ScopeProof

Machine-verifiable authorization checks for autonomous AI agents.

Should I use this

Quality & Safety

A
Description quality
100%
Schema completeness
80%
Naming quality
93%
Poisoning risk
100%
Permission match
100%
Protocol compliance
100%

Based on automated analysis of tool definitions and protocol compliance.

Context Cost

~1,428Tokens (tool definitions)
~5.0 KBTypical response size
Moderate attention impact (1.12% of 128k context)

This is the approximate number of tokens consumed each time the server's tools are loaded into a model's context. Higher counts reduce the attention available for other tasks.

Install

One-Click Install

Add this to your `claude_desktop_config.json` file:

{
  "mcpServers": {
    "scopeproof": {
      "url": "https://scopeproof.davisvillelabs.com/mcp"
    }
  }
}

Remote endpoints

https://scopeproof.davisvillelabs.com/mcpstreamable-http

What it can do

Tool inventory

Tools (3)

🟢 Read-only🟡 Write🔴 Delete⚪ Unknown
🟢preflight(authority, action, context)

Validate whether a structured authority envelope contains enough explicit constraints for ScopeProof to evaluate one action. Free. Returns no substantive authorization verdict and accepts no credentials, raw prompts, arbitrary request bodies, or secrets.

Input Schema

{
  "type": "object",
  "properties": {
    "authority": {
      "type": "object",
      "required": [
        "allowedActions",
        "allowedResources"
      ],
      "additionalProperties": false,
      "properties": {
        "schemaVersion": {
          "type": "string",
          "maxLength": 64
        },
        "principal": {
          "type": "string",
          "maxLength": 160
        },
        "issuedAt": {
          "type": "string",
          "format": "date-time"
        },
        "notBefore": {
          "type": "string",
          "format": "date-time"
        },
        "expiresAt": {
          "type": "string",
          "format": "date-time"
        },
        "allowedActions": {
          "type": "array",
          "minItems": 1,
          "maxItems": 64,
          "items": {
            "type": "string"
          }
        },
        "deniedActions": {
          "type": "array",
          "maxItems": 64,
          "items": {
            "type": "string"
          }
        },
        "allowedResources": {
          "type": "array",
          "minItems": 1,
          "maxItems": 64,
          "items": {
            "type": "string"
          }
        },
        "deniedResources": {
          "type": "array",
          "maxItems": 64,
          "items": {
            "type": "string"
          }
        },
        "methods": {
          "type": "array",
          "maxItems": 24,
          "items": {
            "type": "string"
          }
        },
        "tools": {
          "type": "array",
          "maxItems": 64,
          "items": {
            "type": "string"
          }
        },
        "environments": {
          "type": "array",
          "maxItems": 32,
          "items": {
            "type": "string"
          }
        },
        "dataClasses": {
          "type": "array",
          "maxItems": 32,
          "items": {
            "type": "string"
          }
        },
        "maxSpend": {
          "type": "object",
          "required": [
            "amountMinor",
            "currency"
          ],
          "additionalProperties": false,
          "properties": {
            "amountMinor": {
              "type": "integer",
              "minimum": 0
            },
            "currency": {
              "type": "string",
              "pattern": "^[A-Z]{3}$"
            }
          }
        },
        "allowDestructive": {
          "type": "boolean"
        },
        "allowIrreversible": {
          "type": "boolean"
        },
        "approvalRequiredFor": {
          "type": "array",
          "maxItems": 32,
          "items": {
            "type": "string"
          }
        }
      }
    },
    "action": {
      "type": "object",
      "required": [
        "type",
        "resource"
      ],
      "additionalProperties": false,
      "properties": {
        "type": {
          "type": "string",
          "maxLength": 64
        },
        "resource": {
          "type": "string",
          "maxLength": 1024
        },
        "method": {
          "type": "string",
          "maxLength": 12
        },
        "tool": {
          "type": "string",
          "maxLength": 200
        },
        "environment": {
          "type": "string",
          "maxLength": 80
        },
        "dataClass": {
          "type": "string",
          "maxLength": 80
        },
        "amount": {
          "type": "object",
          "required": [
            "amountMinor",
            "currency"
          ],
          "additionalProperties": false,
          "properties": {
            "amountMinor": {
              "type": "integer",
              "minimum": 0
            },
            "currency": {
              "type": "string",
              "pattern": "^[A-Z]{3}$"
            }
          }
        },
        "destructive": {
          "type": "boolean",
          "description": "Set true when the proposed action is destructive even if its action type or HTTP method is not intrinsically classified as destructive."
        },
        "irreversible": {
          "type": "boolean"
        }
      }
    },
    "context": {
      "type": "object",
      "additionalProperties": false,
      "properties": {
        "humanApprovalPresent": {
          "type": "boolean",
          "description": "Caller assertion that required human approval has already occurred. ScopeProof records this as caller-asserted and does not independently verify the human identity or approval event."
        }
      }
    }
  },
  "required": [
    "authority",
    "action"
  ],
  "additionalProperties": false
}
🟢check_action(authority, action, context)

Determine whether one proposed action is within explicitly supplied authority. $0.01 stablecoin machine payment. Returns within_scope, outside_scope, or review_required plus deterministic reason codes, policy/action digests, and a tamper-evident receipt. This is scope enforcement against supplied authority, not identity verification, legal authorization, or a safety guarantee.

