MolTrust MCP Server
Verifiable agent identity and trust checks; MolCheck verdicts on mandates; Amazon Ads verdicts.
| Endpoint | https://api.moltrust.ch/mcp (streamable-http) |
|---|---|
| Registry version | 1.3.0 |
| Now | 64 tools · grade C (67) · pin ts_a316b2e53cc49efc331fad0d7c14349a · protocol 2025-06-18 |
| First / last listed | 2026-11-05 00:46 UTC / 2026-11-05 00:46 UTC |
| Grade over time | 2026-11-05: C (67), 64 tools |
Is this your server? Own a server? ToolFit hosted watch re-checks it every 24 h ($0.25 per 30 days) or 6 h ($0.60) and sends you an HMAC-signed webhook when its tools or grade change: POST https://api.youraitools.co/toolfit/v1/watch. To opt out, see About & opt-out.
Tools: moltrust_register moltrust_verify moltrust_reputation moltrust_rate moltrust_credential moltrust_credits moltrust_deposit_info moltrust_claim_deposit moltrust_stats moltrust_deposit_history moltrust_erc8004 moltguard_score moltguard_detail moltguard_sybil moltguard_market moltguard_feed moltguard_credential_issue moltguard_credential_verify mt_shopping_info mt_shopping_verify mt_shopping_issue_vc mt_travel_info mt_travel_verify mt_travel_issue_vc mt_skill_audit mt_skill_verify mt_skill_issue_vc mt_prediction_link mt_prediction_wallet mt_prediction_leaderboard mt_salesguard_verify mt_salesguard_reseller mt_salesguard_register mt_fantasy_commit mt_fantasy_verify mt_fantasy_history mt_create_interaction_proof mt_endorse_agent mt_get_trust_score mt_get_swarm_graph mt_get_swarm_stats mt_register_seed mt_get_badge mt_issue_badge mt_check_badge mt_issue_music_credential mt_verify_music_credential mt_get_track_provenance molcheck_verdict moltproof_verdict molcheck_mandate moltproof_mandate molcheck_evidence moltproof_evidence molcheck_registry moltproof_registry molcheck_verify moltproof_verify ads_onboard ads_mandate_template ads_check canary_issue canary_list canary_events
moltrust_register | Register a new AI agent on MolTrust.
Creates a decentralised identity (DID), issues a W3C Verifiable Credential,
and anchors the agent on the Base blockchain.
Args:
display_name: Agent name (1-64 chars, alphanumeric/dash/underscore/dot/space)
platform: Platform identifier (e.g. "openai", "langchain", "custom")
params: display_name*, platform* |
moltrust_verify | Verify an AI agent by its DID.
Checks whether the DID is registered and returns verification status
along with the agent's trust card (reputation, credentials, blockchain anchor).
Args:
did: Decentralised identifier (e.g. "did:moltrust:a1b2c3d4e5f60718")
params: did* |
moltrust_reputation | Get the reputation score for an AI agent.
Returns the aggregate trust score (1-5) and total number of ratings.
Args:
did: Decentralised identifier (e.g. "did:moltrust:a1b2c3d4e5f60718")
params: did* |
moltrust_rate | Rate another AI agent (1-5 stars).
Submit a trust rating from one agent to another.
Args:
from_did: Your agent's DID (the rater)
to_did: Target agent's DID (the agent being rated)
score: Rating from 1 (untrusted) to 5 (highly trusted)
params: from_did*, to_did*, score* |
moltrust_credential | Issue or verify a W3C Verifiable Credential.
Args:
action: Either "issue" or "verify"
subject_did: DID of the credential subject (required for "issue")
credential_type: Type of credential (default: "AgentTrustCredential", only for "issue")
credential: JSON string of the credential to verify (required for "verify")
params: action*, subject_did, credential_type, credential |
moltrust_credits | Manage MolTrust credits: check balance, view pricing, transfer credits, or view transaction history.
Args:
action: One of "balance", "pricing", "transfer", or "transactions"
did: Agent DID (required for "balance" and "transactions")
to_did: Recipient DID (required for "transfer")
amount: Number of credits to transfer (required for "transfer", must be >= 1)
params: action*, did, to_did, amount, reference, limit, offset |
moltrust_deposit_info | Get USDC deposit instructions to buy MolTrust credits.
Returns the MolTrust wallet address on Base (Ethereum L2),
USDC token contract, conversion rate (1 USDC = 100 credits),
and step-by-step instructions.
params: none |
moltrust_claim_deposit | Claim MolTrust credits from a USDC deposit on Base.
After sending USDC to the MolTrust wallet on Base (L2),
submit the transaction hash to receive credits.
