KeyHalve - verify sealed documents
com.keyhalve/verifyVersion 1.0.1Free, no-account verification of KeyHalve-sealed documents. Read-only; never receives keys.
Status
Responds214 msAnswered our handshake without sign-in.- Last checked
- Nov 14, 2026, 14:03 UTC
- Latency
- 214 ms
- Remotes responding
- 1 of 1
- Sign-in
- No sign-in
- Hosting
- Hosted outside the EU (detected)
- Registry data as of
- Nov 14, 2026, 21:12 UTC
Data from the official MCP Registry, checked by run.zero. How we check
Connect
Streamable HTTP
https://mcp.keyhalve.com/mcpResponds214 msNo sign-in
Claude Code
claude mcp add --transport http verify https://mcp.keyhalve.com/mcpClaude Desktop and claude.ai
Settings > Connectors > Add custom connector
Name: verify
Remote MCP server URL: https://mcp.keyhalve.com/mcpCursor
{
"mcpServers": {
"verify": {
"url": "https://mcp.keyhalve.com/mcp"
}
}
}VS Code
code --add-mcp '{"name":"verify","type":"http","url":"https://mcp.keyhalve.com/mcp"}'Streamable HTTP
npm: @keyhalve/verify-mcp 0.1.0Package only
npm (npx)
claude mcp add verify -- npx -y @keyhalve/verify-mcp@0.1.0Built your own server? run.zero hosts MCP servers on European infrastructure.
Tools
3 tools
Read-only | Idempotent | Open world | ||
|---|---|---|---|---|
keyhalve_explainPlain-language explanation of what a KeyHalve verification verdict means and why it can be trusted (blind rail, three-share custody, commitments, revocation). Optionally focused on one topic. | Not declared | Yes | Not declared | No |
keyhalve_statusLive status of a KeyHalve-sealed document by id: active, revoked (with reason/time), or outside its validity window. Lighter than keyhalve_verify — status only, no integrity or rail checks. Use for "is this still good right now?" | Not declared | Yes | Not declared | Yes |
keyhalve_verifyVerify a KeyHalve-sealed document. Accepts a verify URL, the raw text of a KeyHalve QR code, or a document id (vp_…, kh_…, cb_…). Returns the cryptographic verdict: whether the seal exists, its live status (active/revoked/expired), ciphertext integrity against the issuance commitment, the KeyHalve rail's independent attestation, the validity window, and the issuer's trust context. This tool NEVER decrypts sealed contents — any decryption key in the URL fragment is discarded unread; contents are only readable by opening the verify URL in a browser. | Not declared | Yes | Not declared | Yes |