Skip to main content
Glama
CSOAI-ORG

Proofof AI MCP

Official

MCP Scorecard: 86/100

Proofof Ai MCP

⚖️ Built by MEOK AI Labs / CSOAI. Need this applied to your system fast? Book a 30-min Founder Office Hour (£29) → https://meok.ai/work · Full governance platform → https://meok.ai

MEOK AI Labs GSPC License PyPI

AI content verification & deepfake detection MCP — media forensics, synthetic media detection, pr...

ProofOf AI MCP

AI Content Verification & Authenticity — Detect Deepfakes, Verify Origins, Certify Content

MCP License

AI content verification & deepfake detection MCP — media forensics, synthetic media detection, provenance chains. MIT.


🚀 Quick Start

# Install via pip
pip install proofof_ai_mcp

# Or install via Smithery
npx -y @smithery/cli@latest install proofof-ai-mcp --client claude

Related MCP server: Blockchain AI MCP

✨ Features

  • MCP protocol compliant

  • Easy installation

  • Well-documented API

  • Production-ready

  • Active maintenance

📖 Documentation

🛡️ Compliance

This MCP server is built with EU AI Act compliance built-in:

  • ✅ Article 9 — Risk Management System

  • ✅ Article 13 — Transparency & Instructions for Use

  • ✅ Article 15 — Bias Detection & Testing

  • ✅ Article 26 — FRIA Support (where applicable)

  • ✅ Article 50 — AI Content Watermarking (where applicable)

Need help getting compliant? Book a free 15-min diagnostic →

🏢 Enterprise

Need custom development, SLA guarantees, or white-label deployment?

  • Pro: $99/mo — Full MCP suite + EU AI Act tracking

  • Enterprise: $499/mo — Custom dev + SLA + Dedicated support

View Pricing → | Contact Sales →

🤝 Part of the MEOK Ecosystem

This server is part of the MEOK AI Labs ecosystem — 300+ MCP servers for sovereign AI governance.

Domain

Purpose

councilof.ai

EU AI Act compliance marketplace

safetyof.ai

AI safety & monitoring

meok.ai

Sovereign AI platform

cobolbridge.ai

Legacy modernization

📜 License

MIT © CSOAI-ORG


Tools

Tool

Description

Parameters

verify_text_origin

Check if text was AI-generated

text (str, required)

detect_deepfake_image

Analyze image for AI generation artifacts

image_url (str, required)

generate_content_certificate

Create a verifiable content certificate

content_hash, author, timestamp

verify_certificate

Verify a content certificate's authenticity

certificate_id (str, required)

provenance_chain

Trace the full provenance chain of content

content_id (str, required)

check_manipulation

Detect signs of manipulation in media

media_url (str, required)

Installation

pip install mcp

Claude Desktop

{
  "mcpServers": {
    "proofof-ai": {
      "command": "python",
      "args": ["path/to/server.py"]
    }
  }
}

Cursor / VS Code / Windsurf

{
  "mcpServers": {
    "proofof-ai": {
      "command": "python",
      "args": ["path/to/server.py"]
    }
  }
}

Usage Examples

Verify text origin

{
  "text": "The quick brown fox jumps over the lazy dog. Studies indicate that AI-generated text often exhibits specific statistical patterns in word choice and sentence structure."
}

Detect deepfake image

{
  "image_url": "https://example.com/suspicious-image.jpg"
}

Pricing

  • Free: 10 verifications/day

  • Pro: $99/mo — 500 verifications + certificates

  • Enterprise: $499/mo — API access + custom models


Built by MEOK AI Labs | meok.ai

💸 Try MEOK in 30 seconds — instant buy ladder

Tier

Price

What you get

Stripe

Smoke test

£1

Signed sample MCP-Hardening report + Article 50 PDF

https://buy.stripe.com/aFa7sNcgAdQS0ZT1Uc8k91t

Quick Kit

£9

EU AI Act Article 50 implementation guide (C2PA + EU-Icon)

https://buy.stripe.com/aFa7sNcgAdQS0ZT1Uc8k91t

Founder Call

£29

30-min 1-on-1 with the founder

https://buy.stripe.com/aFa7sNcgAdQS0ZT1Uc8k91t

Refundable. UK Stripe — VAT-clean. Builds on the 81-MCP MEOK fleet. Verify any signed report at https://meok.ai/verify.