Input Schema

{
  "type": "object",
  "properties": {
    "authority": {
      "type": "object",
      "required": [
        "allowedActions",
        "allowedResources"
      ],
      "additionalProperties": false,
      "properties": {
        "schemaVersion": {
          "type": "string",
          "maxLength": 64
        },
        "principal": {
          "type": "string",
          "maxLength": 160
        },
        "issuedAt": {
          "type": "string",
          "format": "date-time"
        },
        "notBefore": {
          "type": "string",
          "format": "date-time"
        },
        "expiresAt": {
          "type": "string",
          "format": "date-time"
        },
        "allowedActions": {
          "type": "array",
          "minItems": 1,
          "maxItems": 64,
          "items": {
            "type": "string"
          }
        },
        "deniedActions": {
          "type": "array",
          "maxItems": 64,
          "items": {
            "type": "string"
          }
        },
        "allowedResources": {
          "type": "array",
          "minItems": 1,
          "maxItems": 64,
          "items": {
            "type": "string"
          }
        },
        "deniedResources": {
          "type": "array",
          "maxItems": 64,
          "items": {
            "type": "string"
          }
        },
        "methods": {
          "type": "array",
          "maxItems": 24,
          "items": {
            "type": "string"
          }
        },
        "tools": {
          "type": "array",
          "maxItems": 64,
          "items": {
            "type": "string"
          }
        },
        "environments": {
          "type": "array",
          "maxItems": 32,
          "items": {
            "type": "string"
          }
        },
        "dataClasses": {
          "type": "array",
          "maxItems": 32,
          "items": {
            "type": "string"
          }
        },
        "maxSpend": {
          "type": "object",
          "required": [
            "amountMinor",
            "currency"
          ],
          "additionalProperties": false,
          "properties": {
            "amountMinor": {
              "type": "integer",
              "minimum": 0
            },
            "currency": {
              "type": "string",
              "pattern": "^[A-Z]{3}$"
            }
          }
        },
        "allowDestructive": {
          "type": "boolean"
        },
        "allowIrreversible": {
          "type": "boolean"
        },
        "approvalRequiredFor": {
          "type": "array",
          "maxItems": 32,
          "items": {
            "type": "string"
          }
        }
      }
    },
    "action": {
      "type": "object",
      "required": [
        "type",
        "resource"
      ],
      "additionalProperties": false,
      "properties": {
        "type": {
          "type": "string",
          "maxLength": 64
        },
        "resource": {
          "type": "string",
          "maxLength": 1024
        },
        "method": {
          "type": "string",
          "maxLength": 12
        },
        "tool": {
          "type": "string",
          "maxLength": 200
        },
        "environment": {
          "type": "string",
          "maxLength": 80
        },
        "dataClass": {
          "type": "string",
          "maxLength": 80
        },
        "amount": {
          "type": "object",
          "required": [
            "amountMinor",
            "currency"
          ],
          "additionalProperties": false,
          "properties": {
            "amountMinor": {
              "type": "integer",
              "minimum": 0
            },
            "currency": {
              "type": "string",
              "pattern": "^[A-Z]{3}$"
            }
          }
        },
        "destructive": {
          "type": "boolean",
          "description": "Set true when the proposed action is destructive even if its action type or HTTP method is not intrinsically classified as destructive."
        },
        "irreversible": {
          "type": "boolean"
        }
      }
    },
    "context": {
      "type": "object",
      "additionalProperties": false,
      "properties": {
        "humanApprovalPresent": {
          "type": "boolean",
          "description": "Caller assertion that required human approval has already occurred. ScopeProof records this as caller-asserted and does not independently verify the human identity or approval event."
        }
      }
    }
  },
  "required": [
    "authority",
    "action"
  ],
  "additionalProperties": false
}
🟢verify_receipt(receipt)

Verify the cryptographic integrity of one ScopeProof receipt without exposing the server signing key. Free and repeatable.

Input Schema

{
  "type": "object",
  "properties": {
    "receipt": {
      "type": "object"
    }
  },
  "required": [
    "receipt"
  ],
  "additionalProperties": false
}

Community

Rate this Server

Evidence

Recent observations

verifiedversion not recorded3 tools