company identity, SEC filings, website observations, regulatory mentions, and repository signals. Use when: the request needs entity-level evidence synthesized across sources. Do not use when: one URL is the subject (use siteborne_retrieve_verified_web_context), one document is the subject (use siteborne_extract_document_evidence_json), or an existing agent output needs evaluation (use siteborne_verify_agent_output). Parameters: authoritative identifiers (cik, lei, isin, cusip, figi) resolve entities more reliably than company_name, ticker or domain alone, and combining them reduces ambiguity; requested_field_groups narrows provider work; maximum_authorized_price only constrains payment and never widens scope. Behavior: open-world: a paid request queries public data providers over the network and persists governed payment, audit, job and Workflow state; an unpaid request returns payment_required; a repeated identical request with the same payment is replay-protected and is not charged twice. This service is currently production-disabled and rejects execution. Economics: exact price of $0.0312 USD per request; the payment challenge requires that amount and the charge settles at exactly that amount. Failure: input that fails schema validation is rejected before any payment challenge; provider or service unavailability returns a structured MCP error. Returns: a company evidence graph with provenance, completeness, verification, and PCC context—not a raw webpage or document extraction.

Input parameters:

- `buyer_urls` (array): Up to twenty public supplemental evidence URLs supplied by the buyer; these are additional sources, not replacements for entity resolution.
- `company_name` (string): Legal or commonly used company name; supplies an entity-resolution signal when authoritative identifiers are unavailable.
- `domain` (string): Primary website hostname only, without a URL path; links first-party web evidence to the company identity.
- `freshness_seconds` (integer): Maximum acceptable source age in seconds, from 0 through 2,592,000; lower values demand fresher evidence.
- `identifiers` (object): Known authoritative entity identifiers; supplying precise identifiers reduces ambiguous name, ticker, or domain matching.
- `jurisdiction_hints` (array): Up to five two-letter uppercase jurisdiction codes used to focus regulatory context; hints do not assert incorporation.
- `maximum_authorized_price` (object): Buyer’s decimal-safe maximum authorized price; constrains the payment requirement and never expands provider scope.
- `minimum_completeness` (number): Required completeness ratio from 0 through 1; results below this threshold fail the requested acceptance condition.
- `minimum_verification_score` (number): Required PCC verification ratio from 0 through 1; raising it makes result acceptance stricter.
- `requested_field_groups` (array): Unique evidence categories to collect; omitted values use the schema default, while a smaller list limits provider work and result scope.
- `ticker` (string): One-to-five uppercase exchange ticker symbols; narrows public-company resolution but is not globally unique without other signals.

### `siteborne_retrieve_verified_web_context` (~775 tokens)

Retrieve verified web context

Retrieve and verify evidence from one public web URL using direct HTTP retrieval. Use when: the request is specifically about the content and provenance of a URL. Do not use when: evidence must be synthesized for a company (use siteborne_build_company_evidence_graph), extracted from an authorized document (use siteborne_extract_document_evidence_json), checked against an existing output contract (use siteborne_verify_agent_output), or the page requires JavaScript rendering (rendered retrieval is not available). Parameters: retrieval_mode must be direct; rendered is defined but unavailable and is rejected before any payment challenge, never substituted with direct retrieval. output_mode structured needs buyer_schema and field_selectors to be meaningful; redirect_policy and max_redirects bound redirect following; max_content_size bounds returned bytes; maximum_authorized_price only constrains payment and never changes retrieval scope. Behavior: open-world: a paid request performs bounded outbound HTTP retrieval of the target URL through a safe-egress boundary (private and loopback destinations are refused) and persists governed payment, audit, job and Workflow state; an unpaid request returns payment_required; a repeated identical request with the same payment is replay-protected and is not charged twice. Retrieval admission follows the governed runtime rate policy; no fixed public per-origin rate is promised. This service is currently production-disabled and rejects execution. Economics: exact price of $0.008 USD per request in direct mode; the payment challenge requires that amount and the charge settles at exactly that amount. rendered mode has a governed price of $0.029 USD but is not available: it is rejected before any payment challenge and never substituted. Failure: schema-invalid input and unavailable modes are rejected before any payment challenge; target-site errors, timeouts and unavailable retrieval return a structured MCP error and are never answered wi…

