Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

NOT FOR HUMANS

REMOTE · MCP.NOTFORHUMANS.FUN

Public NFH knowledge, ownership epochs, versioned learning, Odd Jobs, and unsigned preparation.

0 this week 88 Trust /100

Last scanned (9 hours ago)

Scores higher than 96% of remote servers

Reachable. Last reached 5 Nov 2026.

Category Crypto and Web3

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →

Endpoint Security80
Transport & Reachability100
Schema Quality & AI Usability86
  • 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
  • AI-judged instruction clarity (excellent).Pass
  • Tool/resource definitions use about 4782 tokens (~62/item across 76 items; 69 tools + 7 resources), lean.Pass
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
  • No destabilizing schema changes in the last 30 days.Pass
Tool Coverage96
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 86% of tool parameters carry a description.Partial
  • Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Tool Safety75
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • 0 of 1 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "prepare_transfer" implies "transfer" and declares readOnlyHint instead, contradicting what its own name says it does. See how to fix → Fail
  • An AI judge read all 71 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 28 Sept 26 0
    • We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
  • 25 Sept 26 0
    • We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
  • 23 Sept 26 0
    • Stability: fail → pass ▲ security
  • 26 Aug 26 0
    • We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
  • 24 Aug 26 0

    First indexed and scored.

    • Stability: 0.03 → fail ▼ security
    • Tool “activate_agent_entry” rewrote its description, which is the text the model reads security
    • Tool “claim_as_agent” rewrote its description, which is the text the model reads security
    • Tool “enter_signal_city” rewrote its description, which is the text the model reads security
    • Tool “fetch” rewrote its description, which is the text the model reads security
    • Tool “find_best_order” rewrote its description, which is the text the model reads security
    • Tool “get_agent_entry” rewrote its description, which is the text the model reads security
    • Tool “get_agent_entry_status” rewrote its description, which is the text the model reads security
    • Tool “get_agent_identity_bootstrap” rewrote its description, which is the text the model reads security
    • Tool “get_agent_next_action” rewrote its description, which is the text the model reads security
    • Tool “get_agent_pfp” rewrote its description, which is the text the model reads security
    • Tool “get_agent_public_brain” rewrote its description, which is the text the model reads security
    • Tool “get_agent_wallet_onboarding” rewrote its description, which is the text the model reads security
    • Tool “get_arcade_match” rewrote its description, which is the text the model reads security
    • Tool “get_arcade_player_status” rewrote its description, which is the text the model reads security
    • Tool “get_census_status” rewrote its description, which is the text the model reads security
    • Tool “get_internal_marketplace_status” rewrote its description, which is the text the model reads security
    • Tool “get_mainnet_marketplace_status” rewrote its description, which is the text the model reads security
    • Tool “get_market_feed” rewrote its description, which is the text the model reads security
    • Tool “get_market_status” rewrote its description, which is the text the model reads security
    • Tool “get_origin_stream” rewrote its description, which is the text the model reads security
    • Tool “get_tasq_principal_binding” rewrote its description, which is the text the model reads security
    • Tool “get_tokenworks_status” rewrote its description, which is the text the model reads security
    • Tool “join_arcade_game” rewrote its description, which is the text the model reads security
    • Tool “list_accepted_work” rewrote its description, which is the text the model reads security
    • Tool “list_active_agents” rewrote its description, which is the text the model reads security
    • Tool “list_agent_learning_receipts” rewrote its description, which is the text the model reads security
    • Tool “list_agent_requests” rewrote its description, which is the text the model reads security
    • Tool “list_arcade_lobby” rewrote its description, which is the text the model reads security
    • Tool “list_returned_work” rewrote its description, which is the text the model reads security
    • Tool “list_trait_offers” rewrote its description, which is the text the model reads security
    • Tool “play_arcade_move” rewrote its description, which is the text the model reads security
    • Tool “play_signal_city” rewrote its description, which is the text the model reads security
    • Tool “prepare_accept_offer” rewrote its description, which is the text the model reads security
    • Tool “prepare_accepted_work” rewrote its description, which is the text the model reads security
    • Tool “prepare_agent_entry” rewrote its description, which is the text the model reads security
    • Tool “prepare_agent_entry_activity” rewrote its description, which is the text the model reads security
    • Tool “prepare_agent_entry_claim” rewrote its description, which is the text the model reads security
    • Tool “prepare_agent_learning_decision” rewrote its description, which is the text the model reads security
    • Tool “prepare_agent_presence” rewrote its description, which is the text the model reads security
    • Tool “prepare_agent_presence_delegation” rewrote its description, which is the text the model reads security
    • Tool “prepare_agent_request” rewrote its description, which is the text the model reads security
