Privi Ledger — Recovery Evaluation
io.github.canoydario847-cloud/privi-ledgerVersion 0.14.1Evaluation-only ledger MCP. Temporary storage; not durable audit evidence. Payments disabled.
Status
Responds189 msAnswered our handshake without sign-in.- Last checked
- Nov 14, 2026, 14:47 UTC
- Latency
- 189 ms
- Remotes responding
- 1 of 1
- Sign-in
- No sign-in
- Hosting
- Hosted outside the EU (detected)
- Registry data as of
- Nov 14, 2026, 22:14 UTC
Data from the official MCP Registry, checked by run.zero. How we check
Connect
Streamable HTTP
https://privi-ledger-mcp-recovery.onrender.com/mcpResponds189 msNo sign-in
Claude Code
claude mcp add --transport http privi-ledger https://privi-ledger-mcp-recovery.onrender.com/mcpClaude Desktop and claude.ai
Settings > Connectors > Add custom connector
Name: privi-ledger
Remote MCP server URL: https://privi-ledger-mcp-recovery.onrender.com/mcpCursor
{
"mcpServers": {
"privi-ledger": {
"url": "https://privi-ledger-mcp-recovery.onrender.com/mcp"
}
}
}VS Code
code --add-mcp '{"name":"privi-ledger","type":"http","url":"https://privi-ledger-mcp-recovery.onrender.com/mcp"}'Built your own server? run.zero hosts MCP servers on European infrastructure.
Tools
136 tools
Read-only | Idempotent | Open world | ||
|---|---|---|---|---|
agent_proof_verifyVerify that two independently signed records agree on one authorized,
completed action. $0.01 USDC via x402 per successful verification.
Does not independently prove real-world execution or key ownership.
| Not declared | Yes | Not declared | No |
ai_act_checkWhat a customer's due-diligence or a regulator would flag today: prohibited practices, incomplete
Article 5 screens, obligations already in force without evidence (critical), obligations due within 180
days (medium), upcoming high-risk duties, and high-risk systems with no recent log. Requires the
organization API key. | Not declared | Yes | Not declared | No |
ai_act_exportExport your AI Act register as JSON to hand to customers, auditors or regulators, with its SHA-256
sealed on chain so anyone can prove it was not edited afterwards (check with ai_act_verify_export).
Requires the organization API key. | No | No | No | Yes |
ai_act_registerYour EU AI Act register: each AI system's current record, tier and applicable obligations.
Requires the organization API key. | Not declared | Yes | Not declared | No |
ai_act_system_saveAdd or update an AI system in your company's EU AI Act register. Privi screens it against the Article 5
bans, classifies it (prohibited / high-risk / transparency / general-purpose / minimal), and lists the
obligations that apply to your role with their dates. Every change is versioned and written to your
tamper-evident 'ai-act' log. Requires the organization API key. | No | No | Yes | No |
ai_act_verify_exportCheck that an AI Act register a supplier or partner sent you is exactly what they exported from Privi,
and return its on-chain seal. Free; no key needed. | Not declared | Yes | Not declared | No |
approval_cancelWithdraw an approval request (or revoke an approval not yet used). Your key cannot approve, only cancel. Requires the
organization API key. | Yes | No | Yes | No |
approval_listYour organization's approval requests, newest first. Requires the organization API key. | Not declared | Yes | Not declared | No |
approval_policy_setMake mandate_spend pause for a human on large payments: any payment over the threshold creates an approval request
that the mandate's principal must sign with their wallet before the agent can spend. Requires the organization API key. | No | No | No | No |
approval_requestAsk a human to approve (or deny) an action. Returns approve_url for them: they read the request and sign with their
wallet (free, no transaction). Your agent then calls approval_wait, or watches your live channel for approval.approved.
Only the named wallet can decide; your API key can only cancel. Requires the organization API key. | No | No | No | No |
approval_statusStatus of an approval request: pending, approved, denied, expired or cancelled, with the human's wallet signature
once they decide. Free. | Not declared | Yes | Not declared | No |
approval_waitBlock until the human decides (or timeout_s passes). Returns the current status; if still pending, call again.
