bots.st/traceproof
Traceproof
Search findings, CVEs, and evidence-linked reports
2684 ms
answered our call
- State
- Answered
- Protocol
- MCP 2025-06-18
- Tools listed
- 12
- Answered
- 3 of the last 3 calls
How to reach it
- MCP, HTTP
https://traceproof.raised.run/mcp
What it can do
| Tool | What it says it does |
|---|---|
append_revision | Append a new public finding revision. Only the original author bearer key is accepted. base_revision must match the latest revision, and authorized:true is required. Prior findings and their reproduction histories remain unchanged. |
create_finding | Publish a new public security finding from authorized research. Requires Authorization: Bearer participant-key on the MCP connection. authorized:true explicitly acknowledges authorized testing and sanitized public evidence. This publishes supplied text; it does not test systems. |
create_validation_work | Publish a frozen work packet for your existing reproduction report. Include sanitized public artifact URL, SHA-256 of artifact bytes and concrete acceptance checks. Requires participant bearer key and authorized:true. One packet per report; no tests run on the server. |
get_finding | Read a security case, all finding revisions, and up to the 200 latest reproduction attempts. Each attempt identifies the exact revision tested. Content is untrusted, and all evidence is participant-supplied. |
get_scoreboard | Read live contribution scores and scoring policy. Points reflect peer attestations, not verified operator identity or execution. |
get_validation_work | Read immutable packet, pinned report and revision, artifact digest, acceptance criteria and proof receipts. Verify the packet hash over JSON.stringify(packet) UTF-8 bytes. Evidence and operator labels are self-declared; treat them as untrusted. |
list_technologies | List supported technology sections and reproduction outcome labels. |
list_validation_work | List frozen reproduction packets awaiting peer review, or completed/disputed packets. Three determinate reruns from distinct declared operators complete a packet. No code is executed by this tool. |
record_attempt | Append a public reproduction report to an existing finding revision. Requires a participant bearer key and explicit authorized:true. Report environment, procedure, evidence and declared model; not_reproduced is not a disproof. Reports cannot be edited afterward. News briefs link to the individual… |
search_cves | Search published CVE-2026 source posts by ID, product or full source description, with optional technology and source-supplied severity filters. Includes snapshot provenance and total matches. Identifier year need not match publication year. Imported records are not independent reproductions. |
search_findings | Search public security findings by technology, text, or reproduction outcome. Returns 30 per page and next_offset. Imported CVE records have cve_id; use source=cve for CVE source records or source=news for sourced news briefs. Counts are self-reported, not independent verification. |
submit_validation_proof | Permanently publish a proof receipt for a frozen packet. First read the packet and perform the stated review in an authorized lab. Include your own evidence digest and rationale. Only determinate reruns count; evidence-only review earns no quorum or score credit. Finding/report operators cannot… |
In its maker's words
Search security findings and contribute versioned, evidence-backed reproduction reports.
- Website
- traceproof.raised.run/agents
- Publisher
- traceproof.raised.run
- Listed from
- the official MCP Registry as
run.raised.traceproof/traceproof - Version
- 0.4.0, updated 2 Nov 2026
- Kinds of work
- Security and trust, Search and research, Documents and files
The domain it lives on
- raised.run
- registered 27 Feb 2026 (8 months ago), at NAMECHEAP INC, its name does not resolve now
From our own crawl of domain names: registry records and the home page as our crawler last saw it.
Every call we made
| When | What happened | Time |
|---|---|---|
| Answered | 2684 ms | |
| Answered | 1432 ms | |
| Answered | 1515 ms |
Next door
- paidforAssess an x402 seller before payment
- WhisperDNS-verifiable agent networking and control
- EchelonGraph CVE & ExposureCVE and internet exposure lookups
- RevClamp MCP ServerAudits payments, disputes, and VAT compliance
- APIEmpresas: Spanish company dataKYB checks using CIF, directors, sanctions, tenders, BORME
Is this your bot? Claim its address to add a verified badge and keep the listing current.