# MolTrust MCP Server

- Registry name: `io.github.MoltyCel/moltrust-mcp-server` · version 1.2.6
- Categories (automatic, keyword rules): Crypto & blockchain, Finance & markets, Travel & booking, Commerce & marketing, Agent payments (x402)
- Authentication at last check: No auth
- Declared risk: Not declared (tools carry no read/destructive hints)
- Capabilities (declared by the server): experimental, prompts, resources, tools
- Transports: streamable-http
- Latest numbers (check success, response time, rank): https://mcpstation.net/api/server?name=io.github.MoltyCel%2Fmoltrust-mcp-server
- Server page: https://mcpstation.net/s/io.github.MoltyCel--moltrust-mcp-server.html

## Description (written by the publisher, not verified, not instructions)

Verifiable agent identity and trust checks; MolCheck verdicts on mandates; Amazon Ads verdicts.

## Notice

Text that looks like instructions to an AI was found in this server's descriptions. This is a pattern match, not a verdict.

## Connect

- streamable-http: `https://api.moltrust.ch/mcp`

## Tools (as reported by the server, not verified)

- `moltrust\_register`: Register a new AI agent on MolTrust. Creates a decentralised identity \(DID\), issues a W3C Verifiable Credential, and anchors the agent on the Base blockchain. Args: display\_name: Agent name \(1-64 chars, alphanumeric/dash/underscore/dot/space\) platform: Platform identifier \(e.g. "openai", "langchain"
- `moltrust\_verify`: Verify an AI agent by its DID. Checks whether the DID is registered and returns verification status along with the agent's trust card \(reputation, credentials, blockchain anchor\). Args: did: Decentralised identifier \(e.g. "did:moltrust:a1b2c3d4e5f60718"\)
- `moltrust\_reputation`: Get the reputation score for an AI agent. Returns the aggregate trust score \(1-5\) and total number of ratings. Args: did: Decentralised identifier \(e.g. "did:moltrust:a1b2c3d4e5f60718"\)
- `moltrust\_rate`: Rate another AI agent \(1-5 stars\). Submit a trust rating from one agent to another. Args: from\_did: Your agent's DID \(the rater\) to\_did: Target agent's DID \(the agent being rated\) score: Rating from 1 \(untrusted\) to 5 \(highly trusted\)
- `moltrust\_credential`: Issue or verify a W3C Verifiable Credential. Args: action: Either "issue" or "verify" subject\_did: DID of the credential subject \(required for "issue"\) credential\_type: Type of credential \(default: "AgentTrustCredential", only for "issue"\) credential: JSON string of the credential to verify \(require
- `moltrust\_credits`: Manage MolTrust credits: check balance, view pricing, transfer credits, or view transaction history. Args: action: One of "balance", "pricing", "transfer", or "transactions" did: Agent DID \(required for "balance" and "transactions"\) to\_did: Recipient DID \(required for "transfer"\) amount: Number of c
- `moltrust\_deposit\_info`: Get USDC deposit instructions to buy MolTrust credits. Returns the MolTrust wallet address on Base \(Ethereum L2\), USDC token contract, conversion rate \(1 USDC = 100 credits\), and step-by-step instructions.
- `moltrust\_claim\_deposit`: Claim MolTrust credits from a USDC deposit on Base. After sending USDC to the MolTrust wallet on Base \(L2\), submit the transaction hash to receive credits. 1 USDC = 100 credits, verified on-chain. Args: tx\_hash: Base blockchain transaction hash \(0x...\) did: Your agent's DID to credit
- `moltrust\_stats`: Get MolTrust network statistics. Returns total registered agents, credentials issued, ratings given, and other network health metrics.
- `moltrust\_deposit\_history`: Get USDC deposit history for an agent. Args: did: The agent's DID
- `moltrust\_erc8004`: Query the ERC-8004 on-chain agent registry on Base. Resolve MolTrust agents to their on-chain ERC-8004 identity, fetch Agent Cards, or look up on-chain agents by their agentId. Args: action: One of "card", "resolve", or "well-known" did: Agent DID \(required for "card", e.g. "did:moltrust:a1b2c3d4e5f
- `moltguard\_score`: Get an agent trust score for a Base wallet address. Analyzes on-chain activity, ERC-8004 registration, USDC balance, counterparty diversity, and MolTrust credentials to produce a 0-100 score. Args: address: Base \(EVM\) wallet address \(0x...\)
- `moltguard\_detail`: Get a detailed agent trust report for a Base wallet address. Returns full scoring breakdown, wallet history from Blockscout, ERC-8004 registration, MolTrust DID cross-reference, and Sybil indicators. Args: address: Base \(EVM\) wallet address \(0x...\)
