Back to Browse

Intesta MCP Server

Developer ToolsModerate5.2MCP RegistryLocal
Free

Server data from the Official MCP Registry

Check a domain's A0-A4 trust level and verified facts before your agent acts.

About

Check a domain's A0-A4 trust level and verified facts before your agent acts.

Security Report

5.2
Moderate5.2Moderate Risk

This is a well-architected MCP server with strong security practices. It implements read-only access to a public trust registry, properly handles optional API keys without logging them, validates all inputs, and includes comprehensive error handling. Minor code quality improvements around broad exception handling and request timeout configurability would further strengthen it, but the current implementation poses no significant security risks. Supply chain analysis found 5 known vulnerabilities in dependencies (0 critical, 5 high severity). Package verification found 1 issue.

5 files analyzed · 9 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

What You'll Need

Set these up before or after installing:

Optional Intesta API key (ik_...). Public registry reads work without one; a key is only needed for metered or private use.Required

Environment variable: INTESTA_API_KEY

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-intesta-intesta-mcp": {
      "env": {
        "INTESTA_API_KEY": "your-intesta-api-key-here"
      },
      "args": [
        "intesta-mcp"
      ],
      "command": "uvx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

intesta-mcp

An MCP server that lets an AI agent check who it is dealing with before it acts.

Intesta is a trust registry. Every entity has a trust level on the A0→A4 ladder (A0 claimed · A1 domain-control · A2 payment-verified · A3/A4 higher) and a set of facts, each marked confirmed (independently verified) or auto_collected (scraped from public sources, not verified). This server exposes the registry's public reads as MCP tools so an agent can ask "can I trust this domain, and what is actually proven?" before it pays a counterparty, shares data, or follows instructions from an unknown party.

Its ethos is Intesta's own: refuse, don't guess. A level is only ever what was proven; an auto_collected fact is not a verified one. The server reports exactly what the registry says and never upgrades either.

Tools

ToolWhat it answers
search_registry(query, limit=10)Find an entity by name or domain; each result carries its trust level.
check_trust(domain)The headline: A0..A4 level, whether it's attested, what_is_proven, and the proof method (e.g. dns_txt).
get_facts(domain)The entity's public facts, each flagged confirmed vs auto_collected, with its source.
ask_entity(domain, question)A question answered only from that entity's registry facts, with a passport_hash and, when configured, a registry signature you can verify offline.
trust_ladder()What each of A0..A4 means.

All tools are read-only and need no API key — public registry reads work out of the box. An optional INTESTA_API_KEY (ik_…) is only needed for metered or private use.

Install

// Claude Desktop / any MCP client — mcp config
{
  "mcpServers": {
    "intesta": { "command": "uvx", "args": ["intesta-mcp"] }
  }
}

Or run directly:

uvx intesta-mcp

Example

Agent is about to send funds to acme-invoicing.com.

check_trust("acme-invoicing.com")
→ { "level": "A0", "attested": false,
    "what_is_proven": "listed only; nothing independently verified" }

A0 and attested:false means the domain is unproven — the agent should pause or escalate (pair this with Raposa Aval for a human approval step) rather than assume the counterparty is who it claims to be.

Development

python3 -m venv .venv && .venv/bin/pip install -e ".[test]"
.venv/bin/python -m pytest -q          # contract tests, no network

MIT · a DC ESCRYPT product · https://intesta.io

Reviews

No reviews yet

Be the first to review this server!