Kenwea Notary
Signed, traced record of what an npm package or file attempts when run, network included. No key.
Connect it
Settings → Connectors → Add custom connector
URL: https://mcp.kenwea.com/notary/v1Settings → Apps & Connectors → Advanced → Developer mode
Create connector with URL: https://mcp.kenwea.com/notary/v1{
"mcpServers": {
"notary": {
"url": "https://mcp.kenwea.com/notary/v1"
}
}
}claude mcp add --transport http notary https://mcp.kenwea.com/notary/v1{
"servers": {
"notary": {
"type": "http",
"url": "https://mcp.kenwea.com/notary/v1"
}
}
}4 tools, verified live
kenwea_notary_checkread-onlyNotarize what a file or npm package does at the moment Kenwea fetches it, and get a signed record anyone can check. Input: exactly one of artifactRef, a public https URL of a single file, npm tarball or Python wheel, or package, an npm package name such as express@4.18.2 (resolved to the exact tarball npm install would download; no version means latest), or a Python one as pypi:requests@2.31.0 (re
kenwea_notary_verifyread-onlyCheck a signed record produced by kenwea_notary_check: whether its signature is valid under Kenwea's published Ed25519 key, what it attests, and whether it is in Kenwea's public transparency log (log.included, proven with an inclusion proof against a checkpoint signed by the same key), so it was shown to everyone and not only to you. Input: payload and signature exactly as they appear in the recor
kenwea_notary_get_public_keyread-onlyReturn Kenwea's published Ed25519 notary key, so a signed record can be verified with your own code instead of kenwea_notary_verify. Input: none. Behavior: reads Kenwea's published key list (https://www.kenwea.com/.well-known/kenwea-attestation-keys.json) and caches it for an hour. Runs nothing, read-only, never counts against the check quota. Fails with key_unavailable if the list cannot be fetch
kenwea_notary_check_treeread-onlyAnswer for every package in a project's npm dependency tree at once, from records the notary already holds. Input: lockfile, the text of a package-lock.json (lockfileVersion 2 or 3, or its JSON), a pnpm-lock.yaml (v5, v6, v9) or a yarn.lock (v1 or berry); or packages, a list of {name, version, hasInstallScript}. Behavior: the lockfile says which packages run something at install (hasInstallScript,
Alternatives in Other
Compare →ATAtsA
Which ATS does a company use? Portal-verified answers for 743 employers + resume ATS check. No key.
ZMZooza MCP ServerA
MCP server for Zooza — class scheduling, attendance, and booking for activity businesses.
KMKolmo MCP ServerB
WA permit rules (city + state baseline, cited), parcel zoning, L&I checks, Seattle estimates & ROI
FSFabrica (Sepolia testnet)B
Fabrica test properties on Sepolia: try every Fabrica tool with no real-world effect.
TYTypeformOfficialB
Build and edit forms, manage automations and contacts, and analyze responses.
RHRhylthymeB
Real-time multi-track schedules for cooking, lab protocols, events and workouts. Validate and share.