POPCORN MCP is answering right now. Last checked 7 min ago. 302 installs a week from npm. It exposes 7 tools. Last commit 29 Oct 2026.
Witness layer for agents: signed receipts binding a fingerprint to a witnessed time. $0.001.
We read the source, 2 d ago · tools taken from the live server · rules 995398eba69f
What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.
for (const [name, digest] of Object.entries(ledger.sources)) assert.equal(hash(fs.readFileSync(path.join(repo, name))), digest, name);
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.
Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 7 min ago.
claude mcp add popcorn-mcp --transport http https://767-2676.com/mcp
https://767-2676.com/mcp
[mcp_servers.popcorn-mcp]
url = "https://767-2676.com/mcp"
{
"mcpServers": {
"popcorn-mcp": {
"url": "https://767-2676.com/mcp"
}
}
}
{
"servers": {
"popcorn-mcp": {
"type": "http",
"url": "https://767-2676.com/mcp"
}
}
}
Read directly from the server with tools/list, grouped by what they act on.
If a tool disappears, we record the date.
popcorn_catalog
popcorn_hash
popcorn_sample
popcorn_time
popcorn_verify
popcorn_verify_v2
popcorn_witness
| URL | Transport | State | Latency | Checked |
|---|---|---|---|---|
| https://767-2676.com/mcp | streamable-http | answering | 258 ms | 7 min ago |
MCP server for verifying receipts: POPCORN-WITNESS/2.0 signature, digest, and time. Free, read only.
Signed receipts + horizon statements proving whether an event-triggered agent actually woke.
Portable signed records for agent, API, MCP, and cross-runtime interactions.
Query-intent privacy for agents: threshold cloaking with signed exposure receipts.
Real MCP handshake witness graded per-client, signed expiring receipt.
Evidence-bound stopping for agents: judgment ledger, binding futility verdicts, signed receipts.
The record layer for the machine age: counter-signed receipts and agent action records.
Runtime verification MCP server: fail-closed checks for agent tool calls, signed evidence receipts.
Answers built from our own checks of this server.