HORIZON SHIELD: construction and renovation estimate auditor (Japan)
About
Independent auditor for construction estimates in Japan. Flags overcharges with verifiable OpenTimestamps receipts. Remote MCP, 13 public tools, no auth. Open data: JCCDB 65,729 items (CC BY 4.0).
Details
- Author
- ogasurfproject-jpg
- Downloads
- 288
- Transport
- SSE
- Categories
- Other, Security, Finance
Jump to
Setting up with Highlight
This MCP is not yet compatible with Highlight’s one-click setup. However, you can still use it with Highlight by following these steps:
- Download and install Highlight from highlightai.com/download
- Navigate to the plugins tab and select "Add Custom Plugin"
-
Configure the plugin with the settings below
Plugin Name
HORIZON SHIELD: construction and renovation estimate auditor (Japan)Command (node, npx, python, etc.)Please refer to the README for specific instructions on how to obtain API keys or other required environment variables.
- Enable "Start Automatically" if you want the plugin to start when Highlight launches
From the repository
{
"mcpServers": {
"horizon-shield": {
"type": "streamable-http",
"url": "https://mcp.horizonshield.dev"
}
}
}
Claude Desktop / Cursor
Paste into your MCP client config file to install this server.
{
"mcpServers": {
"horizon shield: construction and renovation estimate auditor (japan)": {
"horizon-shield": {
"type": "streamable-http",
"url": "https://mcp.horizonshield.dev"
}
}
}
}McpServers
{
"horizon-shield": {
"type": "streamable-http",
"url": "https://mcp.horizonshield.dev"
}
}Verifiable construction estimate auditing for AI agents
Don't trust the estimate. Verify it.
NENRIN: tree rings for AI facing services
A tree adds one ring a year. Nobody can paint one in afterwards. NENRIN gives that property to software services.
In one thirty day window, measured 2026-08-17, this server appeared in93,983AI search results. How many of those became a call from outside, we cannot say. The usage counter deliberately stores no IP addresses, so it cannot separate our own automated checks from external traffic. An earlier version of this paragraph said the answer was0. This instrument cannot establish that, so the claim is withdrawn here rather than quietly deleted. Discovery is solved. Choice is not. An agent picking between 90,000 servers can only read what each vendor wrote about itself. NENRIN adds the missing layer: records of conduct that the vendor did not author and cannot delete.
- Open witnessing.Anyone can measure any endpoint and submit the walk to the public ledger under their own name and vantage. The operator holds no veto: acceptance is mechanical schema checking, and the code that enforces this is in this repository.
- Discrepancies are the product.When two witnesses report incompatible observations of the same target, the disagreement itself becomes a permanent, citable record. The founding one is real:NENRIN_DISCREPANCY_0001, two honest witnesses, one target, both correct.
- Rings.Each month the accepted records bundle into a ring that carries the hash of the previous ring, timestamped to Bitcoin. Eighteen months of rings cannot be created in an afternoon, by anyone, including us.
The specification is anchored on the public ledger as entry 19 (sha256 9ccba2e325fd2a555fcdb2dec519b8c6bf7a669064674846aea98ecfff824e3d):NENRIN_SPEC_v1.md. It names its own prior art (Certificate Transparency, Rekor, in-toto, SLSA, OpenTimestamps), states exactly which combination is claimed as new, and invites refutation into the same ledger.
curl -s https://ledger.horizonshield.dev/witness
We are the first test subject under our own rules. The ledger keeps the record of our gate failing its own test, and the full 522 incident that started all of this. Unflattering records stay.
If a register that cannot delete criticism of its own operator is infrastructure you want to exist, star this repository.Stars are how researchers and agent platforms find it. The rings accumulate either way. They accumulate faster with witnesses.
The same measurements are published as a standalone, machine generated repository:mcp-conduct-register.
Nobody selects the rows there either. A script rebuilds the table from the public API once a day, and the same run writes aregister.jsonsnapshot so an agent can read the register without parsing Markdown. It carries aCITATION.cff, so the register can be cited the way a dataset is cited, and anllms.txtthat states in plain words what the register is and, more importantly, what it is not.
JIDEC: verify this project without trusting it
The verification process behind HORIZON SHIELD's results is published as a Bitcoin anchored, append only public ledger. You do not have to trust us: fetch the anchored bytes, hash them yourself, and check the timestamp.
- Start here:https://ledger.horizonshield.dev/llms.txt
- Ledger index:https://ledger.horizonshield.dev/ledger
- Machine readable catalog (RFC 9727):https://ledger.horizonshield.dev/.well-known/api-catalog
- Read only MCP endpoint:https://jidec.horizonshield.dev/mcp
curl -s "https://ledger.horizonshield.dev/ledger/5?format=raw" | shasum -a 256
What this proves and what it does not is stated by the ledger itself at/healthundertransparency, including that OpenTimestamps has no RFC, ISO or eIDAS standing.
