@trustbench/mcp

Native MCP server for TrustBench — a non-custodial routing and audit layer for x402 agent payments.

Adds three read-only tools to any MCP-capable host:

| Tool | What it does | |---|---| | get_rankings | Scored x402 provider list by capability. No API key. | | get_receipt | Fetch any TrustBench receipt by ID (rcpt_… / rrcpt_…). No API key. | | verify_receipt | Confirm Ed25519 signature + on-chain status. Two modes: lookup by ID, or offline verification of a receipt JSON. No API key. |

Works in Claude Desktop, Claude Cowork, Grok (xAI Connectors), Kimi Code CLI, Cherry Studio, Cursor, and any MCP-compatible host.

Setup

Add to your host's MCP config file (e.g. claude_desktop_config.json for Claude Desktop, ~/.kimi/mcp.json for Kimi):

{
  "mcpServers": {
    "trustbench": {
      "command": "npx",
      "args": ["-y", "@trustbench/mcp"]
    }
  }
}

Restart the host app. The three tools above become available immediately — no API key, no account required.

Environment variables

| Variable | Default | Description | |---|---|---| | TRUSTBENCH_BASE_URL | https://trustbench.io | Override the API base (useful for local dev). |

What the tools return

get_rankings — JSON array of scored providers for the requested capability. Capabilities: search, inference, data, media, infra. Scores are derived from HEAD-probe liveness checks (3 samples from one host). See trustbench.io/methodology for the full scoring formula.

get_receipt — Full signed receipt envelope. Receipts are immutable after issuance. Phase 3 IDs start with rcpt_, Phase 4 routing receipts start with rrcpt_.

verify_receipt — Two modes (provide exactly one input):

• Lookup mode (receipt_id) — fetches the receipt from trustbench.io and re-runs Ed25519 + on-chain verification. Useful when the agent only has an ID.
• Offline mode (receipt_json) — verifies a full {receipt, signature} envelope an agent received from a third party against the published public key, without trusting the database. The third-party-verifier path.

Both modes return a JSON summary with signature_valid (boolean), on_chain_verified (boolean where applicable), signature_alg (ed25519), and pubkey_url. For zero-network verification with no round-trip to TrustBench, use the @trustbench/verify-receipt npm package instead.

Routing tools (v1.5)

route_quote and route_settle (the paid routing flow) require a tb_live_… API key and ship in the next release. Request access by DM'ing @TrustBench on X.

Technical details

• Transport: stdio (JSON-RPC 2.0) — the MCP standard
• No external dependencies beyond Node.js built-ins
• Node ≥ 18 required (uses native fetch and readline)
• Source: github.com/lithvall/TrustBench

Related packages

• @trustbench/verify-receipt — standalone offline Ed25519 receipt verifier