Rightshold
License checks, signed rights proof, keyless pre-call checks for MCP servers, and the agent store
Should I use this
Quality & Safety
Findings (5)
- HIGHTool poisoning patterns detected
- MEDIUMTool description contains URL to non-standard domainin attribution_string
- INFOTool description contains placeholder or incomplete textin registry_lookup
- INFOTool description contains placeholder or incomplete textin kya_lookup
- INFOTool description contains placeholder or incomplete textin kya_check
Based on automated analysis of tool definitions and protocol compliance.
Context Cost
This is the approximate number of tokens consumed each time the server's tools are loaded into a model's context. Higher counts reduce the attention available for other tasks.
Install
One-Click Install
Add this to your `claude_desktop_config.json` file:
{
"mcpServers": {
"rightshold": {
"url": "https://www.rightshold.com/mcp"
}
}
}Remote endpoints
https://www.rightshold.com/mcpstreamable-httpWhat it can do
Tool inventory
Tools (24)
🟡start_here(license, use, question)
Call first if you are new to Rightshold. With {} it returns the five jobs Rightshold does, each as a ready call, plus how to connect. Add {"license": "CC-BY-NC-4.0", "use": "commercial_use"} or {"question": "Can I train a model on MIT code?"} and the same call answers it. Free, no key.
Input Schema
{
"type": "object",
"properties": {
"license": {
"type": "string",
"description": "Optional: an SPDX id to check right away, e.g. CC-BY-NC-4.0"
},
"use": {
"type": "string",
"enum": [
"commercial_use",
"redistribution",
"modification",
"sublicensing",
"deployment",
"model_training",
"model_inference"
],
"description": "Optional: the use to check the license for (default commercial_use)"
},
"question": {
"type": "string",
"maxLength": 500,
"description": "Optional: a rights question in plain English, answered in the same call"
}
}
}Output Schema
{
"type": "object"
}🟢read_ai_policy(domain, path)
Call before crawling, quoting or training on content from a website. Reads the domain's robots.txt for 14 AI crawlers and user-fetch agents (GPTBot, ClaudeBot, ChatGPT-User, Google-Extended, PerplexityBot, CCBot...), ai.txt and W3C TDMRep, and summarizes whether AI training is opted out. Free, no key, cached 6 hours. Signals, not a license. Call with {"domain": "example.com"}.
Input Schema
{
"type": "object",
"properties": {
"domain": {
"type": "string",
"description": "Host name such as example.com (a URL is accepted)"
},
"path": {
"type": "string",
"description": "Optional path to check, default /"
}
},
"required": [
"domain"
]
}Output Schema
{
"type": "object"
}🟢license_compatibility(licenses, intended_use)
Call before shipping one product that bundles code, data, fonts or media under different licenses. Checks 2-25 SPDX ids for your use (default redistribution): compatible, needs_review or incompatible, the reason for each pair, the combined duties and which license governs. Free, no key. Call with {"licenses": ["MIT", "GPL-3.0-only", "CC-BY-NC-4.0"], "intended_use": {"redistribution": true, "commercial_use": true}}.
Input Schema
{
"type": "object",
"properties": {
"licenses": {
"type": "array",
"minItems": 2,
"maxItems": 25,
"items": {
"type": "string"
},
"description": "SPDX ids"
},
"intended_use": {
"type": "object",
"additionalProperties": false,
"description": "Uses to check: each true flag must be documented; omitted = false; unknown fields refused. For instance {\"commercial_use\":true}",
"properties": {
"commercial_use": {
"type": "boolean"
},
"redistribution": {
"type": "boolean"
},
"modification": {
"type": "boolean"
},
"sublicensing": {
"type": "boolean"
},
"deployment": {
"type": "boolean"
},
"model_training": {
"type": "boolean"
},
"model_inference": {
"type": "boolean"
},
"attribution_planned": {
"type": "boolean"
},
"geography": {
"type": "string",
"minLength": 1,
"maxLength": 32,
"description": "worldwide (default) or a region code such as US, EU, UK"
},
"duration_days": {
"type": [
"integer",
"null"
],
"minimum": 1,
"maximum": 36500,
"description": "Whole days of use (1 to 36500), or null for no fixed term"
}
}
}
},
"required": [
"licenses"
]
}Output Schema
{
"type": "object",
"properties": {
"verdict": {
"enum": [
"compatible",
"needs_review",
"incompatible"
]
},
"combined_duties": {
"type": "array",
"items": {
"type": "string"
}
},
"pairs": {
"type": "array",
"items": {
"type": "object",
"properties": {
"verdict": {
"enum": [
"compatible",
"needs_review",
"conflict"
]
}
}
}
}
},
"required": [
"verdict",
"pairs"
]
}🟢attribution_string(license, title, author, source_url, changes)
Call when you reuse material that requires credit. Returns the attribution line the license asks for (text, markdown, html), the duties it covers and what is still missing. Free, no key. Call with {"license": "CC-BY-4.0", "title": "Sunset", "author": "A. Photographer", "source_url": "https://example.org/sunset", "changes": "cropped"}.