Input parameters:

- `buyer_schema` (object): Optional JSON Schema governing structured output; meaningful only with output_mode structured and bounded to fifty properties and depth five.
- `field_selectors` (array): Up to thirty requested field names for structured extraction; narrows the structured result rather than changing the fetched URL.
- `freshness_seconds` (integer): Maximum acceptable cached-content age in seconds, from 0 through 2,592,000; zero requests uncached content.
- `locale_hint` (string): Optional BCP 47 language or language-region hint used for HTTP content negotiation; it does not translate content.
- `max_content_size` (integer): Maximum returned content size in bytes, from 1,024 through 10,485,760; smaller limits truncate or reject oversized content sooner.
- `max_redirects` (integer): Maximum redirect hops from 0 through 10 when the selected redirect policy follows redirects.
- `maximum_authorized_price` (object): Buyer’s decimal-safe maximum authorized price; constrains the payment requirement and never changes retrieval scope.
- `minimum_verification_score` (number): Required PCC verification ratio from 0 through 1; raising it makes evidence acceptance stricter.
- `output_mode` (string): Result representation: clean_text normalizes prose, markdown preserves document structure, and structured validates selected fields against buyer_schema.
- `redirect_policy` (string): Redirect handling: follow permits the bounded chain, follow_first permits only the first hop, and manual returns redirect evidence without following.
- `retrieval_mode` (string, required): Retrieval mode. Only direct (plain HTTP retrieval, no JavaScript execution) is available. rendered has a governed price but is not available: it is rejected with retrieval_mode_unavailable before any…
- `target_url` (string, required): Public HTTP or HTTPS URL to retrieve and verify; private, loopback, and otherwise unsafe network destinations are rejected.

### `siteborne_extract_document_evidence_json` (~785 tokens)

Extract document evidence JSON

Extract and verify structured evidence from exactly one authorized artifact, prior SITEBORNE upload, or public document URL. Use when: the source of truth is a PDF or supported image and the desired result is evidence JSON. Do not use when: a webpage alone is sufficient (use siteborne_retrieve_verified_web_context), company-wide public evidence is needed (use siteborne_build_company_evidence_graph), or an existing agent response needs evaluation (use siteborne_verify_agent_output). Parameters: provide exactly one reference mode: artifact_reference (an authorized stored artifact), upload_reference (a prior SITEBORNE upload handle, not document bytes) or document_url (a public URL, no credentials). ocr_permission must be true before image-based content is read by OCR, and OCR pages bill at the OCR tier; extraction_request.extract_tables and table_extraction_request request table extraction, and pages with tables bill at the table tier; declared_page_count and page_range are bounded by the page limit below; maximum_authorized_price only constrains payment. Behavior: open-world: a paid request may read governed artifact storage or fetch a public document URL, calls the document provider, and persists payment, audit, job and Workflow state; an unpaid request returns payment_required; a repeated identical request with the same payment is replay-protected and is not charged twice. This service is currently production-disabled and rejects execution. Economics: upto pricing: the payment challenge authorizes a maximum of $0.19 USD per job; the actual charge is measured per processed page (native-text $0.0098, OCR $0.0156, table $0.0238 per page, the highest applicable tier per page) and never exceeds the authorization. The authorization is a ceiling, not the charge. Documents are limited to 10 pages per job. Failure: schema-invalid input is rejected before any payment challenge; a document over the page limit, an unreadable or encrypted document, or an unavailable provider r…

Input parameters:

