MCP Server for Z.AI - A Model Context Protocol server that provides AI capabilities
Council of AI GSPC is installed from its publisher's own source and answers where it runs, so this marketplace is not in the path of a single call. There is no address here to send one to, and a panel that pretended otherwise would be showing you an answer we made up. Install it and call it from your own client — the Installation tab has the entry for each one.
What it does
19 tools (14 free, 5 x402-metered): GSPC board, evidence, Ed25519 card verify. Measurement only.
Quickstart
# 1 — add it to Claude Code
claude mcp add --scope user --transport http councilof-council-of-ai-gspc-mcp https://councilof.ai/mcp/
# 2 — ask your agent for something these tools do
# board_totals, get_axis, verify_card and 16 more
Council of AI GSPC costs nothing on mcprush: there is no plan to choose here, no cap to set and nothing mcprush can bill you for.
Collected from a public index. Nobody has claimed this account, so nothing here was written by its author — claim it if it is yours.
Where are you running it?
Every route below installs the same thing and ends at the same approval screen. Nothing here runs on your machine and nothing runs on ours: this server answers at its publisher’s own address, and what you install is the connection straight to it.
This is a public server: it answers at its publisher’s own address and this marketplace is not in the path. Claude Code registers it in one command; --scope user makes it available in every project. The transport below is http, as the publisher's own manifest declares it.
claude mcp add --scope user --transport http councilof-council-of-ai-gspc-mcp https://councilof.ai/mcp/Reconnect, or start a new session, and the tools appear in the model’s tool list.
One config entry pointing straight at the publisher’s own address — this marketplace is not in the path, and nothing from this listing executes on your machine.
19 tools, with what each one reads, writes and reaches shown before you agree — the same list on every route above. Read the tool surface.
Tool surface
What the model actually sees. Descriptions are diffed on every release — see version history.
Live GSPC board totals from https://councilof.ai/api/gspc. Returns the slot count and the measured count as two labelled numbers WITH their kind — a slot is a declared position on the board, a measurement is a real run behind it; the two are never summed and never swapped — plus the board's separation line, and as_of dates for the board and for this fetch. Compact by default; pass detail "full" fo
| Parameter | Type | Required | Notes |
|---|---|---|---|
| detail | string | no | summary (default): counts, public_count, the separation line, dates and source. full: also count_grammar, by_family and the board's measured_on block. |
One axis row from the live GSPC board at https://councilof.ai/api/gspc — every axis the board carries, behavioural and financial families alike, addressed by the axis id exactly as the board spells it: n, accuracy, interval, MEASURED or UNMEASURED status, family, kind, the bank or run-artifact URL behind the row, and dates. An unmeasured axis is a first-class answer — a declared slot with no run b
| Parameter | Type | Required | Notes |
|---|---|---|---|
| axis | string | yes | The axis name as it appears on the board, e.g. governance, safety, jail, provenance-controls. Case-insensitive. An unknown name returns the list of names the board actually carries. |
Verify a signed gspc.measurement-card under the published rule (https://councilof.ai/signed/HOW-TO-VERIFY.md): recompute the id from the canonical body bytes, then check the Ed25519 signature under a key PINNED in this verifier and published in the did:web:csoai.org DID document: #card-attestation-1 (the card key of the signed card index) or #card-attestation-2 (the card key added on rotation, 27
| Parameter | Type | Required | Notes |
|---|---|---|---|
| card | yes | The signed card: an object, a JSON string, a councilof.ai / csoai.org URL to one, or a 64-hex card id (resolved to https://councilof.ai/signed/cards/{id}.json). |
The published signed-card index (https://councilof.ai/signed/card_index.json): what the index declares (n_cards) and how many rows it actually carries, reported next to — never reconciled with — the count the card store endpoint (https://councilof.ai/api/cards) reports for itself. Two labelled numbers from two surfaces; if they disagree, this tool shows the disagreement rather than picking one. Op
| Parameter | Type | Required | Notes |
|---|---|---|---|
| axis | string | no | Only list rows whose axis matches this name (case-insensitive). |
| limit | integer | no | How many rows to include in the listing (newest first). Default 10. The two counts are always reported in full regardless of this limit. |
GET the permissionless public-root at https://councilof.ai/root.json. Returns merkle_root, card_count, as_of, and UNMEASURED notes. Separate from GSPC. Three states: VALID (fetched), UNREACHABLE (could not fetch), UNCHECKABLE (body unreadable). Never a certificate.
No parameter schema on file.
GET one public-root card-v0 leaf by sha256 (64 hex) from https://councilof.ai/cards/{sha16}.json. UNMEASURED cells stay visible. States: VALID (fetched); NOT_IN_THIS_CORPUS (the id is in the signed card index, not the public root, so use verify_card on it); INVALID (in neither the live root nor the signed card index); UNCHECKABLE (a source could not be read). Not a GSPC measurement-card.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| sha256 | string | yes | 64-char hex payload SHA-256 of the card-v0 leaf. |
Check a sha256 against the live public-root merkle via GET /api/proof?sha=. Three states only: VALID (included), INVALID (not a leaf), UNCHECKABLE (proof endpoint unreachable). Does not claim Ed25519 unless sig_ed25519 is present and checked separately. Never a grade.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| sha256 | string | yes | 64-char hex digest to test for inclusion. |
GET the latest x402 catalog trust snapshot: counts of how many catalogued x402 resources open a correct 402 challenge vs how many are phantom on the wire. Counts only by doctrine — host details withheld; a 402 is NOT delivery; measurement, never certification.
