Bernstein is a remote MCP server that gives an AI agent 12 tools, among them explain_receipt, explain_trace_mapping, get_preset. It answers at https://mcp.bernstein.run/mcp over streamable HTTP, and it listed its tools to an anonymous client, so no sign-in was needed for that. Our probes reached it 4 of 4 times since 23 September 2026; the last check, on 6 November 2026, succeeded.
Verifies Bernstein run receipts and hash chains; lists the shipped presets and adapters. Read-only.
Description as the publisher wrote it.
| Tool | What it does |
|---|---|
explain_receipt | Verify a run receipt and narrate the result in plain language: what the run recorded, which chains recomputed, where the first divergence is, and what an auditor can and cannot conclude without the producing install's keys. Inputs: receipt |
explain_trace_mapping | How a bernstein run maps onto a TRACE v0.2 Trust Record: one row per claim with the journal field it is sourced from and the rule that derives it. Pass a run receipt to fill in the rows its embedded journal can answer (subject, iat, model, Inputs: receipt |
get_preset | Every field of one compliance preset as bernstein v3.19.2 resolves it. Inputs: name |
list_adapters | The agent adapters bundled with bernstein v3.19.2: adapter name, the binary it drives, the module that implements it. |
list_presets | The compliance presets bernstein v3.19.2 ships, with the switches each one turns on. |
server_info | Identity, version, and request limits for this MCP server. |
trace_verify_record | Verify a TRACE v0.2 Ed25519 Trust Record locally with optional caller public key and freshness controls. Nothing is fetched. Embedded keys establish internal consistency only; revocation is not affirmed. Inputs: record, trusted_key, now, max_age_seconds |
verify_agent_manifest | Agent Manifest v0.2 conformance checks on one manifest, stateless, no account: schema (vendored agent-manifest.schema.json), profile context, version, canonicalization, COSE envelope signature (Ed25519, key identified by kid in the protecte Inputs: manifest, trustRecord |
verify_chain | Walk bernstein chain rows and recompute every link: journal rows (event_hash), lineage spine entries (entry_hash) or audit events (prev_hmac linkage). The row kind is detected from the fields, or pass `kind` explicitly. Reports the first di Inputs: entries, kind |
verify_delegation_chain | TRACE v0.2 delegation-chain conformance, stateless, no account: index every Trust Record by the RFC 8785 digest of its complete form, start at the leaf, follow delegation.parent_record_hash to the root, and check each hop's signature, the r Inputs: records, context |
verify_receipt | Recompute every hash chain a bernstein run receipt embeds (journal, lineage spine, optional audit range), rebuild the signed subject from the recomputed heads, and check the Ed25519 signature with the key the receipt carries. Needs no secre Inputs: receipt |
verify_trace_record | TRACE v0.2 conformance checks on one Trust Record, stateless, no account: schema (vendored trace-claim.json), profile, subject URI, software-only runtime rule, policy digest, public-only confirmation key, the embedded signature (EdDSA, ES25 Inputs: record |
Every block below points at https://mcp.bernstein.run/mcp. Pick your client and copy.
claude mcp add --transport http bernstein https://mcp.bernstein.run/mcp
{
"mcpServers": {
"bernstein": {
"command": "npx",
"args": ["-y", "mcp-remote", "https://mcp.bernstein.run/mcp"]
}
}
}{
"mcpServers": {
"bernstein": {
"url": "https://mcp.bernstein.run/mcp"
}
}
}{
"servers": {
"bernstein": {
"type": "http",
"url": "https://mcp.bernstein.run/mcp"
}
}
}{
"context_servers": {
"bernstein": {
"url": "https://mcp.bernstein.run/mcp"
}
}
}{
"mcpServers": {
"bernstein": {
"serverUrl": "https://mcp.bernstein.run/mcp"
}
}
}{
"mcpServers": {
"bernstein": {
"url": "https://mcp.bernstein.run/mcp"
}
}
}name: Bernstein
version: 0.0.1
schema: v1
mcpServers:
- name: Bernstein
type: streamable-http
url: https://mcp.bernstein.run/mcp{
"mcpServers": {
"bernstein": {
"httpUrl": "https://mcp.bernstein.run/mcp"
}
}
}{
"mcpServers": {
"bernstein": {
"type": "http",
"url": "https://mcp.bernstein.run/mcp"
}
}
}{
"mcpServers": {
"bernstein": {
"url": "https://mcp.bernstein.run/mcp"
}
}
}goose://extension?url=https%3A%2F%2Fmcp.bernstein.run%2Fmcp&type=streamable_http&id=bernstein&name=Bernstein
It answered our last check on 6 November 2026 in 260 ms. Over 4 checks since 23 September 2026 it answered 4. Status here comes from Neuronto's own probes, not from the publisher.
12, as returned by the server's own tools/list on 9 November 2026: explain_receipt, explain_trace_mapping, get_preset, list_adapters, list_presets, server_info, trace_verify_record, verify_agent_manifest, and 4 more.
It answered our last check on 6 November 2026 in 260 ms. Over 4 checks since 23 September 2026 it answered 4.
Put the server under mcpServers in ~/.cursor/mcp.json with the URL https://mcp.bernstein.run/mcp. The exact JSON is above, with the same setup for Claude Code, Claude Desktop, VS Code, Windsurf, Zed, Gemini CLI and the rest.
It listed its tools to an anonymous client, so reading the tool list needs no key. Individual tools can still ask for credentials in their own inputs.
Publisher: io.github.sipyourdrink-ltd. Endpoint host: mcp.bernstein.run. ARD identifier: urn:air:io.github.sipyourdrink-ltd:mcp:bernstein-mcp.
First indexed 18 September 2026. The tools are exactly what the server returned; nothing on this page
is inferred from its name. Ranking in Neuronto search is never for sale.