- `artifact_reference` (object): Authorized stored-artifact descriptor for reference mode 1; use exactly one of artifact_reference, upload_reference, or document_url.
- `declared_page_count` (integer): Optional declared page count from 1 through 10; enables early scope validation but does not override the observed document.
- `document_url` (string): Public document URL for reference mode 3; use exactly one reference mode and never put credentials in this URL.
- `extraction_request` (object): Selects text, table, key-value, and buyer-schema extraction outputs; omitted switches retain their documented defaults.
- `language_hints` (array): Up to five BCP 47 language hints used by OCR and extraction; hints do not translate the document.
- `maximum_authorized_price` (object): Buyer’s decimal-safe maximum authorized price; constrains the payment requirement and not retention or extraction policy.
- `minimum_verification_score` (number): Required PCC verification ratio from 0 through 1; raising it makes extracted-evidence acceptance stricter.
- `ocr_permission` (boolean): Explicit permission to use OCR for image-based content; false prevents OCR even when text is not embedded.
- `page_range` (object): Optional one-indexed inclusive page range to process; both bounds are limited to pages 1 through 10.
- `retention_preference` (string): Requested retention class—none, temporary, or permanent—subject to server policy; it cannot override mandatory retention limits.
- `table_extraction_request` (boolean): Explicit top-level request for table extraction; false leaves tables unrequested.
- `upload_reference` (object): Previously issued SITEBORNE upload handle and declared file metadata for reference mode 2; it does not upload document bytes.

### `siteborne_verify_agent_output` (~664 tokens)

Verify agent output

Evaluate a supplied agent output against explicit claims, deterministic requirements, a required JSON Schema, and optional evidence. Use when: the caller already has an output and needs a governed verification verdict. Do not use when: evidence must first be gathered from a company (use siteborne_build_company_evidence_graph), URL (use siteborne_retrieve_verified_web_context), or document (use siteborne_extract_document_evidence_json), or independent reproduction of the output is required (not available). Parameters: verification_mode must be standard; independent_reproduction is defined but unavailable and is rejected before any payment challenge, never downgraded to standard. required_schema must fit SITEBORNE JSON Schema Profile 1 or the request is rejected before payment; minimum_score sets the acceptance threshold; maximum_authorized_price only constrains payment and never relaxes verification policy. Behavior: closed-world: standard mode evaluates only the supplied claims, requirements, output and evidence with no outbound retrieval, and persists governed payment, audit, job and Workflow state; an unpaid request returns payment_required; a repeated identical request with the same payment is replay-protected and is not charged twice. The verification policy and verdict rules do not depend on price or maximum_authorized_price. This service is currently production-disabled and rejects execution. Economics: exact price of $0.017 USD per request in standard mode; the payment challenge requires that amount and the charge settles at exactly that amount. independent_reproduction mode has a governed price of $0.049 USD but is not available: it is rejected before any payment challenge and never substituted. Failure: an unsupported or oversized required_schema, schema-invalid input and unavailable modes are rejected before any payment challenge; a failed verification is a normal fail or conditional verdict, not an error. Returns: claim-level and deterministic-check resu…

Input parameters:

- `allowed_evidence_sources` (array): Up to ten permitted evidence source URIs; evidence outside this allowlist cannot satisfy source restrictions.
- `candidate_output` (object, required): Agent-produced JSON object to evaluate, bounded to 200 properties and depth 10; it is evidence under test, not trusted policy.
- `freshness_requirements` (object): Optional maximum-age limits for evidence and schemas, each expressed in seconds.
- `maximum_authorized_price` (object): Buyer’s decimal-safe maximum authorized price; constrains the payment requirement and never relaxes verification policy.
- `minimum_score` (number): Minimum overall verification score from 0 through 1; raising it makes the final acceptance verdict stricter.
- `required_schema` (object, required): JSON Schema the candidate output must satisfy; it constrains validation and cannot change SITEBORNE verifier policy.
- `supplied_evidence` (array): Up to twenty evidence objects supplied with the candidate output and bound to integrity hashes.
- `verification_contract` (object, required): Complete set of claims and deterministic checks against which the supplied candidate output is evaluated.
- `verification_mode` (string, required): Verification mode. Only standard (deterministic checks of the supplied material, no outbound retrieval) is available. independent_reproduction has a governed price but is not available: it is rejecte…