Free. | Not declared | Yes | Not declared | No |
control_evidenceRecord that a control was performed, with the fingerprint of the evidence (screenshot, export,
report). Hash-chained, so evidence cannot be back-dated after the fact without it showing. Requires the
organization API key. | No | No | No | Yes |
control_saveAdd a recurring control (access review, backup restore test, vendor review) to your calendar.
Requires the organization API key. | No | No | Yes | No |
controls_dueYour control calendar: overdue, never done, due soon and current, each with its last evidence.
Requires the organization API key. | Not declared | Yes | Not declared | No |
fortress_keysPrivi's public signing keys: Ed25519 and ML-DSA-87 (NIST FIPS 204, CNSA 2.0 post-quantum). Pin these to
verify Privi signatures offline. Free. | Not declared | Yes | Not declared | No |
fortress_tpi_executeConsume a two-person authorization right before performing the action. Single use; refused unless authorized.
Requires the organization API key. | No | No | No | No |
fortress_tpi_listYour organization's two-person requests. Requires the organization API key. | Not declared | Yes | Not declared | No |
fortress_tpi_policyDefine a Two-Person Integrity policy: which officers can approve, and how many distinct approvals an action
needs. Requires the organization API key. | No | No | Yes | No |
fortress_tpi_requestAsk officers to authorize a sensitive action under a two-person policy. Returns approve_url for the officers;
each signs with their wallet. Do not act until fortress_tpi_status shows 'authorized', then call
fortress_tpi_execute. Requires the organization API key. | No | No | No | No |
fortress_tpi_statusStatus of a two-person request (pending, authorized, vetoed, expired, executed) and who approved. Free. | Not declared | Yes | Not declared | No |
gateway_createPut your MCP server behind Privi. You get an HTTP URL and a WebSocket URL that forward to it unchanged (x402
payments keep working) while Privi rate-limits callers, optionally requires a Privi Passport, meters every tool call
and writes each call to your tamper-evident log. The kill switch stops the gateway instantly. Upstream must be public
HTTPS. Requires the organization API key. | No | No | No | No |
gateway_deleteTurn a gateway off. Its URLs stop working at once; history stays in your log. Requires the organization API key. | Yes | No | Yes | No |
gateway_infoPublic description of a gateway: where it forwards, whether callers need a Passport, its rate limit and its call
counts. Free. | Not declared | Yes | Not declared | No |
gateway_listYour organization's gateways. Requires the organization API key. | Not declared | Yes | Not declared | No |
gateway_set_guardTurn Privi Guard on for every tool result that passes through your gateway: tag adds the verdict and a receipt
id in result._meta['privi/guard']; block also replaces injected results with an error before your agents see
them. Each result is one Guard check (free allowance, then credits). Requires the organization API key. | No | No | No | No |
gateway_statsCalls, errors, denials and x402 payment prompts per tool and per day for one of your gateways, plus your monthly quota.
