Fidensa MCP Server
About
Independent AI certification authority. Check trust scores, search certified capabilities, compare side-by-side, verify signed artifacts, and report runtime experience for MCP servers, skills, rules files, hooks, sub-agents, and plugins. 50 certifications live.
Details
- Author
- fidensa
- Downloads
- 325
- Categories
- Developer Tools, Security, Other
Jump to
- Quick trust check without an API key
- Keyword, type, tier, and score search
- Full certification contract with evidence retrieval
- Side-by-side comparison of 2–5 capabilities
- Cryptographic signature verification of .cert.json files
- Submit runtime experience reports
Setting up with Highlight
This MCP is not yet compatible with Highlight’s one-click setup. However, you can still use it with Highlight by following these steps:
- Download and install Highlight from highlightai.com/download
- Navigate to the plugins tab and select "Add Custom Plugin"
-
Configure the plugin with the settings below
Plugin Name
Fidensa MCP ServerCommand (node, npx, python, etc.)Please refer to the README for specific instructions on how to obtain API keys or other required environment variables.
- Enable "Start Automatically" if you want the plugin to start when Highlight launches
From the repository
Configure the server with a Fidensa API key (free) or use it without one for the read-only tools check_certification and search_capabilities. Invoke the tools by name (e.g., check_certification, compare_capabilities) to query certification data.
check_certification
Quick trust check for an AI capability (MCP server, skill, plugin, or workflow). Returns certification status, trust score, grade, tier, and supply chain status. No API key required. Use this before invoking any capability to verify it has been independently certified by Fidensa.
get_contract
Retrieve the full certification contract for a capability, including identity, supply chain analysis, security scan results, adversarial testing findings, behavioral fingerprint, and trust score breakdown. Requires a free API key (set FIDENSA_API_KEY).
search_capabilities
Search for certified AI capabilities by keyword or description. Use this to discover certified alternatives when a capability is uncertified or scores poorly. Supports filtering by type, tier, and minimum trust score. No API key required.
compare_capabilities
Side-by-side comparison of 2-5 certified capabilities. Shows trust scores, grades, tiers, and per-signal breakdowns to help choose between alternatives. Requires a free API key (set FIDENSA_API_KEY).
report_experience
Submit an experience report for a certified capability. Reports feed into the social proof signal of the trust score. Requires the content_hash from the .cert.json artifact (proves you've encountered the certified file). API key optional but recommended for higher rate limits.
verify_artifact
Verify the cryptographic signature on a Fidensa certification artifact (.cert.json). Checks platform signature, content hash, expiry, and optionally code integrity (git SHA match) and file integrity (file hash match). For true offline verification, pass the .cert.json content from the capability's published package via the content parameter. Requires a free API key (set FIDENSA_API_KEY).
verify_file
Quick file integrity check: pass the SHA-256 hash of a capability file and its capability_id to verify the file matches what Fidensa certified. This is the simplest verification path — no .cert.json needed. No API key required.
Claude Desktop / Cursor
Paste into your MCP client config file to install this server.
{
"mcpServers": {
"fidensa mcp server": {
"fidensa": {
"command": "npx",
"args": [
"-y",
"@fidensa/mcp-server"
],
"env": {
"FIDENSA_API_KEY": "<YOUR_API_KEY>"
}
}
}
}
}
McpServers
{
"fidensa": {
"command": "npx",
"args": [
"-y",
"@fidensa/mcp-server"
],
"env": {
"FIDENSA_API_KEY": "<YOUR_API_KEY>"
}
}
}
MCP server forFidensa-- the independent AI capability certification authority.
Gives your AI agent structured access to Fidensa certification data through the Model Context Protocol. Check trust scores, search for certified alternatives, compare capabilities side-by-side, verify signed artifacts, check file integrity, and report runtime experience -- all through MCP tool calls.
Fidensa certifies MCP servers, skills, agent rules files, hooks, sub-agents, and plugins.
Several tools work without an API key (check_certification,search_capabilities,verify_file, andreport_experience). Start the server and confirm it connects to the production API:
[fidensa] MCP server started (stdio transport) [fidensa] No FIDENSA_API_KEY set — check_certification, search_capabilities, verify_file, and report_experience available. Set FIDENSA_API_KEY for full access.
The remaining tools (get_contract,compare_capabilities,verify_artifact) require a free API key. An API key also givesreport_experiencehigher rate limits. Register one:
curl -X POST https://fidensa.com/v1/keys \ -H "Content-Type: application/json" \ -d '{"display_name": "My Agent", "email": "you@example.com"}'
Invoke-RestMethod -Uri "https://fidensa.com/v1/keys" -Method Post -ContentType "application/json" -Body '{"display_name": "My Agent", "email": "you@example.com"}'
The response contains your API key (prefixedfid_). Store it securely -- it is shown only once.
