Council of AI GSPC
13 tools (9 free, 4 x402-metered): GSPC board, evidence, Ed25519 card verify. Measurement only.
Should I use this
Quality & Safety
Findings (13)
- HIGH
- MEDIUMin board_totals
- MEDIUMin get_axis
- MEDIUMin verify_card
- MEDIUMin list_cards
- MEDIUMin get_root
- MEDIUMin get_card
- MEDIUMin mcp_trust
- MEDIUMin measurement_index
- MEDIUMin commission_card
Based on automated analysis of tool definitions and protocol compliance.
Context Cost
This is the approximate number of tokens consumed each time the server's tools are loaded into a model's context. Higher counts reduce the attention available for other tasks.
Install
One-Click Install
Add this to your `claude_desktop_config.json` file:
{
"mcpServers": {
"gspc": {
"url": "https://councilof.ai/mcp/"
}
}
}Remote endpoints
https://councilof.ai/mcp/streamable-httpWhat it can do
Tool inventory
Tools (16)
🟢board_totals
Live GSPC board totals from https://councilof.ai/api/gspc. Returns the slot count and the measured count as two labelled numbers WITH their kind — a slot is a declared position on the board, a measurement is a real run behind it; the two are never summed and never swapped — plus as_of dates for the board and for this fetch. We measure, never certify. If the board cannot be fetched the answer is a distinct UNREACHABLE state: no cached number is ever presented as live.
Input Schema
{
"type": "object",
"properties": {},
"additionalProperties": false
}Output Schema
{
"type": "object",
"properties": {
"state": {
"type": "string",
"description": "LIVE or UNREACHABLE"
},
"counts": {
"type": "array",
"items": {
"type": "object",
"properties": {
"name": {
"type": "string"
},
"kind": {
"type": "string"
}
}
}
},
"public_count": {
"type": [
"string",
"null"
]
},
"count_grammar": {},
"by_family": {},
"as_of": {},
"source": {
"type": "string"
},
"not_a_certification": {
"type": "boolean"
}
},
"required": [
"state"
]
}🟢get_axis(axis)
One axis row from the live GSPC board at https://councilof.ai/api/gspc — every axis the board carries, behavioural and financial families alike, addressed by the axis id exactly as the board spells it: n, accuracy, interval, MEASURED or UNMEASURED status, family, kind, the bank or run-artifact URL behind the row, and dates. An unmeasured axis is a first-class answer — a declared slot with no run behind it, published so the gap is visible — never an error and never a zero. Never a certification.
Input Schema
{
"type": "object",
"properties": {
"axis": {
"type": "string",
"description": "The axis name as it appears on the board, e.g. governance, safety, jail, provenance-controls. Case-insensitive. An unknown name returns the list of names the board actually carries."
}
},
"required": [
"axis"
],
"additionalProperties": false
}Output Schema
{
"type": "object",
"properties": {
"state": {
"type": "string",
"description": "LIVE, NOT_ON_BOARD, BAD_INPUT or UNREACHABLE"
},
"axis": {
"type": [
"string",
"null"
]
},
"resolved_from": {
"type": "string",
"description": "present when the caller named an alias (e.g. gov) that resolved to this board axis"
},
"status": {
"type": [
"string",
"null"
]
},
"measured": {
"type": "boolean"
},
"family": {},
"n": {},
"accuracy": {},
"interval": {},
"leader": {},
"dataset": {},
"board_carries": {
"type": "array"
},
"source": {
"type": "string"
},
"not_a_certification": {
"type": "boolean"
}
},
"required": [
"state"
]
}🟢verify_card(card)
Verify a signed gspc.measurement-card under the published rule (https://councilof.ai/signed/HOW-TO-VERIFY.md): recompute the id from the canonical body bytes, then check the Ed25519 signature under the PINNED key published at did:web:csoai.org#card-attestation-1. A card that carries its own key proves only that the file is self-consistent — anyone can alter a body and sign it with a key they just generated — so a signer other than the published key is reported INVALID. Three verdicts, never two: VALID, INVALID (with the reason), or UNCHECKABLE when the check could not be completed — 'could not check' is a different claim from 'forged'. Accepts the card as a JSON object, a JSON string, or a councilof.ai / csoai.org URL. Never a certification.
