NestDaddy

Bernstein Mcp

io.github.sipyourdrink-ltd/bernstein-mcp · v0.2.0

Verifies Bernstein run receipts and hash chains; lists the shipped presets and adapters. Read-only.

Connect Remote server

Terminal
claude mcp add --transport http bernstein-mcp https://mcp.bernstein.run/mcp
~/.cursor/mcp.json
{
  "mcpServers": {
    "bernstein-mcp": {
      "url": "https://mcp.bernstein.run/mcp"
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "bernstein-mcp": {
      "type": "http",
      "url": "https://mcp.bernstein.run/mcp"
    }
  }
}
Claude Desktop
Settings > Connectors > Add custom connector
URL: https://mcp.bernstein.run/mcp

Tools 12 found in our last check

  • server_info

    Identity, version, and request limits for this MCP server.

  • verify_receipt

    Recompute every hash chain a bernstein run receipt embeds (journal, lineage spine, optional audit range), rebuild the signed subject from the recomputed heads, and check the Ed25519 signature with the key the receipt carries. Needs no secret and reads nothing but the receipt. Re…

  • explain_receipt

    Verify a run receipt and narrate the result in plain language: what the run recorded, which chains recomputed, where the first divergence is, and what an auditor can and cannot conclude without the producing install's keys.

  • verify_chain

    Walk bernstein chain rows and recompute every link: journal rows (event_hash), lineage spine entries (entry_hash) or audit events (prev_hmac linkage). The row kind is detected from the fields, or pass `kind` explicitly. Reports the first divergent index. Pass `entries` as the fi…

  • verify_trace_record

    TRACE v0.2 conformance checks on one Trust Record, stateless, no account: schema (vendored trace-claim.json), profile, subject URI, software-only runtime rule, policy digest, public-only confirmation key, the embedded signature (EdDSA, ES256 or ES384 with the key in cnf.jwk), ap…

  • trace_verify_record

    Verify a TRACE v0.2 Ed25519 Trust Record locally with optional caller public key and freshness controls. Nothing is fetched. Embedded keys establish internal consistency only; revocation is not affirmed.

  • verify_agent_manifest

    Agent Manifest v0.2 conformance checks on one manifest, stateless, no account: schema (vendored agent-manifest.schema.json), profile context, version, canonicalization, COSE envelope signature (Ed25519, key identified by kid in the protected header; ML-DSA-65 is reported unverif…

  • verify_delegation_chain

    TRACE v0.2 delegation-chain conformance, stateless, no account: index every Trust Record by the RFC 8785 digest of its complete form, start at the leaf, follow delegation.parent_record_hash to the root, and check each hop's signature, the root key against `trusted_root_keys`, th…

  • explain_trace_mapping

    How a bernstein run maps onto a TRACE v0.2 Trust Record: one row per claim with the journal field it is sourced from and the rule that derives it. Pass a run receipt to fill in the rows its embedded journal can answer (subject, iat, model, data_class, policy digest, tool transcr…

  • list_presets

    The compliance presets bernstein v3.19.2 ships, with the switches each one turns on.

  • get_preset

    Every field of one compliance preset as bernstein v3.19.2 resolves it.

  • list_adapters

    The agent adapters bundled with bernstein v3.19.2: adapter name, the binary it drives, the module that implements it.

Details

Endpointhttps://mcp.bernstein.run/mcp (Streamable HTTP)
First published19 Sep 2026
Last updated19 Sep 2026
Registry nameio.github.sipyourdrink-ltd/bernstein-mcp

More ai and media servers See all

Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.