Verify MCP server
{
"mcpServers": {
"keyhalve-verify": {
"command": "npx",
"args": [
"-y",
"@keyhalve/verify-mcp@latest"
],
"env": {
"CLOUDFLARE_API_TOKEN": "<cloudflare_api_token>"
}
}
}
}{
"mcpServers": {
"keyhalve-verify": {
"command": "npx",
"args": [
"-y",
"@keyhalve/verify-mcp@latest"
],
"env": {
"CLOUDFLARE_API_TOKEN": "<cloudflare_api_token>"
}
}
}
}{
"mcpServers": {
"keyhalve-verify": {
"command": "npx",
"args": [
"-y",
"@keyhalve/verify-mcp@latest"
],
"env": {
"CLOUDFLARE_API_TOKEN": "<cloudflare_api_token>"
}
}
}
}{
"servers": {
"keyhalve-verify": {
"command": "npx",
"args": [
"-y",
"@keyhalve/verify-mcp@latest"
],
"env": {
"CLOUDFLARE_API_TOKEN": "${input:cloudflare_api_token}"
}
}
},
"inputs": [
{
"id": "cloudflare_api_token",
"type": "promptString",
"description": "Cloudflare api token",
"password": true
}
]
}{
"mcpServers": {
"keyhalve-verify": {
"command": "npx",
"args": [
"-y",
"@keyhalve/verify-mcp@latest"
],
"env": {
"CLOUDFLARE_API_TOKEN": "<cloudflare_api_token>"
}
}
}
}file .mcp.json (in your project root)file claude_desktop_config.jsonfile ~/.cursor/mcp.jsonfile .vscode/mcp.jsonfile ~/.codeium/windsurf/mcp_config.jsoninstall npx -y @keyhalve/verify-mcpversion 0.1.0
What it does
This MCP server verifies KeyHalve-sealed documents without receiving decryption keys. It checks document status, ciphertext integrity, rail attestation, and validity windows. Anyone can use it free with no account.
- Check whether a KeyHalve-sealed document is active or revoked on the issuing platform.
- Verify that the ciphertext has not been tampered with by comparing its SHA-256 hash to the commitment recorded at issuance.
- Confirm the document's validity window and that the rail attestation signature is authentic.
Tools this server exposes
| Tool | Does |
|---|---|
| keyhalve_verify | Verify a KeyHalve-sealed document by checking status, ciphertext integrity, rail attestation, and time lock. |
| keyhalve_status | Check whether a sealed document is active or revoked on the issuing platform. |
| keyhalve_explain | Explain the verification result and which checks passed or failed. |
Before you enable it
An MCP server runs with whatever access you give it. Start with a development account rather than production, and check which tools the server exposes before you let an agent call them unattended.