Identity Quality Assurance · MCP endpoint

`mcp.iqa.org`

The IQA attestation primitives — derived intent addressing (ROUTE_SHARD) and AE-128 envelope verification — served as stateless Model Context Protocol tools over streamable-HTTP. Every call runs offline. Nothing is stored. Malformed input is never normalised: REJECT is a result.

Endpoint

URLhttps://mcp.iqa.org/mcp

Transportstreamable-HTTP (stateless)

Implementationiqa-mcp 1.0.3 · iqa-org 1.3.2 reference

Key custodynone — keys are caller-supplied, per call

Sessionsnone — every request is independent

Tools

derive_route_shard(authority)

SHA-256 of the exact authority string, first 16 bytes, lowercase hex. Deterministic, offline, action-independent. No lookup, no registry.

parse_envelope(envelope_hex)

Structural decode of one AE-128 frame (128 bytes, hex). No key needed. Fails closed on every layout rule.

verify_envelope(envelope_hex, organ_key)

Full verification: constant-time HMAC over the whole frame with the attestation field zeroed, plus the lease check. REJECT is a result, not an error.

published_vector()

The published AE128-VECTOR-1: authority, documented test organ key, lease, and the full frame as hex. Feed it into verify_envelope and you must get [PASS], byte for byte.

Connect

{
  "mcpServers": {
    "iqa": {
      "url": "https://mcp.iqa.org/mcp"
    }
  }
}

Any MCP client that speaks streamable-HTTP can attach to the URL above. The stdio distributions (pip install iqa-mcp · npm i @aicent/iqa-mcp) remain unchanged; this endpoint is an additional entry point, not a replacement.

Standing rules

No key custody The endpoint never stores, logs, or holds any organ key. Verification material is caller-supplied, per call, and forgotten.

Fail closed A flipped byte anywhere breaks the MAC. Malformed input is a structured REJECT, never a normalised partial answer.

Stateless No sessions, no accounts, no state. Each request is verified from its own bytes, independently.

Byte-replayable AE128-VECTOR-1 is public. Any client can reproduce [PASS] byte for byte, offline, forever.

AE128-VECTOR-1

The published conformance vector, verbatim from the iqa-org 1.3.2 reference implementation:

authority : f3b2a1c4.pillar.example
organ_key : PLSF-TEST-ORG-KEY-00012345678901
lease     : 1798761600
standing  : radiant
organ     : ORG-TEST
nonce     : 1
frame_hex :
4951414501010000000000006b36ec80557c8154d3780cb78cc5fa1bd72b331c4bd14b6ae7b00904986294a32
6a0f0255847184ff2c9185539d4863efb84596a4f52472d544553540000000000000001020000000000000000
0000000000000000000000000000000000000000000000000000000000000000000000000000000000

verify_envelope(frame_hex, organ_key) -> [PASS] standing=Radiant

Sealed · 2026-11-13 · page sha256 2e7ead9dc4797a20… (seal line excluded) · rttp://2e7ead9d.site.iqa · iqa://2e7ead9dc4797a20b9e923644779b0db.forge.iqa · artifact: mcp-site-20261113b.tar.gz