io.github.tjcgraham-rgb/gaip-trust-assurance

Est-ce que io.github.tjcgraham-rgb/gaip-trust-assurance est sûr ?

Au dernier audit MCP Hub, le serveur MCP « io.github.tjcgraham-rgb/gaip-trust-assurance » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 6 outils

• gaip_check_sar_receipt≈ 389 tokens

  Use this when handed an x402 SAR-shaped receipt (draft proposal shape; may change). Pass `sar_receipt`, optionally the issuer's `public_key`. Returns missing fields, whether receipt_id matches the core and whether the signature checks out against that key. Free, read-only, no account; inputs must be public and non-personal.

  Paramètres, retour & exemple (2)

  Paramètres

  • public_key · ? · optionnel
    Optional: the issuer's Ed25519 public key, raw 32 bytes base64url or a JWK {kty: OKP, crv: Ed25519, x}. Omit to use GAIP's published keys.
  • sar_receipt · object · requis
    The SAR receipt object (or a whole gaip_receipt_export x402 result).

  Exemple d'appel

  {"name": "gaip_check_sar_receipt", "arguments": {"sar_receipt": {}}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• gaip_evidence_pack≈ 527 tokens

  Use this when an insurer, auditor or buyer asks what evidence exists about an agent or supplier. Pass its `subject` (public id or https URL). Returns conformance, watch, witness, repair and incident records with Merkle proofs, plus gaps. A compilation, not certification or advice. Free, read-only, no account; inputs must be public and non-personal.

  Paramètres, retour & exemple (3)

  Paramètres

  • scope · object · optionnel
    Optional: {receipt_ids, since, until, categories, max_items}.
  • subject · ? · requis
    The agent or supplier: its public id or https URL. Never a person.
  • requester · object · optionnel
    Optional: {purpose, continuity_handle} to include your own receipts.

  Exemple d'appel

  {"name": "gaip_evidence_pack", "arguments": {"subject": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• gaip_incident_bundle≈ 542 tokens

  Use this when something went wrong with an agent and you need the facts in order. Pass the `receipt_ids` you hold and attributed `observations`. Returns a verified, source-attributed timeline with an EU AI Act Art. 73 reference aid. No fault, cause or liability finding. Free, read-only, no account; inputs must be public and non-personal.

  Paramètres, retour & exemple (5)

  Paramètres

  • title · string · optionnel
    Optional: short incident title.
  • receipt_ids · array · optionnel
    GAIP receipt ids you hold about the incident.
  • observations · array · optionnel
    Attributed observations, each {source, statement, observed_at_utc}.
  • ai_system_ref · string · optionnel
    Optional: public id or URL of the AI system involved; given alone, GAIP starts the timeline from its own public records of that system.
  • data_classification · string · optionnel · PUBLIC | NON_PERSONAL_PUBLIC
    PUBLIC (default) or NON_PERSONAL_PUBLIC. Never send personal data.

  Exemple d'appel

  {"name": "gaip_incident_bundle", "arguments": {"title": "texte", "receipt_ids": [], "observations": [], "ai_system_ref": "texte", "data_classification": "PUBLIC"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• gaip_receipt_export≈ 276 tokens

  Use this when you need a GAIP receipt in another format. Pass `receipt_id` and `format`: x402 (attestation style), erc8004 (validation-response shape) or vc (W3C-VC-like JSON-LD). Ed25519-signed when the runtime key is available; hash chain and Merkle proof; no on-chain write. Free, read-only, no account; inputs must be public and non-personal.

  Paramètres, retour & exemple (2)

  Paramètres

  • format · string · requis · x402 | erc8004 | vc
    x402, erc8004 or vc.
  • receipt_id · string · requis
    The receipt_id exactly as an earlier GAIP result returned it. Have none? Call with any id: the refusal lists example_receipt_ids from GAIP's own public records.

  Exemple d'appel

  {"name": "gaip_receipt_export", "arguments": {"format": "x402", "receipt_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• inspect_counterparty_evidence≈ 659 tokens

  Use this when asked what evidence exists about an agent before delegating to it. Pass its `counterparty_id` and any `observations`. Returns task-specific evidence coverage, conflicts, gaps and GAIP's own earlier checks of it, with a receipt. Never a trust score or recommendation. Free, read-only, no account; inputs must be public and non-personal.

  Paramètres, retour & exemple (9)

  Paramètres

  • synthetic · boolean · optionnel
    Optional: true marks a test call.
  • episode_id · string · optionnel
    Optional: your own id to group related calls.
  • task_class · string · optionnel
    Task you want evidence for. Optional.
  • max_age_days · integer · optionnel
    Optional freshness window (default 30): GAIP history records older than this are STALE and do not count toward evidence_sufficiency.
  • observations · array · optionnel
    Optional: observations about it, each {source, observed_at, evidence_digest, lifecycle_state, claim}.
  • counterparty_id · string · optionnel
    Name or URL of the agent or service.
  • continuity_handle · object · optionnel
    Optional: the continuity_handle from an earlier GAIP result; links this call to your earlier ones.
  • data_classification · string · optionnel · PUBLIC | NON_PERSONAL_PUBLIC
    PUBLIC (default) or NON_PERSONAL_PUBLIC. Never send personal data.
  • independent_operator_id · string · optionnel
    Optional: your operator id (recorded as a claim, not verified).

  Exemple d'appel

  {"name": "inspect_counterparty_evidence", "arguments": {"synthetic": true, "episode_id": "texte", "task_class": "texte", "max_age_days": 1, "observations": [], "counterparty_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• verify_gaip_receipt≈ 400 tokens

  Use this when you hold a GAIP receipt_id and want to confirm it ("is this receipt genuine?"). Returns the retained record, hash chain and Merkle inclusion proof. Integrity only: it does not make the underlying claim true. Free, read-only, no account; inputs must be public and non-personal.

  Paramètres, retour & exemple (6)

  Paramètres

  • synthetic · boolean · optionnel
    Optional: true marks a test call.
  • episode_id · string · optionnel
    Optional: your own id to group related calls.
  • receipt_id · string · requis
    A receipt_id returned by an earlier GAIP call.
  • continuity_handle · object · optionnel
    Optional: the continuity_handle from an earlier GAIP result; links this call to your earlier ones.
  • data_classification · string · optionnel · PUBLIC | NON_PERSONAL_PUBLIC
    PUBLIC (default) or NON_PERSONAL_PUBLIC. Never send personal data.
  • independent_operator_id · string · optionnel
    Optional: your operator id (recorded as a claim, not verified).

  Exemple d'appel

  {"name": "verify_gaip_receipt", "arguments": {"receipt_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://www.gaipagents.com/mcp/agents/trust-assurance