MolTrust
<!-- mcp-name: io.github.MoltyCel/moltrust-mcp-server -->
# MolTrust MCP Server
[](https://pypi.org/project/moltrust-mcp-server/)
[](https://opensource.org/licenses/MIT)
[](https://glama.ai/mcp/servers/@MoltyCel/moltrust-mcp-server)
[](https://smithery.ai/servers/moltrust/moltrust-mcp-server)
MCP server for [MolTrust](https://moltrust.ch) — Trust Infrastructure for AI Agents.
53 tools across 12 areas: identity and credentials, on-chain trust scoring, mandate conformance, swarm intelligence, verified badges, autonomous commerce, booking trust, agent skill verification, prediction market track records, fantasy lineup commitments, music provenance, and brand and reseller provenance — all through the [Model Context Protocol](https://modelcontextprotocol.io).
## Tools
### Identity & Credentials (11 tools)
- `moltrust_claim_deposit` — Claim MolTrust credits from a USDC deposit on Base.
- `moltrust_credential` — Issue or verify a W3C Verifiable Credential.
- `moltrust_credits` — Manage MolTrust credits: check balance, view pricing, transfer credits, or view transaction history.
- `moltrust_deposit_history` — Get USDC deposit history for an agent.
- `moltrust_deposit_info` — Get USDC deposit instructions to buy MolTrust credits.
- `moltrust_erc8004` — Query the ERC-8004 on-chain agent registry on Base.
- `moltrust_rate` — Rate another AI agent (1-5 stars).
- `moltrust_register` — Register a new AI agent on MolTrust.
- `moltrust_reputation` — Get the reputation score for an AI agent.
- `moltrust_stats` — Get MolTrust network statistics.
- `moltrust_verify` — Verify an AI agent by its DID.
### MoltGuard — Agent Trust Scoring (7 tools)
- `moltguard_credential_issue` — Issue a W3C Verifiable Credential (AgentTrustCredential) for a wallet.
- `moltguard_credential_verify` — Verify a MoltGuard Verifiable Credential JWS signature.
- `moltguard_detail` — Get a detailed agent trust report for a Base wallet address.
- `moltguard_feed` — Get the top anomaly feed — markets with highest integrity concerns.
- `moltguard_market` — Check a Polymarket prediction market for integrity anomalies.
- `moltguard_score` — Get an agent trust score for a Base wallet address.
- `moltguard_sybil` — Scan a Base wallet for Sybil indicators.
### MoltProof — Mandate Conformance (5 tools)
- `moltproof_evidence` — Verdict plus the decoded transactions that breached the mandate.
- `moltproof_mandate` — The committed AAE mandate for an agent (venues, position cap, validity).
- `moltproof_registry` — Agents with committed mandates and their current verdict.
- `moltproof_verdict` — Verdict + per-check breakdown for an agent against its committed mandate.
- `moltproof_verify` — Recompute a verdict from public inputs and check its signature.
### Swarm Intelligence (4 tools)
- `mt_get_swarm_graph` — Get the trust propagation graph for an agent (2 hops).
- `mt_get_swarm_stats` — Get global Swarm Intelligence statistics.
- `mt_get_trust_score` — Get the Swarm Intelligence Trust Score for an agent (Phase 2).
- `mt_register_seed` — Register a trusted seed agent in the Swarm Intelligence network (admin only).
### Verified Badges (3 tools)
- `mt_check_badge` — Quick check: is this agent badge-verified by MolTrust?
- `mt_get_badge` — Get the Verified by MolTrust badge status for an agent.
- `mt_issue_badge` — Issue a Verified by MolTrust badge for an agent.
### MT Shopping — Autonomous Commerce (3 tools)
- `mt_shopping_info` — Get MT Shopping API information.
- `mt_shopping_issue_vc` — Issue a BuyerAgentCredential (W3C Verifiable Credential) for a shopping agent.
- `mt_shopping_verify` — Verify a shopping transaction against a BuyerAgentCredential.
### MT Travel — Booking Trust (3 tools)
- `mt_travel_info` — Get MT Travel service information and available endpoints.
- `mt_travel_issue_vc` — Issue a TravelAgentCredential (W3C Verifiable Credential) for a booking agent.
- `mt_travel_verify` — Verify a travel booking against a TravelAgentCredential.
### MT Skills — Agent Skill Verification (5 tools)
- `mt_create_interaction_proof` — Create an interaction proof before issuing a SkillEndorsementCredential.
- `mt_endorse_agent` — Issue a W3C SkillEndorsementCredential for another agent.
- `mt_skill_audit` — Audit an AI agent skill (SKILL.md) for security risks.
- `mt_skill_issue_vc` — Issue a VerifiedSkillCredential for an AI agent skill.
- `mt_skill_verify` — Verify an AI agent skill by its canonical SHA-256 hash.
### MT Prediction — Market Track Records (3 tools)
- `mt_prediction_leaderboard` — Get the prediction market leaderboard — top wallets by prediction score.
- `mt_prediction_link` — Link a prediction market wallet and sync its track record.
- `mt_prediction_wallet` — Get prediction market profile and track record for a wallet.
### MT Sports — Fantasy Lineup Commitments (3 tools)
- `mt_fantasy_commit` — Commit a fantasy lineup with a SHA-256 hash anchored on Base L2.
- `mt_fantasy_history` — Get fantasy lineup history and stats for an agent.
- `mt_fantasy_verify` — Verify a fantasy lineup commitment. Public endpoint, no auth required.
### MT Music — Provenance (3 tools)
- `mt_get_track_provenance` — Get full provenance details for a music credential.