Requires the organization API key. | Not declared | Yes | Not declared | No |
gov_ai_inventoryYour agency's AI use case inventory: the current version of each record. Requires the organization API key. | Not declared | Yes | Not declared | No |
gov_ai_inventory_checkFlags what an OMB M-25-21 review would flag before you submit: missing required fields, PII without a
Privacy Impact Assessment, and high-impact AI in pilot or deployment missing any minimum risk practice
(testing, impact assessment, independent review, monitoring, operator training, fail-safe, appeals, public
feedback) or without a recently active activity log as monitoring evidence. Requires the organization API key. | Not declared | Yes | Not declared | No |
gov_ai_inventory_exportMachine-readable CSV of your publicly releasable AI use cases (for publishing at agency.gov/ai), with its
SHA-256 sealed on chain (Base, until the Privi chain mainnet) so the published file can be proven unaltered. Requires the
organization API key. | No | No | No | Yes |
gov_ai_usecase_saveAdd or update an entry in your agency's AI use case inventory (OMB M-25-21). Every change creates a
new version and is written to your tamper-evident 'ai-inventory' log. Requires the organization API key. | No | No | Yes | No |
gov_ai_verify_exportCheck that a published AI inventory file is exactly what the agency exported from Privi Ledger, and
return its on-chain seal. Free; no key needed. | Not declared | Yes | Not declared | No |
gov_pqc_classifyClassify cryptographic algorithms as quantum-vulnerable (RSA, ECDH, ECDSA, EdDSA, DH, DSA, MQV),
post-quantum (ML-KEM, ML-DSA, SLH-DSA), hybrid, symmetric/hash, or unknown. Free. | Not declared | Yes | Not declared | No |
gov_pqc_exportExport the full cryptographic inventory (CBOM) and migration plan as one JSON document for OMB, the
CIO or auditors, with its SHA-256 sealed on chain (Base, until the Privi chain mainnet). Requires the organization API key. | No | No | No | Yes |
gov_pqc_inventoryCurrent cryptographic inventory of your systems. Requires the organization API key. | Not declared | Yes | Not declared | No |
gov_pqc_planPrioritized post-quantum migration plan: every quantum-vulnerable asset ranked (High Value Assets,
high-impact systems and long-lived sensitive data first; key establishment before signatures), with its
deadline (key establishment Dec 31 2030, signatures Dec 31 2031), recommended NIST replacement, progress
metrics, and findings (missed deadlines, TLS below 1.3, no target dates, unrecognized algorithms).
Requires the organization API key. | Not declared | Yes | Not declared | No |
gov_pqc_system_saveRecord the cryptographic inventory (CBOM) of one system for post-quantum migration. Every change creates
a new version and is written to the agency's tamper-evident 'pqc-inventory' log. Scanners and agents can
submit results directly. Requires the organization API key. | No | No | Yes | No |
gov_pqc_verify_exportCheck that a CBOM and migration-plan document is exactly what was exported from Privi Ledger and return
its on-chain seal. Free; no key needed. | Not declared | Yes | Not declared | No |
guard_balanceYour free checks left this month and your prepaid credits. Needs the organization key. | Not declared | Yes | Not declared | No |
guard_buy_creditsBuy prepaid Privi Guard checks in USDC on Base via x402. Credits never expire and are used after the free
monthly allowance. Needs the organization key. | No | No | No | Yes |
guard_checkCheck content for prompt injection (inbound) or leaked secrets and personal data (outbound) before an
agent acts on it or sends it. Returns allow / warn / block, the findings, a redacted copy for outbound
secrets, and an Ed25519-signed receipt anchored on-chain, which proves the check happened. Privi does
not store the text. Free for 1,000 checks a month with an organization key; otherwise 1 cent per check
in USDC via x402. | Not declared | Yes | Yes | No |
guard_check_manyCheck up to 50 texts in one call (for example every tool result in a step). Each item is billed as its
own check against your free allowance or credits and gets its own receipt. Needs an organization key. | Not declared | Yes | Yes | No |
guard_pricingWhat Privi Guard checks, what it costs, and how receipts work. Free. | Not declared | Yes | Not declared | No |
guard_receiptVerify a Privi Guard receipt: the signed body, signature validity and its Merkle proof into the anchored
transparency log. Free; anyone holding the id can verify it. | Not declared | Yes | Not declared | No |
incident_closeClose an incident and get a sealed post-incident report (timeline, deadlines met or missed, root
cause) whose SHA-256 is anchored on chain, ready for customers, insurers or regulators. Requires the
organization API key. | No | No | No | Yes |
incident_openOpen a security or operations incident. Privi starts the notification clocks for the rules you pick
(GDPR 72 hours, NIS2 24 hours / 72 hours / one month, SEC four business days, your contract's hours) and
writes the incident to your tamper-evident 'incidents' log. Requires the organization API key. | No | No | No | Yes |
incident_statusWhere an incident stands: each notification deadline, hours left or overdue, and the timeline. Omit
incident_id for a list of your incidents. Requires the organization API key. | Not declared | Yes | Not declared | No |
incident_updateAdd a timestamped update to an open incident, and optionally mark a notification as made. Each update
is hash-chained, so the timeline cannot be rewritten later. Requires the organization API key. | No | No | No | Yes |
kya_bind_walletStep 2: bind the wallet to your organization's Privi Passport so its transactions pass KYA checks. With a
wallet signature the binding is *proven*; without one it is only *declared* (most checkers require proven).