1 USDC = 100 credits, verified on-chain.
Args:
tx_hash: Base blockchain transaction hash (0x...)
did: Your agent's DID to credit
params: tx_hash*, did* |
moltrust_stats | Get MolTrust network statistics.
Returns total registered agents, credentials issued,
ratings given, and other network health metrics.
params: none |
moltrust_deposit_history | Get USDC deposit history for an agent.
Args:
did: The agent's DID
params: did* |
moltrust_erc8004 | Query the ERC-8004 on-chain agent registry on Base.
Resolve MolTrust agents to their on-chain ERC-8004 identity, fetch Agent Cards,
or look up on-chain agents by their agentId.
Args:
action: One of "card", "resolve", or "well-known"
did: Agent DID (required for "card", e.g. "did:moltrust:a1b2c3d4e5f60718")
agent_id: On-chain ERC-8004 agent ID (required for "re params: action*, did, agent_id |
moltguard_score | Get an agent trust score for a Base wallet address.
Analyzes on-chain activity, ERC-8004 registration, USDC balance,
counterparty diversity, and MolTrust credentials to produce a 0-100 score.
Args:
address: Base (EVM) wallet address (0x...)
params: address* |
moltguard_detail | Get a detailed agent trust report for a Base wallet address.
Returns full scoring breakdown, wallet history from Blockscout,
ERC-8004 registration, MolTrust DID cross-reference, and Sybil indicators.
Args:
address: Base (EVM) wallet address (0x...)
params: address* |
moltguard_sybil | Scan a Base wallet for Sybil indicators.
Analyzes wallet age, transaction patterns, counterparty diversity,
and funding source to detect potential Sybil wallets.
Also traces funding clusters — if the funder sent ETH to many wallets,
it indicates a Sybil ring.
Args:
address: Base (EVM) wallet address (0x...)
params: address* |
moltguard_market | Check a Polymarket prediction market for integrity anomalies.
Analyzes volume spikes, price-volume divergence, liquidity ratios,
and outcome price spreads to detect potential manipulation.
Args:
market_id: Polymarket market/condition ID
params: market_id* |
moltguard_feed | Get the top anomaly feed — markets with highest integrity concerns.
Scans the top 20 active Polymarket markets by 24h volume and returns
those with anomaly indicators, sorted by anomaly score.
params: none |
moltguard_credential_issue | Issue a W3C Verifiable Credential (AgentTrustCredential) for a wallet.
The credential contains the agent's trust score, Sybil score,
ERC-8004 registration status, and MolTrust verification status.
It is cryptographically signed with Ed25519 (JWS).
Args:
address: Base (EVM) wallet address (0x...)
params: address* |
moltguard_credential_verify | Verify a MoltGuard Verifiable Credential JWS signature.
Checks the Ed25519 signature and returns the credential payload if valid.
Args:
jws: JWS compact serialization string from a MoltGuard credential
params: jws* |
mt_shopping_info | Get MT Shopping API information.
Returns the MT Shopping service info including version, supported
endpoints, BuyerAgentCredential schema, and verification details.
params: none |
mt_shopping_verify | Verify a shopping transaction against a BuyerAgentCredential.
Checks the credential signature, spend limits, trust score, and
returns a verification receipt with approval status.
Args:
credential_jws: JWS compact serialization of the BuyerAgentCredential
transaction_amount: Transaction amount (e.g. 189.99)
transaction_currency: Currency code (e.g. "USDC")
params: credential_jws*, transaction_amount*, transaction_currency*, merchant_id*, item_description* |
mt_shopping_issue_vc | Issue a BuyerAgentCredential (W3C Verifiable Credential) for a shopping agent.
Creates a cryptographically signed credential that authorizes an AI agent
to make purchases on behalf of a human, with enforced spend limits.
Args:
agent_did: DID of the shopping agent (e.g. "did:moltrust:agent123")
human_did: DID of the authorizing human (e.g. "did:moltrust:human456")
params: agent_did*, human_did*, spend_limit*, currency*, categories*, validity_days |
mt_travel_info | Get MT Travel service information and available endpoints.
Returns service description, supported segments, and API endpoints
for the MT Travel booking trust protocol.
params: none |
mt_travel_verify | Verify a travel booking against a TravelAgentCredential.
Runs a 10-step verification pipeline: VC signature, expiry, agent DID match,
segment authorization, spend limit, currency, daily cap, trust score,
delegation chain, and traveler binding.
Args:
agent_did: DID of the booking agent (e.g. "did:base:0x...")
vc_json: The TravelAgentCredential as a JSON string
params: agent_did*, vc_json*, merchant*, segment*, amount*, currency* |
mt_travel_issue_vc | Issue a TravelAgentCredential (W3C Verifiable Credential) for a booking agent.