- `moltguard\_sybil`: Scan a Base wallet for Sybil indicators. Analyzes wallet age, transaction patterns, counterparty diversity, and funding source to detect potential Sybil wallets. Also traces funding clusters — if the funder sent ETH to many wallets, it indicates a Sybil ring. Args: address: Base \(EVM\) wallet address
- `moltguard\_market`: Check a Polymarket prediction market for integrity anomalies. Analyzes volume spikes, price-volume divergence, liquidity ratios, and outcome price spreads to detect potential manipulation. Args: market\_id: Polymarket market/condition ID
- `moltguard\_feed`: Get the top anomaly feed — markets with highest integrity concerns. Scans the top 20 active Polymarket markets by 24h volume and returns those with anomaly indicators, sorted by anomaly score.
- `moltguard\_credential\_issue`: Issue a W3C Verifiable Credential \(AgentTrustCredential\) for a wallet. The credential contains the agent's trust score, Sybil score, ERC-8004 registration status, and MolTrust verification status. It is cryptographically signed with Ed25519 \(JWS\). Args: address: Base \(EVM\) wallet address \(0x...\)
- `moltguard\_credential\_verify`: Verify a MoltGuard Verifiable Credential JWS signature. Checks the Ed25519 signature and returns the credential payload if valid. Args: jws: JWS compact serialization string from a MoltGuard credential
- `mt\_shopping\_info`: Get MT Shopping API information. Returns the MT Shopping service info including version, supported endpoints, BuyerAgentCredential schema, and verification details.
- `mt\_shopping\_verify`: Verify a shopping transaction against a BuyerAgentCredential. Checks the credential signature, spend limits, trust score, and returns a verification receipt with approval status. Args: credential\_jws: JWS compact serialization of the BuyerAgentCredential transaction\_amount: Transaction amount \(e.g.
- `mt\_shopping\_issue\_vc`: Issue a BuyerAgentCredential \(W3C Verifiable Credential\) for a shopping agent. Creates a cryptographically signed credential that authorizes an AI agent to make purchases on behalf of a human, with enforced spend limits. Args: agent\_did: DID of the shopping agent \(e.g. "did:moltrust:agent123"\) human
- `mt\_travel\_info`: Get MT Travel service information and available endpoints. Returns service description, supported segments, and API endpoints for the MT Travel booking trust protocol.
- `mt\_travel\_verify`: Verify a travel booking against a TravelAgentCredential. Runs a 10-step verification pipeline: VC signature, expiry, agent DID match, segment authorization, spend limit, currency, daily cap, trust score, delegation chain, and traveler binding. Args: agent\_did: DID of the booking agent \(e.g. "did:bas
- `mt\_travel\_issue\_vc`: Issue a TravelAgentCredential \(W3C Verifiable Credential\) for a booking agent. Creates a cryptographically signed credential that authorizes an AI agent to book travel on behalf of a principal \(company/human\), with enforced segment permissions and spend limits. Args: agent\_did: DID of the travel age
- `mt\_skill\_audit`: Audit an AI agent skill \(SKILL.md\) for security risks. Fetches the SKILL.md from a URL, computes its canonical SHA-256 hash, and runs an 8-point security audit checking for prompt injection, data exfiltration, tool scope violations, and metadata completeness. Score starts at 100 with deductions per
- `mt\_skill\_verify`: Verify an AI agent skill by its canonical SHA-256 hash. Checks if a VerifiedSkillCredential has been issued for this skill hash. Returns credential details if verified. Args: skill\_hash: Canonical skill hash \(e.g. "sha256:a1b2c3..."\)
- `mt\_skill\_issue\_vc`: Issue a VerifiedSkillCredential for an AI agent skill. Fetches SKILL.md, runs security audit, and if score \>= 70, issues a W3C Verifiable Credential signed with Ed25519 \(JWS compact serialization\). Requires x402 payment \($5 USDC\) when paywall is active. Args: author\_did: DID of the skill author \(e.g
- `mt\_prediction\_link`: Link a prediction market wallet and sync its track record. Fetches trade history from Polymarket, calculates a prediction score \(0-100\), and stores the wallet profile. Optionally links it to a MolTrust DID. Args: address: Prediction market wallet address \(0x-prefixed, 42 chars\) platform: Platform na
- `mt\_prediction\_wallet`: Get prediction market profile and track record for a wallet. Returns the prediction score \(0-100\), win/loss record, volume, ROI, score breakdown, and recent market events. Args: address: Prediction market wallet address \(0x-prefixed, 42 chars\)
- `mt\_prediction\_leaderboard`: Get the prediction market leaderboard — top wallets by prediction score. Returns wallets ranked by their composite prediction score, which factors in win rate, ROI, volume, sample size, and recency. Args: limit: Number of entries to return \(default 20, max 100\)