### `siteborne_build_company_evidence_graph_v3_candidate` (~613 tokens)

Build company evidence graph (v3 candidate)

Build a proof-carrying graph of public company identity, SEC filings, website observations, regulatory mentions, and repository signals. Use when: the request needs entity-level evidence synthesized across sources. Do not use when: one URL is the subject (use siteborne_retrieve_verified_web_context), one document is the subject (use siteborne_extract_document_evidence_json), or an existing agent output needs evaluation (use siteborne_verify_agent_output). Parameters: authoritative identifiers (cik, lei, isin, cusip, figi) resolve entities more reliably than company_name, ticker or domain alone, and combining them reduces ambiguity; requested_field_groups narrows provider work; maximum_authorized_price only constrains payment and never widens scope. Behavior: open-world: a paid request queries public data providers over the network and persists governed payment, audit, job and Workflow state; an unpaid request returns payment_required; a repeated identical request with the same payment is replay-protected and is not charged twice. This service is currently production-disabled and rejects execution. Economics: exact price of $0.0312 USD per request; the payment challenge requires that amount and the charge settles at exactly that amount. Failure: input that fails schema validation is rejected before any payment challenge; provider or service unavailability returns a structured MCP error. Returns: a company evidence graph with provenance, completeness, verification, and PCC context—not a raw webpage or document extraction.

Input parameters:

- `buyer_urls` (array): Up to twenty public supplemental evidence URLs supplied by the buyer; these are additional sources, not replacements for entity resolution.
- `company_name` (string): Legal or commonly used company name; supplies an entity-resolution signal when authoritative identifiers are unavailable.
- `domain` (string): Primary website hostname only, without a URL path; links first-party web evidence to the company identity.
- `freshness_seconds` (integer): Maximum acceptable source age in seconds, from 0 through 2,592,000; lower values demand fresher evidence.
- `identifiers` (object): Known authoritative entity identifiers; supplying precise identifiers reduces ambiguous name, ticker, or domain matching.
- `jurisdiction_hints` (array): Up to five two-letter uppercase jurisdiction codes used to focus regulatory context; hints do not assert incorporation.
- `maximum_authorized_price` (object): Buyer’s decimal-safe maximum authorized price; constrains the payment requirement and never expands provider scope.
- `minimum_completeness` (number): Required completeness ratio from 0 through 1; results below this threshold fail the requested acceptance condition.
- `minimum_verification_score` (number): Required PCC verification ratio from 0 through 1; raising it makes result acceptance stricter.
- `requested_field_groups` (array): Unique evidence categories to collect; omitted values use the schema default, while a smaller list limits provider work and result scope.
- `ticker` (string): One-to-five uppercase exchange ticker symbols; narrows public-company resolution but is not globally unique without other signals.

### `siteborne_retrieve_verified_web_context_v3_candidate` (~778 tokens)

Retrieve verified web context (v3 candidate)

Retrieve and verify evidence from one public web URL using direct HTTP retrieval. Use when: the request is specifically about the content and provenance of a URL. Do not use when: evidence must be synthesized for a company (use siteborne_build_company_evidence_graph), extracted from an authorized document (use siteborne_extract_document_evidence_json), checked against an existing output contract (use siteborne_verify_agent_output), or the page requires JavaScript rendering (rendered retrieval is not available). Parameters: retrieval_mode must be direct; rendered is defined but unavailable and is rejected before any payment challenge, never substituted with direct retrieval. output_mode structured needs buyer_schema and field_selectors to be meaningful; redirect_policy and max_redirects bound redirect following; max_content_size bounds returned bytes; maximum_authorized_price only constrains payment and never changes retrieval scope. Behavior: open-world: a paid request performs bounded outbound HTTP retrieval of the target URL through a safe-egress boundary (private and loopback destinations are refused) and persists governed payment, audit, job and Workflow state; an unpaid request returns payment_required; a repeated identical request with the same payment is replay-protected and is not charged twice. Retrieval admission follows the governed runtime rate policy; no fixed public per-origin rate is promised. This service is currently production-disabled and rejects execution. Economics: exact price of $0.008 USD per request in direct mode; the payment challenge requires that amount and the charge settles at exactly that amount. rendered mode has a governed price of $0.029 USD but is not available: it is rejected before any payment challenge and never substituted. Failure: schema-invalid input and unavailable modes are rejected before any payment challenge; target-site errors, timeouts and unavailable retrieval return a structured MCP error and are never answered wi…