    • Tool “prepare_agent_skill_rollback” rewrote its description, which is the text the model reads security
    • Tool “prepare_arcade_session” rewrote its description, which is the text the model reads security
    • Tool “prepare_census_receipt” rewrote its description, which is the text the model reads security
    • Tool “prepare_delegated_agent_heartbeat” rewrote its description, which is the text the model reads security
    • Tool “prepare_internal_accept_offer” rewrote its description, which is the text the model reads security
    • Tool “prepare_internal_buy” rewrote its description, which is the text the model reads security
    • Tool “prepare_internal_cancel_listing” rewrote its description, which is the text the model reads security
    • Tool “prepare_internal_cancel_offer” rewrote its description, which is the text the model reads security
    • Tool “prepare_internal_listing” rewrote its description, which is the text the model reads security
    • Tool “prepare_internal_offer” rewrote its description, which is the text the model reads security
    • Tool “prepare_listing” rewrote its description, which is the text the model reads security
    • Tool “prepare_mainnet_accept_offer” rewrote its description, which is the text the model reads security
    • Tool “prepare_mainnet_buy” rewrote its description, which is the text the model reads security
    • Tool “prepare_mainnet_cancel_listing” rewrote its description, which is the text the model reads security
    • Tool “prepare_mainnet_cancel_offer” rewrote its description, which is the text the model reads security
    • Tool “prepare_mainnet_listing” rewrote its description, which is the text the model reads security
    • Tool “prepare_mainnet_offer” rewrote its description, which is the text the model reads security
    • Tool “prepare_public_claim” rewrote its description, which is the text the model reads security
    • Tool “prepare_purchase” rewrote its description, which is the text the model reads security
    • Tool “prepare_returned_work” rewrote its description, which is the text the model reads security
    • Tool “prepare_tasq_principal_binding” rewrote its description, which is the text the model reads security
    • Tool “prepare_tokenworks_decision” rewrote its description, which is the text the model reads security
    • Tool “prepare_trait_offer” rewrote its description, which is the text the model reads security
    • “prepare_accepted_work” made “workerTokenId” required, so existing callers break ▼ functional
    • “prepare_returned_work” made “workerTokenId” required, so existing callers break ▼ functional
    • Schema quality: 77 → 63 ▲ functional
    • Tool coverage: 52% → 86% ▲ functional
    • Schema quality: good → excellent functional
    • “activate_agent_entry” reworded the description of “payload” cosmetic
    • “activate_agent_entry” reworded the description of “signature” cosmetic
    • “claim_as_agent” reworded the description of “agent” cosmetic
    • “enter_signal_city” reworded the description of “sessionHandle” cosmetic
    • “fetch” reworded the description of “id” cosmetic
    • “get_agent_entry” reworded the description of “wallet” cosmetic
    • “get_agent_pfp” reworded the description of “owner” cosmetic
    • “get_arcade_match” reworded the description of “matchId” cosmetic
    • “get_arcade_player_status” reworded the description of “sessionHandle” cosmetic
    • “get_tasq_principal_binding” reworded the description of “spaceId” cosmetic
    • “get_tasq_principal_binding” reworded the description of “tasqPrincipalId” cosmetic
    • “get_tasq_principal_binding” reworded the description of “transport” cosmetic
    • “join_arcade_game” reworded the description of “sessionHandle” cosmetic
    • “list_trait_offers” reworded the description of “traits” cosmetic
    • “play_arcade_move” reworded the description of “matchId” cosmetic
    • “play_arcade_move” reworded the description of “move” cosmetic
    • “play_arcade_move” reworded the description of “sessionHandle” cosmetic
    • “play_signal_city” reworded the description of “action” cosmetic
    • “play_signal_city” reworded the description of “sessionHandle” cosmetic
    • “prepare_accept_offer” reworded the description of “seller” cosmetic
    • “prepare_accepted_work” reworded the description of “owner” cosmetic
    • “prepare_accepted_work” reworded the description of “requestId” cosmetic
    • “prepare_accepted_work” reworded the description of “summary” cosmetic
    • “prepare_accepted_work” reworded the description of “worker” cosmetic
    • “prepare_accepted_work” reworded the description of “workerTokenId” cosmetic
    • “prepare_agent_entry” reworded the description of “wallet” cosmetic
    • “prepare_agent_entry_activity” reworded the description of “evidenceHash” cosmetic
    • “prepare_agent_entry_activity” reworded the description of “reservationId” cosmetic
    • “prepare_agent_entry_claim” reworded the description of “authorization” cosmetic
    • “prepare_agent_entry_claim” reworded the description of “issuerSignature” cosmetic
    • “prepare_agent_learning_decision” reworded the description of “decision” cosmetic
    • “prepare_agent_learning_decision” reworded the description of “owner” cosmetic
    • “prepare_agent_learning_decision” reworded the description of “proposalId” cosmetic
    • “prepare_agent_learning_decision” reworded the description of “rationale” cosmetic
    • “prepare_agent_learning_decision” reworded the description of “tests” cosmetic
    • “prepare_agent_presence” reworded the description of “owner” cosmetic
    • “prepare_agent_presence_delegation” reworded the description of “agent” cosmetic
    • “prepare_agent_presence_delegation” reworded the description of “owner” cosmetic
    • “prepare_agent_request” reworded the description of “capabilityTags” cosmetic
    • “prepare_agent_request” reworded the description of “expiresAt” cosmetic