Input Schema
{
"type": "object",
"properties": {
"card": {
"description": "The signed card: an object, a JSON string, or a councilof.ai / csoai.org URL to one.",
"anyOf": [
{
"type": "object"
},
{
"type": "string"
}
]
}
},
"required": [
"card"
],
"additionalProperties": false
}Output Schema
{
"type": "object",
"properties": {
"state": {
"type": "string",
"description": "VALID, INVALID or UNCHECKABLE"
},
"id": {
"type": [
"string",
"null"
]
},
"family": {
"type": [
"string",
"null"
]
},
"reason": {
"type": [
"string",
"null"
]
},
"reasons": {
"type": "array",
"items": {
"type": "string"
}
},
"checks": {
"type": "array",
"items": {
"type": "object",
"properties": {
"check": {
"type": "string"
},
"ok": {
"type": [
"boolean",
"null"
],
"description": "true = passed, false = failed, null = not applicable or not run (detail says UNCHECKED)"
},
"code": {
"type": "string"
},
"detail": {
"type": "string"
},
"advisory": {
"type": "boolean",
"description": "true = reported but never decides the verdict (the live did.json cross-check)"
}
}
}
},
"pinned_key": {
"type": [
"string",
"null"
]
},
"rule": {
"type": "string"
},
"note": {
"type": "string"
},
"not_a_certification": {
"type": "boolean"
}
},
"required": [
"state"
]
}🟢list_cards(axis, limit)
The published signed-card index (https://councilof.ai/signed/card_index.json): what the index declares (n_cards) and how many rows it actually carries, reported next to — never reconciled with — the count the card store endpoint (https://councilof.ai/api/cards) reports for itself. Two labelled numbers from two surfaces; if they disagree, this tool shows the disagreement rather than picking one. Optional filters return recent rows: axis, limit.
Input Schema
{
"type": "object",
"properties": {
"axis": {
"type": "string",
"description": "Only list rows whose axis matches this name (case-insensitive)."
},
"limit": {
"type": "integer",
"minimum": 0,
"maximum": 150,
"description": "How many rows to include in the listing (newest first). Default 10. The two counts are always reported in full regardless of this limit."
}
},
"additionalProperties": false
}Output Schema
{
"type": "object",
"properties": {
"index": {
"type": [
"object",
"null"
]
},
"card_store_count_endpoint": {
"type": [
"object",
"null"
]
},
"rows": {
"type": [
"array",
"null"
],
"items": {
"type": "object",
"properties": {
"card": {
"type": "string"
},
"axis": {
"type": "string"
},
"ts": {},
"signed": {}
}
}
},
"axis_query": {
"type": "object",
"properties": {
"asked": {
"type": "string"
},
"canonical": {
"type": "string"
},
"spellings": {
"type": "array",
"items": {
"type": "string"
}
},
"index_names_matched": {
"type": "array",
"items": {
"type": "string"
}
}
}
},
"doctrine": {
"type": "string"
},
"not_a_certification": {
"type": "boolean"
}
}
}🟢get_root
GET the permissionless public-root at https://councilof.ai/root.json. Returns merkle_root, card_count, as_of, and UNMEASURED notes. Separate from GSPC. Three states: VALID (fetched), UNREACHABLE (could not fetch), UNCHECKABLE (body unreadable). Never a certificate.
Input Schema
{
"type": "object",
"properties": {},
"additionalProperties": false
}Output Schema
{
"type": "object",
"properties": {
"state": {
"type": "string",
"description": "VALID, UNREACHABLE or UNCHECKABLE"
},
"merkle_root": {
"type": [
"string",
"null"
]
},
"card_count": {},
"as_of": {},
"kind": {},
"source": {
"type": "string"
},
"not_gspc": {
"type": "boolean"
}
},
"required": [
"state"
]
}🟢get_card(sha256)
GET one public-root card-v0 leaf by sha256 (64 hex) from https://councilof.ai/cards/{sha16}.json. UNMEASURED cells stay visible. Three states: VALID (fetched), INVALID (not a leaf of the live root), UNCHECKABLE (fetch failed). Not a GSPC measurement-card.
Input Schema
{
"type": "object",
"properties": {
"sha256": {
"type": "string",
"description": "64-char hex payload SHA-256 of the card-v0 leaf."
