← Back to search

xProof

jasonxkensei streamable_http Scanned 1h ago

Proof primitive for AI agents on MultiversX. Anchor file hashes on-chain as verifiable proofs.

MCP Registry ↗
D
40 / 100

Versions

1.2.0latest
first seen May 19, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 7

verify_proof
annotations: none low

Verify an existing xproof certification. Returns proof details including file hash, timestamp, blockchain transaction, and verification status.

proof_id string
get_proof
annotations: none low

Retrieve a proof in structured JSON or Markdown format. Use JSON for machine processing, Markdown for LLM consumption.

proof_id string
discover_services
annotations: none low

Discover available Prove Before Act certification services, live pricing, and capabilities. No authentication required.

check_attestations
annotations: none low

Check domain-specific attestations for an AI agent wallet on Prove Before Act. Returns active attestations issued by third-party certifying bodies (healthcare, finance, legal, security, research). Use the returned attestation data when assessing credentials before delegating a sensitive task.

wallet string
investigate_proof
annotations: none low

Reconstruct the full 4W audit trail for a contested agent action. Returns WHO (agent identity + SIGIL), WHAT (SHA-256 hash on-chain), WHEN (MultiversX block timestamp), WHY (decision chain anchored before acting). Includes verification summary with intent_preceded_execution flag, chronological timeline of WHY/WHAT proofs, and session heartbeat anchor. Requires x402 payment (current per-call USDC price on Base via X-PAYMENT header) or API key authentication. Without payment, returns payment requirements with USDC address and amount.

wallet string proof_id string
submit_outcome
annotations: none low

Submit the actual outcome for a decision previously anchored with metadata.confidence_level. Computes the confidence gap (anchored − actual) and stores it for calibration tracking. Operator-only — you must own the proof. Each proof can only have one outcome.

proof_id string outcome_score number
get_calibration
annotations: none low

Query an agent

n number agent_id string

Permissions 4

network medium
Server uses network capabilities via: fetch(), http, requests, urllib
filesystem low
Server uses filesystem capabilities via: fs, fs sync ops, fs.promises, open(), os, path, pathlib, tempfile
shell high
Server uses shell capabilities via: child_process, execSync()
env_vars low
Server uses env_vars capabilities via: os.environ, process.env

