Verify a server's polygraph attestation
verify_attestationRead a server's published behavioral grade and attestation evidence to determine trustworthiness before agentic commerce.
Instructions
Read a server's already-published polygraph (litmus) grade — without running anything — before an agent trusts or, in agentic commerce, pays it.
When a grade is published it returns the behavioral grade (A–F), the attestation UID, the evidence CID, and the graded tool-surface fingerprint. The caller must still recompute the LIVE fingerprint and require it to equal the attested one before paying — a passing attestation can otherwise front for a tool surface the server no longer serves (rug pull).
Grade publishing is still rolling out, so this commonly returns not_available
today: that means UNEVALUATED (neither safe nor unsafe), not a failing grade — to
grade the server yourself right now, use run_litmus. A lookup_failed result
means the lookup itself failed (the index or chain was unreachable); the grade is
unknown, which is not the same as unevaluated.
Input: server_ref — e.g. npm/@modelcontextprotocol/server-filesystem.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| server_ref | Yes | Registry-prefixed server identifier, e.g. npm/@scope/server. |