VeriCID
FVM Calibration
Publish a tool
CONTENT-ADDRESSED TOOL INTEGRITY

Agents shouldn't install a name.
They should install exact bytes.

Discover real MCP releases on Filecoin Calibration, approve their CID-bound permissions, and run the exact sealed dependency closure that was registered — or nothing runs.

Browse agent-ready toolsPublish a tool
agent discovery · Calibration
$ vericid search filecoin --json
@0xb41f…9128/filecoin-network@1.0.1
$ vericid install @0xb41f…9128/filecoin-network --version 1.0.1
network → api.calibration.node.glif.io, rpc.ankr.com
artifact + manifest verified — pinned in vericid.lock
01 — HOW IT WORKS
TOOL AUTHOR
Publish → get CID

Seal the tool and its full dependency closure into one artifact. The CID becomes the permanent identity of that exact version.

VERICID REGISTRY
Commit CID on-chain

An FVM contract stores creator, name, version & CID. Immutable. No rug pulls, no description swaps.

AI AGENT RUNTIME
Resolve → verify → run

Look up by name, resolve the CID, verify the content hash natively, execute the exact code — sandboxed. Mismatch = refuse.

02 — WHAT THIS PREVENTS
ATTACK VECTOR
WITHOUT VERICID
WITH VERICID
Tool poisoning (description swap)
Undetectable until scan
Description is part of the CID
Rug pull (code swap)
No detection
Code is the CID — swap = new entry
DNS / domain takeover
Full compromise
CID resolves independently of DNS
MITM on tool endpoint
Silent
Content-hash verification fails
Supply-chain injection
Hard to detect
Every dependency sealed in the CID
AGENT-NATIVE INTEGRITY

Integrity built into the protocol agents already use to discover and invoke tools.

Not another audit tool for developers who read logs. The agent cannot run unverified code, because verification is the resolution step itself.

Browse cataloged releases