← all claims · /mcp
xrpl.mcp.signed_snapshot_verify
verify_snapshot_signature is stateless — re-derives leaf hash, checks Ed25519 signature against pinned pubkey, checks audit path against chain root, returns verify_result:bool + public_key_fingerprint + issues[].
green
Sovereign source — our own infrastructure (local rippled node or Ed25519 signing key). Currently sellable through the future paid tier and signable in the daily snapshot chain.
What this claim says
- label
- verify_snapshot_signature is stateless — re-derives leaf hash, checks Ed25519 signature against pinned pubkey, checks audit path against chain root, returns verify_result:bool + public_key_fingerprint + issues[].
- page
- /mcp
- claim id (yaml)
signed_snapshot_verify
- behavior
STEP_CHANGE
- Layer 3 source
cryptographic-signature
Risk note
No shared state with the writer, no I/O beyond loading the pinned public key — same verification path a third-party verifier would run. Accepts either the full MCP envelope ({data, proof, server}) or the bare signed payload dict. Malformed input (missing required fields, non-dict envelope, None) raises rather than returning verify_result=False — malformed input is a caller bug, not a verification result. Freshness_contract="≤ 5min" reflects in-process stateless check, not data staleness.
Evidence — code paths that back this claim
- mcp_tools_signed_snapshot.py:tool_verify_snapshot_signature
- signed_snapshot.py:verify_envelope
- signed_snapshot.py:load_public_key