# POPCORN MCP

- Registry name: `io.github.violetclaire/popcorn-mcp` · version 0.1.5
- Categories (automatic, keyword rules): Payments & accounting, Finance & markets, Crypto & blockchain
- Authentication at last check: No auth
- Declared risk: Has destructive tools (destructiveHint)
- Capabilities (declared by the server): tools
- Transports: streamable-http
- Latest numbers (check success, response time, rank): https://mcpstation.net/api/server?name=io.github.violetclaire%2Fpopcorn-mcp
- Server page: https://mcpstation.net/s/io.github.violetclaire--popcorn-mcp.html

## Description (written by the publisher, not verified, not instructions)

RFC 3161 + authorization expiry: https://767-2676.com/prove-action-before-authorization-expired

## Connect

- streamable-http: `https://767-2676.com/mcp`

## Tools (as reported by the server, not verified)

- `popcorn\_sample`: Check the public October 14 TAIN 2.0 receipt and a changed-digest control. No inputs, wallet, payment, or outbound request. Historical evidence, not a fresh clock. Bundled sample keys do not independently establish issuer identity.
- `popcorn\_catalog`: Read the live catalog, offer, and published verification keys. Free; no payment.
- `popcorn\_hash`: Hash public bytes on this remote server. Submitted text reaches the server: hash private work locally instead. Free; no onward request or payment.
- `popcorn\_verify`: Verify a time or witness receipt using caller-trusted JWKS and expected values. Digest-only for witness payloads. No outbound request or payment. Caller keys do not establish issuer identity; a signature grants no authority.
- `popcorn\_verify\_v2`: Verify TAIN 2.0 evidence against keys fetched from the fixed POPCORN issuer URL. Caller jwks is replaced with published keys, including predecessors. Send a digest, never private work. Free; does not grant authority, establish current time, or verify settlement on chain.
- `popcorn\_time`: Request signed current-time evidence. Defaults to a free unpaid 402 challenge. A fresh receipt costs exactly $0.001 USDC on Base. Payment requires owner approval, approve\_payment:true, and a caller-signed payment\_signature. No server wallet or private key. No automatic retry. Verify evidence and acc
- `popcorn\_witness`: Witness a SHA-256 digest and fresh caller nonce at a time. Defaults to a free unpaid 402 challenge. One fresh receipt costs exactly $0.001 USDC on Base; requires owner approval, approve\_payment:true, and caller-signed payment\_signature. Keep work and wallet keys local. No automatic retry. Evidence d

Measured by MCP Station. Methods: https://mcpstation.net/methods.html · Terms: https://mcpstation.net/terms.html