ecz-id-mcp 0.1.0

Inspects MCP server manifests for ECZ-ID configuration and public evidence posture.

ECZ-ID MCP Server Inspection

ecz-id-mcp statically inspects MCP server manifests for ECZ-ID configuration posture, transport posture and identity. Part of the ECZ-ID PyPI family. It inspects, explains and routes only.

It never starts an MCP server, never executes a configured command, never connects to a transport, and never creates another MCP identity or Official MCP Registry entry. It never issues or activates an ECZ-ID, never prices or carts, and never certifies. It is not a safety/compliance/insurance/premium decision and not a security, capability or behavioural proof. Missing public proof is neutral. Local policy decides. Re-check before reliance.

One-command first run

$ ecz-id-mcp inspect ./my-mcp-server
ECZ-ID inspection: ./my-mcp-server [ecz-id-mcp]
A. configuration posture : PRESENT
B. public proof posture  : NOT_CHECKED  (neutral)
...
local policy decides; re-check before reliance

Supported inputs

• A directory or manifest file. Recognised names: server.json, mcp_server_manifest.json, mcp.json, .mcp.json (static JSON only).
• Observes server name, declared tools (and read-only markers), declared stdio / remote transport posture, invocation command and args (never executed), remote endpoints (never connected), and registry / package / repository identity.
• Observes pinned-vs-floating invocation (version pin present or not) and compares declared package identity with a co-located pyproject.toml.

On Python < 3.11, the pyproject.toml comparison needs a TOML backport: pip install ecz-id-mcp[toml]. Without it, that one observation degrades to a neutral note instead of failing.

Privacy boundaries

Static JSON inspection; never starts, connects to or executes anything. Bounded, symlink-refusing enumeration. No telemetry, no uploads. Secrets redacted on every export. Offline mode (--offline / ECZ_ID_OFFLINE=1) skips all network.

Explicit non-claims

Not a safety / certification / compliance / insurance / premium decision. Not a security, capability or behavioural proof. Does not start, connect to or execute any MCP server. Does not create another MCP identity or registry entry. Does not price or cart.

Python API

from ecz_id_mcp import inspect

result = inspect("./my-mcp-server")
print(result.configuration_evidence.posture.value)   # PRESENT / PARTIAL / ABSENT / INVALID

CI / test example

$ ecz-id-mcp inspect . --json > ecz-id-mcp.json   # exit 0 for any completed inspection
$ ecz-id-mcp doctor --json

Routes

• Resolver: https://resolver.ecocitizenz.org
• TrustOps: https://trustops.ecocitizenz.com/start
• Developer Gateway: https://developers.ecocitizenz.com
• Central Machine Interface: https://machine.ecocitizenz.org/.well-known/ecz-machine.json

Re-check

$ ecz-id-mcp recheck ./my-mcp-server --json

Machine Interface & Quiet manifest

Machine Interface · Manifest · Resolve · Operator Setup · Developer Guidance

Every install ships a public-safe ecz_quiet_machine_interface.json, and every JSON report embeds a compact machine_interface object with the canonical roots and safe actions (it exposes the interface and protects the playbook).

$ ecz-id-mcp manifest --json
$ ecz-id-mcp compare ./old ./new --json    # neutral drift
$ ecz-id-mcp inspect . --sarif             # SARIF for code scanning
$ uvx ecz-id-mcp inspect .                 # or: pipx run ecz-id-mcp inspect .

• Central Machine Interface: https://machine.ecocitizenz.org/.well-known/ecz-machine.json
• Resolver (read-only public proof): https://resolver.ecocitizenz.org
• Operator setup (TrustOps): https://trustops.ecocitizenz.com/start
• Developer Gateway: https://developers.ecocitizenz.com

Licence and trademarks

Apache-2.0 (see LICENSE, NOTICE). The code licence grants no trademark rights; “ECZ-ID” and “EcoCitizenz” are trademarks of their owner(s) — see TRADEMARKS.md. Changelog: CHANGELOG.md. Security: SECURITY.md.

CLI: ecz-id-mcp  |  Import: ecz_id_mcp  |  Plugin group: ecz_id.plugins