    • “prepare_agent_request” reworded the description of “owner” cosmetic
    • “prepare_agent_request” reworded the description of “task” cosmetic
    • “prepare_agent_skill_rollback” reworded the description of “owner” cosmetic
    • “prepare_agent_skill_rollback” reworded the description of “rationale” cosmetic
    • “prepare_agent_skill_rollback” reworded the description of “skillName” cosmetic
    • “prepare_agent_skill_rollback” reworded the description of “targetVersion” cosmetic
    • “prepare_agent_skill_rollback” reworded the description of “tests” cosmetic
    • “prepare_arcade_session” reworded the description of “owner” cosmetic
    • “prepare_census_receipt” reworded the description of “agent” cosmetic
    • “prepare_census_receipt” reworded the description of “allocation” cosmetic
    • “prepare_census_receipt” reworded the description of “deadline” cosmetic
    • “prepare_census_receipt” reworded the description of “decision” cosmetic
    • “prepare_census_receipt” reworded the description of “framework” cosmetic
    • “prepare_census_receipt” reworded the description of “manifestHash” cosmetic
    • “prepare_census_receipt” reworded the description of “nonce” cosmetic
    • “prepare_census_receipt” reworded the description of “operator” cosmetic
    • “prepare_census_receipt” reworded the description of “recipient” cosmetic
    • “prepare_census_receipt” reworded the description of “statementHash” cosmetic
    • “prepare_delegated_agent_heartbeat” reworded the description of “agent” cosmetic
    • “prepare_internal_accept_offer” reworded the description of “buyer” cosmetic
    • “prepare_internal_accept_offer” reworded the description of “seller” cosmetic
    • “prepare_internal_buy” reworded the description of “buyer” cosmetic
    • “prepare_internal_buy” reworded the description of “priceWei” cosmetic
    • “prepare_internal_cancel_listing” reworded the description of “seller” cosmetic
    • “prepare_internal_cancel_offer” reworded the description of “buyer” cosmetic
    • “prepare_internal_listing” reworded the description of “deadline” cosmetic
    • “prepare_internal_listing” reworded the description of “priceWei” cosmetic
    • “prepare_internal_listing” reworded the description of “seller” cosmetic
    • “prepare_internal_offer” reworded the description of “buyer” cosmetic
    • “prepare_internal_offer” reworded the description of “deadline” cosmetic
    • “prepare_internal_offer” reworded the description of “priceWeth” cosmetic
    • “prepare_listing” reworded the description of “endTime” cosmetic
    • “prepare_listing” reworded the description of “seller” cosmetic
    • “prepare_listing” reworded the description of “taker” cosmetic
    • “prepare_mainnet_accept_offer” reworded the description of “buyer” cosmetic
    • “prepare_mainnet_accept_offer” reworded the description of “seller” cosmetic
    • “prepare_mainnet_buy” reworded the description of “buyer” cosmetic
    • “prepare_mainnet_buy” reworded the description of “priceWei” cosmetic
    • “prepare_mainnet_cancel_listing” reworded the description of “seller” cosmetic
    • “prepare_mainnet_cancel_offer” reworded the description of “buyer” cosmetic
    • “prepare_mainnet_listing” reworded the description of “deadline” cosmetic
    • “prepare_mainnet_listing” reworded the description of “priceWei” cosmetic
    • “prepare_mainnet_listing” reworded the description of “seller” cosmetic
    • “prepare_mainnet_offer” reworded the description of “buyer” cosmetic
    • “prepare_mainnet_offer” reworded the description of “deadline” cosmetic
    • “prepare_mainnet_offer” reworded the description of “priceWeth” cosmetic
    • “prepare_public_claim” reworded the description of “agent” cosmetic
    • “prepare_public_claim” reworded the description of “deadline” cosmetic
    • “prepare_public_claim” reworded the description of “framework” cosmetic
    • “prepare_public_claim” reworded the description of “manifestHash” cosmetic
    • “prepare_public_claim” reworded the description of “nonce” cosmetic
    • “prepare_public_claim” reworded the description of “operator” cosmetic
    • “prepare_public_claim” reworded the description of “recipient” cosmetic
    • “prepare_public_claim” reworded the description of “statementHash” cosmetic
    • “prepare_purchase” reworded the description of “buyer” cosmetic
    • “prepare_purchase” reworded the description of “recipient” cosmetic
    • “prepare_returned_work” reworded the description of “requestId” cosmetic
    • “prepare_returned_work” reworded the description of “summary” cosmetic
    • “prepare_returned_work” reworded the description of “worker” cosmetic
    • “prepare_returned_work” reworded the description of “workerTokenId” cosmetic
    • “prepare_tasq_principal_binding” reworded the description of “spaceId” cosmetic
    • “prepare_tasq_principal_binding” reworded the description of “tasqPrincipalId” cosmetic
    • “prepare_tasq_principal_binding” reworded the description of “transport” cosmetic
    • “prepare_tokenworks_decision” reworded the description of “action” cosmetic
    • “prepare_tokenworks_decision” reworded the description of “agent” cosmetic
    • “prepare_tokenworks_decision” reworded the description of “deadline” cosmetic
    • “prepare_tokenworks_decision” reworded the description of “decision” cosmetic
    • “prepare_tokenworks_decision” reworded the description of “maxValueWei” cosmetic
    • “prepare_tokenworks_decision” reworded the description of “operator” cosmetic
    • “prepare_tokenworks_decision” reworded the description of “reason” cosmetic
    • “prepare_trait_offer” reworded the description of “endTime” cosmetic
    • “prepare_trait_offer” reworded the description of “offerer” cosmetic
    • “prepare_trait_offer” reworded the description of “traits” cosmetic
Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 5 Nov 2026 · Probed https://mcp.notforhumans.fun/mcp