Input Schema
{
"type": "object",
"properties": {
"license": {
"type": "string",
"description": "SPDX id"
},
"title": {
"type": "string",
"description": "Work title"
},
"author": {
"type": "string",
"description": "Creator"
},
"source_url": {
"type": "string",
"description": "Where it came from"
},
"changes": {
"type": [
"string",
"boolean"
],
"description": "What you changed"
}
},
"required": [
"license"
]
}Output Schema
{
"type": "object",
"properties": {
"required": {
"type": "boolean"
},
"text": {
"type": "string"
},
"missing": {
"type": "array",
"items": {
"type": "string"
}
}
},
"required": [
"license",
"required",
"text"
]
}🟢ask_rightshold(question, resource_id, intended_use)
Call when you have a rights or licensing question in plain English, such as 'Can I use CC BY-NC 4.0 images in a paid ad campaign?'. Returns the license or registered resource and the use it understood, and a deterministic answer with reasons; it asks for clarification instead of guessing. Check the understood use before relying on it. Free, no key.
Input Schema
{
"type": "object",
"properties": {
"question": {
"type": "string",
"maxLength": 2000,
"description": "Plain-language rights question"
},
"resource_id": {
"type": "string",
"description": "Optional: pin a registered resource instead of letting the interpreter match one."
},
"intended_use": {
"type": "object",
"additionalProperties": false,
"description": "Uses to check: each true flag must be documented; omitted = false; unknown fields refused. For instance {\"commercial_use\":true}",
"properties": {
"commercial_use": {
"type": "boolean"
},
"redistribution": {
"type": "boolean"
},
"modification": {
"type": "boolean"
},
"sublicensing": {
"type": "boolean"
},
"deployment": {
"type": "boolean"
},
"model_training": {
"type": "boolean"
},
"model_inference": {
"type": "boolean"
},
"attribution_planned": {
"type": "boolean"
},
"geography": {
"type": "string",
"minLength": 1,
"maxLength": 32,
"description": "worldwide (default) or a region code such as US, EU, UK"
},
"duration_days": {
"type": [
"integer",
"null"
],
"minimum": 1,
"maximum": 36500,
"description": "Whole days of use (1 to 36500), or null for no fixed term"
}
}
}
},
"required": [
"question"
]
}Output Schema
{
"type": "object"
}🟢check_license(license, source_url, intended_use)
Call before using any image, text, dataset, code, font or model you did not create. Checks one license (any SPDX id; curated readings for the common ones, needs_review for the rest) or the license a GitHub, Hugging Face, npm, PyPI, Wikimedia, Unsplash or Pexels page declares (source_url), for your intended use. Returns permitted, prohibited, needs_review or not_documented, with duties and an uncertainty block (what the verdict leaves open; whether a human must review). Free, no key. Call with {"license": "CC-BY-4.0", "intended_use": {"commercial_use": true, "attribution_planned": true}}.