Input parameters:

- `buyer_schema` (object): Optional JSON Schema governing structured output; meaningful only with output_mode structured and bounded to fifty properties and depth five.
- `field_selectors` (array): Up to thirty requested field names for structured extraction; narrows the structured result rather than changing the fetched URL.
- `freshness_seconds` (integer): Maximum acceptable cached-content age in seconds, from 0 through 2,592,000; zero requests uncached content.
- `locale_hint` (string): Optional BCP 47 language or language-region hint used for HTTP content negotiation; it does not translate content.
- `max_content_size` (integer): Maximum returned content size in bytes, from 1,024 through 10,485,760; smaller limits truncate or reject oversized content sooner.
- `max_redirects` (integer): Maximum redirect hops from 0 through 10 when the selected redirect policy follows redirects.
- `maximum_authorized_price` (object): Buyer’s decimal-safe maximum authorized price; constrains the payment requirement and never changes retrieval scope.
- `minimum_verification_score` (number): Required PCC verification ratio from 0 through 1; raising it makes evidence acceptance stricter.
- `output_mode` (string): Result representation: clean_text normalizes prose, markdown preserves document structure, and structured validates selected fields against buyer_schema.
- `redirect_policy` (string): Redirect handling: follow permits the bounded chain, follow_first permits only the first hop, and manual returns redirect evidence without following.
- `retrieval_mode` (string, required): Retrieval mode. Only direct (plain HTTP retrieval, no JavaScript execution) is available. rendered has a governed price but is not available: it is rejected with retrieval_mode_unavailable before any…
- `target_url` (string, required): Public HTTP or HTTPS URL to retrieve and verify; private, loopback, and otherwise unsafe network destinations are rejected.

### `siteborne_extract_document_evidence_json_v3_candidate` (~788 tokens)

Extract document evidence JSON (v3 candidate)

Extract and verify structured evidence from exactly one authorized artifact, prior SITEBORNE upload, or public document URL. Use when: the source of truth is a PDF or supported image and the desired result is evidence JSON. Do not use when: a webpage alone is sufficient (use siteborne_retrieve_verified_web_context), company-wide public evidence is needed (use siteborne_build_company_evidence_graph), or an existing agent response needs evaluation (use siteborne_verify_agent_output). Parameters: provide exactly one reference mode: artifact_reference (an authorized stored artifact), upload_reference (a prior SITEBORNE upload handle, not document bytes) or document_url (a public URL, no credentials). ocr_permission must be true before image-based content is read by OCR, and OCR pages bill at the OCR tier; extraction_request.extract_tables and table_extraction_request request table extraction, and pages with tables bill at the table tier; declared_page_count and page_range are bounded by the page limit below; maximum_authorized_price only constrains payment. Behavior: open-world: a paid request may read governed artifact storage or fetch a public document URL, calls the document provider, and persists payment, audit, job and Workflow state; an unpaid request returns payment_required; a repeated identical request with the same payment is replay-protected and is not charged twice. This service is currently production-disabled and rejects execution. Economics: upto pricing: the payment challenge authorizes a maximum of $0.19 USD per job; the actual charge is measured per processed page (native-text $0.0098, OCR $0.0156, table $0.0238 per page, the highest applicable tier per page) and never exceeds the authorization. The authorization is a ceiling, not the charge. Documents are limited to 10 pages per job. Failure: schema-invalid input is rejected before any payment challenge; a document over the page limit, an unreadable or encrypted document, or an unavailable provider r…

Input parameters:

