Skip to main content
Glama

bernstein-mcp

Verify a run receipt

verify_receipt

Recompute every hash chain a bernstein run receipt embeds (journal, lineage spine, optional audit range), rebuild the signed subject from the recomputed heads, and check the Ed25519 signature with the key the receipt carries. Needs no secret and reads nothing but the receipt. Returns the verdict, the first failing check, one line per check, and the same verdict as a DSSE envelope signed by this verifier's Ed25519 key (public key at keys_url) so the outcome can be kept and re-checked offline.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
receiptYesThe run receipt: pass the file contents as a string for byte-exact verification, or the parsed object.

Output Schema

TableJSON Schema
NameRequiredDescriptionDefault
noteYes
checksYes
summaryYes
verdictYes
keys_urlYes
verify_urlYes
failing_checkYes
divergent_stepYes
receipt_sha256Yes
signed_verdictYesDSSE envelope over the verdict statement (JCS JSON in payload), Ed25519 over the DSSE PAE.

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observed

TDQS

A4.3/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the full burden, and it does so well: it discloses that no secret is required, that nothing but the receipt is read, and that the verifier signs the verdict with its own Ed25519 key. This gives agents a clear safety and side-effect profile even without structured annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is information-dense but every sentence earns its place: the first explains the verification algorithm, the second states the safety model, and the third explains the signed output. It is front-loaded with the action verb and contains no filler or marketing language.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the cryptographic complexity, a single well-documented parameter, and the presence of an output schema, the description is complete enough for correct invocation. It covers inputs, algorithm, safety, and return behavior without requiring the agent to guess about secrets, external reads, or output format.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100% and the schema already explains the receipt parameter, including the important byte-exact string vs parsed object distinction. The description does not add significant parameter-level detail beyond that, so it meets the baseline but does not exceed it.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description names a specific verb ('verify'), a specific resource ('bernstein run receipt'), and a precise mechanism: recompute hash chains, rebuild the signed subject, and check Ed25519. It is clearly distinguishable from siblings like explain_receipt or verify_chain by focusing on full receipt verification rather than explanation or a single chain.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives useful context: it needs no secret, reads nothing but the receipt, and returns an offline-recheckable DSSE-signed verdict. However, it never explicitly says when to choose this tool over siblings such as explain_receipt or verify_chain, nor does it state any exclusion conditions, so usage guidance is mostly implied rather than explicit.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.