Eclipse Countermark MCP
One verification call for third-party agent cards and payment mandates — a receipted verdict a merchant can rely on, across formats.
status: in-developmentclass: mcpIdentity, Trust & Reputation
Vendor: Cyan Eclipse Technologies
What it does
- One verification call for presented agent cards and payment mandates across formats, returning a signed finding in the closed vocabulary CONSISTENT / DIVERGED / EXPIRED / REVOKED_BY_ISSUER / UNRESOLVED
- Every verdict enumerates the checks actually performed and carries provenance for the artifact hash, key source, and revocation-feed epoch; presented-only artifacts cap at UNRESOLVED
- Mandate checks bind structure, signature, expiry, amount, scope, cart, and counterparty to the presented cart — a valid signature on the wrong cart still lands DIVERGED
- Instruction-like content inside artifacts is quarantined as data (hash only, never echoed) and never instructs the verifier; findings supersede, never edit
- Verification only: no approve_transaction, release_funds, trust_score, or mark_trusted surface exists. v0.1 is local over fixture issuers and a fixture revocation feed; live issuer discovery is not built
Tools
verify_card · verify_mandate · verify_revocation_status · verification_receipt
Platforms
- MCP over stdio (HTTP transport on roadmap)
Certification
Bench verdict: CERTIFIED(local)
Certified scope: CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-26, 23 pass, 1 na of 24 checks (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/countermark.py. Run 2 is the standing card; run 1 is retained append-only. N-CHECK: NOVELTY_PROVEN — one neutral verification call across card and mandate formats returns a signed finding envelope enumerating the checks actually performed, with presented-only artifacts capped at UNRESOLVED.
Not tested:
- Live issuer-key discovery — NOT built (G-LIVE per format, spec ch.13). v0 verifies over fixture issuers only; an unknown domain caps at UNRESOLVED with the ceiling stated in provenance.
- Hosted per-call merchant API — NOT built (T2 + G-OWNER); pricing is Till/x402 territory, consumed not built.
- Production findings-key custody — v0 signs with a local seed key (keys/, gitignored, chmod 600), distinct from any identity key (§5.7); custody is a gated decision.
Bench scorecard (evidence): https://eclipsebazaar.com/cards/eclipse-countermark-mcp-2026-10-26-2.json
Pricing
Free local v0.1; hosted per-call merchant API pricing TBD per spec (owner-gated, G-OWNER phase)
Install / verify
docker run -i ghcr.io/cyan-eclipse-technologies-llc/eclipse-countermark-mcp:latest
Official MCP Registry name: io.github.CYAN-ECLIPSE-TECHNOLOGIES-LLC/countermark
Registry listing: https://registry.modelcontextprotocol.io/v0.1/servers/io.github.CYAN-ECLIPSE-TECHNOLOGIES-LLC%2Fcountermark/versions/0.1.0
Verify any MCP server in your client configs against this catalog with bazaar check (Eclipse Bazaar MCP / CLI — see llms.txt).