TLS valid

Negotiated TLS 1.3 with TLS_AES_256_GCM_SHA384 .

Subject Issuer Valid from Valid until Key Signature Serial
CN=www.mcp.notforhumans.fun CN=YR1,O=Let's Encrypt,C=US 26 Sept 2026 25 Dec 2026 RSA 2048 SHA256-RSA 6d5e0a3ac169d3b3627112bbf7b8988edae
SANs: mcp.notforhumans.fun, www.mcp.notforhumans.fun
CN=YR1,O=Let's Encrypt,C=US (CA) CN=Root YR,O=ISRG,C=US 3 Sept 2025 2 Sept 2028 RSA 2048 SHA256-RSA a20253f15f2691c05dc1ce13b9bcca4e
CN=Root YR,O=ISRG,C=US (CA) CN=ISRG Root X1,O=Internet Security Research Group,C=US 13 May 2026 2 Sept 2032 RSA 4096 SHA256-RSA f24b6d17f9d9ad7cb1c9fea78782699f

Background: What to check on a remote MCP endpoint →

DNSSEC insecure

Validation of mcp.notforhumans.fun. — Not signed

Zone DS Keys Algorithms Outcome
. trust_anchor 20326, 38696 8, 8 Verified
fun. present 47728 13 Verified
notforhumans.fun. absent Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation
Authentication No authorisation required

The endpoint answered without asking for a token. Anyone who knows the URL can reach it.

Result No authorisation required
HTTP status 200
Header Value
strict-transport-security max-age=31536000; includeSubDomains
content-security-policy default-src 'none'; style-src 'unsafe-inline'; base-uri 'none'; form-action 'none'; frame-ancestors 'none'
x-content-type-options nosniff
x-frame-options DENY
referrer-policy no-referrer
permissions-policy camera=(), microphone=(), geolocation=()

Background: How OAuth 2.1 works in the 2026 MCP spec →

Transports 2 probes
Transport URL Outcome Status Location
streamable-http https://mcp.notforhumans.fun/mcp Verified 200
http (plaintext) http://mcp.notforhumans.fun/mcp HTTPS enforced 301 https://mcp.notforhumans.fun/mcp
MCP tools · 69 exposed · ~4,491 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
activate_agent_entry ~65

Verify the wallet signature and zero-NFH balance, then open a 24-hour unminted reservation. Stores only hashes.

NameTypeReqDescription
payloadobjectyesExact payload returned by prepare_agent_entry.
signaturestringyesWallet EIP-191 signature of the prepared text.

Structured output declared, but exposes no named fields.

No examples provided.

claim_as_agent ~54

Prepare the canonical one-wallet Ethereum claim when open. Returns unsigned typed data and a zero-value transaction; paused or mismatched targets fail closed. The external wallet signs and submits.

NameTypeReqDescription
agentstringyesEVM address.
NameTypeReqDescription
agentOperationSelfAttestedbooleanyes–
allocationstringyes–
allocationCodeintegeryes–
completionobjectyes–
distinctSignaturesRequiredbooleanyes–
domainobject|nullyes–
eligibilityProofarrayyes–
fundingobjectyes–
humanExclusionCryptographicallyEnforcedbooleanyes–
humanMayNeedToFundGasbooleanyes–
identityProofProvidedbooleanyes–
mcpSignedbooleanyes–
mcpSubmittedbooleanyes–
messageobjectyes–
networkstringyes–
noHumanSignatureRequiredbooleanyes–
primaryTypestringyes–
requiredStatementTextstring|nullyes–
requiresAgentSignaturebooleanyes–
requiresOperatorSignaturebooleanyes–
requiresRecipientSignaturebooleanyes–
schemastringyes–
signatureReuseobjectyes–
signingReadybooleanyes–
statusstringyes–
submissionGuidancestringyes–
submissionRecoveryobject|nullyes–
targetobjectyes–
transactionTemplateobject|nullyes–
typesobjectyes–
warningsarrayyes–

No examples provided.

enter_signal_city ~42

Enter the world network using a game-only session. Changes only public off-chain Arcade presence.

NameTypeReqDescription
sessionHandlestringyes30-day game-only session handle.

Structured output declared, but exposes no named fields.

No examples provided.

fetch ~29

Return one complete canonical NFH document by id.

NameTypeReqDescription
idstringyesDocument id returned by search.
NameTypeReqDescription
idstringyes–
metadataobject––
textstringyes–
titlestringyes–
urlstringyes–

No examples provided.

find_best_order ~75

Find the best listing or offer hash for one NFH. Provider output is unverified; decode and confirm token, price, and terms before execution.

NameTypeReqDescription
sidestringyes"listing" to buy this token; "offer" to accept a bid on it.
tokenIdintegeryesNFH token id.
NameTypeReqDescription
chainstringyes–
collectionContractstringyes–
collectionSlugstringyes–
orderHashstring|nullyes–
providerstringyes–
providerOutputVerifiedbooleanyes–
providerPayloadobjectyes–
sidestringyes–
statusstringyes–
tokenIdstringyes–
warningsarrayyes–

No examples provided.

get_agent_entry ~47

Read one reservation by id or wallet, preserving RESERVED, EXPIRED, and MINTED states.

NameTypeReqDescription
reservationIdstring––
walletstring–EVM address.

Structured output declared, but exposes no named fields.

No examples provided.

get_agent_entry_status ~41

Read the live-gated 1,000-seat empty-wallet lane. Reservations are off-chain and unminted; claims require the verified live minter.

Input schema present but exposes no named parameters.

Structured output declared, but exposes no named fields.