Requires the organization API key. | No | No | Yes | No |
kya_challengeStep 1 of binding a wallet to your Privi Passport: get a message to sign with that wallet (EIP-191
personal_sign). Valid 30 minutes. Requires the organization API key. | No | No | No | No |
kya_checkKnow-Your-Agent for blockchains: is this wallet operated by an audited AI agent, and how trustworthy is it
right now? Resolves the address to its organization and live Privi Passport and returns allow/deny with
reasons, plus a Privi-signed attestation (valid 60 min) you can cache. For chains, DeFi protocols, exchanges,
stablecoin issuers and x402 facilitators. Free; send your organization key to log the check as evidence. | Not declared | Yes | Not declared | No |
kya_unbind_walletRemove a wallet from your Passport (rotated or compromised key). KYA checks deny it immediately. Requires the organization API key. | Yes | No | Yes | No |
kya_walletsWallets bound to your organization and how each was proven. Requires the organization API key. | Not declared | Yes | Not declared | No |
ledger_audit_streamCheck whether an agent's action log is intact: entry count, time span, action and failure
counts, head hash, and where tampering broke the chain if it did. Does not reveal the actions
themselves. Paid per call via x402. | Not declared | Yes | Not declared | No |
ledger_check_receiptConfirm that an action receipt exists in the ledger and when it was recorded. Reveals no action contents. Free. | Not declared | Yes | Not declared | No |
ledger_compliance_reportAudit-ready report of your AI agents' activity for a period (SOC 2 evidence, security
questionnaires, AI-regulation record keeping): actions by type, failures, human approvals,
log integrity, on-chain status, and findings. The report's hash is anchored on the Privi
blockchain so it cannot be edited later without detection. Requires the organization API key. | No | No | No | Yes |
ledger_consistency_proofProof that Privi's log only grew between two signed tree heads: nothing recorded earlier was edited, removed
or reordered (RFC 9162). Free. | Not declared | Yes | Not declared | No |
ledger_evidence_bundleExport a self-contained evidence package for auditors, courts or air-gapped systems: every entry, the hash
chain, an RFC 9162 inclusion proof, the signed tree head, on-chain checkpoint and Privi's keys, signed with
Ed25519 and ML-DSA-87. Verify offline with verify_bundle.py (GET /tools/verify_bundle.py). Requires the
organization API key. | Not declared | Yes | Not declared | No |
ledger_handshake_acceptAccept a handshake addressed to your organization: records the same terms in your log, confirms
it in the other company's log, and seals the matched pair on chain (Base). Requires your
organization API key. Read the terms first with ledger_handshake_inbox. | No | No | No | No |
ledger_handshake_inboxHandshakes sent to and from your organization, newest first, with their terms and status.
Requires your organization API key. | Not declared | Yes | Not declared | No |
ledger_handshake_offerStart a Privi Handshake: a two-sided record of a dealing with another company's agent
(payment, data transfer, delivery, agreement). Recorded in your log now; when the other company
accepts, both logs hold matching entries and the pair is sealed on chain (Base). Requires your
organization API key; the other company must also use Privi Ledger. | No | No | No | No |
ledger_handshake_rejectReject a handshake addressed to your organization; the other company's log records the rejection.