}
},
"required": [
"sha256"
],
"additionalProperties": false
}Output Schema
{
"type": "object",
"properties": {
"state": {
"type": "string",
"description": "VALID, INVALID or UNCHECKABLE"
},
"sha256": {
"type": "string"
},
"reason": {
"type": "string"
},
"source": {
"type": "string"
},
"surface": {},
"unmeasured": {},
"sig_ed25519": {},
"not_gspc": {
"type": "boolean"
}
},
"required": [
"state"
]
}🟢verify_inclusion(sha256)
Check a sha256 against the live public-root merkle via GET /api/proof?sha=. Three states only: VALID (included), INVALID (not a leaf), UNCHECKABLE (proof endpoint unreachable). Does not claim Ed25519 unless sig_ed25519 is present and checked separately. Never a grade.
Input Schema
{
"type": "object",
"properties": {
"sha256": {
"type": "string",
"description": "64-char hex digest to test for inclusion."
}
},
"required": [
"sha256"
],
"additionalProperties": false
}Output Schema
{
"type": "object",
"properties": {
"state": {
"type": "string",
"description": "VALID, INVALID or UNCHECKABLE"
},
"sha256": {
"type": "string"
},
"merkle_root": {
"type": [
"string",
"null"
]
},
"reason": {}
},
"required": [
"state"
]
}🟢x402_trust
GET the latest x402 catalog trust snapshot: counts of how many catalogued x402 resources open a correct 402 challenge vs how many are phantom on the wire. Counts only by doctrine — host details withheld; a 402 is NOT delivery; measurement, never certification.
Input Schema
{
"type": "object",
"properties": {},
"additionalProperties": false
}Output Schema
{
"type": "object",
"properties": {
"state": {
"type": "string",
"description": "VALID or UNREACHABLE"
},
"counts": {
"type": [
"object",
"null"
]
},
"headline": {
"type": [
"string",
"null"
]
},
"as_of": {
"type": [
"string",
"null"
]
},
"kind": {},
"source": {
"type": "string"
}
},
"required": [
"state"
]
}🟢mcp_trust
GET the latest MCP handshake trust snapshot (https://councilof.ai/interop/mcp-trust/latest.json): counts of how many internet-facing MCP servers answer a correct initialize handshake, how many respond with an auth challenge, and how many are unreachable. Counts only by doctrine — host details withheld by design. A partial round or a cap change is disclosed in the snapshot. Measurement, never certification. Three states: VALID (fetched), UNREACHABLE (could not fetch), UNCHECKABLE (body unreadable).
Input Schema
{
"type": "object",
"properties": {},
"additionalProperties": false
}Output Schema
{
"type": "object",
"properties": {
"state": {
"type": "string",
"description": "VALID or UNREACHABLE"
},
"counts": {
"type": [
"object",
"null"
]
},
"as_of": {
"type": [
"string",
"null"
]
},
"partial": {
"type": "boolean",
"description": "true whenever the enumeration did not complete — a cap-limited read is partial"
},
"partial_reason": {
"type": [
"string",
"null"
]
},
"enumeration": {
"type": [
"object",
"null"
]
},
"diff": {},
"kind": {},
"source": {
"type": "string"
},
"headline": {
"type": [
"string",
"null"
]
}
},
"required": [
"state"
]
}🟢measurement_index
Read the latest signed measurement-capsule index published at https://councilof.ai/measurement-capsules/latest.json: the index root over every capsule, each batch (adapter, kind, capsule count, measurement states, batch Merkle root, record sha256, record signature and OpenTimestamps state), the index's own board signature re-verified here against the pinned did:web:csoai.org#board-attestation-1 key, and the anchor states published beside it (OpenTimestamps, Rekor, XRPL) — PENDING is never called attested. States only: measurement, not endorsement; no verdict, score or ranking. NOT_PUBLISHED when no index is served; UNREACHABLE when the source could not be fetched.
