Skip to main content

Verify MCP servers with evidence you can keep

Hardproof gives you deterministic verification for MCP servers: five dimensions, a usage overlay, explicit score truth, and stable artifacts you can store, diff, and gate in CI.

What you get

  • Scan report: hardproof scan emits scan.json and scan.events.jsonl with five dimensions plus a usage overlay.
  • Live scan UX: interactive terminals show live progress in rich mode and an alternate-screen TUI (--ui rich / --ui tui).
  • CI gate: hardproof ci fails builds when verification fails or policy thresholds are crossed.
  • Replay and trust evidence: replay sessions, trust summaries, and bundle checks keep releases reviewable and reproducible.
  • Rendered outputs: export summary, HTML, and SARIF from an existing scan report with hardproof report.

Score truth

Hardproof separates a useful scan from a publishable full score.

  • Publishable: overall_score is present and backed by enough weighted dimensions, including trust evidence when required.
  • Partial: overall_score stays null, partial_score carries the numeric signal, and partial_reasons explains what is missing.
  • Insufficient: the scan does not have enough evidence to defend any numeric score yet.

Learn more

Relationship to x07

Hardproof is built with x07, but you do not need to adopt x07 to use it. If you want to build MCP servers in x07, start with x07-mcp.

Public beta status

This is a public-beta verifier. The report format is now stable enough to document, but the score methodology and thresholds may still evolve as we collect real-world feedback. If you hit install friction or confusing output, file an issue so we can fix it quickly.

https://github.com/x07lang/hardproof/issues/new/choose