# veritasacta-verify

An MCP server that verifies Ed25519 signatures on Acta receipts offline without external network calls. Useful for validating cryptographic audit records right inside the agent terminal.

- MCP server · `type=mcp` · Claude Code, Codex, Cursor, GitHub Copilot, Windsurf (Devin Desktop), Cline, Zed, Gemini CLI · ★ 5
- Author: VeritasActa
- License: Apache-2.0 · policy=link-only · description only; the file stays with the author
- Source: https://github.com/VeritasActa/verify
- Updated: 2026-10-24
- HTML: https://affpapa.org/en/nevibecode/mcp/veritasacta-verify

## What it does

This MCP server gives your coding assistant local validation capabilities for Acta receipts and audit bundles adhering to draft-farley-acta-signed-receipts-03. It runs entirely on your local machine. You do not need accounts, sign-in tokens, network daemons, or proxies to evaluate files. The underlying parser rejects duplicate JSON keys upfront and accepts files up to 50 MiB with an object depth limit of 128.

Signature checks require an external 64-character hexadecimal public key supplied through a separate trusted channel. The verifier deliberately refuses to evaluate a receipt against public keys embedded within the record itself, returning a `key_mismatch` error instead. Because it halts on self-signed payload keys by default, validating untrusted files without an explicit external pin is impossible.

## Requirements
- Needs: Node.js (commands run via npx)

## Install

### Claude Code (native platform)

**Platform CLI**
```bash
claude mcp add veritasacta-verify -- npx -y @veritasacta/verify
```

### Codex

**Platform CLI**
```bash
codex mcp add veritasacta-verify -- npx -y @veritasacta/verify
```

### Cursor

**Config file**
File `.cursor/mcp.json`:
```json
{
    "mcpServers": {
        "veritasacta-verify": {
            "command": "npx",
            "args": [
                "-y",
                "@veritasacta/verify"
            ]
        }
    }
}
```

### GitHub Copilot

**Config file**
File `.vscode/mcp.json`:
```json
{
    "servers": {
        "veritasacta-verify": {
            "type": "stdio",
            "command": "npx",
            "args": [
                "-y",
                "@veritasacta/verify"
            ]
        }
    }
}
```

### Gemini CLI

**Platform CLI**
```bash
gemini mcp add veritasacta-verify npx -y @veritasacta/verify
```

## When to use it
- Verify Ed25519 cryptographic signatures on audit receipts
- Check Acta record integrity offline without network requests
- Flag issuer identifier mismatches against signing keys
- Parse audit files up to 50 MiB with strict JSON duplicate detection

## Example prompts
- Verify the signature in `receipt.json` using the public key `ebb8cf3efc78717c50e7c438c0ad5498f8fa4e09607fea1e030ac129b5965225`.
- Check whether the audit bundle `audit.json` passes validation and report any non-zero exit code.
- Inspect `run-manifest.json` against the Acta specification without contacting remote services.

## Similar
- [receipt-verifier](https://affpapa.org/en/nevibecode/agents/receipt-verifier.md) — subagent · ★ 41947
- [PEAC Protocol: Signed interaction receipts](https://affpapa.org/en/nevibecode/mcp/peac-protocol-signed-interaction-receipts.md) — MCP server · ★ 14
- [agent-decision-receipts](https://affpapa.org/en/nevibecode/skills/agent-decision-receipts.md) — skill · 44 installs
- [audit-chain](https://affpapa.org/en/nevibecode/commands/audit-chain.md) — command · ★ 41947
- [Fabric Verify](https://affpapa.org/en/nevibecode/mcp/fabric-verify.md) — MCP server
- [Audifact](https://affpapa.org/en/nevibecode/mcp/audifact.md) — MCP server

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md