Skip to content
Agentmart
Submit a tool

Verify SCITT receipts from Forestrie transparency logs, offline

Verify a SCITT receipt under a trust root you hold — offline, no backend, no key, no network

Connector by forestrie.dev · Domain verified by the MCP Registry

IndexedMITLocal (stdio)
Write a review

Install

Works with Claude Code, Codex, VS Code, Cursor, Windsurf, Claude Desktop. Read the repository before you give any tool access to your data.

npx agentmarket install connector/forestrie-dev-verify

Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.

Get the weekly diff

The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.

We use your email only for this newsletter. Privacy

About

Verify a SCITT receipt under a trust root you hold — offline, no backend, no key, no network

Reviews

Write a review

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this server can do and what it asks for, from its tool list, install config and code. Checked Oct 25, 2026.

Tools
4 read · 0 write · 0 deleteRead-only
Secrets
None asked for
Install scripts
None found
Runs as
Node.js package

Tools by what they do 4

Read from the source code; the running server may list different tools.

Read 4 · Look things up without changing anything.

  • decode_receipt
  • verify_grant_receipt
  • verify_receipt
  • verify_self

Network hosts it talks to 3

  • dry-run-coordinator.invalid · found in code
  • dry-run.invalid · found in code
  • github.com · found in code

Tools (4)

Read from the source code; the running server may differ. Descriptions are the server’s own words; hidden characters are shown as [U+…].

  • decode_receiptDecode a receipt to JSONread-only

    Render a COSE receipt's CBOR as JSON — headers, named labels, payload, signature and inclusion proof. NO VERIFICATION is performed: a receipt that decodes cleanly may still be invalid. Mirrors `forestrie decode-receipt --json`.

  • verify_grant_receiptVerify a grant receiptread-only

    Verify a Forestrie grant receipt against the committed grant (Forestrie-Grant COSE Sign1, or raw grant payload CBOR plus an entry id), at a trust root you choose. Mirrors `forestrie verify-grant`. This is the tool that answers the append-authority question: the leaf IS the grant. KS256 contract roots take an optional ks256Attestation (fetched elsewhere; this tool never calls the chain; several go in ks256Attestations).

  • verify_receiptVerify a payload receiptread-only

    Verify a Forestrie receipt against the EXACT registered payload bytes and an entry id, at a trust root you choose. Mirrors `forestrie verify`. Offline: no network, no key, no account. Returns both the mechanical stages and the four trust questions. KS256 contract roots take an optional ks256Attestation (fetched elsewhere; this tool never calls the chain; several go in ks256Attestations).

  • verify_selfVerify this package's own release registrationread-only

    Verify this package's own release-time self-registration receipt: does the receipt commit the signed statement, does that statement's payload match the bundled provenance.json byte-for-byte, and does its ES256 signature verify under the bundled log owner key? No inputs required. Defaults to the known-log-key root with the bundled key, not genesis — the publications log is a grandchild of the forest root and nothing walks that grant chain yet (docs/self-registration.md). Errors clearly, rather than throwing, when this checkout has no fixtures/self/ bundle (any checkout that is not itself the pu…

Signals

Stars
0
Forks
0
Open issues
0
Weekly downloads
385
Last commit
Oct 21, 2026 (7 days ago)
Last release
Oct 20, 2026 (8 days ago)
Last package publish
Oct 20, 2026 (8 days ago)

From GitHub (fetched Oct 24, 2026) and the package registry.

Details

Registry name
dev.forestrie/verify
Version
0.7.0
Auth
No auth
Packages
npm @forestrie/mcp-verify
License
MIT
Repository
github.com/forestrie/mcp-verify
Website
github.com/forestrie/mcp-verify#readme
First seen
Oct 24, 2026
Last checked
Oct 24, 2026
Source
Official MCP Registrygithub-graphql

More from forestrie.dev

Cite this page

Verify SCITT receipts from Forestrie transparency logs, offline MCP server. Agent Mart. https://agentmart.dev/connectors/forestrie-dev-verify (last updated 2026-10-24)