Available Tools

6 tools
check_provenanceA

Check C2PA / Content Credentials metadata in files.

C2PA (Coalition for Content Provenance and Authenticity) embeds cryptographic provenance data in media files. This tool checks for the presence of C2PA manifests and extracts basic info.

Args: file_path: Path to file to check. file_base64: Base64-encoded file data (alternative).

Returns: Provenance information if C2PA data is found.

Behavior: This tool is read-only and stateless — it produces analysis output without modifying any external systems, databases, or files. Safe to call repeatedly with identical inputs (idempotent). Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage.

When to use: Use this tool when you need structured analysis or classification of inputs against established frameworks or standards.

When NOT to use: Not suitable for real-time production decision-making without human review of results. Behavioral Transparency: - Side Effects: This tool is read-only and produces no side effects. It does not modify any external state, databases, or files. All output is computed in-memory and returned directly to the caller. - Authentication: No authentication required for basic usage. Pro/Enterprise tiers require a valid MEOK API key passed via the MEOK_API_KEY environment variable. - Rate Limits: Free tier: 10 calls/day. Pro tier: unlimited. Rate limit headers are included in responses (X-RateLimit-Remaining, X-RateLimit-Reset). - Error Handling: Returns structured error objects with 'error' key on failure. Never raises unhandled exceptions. Invalid inputs return descriptive validation errors. - Idempotency: Fully idempotent — calling with the same inputs always produces the same output. Safe to retry on timeout or transient failure. - Data Privacy: No input data is stored, logged, or transmitted to external services. All processing happens locally within the MCP server process.

ParametersJSON Schema
NameRequiredDescriptionDefault
api_keyNo
file_pathNo
file_base64No

TDQS

A4.3/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations were provided, so the description carries full burden. It thoroughly describes read-only nature, statelessness, idempotency, rate limits (free vs pro), authentication requirements, error handling, and data privacy. This is exemplary for agent understanding.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is well-structured with clear sections (Args, Returns, Behavior, When to use, When NOT to use, Behavioral Transparency). However, it is somewhat lengthy and contains some redundancy (e.g., behavioral points repeated), which could be tightened.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given no output schema and 3 parameters, the description covers most key aspects: purpose, parameters (most), behavior, rate limits, auth, and privacy. Missing 'api_key' explanation and a vague 'When to use' are minor gaps. Overall, it provides sufficient context for safe invocation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description must explain all parameters. It explains 'file_path' and 'file_base64' in the Args section, but omits 'api_key' entirely. This missing parameter reduces usefulness for agents. The explanation of the two covered parameters is adequate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states that the tool checks C2PA/Content Credentials metadata in files, which is a specific verb-resource combination. It distinguishes itself from sibling tools like 'detect_deepfake_image' and 'verify_certificate' by focusing on provenance manifests.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description includes explicit 'When to use' and 'When NOT to use' sections, providing clear context. However, the 'When to use' is somewhat generic ('structured analysis or classification') and doesn't directly contrast with siblings, leaving some room for improvement.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

detect_deepfake_imageA

Check image metadata for AI generation signatures.

Performs lightweight metadata-based analysis (EXIF, PNG chunks, compression patterns) without requiring ML inference. Checks for known AI tool signatures, suspicious metadata patterns, and generation parameters.

Args: image_base64: Base64-encoded image data. image_path: Local file path to image (alternative to base64).

Returns: Detection results with metadata findings and risk assessment.

Behavior: This tool generates structured output without modifying external systems. Output is deterministic for identical inputs. No side effects. Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage.

When to use: Use this tool when you need structured analysis or classification of inputs against established frameworks or standards.

When NOT to use: Not suitable for real-time production decision-making without human review of results. Behavioral Transparency: - Side Effects: This tool is read-only and produces no side effects. It does not modify any external state, databases, or files. All output is computed in-memory and returned directly to the caller. - Authentication: No authentication required for basic usage. Pro/Enterprise tiers require a valid MEOK API key passed via the MEOK_API_KEY environment variable. - Rate Limits: Free tier: 10 calls/day. Pro tier: unlimited. Rate limit headers are included in responses (X-RateLimit-Remaining, X-RateLimit-Reset). - Error Handling: Returns structured error objects with 'error' key on failure. Never raises unhandled exceptions. Invalid inputs return descriptive validation errors. - Idempotency: Fully idempotent — calling with the same inputs always produces the same output. Safe to retry on timeout or transient failure. - Data Privacy: No input data is stored, logged, or transmitted to external services. All processing happens locally within the MCP server process.