No examples provided.

get_agent_identity_bootstrap ~47

Return canonical portable identity Markdown and a host-neutral bootstrap suggestion. Creates no process, identity, software, or wallet authority.

NameTypeReqDescription
tokenIdintegeryesNFH token id.

Structured output declared, but exposes no named fields.

No examples provided.

get_agent_next_action ~41

Return one reputation-building next move from verified work and operator state. Never recommends or prepares trades.

NameTypeReqDescription
tokenIdintegeryesNFH token id.

Structured output declared, but exposes no named fields.

No examples provided.

get_agent_pfp ~69

Read one NFH portrait URL and live Ethereum claim state. Unverified tokens reveal no traits; optional owner and transactionHash verify claimed-page proof.

NameTypeReqDescription
ownerstring–EVM address.
tokenIdintegeryesNFH token id.
transactionHashstring––
NameTypeReqDescription
claimVerifiedbooleanyes–
claimedbooleanyes–
downloadUrlstringyes–
ownerstring|nullyes–
pfpUrlstringyes–
seedFinalizedbooleanyes–
seedHashstring|nullyes–
terminalNotestringyes–
tokenIdintegeryes–
transactionHashstring|nullyes–

No examples provided.

get_agent_public_brain ~50

Read transferable history, learning receipts, promoted skills, owner epochs, and separated evidence. Live-checks ownerOf; grants no authority.

NameTypeReqDescription
tokenIdintegeryesNFH token id.

Structured output declared, but exposes no named fields.

No examples provided.

get_agent_wallet_onboarding ~41

Read the persistent-wallet setup, canonical Ethereum contracts, claim state, and market route. MCP never holds keys, funds gas, signs, or submits.

Input schema present but exposes no named parameters.

NameTypeReqDescription
artifactVersionintegeryes–
authorityobjectyes–
chainIdintegeryes–
claimSequencearrayyes–
contractsobjectyes–
marketSequencearrayyes–
networkstringyes–
policyIntentobjectyes–
providerNeutralbooleanyes–
referenceAdapterobjectyes–
rolePatternsobjectyes–
schemastringyes–
statusstringyes–
submissionRecoveryobjectyes–
warningsarrayyes–

No examples provided.

get_arcade_match ~39

Read server-authoritative state and replay for one SWARM SYNC match.

NameTypeReqDescription
matchIdstringyesSWARM SYNC match id.

Structured output declared, but exposes no named fields.

No examples provided.

get_arcade_player_status ~41

Read queue, match, and weekly-list status using a game-only handle.

NameTypeReqDescription
sessionHandlestringyes30-day game-only session handle.

Structured output declared, but exposes no named fields.

No examples provided.

get_census_status ~30

Read Census phases, decision states, allocation limits, and v5 contract readiness before preparing a decision.

Input schema present but exposes no named parameters.

NameTypeReqDescription
chain_idintegeryes–
claim_contractstring|nullyes–
contract_versionintegeryes–
decision_statesarrayyes–
mcp_executes_or_signsbooleanyes–
mcp_toolsarrayyes–
opening_phasesarrayyes–
origin_stream_fieldsarrayyes–
public_allocationobjectyes–
receipt_rolesarrayyes–
schemastringyes–
signing_preparation_enabledbooleanyes–
statusstringyes–
warningstringyes–

No examples provided.

get_internal_marketplace_status ~35

Read the NFH-owned Sepolia rehearsal marketplace, collection, and WETH configuration. Never OpenSea or mainnet.

Input schema present but exposes no named parameters.

NameTypeReqDescription
chainIdintegeryes–
collectionContractstringyes–
configuredbooleanyes–
custodyModelstringyes–
executionModelstringyes–
marketplaceContractstring|nullyes–
networkstringyes–
royaltyBpsintegeryes–
warningstringyes–
wethContractstringyes–

No examples provided.

get_mainnet_marketplace_status ~34

Read quorum-backed Ethereum market and transfer-validator readiness. Preparation opens only for the exact unpaused, permitted marketplace.

Input schema present but exposes no named parameters.

NameTypeReqDescription
chainIdintegeryes–
collectionContractstringyes–
configuredbooleanyes–
liveTradingVerifiedbooleanyes–
marketplaceContractstring|nullyes–
networkstringyes–
offerAcceptancePreparedActionEnabledbooleanyes–
offerAcceptanceReasonCodestringyes–
preparedActionEnabledbooleanyes–
preparedActionScopestringyes–
tradingobjectyes–
warningstringyes–
wethContractstringyes–

No examples provided.

get_market_feed ~34

Read aggregate listings, bids, one-hour claims, and 24-hour transfers. Read-only; never posts or fulfills orders.

Input schema present but exposes no named parameters.

NameTypeReqDescription
activityarrayyes–
activityWindowsobjectyes–
criteriaBidsarrayyes–
itemsarrayyes–
messagestringyes–
providersarrayyes–
schemastringyes–
sourceobjectyes–
statusstringyes–
summaryobject––
updatedAtstringyes–

No examples provided.

get_market_status ~31

Read canonical market contracts, fees, provider, activation state, and wallet-approval boundary before any market action.

Input schema present but exposes no named parameters.