Input Schema
{
"type": "object",
"properties": {},
"additionalProperties": false
}Output Schema
{
"type": "object",
"properties": {
"state": {
"type": "string",
"enum": [
"PUBLISHED",
"NOT_PUBLISHED",
"UNREACHABLE",
"UNCHECKABLE"
]
},
"doctrine": {
"type": "string",
"const": "measurement, not endorsement"
},
"version": {
"type": "string"
},
"index_root": {
"type": [
"string",
"null"
]
},
"n_capsules_total": {
"type": [
"integer",
"null"
]
},
"n_batches": {
"type": "integer"
},
"batches": {
"type": "array",
"items": {
"type": "object"
}
},
"signature": {
"type": "object"
},
"anchors": {
"type": "object"
},
"reason": {
"type": "string"
}
},
"required": [
"state"
]
}🟢verify_capsule(capsule_json)
Verify one measurement capsule. Pass capsule_json as the capsule's JSON TEXT (exact: number lexemes are kept) or as an object. Recomputes capsule_id (sha256 of the canonical JSON without capsule_id), picks the rule by the capsule's schema (csoai.measurement-capsule/0.2: RFC 6962 Merkle with 0x00/0x01 domain separation; the superseded v0.1 capsule schema: the v0.1 rule), finds the published batch of the same kind, recomputes that batch's root from its published leaves, and returns the audit path of this capsule against the root named by the signed index. States: INCLUDED, NOT_INCLUDED, ID_MISMATCH, UNCHECKABLE, NOT_PUBLISHED. Verifying is free forever. It proves the bytes were published and bound; what they measured is the capsule's own measurement_state and limitations — measurement, not endorsement.
Input Schema
{
"type": "object",
"properties": {
"capsule_json": {
"description": "The capsule: its JSON text (preferred, byte-exact) or the parsed object.",
"type": [
"string",
"object"
]
}
},
"required": [
"capsule_json"
],
"additionalProperties": false
}Output Schema
{
"type": "object",
"properties": {
"state": {
"type": "string",
"enum": [
"INCLUDED",
"NOT_INCLUDED",
"ID_MISMATCH",
"UNCHECKABLE",
"NOT_PUBLISHED",
"UNREACHABLE"
]
},
"doctrine": {
"type": "string",
"const": "measurement, not endorsement"
},
"capsule_id": {
"type": "object"
},
"batch": {
"type": "object"
},
"inclusion": {
"type": "object"
},
"index_signature": {
"type": "object"
},
"reason": {
"type": "string"
}
},
"required": [
"state"
]
}🟢server_evidence(endpoint_url)
Trust per server, not totals: every published measurement capsule about ONE endpoint URL across all batches — MCP contract-parity dimensions (AUTH, PAYMENT, PROTOCOL, TOOLS, VERSION), A2A card-signature state, self-parity cells for CSOAI's own doors, and any later adapter (e.g. tool drift) — each with its measurement_state, observed_at, correction_pointer, limitations, batch Merkle root and an inclusion pointer (verify_capsule re-derives inclusion). Read from a static per-endpoint shard keyed by sha256 of the normalised URL. An endpoint with no capsule answers NOT_MEASURED with an empty list — never an error and never a clean bill. No verdict, score or ranking: measurement, not endorsement.
Input Schema
{
"type": "object",
"properties": {
"endpoint_url": {
"type": "string",
"description": "The endpoint URL, e.g. https://example.com/mcp or an agent-card URL."
}
},
"required": [
"endpoint_url"
],
"additionalProperties": false
}Output Schema
{
"type": "object",
"properties": {
"state": {
"type": "string",
"enum": [
"MEASURED",
"NOT_MEASURED",
"NOT_PUBLISHED",
"UNREACHABLE",
"UNCHECKABLE"
]
},
"doctrine": {
"type": "string",
"const": "measurement, not endorsement"
},
"endpoint": {
"type": [
"string",
"null"
]
},
"n_capsules": {
"type": "integer"
},
"capsules": {
"type": "array",
"items": {
"type": "object"
}
},
"reason": {
"type": "string"
}
},
"required": [
"state"
]
}⚪commission_card(subject, axis, x_payment)
PAID (x402). Commission one signed card-v0 receipt (surface ras.commission) for a named subject on the frozen bank via https://councilof.ai/api/request-attestation. Re-serves every signed measurement card already on file for the subject; a payment never mints a MEASURED cell (fresh_run stays UNMEASURED until a published run exists). Without x_payment the tool returns the 402 challenge (accepts[] with asset, amount, payTo) plus a free preview of the cards already on file. Measurement, not certification — never a rank, a grade or a certificate. Verification stays free.