ParametersJSON Schema
NameRequiredDescriptionDefault
api_keyNo
image_pathNo
image_base64No

TDQS

A4.1/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries full burden and delivers comprehensive transparency: side effects (read-only), authentication (basic no auth, pro requires API key), rate limits (10/day free, unlimited pro), error handling (structured error objects), idempotency (fully deterministic), and data privacy (no data stored). No contradictions.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is structured but verbose and contains redundancy (e.g., 'Behavior' paragraph is repeated in 'Behavioral Transparency' section). Could be more concise while retaining key information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

No output schema is provided; the return value is vaguely described as 'Detection results with metadata findings and risk assessment.' Missing details on the output structure, and one parameter (api_key) is not explained. Adequate but not complete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 0%, so description must compensate. It explains image_base64 and image_path in 'Args', but omits the api_key parameter entirely. The behavioral transparency mentions an API key for pro tiers but does not explicitly link it to the parameter. Partial coverage of 3 parameters.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description starts with a specific verb+resource: 'Check image metadata for AI generation signatures.' It clearly distinguishes the tool from siblings like check_provenance and verify_certificate by focusing on deepfake detection via metadata analysis.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description includes explicit 'When to use' and 'When NOT to use' sections, providing clear context and exclusions. However, it does not differentiate among sibling tools or offer specific alternatives.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

generate_content_certificateA

Create a signed verification certificate for content.

Generates a unique certificate that records the content hash, timestamp, and verification analysis. Certificates can be verified later by ID.

Args: content: The content to certify (text or base64 image data). content_type: Either "text" or "image". author: Optional author attribution. purpose: Optional purpose/context for certification.

Returns: Certificate with unique ID, hash, timestamp, and analysis.

Behavior: This tool generates structured output without modifying external systems. Output is deterministic for identical inputs. No side effects. Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage.

When to use: Use this tool when you need structured analysis or classification of inputs against established frameworks or standards.

When NOT to use: Not suitable for real-time production decision-making without human review of results.

ParametersJSON Schema
NameRequiredDescriptionDefault
authorNo
api_keyNo
contentYes
purposeNo
content_typeNotext

TDQS

A4.1/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description fully carries the burden. It explicitly states no side effects, deterministic output, rate limits (free/pro), no authentication required, and that it generates structured output without modifying external systems. This is comprehensive and goes beyond basic expectations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is well-structured with clear sections (overview, args, returns, behavior, usage guidance). It is concise with no unnecessary words, and every sentence contributes value. Front-loaded with key information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given no output schema, the description includes a 'Returns' section summarizing the output. It covers purpose, parameters, behavior, and usage guidance adequately for a moderately complex tool (5 params). Missing explanation of the 'api_key' parameter and no explicit sibling comparison, but otherwise complete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description must compensate. It lists 4 of the 5 parameters in an 'Args' section with brief explanations (e.g., content as text or base64 image, content_type as text/image). However, the 'api_key' parameter is not mentioned in the description, leaving it undocumented. The descriptions add meaning but are not highly detailed.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool creates a signed verification certificate for content, with a specific verb 'Create' and resource 'verification certificate'. It explains what it generates (hash, timestamp, analysis). However, it does not explicitly differentiate from siblings like 'verify_certificate' or 'check_provenance', which lowers the score from a perfect 5.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description includes dedicated 'When to use' and 'When NOT to use' sections, providing clear context for appropriate usage. It advises using for structured analysis/classification and cautions against real-time decision-making without human review. However, it lacks explicit comparison to sibling tools for when to choose this over others.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_verification_statsA

Return statistics on verifications performed by this server instance.

Returns: Counts of verifications, certificates, and uptime info.

Behavior: This tool is read-only and stateless — it produces analysis output without modifying any external systems, databases, or files. Safe to call repeatedly with identical inputs (idempotent). Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage.