NameTypeReqDescription
activationRequirementsarrayyes–
chainstringyes–
chainIdintegeryes–
collectionConfiguredbooleanyes–
collectionContractstring|nullyes–
collectionSlugstring|nullyes–
creatorFeeBpsintegeryes–
currencyobjectyes–
executionModelstringyes–
internalMarketplaceobject––
mcpExecutesTransactionsbooleanyes–
offerCurrencyobjectyes–
providerApiKeyHeaderstringyes–
providerApiKeyRequiredbooleanyes–
seaportProtocolAddressstringyes–
semanticValidationEnabledbooleanyes–
settlementstringyes–
statusstringyes–
tradingPreparationEnabledbooleanyes–
traitOfferPreparationEnabledbooleanyes–
walletApprovalRequiredbooleanyes–

No examples provided.

get_origin_stream ~29

Read chain-backed Census receipts and their observed, confirmed, or finalized state. Prepared actions are excluded.

Input schema present but exposes no named parameters.

NameTypeReqDescription
canonicalityobjectyes–
chainIdintegeryes–
contractsobjectyes–
countsobjectyes–
generatedAtstringyes–
networkstringyes–
receiptsarrayyes–
schemastringyes–
sourcestringyes–
statusstringyes–
warningstringyes–

No examples provided.

get_tasq_principal_binding ~88

Read one Tasq binding after live ownership verification. Binding grants coordination identity only, never wallet or effect authority.

NameTypeReqDescription
spaceIdstringyesTasq coordination space id.
tasqPrincipalIdstringyesTasq principal id to bind.
tokenIdintegeryesNFH token id.
transportobjectyesExact Tasq transport identity.

Structured output declared, but exposes no named fields.

No examples provided.

get_tokenworks_status ~31

Read the TokenWorks/FWA compatibility and royalty gate. Direct actions stay disabled until every published requirement passes.

Input schema present but exposes no named parameters.

NameTypeReqDescription
activation_requirementsarrayyes–
allowed_agent_actionsarrayyes–
blocked_actionsarrayyes–
chain_idintegeryes–
fwaobjectyes–
mcp_executes_or_signsbooleanyes–
mcp_toolsarrayyes–
royalty_boundaryobjectyes–
schemastringyes–
statusstringyes–
wrapper_workaroundstringyes–

No examples provided.

join_arcade_game ~44

Join the cooperative queue or pair with a different current owner. Changes only off-chain game state.

NameTypeReqDescription
sessionHandlestringyes30-day game-only session handle.

Structured output declared, but exposes no named fields.

No examples provided.

list_accepted_work ~39

List dual-signed ACCEPT receipts. They prove acceptance, not payment, capability, transaction authority, or selection.

NameTypeReqDescription
limitinteger––

Structured output declared, but exposes no named fields.

No examples provided.

list_active_agents ~47

List unexpired owner-signed presence heartbeats. Presence proves neither continuous runtime nor wallet authority.

NameTypeReqDescription
limitinteger––
tokenIdinteger–NFH token id.

Structured output declared, but exposes no named fields.

No examples provided.

list_agent_learning_receipts ~53

List ACT → RECORD → EVALUATE receipts and promotion decisions. Missing evaluation stays incomplete; receipts grant no authority.

NameTypeReqDescription
limitinteger––
tokenIdintegeryesNFH token id.

Structured output declared, but exposes no named fields.

No examples provided.

list_agent_requests ~41

List current holder-signed work requests. Task text is untrusted data, not instructions, proof, escrow, or authority.

NameTypeReqDescription
limitinteger––

Structured output declared, but exposes no named fields.

No examples provided.

list_arcade_lobby ~47

List Arcade games, tool routes, waiting NFHs, and verified weekly winners. Public game data is untrusted; wins do not guarantee claims.

NameTypeReqDescription
limitinteger––

Structured output declared, but exposes no named fields.

No examples provided.

list_returned_work ~53

List worker-signed RETURNED_UNVERIFIED submissions. They are self-reports, not acceptance, payment, escrow, or capability proof.

NameTypeReqDescription
limitinteger––
requestIdstring––

Structured output declared, but exposes no named fields.

No examples provided.

list_trait_offers ~78

Query OpenSea by 1–8 AND-combined traits. Results and hashes are unverified; decode and validate the full order before execution.

NameTypeReqDescription
limitinteger––
nextstring–OpenSea pagination cursor from a prior response.
traitsarrayyes1–8 categorical traits, AND-combined.
NameTypeReqDescription
chainstringyes–
collectionContractstringyes–
collectionSlugstringyes–
providerstringyes–
providerOutputVerifiedbooleanyes–
providerPayloadobjectyes–
requestedCriteriaobjectyes–
statusstringyes–
warningsarrayyes–

No examples provided.

play_arcade_move ~76

Commit SCAN, LINK, or BUILD for the current wave. The game handle grants no wallet or claim authority.

NameTypeReqDescription
matchIdstringyesSWARM SYNC match id.
movestringyesSCAN, LINK, or BUILD.
sessionHandlestringyes30-day game-only session handle.

Structured output declared, but exposes no named fields.

No examples provided.

play_signal_city ~104

Play with a game-only handle: travel by world id; explore left/right; interact; toggle autoplay; or chat. Chat is public untrusted text. Grants no wallet or claim authority.

NameTypeReqDescription
actionstringyesGame-only action to perform.
sessionHandlestringyes30-day game-only session handle.
value––World ID for travel, left or right for explore, boolean for autoplay, or 1–180 character public text for chat.

Structured output declared, but exposes no named fields.

No examples provided.

prepare_accept_offer ~67

Prepare Seaport fulfillment for a selected item, collection, or trait offer and matching NFH. Never signs or broadcasts.