Input Schema
{
"type": "object",
"properties": {
"subject": {
"type": "string",
"description": "Subject to commission: a model id, instrument id or card sha (1-120 chars of [A-Za-z0-9._:/@+-])."
},
"axis": {
"type": "string",
"description": "Optional axis slug; omit for the subject-level commission."
},
"x_payment": {
"type": "string",
"description": "The X-PAYMENT header value (base64 x402 payload) signed by your wallet against accepts[] from the previous 402. Omit to receive the challenge."
}
},
"required": [
"subject"
],
"additionalProperties": false
}Output Schema
{
"type": "object",
"properties": {
"status": {
"type": "string",
"description": "PAYMENT_REQUIRED, DELIVERED, NOT_DEPLOYED, UNREACHABLE, UNREADABLE_RESPONSE, BAD_ARGUMENTS or HTTP_<code>"
},
"tool": {
"type": "string"
},
"route": {
"type": "string"
},
"http_status": {
"type": "integer"
},
"payment_presented": {
"type": "boolean"
},
"delivery_state": {
"type": "string"
},
"settlement_state": {
"type": "string"
},
"x402Version": {
"type": "integer"
},
"accepts": {
"type": "array"
},
"resource": {
"type": "object"
},
"deliverable": {},
"not_a_certification": {
"type": "boolean"
}
},
"required": [
"status"
],
"description": "The wrapper's status fields. On PAYMENT_REQUIRED (isError:true) the route's x402 PaymentRequired object (x402Version, resource, accepts, extensions) is spread at the top level too, per the x402 MCP transport."
}⚪art50_marking_evidence(url, bytes_b64, manifest_b64, preview, x_payment)
PAID (x402 or CSOAI LTD invoice). Article 50 marking-evidence pack via https://councilof.ai/api/art50/marking-evidence: is a machine-readable mark DETECTABLE in these bytes right now (C2PA manifest store, assertion hashes, hard binding, claim signature; IPTC digitalSourceType), beside the verbatim Art 50(2) excerpt hash and the Art 99(4) ceiling. Watermarks are UNCHECKABLE where no public detector exists and the pack says so. Point-in-time detection — never a conformity opinion, never a compliance word of any kind. preview=true is free and returns the same measurement unsigned. Without x_payment the tool returns the 402 challenge. If the route is not deployed on this origin the tool says NOT_DEPLOYED rather than inventing a result.
Input Schema
{
"type": "object",
"properties": {
"url": {
"type": "string",
"description": "Public http(s) URL of the generative output to measure (≤20 MiB)."
},
"bytes_b64": {
"type": "string",
"description": "Alternatively the output bytes, base64 (≤20 MiB decoded)."
},
"manifest_b64": {
"type": "string",
"description": "Alternatively a detached C2PA manifest store, base64 (manifest-only mode)."
},
"preview": {
"type": "boolean",
"description": "true = free unsigned measurement (no card sha, no signature)."
},
"x_payment": {
"type": "string",
"description": "The X-PAYMENT header value signed against accepts[] from the previous 402. Omit to receive the challenge."
}
},
"additionalProperties": false
}Output Schema
{
"type": "object",
"properties": {
"status": {
"type": "string",
"description": "PAYMENT_REQUIRED, DELIVERED, NOT_DEPLOYED, UNREACHABLE, UNREADABLE_RESPONSE, BAD_ARGUMENTS or HTTP_<code>"
},
"tool": {
"type": "string"
},
"route": {
"type": "string"
},
"http_status": {
"type": "integer"
},
"payment_presented": {
"type": "boolean"
},
"delivery_state": {
"type": "string"
},
"settlement_state": {
"type": "string"
},
"x402Version": {
"type": "integer"
},
"accepts": {
"type": "array"
},
"resource": {
"type": "object"
},
"deliverable": {},
"not_a_certification": {
"type": "boolean"
}
},
"required": [
"status"
],
"description": "The wrapper's status fields. On PAYMENT_REQUIRED (isError:true) the route's x402 PaymentRequired object (x402Version, resource, accepts, extensions) is spread at the top level too, per the x402 MCP transport."