No parameter schema on file.
GET the latest MCP handshake trust snapshot (https://councilof.ai/interop/mcp-trust/latest.json): counts of how many internet-facing MCP servers answer a correct initialize handshake, how many respond with an auth challenge, and how many are unreachable. Counts only by doctrine — host details withheld by design. A partial round or a cap change is disclosed in the snapshot. Measurement, never certi
No parameter schema on file.
Read the latest signed measurement-capsule index published at https://councilof.ai/measurement-capsules/latest.json: the index root over every capsule, each batch (adapter, kind, capsule count, measurement states, batch Merkle root, record sha256, record signature and OpenTimestamps state), the index's own board signature re-verified here against the pinned did:web:csoai.org#board-attestation-1 ke
No parameter schema on file.
Verify one measurement capsule. Pass capsule_json as the capsule's JSON TEXT (exact: number lexemes are kept) or as an object. Recomputes capsule_id (sha256 of the canonical JSON without capsule_id), picks the rule by the capsule's schema (csoai.measurement-capsule/0.2: RFC 6962 Merkle with 0x00/0x01 domain separation; the superseded v0.1 capsule schema: the v0.1 rule), finds the published batch o
| Parameter | Type | Required | Notes |
|---|---|---|---|
| capsule_json | string/object | yes | The capsule: its JSON text (preferred, byte-exact) or the parsed object. |
Trust per server, not totals: every published measurement capsule about ONE endpoint URL across all batches — MCP contract-parity dimensions (AUTH, PAYMENT, PROTOCOL, TOOLS, VERSION), A2A card-signature state, self-parity cells for CSOAI's own doors, and any later adapter (e.g. tool drift) — each with its measurement_state, observed_at, correction_pointer, limitations, batch Merkle root and an inc
| Parameter | Type | Required | Notes |
|---|---|---|---|
| endpoint_url | string | yes | Public HTTP(S) endpoint URL whose already-published measurement capsules should be read, e.g. https://example.com/mcp. |
For ONE obligation (article-50, article-53 GPAI transparency, dora or cra) and an optional subject: the obligation record, its counsel-gate status and the already-signed measurement cards that are relevant to it (count plus the first cards, each with its verify link), read live from https://councilof.ai/api/evidence-bundle. Relevant-to is never a determination: no answer says satisfied or not sati
| Parameter | Type | Required | Notes |
|---|---|---|---|
| obligation | string | yes | article-50 (AI-generated content marking), article-53 (GPAI provider documentation), dora (ICT third-party oversight) or cra (Cyber Resilience Act). |
| subject | string | no | Optional: a model id, vendor or instrument the cards must name. Omit for the obligation-wide selection. |
GSPC Route (free, decide-only). Applies YOUR policy and the fixed GSPC floor to a candidate set and returns the chosen candidate, the basis of the choice and an unsigned route record (csoai.evidence-event/0.1, profile csoai.route-evidence/0.1). Candidates are the GSPC MCP tools by default, or ones you declare: your models, your local GPU, MCP tools, A2A agents, x402 resources. Policy is Cedar: pre
| Parameter | Type | Required | Notes |
|---|---|---|---|
| task | string | no | The task. Hashed (sha256) and never stored or echoed. |
| task_sha256 | string | no | Alternative to task: its sha256. |
| data_class | string | no | Default public. A non-public class is routed only to candidates that declare it in data_class_allowed. |
| needs_write | boolean | no | — |
| candidates | array | no | Omit to route among the GSPC MCP tools. A candidate field the router does not know makes that candidate UNCHECKABLE (never permitted); sponsor/bid/placement fields are ignored. |
| policy | object | no | presets [read-only, local-only, eu-only, no-unmeasured], forbid_providers [..], allow_kinds [..], confirm_destructive, caller_wallet. Unknown keys grant nothing. |
| objective | object | no | — |
| mode | string | no | decide (default). execute is not enabled and answers NOT_ENABLED. |
PAID (x402). Commission one signed card-v0 receipt (surface ras.commission) for a named subject on the frozen bank via https://councilof.ai/api/request-attestation. Re-serves every signed measurement card already on file for the subject; a payment never mints a MEASURED cell (fresh_run stays UNMEASURED until a published run exists). Without x_payment the tool returns the 402 challenge (accepts[] w
| Parameter | Type | Required | Notes |
|---|---|---|---|
| subject | string | yes | Subject to commission: a model id, instrument id or card sha (1-120 chars of [A-Za-z0-9._:/@+-]). |
| axis | string | no | Optional axis slug; omit for the subject-level commission. |
| x_payment | string | no | The X-PAYMENT header value (base64 x402 payload) signed by your wallet against accepts[] from the previous 402. Omit to receive the challenge. |
