dev.getstub/check

Registre officiel Sécurité

Verify what an AI agent did for someone, and what commercial influence the operator disclosed.

Installation

Ajoutez ceci à la configuration MCP de votre client (Claude Desktop : claude_desktop_config.json ; Cursor : .cursor/mcp.json ; VS Code et les autres utilisent la même forme « mcpServers »).

NPM package @getstub/mcp-check
Claude Code
claude mcp add check -e 'STUB_REGISTRY=<STUB_REGISTRY>' -- npx -y @getstub/mcp-check@0.1.0
Configuration JSON (Claude Desktop, Cursor, VS Code)
{
    "mcpServers": {
        "check": {
            "command": "npx",
            "args": [
                "-y",
                "@getstub/mcp-check@0.1.0"
            ],
            "env": {
                "STUB_REGISTRY": "<STUB_REGISTRY>"
            }
        }
    }
}

Variables d'environnement

  • STUB_REGISTRY Registry host to resolve receipts against. Defaults to https://api.getstub.dev

Documentation

Tirée du README du projet sur GitHub, actualisée chaque semaine. Les liens ouvrent GitHub.

Sommaire
  1. Stub recipes
  2. The recipes
  3. The badge above
  4. Start here
  5. When you are ready to deploy
  6. What a stub is
  7. The integration, in full
  8. Two things that keep coming up
  9. Install
  10. Free tier
  11. Links

Stub recipes

Working reference integrations for Stub, the allegiance receipt registry for AI agents.

Each recipe is a runnable agent with Stub wired in at the line where the ranking picks a winner. Clone one, run it, read the receipt it produces.

Every recipe here is a reference and a simulation. No real merchants, no real money, no real users. Nobody is running these in production, and each README says so. The point is to show exactly where a receipt belongs in code you recognise.

The recipes

RecipeWhat it showsLanguage
tool-loopThe primitive every framework wraps. A model, two tools, a loop.JavaScript
acp-commerceAllegiance lives upstream of checkout, in the ranking.JavaScript
mcpA public check server any agent can add, plus the operator issuing pattern.JavaScript
langchain-pythonThe same integration inside a LangChain agent.Python
vercel-ai-sdkThe biggest agent surface in JavaScript.JavaScript
insurance-adviceThe primitive outside commerce, with real stakes.Python

Every recipe runs against the live registry and issues real receipts, under an operator id you choose. The free tier is 1,000 stubs a month, so trying all six costs nothing. There is no offline mode and no mock registry: the only way to issue a stub is to issue one.

The badge above

These recipes are exercised against the live registry every day, and the badge is drawn from the receipts that run produces. It is not a build status: it says the reference agents ranked their catalogues, disclosed what influenced the result, and issued signed records anyone can open. Click it to read them.

If it ever goes quiet, the recipes stopped working and this repo is telling you so before you clone it.

Start here

If you are new to this, read tool-loop first. It is the smallest one and it carries the lesson the others repeat: the model does nothing wrong, the ranking decided.

cd tool-loop
npm install
export STUB_OPERATOR_ID=op_yourname_toolloop
npm run demo

Pick an operator id that is yours. The first run registers it and saves your keypair to .stub-keys.json, which is gitignored. Every run after that uses the same identity.

The demo prints the ranking your code produced, with the reason beside each item, and then a receipt link anyone can open.

When you are ready to deploy

The recipes generate a fresh keypair each run, which is right for reading and wrong for production. PRODUCTION.md covers what changes: persisting your identity, where the receipt belongs, what never goes in the free text, and the mistakes we made taking our own agent live.

What a stub is

When your agent acts for someone, it issues a small signed record: who asked, what was done, what money moved, and what commercial influence applied. The person served checks it at a neutral registry, not on your servers and not on ours.

Here is a live one before you install anything:

https://api.getstub.dev/check/72b4baee1719ec34acc5df5c514a12fd2e19b9a6776de4b45706988f765c77d8

The integration, in full

import { Stub, influenced } from '@getstub/agent';

const stub = new Stub({
  operator: 'Your Agent',
  declared: {
    paid_by: 'the user, subscription',
    conflicts: ['commission'],
  },
});

// at the line where your ranker picks a winner:
const inf = [];
if (pick.paid_placement) inf.push(influenced.placement(pick.seller));
if (pick.commission_pct) inf.push(influenced.commission(pick.commission_pct + '%'));

const receipt = await stub.issue({
  principal: user.id,        // hashed on your side, never sent raw
  agent: 'your-agent',
  requested: query,
  done: `booked ${pick.name}`,
  value_moved: { amount: pick.price, currency: 'USD' },
  not_disclosed: inf,        // an empty array is signed proof none applied
});

Python is the same shape:

from getstub import Stub, influenced

Two things that keep coming up

Nobody hand writes disclosures. Your ranking code already knows when a commission or a placement fee shaped a result, because it applied it. The receipt reads the same flags at the same line. It scales the way your ranking scales.

An empty disclosure is not nothing. It is a signature saying conflicts exist in your business and none of them touched this action. That is worth more than silence, and it is why honest operators have something to gain here.

Install

npm install @getstub/agent
pip install getstub

Both clients sign over the same canonical form, verified rather than assumed: the Python test suite signs a stub and has the registry code verify it.

Free tier

1,000 stubs a month. Checking is free forever, because charging the person being served to verify would defeat the point.

Copyright Stub 2026

Questions fréquentes

Qu'est-ce que dev.getstub/check ?

Verify what an AI agent did for someone, and what commercial influence the operator disclosed.

Comment installer dev.getstub/check ?

Il s'exécute sur votre machine. Dans Claude Code : claude mcp add check -e 'STUB_REGISTRY=<STUB_REGISTRY>' -- npx -y @getstub/mcp-check@0.1.0. Pour les autres clients, collez la configuration JSON de cette page dans leurs réglages MCP.

Faut-il une clé API pour dev.getstub/check ?

Son entrée au registre n'indique aucune clé ni secret obligatoire. Certaines fonctions peuvent tout de même demander un compte auprès du service auquel il se connecte.

dev.getstub/check est-il open source ?

Oui. Son code est sur GitHub sous licence MIT.

Qui maintient dev.getstub/check ?

Il est publié par getstub. AI.tn le référence sans le maintenir ni le recommander.

Issu du registre MCP officiel. Être listé n'est pas une recommandation : vérifiez le code et les permissions d'un serveur avant de lui donner accès à vos données.