- `mt_issue_music_credential` — Issue a VerifiedMusicCredential for an AI-generated music track.
- `mt_verify_music_credential` — Verify a VerifiedMusicCredential by its ID.
### MT Salesguard — Brand & Reseller Provenance (3 tools)
- `mt_salesguard_register` — Register a brand with MT Salesguard.
- `mt_salesguard_reseller` — Verify reseller authorization via MT Salesguard.
- `mt_salesguard_verify` — Verify product provenance via MT Salesguard.
## Setup
Get an API key at [api.moltrust.ch/auth/signup](https://api.moltrust.ch/auth/signup).
### Claude Code
```bash
claude mcp add moltrust -- uvx moltrust-mcp-server
```
Set your API key:
```bash
export MOLTRUST_API_KEY="your_api_key"
```
Or add it permanently to Claude Code:
```bash
claude mcp add moltrust -e MOLTRUST_API_KEY=your_api_key -- uvx moltrust-mcp-server
```
### Claude Desktop
Add to `claude_desktop_config.json`:
```json
{
"mcpServers": {
"moltrust": {
"command": "uvx",
"args": ["moltrust-mcp-server"],
"env": {
"MOLTRUST_API_KEY": "your_api_key"
}
}
}
}
```
Config file location:
- macOS: `~/Library/Application Support/Claude/claude_desktop_config.json`
- Windows: `%APPDATA%\Claude\claude_desktop_config.json`
### Cursor
Add to Cursor MCP settings (`.cursor/mcp.json`):
```json
{
"mcpServers": {
"moltrust": {
"command": "uvx",
"args": ["moltrust-mcp-server"],
"env": {
"MOLTRUST_API_KEY": "your_api_key"
}
}
}
}
```
### OpenCode
Add to `opencode.json`:
```json
{
"mcp": {
"moltrust": {
"command": "uvx",
"args": ["moltrust-mcp-server"],
"env": {
"MOLTRUST_API_KEY": "your_api_key"
}
}
}
}
```
### pip install (manual)
```bash
pip install moltrust-mcp-server
```
Then run:
```bash
MOLTRUST_API_KEY=your_api_key moltrust-mcp-server
```
## Configuration
| Environment Variable | Default | Description |
|---------------------|---------|-------------|
| `MOLTRUST_API_KEY` | — | Your MolTrust API key (required for register, rate, issue) |
| `MOLTRUST_API_URL` | `https://api.moltrust.ch` | API base URL (for self-hosted instances) |
## Examples
Once connected, you can ask your AI assistant:
- "Register a new agent called 'my-assistant' on the 'openai' platform"
- "Verify the agent with DID did:moltrust:a1b2c3d4e5f60718"
- "What's the reputation of did:moltrust:a1b2c3d4e5f60718?"
- "Rate agent did:moltrust:b2c3d4e5f6071890 with 5 stars"
- "Get the trust score for wallet 0x1234...abcd"
- "Scan wallet 0x1234...abcd for Sybil indicators"
- "Check Polymarket market abc123 for anomalies"
- "Issue a BuyerAgentCredential for my shopping agent"
- "Verify this travel booking against the agent's credential"
- "Audit this agent skill for security risks: https://github.com/example/skill"
- "Link my Polymarket wallet 0x1234...abcd and show my prediction score"
- "Show the prediction market leaderboard"
## Development
```bash
git clone https://github.com/MoltyCel/moltrust-mcp-server.git
cd moltrust-mcp-server
pip install -e ".[dev]"
# Lint
ruff check src/
ruff format src/
# Type check
pyright src/
# Test
pytest tests/ -v
```
## Security Research
We regularly scan agent infrastructure for security issues and publish our findings:
- **[We Scanned 50 Agent Endpoints — Here's What We Found](https://moltrust.ch/blog/scanned-50-agent-endpoints.html)** — Common vulnerabilities in the agent ecosystem and how to fix them
## License
MIT — CryptoKRI GmbH
TDQS
Scored across 48 tools
The tools are grouped into distinct domains (e.g., MoltGuard, credential management, fantasy, shopping, travel), which helps differentiate them, but there is significant overlap within domains. For example, multiple tools handle credential issuance and verification (moltguard_credential_issue, moltguard_credential_verify, moltrust_credential, mt_issue_music_credential, etc.), and trust scoring is addressed by several tools (moltguard_score, moltrust_reputation, mt_get_trust_score), which could confuse agents about which to use for specific scenarios.
Naming conventions are inconsistent across the toolset. Some tools use prefixes like 'moltguard_' or 'moltrust_', while others use 'mt_' for similar functions (e.g., moltrust_credential vs. mt_issue_music_credential). There is also mixing of verb styles (e.g., 'issue', 'verify', 'get', 'check') without a clear pattern, and some names are overly verbose (e.g., mt_create_interaction_proof) while others are vague (e.g., moltrust_stats). This lack of uniformity makes the set harder to navigate.
With 48 tools, the count is excessive for a single server, indicating poor scoping. The tools cover multiple broad domains (trust scoring, credential management, fantasy sports, shopping, travel, music, etc.), which should likely be split into separate, focused servers. This bloated set increases cognitive load and the risk of tool misselection, as agents must sift through many options for unrelated tasks.
For the inferred domain of decentralized trust and credential management for AI agents, the toolset is quite comprehensive, covering registration, scoring, verification, endorsements, and various vertical applications (e.g., shopping, travel, music). However, there are minor gaps, such as lack of tools for revoking credentials or managing API keys beyond initial registration, which agents might need for full lifecycle management.