Input Schema
{
"type": "object",
"properties": {
"license": {
"type": "string",
"description": "SPDX id, e.g. CC-BY-NC-4.0 (uncurated ids answer needs_review)"
},
"source_url": {
"type": "string",
"description": "Instead of license: a page on GitHub, Hugging Face, npm, PyPI, Wikimedia Commons, Unsplash or Pexels; the license it declares is checked"
},
"intended_use": {
"type": "object",
"additionalProperties": false,
"description": "Uses to check: each true flag must be documented; omitted = false; unknown fields refused. For instance {\"commercial_use\":true}",
"properties": {
"commercial_use": {
"type": "boolean"
},
"redistribution": {
"type": "boolean"
},
"modification": {
"type": "boolean"
},
"sublicensing": {
"type": "boolean"
},
"deployment": {
"type": "boolean"
},
"model_training": {
"type": "boolean"
},
"model_inference": {
"type": "boolean"
},
"attribution_planned": {
"type": "boolean"
},
"geography": {
"type": "string",
"minLength": 1,
"maxLength": 32,
"description": "worldwide (default) or a region code such as US, EU, UK"
},
"duration_days": {
"type": [
"integer",
"null"
],
"minimum": 1,
"maximum": 36500,
"description": "Whole days of use (1 to 36500), or null for no fixed term"
}
}
}
},
"required": [
"intended_use"
]
}Output Schema
{
"type": "object",
"properties": {
"verdict": {
"enum": [
"permitted",
"prohibited",
"needs_review",
"not_documented"
]
},
"uncertainty": {
"type": "object"
},
"uses_evaluated": {
"type": "array",
"items": {
"type": "string"
}
},
"duties": {
"type": "array",
"items": {
"type": "string"
}
},
"findings": {
"type": "array"
},
"license": {
"type": [
"object",
"null"
],
"properties": {
"id": {
"type": "string"
},
"reference_hash": {
"type": "string"
}
}
}
},
"required": [
"verdict",
"findings"
]
}⚪assess_resource_for_use(resource_id, intended_use)
Deterministic rights assessment bound to the exact resource version, license and intended use, and to whether the publisher's rights authority is documented (a verified domain hosting the resource). Exactly four dispositions with reason codes; no trust score.
Input Schema
{
"type": "object",
"properties": {
"resource_id": {
"type": "string",
"description": "Registered resource id"
},
"intended_use": {
"type": "object",
"additionalProperties": false,
"description": "Uses to check: each true flag must be documented; omitted = false; unknown fields refused. For instance {\"commercial_use\":true}",
"properties": {
"commercial_use": {
"type": "boolean"
},
"redistribution": {
"type": "boolean"
},
"modification": {
"type": "boolean"
},
"sublicensing": {
"type": "boolean"
},
"deployment": {
"type": "boolean"
},
"model_training": {
"type": "boolean"
},
"model_inference": {
"type": "boolean"
},
"attribution_planned": {
"type": "boolean"
},
"geography": {
"type": "string",
"minLength": 1,
"maxLength": 32,
"description": "worldwide (default) or a region code such as US, EU, UK"
},
"duration_days": {
"type": [
"integer",
"null"
],
"minimum": 1,
"maximum": 36500,
"description": "Whole days of use (1 to 36500), or null for no fixed term"
}
}
}
},
"required": [
"resource_id",
"intended_use"
]
}Output Schema
{
"type": "object"
}🟢check_rights_batch(intended_use, items)
Call before shipping anything that bundles third-party assets. Checks up to 100 items (an SPDX id, a registered resource_id, or an asset URL or name) for their intended uses; licenses your account holds are reused first. Each item answers allowed, blocked, needs_review or insufficient_evidence, with reasons and duties. Free, no key. Call with {"intended_use": {"commercial_use": true}, "items": [{"ref": "logo-font", "license": "OFL-1.1"}, {"ref": "hero-photo", "license": "CC-BY-NC-4.0"}]}.