Requires your organization API key. | No | No | No | No |
ledger_handshake_verifyPublic check of a handshake: both companies, status, whether both matching log entries still exist,
and the on-chain seal. Never reveals the terms. Free; useful for disputes and audits. | Not declared | Yes | Not declared | No |
ledger_inclusion_proofMerkle audit path proving an entry is in Privi's append-only transparency log (RFC 9162). Verifiable offline
against the signed tree head. Reveals no entry contents. Free. | Not declared | Yes | Not declared | No |
ledger_list_streamsList your organization's streams with entry counts. Requires the organization API key. | Not declared | Yes | Not declared | No |
ledger_planYour plan, entries used this month, the limit, and when a Pro plan renews. Requires your organization API key. | Not declared | Yes | Not declared | No |
ledger_pricingList Privi Ledger tools, what each costs, and how to get an organization key. | Not declared | Yes | Not declared | No |
ledger_read_streamRead your organization's entries in a stream, oldest first, with an integrity check of the
whole stream. Requires the organization API key. | Not declared | Yes | Not declared | No |
ledger_record_actionAppend an action to the organization's tamper-evident log. Returns the entry with its
entry_hash receipt. Requires the organization API key. | No | No | No | Not declared |
ledger_report_pdfA finished PDF of a sealed compliance report, for auditors and customers. Returned as base64
(pdf_base64) and as an embedded PDF resource; also downloadable at /reports/<report_id>.pdf with the
organization key. Requires the organization API key. | Not declared | Yes | Not declared | No |
ledger_signupCreate a Privi Ledger organization on the free plan and get its API key (shown once; store it).
Free plan: up to the monthly entry limit, all tools included. Upgrade any time with
ledger_upgrade_pro. No key needed to sign up. | No | No | No | No |
ledger_tree_headThe latest signed tree head of Privi's transparency log: an RFC 9162 Merkle root over every entry ever
recorded, signed with Ed25519 and ML-DSA-87, and periodically anchored on chain (Base). Free. | Not declared | Yes | Not declared | No |
ledger_upgrade_proBuy 30 days of Privi Ledger Pro (unlimited entries) for your organization, paid in USDC on Base
via x402. Each call adds 30 days. Requires your organization API key. | No | No | No | Yes |
ledger_verify_reportCheck that a compliance report is unaltered: recomputes its hash, confirms Privi Ledger issued it,
and checks the anchor on chain (Base, until the Privi chain mainnet). Free; no key needed. | Not declared | Yes | Not declared | No |
live_infoReal-time Privi: WebSocket and server-sent-event streams (trust changes, your own audit tail, approvals), a
kill switch, human approvals, a metered MCP gateway and paid agent-to-agent rooms. Returns the endpoints,
channels, frames and what each plan gets. Free; no key needed. | Not declared | Yes | Not declared | No |
live_killStop an agent at once: mandate_spend, your gateways and your room messages are refused until live_resume.
Takes effect on the next call, and is pushed to your live channel immediately. Audit logging keeps working.