Creates a cryptographically signed credential that authorizes an AI agent
to book travel on behalf of a principal (company/human), with enforced
segment permissions and spend limits.
Args:
agent_did: DID of the travel agent (e.g. "did:base:0x...")
principal_did: DID of the authorizing e params: agent_did*, principal_did*, segments*, spend_limit*, currency*, traveler_name, validity_days |
mt_skill_audit | Audit an AI agent skill (SKILL.md) for security risks.
Fetches the SKILL.md from a URL, computes its canonical SHA-256 hash,
and runs an 8-point security audit checking for prompt injection,
data exfiltration, tool scope violations, and metadata completeness.
Score starts at 100 with deductions per finding. Passing score: >= 70.
Args:
github_url: URL to the skill (Git params: github_url* |
mt_skill_verify | Verify an AI agent skill by its canonical SHA-256 hash.
Checks if a VerifiedSkillCredential has been issued for this skill hash.
Returns credential details if verified.
Args:
skill_hash: Canonical skill hash (e.g. "sha256:a1b2c3...")
params: skill_hash* |
mt_skill_issue_vc | Issue a VerifiedSkillCredential for an AI agent skill.
Fetches SKILL.md, runs security audit, and if score >= 70, issues a
W3C Verifiable Credential signed with Ed25519 (JWS compact serialization).
Requires x402 payment ($5 USDC) when paywall is active.
Args:
author_did: DID of the skill author (e.g. "did:base:0x...")
repository_url: URL to the skill repository or params: author_did*, repository_url* |
mt_prediction_link | Link a prediction market wallet and sync its track record.
Fetches trade history from Polymarket, calculates a prediction score (0-100),
and stores the wallet profile. Optionally links it to a MolTrust DID.
Args:
address: Prediction market wallet address (0x-prefixed, 42 chars)
platform: Platform name (default: "polymarket")
did: Optional MolTrust DID to link params: address*, platform, did |
mt_prediction_wallet | Get prediction market profile and track record for a wallet.
Returns the prediction score (0-100), win/loss record, volume, ROI,
score breakdown, and recent market events.
Args:
address: Prediction market wallet address (0x-prefixed, 42 chars)
params: address* |
mt_prediction_leaderboard | Get the prediction market leaderboard — top wallets by prediction score.
Returns wallets ranked by their composite prediction score,
which factors in win rate, ROI, volume, sample size, and recency.
Args:
limit: Number of entries to return (default 20, max 100)
params: limit |
mt_salesguard_verify | Verify product provenance via MT Salesguard.
Checks whether a product ID has a valid ProductProvenanceCredential
issued by an authorized brand. Returns brand info, credential hash,
Base anchor, and risk level.
Args:
product_id: Product identifier (e.g. "AIRMAX-90-WHITE-43")
params: product_id* |
mt_salesguard_reseller | Verify reseller authorization via MT Salesguard.
Checks whether a reseller DID has been authorized by a brand
to sell specific products. Returns authorization status, brand info,
authorized SKUs, and expiry.
Args:
reseller_did: Reseller DID (e.g. "did:web:sneakerstore.com")
params: reseller_did* |
mt_salesguard_register | Register a brand with MT Salesguard.
Creates a new brand identity with a DID and API key.
The API key is used to authenticate product registration
and reseller authorization requests.
Args:
name: Brand name (e.g. "Nike", "Adidas")
domain: Brand domain (e.g. "nike.com")
contact_email: Contact email for the brand (optional)
params: name*, domain*, contact_email |
mt_fantasy_commit | Commit a fantasy lineup with a SHA-256 hash anchored on Base L2.
Creates a FantasyLineupCredential (W3C VC) proving the lineup was
locked before contest start. The commitment hash is tamper-proof.
Args:
agent_did: Agent DID (e.g. "did:moltrust:a1b2c3d4e5f67890")
contest_id: Unique contest identifier (e.g. "dk-nfl-sun-main-2026w12")
platform: Platform name: dra params: agent_did*, contest_id*, platform*, sport*, contest_start_iso*, lineup_json*, projected_score, confidence, entry_fee_usd, contest_type |
mt_fantasy_verify | Verify a fantasy lineup commitment. Public endpoint, no auth required.
Returns the full lineup, timing proof (minutes before contest),
on-chain verification status, and the FantasyLineupCredential.
Args:
commitment_hash: The 64-char SHA-256 commitment hash
params: commitment_hash* |
mt_fantasy_history | Get fantasy lineup history and stats for an agent.