Input Schema
{
"type": "object",
"properties": {
"intended_use": {
"type": "object",
"additionalProperties": false,
"description": "Uses to check: each true flag must be documented; omitted = false; unknown fields refused. For instance {\"commercial_use\":true}",
"properties": {
"commercial_use": {
"type": "boolean"
},
"redistribution": {
"type": "boolean"
},
"modification": {
"type": "boolean"
},
"sublicensing": {
"type": "boolean"
},
"deployment": {
"type": "boolean"
},
"model_training": {
"type": "boolean"
},
"model_inference": {
"type": "boolean"
},
"attribution_planned": {
"type": "boolean"
},
"geography": {
"type": "string",
"minLength": 1,
"maxLength": 32,
"description": "worldwide (default) or a region code such as US, EU, UK"
},
"duration_days": {
"type": [
"integer",
"null"
],
"minimum": 1,
"maximum": 36500,
"description": "Whole days of use (1 to 36500), or null for no fixed term"
}
}
},
"items": {
"type": "array",
"maxItems": 100,
"items": {
"type": "object",
"properties": {
"ref": {
"type": "string",
"description": "Your label"
},
"resource_id": {
"type": "string"
},
"license": {
"type": "string",
"description": "SPDX id"
},
"asset": {
"type": "string",
"description": "URL or name"
},
"intended_use": {
"type": "object",
"additionalProperties": false,
"description": "Uses to check: each true flag must be documented; omitted = false; unknown fields refused. For instance {\"commercial_use\":true}",
"properties": {
"commercial_use": {
"type": "boolean"
},
"redistribution": {
"type": "boolean"
},
"modification": {
"type": "boolean"
},
"sublicensing": {
"type": "boolean"
},
"deployment": {
"type": "boolean"
},
"model_training": {
"type": "boolean"
},
"model_inference": {
"type": "boolean"
},
"attribution_planned": {
"type": "boolean"
},
"geography": {
"type": "string",
"minLength": 1,
"maxLength": 32,
"description": "worldwide (default) or a region code such as US, EU, UK"
},
"duration_days": {
"type": [
"integer",
"null"
],
"minimum": 1,
"maximum": 36500,
"description": "Whole days of use (1 to 36500), or null for no fixed term"
}
}
}
}
}
}
},
"required": [
"items"
]
}Output Schema
{
"type": "object",
"properties": {
"items": {
"type": "array",
"items": {
"type": "object",
"required": [
"ref",
"answer"
],
"properties": {
"answer": {
"enum": [
"allowed",
"blocked",
"needs_review",
"insufficient_evidence"
]
},
"duties": {
"type": "array",
"items": {
"type": "string"
}
}
}
}
},
"summary": {
"type": "object",
"required": [
"total",
"all_clear"
],
"properties": {
"all_clear": {
"type": "boolean"
}
}
}
},
"required": [
"items",
"summary"
]
}🟢verify_rights_manifest(manifest, signature, deliverable_sha256)
Check a rights manifest's signature against Rightshold's issuer keys and confirm its hash was recorded on the ledger; with deliverable_sha256, also that it covers those exact bytes. A valid manifest shows what was answered and when; it is not a license grant.
Input Schema
{
"type": "object",
"properties": {
"manifest": {
"type": "object",
"description": "Manifest as issued"
},
"signature": {
"type": "string",
"description": "Its signature"
},
"deliverable_sha256": {
"type": "string",
"description": "Optional: the SHA-256 of the deliverable you received"
}
},
"required": [
"manifest",
"signature"
]
}Output Schema
{
"type": "object",
"properties": {
"valid": {
"type": "boolean"
},
"cleared": {
"type": "boolean"
},
"environment": {
"enum": [
"live",
"sandbox",
"not_stated"
]
},
"reasons": {
"type": "array",
"items": {
"type": "string"
}
}
},
"required": [
"valid",
"cleared",
"reasons"
]
}🟡sign_up(display_name, email, kind, sandbox, accept_terms, ...)
Use when your principal wants a Rightshold account: one call creates it and a free API key (shown once), email optional. accept_terms:true means the account holder agrees to the terms at /terms. Add agent {handle, display_name, headline?, skills?, public_key_pem?} to register your agent in the same call (KYA L0); if that block is invalid nothing is created. The result carries ready-to-paste connector settings. sandbox:true gives an isolated rs_test_ key. Calls made with the account are recorded for due-diligence reports (see /privacy).
Input Schema
{
"type": "object",
"properties": {
"display_name": {
"type": "string",
"description": "Account name"
},
"email": {
"type": "string",
"description": "Optional"
},
"kind": {
"type": "string",
"enum": [
"individual",
"business",
"agent"
]
},
"sandbox": {
"type": "boolean",
"description": "If true, issue an rs_test_ sandbox key isolated from live stats and the live ledger."
},
"accept_terms": {
"type": "boolean",
"description": "Must be true."
