Proof Holdings by proof.holdings

MCP server · Human approval & handoff · indexed, not reviewed

HostedLocalvendor's own

Not reviewed

No score, grade or rank. This listing is facts from the official MCP registry and our own checks, and it stays out of the rankings until the panel reviews it.

How the index works

One API, all things verified — control, delegation, human approval, anti-impersonation.
What the official MCP registry says

Facts

MCP registry: holdings.proof/mcp-server · 1.1.0
Endpoint: https://api.proof.holdings/mcp
Packages: npm @proof-holdings/mcp-server stdio
Source: github.com/ProofHoldings/mcp-server
Website: proof.holdings
npm / week: 32
GitHub stars: 0
Registry entry: updated 9 Sep 2026

From the official MCP registry, the package registries and our own checks. JSON · Markdown

Why it's listed

It's published in the registry under proof.holdings, a namespace the registry only gives to whoever proves they control that domain.

Being indexed says nothing about quality, and nobody can pay for it. Is this yours? Ask for a review.

Tools it lists 171 · about 43,260 tokens of context · checked 23 hours ago

Tool	What it does	Hint
`create_verification`	withheld	writes
`get_verification`	withheld	read-only
`list_verifications`	withheld	read-only
`trigger_verification`	withheld	writes
`submit_verification_code`	withheld	writes
`resend_verification`	withheld	writes
`test_verify`	withheld	writes
`list_verified_users`	withheld	read-only
`get_verified_user`	withheld	read-only
`start_domain_verification`	withheld	writes
`check_domain_verification`	withheld	writes
`wait_for_verification`	withheld	read-only
`create_multi_channel_verification`	withheld	writes
`get_multi_channel_verification_status`	withheld	read-only
`create_verification_request`	withheld	writes
`get_verification_request`	withheld	read-only
`get_request_proofs`	withheld	read-only
`list_verification_requests`	withheld	read-only
`get_request_by_reference`	withheld	read-only
`cancel_verification_request`	withheld	writes
`wait_for_request`	withheld	read-only
`validate_proof`	withheld	read-only
`get_proof_status`	withheld	read-only
`revoke_proof`	withheld	writes
`list_revoked_proofs`	withheld	read-only
`create_session`	withheld	writes
`get_session`	withheld	read-only
`wait_for_session`	withheld	read-only
`list_assets`	withheld	read-only
`get_asset`	withheld	read-only
`revoke_asset`	withheld	writes
`get_current_user`	withheld	read-only
`list_auth_sessions`	withheld	read-only
`revoke_auth_session`	withheld	writes
`get_usage`	withheld	read-only
`get_platform_summary`	withheld	read-only
`get_settings`	withheld	read-only
`update_settings`	withheld	writes
`export_data`	withheld	writes
`search`	withheld	read-only
`get_self_api_key`	withheld	read-only
`get_api_key_usage`	withheld	read-only
`list_templates`	withheld	read-only
`get_default_templates`	withheld	read-only
`get_template`	withheld	read-only
`update_template`	withheld	writes
`delete_template`	withheld	writes
`preview_template`	withheld	read-only
`render_template`	withheld	read-only
`get_webhook_stats`	withheld	read-only
`list_webhook_deliveries`	withheld	read-only
`get_webhook_delivery`	withheld	read-only
`retry_webhook_delivery`	withheld	writes
`get_subscription`	withheld	read-only
`list_profiles`	withheld	read-only
`create_profile`	withheld	writes
`get_profile`	withheld	read-only
`update_profile`	withheld	writes
`delete_profile`	withheld	writes
`set_primary_profile`	withheld	writes
`list_profile_templates`	withheld	read-only
`update_profile_template`	withheld	writes
`delete_profile_template`	withheld	writes
`preview_profile_template`	withheld	read-only
`update_profile_proofs`	withheld	writes
`get_my_profile`	withheld	read-only
`update_my_profile`	withheld	writes
`get_profile_assets`	withheld	read-only
`list_emails`	withheld	read-only
`remove_email`	withheld	writes
`set_primary_email`	withheld	writes
`start_add_email`	withheld	writes
`get_add_email_status`	withheld	read-only
`verify_email_otp`	withheld	writes
`resend_email_otp`	withheld	writes
`list_phones`	withheld	read-only
`remove_phone`	withheld	writes
`set_primary_phone`	withheld	writes
`start_add_phone`	withheld	writes
`get_add_phone_status`	withheld	read-only
`list_api_keys`	withheld	read-only
`create_api_key`	withheld	writes
`revoke_api_key`	withheld	writes
`regenerate_api_key`	withheld	writes
`start_2fa`	withheld	writes
`get_2fa_status`	withheld	read-only
`verify_2fa`	withheld	writes
`verify_2fa_magic_link`	withheld	writes
`wait_for_2fa`	withheld	read-only
`list_domains`	withheld	read-only
`add_domain`	withheld	writes
`get_domain`	withheld	read-only
`delete_domain`	withheld	writes
`verify_domain`	withheld	writes
`connect_cloudflare`	withheld	writes
`connect_godaddy`	withheld	writes
`connect_dns_provider`	withheld	writes
`add_verification_provider`	withheld	writes
`get_dns_providers`	withheld	read-only
`verify_domain_with_credentials`	withheld	writes
`check_domain_credentials`	withheld	read-only
`start_domain_email_verification`	withheld	writes
`confirm_domain_email_code`	withheld	writes
`resend_domain_email`	withheld	writes
`setup_domain_email`	withheld	writes
`check_domain_email_status`	withheld	read-only
`list_dns_credentials`	withheld	read-only
`create_dns_credential`	withheld	writes
`delete_dns_credential`	withheld	writes
`list_my_requests`	withheld	read-only
`list_incoming_requests`	withheld	read-only
`create_user_request`	withheld	writes
`claim_request_assets`	withheld	writes
`cancel_user_request`	withheld	writes
`extend_request`	withheld	writes
`share_request_email`	withheld	writes
`start_user_domain_verification`	withheld	writes
`get_user_domain_verification_status`	withheld	read-only
`check_user_domain_verification`	withheld	writes
`claim_username`	withheld	writes
`update_public_proofs`	withheld	writes
`create_authorization`	withheld	writes
`get_authorization`	withheld	read-only
`list_authorizations`	withheld	read-only
`revoke_authorization`	withheld	writes
`export_authorizations`	withheld	read-only
`create_confirmation`	withheld	writes
`get_confirmation`	withheld	read-only
`list_confirmations`	withheld	read-only
`get_confirmation_approval_link`	withheld	writes
`wait_for_confirmation`	withheld	read-only
`create_hitl`	withheld	writes
`get_hitl`	withheld	read-only
`list_hitls`	withheld	read-only
`update_hitl`	withheld	writes
`delete_hitl`	withheld	writes
`request_hitl_authorization`	withheld	writes
`create_chat_id_discovery`	withheld	writes
`poll_chat_id_discovery`	withheld	read-only
`wait_for_chat_id_discovery`	withheld	read-only
`get_hitl_keys`	withheld	read-only
`upload_hitl_keys`	withheld	writes
`delete_hitl_keys`	withheld	writes
`create_identity_challenge`	withheld	writes
`get_identity_challenge`	withheld	read-only
`create_circle`	withheld	writes
`list_circles`	withheld	read-only
`get_circle`	withheld	read-only
`update_circle`	withheld	writes
`delete_circle`	withheld	writes
`add_circle_member`	withheld	writes
`list_circle_members`	withheld	read-only
`invite_circle_member`	withheld	writes
`create_circle_member_drill`	withheld	writes
`remove_circle_member`	withheld	writes
`add_circle_member_channel`	withheld	writes
`list_circle_member_channels`	withheld	read-only
`remove_circle_member_channel`	withheld	writes
`create_delegation`	withheld	writes
`list_delegations`	withheld	read-only
`get_delegation`	withheld	read-only
`revoke_delegation`	withheld	writes
`verify_delegation`	withheld	read-only
`verify_delegations`	withheld	read-only
`start_login`	withheld	writes
`wait_for_login`	withheld	read-only
`create_account`	withheld	writes
`send_account_email`	withheld	writes
`wait_for_account_creation`	withheld	read-only
`start_2fa_for_action`	withheld	writes
`render_auth_link`	withheld	read-only

