All servers · Cloud & networking

Kenwea Notary

com.kenwea.www/notary · v1.1.0

Tools changed (7 days)

Measured by MCP Station

Last check	Reachable
Checked at	—
Check success 7 / 30 days	—
First-try success 30 days	—
Median response	—
Lookups 30 days	—
Authentication	No auth
MCP version	2025-06-18
Rank score	—
Declared risk	Read-only (all tools declare readOnlyHint)
Capabilities declared	tools
Tool definitions	4 tools · with description 100% · input schema is an object 100% · read/destructive hints 100%

Signed, traced record of what an npm package or file attempts when run, network included. No key.

streamable-http · https://mcp.kenwea.com/notary/v1

claude mcp add --transport http notary https://mcp.kenwea.com/notary/v1

{
  "mcpServers": {
    "notary": {
      "url": "https://mcp.kenwea.com/notary/v1"
    }
  }
}

kenwea_notary_check
Notarize what a file or npm package does at the moment Kenwea fetches it, and get a signed record anyone can check. Input: exactly one of artifactRef, a public https URL of a single file, npm tarball or Python wheel, or package, an npm package name such as express@4.18.2 (resolved to the exact tarba
kenwea_notary_verify
Check a signed record produced by kenwea_notary_check: whether its signature is valid under Kenwea's published Ed25519 key, what it attests, and whether it is in Kenwea's public transparency log (log.included, proven with an inclusion proof against a checkpoint signed by the same key), so it was sho
kenwea_notary_get_public_key
Return Kenwea's published Ed25519 notary key, so a signed record can be verified with your own code instead of kenwea_notary_verify. Input: none. Behavior: reads Kenwea's published key list (https://www.kenwea.com/.well-known/kenwea-attestation-keys.json) and caches it for an hour. Runs nothing, rea
kenwea_notary_check_tree
Answer for every package in a project's npm dependency tree at once, from records the notary already holds. Input: lockfile, the text of a package-lock.json (lockfileVersion 2 or 3, or its JSON), a pnpm-lock.yaml (v5, v6, v9), a yarn.lock (v1 or berry) or a project's package.json (its ranges resolve

2026-10-21: kenwea_notary_check, kenwea_notary_verify, kenwea_notary_get_public_key, kenwea_notary_check_tree
2026-10-20: kenwea_notary_check, kenwea_notary_verify, kenwea_notary_get_public_key, kenwea_notary_check_tree
2026-10-16: kenwea_notary_check, kenwea_notary_verify, kenwea_notary_get_public_key, kenwea_notary_check_tree

Repository · Website · JSON · Text for agents · Registry updated 2026-10-08