},
"agent": {
"type": "object",
"description": "Optional: create this agent in the same call.",
"properties": {
"handle": {
"type": "string"
},
"display_name": {
"type": "string"
},
"headline": {
"type": "string"
},
"skills": {
"type": "array",
"items": {
"type": "string"
}
},
"public_key_pem": {
"type": "string",
"description": "Ed25519 public key in PEM format."
}
},
"required": [
"handle",
"display_name"
]
}
},
"required": [
"accept_terms"
]
}Output Schema
{
"type": "object"
}🟢get_pricing
Use this to see what Rightshold costs before you sign up or plan spend: every pricing line with its price today (0 during the preview), the planned price after the preview, its unit and free allowance, and the principles behind the prices — nothing buys placement, a grade, a KYA level, a verdict or a review. No account or key needed.
Input Schema
{
"type": "object",
"properties": {}
}Output Schema
{
"type": "object"
}🟢get_status
Use this to check whether Rightshold is operational before you depend on it, and to cite its record: the current component checks (ledger chain, sealing, Bitcoin anchoring, webhooks, storage), ledger and registry counts, plus the trailing-90-day uptime record per component and the incident history. The record is self-reported; check_conformance offers an independent re-check. No account or key needed.
Input Schema
{
"type": "object",
"properties": {}
}Output Schema
{
"type": "object"
}🟢registry_lookup(query, history)
Call before trusting, paying or hiring an agent you have not worked with. Free, no key. Look up an agent by registration number (RS-XXXX-XXXX) or handle: status (valid, expired, suspended, revoked), license classes in force, commerce limit, liens, and optionally the full history report. Call with {"query": "RS-XXXX-XXXX", "history": true}.
Input Schema
{
"type": "object",
"properties": {
"query": {
"type": "string",
"description": "RS number, handle or name"
},
"history": {
"type": "boolean",
"description": "Include ledger history"
}
},
"required": [
"query"
]
}Output Schema
{
"type": "object"
}🟢ledger_verify
Recompute every payload hash, leaf hash, Merkle root, block hash, chain link and signature.
Input Schema
{
"type": "object",
"properties": {}
}Output Schema
{
"type": "object"
}⚪issue_rights_receipt(idempotency_key, asset, license, resource_id, intended_use, ...)
Use when your principal wants signed proof that one asset you ship was cleared: a Rights Receipt (open standard rights-receipt/1) binding the file's SHA-256 to its license, intended use, verdict and duties, signed (keys at /.well-known/jwks.json) and committed to the ledger. Ship it as <file>.rights.json. Call with {"asset": {"sha256": "<64-hex sha256 of the file>", "kind": "font", "name": "Inter.ttf"}, "license": "OFL-1.1", "intended_use": {"commercial_use": true}}.
Input Schema
{
"type": "object",
"properties": {
"idempotency_key": {
"type": "string",
"maxLength": 255,
"description": "Optional: a retry with the same key returns the first proof."
},
"asset": {
"type": "object",
"required": [
"sha256"
],
"description": "The file",
"properties": {
"sha256": {
"type": "string",
"description": "64-hex SHA-256"
},
"kind": {
"enum": [
"image",
"font",
"dataset",
"code",
"model",
"audio",
"video",
"text",
"other"
]
},
"name": {
"type": "string"
},
"media_type": {
"type": "string"
},
"source_url": {
"type": "string"
}
}
},
"license": {
"type": "string",
"description": "SPDX id"
},
"resource_id": {
"type": "string"
},
"intended_use": {
"type": "object",
"description": "Same shape as check_license"
},
"agent": {
"type": "string"
},
"attribution": {
"type": "object",
"properties": {
"title": {
"type": "string"
},
"author": {
"type": "string"
}
}
},
"ttl_days": {
"type": "integer"
},
"api_key": {
"type": "string",
"deprecated": true,
"description": "Deprecated: use Authorization: Bearer <key> (arguments can reach transcripts)."
}
},
"required": [
"asset"
]
}Output Schema
{
"type": "object"
}🟢gate_check(policy, kya_token, agent, receipt, asset_sha256, ...)
Free. The Gate websites use on agent traffic: checks an RS-KYA token (or handle), a Web Bot Auth signature from any signer whose Signature-Agent resolves, a Rights Receipt, clearance and intent token against the site's policy (min_kya_level, require_kya, require_web_bot_auth, allowed_signature_agents, require_receipt, allow_agents, deny_agents, require_clearance, require_intent, max_intent_risk); allow or deny, with reasons.