The previous hostnames,hs-ledger.oga-surf-project.workers.devandhs-jidec-mcp.oga-surf-project.workers.dev, still answer and always will. Records already anchored to Bitcoin cite them, so retiring them would make past receipts unverifiable.
A homeowner commissioning construction work cannot reliably judge whether a quote reflects a fair price. This is a textbook credence good problem. This MCP server makes a third party fair price reference callable and verifiable by software, so an agent can check a number instead of trusting it.
- Protocol:Model Context Protocol (MCP)
- Transport:MCP over Streamable HTTP (JSON-RPC 2.0). The legacy SSE transport is not implemented; GET on /sse answers 405 sse_not_supported.
- Endpoint:https://mcp.horizonshield.dev
- Access:read only, no API key required
- Data region:Japan (JPY), built on the open JCCDB dataset (65,520 line items)
This is a remote MCP server. Point any MCP client at the endpoint.
{ "mcpServers": { "horizon-shield": { "command": "npx", "args": ["-y", "mcp-remote", "https://mcp.horizonshield.dev/"] } } }
If your client supports remote MCP servers directly, use the endpoint URL above.
audit_estimate(work: "外壁塗装 30坪", quoted_price: 1500000)
Returns a verdict (for example, overcharge risk), the fair range (min, avg, max), and the gap from the average.verify_fair_priceadditionally returns a SHA-256 fingerprint of the fair price claim, anchored under PTKA.
Everyverify_fair_pricecall returns averify_urlof the formhttps://shield.the-horizons-innovation.com/verify/?id=<claim_sha256>. Thepublic verify pagerecomputes the SHA-256 in your own browser (Web Crypto) and checks it against the receipt. Nothing is sent to any server. The same claim is served back as JSON athttps://mcp.horizonshield.dev/ledger/<claim_sha256>. Trust is conferred by recomputation, not assumed in the issuer.
Twenty real overcharge diagnoses are also published as tamper evident receipts, each withclaim.txt, its SHA-256 digest, and an OpenTimestamps proof:
sha256sum claim.txt ots verify -f claim.txt proof.ots
- Index of the 20 receipts:https://shield.the-horizons-innovation.com/souba/kajou-seikyu-jirei-20/
- The dataset these verdicts belong to is anchored at Bitcoin block 949356.
Google's Agent Payments Protocol (AP2) makes what a userauthorizedverifiable through a signed, tamper evident Mandate.create_ap2_fairness_attestationissues a parallel attestation that makesvalueverifiable, shaped to attach to an AP2 Cart Mandate before the user signs. Parallel layers, same philosophy: pre transaction, tamper evident, independently recomputable.
- Fair price data is built on the openly publishedJCCDBdataset (65,520 Japanese construction line items, CC BY 4.0):https://github.com/ogasurfproject-jpg/japan-construction-cost-database
- PTKA protocol declaration anchored at Bitcoin block 949356 (2026-05-14); JCCDB Extended paper at block 951871 (2026-06-01)
- JCCDB origin paper:Zenodo 10.5281/zenodo.20019572
- Audit hash and macro correction:SSRN 6738701, mirrored atengrXiv
- VRQ framework and PTKA model:SSRN 6807738
- Reproduction package (buyer side verification gate):GitHub, archived atZenodo 10.5281/zenodo.20756867(MIT, runnable:node test/run_local.mjs)
Toshikatsu Oga (大賀俊勝), The HORIZONs Co., Ltd., Hiratsuka, Japan. A carpenter of thirty years. ORCID0009-0000-9180-903X.
"Cheapest is not the same as fair."
"Thirty years on site taught me the enemy is the middleman, not the craftsman."
Full collection (50 quotes, JSON-LD):TOshi Oga, in his own words
Live diagnostic:https://shield.the-horizons-innovation.com· The Evidence:https://shield.the-horizons-innovation.com/evidence-en/· The Movement:https://shield.the-horizons-innovation.com/movement-us/
Data: JCCDB, CC BY 4.0. Server code: see the LICENSE file in this repository.
ALTER - identity infrastructure for the AI economy
Auth0, but for agents. Identity and authentication service for AI agents.
AgentTrust is a pure MCP-only reputation and trust scoring server for AI agents.
https://github.com/SPAZIO-GENESI/attest-mcp
Drive a personal UK Tesco grocery account: search, basket, delivery slots, orders, and on-pack nutrition. Filter and rank products by macros + micros. Catalogue and nutrition tools need no auth.
Latvian property portal MCP: search rentals, sales & nightly stays, market stats; owner tools via OAuth. Remote server at https://bezbaseina.lv/mcp
Live space data for AI agents — rocket launches, ISS passes, launch news. Free, no auth.
It connects Agents to data wallet with DID and verifiable credentials
An observatory that probes every MCP server in the official MCP registry and reports which ones actually work: live, auth-gated, dead, or erroring.
AI-native property MCP for North Cyprus (KKTC) — 9 tools, live data from evlek.app, hosted, no auth required.
Sign in to leave a review
Use Google, GitHub, or an email account so ratings stay tied to real people.
No reviews posted yet.