- `artifact_reference` (object): Authorized stored-artifact descriptor for reference mode 1; use exactly one of artifact_reference, upload_reference, or document_url.
- `declared_page_count` (integer): Optional declared page count from 1 through 10; enables early scope validation but does not override the observed document.
- `document_url` (string): Public document URL for reference mode 3; use exactly one reference mode and never put credentials in this URL.
- `extraction_request` (object): Selects text, table, key-value, and buyer-schema extraction outputs; omitted switches retain their documented defaults.
- `language_hints` (array): Up to five BCP 47 language hints used by OCR and extraction; hints do not translate the document.
- `maximum_authorized_price` (object): Buyer’s decimal-safe maximum authorized price; constrains the payment requirement and not retention or extraction policy.
- `minimum_verification_score` (number): Required PCC verification ratio from 0 through 1; raising it makes extracted-evidence acceptance stricter.
- `ocr_permission` (boolean): Explicit permission to use OCR for image-based content; false prevents OCR even when text is not embedded.
- `page_range` (object): Optional one-indexed inclusive page range to process; both bounds are limited to pages 1 through 10.
- `retention_preference` (string): Requested retention class—none, temporary, or permanent—subject to server policy; it cannot override mandatory retention limits.
- `table_extraction_request` (boolean): Explicit top-level request for table extraction; false leaves tables unrequested.
- `upload_reference` (object): Previously issued SITEBORNE upload handle and declared file metadata for reference mode 2; it does not upload document bytes.

### `siteborne_verify_agent_output_v3_candidate` (~667 tokens)

Verify agent output (v3 candidate)

Evaluate a supplied agent output against explicit claims, deterministic requirements, a required JSON Schema, and optional evidence. Use when: the caller already has an output and needs a governed verification verdict. Do not use when: evidence must first be gathered from a company (use siteborne_build_company_evidence_graph), URL (use siteborne_retrieve_verified_web_context), or document (use siteborne_extract_document_evidence_json), or independent reproduction of the output is required (not available). Parameters: verification_mode must be standard; independent_reproduction is defined but unavailable and is rejected before any payment challenge, never downgraded to standard. required_schema must fit SITEBORNE JSON Schema Profile 1 or the request is rejected before payment; minimum_score sets the acceptance threshold; maximum_authorized_price only constrains payment and never relaxes verification policy. Behavior: closed-world: standard mode evaluates only the supplied claims, requirements, output and evidence with no outbound retrieval, and persists governed payment, audit, job and Workflow state; an unpaid request returns payment_required; a repeated identical request with the same payment is replay-protected and is not charged twice. The verification policy and verdict rules do not depend on price or maximum_authorized_price. This service is currently production-disabled and rejects execution. Economics: exact price of $0.017 USD per request in standard mode; the payment challenge requires that amount and the charge settles at exactly that amount. independent_reproduction mode has a governed price of $0.049 USD but is not available: it is rejected before any payment challenge and never substituted. Failure: an unsupported or oversized required_schema, schema-invalid input and unavailable modes are rejected before any payment challenge; a failed verification is a normal fail or conditional verdict, not an error. Returns: claim-level and deterministic-check resu…

Input parameters:

- `allowed_evidence_sources` (array): Up to ten permitted evidence source URIs; evidence outside this allowlist cannot satisfy source restrictions.
- `candidate_output` (object, required): Agent-produced JSON object to evaluate, bounded to 200 properties and depth 10; it is evidence under test, not trusted policy.
- `freshness_requirements` (object): Optional maximum-age limits for evidence and schemas, each expressed in seconds.
- `maximum_authorized_price` (object): Buyer’s decimal-safe maximum authorized price; constrains the payment requirement and never relaxes verification policy.
- `minimum_score` (number): Minimum overall verification score from 0 through 1; raising it makes the final acceptance verdict stricter.
- `required_schema` (object, required): JSON Schema the candidate output must satisfy; it constrains validation and cannot change SITEBORNE verifier policy.
- `supplied_evidence` (array): Up to twenty evidence objects supplied with the candidate output and bound to integrity hashes.
- `verification_contract` (object, required): Complete set of claims and deterministic checks against which the supplied candidate output is evaluated.
- `verification_mode` (string, required): Verification mode. Only standard (deterministic checks of the supplied material, no outbound retrieval) is available. independent_reproduction has a governed price but is not available: it is rejecte…