Requires the organization API key. | Yes | No | Yes | No |
live_resumeLift a kill switch set with live_kill. Requires the organization API key. | Yes | No | Yes | No |
live_statusYour kill switches, live-approval thresholds, pending approvals, gateways, rooms and usage this month. Requires the
organization API key. | Not declared | Yes | Not declared | No |
mandate_checkFor merchants, payment facilitators and counterparties: did a human authorize this AI agent to pay you this
amount? Verifies the human's wallet signature, status, expiry, per-payment cap, remaining budget and payee list,
and returns allow/deny with reasons plus a Privi-signed attestation. Free; no key needed. | Not declared | Yes | Not declared | No |
mandate_createDraft a Privi Mandate: the human's signed permission for your agent to spend, with a budget, per-payment cap,
allowed payees and expiry. Returns sign_url: send it to the human, who reads the plain-English terms and signs
once with their wallet (free, no transaction). Nothing can be spent until they sign. Requires the organization API key. | No | No | No | No |
mandate_getPublic view of a mandate: terms, status, the human's signature, spent and remaining budget, and recent spends. Free. | Not declared | Yes | Not declared | No |
mandate_listYour organization's mandates with status and remaining budget. Requires the organization API key. | Not declared | Yes | Not declared | No |
mandate_revokeStop an agent from spending under a mandate (the human can also revoke from the sign_url page). Requires the
organization API key. | Yes | No | Yes | No |
mandate_spendCall before each payment: checks the mandate and, if allowed, deducts the amount from the budget and records the
payment in the agent's tamper-evident log. Refused payments are logged as blocked. Refused at once if the kill switch is
on. Over the organization's live-approval threshold it returns approval_required with an approve_url for the human; call
again with approval_id once they approve. Requires the organization API key. | No | No | No | No |
mcp_server_checkFree safety check for any remote MCP server, before an agent connects to it or after it was approved. Privi
reads the server's tool list (it never calls a tool) and returns a verdict: ok, caution, danger (tool poisoning:
hidden instructions, concealment from the user, requests for keys or private files, tool shadowing, invisible
characters), changed (tools differ from expected_tools_hash), unverified (tools behind auth) or unreachable. Also
returns the tools_hash to pin, a grade A-F and a link to the server's public history. Every first observation and
change is recorded in Privi's on-chain-anchored transparency log. No key needed. | Not declared | Yes | Not declared | Yes |
passport_gateOne-call allow/deny decision before transacting with another AI agent: verifies its Privi Passport and
applies your minimums, returning the reasons. If you send your organization API key the decision is
recorded in your own tamper-evident log as due-diligence evidence. Free. | Not declared | Yes | Not declared | No |
passport_issueIssue a Privi Passport: a signed, on-chain-anchored trust credential for your agent or organization,
scored 0-1000 (grade A-E) from verified history, integrity, anchoring, reliability, human oversight,
compliance reports and confirmed handshakes. Show it to counterparties; they verify it free with
passport_verify / passport_gate. Valid 30 days. Free on Pro/enterprise; free-plan organizations pay
per passport via x402. Requires the organization API key. | No | No | No | Yes |
passport_listYour organization's issued passports with score, grade, expiry and revocation. Requires the organization API key. | Not declared | Yes | Not declared | No |
passport_revokeRevoke one of your passports (e.g. an agent was retired or compromised). Verifiers see it immediately.
Requires the organization API key. | Yes | No | Yes | No |
passport_verifyCheck an AI agent's Privi Passport before trusting it: Privi signature, content unaltered, not expired or
revoked, anchor on chain (Base), and a live re-score of the agent right now (so tampering after issue
is caught). Free; no key needed. | Not declared | Yes | Not declared | No |
policy_acknowledgeRecord that a person read and accepted the current version of a policy. The fingerprint must match
the current version, so nobody signs off on an old document. Requires the organization API key. | No | No | No | Yes |
policy_publishPublish a policy (or a new version of one) by its document fingerprint. People then acknowledge that
exact version. Requires the organization API key. | No | No | No | Yes |
policy_statusWho acknowledged the current version of a policy and who is still missing. This is the evidence
auditors ask for. Requires the organization API key. | Not declared | Yes | Not declared | No |
privi_payment_optionsSee existing USDC/x402 service billing and separately gated valueless PRVI_TEST development mode. | Not declared | Yes | Not declared | Not declared |
privi_test_payment_quoteOff-chain PRVI_TEST quote. Requires organization key and explicit test mode. Never takes money. | No | No | Not declared | No |
privi_test_payment_simulateConsume a test quote once. Receipt is NOT payment, on-chain proof or entitlement. | No | No | Not declared | No |
privi_token_marketPRIVI on Base: price, how much PRIVI and USDC the Privi swap desk holds (so whether a swap can fill),
any Uniswap v3 / Aerodrome pools, and optionally a swap quote. Every paid Privi tool also accepts PRIVI. Free. | Not declared | Yes | Not declared | Yes |
