{
  "markdown": "# ALEETH Authority MCP: public interface and provenance\n\nThis repository is the public interface definition, version history, and provenance record for\nthe remote MCP server **`com.aleeth/authority-mcp`**, hosted at `https://mcp.aleeth.com/mcp`.\n\nThe implementation is private by decision. This repository publishes everything a caller,\nauditor, or registry can verify without source access: the registry manifest, the complete tool\nmanifest, the version history, and the security policy.\n\n## What the server is\n\nThe ALEETH Authority MCP is the first MCP server governed by ICA (Institutional Control\nArchitecture). Every tool call is risk-checked before execution and sealed with a signed\nEd25519 receipt on a hash-chained ledger anchored to Bitcoin via OpenTimestamps. The server\nfails closed: if governance cannot run or the receipt cannot be written, the call does not\nreturn a result.\n\n- 51 governed tools: 41 base tools and the 10 Astra plane tools the deployed server declares (see [`tools/manifest.json`](tools/manifest.json))\n- Transport: MCP streamable HTTP, TLS only\n- Authentication: OAuth 2.0 bearer tokens; discovery per RFC 9728 at\n  `https://mcp.aleeth.com/.well-known/oauth-protected-resource`\n- Anonymous calls are refused with 401\n\n## What is in this repository\n\n| File | What it is | How it is produced |\n|---|---|---|\n| [`server.json`](server.json) | The manifest published to the official MCP registry | Maintained by ALEETH, versioned here |\n| [`tools/manifest.json`](tools/manifest.json) | All 51 tools: names, descriptions, input schemas | GENERATED from the live server by an export script, run by the server's own live check against `https://mcp.aleeth.com/mcp`; never hand-edited, so it cannot drift from what the server actually serves |\n| [`CHANGELOG.md`](CHANGELOG.md) | Version history | Curated from the implementation repository's history |\n| [`SECURITY.md`](SECURITY.md) | Disclosure contact and security posture | Maintained by ALEETH |\n\n## Verify the running server yourself\n\nNone of the following requires permission from ALEETH or access to the source.\n\n1. **Protocol and auth conformance (black-box):**\n   `npx mcp-spec-check https://mcp.aleeth.com/mcp --bearer <token>`\n   Read-only credentials are available on request: security@aleeth.com.\n   Current independent grade: A (7 pass, 0 fail, 1 warn), last re-verified 2026-07-24.\n2. **Anonymous access is refused:** `curl -s -o /dev/null -w \"%{http_code}\" -X POST https://mcp.aleeth.com/mcp`\n   returns `401`, with authorization-server discovery served per RFC 9728.\n3. **Receipts verify publicly:** any receipt hash from a governed call verifies at\n   `https://imperium.aleeth.com/api/receipts/verify/<hash>`, and offline against the pinnable\n   trust anchor at `https://imperium.aleeth.com/.well-known/ica-trust-anchor.json` (public keys,\n   SHA-256 DER fingerprints, and an offline verification recipe: you verify with a key you hold,\n   with zero calls to ALEETH).\n4. **Measured latency, floor included:** see [`performance/`](performance/) for a live\n   end-to-end run against production and a local server-overhead run, each published with its\n   full run conditions and the enforced decision-timing floor disclosed.\n5. **The full proof surface:** https://aleeth.com/proof\n\n## Why the source is private\n\nPublication is not a precondition for verification. The checks that matter for a hosted remote\nserver probe the running service: protocol conformance, authentication behavior, error\ncontracts, and the receipt ledger. A static scan of this repository can verify the interface\nand the provenance; runtime governance claims are backed by the signed, Bitcoin-anchored\nreceipt chain, which is public.\n\nBackground reading: \"Stateless Is Not Governed\",\nhttps://publications.aleeth.com/stateless-is-not-governed/\n\n## Contact\n\n- Security disclosures: security@aleeth.com (see [`SECURITY.md`](SECURITY.md))\n- Read-only evaluation credentials: security@aleeth.com\n\nALEETH is a brand of The Schreck Group, Inc. AI has met its match. Truth.™\n",
  "bytes": 4029,
  "sha": "fcd6b73fbddf8fd9567eb4e893155b431876d6dae91f337ac9d5d41322e3dbfa",
  "repo_slug": "theschreckmethod/aleeth-authority-mcp-interface",
  "fonte": "repo",
  "truncated": false,
  "api": "https://agentalog.com/api/listings/mcp_com_aleeth_authority_mcp_41bbc102/readme"
}