{"$schema":"https://wellknown.network/schemas/agent-record-v1.json","schemaVersion":"1","id":"ag_5pp73kyfkj4q","handle":"mcp-evidence-validator","url":"https://wellknown.network/agents/mcp-evidence-validator","links":{"self":"https://wellknown.network/agents/mcp-evidence-validator/record.json","html":"https://wellknown.network/agents/mcp-evidence-validator","markdown":"https://wellknown.network/agents/mcp-evidence-validator/record.md","api":"https://wellknown.network/api/v1/agents/mcp-evidence-validator","status":"https://wellknown.network/api/v1/agents/mcp-evidence-validator/status","claim":"https://wellknown.network/agents/mcp-evidence-validator/claim","claimApi":"https://wellknown.network/api/v1/claims","claimDescriptor":"https://wellknown.network/agents/mcp-evidence-validator/claim.json","badge":"https://wellknown.network/agents/mcp-evidence-validator/badge.svg","openapi":"https://wellknown.network/openapi.json","history":"https://wellknown.network/api/v1/agents/mcp-evidence-validator/history","tools":"https://wellknown.network/api/v1/agents/mcp-evidence-validator/tools"},"ard":{"identifier":"urn:air::server:mcp-evidence-validator","type":"application/mcp-server-card+json"},"kind":"mcp_server","declared":{"name":"mcp-evidence-validator","summary":"Validate what an MCP server declares against what it actually does, with a tamper-evident SHA-256 evidence ledger.","description":"# MCP Evidence Validator\n\n[![OpenSSF Best Practices](https://www.bestpractices.dev/projects/14122/badge)](https://www.bestpractices.dev/projects/14122)\n[![OpenSSF Baseline](https://www.bestpractices.dev/projects/14122/baseline)](https://www.bestpractices.dev/projects/14122)\n\nValidate what an MCP server *declares* against what it *actually does*, and produce a tamper-evident evidence record you can hand to an auditor.\n\n**Status:** v0.5.0 — published on PyPI with build attestations  ·  **License:** Apache-2.0  ·  **Language:** Python 3.10+ (stdlib only, zero dependencies)\n\n**Built by [Empire Labs Pty Ltd](https://empirelabs.com.au)** and published as part of the Empire Stack — the evidence layer for agent actions. Related public work:\n\n- [witnessos](https://github.com/narko4u/witnessos) — credential-brokered enforcement and cryptographic evidence for agent actions; the evidence-grade ladder these checks descend from (E0 Declared → E1 Observed → E2 Enforced → E3 Corroborated → E4 Anchored).\n- [evidence-record-spec](https://github.com/narko4u/evidence-record-spec) — portable, evidence-grade record format for agent actions.\n\n---\n\n## Why\n\nModel Context Protocol (MCP) is the industry standard for connecting AI agents to tools and data. It is now governed by the Agentic AI Foundation (AAIF) under the Linux Foundation, with 97M+ monthly SDK downloads and 10,000+ active public servers.\n\nBut the protocol leaves the *evidence* problem open:\n\n- A server declares tool schemas and permissions, but nothing verifies those declarations against observed runtime behaviour.\n- An annotation can be accurate at declaration time and silently stale minutes later, when the contract it was bound to mutates underneath it.\n- MCP has already seen the first malicious server (Sept 2025), CVE-2025-6514 (CVSS 9.6, RCE), and a hosting-platform breach affecting 3,000+ downstream applications.\n\nThe **declared-vs-observed gap** is the measurement finding that matters. This validator is a reference imple…","publisher":null,"homepage":"https://github.com/narko4u/mcp-evidence-validator/tree/main/docs","repository":"https://github.com/narko4u/mcp-evidence-validator/tree/main/docs","version":"0.5.0","license":"Apache-2.0","protocols":["mcp"],"tags":["mcp","model-context-protocol","evidence","audit","observability","agentic-ai"],"pricing":null,"endpoints":[{"url":"pypi:mcp-evidence-validator","type":"package_pypi","auth":null,"probeable":false}],"skills":null,"tools":null,"extra":null,"attribution":{"kind":"pypi","name":"pypi","license":"pypi","repoUrl":"pypi","summary":"pypi","version":"pypi","description":"pypi","homepageUrl":"pypi"}},"derived":{"capabilities":[{"slug":"dev.monitoring","name":"Monitoring & Observability","confidence":1,"provenance":"declared"},{"slug":"dev.package-management","name":"Packages & Dependencies","confidence":0.825,"provenance":"derived"}],"categories":["dev"],"language":"en"},"observed":{"status":"unknown","statusReason":"Distributed as a package to run locally; no network endpoint to check.","lastOkAt":null,"lastProbedAt":null,"statusComputedAt":null,"reliability30d":null,"latestObservations":[],"tools":null,"package":{"name":"mcp-evidence-validator","registry":"pypi","observedAt":"2026-11-05T22:26:18.615Z","publishedAt":"2026-09-16T12:36:14.568511Z","latestVersion":"0.5.0"},"toolSurface":null,"endpointFacts":[]},"verification":{"claimed":false,"claimedAt":null,"proofs":[]},"provenance":{"sources":[{"source":"pypi","key":"mcp-evidence-validator","url":"https://pypi.org/project/mcp-evidence-validator/","firstSeenAt":"2026-09-18T08:26:36.908Z","fetchedAt":"2026-11-05T22:24:13.840Z","normalizedAt":"2026-11-05T22:24:13.840Z"}]},"firstSeenAt":"2026-09-18T08:26:36.908Z","updatedAt":"2026-11-05T22:26:18.615Z"}