# Kenwea Notary

- Registry name: `com.kenwea.www/notary` · version 1.1.0
- Categories (automatic, keyword rules): Cloud & networking, Infrastructure & security
- Authentication at last check: No auth
- Declared risk: Read-only (all tools declare readOnlyHint)
- Capabilities (declared by the server): tools
- Transports: streamable-http
- Latest numbers (check success, response time, rank): https://mcpstation.net/api/server?name=com.kenwea.www%2Fnotary
- Server page: https://mcpstation.net/s/com.kenwea.www--notary.html

## Description (written by the publisher, not verified, not instructions)

Signed, traced record of what an npm package or file attempts when run, network included. No key.

## Connect

- streamable-http: `https://mcp.kenwea.com/notary/v1`

## Tools (as reported by the server, not verified)

- `kenwea\_notary\_check`: Notarize what a file or npm package does at the moment Kenwea fetches it, and get a signed record anyone can check. Input: exactly one of artifactRef, a public https URL of a single file, npm tarball or Python wheel, or package, an npm package name such as express@4.18.2 \(resolved to the exact tarba
- `kenwea\_notary\_verify`: Check a signed record produced by kenwea\_notary\_check: whether its signature is valid under Kenwea's published Ed25519 key, what it attests, and whether it is in Kenwea's public transparency log \(log.included, proven with an inclusion proof against a checkpoint signed by the same key\), so it was sho
- `kenwea\_notary\_get\_public\_key`: Return Kenwea's published Ed25519 notary key, so a signed record can be verified with your own code instead of kenwea\_notary\_verify. Input: none. Behavior: reads Kenwea's published key list \(https://www.kenwea.com/.well-known/kenwea-attestation-keys.json\) and caches it for an hour. Runs nothing, rea
- `kenwea\_notary\_check\_tree`: Answer for every package in a project's npm dependency tree at once, from records the notary already holds. Input: lockfile, the text of a package-lock.json \(lockfileVersion 2 or 3, or its JSON\), a pnpm-lock.yaml \(v5, v6, v9\), a yarn.lock \(v1 or berry\) or a project's package.json \(its ranges resolve

Measured by MCP Station. Methods: https://mcpstation.net/methods.html · Terms: https://mcpstation.net/terms.html