io.github.sipyourdrink-ltd/bernstein-mcp

io.github.sipyourdrink-ltd/bernstein-mcp · v0.2.0 · agents-and-memory

io.github.sipyourdrink-ltd/bernstein-mcp is healthy: it completed an MCP handshake in 711 ms and exposes 11 tools.

Verifies Bernstein run receipts and hash chains; lists the shipped presets and adapters. Read-only.

Endpoint: https://mcp.bernstein.run/mcp (streamable-http)

Repository · Website · JSON · Add to my inventory

Facts

Users (last 30 days)0
HandshakeHealthy
Auth neededNone
Tool count11
Latency711 ms
Last checked (UTC)2026-10-15T10:45:06.153Z

Health history

Checked (UTC)StatusLatencyError
2026-10-15T10:45:06.153ZHealthy711

Tools (11)

server_infoIdentity, version, and request limits for this MCP server.
verify_receiptRecompute every hash chain a bernstein run receipt embeds (journal, lineage spine, optional audit range), rebuild the signed subject from the recomputed heads, and check the Ed25519 signature with the key the receipt carries. Needs no secret and reads nothing but the receipt. Returns the verdict, th
explain_receiptVerify a run receipt and narrate the result in plain language: what the run recorded, which chains recomputed, where the first divergence is, and what an auditor can and cannot conclude without the producing install's keys.
verify_chainWalk bernstein chain rows and recompute every link: journal rows (event_hash), lineage spine entries (entry_hash) or audit events (prev_hmac linkage). The row kind is detected from the fields, or pass `kind` explicitly. Reports the first divergent index. Pass `entries` as the file text (a JSON array
verify_trace_recordTRACE v0.2 conformance checks on one Trust Record, stateless, no account: schema (vendored trace-claim.json), profile, subject URI, software-only runtime rule, policy digest, public-only confirmation key, the embedded signature (EdDSA, ES256 or ES384 with the key in cnf.jwk), appraisal, delegation l
verify_agent_manifestAgent Manifest v0.2 conformance checks on one manifest, stateless, no account: schema (vendored agent-manifest.schema.json), profile context, version, canonicalization, COSE envelope signature (Ed25519, key identified by kid in the protected header; ML-DSA-65 is reported unverifiable). Optionally ch
verify_delegation_chainTRACE v0.2 delegation-chain conformance, stateless, no account: index every Trust Record by the RFC 8785 digest of its complete form, start at the leaf, follow delegation.parent_record_hash to the root, and check each hop's signature, the root key against `trusted_root_keys`, the depth bound, the li
explain_trace_mappingHow a bernstein run maps onto a TRACE v0.2 Trust Record: one row per claim with the journal field it is sourced from and the rule that derives it. Pass a run receipt to fill in the rows its embedded journal can answer (subject, iat, model, data_class, policy digest, tool transcript) alongside the re
list_presetsThe compliance presets bernstein v3.19.2 ships, with the switches each one turns on.
get_presetEvery field of one compliance preset as bernstein v3.19.2 resolves it.
list_adaptersThe agent adapters bundled with bernstein v3.19.2: adapter name, the binary it drives, the module that implements it.