ai.tunnelmind/sigil (Model Context Protocol Server)

This MCP server, Sigil (TunnelMind), provides programmatic-advertising supply verification via an agent-callable tool surface. It supports verification across ads.txt, schain, and ATAP receipts, and includes cross_lens_verify. It is part of TunnelMind’s intelligence layer used by agents before they trust the internet.

🛠️ Key Features

Verify ad-tech supply paths using ads.txt
Validate schain
Check ATAP receipts
Run cross_lens_verify
Exposes a Sigil MCP-tool surface (P35 Shape B)
Provided as one Cloudflare Worker with two hosts

🚀 Use Cases

Supply-chain verification in programmatic advertising workflows (P35)

⚡ Developer Benefits

Standardizes agent access to Sigil verification functions through MCP
Uses a “three lenses” approach: Sigil, plus related lenses (Scry and Tracker Data API) referenced in the excerpt

⚠️ Limitations

Described tool count is 12; specific tool names beyond the listed verification capabilities are not provided

sigil-mcp

Part of TunnelMind — the intelligence layer agents call before they trust the internet. Three lenses on one signed corpus: Scry (who is attacking?) · Sigil (who can you trust?) · Tracker Data API (who is watching?). This repo serves: Sigil — the MCP-tool surface agents call to verify ad-tech supply paths. See tunnelmind.ai.

MCP server for Sigil — TunnelMind's agentic supply-chain verification layer for programmatic advertising (P35).

Sigil ships as a separate MCP surface (P35 Shape B). One Cloudflare Worker, two hosts:

Host	Serves
`mcp.sigil.tunnelmind.ai/mcp`	Streamable-HTTP MCP endpoint (JSON-RPC 2.0)
`sigil.tunnelmind.ai/.well-known/mcp.json`	Discovery card (`mcp-server-card/1.0-draft`)

The Worker is a thin agent-facing wrapper: every tool proxies the live Sigil API at data.tunnelmind.ai/v1/sigil/* over a Cloudflare service binding. The Authorization header on an MCP request is forwarded — a paid TunnelMind key gets its tier, anonymous callers get the free tier. Discovery is unauthenticated.

Tools

Tool	Purpose
`cross_lens_verify`	A2 — fused Scry × Sigil verdict on one node key (IP / domain / entity / ASN). The moat: both lenses, one answer.
`sigil_verify_supply_path`	Composite pre-bid trust verdict + signed token
`sigil_verify_ads_txt`	ads.txt seller-authorization check
`sigil_verify_ip_type`	Datacenter / residential / mobile IP classification
`sigil_verify_app_bundle`	App-store bundle-ID verification
`sigil_verify_supply_chain`	Full OpenRTB SupplyChain (schain) verification
`sigil_score_entity`	Pre-computed entity trust score + 14-day trend
`sigil_score_batch`	Trust scores for up to 200 entities
`sigil_atap_register_ait`	Register an ATAP AIT for a media-buyer agent
`sigil_atap_witness`	Witness a bid/budget event into the attestation chain
`sigil_generate_receipt`	Generate the ATAP compliance Receipt ZIP

Published in the official MCP registry as ai.tunnelmind/sigil.

MCP methods: initialize, tools/list, tools/call, ping.

Develop

bash

npm install      # wrangler
npm test         # tool-definition checks
npm run dev      # local
npm run deploy   # -> Cloudflare

License

Apache-2.0.

node	string	required	The node to verify. IPv4, domain, ASN (AS-prefixed or numeric), or entity_slug.
weights	object	optional
thresholds	object	optional
ait	string	optional	Optional ATAP AIT id to witness this verification under.

supply_path	object	required
ait	string	optional	Optional ATAP AIT id to witness this verification under.

publisher_domain	string	required
exchange_domain	string	required
seller_id	string	required
resolve_chain	boolean	optional

bundle_id	string	required
platform	string	required
claimed_developer	string	optional

schain	object	required	OpenRTB SupplyChain object.
site_domain	string	optional
app_bundle	string	optional

Sigil

ai.tunnelmind/sigil (Model Context Protocol Server)

🛠️ Key Features

🚀 Use Cases

⚡ Developer Benefits

⚠️ Limitations

Topics

cross_lens_verify

sigil_verify_supply_path

sigil_verify_ads_txt

sigil_verify_ip_type

sigil_verify_app_bundle

sigil_verify_supply_chain

sigil_traverse_supply_chain

sigil_score_entity

sigil_score_batch

sigil_atap_register_ait

sigil_atap_witness

sigil_generate_receipt

sigil-mcp

Tools

Develop

License

Install

Remote endpoint

Related servers

domain	string	required	Publisher domain to traverse.
limit	integer	optional	Max paths returned (default 200, cap 500).

profile	string	required
operator	string	required
agent_type	string	optional
capabilities	array	required
constraints	object	required
attestation_policy	object	required
expires_at	string	required

ait	string	required
event_type	string	required
payload	object	required