# io.github.sipyourdrink-ltd/bernstein-mcp

- Registry name: `io.github.sipyourdrink-ltd/bernstein-mcp` · version 0.2.0
- Categories (automatic, keyword rules): Security, Infrastructure & security, Maps, location & weather
- Authentication at last check: No auth
- Declared risk: Not declared (tools carry no read/destructive hints)
- Capabilities (declared by the server): tools
- Transports: streamable-http
- Latest numbers (check success, response time, rank): https://mcpstation.net/api/server?name=io.github.sipyourdrink-ltd%2Fbernstein-mcp
- Server page: https://mcpstation.net/s/io.github.sipyourdrink-ltd--bernstein-mcp.html

## Description (written by the publisher, not verified, not instructions)

Verifies Bernstein run receipts and hash chains; lists the shipped presets and adapters. Read-only.

## Connect

- streamable-http: `https://mcp.bernstein.run/mcp`

## Tools (as reported by the server, not verified)

- `server\_info`: Identity, version, and request limits for this MCP server.
- `verify\_receipt`: Recompute every hash chain a bernstein run receipt embeds \(journal, lineage spine, optional audit range\), rebuild the signed subject from the recomputed heads, and check the Ed25519 signature with the key the receipt carries. Needs no secret and reads nothing but the receipt. Returns the verdict, th
- `explain\_receipt`: Verify a run receipt and narrate the result in plain language: what the run recorded, which chains recomputed, where the first divergence is, and what an auditor can and cannot conclude without the producing install's keys.
- `verify\_chain`: Walk bernstein chain rows and recompute every link: journal rows \(event\_hash\), lineage spine entries \(entry\_hash\) or audit events \(prev\_hmac linkage\). The row kind is detected from the fields, or pass \`kind\` explicitly. Reports the first divergent index. Pass \`entries\` as the file text \(a JSON array
- `verify\_trace\_record`: TRACE v0.2 conformance checks on one Trust Record, stateless, no account: schema \(vendored trace-claim.json\), profile, subject URI, software-only runtime rule, policy digest, public-only confirmation key, the embedded signature \(EdDSA, ES256 or ES384 with the key in cnf.jwk\), appraisal, delegation l
- `verify\_agent\_manifest`: Agent Manifest v0.2 conformance checks on one manifest, stateless, no account: schema \(vendored agent-manifest.schema.json\), profile context, version, canonicalization, COSE envelope signature \(Ed25519, key identified by kid in the protected header; ML-DSA-65 is reported unverifiable\). Optionally ch
- `verify\_delegation\_chain`: TRACE v0.2 delegation-chain conformance, stateless, no account: index every Trust Record by the RFC 8785 digest of its complete form, start at the leaf, follow delegation.parent\_record\_hash to the root, and check each hop's signature, the root key against \`trusted\_root\_keys\`, the depth bound, the li
- `explain\_trace\_mapping`: How a bernstein run maps onto a TRACE v0.2 Trust Record: one row per claim with the journal field it is sourced from and the rule that derives it. Pass a run receipt to fill in the rows its embedded journal can answer \(subject, iat, model, data\_class, policy digest, tool transcript\) alongside the re
- `list\_presets`: The compliance presets bernstein v3.19.2 ships, with the switches each one turns on.
- `get\_preset`: Every field of one compliance preset as bernstein v3.19.2 resolves it.
- `list\_adapters`: The agent adapters bundled with bernstein v3.19.2: adapter name, the binary it drives, the module that implements it.

Measured by MCP Station. Methods: https://mcpstation.net/methods.html · Terms: https://mcpstation.net/terms.html