invinoveritas
warningsapi.babyblueviper.com
AI-agent verifier: verdict committed before the outcome graded against it; /review, /ledger.
https://api.babyblueviper.com/mcpOAuthMCP 2025-06-18v1.13.0last checked 24 Aug 2026spoke MCP on 2 of 2 checks (30 days)initialize in 1165 msHow to authenticate
Checked against the endpoint by our probe on 24 Aug 2026. These are the capabilities the server advertises, not a prediction about any particular client.
| Scheme | OAuth |
|---|---|
| Issuer | https://api.babyblueviper.com |
| Dynamic client registration | ✓Advertised (RFC 7591) |
| Client ID Metadata Document | ✓Supported A client identifies itself by a URL to its own metadata, so no registration step is required. |
| PKCE | ✓S256 |
| Grant types | authorization_code, refresh_token |
| Scopes | mcp |
| Protected-resource metadata | ✓Published (RFC 9728) |
| Anonymous access | Handshake succeeds; 32 tools listable |
| Credentials demanded in prose | ✕review, memory_store These tools are listed anonymously and their own descriptions ask for an account or key, but no challenge is issued — so a client has nothing to act on and the refusal arrives as a tool error. |
| Documentation | https://api.babyblueviper.com/mcp |
What the probe found
2 of the 32 tools listed anonymously say in their own descriptions that they need an account or a key (review, memory_store), but the endpoint issued no WWW-Authenticate challenge. The requirement is stated only in prose, so a call reaches the tool and comes back as a tool error instead of an authorization step.
A cross-origin preflight came back without Access-Control-Allow-Origin, so the endpoint is reachable from native clients only — code running in a web page is stopped by the browser before a request is ever sent.
The server exposes a public surface before authorization: reason, decision, review, signals, markets_act, agent_economy_brief, audit_agent_readiness, seller_intel, memory_store, memory_get, memory_list, memory_search, memory_delete, workspace_list, workspace_delete, workspace_status, marketplace_buy, message_post, browse, execute, prove, witness, bounty_submit, bounty_get, residence_me, feedback_submit, feedback_list, feedback_vote, ledger, ledger_submit, conformance_certify, verify_proof.
Tools
Contract history
Get alerted when this contract changes
Depend on this server? Leave an email and get a message when a probe records a change — a tool removed, an argument newly required, an enum narrowed. Alerts are being built; signing up is what tells us to hurry.
Prefer a feed reader? This page's contract changes are also an Atom feed.
Status badge
Status for a README, from the last probe — cached an hour, so up to seven hours behind the endpoint. Links back to this page.
[](https://mcpi.app/servers/invinoveritas)Own this server?
Sign in to claim this listing by proving control of the endpoint.