Scan Findings 124

low
Tool 'verify_proof' has no annotations annotation_checker · 100%
low
Tool 'get_proof' has no annotations annotation_checker · 100%
low
Tool 'discover_services' has no annotations annotation_checker · 100%
low
Tool 'check_attestations' has no annotations annotation_checker · 100%
low
Tool 'investigate_proof' has no annotations annotation_checker · 100%
low
Tool 'submit_outcome' has no annotations annotation_checker · 100%
low
Tool 'get_calibration' has no annotations annotation_checker · 100%
medium
OAuth implementation without PKCE auth_checker · 75%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Excessive dependency count: 123 direct dependencies dependency_analyzer · 90%
medium
Suspicious package name: express-session dependency_analyzer · 60%
medium
Suspicious package name: react-dom dependency_analyzer · 60%
medium
Suspicious package name: react-icons dependency_analyzer · 60%
medium
Vulnerable dependency: dompurify@3.4.1 (GHSA-55q2-fjhq-7xh7) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3.4.1 (GHSA-76mc-f452-cxcm) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3.4.1 (GHSA-c2j3-45gr-mqc4) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3.4.1 (GHSA-cmwh-pvxp-8882) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3.4.1 (GHSA-gvmj-g25r-r7wr) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3.4.1 (GHSA-hpcv-96wg-7vj8) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3.4.1 (GHSA-r47g-fvhr-h676) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3.4.1 (GHSA-rp9w-3fw7-7cwq) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3.4.1 (GHSA-vxr8-fq34-vvx9) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3.4.1 (GHSA-x4vx-rjvf-j5p4) dependency_analyzer · 95%
medium
Vulnerable dependency: express-rate-limit@8.2.1 (GHSA-46wh-pxpv-q5gq) dependency_analyzer · 95%
medium
Vulnerable dependency: jspdf@4.2.0 (GHSA-7x6v-j9x4-qf24) dependency_analyzer · 95%
medium
Vulnerable dependency: jspdf@4.2.0 (GHSA-wfv2-pwc8-crg5) dependency_analyzer · 95%
medium
Vulnerable dependency: minimatch@10.2.1 (GHSA-23c5-xmqv-rm74) dependency_analyzer · 95%
medium
Vulnerable dependency: minimatch@10.2.1 (GHSA-7r86-cg39-jmmj) dependency_analyzer · 95%
medium
Vulnerable dependency: protobufjs@7.6.3 (GHSA-j3f2-48v5-ccww) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@4.1.6 (GHSA-82fw-gwwq-j7x9) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@8.5.13 (GHSA-fxqj-rqcc-2cmp) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@8.5.13 (GHSA-r28c-9q8g-f849) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.4.2 (GHSA-fx2h-pf6j-xcff) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.4.2 (GHSA-v6wh-96g9-6wx3) dependency_analyzer · 95%
medium
Vulnerable dependency: tsup@8.0.0 (GHSA-3mv9-4h5g-vhg3) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@3.2.6 (GHSA-82fw-gwwq-j7x9) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@1.3.0 (GHSA-pjwx-r37v-7724) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@1.3.0 (PYSEC-2026-2564) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.25.0 (GHSA-9hjg-9r4m-mvj7) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.25.0 (GHSA-9wx4-h78v-vm56) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.25.0 (GHSA-gc5v-m9x4-r6x2) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.25.0 (GHSA-j8r2-6x86-q33q) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.25.0 (PYSEC-2023-74) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.25.0 (PYSEC-2026-1872) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.25.0 (PYSEC-2026-1873) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.25.0 (PYSEC-2026-2275) dependency_analyzer · 95%
medium
High-entropy string (5.99 bits/char) in jasonxkensei-prove-before-act-2ebdc09/server/prerender.ts:717 entropy_analyzer · 54%
medium
Buffer.from base64 in jasonxkensei-prove-before-act-2ebdc09/server/mx8004.ts:235 entropy_analyzer · 75%
medium
Buffer.from base64 in jasonxkensei-prove-before-act-2ebdc09/server/mx8004.ts:236 entropy_analyzer · 75%
medium
Buffer.from base64 in jasonxkensei-prove-before-act-2ebdc09/server/mx8004.ts:259 entropy_analyzer · 75%
medium
Buffer.from base64 in jasonxkensei-prove-before-act-2ebdc09/server/mx8004.ts:347 entropy_analyzer · 75%
medium
Buffer.from base64 in jasonxkensei-prove-before-act-2ebdc09/server/mx8004.ts:369 entropy_analyzer · 75%
medium
Buffer.from base64 in jasonxkensei-prove-before-act-2ebdc09/server/mx8004.ts:384 entropy_analyzer · 75%
medium
Buffer.from base64 in jasonxkensei-prove-before-act-2ebdc09/server/mx8004.ts:412 entropy_analyzer · 75%
medium
Buffer.from base64 in jasonxkensei-prove-before-act-2ebdc09/server/mx8004.ts:425 entropy_analyzer · 75%
medium
Buffer.from base64 in jasonxkensei-prove-before-act-2ebdc09/server/mx8004.ts:521 entropy_analyzer · 75%
medium
Buffer.from base64 in jasonxkensei-prove-before-act-2ebdc09/server/mx8004.ts:522 entropy_analyzer · 75%
medium
Buffer.from base64 in jasonxkensei-prove-before-act-2ebdc09/server/mx8004.ts:523 entropy_analyzer · 75%
medium
Buffer.from base64 in jasonxkensei-prove-before-act-2ebdc09/server/mx8004.ts:524 entropy_analyzer · 75%
medium
Buffer.from base64 in jasonxkensei-prove-before-act-2ebdc09/server/mx8004.ts:525 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in jasonxkensei-prove-before-act-2ebdc09/server/auditSchema.ts:175 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in jasonxkensei-prove-before-act-2ebdc09/server/auditSchema.ts:295 entropy_analyzer · 70%
medium
Buffer.from base64 in jasonxkensei-prove-before-act-2ebdc09/server/x402.ts:275 entropy_analyzer · 75%
medium
Buffer.from base64 in jasonxkensei-prove-before-act-2ebdc09/server/x402.ts:318 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in jasonxkensei-prove-before-act-2ebdc09/tests/api.test.ts:526 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in jasonxkensei-prove-before-act-2ebdc09/tests/mx8004.test.ts:167 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in jasonxkensei-prove-before-act-2ebdc09/tests/timestamp-decomposition.test.ts:15 entropy_analyzer · 70%
