How do I install Hashproof?

Hashproof is a local plugin. Install it using npm package: hashproof-mcp and add the generated configuration snippet to your AI app's MCP config file. Then restart your AI app.

Is Hashproof safe to use?

Hashproof was flagged by MCP Marketplace's security scan, scoring 4.2/10 (high risk). It has 3 high or critical findings to review. Review the security report on this page carefully before installing it.

What credentials does Hashproof need?

Hashproof requires the following credentials or environment variables: HASHPROOF_API_KEY, HASHPROOF_WALLET_PRIVATE_KEY, HASHPROOF_X402_NETWORK. You can find setup instructions on the server detail page.

What AI apps work with Hashproof?

Hashproof uses the Model Context Protocol (MCP) and works with any MCP-compatible AI app, including Claude, ChatGPT / Codex, Gemini, Copilot, Cursor, and more.

Back to Browse

Hashproof MCP Server

by Csacanam

Developer ToolsUse Caution4.2MCP RegistryLocal

Free

Server data from the Official MCP Registry

Issue verifiable credentials from AI agents for $0.10 via x402. On-chain on Celo, IPFS-pinned.

About

Issue verifiable credentials from AI agents for $0.10 via x402. On-chain on Celo, IPFS-pinned.

Security Report

4.2

Use Caution4.2High Risk

HashProof is a credential issuance service with an MCP server interface. The codebase shows reasonable security practices for authentication (x402 micropayment + API keys) and input validation, but has notable concerns: the frontend accepts and submits user-provided wallet addresses without verification, email domain validation is incomplete, and there is inadequate error handling around payment failures. Permissions are appropriate for the stated purpose (crypto payments, IPFS backup, on-chain registry, DNS verification). Supply chain analysis found 4 known vulnerabilities in dependencies (2 critical, 0 high severity). Package verification found 1 issue (1 critical, 0 high severity).

4 files analyzed · 13 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

database

Check that this permission is expected for this type of plugin.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

File System Write

Writes or modifies files on your machine. Check that this is expected for the tool.

Unverified package source

We couldn't verify that the installable package matches the reviewed source code. Proceed with caution.

What You'll Need

Set these up before or after installing:

Prepaid API key (alternative to wallet). One of the two payment methods is required only for issue_credential.Required

Environment variable: HASHPROOF_API_KEY

EVM private key of a dedicated wallet holding USDC on Base or Celo — pays $0.10 per issuance via x402.Required

Environment variable: HASHPROOF_WALLET_PRIVATE_KEY

base (default) or celoOptional

Environment variable: HASHPROOF_X402_NETWORK

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-csacanam-hashproof": {
      "env": {
        "HASHPROOF_API_KEY": "your-hashproof-api-key-here",
        "HASHPROOF_X402_NETWORK": "your-hashproof-x402-network-here",
        "HASHPROOF_WALLET_PRIVATE_KEY": "your-hashproof-wallet-private-key-here"
      },
      "args": [
        "-y",
        "@hashproof/backend"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

HashProof

Verifiable credentials with IPFS backup, on-chain registry, and pay-per-call API via x402.

What it is

HashProof is a credential issuance API. Organizations and Individuals (entities) issue verifiable credentials to people. Each credential is:

Stored as a JSON in the database and backed up on IPFS (Pinata)
Registered on-chain in the CredentialRegistry contract on Celo
Verifiable via a public URL: https://hashproof.dev/verify/:id

Two ways to pay: micropayment in USDC via x402 (Base or Celo) — no API keys, no subscriptions — or a prepaid API key for enterprise clients (no crypto needed). AI agents can call the API directly using a funded wallet.

Project structure

backend/       Express API — credential issuance, verification, payments
frontend/      React app — landing page, credential verification, entity pages
contracts/     CredentialRegistry smart contract (Celo)
mcp/           MCP server (hashproof-mcp on npm) — use HashProof from any AI agent
skills/        Agent skill (npx skills add csacanam/hashproof)
docs/          Architecture and flow documentation

Deployed contracts

Network	Contract	Address
Celo mainnet	CredentialRegistry	`0x7a1B759A602Aba72a70f99Dffd0a386d7504ce9B`

Paid API endpoints

Endpoint	Price	Description
`POST /issueCredential`	$0.10 USDC	Issue one verifiable credential
`POST /entities/:id/verificationRequests`	$49 USDC	Submit a verification request

Payment is in USDC on Base or Celo via x402. The client signs an off-chain authorization — no gas required.

Free endpoints

Endpoint	Description
`GET /verify/:id`	Full 3-layer verification
`GET /templates/:ref/requirements`	Get required fields for a template
`POST /templates/:ref/preview`	Generate a preview PDF with watermark (no cost)
`GET /stats`	On-chain credential counters

For AI agents

HashProof is fully agent-usable — no account, no human onboarding. Three ways in:

MCP server, local or remote (listed on the official MCP registry as io.github.csacanam/hashproof):
```
# local (stdio) — pays per credential with your own wallet via x402, or an API key
claude mcp add hashproof -- npx -y hashproof-mcp

# remote (Streamable HTTP) — nothing to install, API key required to issue
claude mcp add --transport http hashproof https://api.hashproof.dev/mcp
```
Tools: preview_template (free — iterate custom layouts), issue_credential ($0.10 via x402 or API key), verify_credential and get_template_requirements (free). The remote server has no wallet, so it can't do x402 — it needs Authorization: Bearer <api-key>. See mcp/README.md.
Agent skill: npx skills add csacanam/hashproof — or read it at hashproof.dev/skill.md.
Plain HTTP + x402: POST /issueCredential returns a 402 challenge any x402-v2 client can pay (USDC on Base or Celo). LLM index: hashproof.dev/llms.txt.

Agent identity metadata (ERC-8004 registration-v1): hashproof.dev/metadata.json.

Quick start

See backend/README.md and frontend/README.md for setup instructions. See docs/README.md for the full documentation index.

Reviews

No reviews yet

Be the first to review this server!

More Developer Tools MCP Servers

Paperclip

Free

by Paperclipai · Developer Tools

Trending hip-hop artist momentum scores across four cultural dimensions.

Git

Free

by Modelcontextprotocol · Developer Tools

Read, search, and manipulate Git repositories programmatically

Toleno

Free

by Toleno · Developer Tools

Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.

mcp-creator-python

Free

by mcp-marketplace · Developer Tools

Create, build, and publish Python MCP servers to PyPI — conversationally.

MCP Marketplace

Free

by mcp-marketplace · Developer Tools

Search and install MCP servers from inside your AI client.

MarkItDown

Free

by Microsoft · Content & Media

Convert files (PDF, Word, Excel, images, audio) to Markdown for LLM consumption

Hashproof MCP Server

About

Security Report

Findings (13)Action required

Permissions Required

What You'll Need

How to Install

Documentation

HashProof

What it is

Project structure

Deployed contracts

Paid API endpoints

Free endpoints

For AI agents

Quick start

Reviews

No reviews yet

More Developer Tools MCP Servers

Paperclip

Git

Toleno

mcp-creator-python

MCP Marketplace

MarkItDown