When to use: Use this tool when you need structured analysis or classification of inputs against established frameworks or standards.

When NOT to use: Not suitable for real-time production decision-making without human review of results. Behavioral Transparency: - Side Effects: This tool is read-only and produces no side effects. It does not modify any external state, databases, or files. All output is computed in-memory and returned directly to the caller. - Authentication: No authentication required for basic usage. Pro/Enterprise tiers require a valid MEOK API key passed via the MEOK_API_KEY environment variable. - Rate Limits: Free tier: 10 calls/day. Pro tier: unlimited. Rate limit headers are included in responses (X-RateLimit-Remaining, X-RateLimit-Reset). - Error Handling: Returns structured error objects with 'error' key on failure. Never raises unhandled exceptions. Invalid inputs return descriptive validation errors. - Idempotency: Fully idempotent — calling with the same inputs always produces the same output. Safe to retry on timeout or transient failure. - Data Privacy: No input data is stored, logged, or transmitted to external services. All processing happens locally within the MCP server process.

ParametersJSON Schema
NameRequiredDescriptionDefault
api_keyNo

TDQS

A4.3/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Since annotations are absent, the description fully carries the burden. It details that the tool is read-only, stateless, idempotent, with rate limits (free 10/day, pro unlimited), authentication requirements, error handling, and data privacy. This is comprehensive and beyond typical expectations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is well-structured with clear sections (description, returns, behavior, when to use/not, behavioral transparency). While somewhat verbose, all sentences add value and the structure aids readability.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given no output schema, the description explains return values. It covers all behavioral aspects comprehensively for a simple tool with one optional parameter. Minor gap: does not specify exact format of returned statistics.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema has one optional parameter (api_key) with 0% schema description coverage. The description mentions authentication in behavior but does not explicitly link to the api_key parameter or clarify its usage. It adds partial meaning but does not fully compensate for the lack of schema descriptions.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool returns statistics on verifications, including counts, certificates, and uptime info. It distinguishes from sibling tools like verify_certificate or verify_text_origin by focusing on statistical aggregation rather than individual verification.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description includes explicit 'When to use' and 'When NOT to use' sections, guiding agents to apply this tool for structured analysis but not for real-time production decisions without human review. It provides clear context but could better differentiate from siblings.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

verify_certificateA

Verify a previously generated content certificate by ID.

Args: certificate_id: The certificate ID (format: POA-XXXXXXXXXXXX).

Returns: Certificate details if valid, or error if not found.

Behavior: This tool generates structured output without modifying external systems. Output is deterministic for identical inputs. No side effects. Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage.

When to use: Use this tool when you need structured analysis or classification of inputs against established frameworks or standards.

When NOT to use: Not suitable for real-time production decision-making without human review of results. Behavioral Transparency: - Side Effects: This tool is read-only and produces no side effects. It does not modify any external state, databases, or files. All output is computed in-memory and returned directly to the caller. - Authentication: No authentication required for basic usage. Pro/Enterprise tiers require a valid MEOK API key passed via the MEOK_API_KEY environment variable. - Rate Limits: Free tier: 10 calls/day. Pro tier: unlimited. Rate limit headers are included in responses (X-RateLimit-Remaining, X-RateLimit-Reset). - Error Handling: Returns structured error objects with 'error' key on failure. Never raises unhandled exceptions. Invalid inputs return descriptive validation errors. - Idempotency: Fully idempotent — calling with the same inputs always produces the same output. Safe to retry on timeout or transient failure. - Data Privacy: No input data is stored, logged, or transmitted to external services. All processing happens locally within the MCP server process.

ParametersJSON Schema
NameRequiredDescriptionDefault
api_keyNo
certificate_idYes

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description comprehensively covers side effects (read-only), authentication (none for basic, API key for pro), rate limits (10/day free, unlimited pro), error handling (structured errors), idempotency, and data privacy, providing full behavioral transparency.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is well-structured with clear sections (Args, Returns, Behavior, When to use, Behavioral Transparency) but is somewhat verbose, containing redundant details that could be streamlined.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The description fully covers all relevant aspects for a tool with 2 parameters and no output schema, including behavior, error handling, rate limits, and authentication, leaving no significant gaps for an agent.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The description adds meaning to the certificate_id parameter by specifying its format (POA-XXXXXXXXXXXX) and clarifies api_key usage in the authentication section. However, with 0% schema description coverage, it doesn't detail api_key separately, partially compensating.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states it verifies a previously generated content certificate by ID, with the verb 'verify' and the specific resource 'content certificate'. This distinguishes it from siblings like verify_text_origin and generate_content_certificate.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description includes explicit 'When to use' and 'When NOT to use' sections, advising structured analysis and cautioning against real-time production use without human review. However, it does not directly compare to sibling tools.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

verify_text_originA

Analyze text for AI-generated patterns.