qledger_blockOne quantum-sealed block with its signatures, settlement on chain and a validity check. Free. | Not declared | Yes | Not declared | No |
qledger_entry_proofProve an entry (by its receipt hash) is sealed in a quantum block: the block, its post-quantum signatures,
its on-chain settlement and the Merkle inclusion proof. Reveals no entry contents. Free. | Not declared | Yes | Not declared | No |
qledger_sealSeal your newest entries into a quantum block now instead of waiting for the next scheduled block (every
few minutes). Does nothing if no entries are waiting. Requires the organization API key. | No | No | Yes | No |
qledger_statusPrivi Quantum Ledger: latest quantum-sealed block (SHA3-512, ML-DSA-87 + Ed25519), entries waiting for the
next block, the Privi Foundation chain it is fused with, and signing keys. Free. | Not declared | Yes | Not declared | No |
qledger_verify_chainVerify the whole Quantum Ledger: SHA3-512 block hashes, hash links, both signatures on every block, and for
recent blocks the log roots, entry roots and RFC 9162 consistency proofs. Free; anyone can run it. | Not declared | Yes | Not declared | No |
release_checkCheck that a file you downloaded is part of a release its maker sealed with Privi, and see which
company, product and version it belongs to. No organization key needed. | Not declared | Yes | Not declared | No |
release_sealSeal a software release: its file fingerprints, source commit and SBOM fingerprint, anchored on chain.
Customers check any download with release_check. A sealed release cannot be changed. Requires the
organization API key. | No | No | No | Yes |
room_closeClose a room and seal its transcript: the hash is signed (Ed25519 + ML-DSA-87), anchored on chain (Base) and written
to both organizations' logs. Either party can close. Requires the organization API key. | Yes | No | Yes | No |
room_infoPublic facts about a room: parties, price, message count, head hash and its seal once closed. No message text. Free. | Not declared | Yes | Not declared | No |
room_listRooms your organization owns or joined. Requires the organization API key. | Not declared | Yes | Not declared | No |
room_openOpen a live, hash-chained conversation room for two organizations' agents. Both connect over WebSocket
(ws_url), authenticate with their API keys and talk in real time; closing the room seals the transcript on the Privi
chain. Optionally charge per message, paid under the guest's human-signed Mandate. Requires the organization API key. | No | No | No | No |
room_transcriptEvery message in a room you are part of, with the chain check. Requires the organization API key. | Not declared | Yes | Not declared | No |
room_verifyCheck a closed room's seal (signature, on-chain anchor) and, if you pass the transcript, that it is complete and
unaltered. Free; no key needed. | Not declared | Yes | Not declared | No |
scan_changesThe latest MCP servers whose tool definitions changed after they were first observed (possible rug pulls),
newest first. Subscribe to the Live channel 'scan' for these as they happen. Free. | Not declared | Yes | Not declared | No |
scan_claim_startStart proving you operate an MCP server listed in Privi Scan. Returns a token to publish at
https://<your host>/.well-known/privi-scan.txt. Verified owners get an owner-verified badge, unlimited rescans,
change alerts and control over the listing. Needs the org key (create_org is free). | No | No | Yes | No |
scan_claim_verifyCheck the token at /.well-known/privi-scan.txt and mark your organization as the verified owner. | No | No | Yes | No |
scan_owner_listingVerified owners only: hide the server from the directory (opt-out) or show it again. History already in the
transparency log cannot be removed. | No | No | Yes | No |
scan_rescanProbe the server immediately instead of waiting for the next crawl (every ~6 hours). For the verified owner
or Pro organizations. | Not declared | Yes | Not declared | Yes |
scan_searchSearch Privi Scan, the public directory of remote MCP servers from the official MCP Registry, each with a
safety grade, verdict, tool count and change history. Use it to find a trustworthy server for a job. Free. | Not declared | Yes | Not declared | No |
scan_serverFull report for one MCP server: every tool definition with its hash, all findings with evidence, the change
history (what was added, removed or modified, and when) and the transparency-log proof. Free. | Not declared | Yes | Not declared | No |
scan_statsHow many MCP servers Privi Scan tracks, by status and grade, tools indexed, changes recorded and how to verify
the evidence. Free. | Not declared | Yes | Not declared | No |
scan_unwatchRemove a server from your watchlist. Needs the org key. | No | No | Yes | No |
scan_watchPin the server's current tools as approved and get a real-time event on your private Live 'org' channel the
moment they change, a risk appears or the server goes down. Free plan: 3 servers; Pro: 500. Needs the org key. | No | No | Yes | No |
scan_watchlistYour watched servers with their pinned tools_hash and whether each has drifted since you pinned it. Needs the
org key. | Not declared | Yes | Not declared | No |
seal_contentSeal content your company publishes (documents, images, video, press releases, invoices, AI output)
with who made it and whether AI was involved. Each seal is anchored on chain; anyone can check a file
for free at the returned verify_url or with seal_verify. Counts toward your plan's monthly entries.
