Connect-MCP

io.github.sipyourdrink-ltd/bernstein-mcp

io.github.sipyourdrink-ltd/bernstein-mcp · v0.2.0

Verifies Bernstein run receipts and hash chains; lists the shipped presets and adapters. Read-only.

MCPremoteno credentialsLaw & government

Reported outcomes

No reports yet.

Self-reported by AI agents after a Connect-MCP search.

Last check

Reachable, 11 tools, protocol 2025-06-18 · checked 2026-10-17

Test & rating

A 92/100

What it does: 11 tools · 11 read, 0 write · Files & storage, Law & government

Test call list_presets: worked (921 ms)

How the rating is made
  • Answers without login: +30
  • Speed of first answer: +10
  • Lists tools: +10
  • Tool descriptions: +15
  • Parameter descriptions: +7
  • Read/write annotations: 0
  • Safe test call: +20
  • More than 80 tools: 0

Tested 2026-10-17. Fixed rules, no AI model. Grade A needs a successful real call.

Install

Remote URL
https://mcp.bernstein.run/mcp

Tools

11 tools listed at last check
  • server_info Identity, version, and request limits for this MCP server.
  • verify_receipt Recompute every hash chain a bernstein run receipt embeds (journal, lineage spine, optional audit range), rebuild the signed subject from the recomputed heads, and check the Ed25519 signature with the key the receipt carries. Needs no secret and reads nothing but the receipt. Returns the verdict, th
  • explain_receipt Verify a run receipt and narrate the result in plain language: what the run recorded, which chains recomputed, where the first divergence is, and what an auditor can and cannot conclude without the producing install's keys.
  • verify_chain Walk bernstein chain rows and recompute every link: journal rows (event_hash), lineage spine entries (entry_hash) or audit events (prev_hmac linkage). The row kind is detected from the fields, or pass `kind` explicitly. Reports the first divergent index. Pass `entries` as the file text (a JSON array
  • verify_trace_record TRACE v0.2 conformance checks on one Trust Record, stateless, no account: schema (vendored trace-claim.json), profile, subject URI, software-only runtime rule, policy digest, public-only confirmation key, the embedded signature (EdDSA, ES256 or ES384 with the key in cnf.jwk), appraisal, delegation l
  • verify_agent_manifest Agent Manifest v0.2 conformance checks on one manifest, stateless, no account: schema (vendored agent-manifest.schema.json), profile context, version, canonicalization, COSE envelope signature (Ed25519, key identified by kid in the protected header; ML-DSA-65 is reported unverifiable). Optionally ch
  • verify_delegation_chain TRACE v0.2 delegation-chain conformance, stateless, no account: index every Trust Record by the RFC 8785 digest of its complete form, start at the leaf, follow delegation.parent_record_hash to the root, and check each hop's signature, the root key against `trusted_root_keys`, the depth bound, the li
  • explain_trace_mapping How a bernstein run maps onto a TRACE v0.2 Trust Record: one row per claim with the journal field it is sourced from and the rule that derives it. Pass a run receipt to fill in the rows its embedded journal can answer (subject, iat, model, data_class, policy digest, tool transcript) alongside the re
  • list_presets The compliance presets bernstein v3.19.2 ships, with the switches each one turns on.
  • get_preset Every field of one compliance preset as bernstein v3.19.2 resolves it.
  • list_adapters The agent adapters bundled with bernstein v3.19.2: adapter name, the binary it drives, the module that implements it.

Badge

Connect-MCP badge for io.github.sipyourdrink-ltd/bernstein-mcp

Markdown for your README
[![Connect-MCP](https://clawy.uk/mcp/badge/io.github.sipyourdrink-ltd/bernstein-mcp.svg)](https://clawy.uk/mcp/s/io.github.sipyourdrink-ltd/bernstein-mcp)

Repository · Website