Skip to content
Agentmart
Submit a tool

Kenwea Notary

Signed, traced record of what an npm package or file attempts when run, network included.

Connector by www.kenwea.comOfficial · Domain verified by the MCP Registry

IndexedMITRemote (HTTP)★ 1
Write a review

Install

Works with Claude Code, VS Code, Cursor, Windsurf. Read the repository before you give any tool access to your data.

npx agentmarket install connector/www-kenwea-com-notary

Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.

Remote endpoint

  • https://mcp.kenwea.com/notary/v1 Remote (HTTP)

Get the weekly diff

The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.

We use your email only for this newsletter. Privacy

About

Signed, traced record of what an npm package or file attempts when run, network included. No key.

Reviews

Write a review

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this server can do and what it asks for, from its tool list and install config. Checked Oct 25, 2026.

Tools
4 read · 0 write · 0 deleteRead-only
Secrets
None asked for
Install scripts
Nothing to install (hosted)
Runs as
Hosted (remote endpoint)

Tools by what they do 4

From the running server's own tool list (tools/list) on Oct 25, 2026.

Read 4 · Look things up without changing anything.

  • kenwea_notary_check
  • kenwea_notary_check_tree
  • kenwea_notary_get_public_key
  • kenwea_notary_verify

Network hosts it talks to 1

  • mcp.kenwea.com · found in remote endpoint, install command

Tools (4)

As the server listed them on Oct 25, 2026. Descriptions are the server’s own words; hidden characters are shown as [U+…].

  • kenwea_notary_checkNotarize what an artifact doesread-only

    Notarize what a file or npm package does at the moment Kenwea fetches it, and get a signed record anyone can check. Input: exactly one of artifactRef, a public https URL of a single file, npm tarball or Python wheel, or package, an npm package name such as express@4.18.2 (resolved to the exact tarball npm install would download; no version means latest), or a Python one as pypi:requests@2.31.0 (resolved on PyPI to the wheel this sandbox can import: pure Python, or musllinux for CPython 3.12), or an OpenClaw plugin on ClawHub as clawhub:name@version (the release ClawHub serves, refused unless i…

  • kenwea_notary_check_treeCheck a whole dependency treeread-only

    Answer for every package in a project's npm dependency tree at once, from records the notary already holds. Input: lockfile, the text of a package-lock.json (lockfileVersion 2 or 3, or its JSON), a pnpm-lock.yaml (v5, v6, v9), a yarn.lock (v1 or berry) or a project's package.json (its ranges resolved as npm would today, devDependencies included); or packages, a list of {name, version, hasInstallScript}, with directs, the project's own dependencies as {name, version}. Behavior: the lockfile says which packages run something at install (hasInstallScript, or requiresBuild in pnpm up to v6), and w…

  • kenwea_notary_get_public_keyGet the notary's public keyread-only

    Return Kenwea's published Ed25519 notary key, so a signed record can be verified with your own code instead of kenwea_notary_verify. Input: none. Behavior: reads Kenwea's published key list (https://www.kenwea.com/.well-known/kenwea-attestation-keys.json) and caches it for an hour. Runs nothing, read-only, never counts against the check quota. Fails with key_unavailable if the list cannot be fetched. Returns: the active key's keyId, algorithm ed25519, the key as base64 (32 raw bytes) and as PEM, keyUrl and keysUrl, and keys, every published key with its status (active, retired or revoked). To …

  • kenwea_notary_verifyVerify a signed Kenwea recordread-only

    Check a signed record produced by kenwea_notary_check: whether its signature is valid under Kenwea's published Ed25519 key, what it attests, and whether it is in Kenwea's public transparency log (log.included, proven with an inclusion proof against a checkpoint signed by the same key), so it was shown to everyone and not only to you. Input: payload and signature exactly as they appear in the record's signedAttestation. payload is a JSON string and must be passed byte for byte; re-serialising it (reordering keys, changing spacing) breaks the signature. signature is standard base64 with padding.…

Compare and alternatives

    Featured in

    Signals

    Stars
    1
    Forks
    0
    Open issues
    0
    Last commit
    Oct 21, 2026 (7 days ago)
    Last release
    Oct 8, 2026 (20 days ago)

    From GitHub (fetched Oct 24, 2026).

    Details

    Registry name
    com.kenwea.www/notary
    Version
    1.1.0
    Auth
    Auth not stated
    License
    MIT
    Repository
    github.com/kenwea-protocol/kenwea
    Website
    www.kenwea.com/verify
    First seen
    Oct 24, 2026
    Last checked
    Oct 24, 2026
    Source
    Official MCP Registrygithub-graphql

    More from www.kenwea.com

    Cite this page

    Kenwea Notary MCP server. Agent Mart. https://agentmart.dev/connectors/www-kenwea-com-notary (last updated 2026-10-24)