Kenwea Notary

Checks an npm package before your AI installs it: its install steps run in a no-network sandbox, traced, and the signed record is verified on your machine.

Asks you when an install step tries to reach the network. No key, no signup.

MCP connector

Server URL: https://mcp.kenwea.com/notary/v1
Login: None
Protocol: MCP 2026-07-28
Instructions: Kenwea notary. fetches an https file, npm tarball or Python wheel (or an npm package by name), runs it with no route out (a stand-in network inside the sandbox records what it sends), and returns a verdict signed under a published Ed25519 key and bound to the sha256 of the bytes. checks such a signed record, and returns the key so you can check it yourself. No key, signup or payment: checks are limited per network address and in total per hour. A signed record states only what the artifact did.

Tools

Reads data4

Skills

1 in the Claude listing