Check before you trust
checkCheck an MCP server, an npm or PyPI package (optionally with the hash you are about to install), an MCP endpoint URL or a TON address against the anchored record. Returns a signed check: status (witnessed, changed_recently, hash_mismatch, not_witnessed, sanctions_listed, not_listed), flags, facts, recent changes with diff links.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| type | Yes | ||
| as_of | No | RFC 3339 time: answer as the record stood at that moment | |
| sha256 | No | sha256 of the PyPI file you are about to install | |
| target | Yes | registry name (io.github.owner/server), npm:<name> or pypi:<name>, https URL, or TON address | |
| version | No | ||
| integrity | No | npm dist.integrity of the tarball you are about to install |