Input Schema
{
"type": "object",
"properties": {
"policy": {
"type": "object",
"description": "Gate policy"
},
"kya_token": {
"type": "string",
"description": "Agent RS-KYA token"
},
"agent": {
"type": "string",
"description": "Or RS number/handle"
},
"receipt": {
"type": "object",
"description": "Rights Receipt"
},
"asset_sha256": {
"type": "string",
"description": "Uploaded file hash"
},
"clearance": {
"type": "string"
},
"intent_token": {
"type": "string"
},
"request": {
"type": "object",
"description": "The signed request {method, url, headers} as received: its Web Bot Auth signature, and the intent token's key binding."
}
}
}Output Schema
{
"type": "object"
}⚪issue_rights_manifest(idempotency_key, title, client, deliverable, intended_use, ...)
Use when your principal wants signed proof for a whole deliverable: checks every third-party input (resource_id, license or asset) for its use, reusing licenses you hold, and returns a signed, ledger-committed manifest plus a plain-text summary; verify_rights_manifest checks it. Call with {"title": "Spring campaign", "intended_use": {"commercial_use": true}, "items": [{"ref": "font", "license": "OFL-1.1"}]}.
Input Schema
{
"type": "object",
"properties": {
"idempotency_key": {
"type": "string",
"maxLength": 255,
"description": "Optional: a retry with the same key returns the first proof."
},
"title": {
"type": "string"
},
"client": {
"type": "string"
},
"deliverable": {
"type": "object"
},
"intended_use": {
"type": "object",
"additionalProperties": false,
"description": "Uses to check: each true flag must be documented; omitted = false; unknown fields refused. For instance {\"commercial_use\":true}",
"properties": {
"commercial_use": {
"type": "boolean"
},
"redistribution": {
"type": "boolean"
},
"modification": {
"type": "boolean"
},
"sublicensing": {
"type": "boolean"
},
"deployment": {
"type": "boolean"
},
"model_training": {
"type": "boolean"
},
"model_inference": {
"type": "boolean"
},
"attribution_planned": {
"type": "boolean"
},
"geography": {
"type": "string",
"minLength": 1,
"maxLength": 32,
"description": "worldwide (default) or a region code such as US, EU, UK"
},
"duration_days": {
"type": [
"integer",
"null"
],
"minimum": 1,
"maximum": 36500,
"description": "Whole days of use (1 to 36500), or null for no fixed term"
}
}
},
"items": {
"type": "array",
"maxItems": 100,
"items": {
"type": "object",
"properties": {
"ref": {
"type": "string",
"description": "Your label"
},
"resource_id": {
"type": "string"
},
"license": {
"type": "string",
"description": "SPDX id"
},
"asset": {
"type": "string",
"description": "URL or name"
},
"intended_use": {
"type": "object",
"description": "Optional per-item override, same shape as intended_use"
}
}
}
},
"api_key": {
"type": "string",
"deprecated": true,
"description": "Deprecated: use Authorization: Bearer <key> (arguments can reach transcripts)."
}
},
"required": [
"title",
"items"
]
}Output Schema
{
"type": "object"
}🟢kya_lookup(agent, credential)
An agent's RS-KYA level (L0 declared, L1 key-bound, L2 operator-verified), status, the verified facts behind it (key, operator contact, attestation, DNS domain, registration, bureau record) and what is missing for the next level. With credential=true, also a signed credential and a one-hour kya+jwt token to present to other services. Call with {"agent": "RS-XXXX-XXXX"}.
Input Schema
{
"type": "object",
"properties": {
"agent": {
"type": "string",
"description": "Registration number (RS-XXXX-XXXX), handle or agent id"
},
"credential": {
"type": "boolean",
"description": "Return the signed credential"
}
},
"required": [
"agent"
]
}Output Schema
{
"type": "object"
}🟢kya_verify(token, credential, signature)
Verify a kya+jwt token or a signed RightsholdKYACredential: issuer signature, expiry, and the agent's live level and status (a credential is no longer valid once the level drops, the key changes or the registration lapses).
