Every change Wellknown observed on this MCP server, newest first, with what it was before and what it became. Tool-surface changes carry the definition diff. Nothing here is edited after the fact.
Changed the definition of "canary_issue"
⟨53 unchanged words⟩ DID of the agent you hand the credentialtoto; it must be a registered, unrevoked MolTrust agent mode: "bound" (issuedthetocounterpartythemaycounterparty'spresentDIDit) or "decoy" (issued to a DID nobody holds;any presentationbut yours is a leak, the counterparty's included); both are issued to the counterparty's DID on_leak: "hold" puts the counterparty on ⟨19 unchanged words⟩
Added "canary_events", "canary_issue" and "canary_list" (61 tools before, 64 now)
Your leak events, newest first, each signed by MolTrust and carrying AER material that `moltrust-verify` recomputes offline (trust list: GET /canary/trust-list). Optionally for one canary. Needs your MolTrust API key as X-API-Key on the MCP connection. Args: canary_id: only events of this canary (from canary_issue or canary_list) limit: page size, at most 200 offset: where the page starts
Issue a leak canary for one counterparty: a credential to hand to that counterparty. If anyone else presents it at the MolTrust verifier, you get a signed leak event that names the counterparty. Costs what a credential costs. Needs your MolTrust API key as the X-API-Key header of the MCP connection. Args: counterparty_did: DID of the agent you hand the credential to mode: "bound" (issued to the counterparty's DID) or "decoy" (issued to a DID nobody holds; any presentation but yours is a leak) on_leak: "hold…
Your leak canaries, newest first: counterparty, mode, reaction on leak and the number of events so far. Paginated with limit/offset; `next_offset` is null on the last page. Needs your MolTrust API key as X-API-Key on the MCP connection.
Added "molcheck_evidence", "molcheck_mandate", "molcheck_registry" and 2 more; changed the definition of "moltproof_evidence", "moltproof_mandate", "moltproof_registry" and 2 more (56 tools before, 61 now)
Deprecated alias of molcheck_evidence; use that name. Verdict plus the decoded transactions that breached the ⟨13 unchanged words⟩
⟨6 unchanged words⟩ ,"required":["agent"],"title":"moltproof_evidenceArgumentsevidenceArguments","type":"object"}
⟨6 unchanged words⟩ ,"required":["result"],"title":"moltproof_evidenceOutput
Certificate changed, valid to 2027-01-14
Added "ads_check", "ads_mandate_template" and "ads_onboard" (53 tools before, 56 now)
Allow / hold / forbid for one intended Amazon Ads MCP tool call, before it runs. Needs your MolTrust API key as the X-API-Key header of the MCP connection (free key: POST https://api.moltrust.ch/auth/signup). Counts against your plan like any check. Never send Amazon credentials: they are refused. Args: profile: the `profile` object from ads_mandate_template tool: the Amazon Ads MCP tool name, e.g. campaign_management-update_campaign_budget arguments: the tool arguments exactly as your agent would send them cont…
Build an ads profile and its AAE mandate for one or more Amazon Ads accounts. Pure: nothing is stored. Returns `profile` (pass it to ads_check) and `mandate` (what /enforce/check evaluates). Args: account_ids: advertiserAccountId / profileId values the agent may act on brands: brands the agent may touch daily_budget_cap_usd: largest daily campaign budget; above it: forbid hold_threshold_usd: above it a person named in `approvers` must approve total_daily_budget_cap_usd: sum of daily budgets on the account af…
How an agent starts with MolTrust Ads: verdicts (allow / hold / forbid) on Amazon Ads MCP tool calls before they run. Plans, key sign-up, SDK, endpoints. No input, no account needed.
Certificate recorded, valid to 2026-11-15
Authorization not required
Verified owner set by well_known_file proof on api.moltrust.ch
Unknown → Live
First tool surface recorded: 53 tools (server version 1.28.1)
https://api.moltrust.ch/mcp (mcp_streamable_http) — from mcp_registry
Showing the latest 11 events. The API returns up to 500 and filters by kind: ?kind=tool_surface_changed
Deprecated alias of molcheck_mandate; use that name. The committed AAE mandate for an agent (venues ⟨16 unchanged words⟩
⟨6 unchanged words⟩ ,"required":["agent"],"title":"moltproof_mandateArgumentsmandateArguments","type":"object"}
⟨6 unchanged words⟩ ,"required":["result"],"title":"moltproof_mandateOutputmandateOutput","type":"object"}
Deprecated alias of molcheck_registry; use that name. Agents with committed mandates and their current verdict. ⟨6 unchanged words⟩
{"properties":{},"title":"moltproof_registryArgumentsregistryArguments","type":"object"}
⟨6 unchanged words⟩ ,"required":["result"],"title":"moltproof_registryOutputregistryOutput","type":"object"}
Deprecated alias of molcheck_verdict; use that name. Verdict + per-check breakdown for an agent against ⟨26 unchanged words⟩
⟨6 unchanged words⟩ ,"required":["agent"],"title":"moltproof_verdictArgumentsverdictArguments","type":"object"}
⟨6 unchanged words⟩ ,"required":["result"],"title":"moltproof_verdictOutputverdictOutput","type":"object"}
Deprecated alias of molcheck_verify; use that name. Recompute a verdict from public inputs and check ⟨22 unchanged words⟩ public, already-decoded on-chain actions signature: optional priorMoltProofMolCheck signature to check
⟨33 unchanged words⟩ ","mandate","actions"],"title":"moltproof_verifyArgumentsverifyArguments","type":"object"}
⟨6 unchanged words⟩ ,"required":["result"],"title":"moltproof_verifyOutputverifyOutput","type":"object"}
Verdict plus the decoded transactions that breached the mandate. Read-only. Args: agent: public agent identifier (address / DID / ERC-8004 ref)
The committed AAE mandate for an agent (venues, position cap, validity). Read-only. Args: agent: public agent identifier (address / DID / ERC-8004 ref)
Agents with committed mandates and their current verdict. Read-only. Ranks NO_MANDATE / NEEDS_REVIEW lower.
Verdict + per-check breakdown for an agent against its committed mandate. Read-only. Recomputable from public chain data + the public mandate. Args: agent: agent address, did:moltrust / did:web, or ERC-8004 reference (public)
Recompute a verdict from public inputs and check its signature. Offline and read-only: no DID/mandate/context is fetched here. Args: agent: public agent identifier mandate: the public AAE Verifiable Credential actions: public, already-decoded on-chain actions signature: optional prior MolCheck signature to check