Security & Testing

stipple.sh

A server that forensically inspects financial documents for authenticity and tampering, classifies their type and origin, and manages verification warrants.

1 endpoint12 known toolsFirst detected July 31, 2026Last detected July 31, 2026

ENDPOINT 1

https://www.stipple.sh/mcp

No auth detected

MCP server metadata

Name: openwarrant
Version: 1.27.2

Capabilities

experimentalpromptsresourcestools

Server instructions

Stipple document verification. NO API KEY OR SIGNUP — every tool works immediately, rate-limited per IP per day. Cheapest call: pass a public `url` string; the server fetches it (nothing to download or encode). Otherwise inline `bytes_b64`. Routing: verify_document = is this file genuine (tamper / AI-generation / arithmetic / provenance). classify_document = what type of financial document (run FIRST when unsure). extract_fields = pull values out of it. verify_identity = Australian 100-point ID check over a document set. check_pack = is an application pack complete. redact_pii = mask PII before forwarding. screen_adverse_media = sanctions / PEP / negative-news on a person or org. check_document = free sha256 cache-check before a paid verify_document. get_warrant / submit_feedback = retrieve or rate a past result. Results include a `permalink` — a shareable public report to hand to your user. Scores are evidence-backed signals, not verdicts; tools abstain rather than guess. For 'did an AI write this prose' use the /mcp-aitext server; for 'are this report's citations real' use /mcp-verify.

Known tools 12

verify_document

Forensically inspect a document (PDF or image) for authenticity: tampering signs, AI-generation indicators, arithmetic reconciliation (financial docs), and provenance.

Inferred read-only

check_document

Cheap cache-check: has this exact document already been inspected?

Inferred read-only

get_warrant

Retrieve a stored warrant by id (e.g.

Inferred read-only

submit_feedback

Record thumbs up/down on a warrant's rating (the engine's precision-flywheel label source).

Inferred read-only

classify_document

Classify a FINANCIAL document's type and issuing country.

Inferred read-only

extract_fields

Extract structured FIELDS from a document (PDF or image) with a vision model.

Inferred read-only

verify_identity

Run an Australian identity check over a SET of identity documents.

Inferred read-only

check_pack

Check whether a SET of documents satisfies a checklist — completeness, cheaply.

Inferred read-only

redact_pii

Detect and MASK personally identifiable information in a document (PDF or image).

Inferred read-only

screen_adverse_media

Screen a person or organisation for ADVERSE MEDIA and SANCTIONS/PEP exposure (KYC/AML).

Inferred read-only

detect_ai_text

Estimate the PROBABILITY that a document's text was AI-GENERATED (LLM-written prose).

Inferred read-only

verify_references

Fact-check a document's REFERENCES and CLAIMS — built for AI-generated reports whose citations must be checked before they're trusted.

Inferred read-only

CONNECT WITH APPROVAL

Client installation

Review this server and its permissions before adding it. Secret placeholders must be set locally.

Codex

~/.codex/config.toml

[mcp_servers.openwarrant]
url = "https://www.stipple.sh/mcp"
enabled = true

Claude Code

.mcp.json

{
  "mcpServers": {
    "openwarrant": {
      "type": "http",
      "url": "https://www.stipple.sh/mcp"
    }
  }
}

Claude Desktop

Settings → Connectors → Add custom connector

Name: openwarrant
Remote MCP URL: https://www.stipple.sh/mcp

Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.

Cursor

.cursor/mcp.json

{
  "mcpServers": {
    "openwarrant": {
      "url": "https://www.stipple.sh/mcp"
    }
  }
}

Visual Studio Code

.vscode/mcp.json

Add to Visual Studio Code

{
  "servers": {
    "openwarrant": {
      "type": "http",
      "url": "https://www.stipple.sh/mcp"
    }
  }
}

Generic MCP

Client-specific MCP configuration

{
  "name": "openwarrant",
  "transport": "streamable-http",
  "url": "https://www.stipple.sh/mcp"
}

MCP Inspector

Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.

TRUST AND VERIFICATION EVIDENCE

Loading Trust v2 evidence…

Checking the associated registrable domain. The BuiltWith key remains server-side.

Indexed

Evidence is source-attributed and does not guarantee that a third-party server is safe. Risk labels are conservative metadata heuristics.