Security & Testing

councilof.ai

Provides tools for AI safety evaluation, including measuring model performance on safety axes, verifying signed AI safety cards, and probing for jailbreaks.

x402 supported1 endpoint12 known toolsFirst detected August 13, 2026Last detected September 9, 2026

ENDPOINT 1

https://councilof.ai/mcp

No auth detected

MCP server metadata

Name: csoai-gspc-mcp
Version: 1.4.0

Capabilities

tools

Server instructions

GSPC MCP. Eight free read-only tools: board_totals get_axis verify_card list_cards get_root get_card verify_inclusion x402_trust. Four paid tools over the x402 rail: commission_card art50_marking_evidence rwa_evidence receipts_batch — call without x_payment to receive the 402 challenge as structuredContent, pay from your wallet and call again with x_payment. A 402 challenge is not settlement, delivery or revenue. Measurement, not certification; verification free. The witness_hash SKU is quarantined pre-release and is not advertised. mill-tool measure dropped. Dead worker is 404; this Pages /mcp is the door. Remote URL https://councilof.ai/mcp. The npm stdio package csoai-gspc-mcp reads the same two definitions files; payment is the x_payment argument, so which tools it carries is a packaging choice of its version, not a limit of stdio. MCP Registry server.version identifies this Pages HTTP implementation; npm is a separately versioned implementation.

Known tools 12

board_totals

Live GSPC board totals from https://councilof.ai/api/gspc.

Inferred read-only

get_axis

One axis row from the live GSPC board at https://councilof.ai/api/gspc: n, accuracy, interval, MEASURED or UNMEASURED status, family, and dates.

Inferred read-only

verify_card

Verify a signed gspc.measurement-card under the published rule (https://councilof.ai/signed/HOW-TO-VERIFY.md): recompute the id from the canonical body bytes, then check the Ed25519 signature under the PINNED key published at did:web:csoai.org#card-attestation-1.

Inferred read-only

list_cards

The published signed-card index (https://councilof.ai/signed/card_index.json): what the index declares (n_cards) and how many rows it actually carries, reported next to — never reconciled with — the count the card store endpoint (https://councilof.ai/api/cards) reports for itself.

Inferred read-only

get_root

GET the permissionless public-root at https://councilof.ai/root.json.

Inferred read-only

get_card

GET one public-root card-v0 leaf by sha256 (64 hex) from https://councilof.ai/cards/{sha16}.json.

Inferred read-only

verify_inclusion

Check a sha256 against the live public-root merkle via GET /api/proof?sha=.

Inferred read-only

x402_trust

GET the latest x402 catalog trust snapshot: counts of how many catalogued x402 resources open a correct 402 challenge vs how many are phantom on the wire.

Inferred read-only

commission_card

PAID (x402).

Inferred read-only

art50_marking_evidence

PAID (x402 or CSOAI LTD invoice).

Potential side effects

rwa_evidence

PAID (x402).

Inferred read-only

receipts_batch

PAID (x402 or CSOAI LTD invoice).

Potential side effects

CONNECT WITH APPROVAL

Client installation

Review this server and its permissions before adding it. Secret placeholders must be set locally.

Codex

~/.codex/config.toml

[mcp_servers.csoai-gspc-mcp]
url = "https://councilof.ai/mcp"
enabled = true

Claude Code

.mcp.json

{
  "mcpServers": {
    "csoai-gspc-mcp": {
      "type": "http",
      "url": "https://councilof.ai/mcp"
    }
  }
}

Claude Desktop

Settings → Connectors → Add custom connector

Name: csoai-gspc-mcp
Remote MCP URL: https://councilof.ai/mcp

Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.

Cursor

.cursor/mcp.json

{
  "mcpServers": {
    "csoai-gspc-mcp": {
      "url": "https://councilof.ai/mcp"
    }
  }
}

Visual Studio Code

.vscode/mcp.json

Add to Visual Studio Code

{
  "servers": {
    "csoai-gspc-mcp": {
      "type": "http",
      "url": "https://councilof.ai/mcp"
    }
  }
}

Generic MCP

Client-specific MCP configuration

{
  "name": "csoai-gspc-mcp",
  "transport": "streamable-http",
  "url": "https://councilof.ai/mcp"
}

MCP Inspector

Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.

TRUST AND VERIFICATION EVIDENCE

Loading Trust v2 evidence…

Checking the associated registrable domain. The BuiltWith key remains server-side.

Indexed

Evidence is source-attributed and does not guarantee that a third-party server is safe. Risk labels are conservative metadata heuristics.