Server data from the Official MCP Registry
Cryptographically verifiable blockchain data with Merkle proofs + ECDSA signing.
About
Cryptographically verifiable blockchain data with Merkle proofs + ECDSA signing.
Security Report
zkVerify is a blockchain verification service with legitimate cryptographic functionality, but has several security and code quality concerns that warrant attention. The main issues are: (1) overly permissive fallback payment verification allowing unauthenticated access in dev mode, (2) private key storage concerns and credential exposure risks, (3) insufficient input validation on blockchain calls, and (4) error handling that may leak sensitive information. Permissions are appropriate for the stated purpose, but the implementation has gaps that could allow unauthorized access or data leakage. Supply chain analysis found 4 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue (1 critical, 0 high severity).
7 files analyzed · 17 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
Permissions Required
This plugin requests these system permissions. Most are normal for its category.
Unverified package source
We couldn't verify that the installable package matches the reviewed source code. Proceed with caution.
What You'll Need
Set these up before or after installing:
Environment variable: ZKVERIFY_URL
How to Install
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-zkarchitect-zkverify": {
"env": {
"ZKVERIFY_URL": "your-zkverify-url-here"
},
"args": [
"-y",
"zkverify"
],
"command": "npx"
}
}
}Documentation
View on GitHubFrom the project's GitHub README.
zkVerify
Trustless blockchain verification over x402 with Merkle proofs + ECDSA signing
Why?
When an AI agent pays for blockchain data via x402, how does it know the data is authentic? It doesn't. 99% of x402 transactions are at risk (arXiv, July 2026 — 31 vulnerabilities found).
zkVerify solves this: every API response includes a Merkle proof + ECDSA signature. The agent can verify independently — zero trust required.
Endpoints
| Endpoint | Price | Returns |
|---|---|---|
GET /verify/balance/:address?chain=base | $0.02 | Account balance + Merkle proof + signature |
GET /verify/contract/:address?chain=base | $0.02 | Contract code hash + signature |
GET /health | Free | Service status + signer address |
GET /.well-known/x402 | Free | x402 discovery (Bazaar) |
Supported Chains
- Base (L2 — fallback to eth_getBalance)
- Ethereum (L1 — full eth_getProof / EIP-1186)
- Polygon
How It Works
- Agent sends
GET /verify/balance/0xABC...?chain=ethereum - zkVerify returns HTTP 402 Payment Required
- Agent pays $0.02 USDC on Base via x402
- zkVerify:
a. Fetches
eth_getProoffrom RPC b. Verifies Merkle Patricia Proof against stateRoot c. Signs the result with ECDSA d. Returns:{ balance, blockNumber, stateRoot, merkleProof, signature } - Agent verifies: a. Signature (recoverAddress) b. Merkle proof locally (optional) c. stateRoot against block header (optional)
- Agent now has 100% verified on-chain data — no trust needed
Quick Start
For AI Agents (via x402)
curl https://zkverify-production.up.railway.app/verify/balance/0xd8dA6BF26964aF9D7eEd9e03E53415D37aA96045?chain=ethereum
# Returns: balance, Merkle proof (9 nodes), ECDSA signature, verified: true
SDK (Client-side verification)
import { fullVerify } from "zkverify";
const result = await fetch("https://zkverify-production.up.railway.app/verify/balance/0xABC...?chain=ethereum").then(r => r.json());
console.log(result.fullyVerified); // true = verified 100%
MCP Server
zkVerify includes an MCP server with 3 tools for Claude/Cursor:
{
"mcpServers": {
"zkverify": {
"command": "npx",
"args": ["-y", "zkverify-mcp"],
"env": {
"ZKVERIFY_URL": "https://zkverify-production.up.railway.app"
}
}
}
}
Architecture
- Merkle Patricia Proof: EIP-1186
eth_getProoffrom Ethereum L1 - ECDSA Signing: Every response signed with secp256k1
- x402 Payment: $0.02 USDC on Base
- Zero Trust: Agent needs no trusted oracle — just math
Costs
- $0 startup cost
- Free RPC (PublicNode, Alchemy free tier)
- x402 facilitator: free for first 1,000 transactions/day
- Margin: 99% (after $0.001 facilitator fee)
Patent (Pending)
Title: "System and method for providing cryptographically verifiable API responses using Merkle proofs and ECDSA signatures over HTTP payment protocols"
See patent/USPTO_PROVISIONAL.md
ZK Circuit (Level 2)
A simplified circom circuit (~202 constraints) proves that verification was performed correctly without revealing proof data.
License
MIT — free to use, modify, and distribute. Attribution appreciated.
Links
- Live: https://zkverify-production.up.railway.app
- GitHub: https://github.com/zkarchitect/zkverify
- Health: https://zkverify-production.up.railway.app/health
- Discovery: https://zkverify-production.up.railway.app/.well-known/x402
Built with ZKForge — the first x402 service providing cryptographically verifiable blockchain data.
Reviews
No reviews yet
Be the first to review this server!
More Developer Tools MCP Servers
Git
Freeby Modelcontextprotocol · Developer Tools
Read, search, and manipulate Git repositories programmatically
Toleno
Freeby Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
mcp-creator-python
Freeby mcp-marketplace · Developer Tools
Create, build, and publish Python MCP servers to PyPI — conversationally.
MarkItDown
Freeby Microsoft · Content & Media
Convert files (PDF, Word, Excel, images, audio) to Markdown for LLM consumption
MCP Marketplace
Freeby mcp-marketplace · Developer Tools
Search and install MCP servers from inside your AI client.
FinAgent
Freeby mcp-marketplace · Finance
Free stock data and market news for any MCP-compatible AI assistant.