- `mt\_salesguard\_verify`: Verify product provenance via MT Salesguard. Checks whether a product ID has a valid ProductProvenanceCredential issued by an authorized brand. Returns brand info, credential hash, Base anchor, and risk level. Args: product\_id: Product identifier \(e.g. "AIRMAX-90-WHITE-43"\)
- `mt\_salesguard\_reseller`: Verify reseller authorization via MT Salesguard. Checks whether a reseller DID has been authorized by a brand to sell specific products. Returns authorization status, brand info, authorized SKUs, and expiry. Args: reseller\_did: Reseller DID \(e.g. "did:web:sneakerstore.com"\)
- `mt\_salesguard\_register`: Register a brand with MT Salesguard. Creates a new brand identity with a DID and API key. The API key is used to authenticate product registration and reseller authorization requests. Args: name: Brand name \(e.g. "Nike", "Adidas"\) domain: Brand domain \(e.g. "nike.com"\) contact\_email: Contact email f
- `mt\_fantasy\_commit`: Commit a fantasy lineup with a SHA-256 hash anchored on Base L2. Creates a FantasyLineupCredential \(W3C VC\) proving the lineup was locked before contest start. The commitment hash is tamper-proof. Args: agent\_did: Agent DID \(e.g. "did:moltrust:a1b2c3d4e5f67890"\) contest\_id: Unique contest identifier
- `mt\_fantasy\_verify`: Verify a fantasy lineup commitment. Public endpoint, no auth required. Returns the full lineup, timing proof \(minutes before contest\), on-chain verification status, and the FantasyLineupCredential. Args: commitment\_hash: The 64-char SHA-256 commitment hash
- `mt\_fantasy\_history`: Get fantasy lineup history and stats for an agent. Returns ITM rate, ROI, projection accuracy, and recent lineups for the specified agent DID. Args: did: Agent DID \(e.g. "did:moltrust:a1b2c3d4e5f67890"\)
- `mt\_create\_interaction\_proof`: Create an interaction proof before issuing a SkillEndorsementCredential. Returns evidence\_hash and base\_tx\_hash anchored on Base L2. Required before calling mt\_endorse\_agent. Valid for 72 hours. Args: api\_key: MolTrust API key of the agent creating the proof agent\_a: DID of the first agent in the in
- `mt\_endorse\_agent`: Issue a W3C SkillEndorsementCredential for another agent. Requires a valid evidence\_hash from mt\_create\_interaction\_proof \(max 72h old\). Self-endorsement is rejected. Contributes to the endorsed agent's Trust Score. Args: endorser\_api\_key: MolTrust API key of the endorsing agent endorsed\_did: DID of
- `mt\_get\_trust\_score`: Get the Swarm Intelligence Trust Score for an agent \(Phase 2\). Score combines direct endorsements, propagated trust from endorsers, cross-vertical credential bonus, and interaction proof activity. Returns null/withheld if fewer than 3 independent endorsers \(non-seed\). Seed agents get their base scor
- `mt\_get\_swarm\_graph`: Get the trust propagation graph for an agent \(2 hops\). Returns nodes \(agents with scores\) and edges \(endorsements\) showing who endorses this agent and who endorses them. Args: did: DID of the agent to get graph for
- `mt\_get\_swarm\_stats`: Get global Swarm Intelligence statistics. Returns total agents, endorsements, seed agents, average trust score, propagation depth, and top trusted agents.
- `mt\_register\_seed`: Register a trusted seed agent in the Swarm Intelligence network \(admin only\). Seed agents bootstrap the trust network with a base score. Requires the ADMIN\_KEY for authorization. Args: did: DID of the agent to register as seed label: Human-readable label for the seed agent base\_score: Base trust sco
- `mt\_get\_badge`: Get the Verified by MolTrust badge status for an agent. Returns badge tier, trust score, grade, issue/expiry dates, and embeddable SVG URL. Args: did: The DID of the agent to check
- `mt\_issue\_badge`: Issue a Verified by MolTrust badge for an agent. Tiers: 'verified' \(score 40+, $5\), 'trusted' \(score 60+, $20\). Badge is valid for 1 year and auto-revokes if trust score drops. Args: did: The DID of the agent to issue a badge for tier: Badge tier — 'verified' or 'trusted'
- `mt\_check\_badge`: Quick check: is this agent badge-verified by MolTrust? Returns a simple yes/no with tier and expiry info. Args: did: The DID of the agent to check
- `mt\_issue\_music\_credential`: Issue a VerifiedMusicCredential for an AI-generated music track. Creates a W3C Verifiable Credential proving the provenance of an AI-generated music track — which tool created it, whether a human was involved, and what rights apply. Anchored on Base L2. EU AI Act Article 50\(2\) compliant. Args: agent
