Server data from the Official MCP Registry
Set up, sign, publish and check Semanto, a company's signed website file for AI agents.
About
Set up, sign, publish and check Semanto, a company's signed website file for AI agents.
Remote endpoints: streamable-http: https://api.trooth.co/os/semanto/mcp
Security Report
Semanto is a signed-content verification toolkit: its readers (Python, JavaScript, Go) check Ed25519 signatures, Merkle proofs and key bindings entirely offline, with no dependencies beyond cryptography in Python, and make no data-exfiltration or shell-execution calls in the visible code. The main points for users are the verifier's outbound fetching of company pages and its dependence on Trooth-operated keys and logs, which are expected for this purpose; the visible code was truncated, so the rest of the verifier and the Cloudflare adapter were not fully reviewed. Supply chain analysis found 1 known vulnerability in dependencies (0 critical, 1 high severity).
6 files analyzed · 5 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
Permissions Required
This plugin requests these system permissions. Most are normal for its category.
How to Install & Connect
Available as Local & Remote
This plugin can run on your machine or connect to a hosted endpoint. during install.
Documentation
View on GitHubFrom the project's GitHub README.
Semanto by Trooth
Semanto turns a company's website into one signed copy that AI agents can read and check. Each page carries a signature from the company's own key, and every published version is entered in a public log, so anyone can confirm what a company said and when it said it.
This repository holds the open readers for Python, JavaScript and Go with their shared test vectors, and the Cloudflare adapter a company deploys on its own domain. The Semanto service itself is Trooth's and is not here.
Documentation
The documentation is at trooth.co/docs/semanto, with install guides for Cloudflare, Vercel, Netlify, Fastly, Akamai, Gcore, nginx, Apache, WordPress, Shopify, Webflow and Squarespace.
Readers
| Reader | Path | Install |
|---|---|---|
| Python | verifier/python | pip install trooth |
| JavaScript | verifier/js | Copy verify.mjs; Node 20 or newer, no dependencies |
| Go | verifier/go | go install github.com/troothllc/semanto/verifier/go/cmd/semanto-verify@latest |
from trooth import SemantoClient
r = SemantoClient().read("https://acme.com/pricing")
print(r["ok"], r["reason"])
All three share the same functions, reason codes and the vectors in verifier/test-vectors/v1.
Cloudflare
See deploy/cloudflare.
Licenses
The readers are Apache-2.0. The Cloudflare adapter is under the Trooth Adapter License 1.0: run and change it to serve Semanto for domains you control. LICENSE.md has both.
Security
Report a vulnerability to security@trooth.co. Please do not open a public issue for it.
Reviews
No reviews yet
Be the first to review this server!
More Developer Tools MCP Servers
Rea
Freeby Morluto · Developer Tools
Reverse engineer anything from your terminal or agent with one CLI and MCP server.
Paperclip
Freeby Paperclipai · Developer Tools
Trending hip-hop artist momentum scores across four cultural dimensions.
Fetch
Freeby Modelcontextprotocol · Developer Tools
Web content fetching and conversion for efficient LLM usage
Git
Freeby Modelcontextprotocol · Developer Tools
Read, search, and manipulate Git repositories programmatically
Toleno
Freeby Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
MCP Marketplace
Freeby mcp-marketplace · Developer Tools
Search and install MCP servers from inside your AI client.