PAID (x402 or CSOAI LTD invoice). Article 50 marking-evidence pack via https://councilof.ai/api/art50/marking-evidence: which machine-readable marks the named methods DETECT in these bytes right now. Scope: C2PA and IPTC metadata only (C2PA manifest store, assertion hashes, hard binding, claim signature; IPTC digitalSourceType); no watermark, fingerprint or other kind of mark is read. NOT_DETECTED
| Parameter | Type | Required | Notes |
|---|---|---|---|
| url | string | no | Public HTTP(S) URL of the generative output to measure (≤20 MiB). The server fetches only this declared measurement subject. |
| bytes_b64 | string | no | Alternatively the output bytes, base64 (≤20 MiB decoded). |
| manifest_b64 | string | no | Alternatively a detached C2PA manifest store, base64 (manifest-only mode). |
| preview | boolean | no | true = free unsigned measurement (no card sha, no signature). |
| x_payment | string | no | The X-PAYMENT header value signed against accepts[] from the previous 402. Omit to receive the challenge. |
PAID (x402). Per-request signed evidence card of ONE XRPL issued asset's deterministic on-ledger state via https://councilof.ai/api/rwa/evidence: AccountRoot lsf* flags, Domain, the two-way xrp-ledger.toml check (PASS / FAIL / UNCHECKABLE — unreachable is never FAIL), gateway_balances obligation, holders as the free reader has them, every raw fetch sha256'd. preview=true is free (unsigned state).
| Parameter | Type | Required | Notes |
|---|---|---|---|
| asset | string | yes | Symbol (as listed by https://councilof.ai/api/xrpl) or issuer r-address. |
| preview | boolean | no | true = free unsigned state. |
| x_payment | string | no | The X-PAYMENT header value signed against accepts[] from the previous 402. Omit to receive the challenge. |
PAID (x402 or CSOAI LTD invoice). A historical batch of the estate's measurement receipts via https://councilof.ai/api/receipts/batch: every signed card-v0 leaf whose as_of falls in [from,to] (≤200), each with its Merkle inclusion path and the public root(s) that carried it, plus the root index for the window and one signed manifest card citing the batch sha256. preview=true is free and returns co
| Parameter | Type | Required | Notes |
|---|---|---|---|
| from | string | yes | Window start, ISO-8601. Required. |
| to | string | no | Window end, ISO-8601. Defaults to now. |
| preview | boolean | no | true = free: count, span, roots and batch sha256 without the leaves. |
| x_payment | string | no | The X-PAYMENT header value signed against accepts[] from the previous 402. Omit to receive the challenge. |
PAID (x402). An evidence bundle for ONE obligation (article-50, article-53 GPAI transparency, dora or cra) and an optional subject via https://councilof.ai/api/evidence-bundle: OSCAL 1.1.0 assessment-results assembled only from already-signed measurement cards (each with its card bytes and Merkle inclusion proof), plus one manifest card-v0, signed when the signing key is present. Observations are
| Parameter | Type | Required | Notes |
|---|---|---|---|
| obligation | string | yes | article-50, article-53, dora or cra. |
| subject | string | no | Optional: a model id, vendor or instrument the cards must name. |
| preview | boolean | no | true = the free preview (relevant-card count and first cards); nothing is charged. |
| x_payment | string | no | The X-PAYMENT header value signed against accepts[] from the previous 402. Omit to receive the challenge. |
- Every tool — any call limit is its publisher’s, not ours
- No card, and mcprush charges nothing for it
- Runs at its publisher’s own address — this marketplace is not in the path
- Nothing to cap, because mcprush bills nothing
What counts against your monthly calls
| Tool | Unit | Calls used | Out of the allowance |
|---|
Nothing here is billable: mcprush charges nothing to install Council of AI GSPC or to call it, at any volume.
Two independent axes, because powerful and malicious are different questions. The grade is threat only. The capability level is blast radius, and it is never a penalty on the grade — it is priced as one subtract-only term in the score, where you can see it.
This listing is an address its publisher runs, and you connect to it directly — this marketplace is not in the path. The scanner reads packages and public source, and an address is neither. So there is no grade — not a withheld one, an unmeasured one.
Release history
This is an address its publisher runs: which release it serves is theirs to choose, so there is nothing here to pin. The history below is for reading; the current release on file is 1.4.4.
No release note was published with this version.
One review per account, from a signed-in account that does not publish this listing. Nothing else is asked — you can say what you think before you install it. Publishers can reply once per review, and a review can be edited or deleted by whoever wrote it.
Any signed-in account that does not publish Council of AI GSPC can review it, once — before installing it or after. A review from an account that has installed it is marked as one.
Nobody has reviewed this listing. The rating on the card is the mean of the reviews written here and nothing else, so there is no rating until somebody writes the first — which takes a signed-in account that does not publish it, and nothing else.