# KeyHalve - verify sealed documents MCP server

Free, no-account verification of KeyHalve-sealed documents. Read-only; never receives keys.

## Links
- Registry page: https://www.getdrio.com/mcp/com-keyhalve-verify
- Repository: https://github.com/keyhalve/keyhalve-mcp

## Install
- Command: `npx -y @keyhalve/verify-mcp`
- Endpoint: https://mcp.keyhalve.com/mcp
- Auth: Not captured

## Setup notes
- Package: Npm @keyhalve/verify-mcp v0.1.0
- Remote endpoint: https://mcp.keyhalve.com/mcp

## Tools
- keyhalve_verify - Verify a KeyHalve-sealed document. Accepts a verify URL, the raw text of a KeyHalve QR code, or a document id (vp_…, kh_…, cb_…). Returns the cryptographic verdict: whether the seal exists, its live status (active/revoked/expired), ciphertext integrity against the issuance commitment, the KeyHalve rail's independent attestation, the validity window, and the issuer's trust context. This tool NEVER decrypts sealed contents — any decryption key in the URL fragment is discarded unread; contents are only readable by opening the verify URL in a browser. Endpoint: https://mcp.keyhalve.com/mcp
- keyhalve_status - Live status of a KeyHalve-sealed document by id: active, revoked (with reason/time), or outside its validity window. Lighter than keyhalve_verify — status only, no integrity or rail checks. Use for "is this still good right now?" Endpoint: https://mcp.keyhalve.com/mcp
- keyhalve_explain - Plain-language explanation of what a KeyHalve verification verdict means and why it can be trusted (blind rail, three-share custody, commitments, revocation). Optionally focused on one topic. Endpoint: https://mcp.keyhalve.com/mcp

## Resources
Not captured

## Prompts
Not captured

## Metadata
- Owner: com.keyhalve
- Version: 1.0.1
- Runtime: Npm
- Transports: STDIO, HTTP
- License: Not captured
- Language: Not captured
- Stars: Not captured
- Updated: Aug 3, 2026
- Source: https://registry.modelcontextprotocol.io