Verfi Mcp Server — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Verfi Mcp Server (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
MCP server for Verfi — TCPA consent verification tools for AI agents.
| Tool | Description |
|---|---|
verfi_verify_consent | Check if a lead has valid consent. The primary tool for compliance verification. |
verfi_get_proof | Get full machine-readable consent proof for a session. |
verfi_search_session | Look up a session by Verfi ID with optional PII hash verification. |
verfi_claim_session | Claim a session (starts 3-year retention). |
verfi_unclaim_session | Release a claimed session. |
verfi_list_sessions | List your claimed sessions (paginated). |
verfi_update_expiration | Update a claimed session's expiration date. |
verfi_add_sdk | Get SDK integration snippet and setup instructions. |
Add to ~/Library/Application Support/Claude/claude_desktop_config.json:
{
"mcpServers": {
"verfi": {
"command": "npx",
"args": ["-y", "@verfi/mcp-server"],
"env": {
"VERFI_API_KEY": "sk_your_secret_key_here"
}
}
}
}Add to your MCP config:
{
"verfi": {
"command": "npx",
"args": ["-y", "@verfi/mcp-server"],
"env": {
"VERFI_API_KEY": "sk_your_secret_key_here"
}
}
}| Variable | Required | Description |
|---|---|---|
VERFI_API_KEY | Yes | Your Verfi secret API key (sk_...) |
VERFI_API_URL | No | API base URL (defaults to https://api.verfi.io/tenant/v1) |
Developer: "Check if lead VF-a1b2c3d4 has valid TCPA consent"
Agent calls: verfi_verify_consent({ verfiID: "VF-a1b2c3d4" })
→ { consent_valid: true, tcpa_compliant: true, proof_url: "..." }Your API key's scopes determine which tools are available:
sessions:search → verfi_search_sessionsessions:proof → verfi_get_proof, verfi_verify_consentsessions:claim → verfi_claim_sessionsessions:unclaim → verfi_unclaim_sessionsessions:expiration → verfi_update_expirationGenerate API keys in the Verfi dashboard under Integration > API Keys.
MIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.