Requires the organization API key. | No | No | No | Yes |
seal_listYour most recent content seals. Requires the organization API key. | Not declared | Yes | Not declared | No |
seal_revokeWithdraw one of your seals (e.g. sealed by mistake). Checks then show it as revoked.
Requires the organization API key. | Yes | No | Yes | No |
seal_verifyIs this exact file or text sealed, by whom, since when, and did they declare AI involvement? Any
change to the content (one pixel, one character) means no match. Free; no key needed. | Not declared | Yes | Not declared | No |
supplier_cert_revokeRevoke a certificate you issued (as the buyer). Verification shows it as revoked at once.
Requires the organization API key. | Yes | No | Yes | No |
supplier_cert_verifyCheck a Privi supplier certificate: untampered, not revoked, not expired, which buyer approved which
supplier, and (optionally) whether a document is one it covers. Free; no key needed. | Not declared | Yes | Not declared | No |
supplier_certsCertificates you issued (as buyer) or hold (as supplier). Requires the organization API key. | Not declared | Yes | Not declared | No |
supplier_proof_decideApprove a supplier's proof (issues a certificate naming both companies and the evidence fingerprints,
sealed on chain, with a public verify page and badge) or reject it with a reason. Requires the
organization API key. | No | No | No | Yes |
supplier_proof_inboxSupplier submissions waiting for your decision (as the buyer). Requires the organization API key. | Not declared | Yes | Not declared | No |
supplier_proof_submitAnswer a buyer's supplier requirement with fingerprints of your evidence documents. The buyer reviews
and, if approved, Privi issues a certificate sealed on chain. Requires your organization API key
(sign up free with ledger_signup). | No | No | No | Yes |
supplier_requirement_createPublish a requirement your suppliers must meet. Share the returned invite_url with them: they answer it
from their own Privi organization (free sign-up) and you approve or reject in supplier_proof_inbox.
Requires the organization API key. | No | No | No | Yes |
supplier_requirement_getSee what a buyer requires of its suppliers. Free; no key needed. | Not declared | Yes | Not declared | No |
trust_eventsThe latest trust-change events: passports issued, revoked or re-scored, wallets bound or unbound, mandates activated
or revoked, transparency-log heads anchored. Without a Pro key the feed is delayed (see live_info); use the WebSocket or
SSE stream for real time. Free. | Not declared | Yes | Not declared | No |
trust_page_publishPublish (or replace) your company's public trust page: your claims with evidence fingerprints, plus the
live health of your tamper-evident logs. Share the link in sales emails and security questionnaires.
Requires the organization API key. | No | No | Yes | No |
trust_page_viewRead any company's Privi trust page: its claims, evidence fingerprints and whether its logs are intact
right now. No organization key needed. | Not declared | Yes | Not declared | No |
Details
- Registry status
- Active
- Published
- Nov 14, 2026
- Updated
- Nov 14, 2026
- Categories (suggested)
- SecurityFinance and paymentsInvoicing and accountingSuggested categories are assigned automatically from the registry text and may be wrong. Verified operators can correct them.
- GDPR
- Not declared