Pick your platform and add the MCP server configuration:
{ "mcpServers": { "fidensa": { "command": "npx", "args": ["@fidensa/mcp-server"], "env": { "FIDENSA_API_KEY": "fid_your_key_here" } } } }
{ "mcpServers": { "fidensa": { "command": "npx", "args": ["@fidensa/mcp-server"], "env": { "FIDENSA_API_KEY": "fid_your_key_here" } } } }
{ "servers": { "fidensa": { "type": "stdio", "command": "npx", "args": ["@fidensa/mcp-server"], "env": { "FIDENSA_API_KEY": "fid_your_key_here" } } } }
Omit theFIDENSA_API_KEYline if you only need the open-tier tools.
Claude Desktop tip:Access the config file via Settings → Developer → Edit Config. After saving, fully quit and reopen Claude Desktop (right-click the system tray icon and select Quit — just closing the window isn't enough).
check_certification,search_capabilities,verify_file, andreport_experiencework without any configuration. The remaining tools requireFIDENSA_API_KEY.
User: "Set up a filesystem watcher that writes logs to SQLite." Agent: 1. check_certification("mcp-server-filesystem") -> Status: valid, Score: 60/F-D, Tier: Verified 2. search_capabilities("sqlite mcp server") -> 2 results found 3. compare_capabilities(["mcp-server-sqlite", "mcp-server-better-sqlite3"]) -> Side-by-side trust comparison 4. Agent selects the higher-scored option and informs the user 5. report_experience( capability_id: "mcp-server-filesystem", content_hash: "abc123...", // from the .cert.json outcome: "success" ) -> Confirmation rate updated
Add one of these to your agent's system prompt or rules file for trust-aware tool selection. Three levels of granularity -- pick the one that fits your needs.
Uses the certification tier alone. No numbers to tune.
Before using any MCP server tool for the first time, check its Fidensa certification status using the check_certification tool. - Certified tier: use freely - Verified tier: note the findings to the user before proceeding - Evaluated tier: warn the user, search for certified alternatives - Uncertified: treat as untrusted, suggest certified alternatives After completing a task that used certified tools, submit an experience report via the report_experience tool with the outcome (success, failure, or partial), the capability_id, and the content_hash from the .cert.json.
Uses the trust score, aligned with Fidensa's grade definitions.
Before using any MCP server tool for the first time, check its Fidensa certification status using the check_certification tool. - Score >= 80 (A/B): use freely - Score 72-79 (C): note the trust level to the user - Score 65-71 (D): warn the user, search for certified alternatives - Score < 65 (F): warn the user, strongly recommend alternatives - Uncertified: treat as untrusted, suggest certified alternatives After completing a task that used certified tools, submit an experience report via the report_experience tool with the outcome (success, failure, or partial), the capability_id, and the content_hash from the .cert.json.
The most precise option -- distinguishes between a Certified capability with a moderate score and a Verified capability with findings that blocked Certified tier.
Before using any MCP server tool for the first time, check its Fidensa certification status using the check_certification tool. - Certified tier AND score >= 80: use freely - Certified tier AND score 72-79: use freely, note the score to the user - Verified tier AND score >= 72: note the findings to the user before proceeding - Verified tier AND score < 72: warn the user, search for certified alternatives - Evaluated tier: warn the user, search for certified alternatives - Uncertified: treat as untrusted, suggest certified alternatives For any tool with status "suspended" or "revoked": do not use. Search for certified alternatives and present them to the user. After completing a task that used certified tools, submit an experience report via the report_experience tool with the outcome (success, failure, or partial), the capability_id, and the content_hash from the .cert.json.
See theAPI Documentationfor the full specification.
npm install npm test # Run tests with coverage npm run lint # ESLint npm run format # Prettier
- Fidensa-- AI certification authority
- API Documentation
- Certification Catalog
- Badge Integration Guide
This is a web browser that enables your coding agent, such as Claude Code, to visit websites on your behalf and assist you in identifying bugs or creating UI test cases.
Ed25519-signed consent receipts + programmable policy engine for AI agents before they take actions.
Boost security in your dev lifecycle via SAST, SCA, Secrets & IaC scanning with Cycode.
Cloud security insights, guardrail guidance, and compliance checking via Dawnguard.
Require a named human's offline-verifiable approval before an AI agent takes an irreversible action — payment release, record change, deploy. Two-person rule, Ed25519 Trust Receipts, IETF-drafted, Apache-2.0.
Salesforce integration using OAuth2. Write operations disabled by default per integration. 700+ tools covering SOQL, SOSL, REST, and CRUD, individually selectable. Requires a DataGrout account.
Model Context Protocol server for Skycloak managed Keycloak. Manage clusters, realms, applications, SSO and users from any MCP client.
Turns the Agent into a vLEI/KERI protocol expert
AI traffic control plane (chaos governor): Redis prompt replay, compliant web ingest, SSO org ledger, Agent Shell. BYOK OpenAI-compatible ingress. Cursor optional; MCP is a compatibility client.
Six-gate governance for AI agents: PROCEED/PAUSE/HALT decisions with hash-chained audit trails.
Paid remote MCP for agent data-access boundary reviews, permission scope evidence, sensitive data notes, and governance receipts.
Sign in to leave a review
Use Google, GitHub, or an email account so ratings stay tied to real people.
No reviews posted yet.