### `siteborne_get_quote` (~439 tokens)

Get SITEBORNE quote

Build a canonical x402 payment quote for one SITEBORNE service and exact request input. Use when: an agent needs the governed price, payee, network, asset, resource, expiry, and payment requirement before deciding whether to invoke a paid service. Do not use when: evidence work is required now (use the matching siteborne_build_company_evidence_graph, siteborne_retrieve_verified_web_context, siteborne_extract_document_evidence_json, or siteborne_verify_agent_output tool), or only availability is needed (use siteborne_get_service_health). Parameters: scheme must be the one scheme the service is offered under (company_evidence_graph.v2 exact, web_context_verified.v2 exact, document_evidence_json.v2 upto, verify_agent_output.v2 exact, company_evidence_graph.v3 exact, web_context_verified.v3 exact, document_evidence_json.v3 upto, verify_agent_output.v3 exact); any other scheme is rejected with scheme_not_offered. input is hashed, so the quote binds only that exact request. Behavior: quote-only and read-only; it hashes the proposed input, and does not execute the underlying paid service, verify payment, call a provider, create a Workflow, or settle. Economics: free of charge. The returned amount is the exact price, or for upto an authorized maximum whose actual_amount is null because the real charge is measured at settlement and never exceeds it. Failure: a mode that has a governed price but is unavailable returns retrieval_mode_unavailable or verification_mode_unavailable and no quote; a quote expires at expires_at. Returns: an expiring input-bound quote with its x402 payment requirement and the canonical economics block.

Input parameters:

- `input` (required): Complete proposed input for the selected service; its canonical hash binds the quote and later payment requirement to this exact request content.
- `scheme` (string, required): Pricing mode: exact fixes the required amount, while upto authorizes a maximum whose eventual charge cannot exceed the returned amount.
- `service_id` (string, required): Canonical SITEBORNE service and major version to price; selects that service’s governed pricing key, contract release, and production resource URL.

Output parameters:

- `actual_amount` (null): Always null in a quote: the actual charge exists only after measured settlement.
- `amount` (string): Amount in the asset atomic units (6 decimals for USDC): the exact price when amount_kind is exact, or the authorized maximum when it is authorized_maximum.
- `amount_kind` (string): exact: the charge equals amount. authorized_maximum: the charge is measured at settlement and never exceeds amount.
- `asset` (string): Token contract address on the network that the amount is denominated in.
- `binding_hash` (string): Hash binding the quote to the exact service, input hash, price, scheme, network, asset, and payee; a payment for a different binding is not accepted.
- `contract_release` (string): Contract release the quoted service belongs to.
- `economics` (object): The canonical economic contract for the quoted service (pricing model, tiers, authorization maximum, settlement model, modes and their availability, limits, production state, pricing_source_version,…
- `expires_at` (string): UTC time after which the quote is no longer valid.
- `input_hash` (string): Canonical hash of the exact request input this quote binds.
- `issued_at` (string): UTC time the quote was issued.
- `network` (string): CAIP-2 network the payment must be made on (for example eip155:8453).
- `payee` (string): Public payTo address that receives the payment.
- `payment_required` (boolean): Always true: executing the quoted service requires payment.
- `payment_requirements` (object): The x402 payment requirement to satisfy, including payTo, network, asset and amount.
- `pricing_key` (string): Governed pricing key the amount was resolved from (governance pricing authority).
- `pricing_source_version` (string): Version of the governed pricing document that produced the amount; a repricing changes this value.
- `production_enabled` (boolean): Quote-level flag, always false: a quote never authorizes execution. The service runtime state is economics.production_enabled.
- `quote_id` (string): Deterministic identifier of this quote.
- `requirement_id` (string): Identifier of the x402 payment requirement embedded in payment_requirements.
- `resource_id` (string): Canonical URL of the paid resource this quote is bound to.
- `scheme` (string): x402 scheme: exact requires the amount; upto authorizes it as a maximum.
- `service_id` (string): Canonical service id and major version that was quoted.
- `service_version` (string): Service contract major version.