What https://api.proof.holdings/mcp answered to tools/list, asked without credentials over MCP 2025-11-25. The token figure is the size of the list as sent, divided by four; a model sees about that much before it calls anything. Full definitions, input schemas included, are in the listing's JSON under mcpTools.

How its tools read to an agent 1 error · 24 warnings · 1 note

Its tool definitions contain text aimed at the model (TC19), which is how tool poisoning is written, so this site doesn't repeat them. An agent shouldn't connect to it without its user's say-so.

errorTC19send_account_emailthe definition tells the model to keep something from the user
warnTC15create_verification_requestinputSchema uses $ref/$defs
warnTC21add_verification_providerdescribed almost the same as create_dns_credential (82% of the same words)
warnTC21connect_cloudflaredescribed almost the same as connect_godaddy (83% of the same words)
warnTC21delete_templatedescribed almost the same as delete_profile_template (96% of the same words)
warnTC21get_add_email_statusdescribed almost the same as resend_email_otp (80% of the same words)
warnTC21get_templatedescribed almost the same as update_template (80% of the same words)
warnTC21get_verification_requestdescribed almost the same as get_request_by_reference (81% of the same words)
warnTC21list_authorizationsdescribed almost the same as list_hitls (88% of the same words)
warnTC21list_confirmationsdescribed almost the same as list_hitls (82% of the same words)
warnTC21list_emailsdescribed almost the same as list_phones (83% of the same words)
warnTC21list_my_requestsdescribed almost the same as list_incoming_requests (85% of the same words)
warnTC21list_templatesdescribed almost the same as list_profile_templates (82% of the same words)
warnTC21list_verification_requestsdescribed almost the same as list_authorizations (88% of the same words)
warnTC21list_verification_requestsdescribed almost the same as list_hitls (85% of the same words)
warnTC21list_verificationsdescribed almost the same as list_verification_requests (88% of the same words)
warnTC21list_verificationsdescribed almost the same as list_authorizations (92% of the same words)
warnTC21list_verificationsdescribed almost the same as list_hitls (88% of the same words)
warnTC21preview_templatedescribed almost the same as preview_profile_template (97% of the same words)
warnTC21remove_emaildescribed almost the same as remove_phone (86% of the same words)
warnTC21set_primary_emaildescribed almost the same as set_primary_phone (83% of the same words)
warnTC21trigger_verificationdescribed almost the same as check_domain_verification (85% of the same words)
warnTC21update_templatedescribed almost the same as update_profile_template (89% of the same words)
warnTC21wait_for_requestdescribed almost the same as wait_for_session (81% of the same words)

The first 24 of 26; every finding is in the listing's JSON under mcpTools.check.

The checks from /check and anchor check, run each day on the list above: about 43,260 tokens of definitions. Not part of the score yet. Check your own server.

Facts

Why it's listed

Tools it lists 171 · about 43,260 tokens of context · checked 23 hours ago

How its tools read to an agent 1 error · 24 warnings · 1 note

Do agents find, use and choose your tools?