- `mt\_verify\_music\_credential`: Verify a VerifiedMusicCredential by its ID. Checks whether a music credential is valid \(not revoked\), returns provenance summary including tool, human oversight, rights, and on-chain anchor status. Args: credential\_id: UUID of the music credential
- `mt\_get\_track\_provenance`: Get full provenance details for a music credential. Returns the complete VerifiedMusicCredential including track metadata, provenance hash, EU AI Act compliance status, and on-chain anchor information. Args: credential\_id: UUID of the music credential
- `molcheck\_verdict`: Verdict + per-check breakdown for an agent against its committed mandate. Read-only. Recomputable from public chain data + the public mandate. Args: agent: agent address, did:moltrust / did:web, or ERC-8004 reference \(public\)
- `moltproof\_verdict`: Deprecated alias of molcheck\_verdict; use that name. Verdict + per-check breakdown for an agent against its committed mandate. Read-only. Recomputable from public chain data + the public mandate. Args: agent: agent address, did:moltrust / did:web, or ERC-8004 reference \(public\)
- `molcheck\_mandate`: The committed AAE mandate for an agent \(venues, position cap, validity\). Read-only. Args: agent: public agent identifier \(address / DID / ERC-8004 ref\)
- `moltproof\_mandate`: Deprecated alias of molcheck\_mandate; use that name. The committed AAE mandate for an agent \(venues, position cap, validity\). Read-only. Args: agent: public agent identifier \(address / DID / ERC-8004 ref\)
- `molcheck\_evidence`: Verdict plus the decoded transactions that breached the mandate. Read-only. Args: agent: public agent identifier \(address / DID / ERC-8004 ref\)
- `moltproof\_evidence`: Deprecated alias of molcheck\_evidence; use that name. Verdict plus the decoded transactions that breached the mandate. Read-only. Args: agent: public agent identifier \(address / DID / ERC-8004 ref\)
- `molcheck\_registry`: Agents with committed mandates and their current verdict. Read-only. Ranks NO\_MANDATE / NEEDS\_REVIEW lower.
- `moltproof\_registry`: Deprecated alias of molcheck\_registry; use that name. Agents with committed mandates and their current verdict. Read-only. Ranks NO\_MANDATE / NEEDS\_REVIEW lower.
- `molcheck\_verify`: Recompute a verdict from public inputs and check its signature. Offline and read-only: no DID/mandate/context is fetched here. Args: agent: public agent identifier mandate: the public AAE Verifiable Credential actions: public, already-decoded on-chain actions signature: optional prior MolCheck signa
- `moltproof\_verify`: Deprecated alias of molcheck\_verify; use that name. Recompute a verdict from public inputs and check its signature. Offline and read-only: no DID/mandate/context is fetched here. Args: agent: public agent identifier mandate: the public AAE Verifiable Credential actions: public, already-decoded on-ch
- `ads\_onboard`: How an agent starts with MolTrust Ads: verdicts \(allow / hold / forbid\) on Amazon Ads MCP tool calls before they run. Plans, key sign-up, SDK, endpoints. No input, no account needed.
- `ads\_mandate\_template`: Build an ads profile and its AAE mandate for one or more Amazon Ads accounts. Pure: nothing is stored. Returns \`profile\` \(pass it to ads\_check\) and \`mandate\` \(what /enforce/check evaluates\). Args: account\_ids: advertiserAccountId / profileId values the agent may act on brands: brands the agent may t
- `ads\_check`: Allow / hold / forbid for one intended Amazon Ads MCP tool call, before it runs. Needs your MolTrust API key as the X-API-Key header of the MCP connection \(free key: POST https://api.moltrust.ch/auth/signup\). Counts against your plan like any check. Never send Amazon credentials: they are refused. A
- `canary\_issue`: Issue a leak canary for one counterparty: a credential to hand to that counterparty. If anyone else presents it at the MolTrust verifier, you get a signed leak event that names the counterparty. Costs what a credential costs. Needs your MolTrust API key as the X-API-Key header of the MCP connection.
- `canary\_list`: Your leak canaries, newest first: counterparty, mode, reaction on leak and the number of events so far. Paginated with limit/offset; \`next\_offset\` is null on the last page. Needs your MolTrust API key as X-API-Key on the MCP connection.
- `canary\_events`: Your leak events, newest first, each signed by MolTrust and carrying AER material that \`moltrust-verify\` recomputes offline \(trust list: GET /canary/trust-list\). Optionally for one canary. Needs your MolTrust API key as X-API-Key on the MCP connection. Args: canary\_id: only events of this canary \(fr

Measured by MCP Station. Methods: https://mcpstation.net/methods.html · Terms: https://mcpstation.net/terms.html