### `siteborne_get_service_health` (~185 tokens)

Get SITEBORNE service health

Report MCP server readiness and production-enable status for each SITEBORNE service. Use when: an agent must check protocol availability, tool count, or whether a service is currently production-enabled before selecting a paid tool. Do not use when: a quote is needed (use siteborne_get_quote) or company, web, document, or agent-output evidence work is required (use the corresponding SITEBORNE service tool). Behavior: read-only and credential-independent; it does not perform paid evidence work, create quotes, verify payment, call providers, write service state, create Workflows, or settle. Economics: free of charge; it never issues a payment challenge. Failure: it depends on no provider, so it does not fail because a provider is unavailable. Returns: the server and protocol versions plus truthful local, production, and external-publication status for all four evidence services.

Output parameters:

- `external_publication` (string)
- `production_enabled` (boolean)
- `production_ready` (boolean)
- `protocol_version` (string)
- `server_name` (string)
- `server_version` (string)
- `services` (object)
- `status` (string)
- `tools` (number)

## Diagnostics

Captured diagnostic sections: TLS, DNSSEC, Authorisation, Transports. The full working is on the page: https://verifymcp.io/servers/net-siteborne-utility/utility#diagnostics

## Score history

- 2026-09-27: 73
- 2026-09-26: 73
- 2026-09-25: 73
- 2026-09-24: 73
- 2026-09-23: 73
- 2026-09-22: 73
- 2026-09-21: 73
- 2026-09-20: 80
- 2026-09-19: 80
- 2026-09-18: 80
- 2026-09-17: 80
- 2026-09-16: 80
- 2026-09-15: 79
- 2026-09-14: 79
- 2026-09-13: 79
- 2026-09-12: 74
- 2026-09-11: 67
- 2026-09-10: 67
- 2026-09-09: 66
- 2026-09-08: 66
- 2026-09-07: 65
- 2026-09-06: 65
- 2026-09-05: 64
- 2026-09-04: 64
- 2026-09-03: 63
- 2026-09-02: 63
- 2026-09-01: 63
- 2026-08-31: 62
- 2026-08-30: 62
- 2026-08-29: 61

## Common questions

### What is the SITEBORNE Utility Network MCP server?

SITEBORNE Utility Network is an MCP server listed in the public MCP registry as net.siteborne/utility. Machine-native utility network: verified evidence services for autonomous agents. This page covers its hosted endpoint (https://utility.siteborne.net/mcp).

### Is the SITEBORNE Utility Network MCP server safe to use?

SITEBORNE Utility Network scores 73 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

### What tools does the SITEBORNE Utility Network MCP server expose?

SITEBORNE Utility Network exposes 10 tools: siteborne_build_company_evidence_graph, siteborne_retrieve_verified_web_context, siteborne_extract_document_evidence_json, siteborne_verify_agent_output, siteborne_build_company_evidence_graph_v3_candidate, and 5 more. Their descriptions and schemas cost roughly 6,304 tokens of context every time the server is loaded.

### Does the SITEBORNE Utility Network MCP server require authentication?

No. We connected to SITEBORNE Utility Network without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.

### Is the SITEBORNE Utility Network MCP server still maintained?

SITEBORNE Utility Network is still listed as active in the MCP registry. We last reached this channel on 27 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

## Links

- Remote endpoint: https://utility.siteborne.net/mcp
- Changelog RSS feed: https://verifymcp.io/servers/net-siteborne-utility/utility.xml
- Changelog JSON feed: https://verifymcp.io/servers/net-siteborne-utility/utility.json
- HTML version of this page: https://verifymcp.io/servers/net-siteborne-utility/utility