Returns ITM rate, ROI, projection accuracy, and recent lineups
for the specified agent DID.
Args:
did: Agent DID (e.g. "did:moltrust:a1b2c3d4e5f67890")
params: did* |
mt_create_interaction_proof | Create an interaction proof before issuing a SkillEndorsementCredential.
Returns evidence_hash and base_tx_hash anchored on Base L2.
Required before calling mt_endorse_agent. Valid for 72 hours.
Args:
api_key: MolTrust API key of the agent creating the proof
agent_a: DID of the first agent in the interaction
agent_b: DID of the second agent in the interaction
params: api_key*, agent_a*, agent_b*, interaction_type, outcome |
mt_endorse_agent | Issue a W3C SkillEndorsementCredential for another agent.
Requires a valid evidence_hash from mt_create_interaction_proof
(max 72h old). Self-endorsement is rejected.
Contributes to the endorsed agent's Trust Score.
Args:
endorser_api_key: MolTrust API key of the endorsing agent
endorsed_did: DID of the agent to endorse
skill: Skill being endorsed (python, params: endorser_api_key*, endorsed_did*, skill*, evidence_hash*, evidence_timestamp*, vertical* |
mt_get_trust_score | Get the Swarm Intelligence Trust Score for an agent (Phase 2).
Score combines direct endorsements, propagated trust from endorsers,
cross-vertical credential bonus, and interaction proof activity.
Returns null/withheld if fewer than 3 independent endorsers (non-seed).
Seed agents get their base score directly.
Args:
did: DID of the agent to score (e.g. "did:moltrust:a params: did* |
mt_get_swarm_graph | Get the trust propagation graph for an agent (2 hops).
Returns nodes (agents with scores) and edges (endorsements) showing
who endorses this agent and who endorses them.
Args:
did: DID of the agent to get graph for
params: did* |
mt_get_swarm_stats | Get global Swarm Intelligence statistics.
Returns total agents, endorsements, seed agents, average trust score,
propagation depth, and top trusted agents.
params: none |
mt_register_seed | Register a trusted seed agent in the Swarm Intelligence network (admin only).
Seed agents bootstrap the trust network with a base score.
Requires the ADMIN_KEY for authorization.
Args:
did: DID of the agent to register as seed
label: Human-readable label for the seed agent
base_score: Base trust score (0-100, default 80)
admin_key: Admin key for author params: did*, label*, base_score, admin_key |
mt_get_badge | Get the Verified by MolTrust badge status for an agent.
Returns badge tier, trust score, grade, issue/expiry dates,
and embeddable SVG URL.
Args:
did: The DID of the agent to check
params: did* |
mt_issue_badge | Issue a Verified by MolTrust badge for an agent.
Tiers: 'verified' (score 40+, $5), 'trusted' (score 60+, $20).
Badge is valid for 1 year and auto-revokes if trust score drops.
Args:
did: The DID of the agent to issue a badge for
tier: Badge tier — 'verified' or 'trusted'
params: did*, tier |
mt_check_badge | Quick check: is this agent badge-verified by MolTrust?
Returns a simple yes/no with tier and expiry info.
Args:
did: The DID of the agent to check
params: did* |
mt_issue_music_credential | Issue a VerifiedMusicCredential for an AI-generated music track.
Creates a W3C Verifiable Credential proving the provenance of an
AI-generated music track — which tool created it, whether a human
was involved, and what rights apply. Anchored on Base L2.
EU AI Act Article 50(2) compliant.
Args:
agent_did: DID of the agent/creator (e.g. "did:moltrust:abc123")
to params: agent_did*, tool*, human_oversight*, rights*, track_title*, track_description, genre, isrc |
mt_verify_music_credential | Verify a VerifiedMusicCredential by its ID.
Checks whether a music credential is valid (not revoked),
returns provenance summary including tool, human oversight,
rights, and on-chain anchor status.
Args:
credential_id: UUID of the music credential
params: credential_id* |
mt_get_track_provenance | Get full provenance details for a music credential.
Returns the complete VerifiedMusicCredential including track
metadata, provenance hash, EU AI Act compliance status,
and on-chain anchor information.
Args:
credential_id: UUID of the music credential
params: credential_id* |
molcheck_verdict | Verdict + per-check breakdown for an agent against its committed mandate.
Read-only. Recomputable from public chain data + the public mandate.
Args:
agent: agent address, did:moltrust / did:web, or ERC-8004 reference (public)
params: agent* |
moltproof_verdict | Deprecated alias of molcheck_verdict; use that name. Verdict + per-check breakdown for an agent against its committed mandate.
Read-only. Recomputable from public chain data + the public mandate.
