DP

Databutler Provenance

io.github.physics-star-cat/databutler-provenance

Live trust signals for domains & packages: age, registrar, typosquat resemblance.

Yes, your AI can use this right now.Answered a live MCP handshake in 440 ms with no sign-in needed and exposes 2 tools.

Connect it

Settings → Connectors → Add custom connector
URL: https://databutler.dev/api/mcp/provenance

2 tools, verified live

Pulled straight from the server with tools/list on 2026-10-17.
domain_provenanceread-only

Who runs this domain? Live RDAP lookup: registration date and age, registrar, nameservers, status, whether the registrant is redacted, plus a typosquat check (edit-distance / brand-substring) against high-value brands. A very recently registered domain resembling a bank or big brand is a classic phishing signal — but report it as a signal, not a conclusion.

package_provenanceread-only

Who publishes this package, and is it a typosquat? Live npm or PyPI lookup: first-publish date and age, release count, latest version, maintainers/author, linked repo, plus a typosquat check against popular package names. Use when an agent is about to install or recommend an unfamiliar dependency.

Alternatives in Developer Tools

Compare →
Try “Notion”, “Stripe”, “create invoice”, “browser”