Examines perplexity, burstiness, repetition patterns and known AI phrases to estimate whether text was human or AI authored.

Args: text: The text content to analyze (min 50 chars recommended).

Returns: Confidence score, classification, and detailed analysis breakdown.

Behavior: This tool generates structured output without modifying external systems. Output is deterministic for identical inputs. No side effects. Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage.

When to use: Use this tool when you need structured analysis or classification of inputs against established frameworks or standards.

When NOT to use: Not suitable for real-time production decision-making without human review of results. Behavioral Transparency: - Side Effects: This tool is read-only and produces no side effects. It does not modify any external state, databases, or files. All output is computed in-memory and returned directly to the caller. - Authentication: No authentication required for basic usage. Pro/Enterprise tiers require a valid MEOK API key passed via the MEOK_API_KEY environment variable. - Rate Limits: Free tier: 10 calls/day. Pro tier: unlimited. Rate limit headers are included in responses (X-RateLimit-Remaining, X-RateLimit-Reset). - Error Handling: Returns structured error objects with 'error' key on failure. Never raises unhandled exceptions. Invalid inputs return descriptive validation errors. - Idempotency: Fully idempotent — calling with the same inputs always produces the same output. Safe to retry on timeout or transient failure. - Data Privacy: No input data is stored, logged, or transmitted to external services. All processing happens locally within the MCP server process.

ParametersJSON Schema
NameRequiredDescriptionDefault
textYes
api_keyNo

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description thoroughly covers side effects (read-only), authentication (none for basic, API key for Pro), rate limits (10/day free), error handling (structured errors), idempotency, and data privacy. Exceeds what annotations would provide.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Well-structured with clear headings (Args, Returns, Behavior, When to use, etc.) and front-loaded purpose. Slightly verbose but all content adds value.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given 2 params, no output schema, no annotations, the description fully explains inputs (with constraints), outputs (confidence, classification, breakdown), behavior, and limitations. Complete for agent decision-making.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 0%, so description must compensate. It adds min 50 chars for 'text' and explains 'api_key' usage in the behavioral section (though not in the param list). Adds significant meaning beyond schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool analyzes text for AI-generated patterns using specific techniques (perplexity, burstiness, repetition, phrases), and distinguishes from siblings like detect_deepfake_image which focuses on images.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Provides explicit 'When to use' and 'When NOT to use' sections, including a caution about real-time decisions without human review. Lacks direct comparison to sibling tools but covers context well.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 6 tool updatesv1.0.1
    • First observedcheck_provenance
    • First observeddetect_deepfake_image
    • First observedgenerate_content_certificate
    • First observedget_verification_stats
    • First observedverify_certificate
    • First observedverify_text_origin

TDQS

A4.2/5.0

Scored across 6 tools

Disambiguation4/5

Each tool has a distinct purpose, but check_provenance and detect_deepfake_image both inspect files for authenticity, potentially causing confusion. However, the descriptions clearly differentiate C2PA metadata vs. AI generation signatures.

Naming Consistency5/5

All tool names follow a consistent verb_noun pattern in snake_case, e.g., check_provenance, generate_content_certificate, verify_text_origin. No deviations or mixed conventions.

Tool Count5/5

With 6 tools covering provenance checking, AI detection, certification, and stats, the count is well-scoped for the domain. Each tool serves a clear function without unnecessary bloat.

Completeness3/5

Core workflows (provenance check, deepfake detection, text analysis, certificate lifecycle) are covered, but missing features like listing certificates or searching by metadata limit completeness. Notable but not severe gaps.

Maintenance

ActivityActive
ResponsivenessSlow

Related MCP Connectors

Related MCP Servers