A certification is only worth what the verification path costs. get_contract and verify_artifact are the thorough route and need a key; verify_file is deliberately the cheapest thing that still answers the real question, which is whether this file is that file. The split between keyed and unkeyed tools is worth noting for what it says about intent — the lookups and the integrity check are open, and the depth is behind a free registration. One thing to hold in mind when reading any score here: Fidensa certifies capabilities and this server is itself one of them, so the trust signal and the thing being trusted come from the same party.
A client for Fidensa, which certifies AI capabilities — MCP servers, skills, agent rules files, hooks, sub-agents and plugins. Seven tools covering trust lookup, the full certification contract, search and comparison, cryptographic verification and experience reporting.
- check_certification returns certification status, trust score, grade, tier and supply-chain status for one capability.
- get_contract returns what is behind that score: identity, supply-chain analysis, security scan results, adversarial testing findings and a behavioural fingerprint.
- search_capabilities finds certified alternatives, which is the intended next step when something scores poorly, and compare_capabilities puts two to five side by side with a per-signal breakdown.
- verify_artifact checks the platform signature, content hash and expiry on a .cert.json, optionally including a git SHA match and file integrity.
- verify_file is the shortcut: pass a file's SHA-256 and the capability id to confirm the file matches what was certified, with no artifact needed.
- report_experience submits a runtime report that feeds the social-proof component of the score, keyed to the content hash so the reporter has actually held the artifact.
Four of the seven tools run with no key at all — check_certification, search_capabilities, verify_file and report_experience — and the server prints which ones are active at startup. FIDENSA_API_KEY, free on registration, unlocks get_contract, compare_capabilities and verify_artifact and raises the reporting rate limit.
One command — npm install -g @fidensa/mcp-server