a stateless endpoint that recomputes every hash chain a bernstein run receipt carries and checks the signature with the key the receipt embeds. the same walk bernstein verify-receipt does, reachable from any mcp client or this page.
add it to your agent
$claude mcp add --transport http bernstein https://mcp.bernstein.run/mcp
tools
| verify_receipt | recompute every chain a run receipt embeds, rebuild the signed subject, check the signature. verdict + one line per check. |
| explain_receipt | the same verification, narrated: what the run recorded, where it diverges, what the result does and does not prove. |
| verify_chain | walk journal rows, lineage entries or audit events on their own and name the first broken link. |
| verify_trace_record | TRACE v0.2 conformance checks on one Trust Record: schema, signature with the key it carries, and every profile rule. stateless, no account. |
| verify_delegation_chain | walk a set of Trust Records from the leaf to the root and classify the delegation chain: verified, provenance-invalid, authorization-invalid or unverifiable. |
| explain_trace_mapping | how a bernstein run maps onto a TRACE v0.2 Trust Record, claim by claim; pass a receipt to fill in what its journal answers. |
| list_presets | the compliance presets this release ships and the switches each one turns on. |
| get_preset | every field of one preset as bernstein resolves it. |
| list_adapters | the agent adapters bundled with this release. |
| server_info | version and request limits. |
limits
1 mb per request · 2000 rows per chain · 60 requests per minute per address
one log line per session (client name and version) · no receipt is ever written anywhere