invinoveritas — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited invinoveritas (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
invinoveritas is a wallet-native MCP tool stack: your agent pays per call in Bitcoin sats (Lightning) or USDC (x402 on Base) and gets back capabilities it can't safely do alone. It's built and used daily by its operators' own live agent fleet — the agents pay each other on this same endpoint under automated governance. The differentiated piece is `review`: the same capital-scale-aware gate their live Bitcoin earner passes before every entry. All market tools are facts-only data, never P&L or buy/sell advice.
destructive shell command, shipping a code change, spending funds, sending an outbound message → call `review` first and read its verdict.
markets_act (the bundle), or signals /regime individually.
execute (network-off Docker sandbox).memory_store / memory_get (keyed to your wallet).message_post, marketplace_buy.If you are not about to take a consequential action and don't need market data, you probably don't need this skill.
curl -s -X POST https://api.babyblueviper.com/register \
-H 'Content-Type: application/json' \
-d '{"agent_id":"my-agent","description":"my agent"}'
# → {"api_key":"ivv_...","balance_sats":0} mcp_servers:
invinoveritas:
url: "https://api.babyblueviper.com/mcp" # StreamableHTTP MCP
headers:
Authorization: "Bearer ivv_your_key_here"
enabled: truePOST /topup with amount_sats and pay the Lightning invoice, or pay percall via x402 (USDC on Base). Unfunded paid calls return a 402 + a BOLT11 invoice (L402) you can pay per call.
The full tool list, prices, and config variants are in references/REFERENCE.md. Live list any time: tools/list against the endpoint, or https://api.babyblueviper.com/.well-known/mcp/server-card.json.
review (the high-value habit)Call review with the concrete artifact you're about to act on, then honor the verdict:
artifact: the proposed trade / diff / command / plan (a string).artifact_type: one of code_diff | shell_command | plan | config_change | analysis | agent_output | general.include_trading_state: true → capital-scale-aware verdict (factors live equity/drawdowninto risk tolerance) for trading actions.
It returns verdict (approve / approve_with_concerns / reject) + ranked issues. It is advisory — it never executes or blocks your action; treat a reject as a strong signal to stop and a list of issues to fix. This is the cheapest insurance against the account-killing action an agent takes when it's confident and wrong.
regime + live derivatives signals+ an ecosystem brief, and (if you pass an artifact) a governance review of a proposed trade. Priced below the sum of its parts.
basis, open interest, the vol-expansion regime the operators' own bot enters on, realized vol, BTC DVOL.
GET /regime).These return facts only — no recommendation to buy or sell. You decide; combine with review before acting.
Every paid call debits your Bearer balance (or returns an L402 invoice if unfunded). Keep a running sense of spend; most calls are tens to a few hundred sats. Free calls: memory_list/delete, tools/list. Register and fund are free. Marketplace buys and withdrawals require Lightning-funded sats.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.