Args:
agent: agent address, did:moltrust / did:web, or ERC-8004 reference (public)
params: agent* |
molcheck_mandate | The committed AAE mandate for an agent (venues, position cap, validity).
Read-only.
Args:
agent: public agent identifier (address / DID / ERC-8004 ref)
params: agent* |
moltproof_mandate | Deprecated alias of molcheck_mandate; use that name. The committed AAE mandate for an agent (venues, position cap, validity).
Read-only.
Args:
agent: public agent identifier (address / DID / ERC-8004 ref)
params: agent* |
molcheck_evidence | Verdict plus the decoded transactions that breached the mandate.
Read-only.
Args:
agent: public agent identifier (address / DID / ERC-8004 ref)
params: agent* |
moltproof_evidence | Deprecated alias of molcheck_evidence; use that name. Verdict plus the decoded transactions that breached the mandate.
Read-only.
Args:
agent: public agent identifier (address / DID / ERC-8004 ref)
params: agent* |
molcheck_registry | Agents with committed mandates and their current verdict.
Read-only. Ranks NO_MANDATE / NEEDS_REVIEW lower.
params: none |
moltproof_registry | Deprecated alias of molcheck_registry; use that name. Agents with committed mandates and their current verdict.
Read-only. Ranks NO_MANDATE / NEEDS_REVIEW lower.
params: none |
molcheck_verify | Recompute a verdict from public inputs and check its signature.
Offline and read-only: no DID/mandate/context is fetched here.
Args:
agent: public agent identifier
mandate: the public AAE Verifiable Credential
actions: public, already-decoded on-chain actions
signature: optional prior MolCheck signature to check
params: agent*, mandate*, actions*, signature |
moltproof_verify | Deprecated alias of molcheck_verify; use that name. Recompute a verdict from public inputs and check its signature.
Offline and read-only: no DID/mandate/context is fetched here.
Args:
agent: public agent identifier
mandate: the public AAE Verifiable Credential
actions: public, already-decoded on-chain actions
signature: optional pr params: agent*, mandate*, actions*, signature |
ads_onboard | How an agent starts with MolTrust Ads: verdicts (allow / hold / forbid) on Amazon
Ads MCP tool calls before they run. Plans, key sign-up, SDK, endpoints. No input,
no account needed.
params: none |
ads_mandate_template | Build an ads profile and its AAE mandate for one or more Amazon Ads accounts.
Pure: nothing is stored. Returns `profile` (pass it to ads_check) and `mandate`
(what /enforce/check evaluates).
Args:
account_ids: advertiserAccountId / profileId values the agent may act on
brands: brands the agent may touch
daily_budget_cap_usd: largest dai params: account_ids*, brands*, daily_budget_cap_usd, hold_threshold_usd, total_daily_budget_cap_usd, period_budget_cap_usd, max_bid_usd, max_bid_change_percent, valid_from, valid_until, tools, mandate_id, principal_did, principal_public_key, approvers |
ads_check | Allow / hold / forbid for one intended Amazon Ads MCP tool call, before it runs.
Needs your MolTrust API key as the X-API-Key header of the MCP connection (free key:
POST https://api.moltrust.ch/auth/signup). Counts against your plan like any check.
Never send Amazon credentials: they are refused.
Args:
profile: the `profile` object from ads_mandate_te params: profile*, tool*, arguments*, context |
canary_issue | Issue a leak canary for one counterparty: a credential to hand to that counterparty.
If anyone else presents it at the MolTrust verifier, you get a signed leak event that
names the counterparty. Costs what a credential costs. Needs your MolTrust API key as
the X-API-Key header of the MCP connection.
Args:
counterparty_did: DID of the agent you hand the params: counterparty_did*, mode, on_leak, credential_type |
canary_list | Your leak canaries, newest first: counterparty, mode, reaction on leak and the number
of events so far. Paginated with limit/offset; `next_offset` is null on the last page.
Needs your MolTrust API key as X-API-Key on the MCP connection.
params: limit, offset |
canary_events | Your leak events, newest first, each signed by MolTrust and carrying AER material
that `moltrust-verify` recomputes offline (trust list: GET /canary/trust-list).
Optionally for one canary. Needs your MolTrust API key as X-API-Key on the MCP
connection.
Args:
canary_id: only events of this canary (from canary_issue or canary_list)
limit: page params: canary_id, limit, offset |
Entries describe changes in tool definitions. They are not statements about a server, its quality or its author. The grade measures how the tool definitions fit model providers (token cost, schema compatibility, confusable names) as scored by the ToolFit engine at the time of the listing. JSON: append .json. Opt-out: how or hello@youraitools.co.