info
Tool: discover_services manifest_parser · 70%
medium
Hex string literal (>50 chars) in jasonxkensei-prove-before-act-2ebdc09/tests/mx8004-vm-struct-decoding.test.ts:108 entropy_analyzer · 70%
medium
Buffer.from base64 in jasonxkensei-prove-before-act-2ebdc09/server/routes/certifications.ts:156 entropy_analyzer · 75%
medium
Buffer.from base64 in jasonxkensei-prove-before-act-2ebdc09/server/routes/certifications.ts:507 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in jasonxkensei-prove-before-act-2ebdc09/server/routes/helpers.ts:479 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in jasonxkensei-prove-before-act-2ebdc09/server/routes/helpers.ts:485 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in jasonxkensei-prove-before-act-2ebdc09/server/routes/content.ts:22 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in jasonxkensei-prove-before-act-2ebdc09/server/routes/content.ts:29 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in jasonxkensei-prove-before-act-2ebdc09/server/routes/content.ts:3962 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in jasonxkensei-prove-before-act-2ebdc09/server/routes/acp.ts:1145 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in jasonxkensei-prove-before-act-2ebdc09/server/routes/acp.ts:1409 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in jasonxkensei-prove-before-act-2ebdc09/server/routes/acp.ts:1472 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in jasonxkensei-prove-before-act-2ebdc09/server/routes/acp.ts:1609 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in jasonxkensei-prove-before-act-2ebdc09/server/routes/acp.ts:1890 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in jasonxkensei-prove-before-act-2ebdc09/server/routes/acp.ts:1897 entropy_analyzer · 70%
medium
High-entropy string (6.48 bits/char) in jasonxkensei-prove-before-act-2ebdc09/client/src/pages/landing-zh.tsx:808 entropy_analyzer · 62%
medium
High-entropy string (6.49 bits/char) in jasonxkensei-prove-before-act-2ebdc09/client/src/pages/landing-zh.tsx:816 entropy_analyzer · 62%
medium
High-entropy string (6.26 bits/char) in jasonxkensei-prove-before-act-2ebdc09/client/src/pages/landing-zh.tsx:820 entropy_analyzer · 58%
medium
High-entropy string (6.13 bits/char) in jasonxkensei-prove-before-act-2ebdc09/client/src/pages/landing-zh.tsx:824 entropy_analyzer · 56%
medium
Hex string literal (>50 chars) in jasonxkensei-prove-before-act-2ebdc09/client/src/pages/docs.tsx:119 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in jasonxkensei-prove-before-act-2ebdc09/client/src/pages/docs.tsx:982 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in jasonxkensei-prove-before-act-2ebdc09/client/src/pages/docs.tsx:986 entropy_analyzer · 70%
medium
High-entropy string (5.86 bits/char) in jasonxkensei-prove-before-act-2ebdc09/client/src/pages/agent-context-zh.tsx:649 entropy_analyzer · 52%
medium
High-entropy string (5.72 bits/char) in jasonxkensei-prove-before-act-2ebdc09/client/src/pages/agent-context-zh.tsx:663 entropy_analyzer · 50%
medium
High-entropy string (5.82 bits/char) in jasonxkensei-prove-before-act-2ebdc09/client/src/pages/agent-context-zh.tsx:978 entropy_analyzer · 52%
medium
High-entropy string (5.93 bits/char) in jasonxkensei-prove-before-act-2ebdc09/client/src/pages/agent-context-zh.tsx:1015 entropy_analyzer · 54%
medium
High-entropy string (5.81 bits/char) in jasonxkensei-prove-before-act-2ebdc09/client/src/pages/agent-context-zh.tsx:1238 entropy_analyzer · 52%
medium
High-entropy string (6.11 bits/char) in jasonxkensei-prove-before-act-2ebdc09/client/src/pages/agent-context-zh.tsx:1239 entropy_analyzer · 56%
medium
High-entropy string (6.01 bits/char) in jasonxkensei-prove-before-act-2ebdc09/client/src/pages/agent-context-zh.tsx:1244 entropy_analyzer · 55%
medium
High-entropy string (5.91 bits/char) in jasonxkensei-prove-before-act-2ebdc09/client/src/pages/agent-context-zh.tsx:1251 entropy_analyzer · 53%
medium
High-entropy string (6.00 bits/char) in jasonxkensei-prove-before-act-2ebdc09/client/src/pages/agent-context-zh.tsx:1256 entropy_analyzer · 55%
medium
High-entropy string (5.76 bits/char) in jasonxkensei-prove-before-act-2ebdc09/client/src/pages/agent-context-zh.tsx:1257 entropy_analyzer · 51%
medium
Hex string literal (>50 chars) in jasonxkensei-prove-before-act-2ebdc09/npm-sdk/tests/client.test.ts:608 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in jasonxkensei-prove-before-act-2ebdc09/npm-sdk/tests/client.test.ts:864 entropy_analyzer · 70%
info
package.json metadata manifest_parser · 100%
info
pyproject.toml metadata manifest_parser · 100%
info
Tool: verify_proof manifest_parser · 70%
info
Tool: get_proof manifest_parser · 70%
info
Tool: check_attestations manifest_parser · 70%
info
Tool: investigate_proof manifest_parser · 70%
info
Tool: submit_outcome manifest_parser · 70%
info
Tool: get_calibration manifest_parser · 70%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (61) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 90%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
critical
Tool poisoning in 'submit_outcome': Directive language: 'you must' poisoning · 85%
info
SBOM generated: 1146 components sbom_generator · 100%
critical
Database URL with Password found in jasonxkensei-prove-before-act-2ebdc09/docs/deployment.md secret_scanner · 85%
high
Generic API Key Assignment found in jasonxkensei-prove-before-act-2ebdc09/docs/agent-integration.md secret_scanner · 75%
critical
Database URL with Password found in jasonxkensei-prove-before-act-2ebdc09/docs/environment-variables.md secret_scanner · 85%
high
Authorization Bearer Token found in jasonxkensei-prove-before-act-2ebdc09/xproof-examples/multiversx-mcp/claude_desktop_config.json secret_scanner · 70%
high
Authorization Bearer Token found in jasonxkensei-prove-before-act-2ebdc09/xproof-examples/multiversx-mcp/README.md secret_scanner · 70%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%