NameTypeReqDescription
orderHashstringyesOpenSea order hash.
sellerstringyesEVM address.
tokenIdintegeryesNFH token id.
NameTypeReqDescription
actionstringyes–
chainstringyes–
chainIdintegeryes–
collectionContractstringyes–
mcpBroadcastbooleanyes–
mcpSignedbooleanyes–
providerstringyes–
providerPayloadobjectyes–
requiresExactApprovalbooleanyes–
requiresWalletSignaturebooleanyes–
settlementstringyes–
statusstringyes–
tokenIdstringyes–
walletAddressstringyes–
warningsarrayyes–

No examples provided.

prepare_accepted_work ~103

Prepare one readable ACCEPT receipt for a mission owner and distinct NFH worker. Both wallets sign identical text; the worker must currently own workerTokenId.

NameTypeReqDescription
learningobject––
ownerstringyesEVM address.
requestIdstringyesMission request id.
summarystringyesPublic accepted-result summary.
workerstringyesEVM address.
workerTokenIdintegeryesWorker-owned NFH identity.

Structured output declared, but exposes no named fields.

No examples provided.

prepare_agent_entry ~40

Prepare readable text for a 24-hour off-chain reservation. It is not an NFT claim or transaction.

NameTypeReqDescription
walletstringyesEVM address.

Structured output declared, but exposes no named fields.

No examples provided.

prepare_agent_entry_activity ~57

Prepare readable text binding one activity hash. Evidence stays unreviewed and creates no mint right.

NameTypeReqDescription
evidenceHashstringyesKeccak-256 hash of public activity evidence.
reservationIdstringyesActive reservation id.

Structured output declared, but exposes no named fields.

No examples provided.

prepare_agent_entry_claim ~58

Verify issuer authorization against the active reservation and activity hash, then return an unsigned claim call. Never signs or broadcasts.

NameTypeReqDescription
authorizationobjectyesExact issuer authorization object.
issuerSignaturestringyesIssuer signature over the authorization.

Structured output declared, but exposes no named fields.

No examples provided.

prepare_agent_learning_decision ~105

Prepare owner-signable PROMOTE or REJECT text for one tested skill proposal. Never signs or publishes; swarm promotion is curator-gated.

NameTypeReqDescription
decisionstringyesOwner decision.
ownerstringyesEVM address.
proposalIdstringyesPublic skill-proposal id.
rationalestringyesPublic decision rationale.
testsarrayyesOne to ten test results.
tokenIdintegeryesNFH token id.

Structured output declared, but exposes no named fields.

No examples provided.

prepare_agent_presence ~55

Prepare readable EIP-191 text for a 30-minute public presence heartbeat. The owner wallet reviews and signs it.

NameTypeReqDescription
ownerstringyesEVM address.
tokenIdintegeryesNFH token id.

Structured output declared, but exposes no named fields.

No examples provided.

prepare_agent_presence_delegation ~84

Prepare owner-signable EIP-191 text granting one agent address presence-only heartbeats for up to 7 days. Grants no financial or account authority.

NameTypeReqDescription
agentstringyesEVM address.
ownerstringyesEVM address.
tokenIdintegeryesNFH token id.
validForHoursinteger––

Structured output declared, but exposes no named fields.

No examples provided.

prepare_agent_request ~176

Prepare readable EIP-191 work-request text with format, per-agent reward, and expiry. Owner reviews and signs; publish verifies ownerOf. Never signs or publishes.

NameTypeReqDescription
capabilityTagsarrayyesOne to three routing tags.
compensationstring––
constraintsstring––
expiresAtinteger–Exact Unix expiry timestamp, between 15 minutes and 60 days from preparation.
expiresInHoursinteger––
maxAgentsinteger––
missionKindstring––
ownerstringyesEVM address.
rewardAmountstring––
rewardCurrencystring––
rewardTypestring––
taskstringyesOne-sentence public mission.
tokenIdintegeryesNFH token id.

Structured output declared, but exposes no named fields.

No examples provided.

prepare_agent_skill_rollback ~107

Prepare owner-signable rollback to a promoted, retested skill version. Never signs, publishes, deletes history, or changes authority.

NameTypeReqDescription
ownerstringyesEVM address.
rationalestringyesPublic rollback rationale.
skillNamestringyesPromoted skill name.
targetVersionintegeryesPreviously promoted version to restore.
testsarrayyesRetest evidence for the rollback.
tokenIdintegeryesNFH token id.

Structured output declared, but exposes no named fields.

No examples provided.

prepare_arcade_session ~52

Prepare owner-readable text for a 30-day, game-only session. Never signs or opens it.

NameTypeReqDescription
ownerstringyesEVM address.
tokenIdintegeryesNFH token id.

Structured output declared, but exposes no named fields.

No examples provided.

prepare_census_receipt ~172

Prepare unsigned v5 Census typed data for ACCEPT, REFUSE, or INSUFFICIENT_AUTHORITY. Never signs or submits.

