{
  "about": "a2ally Verified is a past-tense record of factual verifications a2ally performed on registered external MCP servers: domain-control proofs, tool-definition fingerprints and publisher attestations, and Audited reviews. The tier a server shows is derived from those records at read time; no tier is stored.",
  "definition": "Verified, on this page, means only that the factual verifications listed below were performed and recorded on the dates shown. It states nothing else about this server.",
  "rulebook": {
    "version": "a2ally-verified-check-v1",
    "product_name": "a2ally Verified",
    "definition": "Verified, on this page, means only that the factual verifications listed below were performed and recorded on the dates shown. It states nothing else about this server.",
    "tiers": [
      {
        "id": "claimed",
        "name": "Claimed",
        "facts": "A publisher proved control of the registered server's domain by publishing the DNS TXT record a2ally issued (_a2ally-challenge.<domain>), and a2ally recorded that proof."
      },
      {
        "id": "fingerprinted",
        "name": "Fingerprinted",
        "facts": "The Claimed facts, plus: a2ally recorded a fingerprint of the server's tool definitions, the claimed publisher attested that fingerprint version, and the most recent re-probe matched it."
      },
      {
        "id": "audited",
        "name": "Audited",
        "facts": "The Fingerprinted facts, plus a completed Audited review recorded check by check against the published criteria, bound to the fingerprint version it reviewed. Same badge as the other tiers; the wording differs because the facts differ."
      }
    ],
    "cadence": {
      "reprobe_hours": 24,
      "claim_reverify_days": 30,
      "full_reproof_months": 12,
      "reattestation_window_hours": 72,
      "audited_term_months": 12,
      "unreachable_probes": 3,
      "unreachable_span_hours": 48
    },
    "statuses": [
      "none",
      "active",
      "not_current",
      "revoked",
      "expired"
    ],
    "ends_when": [
      "the domain-control proof is withdrawn, is not found at a scheduled re-verification, or is superseded by a later claim record",
      "a re-probe returns tool definitions that differ from the attested fingerprint and no new attestation is recorded within the 72-hour re-attestation window",
      "a standing security flag is recorded against the server (display is suspended at every tier while a flag stands)",
      "a revocation for this server is recorded in the signed revocations list",
      "an Audited term reaches 12 months without a re-review on record"
    ],
    "ledger_kinds": [
      "verified.issued",
      "verified.tier_changed",
      "verified.revoked"
    ],
    "never_asserts": "No tier asserts anything about what a tool does when called, whether calling it is advisable, the publisher's character or intentions, future behaviour, or any comparison with any other server."
  },
  "counts": {
    "registered_servers": 0,
    "claimed": 0,
    "fingerprinted": 0,
    "audited": 0,
    "not_current": 0,
    "revoked": 0
  },
  "endpoints": {
    "lookup": "GET /v1/verified/{slug}",
    "check": "GET /v1/verified/check?url=|hash=|slug=|domain= (exactly one)",
    "badge": "GET /v1/verified/badge/{slug}.svg",
    "attest": "POST /v1/store/external/{slug}/attest (claimed publisher's account key)",
    "registry": "GET /v1/store/external"
  },
  "generated_at": "2026-11-07T04:42:25.428Z"
}