The Proven MCP Standard PM-1

1. It answers

An HTTPS endpoint that completes MCP initialize and tools/list (protocol 2025-06-18, plain JSON or event stream), within 12 seconds, with a valid certificate, no redirects, on a public address.

2. It is clean

No high findings in anything the AI reads: tool names, titles, descriptions, every string in the schemas, and the server's instructions. High findings are invisible characters; instructions to ignore rules, hide things from the user, act first, read secret files, send data elsewhere, reveal the conversation, change identity or take over other tools; and anything that looks like a live key. Medium and low findings lower the score but don't block it. Every finding is published with the exact words.

3. It is pinned

The PM-1 fingerprint of the tool list is sealed into sebbi.pro's chain, which is anchored in Bitcoin. Each tool also has its own fingerprint, so a change shows exactly which tool moved.

import hashlib, json

KEEP = ("title", "description", "inputSchema", "outputSchema", "annotations")

def pm1_fingerprint(tools):            # tools = the "tools" list from tools/list
    clean = []
    for t in tools:
        c = {"name": str(t.get("name") or "")}
        for k in KEEP:
            if k in t and t[k] not in (None, "", {}):
                c[k] = t[k]
        clean.append(c)
    clean.sort(key=lambda c: c["name"])
    text = json.dumps(clean, sort_keys=True, separators=(",", ":"), ensure_ascii=False)
    return hashlib.sha256(text.encode("utf-8")).hexdigest()

# Then ask sebbi:  POST https://sebbi.pro/x/mcpproof/verify
#   {"url": "<server address>", "fingerprint": pm1_fingerprint(tools)}
# MATCH = these are the tools that passed.  MISMATCH = don't trust them.

4. It is watched

Re-tested every 24 hours. A different fingerprint turns the listing CHANGED at once. It is Proven again only when the owner approves the change with their owner key and the new tools pass. Three failed checks in a row mark it DOWN. Every event is sealed and stays on the public record.

5. Anyone can check

Any client computes the fingerprint above from what it actually receives and asks https://sebbi.pro/x/mcpproof/verify. The full registry is at https://sebbi.pro/proven/registry.json.