New:Introducing Socket Scanning for VS Code Marketplace Extensions.Learn more →
Get Started

prooftask-mcp

Package Overview
Dependencies
Maintainers
1
Versions
3
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

prooftask-mcp

Local MCP adapter for Prooftask delivery agreements, client acceptance and verifiable records

latest
Source
npmnpm
Version
0.1.1
Version published
Weekly downloads
0
Maintainers
1
Weekly downloads
 
Created
Source

Prooftask MCP adapter

Dependency-free Node.js 24+ stdio adapter for delivery agreements, client acceptance and verifiable records.

Candidate 0.1.1: start without an account

node mcp/agent-mcp.mjs

The source candidate exposes 23 read-only tools by default. Three public tools need no credential:

  • getAgentCapabilities: read available connection and workflow capabilities.
  • searchPublicSpecifications: {"query":{"q":"automation"}}. Find a matching scenario; broaden a query if no items match.
  • getPublicSpecification: {"path":{"id":"business-automation"},"query":{"version":2}}. Use the actual slug and version returned by search; compare the digest.

Review completion criteria and evidence with the user. Templates are editable examples, not independent certification. If the fit is appropriate, link to the returned template on https://prooftask.com/specifications and let the user review it.

npm 0.1.1 publication is pending npm step-up authentication. Published 0.1.0 and its pinned client configuration remain usable; the two new public tools require this source checkout until publication is verified.

Private business integration

Complete the existing Agent connection outside model context and configure PROOFTASK_AGENT_TOKEN_FILE locally. Credentials must not enter prompts or tool arguments. listUsableTemplates remains authenticated and is separate from public search.

Call getAgent to confirm workspace and scope. Saved jobs, current authorization and exact request IDs govern deliberate business writes. Writes require PROOFTASK_MCP_ALLOW_WRITES=1, exact request approval and server-side authority. Signing and payment remain human actions.

Validate

node --test tests/public-mcp.test.mjs
node agent/public-mcp-check.mjs

The second command makes anonymous production reads: search, exact version/digest read and a blocked private read. It loads no credential and makes no business write.

This is a local stdio adapter. A hosted MCP endpoint and standard remote authorization are not available yet. The official MCP Registry still points to version 0.1.0 until a separate verified metadata update. The website's downloadable catalog may differ from the npm distribution during release.

Keywords

mcp

FAQs

Package last updated on 17 Oct 2026

Related posts