DEV Community

Edison Flores
Edison Flores

Posted on

Verify any MCP server trust in 1 command (free, Ed25519, no auth)

#mcp #aiagents #security #tutorial

One command to verify MCP trust 

curl -s https://marketnow.site/api/atc?action=verify&card_id=ATC-2026-7777670 | jq
Enter fullscreen mode Exit fullscreen mode

Returns:

{
  "valid": true,
  "sentinel_review_score": 10,
  "decision_authority": "consumer",
  "risk_level": "low"
}
Enter fullscreen mode Exit fullscreen mode

What is this?

Agent Trust Cards (ATC) — Ed25519-signed identity cards for MCP servers. RFC 8032 + RFC 8785 JCS. Schema v1.1.0.

The ATC answers 4 questions:

  1. Identity (Ed25519 public key)
  2. Issuer (which CA vouches)
  3. Validity (valid/revoked)
  4. Review evidence (Sentinel score 0-10)

It does NOT answer should you trust it? — that is YOUR decision.

Also: verify Vibe receipts (mutual hop) 

curl -s https://marketnow.site/api/atc?action=verify-vibe-receipt | jq .valid
# -> true (bidirectional Ed25519 verification)
Enter fullscreen mode Exit fullscreen mode

Submit your MCP server for free audit 

curl -X POST https://marketnow.site/api/submit-skill -H "Content-Type: application/json" -d x27{"repo_url": "https://github.com/you/your-mcp-server"}x27
Enter fullscreen mode Exit fullscreen mode

10-layer audit. Ed25519 ATC. Catalog listing. All free.

Links: https://marketnow.site/submit | https://github.com/edgarfloresguerra2011-a11y/marketnow

Top comments (1)

Collapse
 
topstar_ai profile image
Luis Cruz •

I found the use of Ed25519 signatures for Agent Trust Cards (ATC) to be particularly interesting, as it provides a robust and compact way to verify the identity and validity of MCP servers. The fact that the curl command can verify the trust in a single step is quite convenient, and the JSON output provides a clear and machine-readable format for the verification results. I'm curious to know more about the Sentinel review score and how it's calculated, as it seems to play a key role in determining the risk level of an MCP server. Does the Sentinel score take into account any external factors, such as the server's reputation or user feedback?