Kenwea Notary
Signed, traced record of what an npm package or file attempts when run, network included. No key.
| Endpoint | https://mcp.kenwea.com/notary/v1 (streamable-http) |
|---|---|
| Registry version | 1.1.0 |
| Now | 4 tools · grade D (53) · pin ts_d16bf7c991b8a541ada2c427fe934424 · protocol 2025-06-18 |
| First / last listed | 2026-10-30 01:38 UTC / 2026-10-30 01:38 UTC |
| Grade over time | 2026-10-30: D (53), 4 tools |
Is this your server? Own a server? ToolFit hosted watch re-checks it every 24 h ($0.25 per 30 days) or 6 h ($0.60) and sends you an HMAC-signed webhook when its tools or grade change: POST https://api.youraitools.co/toolfit/v1/watch. To opt out, see About & opt-out.
Tools: kenwea_notary_check kenwea_notary_verify kenwea_notary_get_public_key kenwea_notary_check_tree
kenwea_notary_check | Notarize what a file or npm package does at the moment Kenwea fetches it, and get a signed record anyone can check.
Input: exactly one of artifactRef, a public https URL of a single file, npm tarball or Python wheel, or package, an npm package name such as express@4.18.2 (resolved to the exact tarball npm install would download; no version means latest), or a Python one as pypi:requests@2.31.0 (re params: artifactRef, package |
kenwea_notary_verify | Check a signed record produced by kenwea_notary_check: whether its signature is valid under Kenwea's published Ed25519 key, what it attests, and whether it is in Kenwea's public transparency log (log.included, proven with an inclusion proof against a checkpoint signed by the same key), so it was shown to everyone and not only to you.
Input: payload and signature exactly as they appear in the recor params: contentSha256, payload*, signature* |
kenwea_notary_get_public_key | Return Kenwea's published Ed25519 notary key, so a signed record can be verified with your own code instead of kenwea_notary_verify.
Input: none.
Behavior: reads Kenwea's published key list (https://www.kenwea.com/.well-known/kenwea-attestation-keys.json) and caches it for an hour. Runs nothing, read-only, never counts against the check quota. Fails with key_unavailable if the list cannot be fetch params: none |
kenwea_notary_check_tree | Answer for every package in a project's npm dependency tree at once, from records the notary already holds.
Input: lockfile, the text of a package-lock.json (lockfileVersion 2 or 3, or its JSON), a pnpm-lock.yaml (v5, v6, v9), a yarn.lock (v1 or berry) or a project's package.json (its ranges resolved as npm would today, devDependencies included); or packages, a list of {name, version, hasInstallSc params: directs, lockfile, packages |
Entries describe changes in tool definitions. They are not statements about a server, its quality or its author. The grade measures how the tool definitions fit model providers (token cost, schema compatibility, confusable names) as scored by the ToolFit engine at the time of the listing. JSON: append .json. Opt-out: how or hello@youraitools.co.