Back to Browse

Delta Witness MCP Server

Developer ToolsModerate7.2MCP RegistryLocal
Free

Server data from the Official MCP Registry

Paid Capture and Guard tools for public-source observations before autonomous actions.

About

Paid Capture and Guard tools for public-source observations before autonomous actions.

Security Report

7.2
Moderate7.2Low Risk

Valid MCP server (2 strong, 3 medium validity signals). 5 known CVEs in dependencies ⚠️ Package registry links to a different repository than scanned source. Imported from the Official MCP Registry. 1 finding(s) downgraded by scanner intelligence.

16 files analyzed · 6 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

file_system

Check that this permission is expected for this type of plugin.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

network_websocket

Check that this permission is expected for this type of plugin.

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-15998194110-delta-witness": {
      "args": [
        "-y",
        "delta-witness-mcp"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

DELTA Witness v0.6

DELTA Witness is a Trust Layer for Autonomous Actions. It observes public sources, records timestamped hashes, and lets software make deterministic preflight decisions without claiming that a source is truthful.

Production products

  • Capture: POST /v1/capture preserves what a public page says now.
  • Guard: POST /v1/preflight compares a fresh observation with prior proof hashes or explicit text rules.
  • Watch: authenticated resellers can prepay a finite number of checks and receive HMAC-signed webhooks.
  • Partner gateway: marketplaces authenticate server-to-server after they bill their customer.

Direct Capture and Guard use x402 v2 with Base mainnet USDC. Settlement completes before Browser Run begins. The treasury is receive-only from the application:

0x1990e21bc219696ff7fbc26527dbaed335ac6367

Never place the treasury private key in Worker, CI, source, or chat.

Safety and economics

  • Public HTTP(S) targets on ports 80/443 only; credential URLs, private/link-local/metadata networks, private DNS answers, DNS rebinding, and unsafe redirects are rejected.
  • Request, redirect, time, Browser Run, artifact, and storage bounds are enforced.
  • Raw artifacts remain private in delta-witness-proofs; verifier routes expose metadata and hashes and are noindex.
  • Fulfillment is idempotent and a settled payment cannot fulfill a different request.
  • Price floors include facilitator, Browser, Worker, R2, and failure allowances plus target margin. Negative-margin observations raise the affected route's floor automatically.

Verify locally

npm ci
npm run verify
npm run bazaar

npm run bazaar performs a read-only scan of the public Bazaar catalog and reports whether DELTA's x402 resource is indexed. It never submits a payment or changes catalog state.

The partner gateway, SDKs, MCP server, and Apify adapter have their own verification commands. The tagged release workflow verifies every artifact, applies D1 migrations, records the current Worker version, deploys core and gateway, then publishes authorized registries.

Production discovery

The known legacy proof remains available at /v1/proofs/56347db8-1aa5-447f-a0e4-3bb052d7aa89. Its historical manifest predates v0.6 self-integrity fields, so the verifier reports legacy_unverifiable rather than inventing certainty.

Reviews

No reviews yet

Be the first to review this server!