acqpath-distributionBLOCK
Check declared content rights before RAG, AI input, summarization, training or indexing. Signed RSL evidence via HTTP x402; no legal clearance.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
Check observed content-use declarations before AI input, RAG indexing, training or search. AcqPath returns signed evidence of observed RSL declarations for supported URLs. It does not grant a license, establish ownership or provide legal clearance. UNKNOWN never authorizes ingestion.
Partner integrations · 25-event Proof Sprint · Start integrating · Supported scope · Examples · MCP Registry
Fresh 0.02 USDC; deep 0.05 USDC under the current public contract. Read live capabilities for current coverage and verify the prepared signed quote before authorizing payment. Coverage is explicit and does not promise that every URL returns a purchasable or permissive report.
Start with the stable public endpoint
POST https://api.getacqpath.com/v1/rights/preflight with a resource URL and purpose. No AcqPath account, API key or private operator token. Public buyer journey · JavaScript/Python/TypeScript examples.
**Comp
27d1a64624f2OBSERVED · 2026-10-11Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add acqpath-distribution-review-tools --env ACQ_CHECKPOINT_PASSWORD=${ACQ_CHECKPOINT_PASSWORD} --env OBOT_WEBHOOK_SECRET=${OBOT_WEBHOOK_SECRET} -- npx -y [email protected]{
"mcpServers": {
"acqpath-distribution-review-tools": {
"command": "npx",
"args": [
"-y",
"[email protected]"
],
"env": {
"ACQ_CHECKPOINT_PASSWORD": "${ACQ_CHECKPOINT_PASSWORD}",
"OBOT_WEBHOOK_SECRET": "${OBOT_WEBHOOK_SECRET}"
}
}
}
}Exposed tools (1)
1 read · 0 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
acqpath_rights_quote | read | quote only |
Trust audit
BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | FAIL |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (1 observation(s))
- Network
- declared (6 observation(s))
- Shell
- declared (2 observation(s))
- Dependencies
- pinned
- Secrets in source
- found
Findings (25)
export function allowedTracked(path){return !/(?:^|\/)(?:\.npmrc|\.yarnrc\.yml|\.pypirc|\.git-credentials)$/.test(path)&&!/^config\/(?:operator|revenue|production|staging)\.json$/.test(path)&&!/(?:^|\if(!approvedSnippet)return {bytes,beacon:false};return {bytes:Buffer.from(occurrences===1?text.replace(approvedSnippet,''):text),beacon:occurrences===1};const normalized=path.endsWith('.html')?normalizeAnalytics(r.data,analytics.approvedEdgeSnippet):{bytes:r.data,beacon:false};const analyticsMatches=!path.endsWith('.html')||!analytics.requireBeacon||normalized.beacon;checks.push({path,url:r.url,http:r.http,hashMatches,securityHeaders,analyticsMatches,beacon:normalized.beacon,pass});resolved.set(new URL(r.url).pathname,r.http);const secret='local-synthetic-test-secret-change-this';
.acqpath-distribution-root
.gitleaks.toml
test('Git publisher refuses secret and private checkpoint file names',()=>{for(const p of ['.npmrc','.git-credentials','config/revenue.json','.private/a','out/rights-client/a','.local/test','keys/a.peimport {MAINNET,RightsClient} from '../../packages/rights-client/index.mjs';import {signJWS,signingKid} from '../../packages/rights-client/vendor/lib/jws.mjs';import {signEvidence,canonical,sha256,base64JSON,decode64JSON} from '../../packages/rights-client/vendor/lib/crypto.mjs';requireThat(!h.includes(":") && !/^\d[\d.]*$/.test(h) && !/^0x/i.test(h) && h.includes(".") && !["localhost", "metadata.google.internal"].includes(h) && ![".local", ".localhost", ".internal", ".test",const base='http://127.0.0.1:'+server.address().port;
test('loopback purchase UI requires exact host, origin and token',()=>{const headers={host:'127.0.0.1:1111',origin:'http://127.0.0.1:1111','content-type':'application/json','x-acq-local':'abc'};assertreturn JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(Uint8Array.from(atob(value), (x) => x.charCodeAt(0))));return Uint8Array.from(atob(s.replace(/-/g, "+").replace(/_/g, "/")), (c) => c.charCodeAt(0));
return json.loads(base64.b64decode(v, validate=True))
VerifyKey(b64url(key['x'])).verify(canonical(e['payload']).encode(), bytes.fromhex(e['signature']))
challenge = json.loads(base64.b64decode(header, validate=True))
POST `https://api.getacqpath.com/v1/rights/preflight` with a resource URL and purpose. No AcqPath account, API key or private operator token. [Public buyer journey](https://developers.getacqpath.com/p
<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="local-token" content="__LOCAL_TOKEN__"><title>AcqPath — one bu
At that earlier checkpoint, core PR9 was merged and production version 61b19442-bd51-46ec-be31-01422a07f877 was live. All 19 unpaid checks pass, including two genuine non-UNKNOWN prepared offers at 0.
`POST /platform/v2/x402/validate` probes a supplied HTTPS resource with GET or POST and reports preflight/simulation results; it neither pays nor indexes. Its documented body has resource and method,
Gates applied: no_behavioural_pass.
27d1a64624f2full audit observations/trust-audit/mcp-server/reflectme-source__acqpath-distribution.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-11 | 27d1a64624f2 | BLOCK | D | 69 | first audit |
Questions
What is the acqpath-distribution MCP server?
Check declared content rights before RAG, AI input, summarization, training or indexing. Signed RSL evidence via HTTP x402; no legal clearance.
What tools does acqpath-distribution expose?
1 in total: 1 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is acqpath-distribution safe to connect to an agent?
No — not without reading the findings first. The audit graded it D (69/100) and found 1 critical or high issue in the source. Each one is listed on this page with the file and line it is on.
What credentials does acqpath-distribution need?
It reads ACQ_CHECKPOINT_PASSWORD and OBOT_WEBHOOK_SECRET from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does acqpath-distribution run?
It speaks streamable-http, so it runs as a service you connect to over the network. It is published on npm as acqpath-distribution-review-tools at 1.0.0.
How current is this page?
The grade is for one exact copy of the source (27d1a64624f2), read on 2026-10-11. The repository is watched and re-audited when it changes.