Bernstein MCP

Last 30 days

Uptime

100%

Response time

187 ms typical, 187 ms slowest 5%

Last check

2 h ago

Next check

in 5 h

How to call it

Add it to any MCP client that supports remote servers.

{
  "mcpServers": {
    "bernstein-mcp": {
      "type": "http",
      "url": "https://mcp.bernstein.run/mcp"
    }
  }
}

11 tools

• server_info

  Identity, version, and request limits for this MCP server.

• verify_receipt

  Recompute every hash chain a bernstein run receipt embeds (journal, lineage spine, optional audit range), rebuild the signed subject from the recomputed heads, and check the Ed25519 signature with the key the receipt carries. Needs no secret and reads nothing but the receipt. Ret

• explain_receipt

  Verify a run receipt and narrate the result in plain language: what the run recorded, which chains recomputed, where the first divergence is, and what an auditor can and cannot conclude without the producing install's keys.

• verify_chain

  Walk bernstein chain rows and recompute every link: journal rows (event_hash), lineage spine entries (entry_hash) or audit events (prev_hmac linkage). The row kind is detected from the fields, or pass `kind` explicitly. Reports the first divergent index. Pass `entries` as the fil

• verify_trace_record

  TRACE v0.2 conformance checks on one Trust Record, stateless, no account: schema (vendored trace-claim.json), profile, subject URI, software-only runtime rule, policy digest, public-only confirmation key, the embedded signature (EdDSA, ES256 or ES384 with the key in cnf.jwk), app

• verify_agent_manifest

  Agent Manifest v0.2 conformance checks on one manifest, stateless, no account: schema (vendored agent-manifest.schema.json), profile context, version, canonicalization, COSE envelope signature (Ed25519, key identified by kid in the protected header; ML-DSA-65 is reported unverifi

• verify_delegation_chain

  TRACE v0.2 delegation-chain conformance, stateless, no account: index every Trust Record by the RFC 8785 digest of its complete form, start at the leaf, follow delegation.parent_record_hash to the root, and check each hop's signature, the root key against `trusted_root_keys`, the

• explain_trace_mapping

  How a bernstein run maps onto a TRACE v0.2 Trust Record: one row per claim with the journal field it is sourced from and the rule that derives it. Pass a run receipt to fill in the rows its embedded journal can answer (subject, iat, model, data_class, policy digest, tool transcri

• list_presets

  The compliance presets bernstein v3.19.2 ships, with the switches each one turns on.

• get_preset

  Every field of one compliance preset as bernstein v3.19.2 resolves it.

• list_adapters

  The agent adapters bundled with bernstein v3.19.2: adapter name, the binary it drives, the module that implements it.

Security scan

• No findings. We scan names, descriptions and tool definitions for hidden instructions and other prompt-injection patterns.

Recent checks