Witnessory client
Witnessory measures how far the internet has moved to post-quantum cryptography. This is the client: the services as Python functions, a command line, and an MCP server so an agent can use them as tools. Standard library only; Apache 2.0.
pip install witnessory
From the command line
witnessory check example.org # one site's post-quantum readiness, in a sentence
witnessory check example.org --json # the whole signed result
witnessory headline # the observatory's headline figures, by layer
witnessory probes # where the probes measure from
witnessory status # whether every service is up
witnessory pricing # what is paid, and the prices
From Python
import witnessory
r = witnessory.check("example.org")
print(r["summary"]) # "example.org: a current browser gets post-quantum key exchange ..."
witnessory.verify(r) # {"ed25519": True, "mldsa65": True} (needs: pip install "witnessory[verify]")
witnessory.headline()["layers"]["keys"]
As an MCP server, for agents
Command witnessory, argument mcp. For example, in a client's configuration:
{"mcpServers": {"witnessory": {"command": "witnessory", "args": ["mcp"]}}}
Tools: check_site, pq_headline, probe_map, service_status, pricing. Resources: Witnessory's llms.txt and
pricing.json. Messages are JSON-RPC, one per line, on stdin and stdout.
Limits and keys
A free check is one vantage, once: 20 new checks an hour from one address, results reused for 10 minutes. A paid
plan's key (WITNESSORY_KEY, or --key) makes checks fresh and counted per month instead of per address. Every
answer carries offers: what more there is and where the prices are (https://witnessory.org/pricing.json). Watching
your own sites over time from several networks, with alerts and signed evidence, is a separate product on the same
page.
Paying per request, as an agent
No account is needed: GET https://api.witnessory.org/pay/check?domain=example.org answers 402 with what to pay
(x402 v2; USDC on Base), and any x402-capable client pays and resends. This client can pay too:
pip install "witnessory[pay]"
export WITNESSORY_PAY_KEY=0x... # a wallet holding a little USDC on Base
witnessory pay address # where to send the USDC
witnessory pay check example.org # $0.01, one fresh signed check
witnessory pay key api-developer # $19, a key for 2,000 fresh checks in 31 days -> WITNESSORY_KEY
From code: witnessory.pay.check("example.org") and witnessory.pay.buy_key("api-developer"). As an MCP tool:
pay_check. Index of what is sold: https://api.witnessory.org/pay.
Terms: https://witnessory.org/terms.html. Privacy: https://witnessory.org/privacy.html. Contact: security@witnessory.org.
Metadata
Release files for witnessory 0.2.4
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | |
|---|---|---|---|---|
| witnessory-0.2.4.tar.gz | 19.5 kB | With provenance | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| witnessory-0.2.4-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 37.3 kB
Release files / witnessory-0.2.4.tar.gz
| Download URL | witnessory-0.2.4.tar.gz |
|---|---|
| Size | 19.5 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
669c5c1ef7642421c0fb6c27ecea91442f0dfc73c878ddb825430555e35390cd
|
|
BLAKE2b-256 checksum How to use checksums |
08333710b7b2831a51ac3728f1b2321dfbc3d9f07fe3a9f5ba70a0575517b16f
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.16
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 27, 2026.
Transparency logRelease files / witnessory-0.2.4-py3-none-any.whl
| Download URL | witnessory-0.2.4-py3-none-any.whl |
|---|---|
| Size | 17.8 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
e3bbb4aeade6518d79635efa48ff668ea9fa19e16bad2f39be07be12a8354f4e
|
|
BLAKE2b-256 checksum How to use checksums |
0252a85da0cf1c767706ddacf41ac01e7dfcf22d0ff25a0e560edc6e599fbd03
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.16
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 27, 2026.
Transparency logSecurity for witnessory 0.2.4
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
Full provenance
All 2 files in this release have been uploaded with provenance metadata.
Attestation for witnessory-0.2.4.tar.gz
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 27, 2026.
Transparency logA note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.