
Company News
Socket Joins New OpenJS Program to Fund Node.js Security Work
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.
veritap-mcp
Advanced tools
MCP server for checking whether a real-world fact can be verified before an AI agent acts on it — businesses, listings, objects, places. Free to check, no auth.
Check whether a real-world fact can be verified — before your agent acts on it.
An MCP server for checking whether a real-world fact can be verified before an agent acts on it — businesses, listings, objects, and places. Free to check, no auth, read-only. Safe to call speculatively in the middle of planning.
It does not answer questions about individual people. Identity, employment, tenancy, background, and whereabouts claims are refused as a matter of policy.
Claude Desktop / any stdio MCP client:
{
"mcpServers": {
"veritap": {
"command": "npx",
"args": ["-y", "veritap-mcp"]
}
}
}
Remote clients can skip the shim and connect straight to
https://veritap.dev/mcp (Streamable HTTP).
Agents constantly hit steps resting on facts they cannot confirm from text: is this supplier still trading, does this listing hold together, was the work actually done. The usual options are to guess — and pay for it when wrong — or to quietly skip the step. This gives you a third option that costs nothing: ask whether the fact is checkable at all, and what checking it would cost.
| Tool | Use it when |
|---|---|
check_feasibility | Any step depends on a physical-world fact you cannot confirm. Free, read-only. |
triage_unknowns | You have several uncertainties and do not yet know which are worth chasing. Batch them all in one call. |
plan_verification | You have a multi-step plan and want to know which steps rest on unverified facts. |
confirm_before_purchase | An irreversible spend where the counterparty was only seen online. |
check_before_relying | A step rests on something you only inferred, and being wrong is expensive. |
check_physical_condition | The decision turns on an item being in the claimed condition. |
triage_unknowns classifies each uncertainty as answerable by you from public
sources (naming the source), verifiable here (with price and turnaround),
or not determinable (with advice on planning around it). Items you can
settle yourself are routed away rather than sold to you — that is deliberate.
Nothing is purchasable and no payment is taken. One claim type is answered right now, for free. The other is in scope but not yet answered, and its price is indicative only — not an offer to sell.
| Claim type | Status | Price |
|---|---|---|
BUSINESS_EXISTS_AND_OPERATING — a named business exists, is operating, contact details valid | answered now, seconds | free |
LISTING_IS_CONSISTENT — a listing is internally consistent, corroborated, free of common red flags | in scope, not yet answered | ~$6 indicative |
For business-exists claims, check_feasibility returns the evidence bundle
itself — there is no second, paid call. For anything it cannot answer it says
so plainly, which is still worth having: it settles whether to design the step
around the fact or wait.
Verification is multi-source desk research returning an evidence bundle: the sources consulted (GLEIF, SEC EDGAR, Wikidata, site liveness), the method used, and a confidence reflecting how well those sources actually agree. Results report observations with dates — "the listed phone number was disconnected as of 11 August 2026" — never characterisations like "scam" or "fake". A low confidence for a small local business means the registries are thin on it, not that it is suspect.
Anything outside those two returns an honest not_yet, the closest in-scope
alternatives, and advice on how to proceed. Those requests are logged, and what
gets asked for is what gets built next. Asking for something unsupported is
how it becomes supported.
Desk verification only, and nothing is purchasable. Nobody is dispatched to physically inspect anything, so "is the item actually on the lot today" is not answerable here at any price. One claim type is answered today, one is not. We would rather name the boundary than imply a capability that does not exist — or hide one that does.
| Variable | Default |
|---|---|
VERITAP_ENDPOINT | https://veritap.dev/mcp |
VERITAP_TIMEOUT_MS | 60000 |
The shim is a zero-dependency passthrough — it forwards JSON-RPC frames without interpreting them, so it never falls out of sync with the endpoint's protocol version.
Requests are recorded and analysed in aggregate to decide what gets supported next; that is the point of the service. Caller identifiers are pseudonymous hashes of connection metadata, raw request text is discarded after 90 days, and individually identifying caller data is never sold or shared. Refused people-claims are not stored with their text at all.
Full terms: https://veritap.dev/terms · Deletion: privacy@veritap.dev
MIT licensed. https://veritap.dev
FAQs
MCP server for checking whether a real-world fact can be verified before an AI agent acts on it — businesses, listings, objects, places. Free to check, no auth.
The npm package veritap-mcp receives a total of 18 weekly downloads. As such, veritap-mcp popularity was classified as not popular.
We found that veritap-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Company News
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.