}🟢rwa_evidence(asset, preview, x_payment)
PAID (x402). Per-request signed evidence card of ONE XRPL issued asset's deterministic on-ledger state via https://councilof.ai/api/rwa/evidence: AccountRoot lsf* flags, Domain, the two-way xrp-ledger.toml check (PASS / FAIL / UNCHECKABLE — unreachable is never FAIL), gateway_balances obligation, holders as the free reader has them, every raw fetch sha256'd. preview=true is free (unsigned state). Historical state at fetched_at — not a rating, not a guarantee, not a conformity mark; /api/xrpl and /root.json stay free. Without x_payment the tool returns the 402 challenge. If the route is not deployed on this origin the tool says NOT_DEPLOYED.
Input Schema
{
"type": "object",
"properties": {
"asset": {
"type": "string",
"description": "Symbol (as listed by https://councilof.ai/api/xrpl) or issuer r-address."
},
"preview": {
"type": "boolean",
"description": "true = free unsigned state."
},
"x_payment": {
"type": "string",
"description": "The X-PAYMENT header value signed against accepts[] from the previous 402. Omit to receive the challenge."
}
},
"required": [
"asset"
],
"additionalProperties": false
}Output Schema
{
"type": "object",
"properties": {
"status": {
"type": "string",
"description": "PAYMENT_REQUIRED, DELIVERED, NOT_DEPLOYED, UNREACHABLE, UNREADABLE_RESPONSE, BAD_ARGUMENTS or HTTP_<code>"
},
"tool": {
"type": "string"
},
"route": {
"type": "string"
},
"http_status": {
"type": "integer"
},
"payment_presented": {
"type": "boolean"
},
"delivery_state": {
"type": "string"
},
"settlement_state": {
"type": "string"
},
"x402Version": {
"type": "integer"
},
"accepts": {
"type": "array"
},
"resource": {
"type": "object"
},
"deliverable": {},
"not_a_certification": {
"type": "boolean"
}
},
"required": [
"status"
],
"description": "The wrapper's status fields. On PAYMENT_REQUIRED (isError:true) the route's x402 PaymentRequired object (x402Version, resource, accepts, extensions) is spread at the top level too, per the x402 MCP transport."
}🟢receipts_batch(from, to, preview, x_payment)
PAID (x402 or CSOAI LTD invoice). A historical batch of the estate's measurement receipts via https://councilof.ai/api/receipts/batch: every signed card-v0 leaf whose as_of falls in [from,to] (≤200), each with its Merkle inclusion path and the public root(s) that carried it, plus the root index for the window and one signed manifest card citing the batch sha256. preview=true is free and returns count, span, root count and the sha256 of the exact bytes the paid call returns. Recent leaves are free at /root.json, /cards/ and /api/proof?sha= — the batch sells assembly across history, never a conclusion. No settlement-receipt stream exists (/api/receipts/latest is UNPUBLISHED) and this tool never claims one. Without x_payment the tool returns the 402 challenge.
Input Schema
{
"type": "object",
"properties": {
"from": {
"type": "string",
"description": "Window start, ISO-8601. Required."
},
"to": {
"type": "string",
"description": "Window end, ISO-8601. Defaults to now."
},
"preview": {
"type": "boolean",
"description": "true = free: count, span, roots and batch sha256 without the leaves."
},
"x_payment": {
"type": "string",
"description": "The X-PAYMENT header value signed against accepts[] from the previous 402. Omit to receive the challenge."
}
},
"required": [
"from"
],
"additionalProperties": false
}Output Schema
{
"type": "object",
"properties": {
"status": {
"type": "string",
"description": "PAYMENT_REQUIRED, DELIVERED, NOT_DEPLOYED, UNREACHABLE, UNREADABLE_RESPONSE, BAD_ARGUMENTS or HTTP_<code>"
},
"tool": {
"type": "string"
},
"route": {
"type": "string"
},
"http_status": {
"type": "integer"
},
"payment_presented": {
"type": "boolean"
},
"delivery_state": {
"type": "string"
},
"settlement_state": {
"type": "string"
},
"x402Version": {
"type": "integer"
},
"accepts": {
"type": "array"
},
"resource": {
"type": "object"
},
"deliverable": {},
"not_a_certification": {
"type": "boolean"
}
},
"required": [
"status"
],
"description": "The wrapper's status fields. On PAYMENT_REQUIRED (isError:true) the route's x402 PaymentRequired object (x402Version, resource, accepts, extensions) is spread at the top level too, per the x402 MCP transport."
}Community
Evidence