DidWork as an MCP server: gives any MCP-capable agent — Claude Code, Claude Desktop, Cursor, or your own — a did_verify tool, so the agent gates its next action on independently gathered evidence instead of grading its own work.

Agent acts → did_verify(claim) → VERIFIED / FAILED / UNKNOWN → agent proceeds or escalates

Setup

No key is required to try it: keyless, http.ok claims verify against any public URL (rate limited, not stored), so the server delivers a first verdict straight from /plugin install. A free API key from didwork.sh/console unlocks every claim type, the verification log, and watches.

Claude Code — install the plugin (this server plus a session rule, skill, /didwork:verify command, and verifier subagent):

/plugin marketplace add didworksh/claude-plugin
/plugin install didwork@didwork

Or wire up just the MCP server:

claude mcp add didwork -e DIDWORK_API_KEY=dk_your_key -- npx -y @didwork/mcp

Cursor — install the plugin, or add the server to ~/.cursor/mcp.json. Claude Desktop (claude_desktop_config.json):

{
  "mcpServers": {
    "didwork": {
      "command": "npx",
      "args": ["-y", "@didwork/mcp"],
      "env": { "DIDWORK_API_KEY": "dk_your_key" }
    }
  }
}

Tools

Tool	Does
`did_verify`	Verify a claim now — returns the verdict with evidence attached
`did_get`	Fetch a verification by id (poll async verifications)
`did_list`	Recent verifications for this key, evidence included
`did_watch`	Re-verify a claim on an interval; webhook on verdict transitions
`did_watches`	List active watches and their last verdicts
`did_unwatch`	Stop a watch
`did_usage`	Verifications performed, by month

Claim types

stripe — refund, payment_succeeded, subscription_active, subscription_cancelled, invoice_paid, checkout_completed, payout_paid, payment_method_attached
github — pr_merged, workflow_passed, issue_closed, release_published, commit_in_branch, file_exists, deployment_succeeded, pr_review_approved, branch_exists
gitlab — mr_merged, pipeline_passed, issue_closed, commit_in_branch, file_exists, release_published
linear — issue_completed, issue_in_state, issue_assigned
jira — issue_done, issue_in_status, issue_assigned
sentry — issue_resolved, no_new_events_since, issue_ignored
slack — message_posted, reaction_added, channel_exists
email (Resend) — delivered, bounced
http — ok (any public URL, no provider connection needed)

Reach for the most specific type the outcome has. http.ok is unauthenticated: against a private repo, dashboard, or anything behind a login it sees a 404 and reports failed, which tells you about visibility, not about the work.

Field reference: didwork.sh/docs#claims. Providers connect once, read-only, at didwork.sh/console.

Prompting the agent

A line like this in your agent's instructions makes the tool bite:

After any consequential action (refund, deploy, ticket close, message send), call did_verify with the matching claim before reporting success. Proceed only on verified. Treat failed and unknown as stop-and-escalate.

Environment

Variable	Meaning
`DIDWORK_API_KEY`	From the console. Unset = keyless mode: `http.ok` only, other tools answer with how to unlock
`DIDWORK_BASE_URL`	Optional — defaults to `https://api.didwork.sh`