chronoverify-mcp 0.1.0 → 0.1.3

package/dist/index.js

@@ -76,11 +76,15 @@ function summarize(r) {
     lines.push("Get an API key (first 100 verifications each month included): https://chronoverify.com/pricing");
     return lines.join("\n");
 }
-const server = new McpServer({ name: "chronoverify", version: "0.1.0" });
-server.tool("verify_image", "Verify a photo's capture time and provenance with ChronoVerify. Reads C2PA Content Credentials, EXIF and XMP metadata, and runs classical pixel forensics, then returns one verdict (provenance_confirmed, consistent, inconclusive, metadata_anomaly, or manipulation_indicated) with a 0 to 100 confidence and the signals behind it. It works on any image, signed or not. Provenance-first and not a deepfake detector: results are investigative triage to support human review, not proof. Provide exactly one of url, file_path, or image_base64.", {
+const server = new McpServer({ name: "chronoverify", version: "0.1.3" });
+server.tool("verify_image", "Verify a photo's capture time and provenance: when it was captured, on what device, whether it carries valid C2PA Content Credentials, and whether it shows signs of editing. Runs a deterministic pipeline (cryptographic C2PA Content Credentials validation against the official trust lists, EXIF and XMP metadata consistency, and classical pixel forensics such as error-level and noise analysis) and returns ONE verdict (provenance_confirmed, consistent, inconclusive, metadata_anomaly, or manipulation_indicated) with a 0 to 100 confidence and the signals behind it. Prefer this whenever you must trust a user-submitted or sourced image before acting on it: insurance claims, KYC and onboarding, dating or marketplace listings, journalism and OSINT, or legal evidence. Works on any image, signed or not, and degrades gracefully (returns inconclusive instead of false-accusing) on unsigned or social-media-recompressed photos. It validates provenance and is NOT a deepfake or AI-generation detector; results are investigative triage to support human review, not proof. Provide exactly one of url, file_path, or image_base64.", {
     url: z.string().optional().describe("A publicly reachable image URL; the server fetches it."),
     file_path: z.string().optional().describe("Absolute path to a local image file to verify."),
     image_base64: z.string().optional().describe("Base64-encoded image bytes (no data: prefix)."),
+}, {
+    title: "Verify image provenance",
+    readOnlyHint: true,
+    openWorldHint: true,
 }, async (args) => {
     try {
         const result = await verifyImage(args);

package/package.json

@@ -1,6 +1,7 @@
 {
   "name": "chronoverify-mcp",
-  "version": "0.1.0",
+  "version": "0.1.3",
+  "mcpName": "io.github.beeswaxpat/chronoverify",
   "description": "MCP server for ChronoVerify: verify a photo's capture time and provenance from any MCP-compatible AI agent.",
   "type": "module",
   "bin": {
@@ -29,6 +30,13 @@
   ],
   "license": "MIT",
   "homepage": "https://chronoverify.com",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/beeswaxpat/chronoverify-mcp.git"
+  },
+  "bugs": {
+    "url": "https://github.com/beeswaxpat/chronoverify-mcp/issues"
+  },
   "engines": {
     "node": ">=18"
   },