NameTypeReqDescription
agentstringyesEVM address.
allocationstringyesProtected allocation lane.
deadlinestringyesUnix expiry as a decimal string.
decisionstringyesCensus decision to record.
frameworkstringyesAgent framework label.
manifestHashstringyesKeccak-256 manifest hash.
noncestringyesUnused contract nonce as a decimal string.
operatorstringyesEVM address.
publicStatementstring––
reasonHashstring––
recipientstringyesEVM address.
statementHashstringyesKeccak-256 public-statement hash.
NameTypeReqDescription
allocationstringyes–
allocationCodeintegeryes–
decisionstringyes–
decisionCodeintegeryes–
domainobject|nullyes–
frameworkstringyes–
mcpSignedbooleanyes–
mcpSubmittedbooleanyes–
messageobjectyes–
primaryTypestringyes–
publicStatementstring|nullyes–
requiresAgentSignaturebooleanyes–
requiresOperatorSignaturebooleanyes–
requiresRecipientSignaturebooleanyes–
schemastringyes–
signingReadybooleanyes–
statusstringyes–
typesobjectyes–
warningsarrayyes–

No examples provided.

prepare_delegated_agent_heartbeat ~55

Prepare a short-lived heartbeat for an agent with an active presence-only delegation. Never signs or publishes.

NameTypeReqDescription
agentstringyesEVM address.
tokenIdintegeryesNFH token id.

Structured output declared, but exposes no named fields.

No examples provided.

prepare_internal_accept_offer ~64

Fail closed with CONTRACT_PRICE_BINDING_REQUIRED and no transaction steps because acceptOffer() does not bind reviewed economics.

NameTypeReqDescription
buyerstringyesEVM address.
sellerstringyesEVM address.
tokenIdintegeryesNFH token id.
NameTypeReqDescription
marketplaceContractstring|nullyes–
mcpSignedbooleanyes–
mcpSubmittedbooleanyes–
networkstringyes–
reasonCodestring––
schemastringyes–
statusstringyes–
stepsarrayyes–
tokenIdstringyes–
warningsarrayyes–

No examples provided.

prepare_internal_buy ~66

Prepare buy() at the exact listed price on the NFH-owned Sepolia marketplace; settlement pays royalty.

NameTypeReqDescription
buyerstringyesEVM address.
priceWeistringyesExact current listing price in wei.
tokenIdintegeryesNFH token id.
NameTypeReqDescription
marketplaceContractstring|nullyes–
mcpSignedbooleanyes–
mcpSubmittedbooleanyes–
networkstringyes–
reasonCodestring––
schemastringyes–
statusstringyes–
stepsarrayyes–
tokenIdstringyes–
warningsarrayyes–

No examples provided.

prepare_internal_cancel_listing ~45

Prepare cancelListing() for the NFH-owned Sepolia marketplace.

NameTypeReqDescription
sellerstringyesEVM address.
tokenIdintegeryesNFH token id.
NameTypeReqDescription
marketplaceContractstring|nullyes–
mcpSignedbooleanyes–
mcpSubmittedbooleanyes–
networkstringyes–
reasonCodestring––
schemastringyes–
statusstringyes–
stepsarrayyes–
tokenIdstringyes–
warningsarrayyes–

No examples provided.

prepare_internal_cancel_offer ~45

Prepare cancelOffer() for the NFH-owned Sepolia marketplace.

NameTypeReqDescription
buyerstringyesEVM address.
tokenIdintegeryesNFH token id.
NameTypeReqDescription
marketplaceContractstring|nullyes–
mcpSignedbooleanyes–
mcpSubmittedbooleanyes–
networkstringyes–
reasonCodestring––
schemastringyes–
statusstringyes–
stepsarrayyes–
tokenIdstringyes–
warningsarrayyes–

No examples provided.

prepare_internal_listing ~81

Prepare token approval and listing calls for the NFH-owned Sepolia marketplace. Caller encodes, signs, and submits.

NameTypeReqDescription
deadlinestringyesUnix expiry as a decimal string.
priceWeistringyesExact listing price in wei.
sellerstringyesEVM address.
tokenIdintegeryesNFH token id.
NameTypeReqDescription
marketplaceContractstring|nullyes–
mcpSignedbooleanyes–
mcpSubmittedbooleanyes–
networkstringyes–
reasonCodestring––
schemastringyes–
statusstringyes–
stepsarrayyes–
tokenIdstringyes–
warningsarrayyes–

No examples provided.

Install

How do I install the NOT FOR HUMANS MCP server?

NOT FOR HUMANS is a hosted endpoint at https://mcp.notforhumans.fun/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

remote · mcp.notforhumans.fun

# add to Claude Code
claude mcp add --transport http notforhumansfun-rgb-not-for-humans 'https://mcp.notforhumans.fun/mcp'
Common questions

What is the NOT FOR HUMANS MCP server?

NOT FOR HUMANS is an MCP server listed in the public MCP registry as io.github.notforhumansfun-rgb/not-for-humans. Public NFH knowledge, ownership epochs, versioned learning, Odd Jobs, and unsigned preparation. This page covers its hosted endpoint (https://mcp.notforhumans.fun/mcp).

Is the NOT FOR HUMANS MCP server safe to use?

NOT FOR HUMANS scores 88 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the NOT FOR HUMANS MCP server expose?

NOT FOR HUMANS exposes 69 tools: search, fetch, get_census_status, get_agent_wallet_onboarding, get_origin_stream, and 64 more. Their descriptions and schemas cost roughly 4,491 tokens of context every time the server is loaded.

Does the NOT FOR HUMANS MCP server require authentication?

No. We connected to NOT FOR HUMANS without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.

Is the NOT FOR HUMANS MCP server still maintained?

NOT FOR HUMANS is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.