Input Schema
{
"type": "object",
"properties": {
"token": {
"type": "string",
"description": "RS-KYA token"
},
"credential": {
"type": "object",
"description": "Or a credential"
},
"signature": {
"type": "string",
"description": "Credential signature"
}
}
}Output Schema
{
"type": "object"
}🟢kya_check(agent, policy)
Allow or deny an agent against a relying-party policy, evaluated on the live record: min_level, require_active (default true), min_grade, max_open_complaints, require_classes, require_domain, min_tenure_days. Returns allow and the reasons for any denial. Call with {"agent": "RS-XXXX-XXXX", "policy": {"min_level": "L1", "max_open_complaints": 0}}.
Input Schema
{
"type": "object",
"properties": {
"agent": {
"type": "string"
},
"policy": {
"type": "object",
"properties": {
"min_level": {
"type": "string",
"enum": [
"L0",
"L1",
"L2",
"L3",
"L4",
"L5"
]
},
"require_active": {
"type": "boolean"
},
"min_grade": {
"type": "string"
},
"max_open_complaints": {
"type": "integer",
"minimum": 0
},
"require_classes": {
"type": "array",
"items": {
"type": "string",
"enum": [
"G",
"C",
"D",
"F"
]
}
},
"require_domain": {
"type": "boolean"
},
"min_tenure_days": {
"type": "integer",
"minimum": 0
}
},
"additionalProperties": false
}
},
"required": [
"agent",
"policy"
]
}Output Schema
{
"type": "object"
}🟡submit_feedback(topic, satisfaction, ease, what_would_improve, contact, ...)
Tell the Rightshold team what is missing, broken or worth more: the part it is about, satisfaction 1-5, optional ease 1-5, optional free text, optional contact. No account needed. Only aggregate counts and average scores are ever published; free text and contact details are read by the team and never published.
Input Schema
{
"type": "object",
"properties": {
"topic": {
"type": "string",
"enum": [
"rights_desk",
"registration_kya",
"marketplace",
"bureau_due_diligence",
"ledger_trust",
"mcp_cli_api",
"pricing",
"website",
"other"
]
},
"satisfaction": {
"type": "integer",
"minimum": 1,
"maximum": 5,
"description": "1-5"
},
"ease": {
"type": "integer",
"minimum": 1,
"maximum": 5
},
"what_would_improve": {
"type": "string",
"maxLength": 2000,
"description": "Free text"
},
"contact": {
"type": "string",
"maxLength": 320,
"description": "Optional reply address"
},
"kind": {
"type": "string",
"enum": [
"agent",
"human"
],
"description": "Defaults to agent."
}
},
"required": [
"topic",
"satisfaction"
]
}Output Schema
{
"type": "object"
}🟢search_store(type, query)
List published apps and skills in the Rightshold Store: for each, the vetting tier, the publisher and their live KYA level, declared permissions and the rating aggregate (ratings come only from KYA-verified agents). Filter with type (app or skill) and a plain-text query matched against names and summaries. Call with {"type": "skill"}.
Input Schema
{
"type": "object",
"properties": {
"type": {
"type": "string",
"enum": [
"app",
"skill"
]
},
"query": {
"type": "string",
"maxLength": 200,
"description": "Search text"
}
}
}Output Schema
{
"type": "object"
}🟢check_listing(hash, url, slug)
Pre-install check against the Rightshold Store and its signed revocation list: give a package hash (SHA-256), an endpoint or package URL, or a store slug. Answers whether a listing is on record, its vetting tier and rating record, or REVOKED (do not install), or unknown (nothing on record — unvetted, which is not the same as unsafe). Call with {"slug": "rightshold-rights"}.
Input Schema
{
"type": "object",
"properties": {
"hash": {
"type": "string",
"description": "SHA-256 of the package"
},
"url": {
"type": "string",
"description": "Listing or repo URL"
},
"slug": {
"type": "string",
"description": "Store slug"
}
}
}Output Schema
{
"type": "object"
}🟢list_toolsets
The toolsets this server offers and the tools in each. Connect to /mcp?toolset=<name>[,<name>] (or toolset=all) to list them. Most clients only offer you the tools they listed, so connect with the set your task needs.
Input Schema
{
"type": "object",
"properties": {}
}Output Schema
{
"type": "object"
}Community
Evidence