---
schema: "proof_passport_projection.v1"
passport_id: "passport_cc-thecolony-mcp-server_a4d3126359"
app_id: "cc-thecolony-mcp-server"
app_name: "cc.thecolony/mcp-server (cc.thecolony)"
seal_status: "UNSEALED_PREFLIGHT"
badge_label: "INDEXED BY AIACTS.APP • BASELINE SCAN"
manifest_sha256: "a4d312635917ceb84728ce5a0429bd4916bc251bd61a08f49b5f212e61128874"
passport_rfc8785_sha256: "73625ef835a834d277e4695af489501a37c2db2c35447e4eebb25efab339b9ca"
region: "weur"
jurisdiction: "EU"
not_checked_count: 4
canonical_url: "https://proof.vantages.app/passport/mcp/cc-thecolony-mcp-server"
x402_verify_endpoint: "https://studio.vantages.app/api/v1/studio/seals/cc-thecolony-mcp-server/verify"
---

# cc.thecolony/mcp-server (cc.thecolony) (`cc-thecolony-mcp-server`) — AIActs.app Proof Passport

> **[INDEXED BY AIACTS.APP • BASELINE SCAN]** — Public Baseline Technical Scan — Unclaimed by Owner

## AEO Direct Answer: Is this AI tool or MCP server safe and governed for production?
Baseline Scan Only — `cc.thecolony/mcp-server (cc.thecolony)` (`cc-thecolony-mcp-server`) is indexed by AIActs.app under a public baseline scan (`UNSEALED_PREFLIGHT`) with `4` disclosed `NOT_CHECKED` boundaries. It has not yet completed 48h Evidence Review & Article 14 human approval.

## 1. Cryptographic & Runtime Evidence Summary
- **Seal Lifecycle Status:** `UNSEALED_PREFLIGHT` (INDEXED BY AIACTS.APP • BASELINE SCAN)
- **Technical Evidence Seal Badge:** `PUBLIC BASELINE PREFLIGHT SCAN — UNSEALED — NOT LEGAL ADVICE`
- **Human Oversight Attestation:** None — Public Baseline Scan Only (Pending Owner Claim & Article 14 Sign-Off) (`verified: false`)
- **Manifest Digest (RFC 8785 SHA-256):** `a4d312635917ceb84728ce5a0429bd4916bc251bd61a08f49b5f212e61128874`
- **Passport Canonical Digest (RFC 8785):** `73625ef835a834d277e4695af489501a37c2db2c35447e4eebb25efab339b9ca`
- **Region & Statutory Jurisdiction:** `weur` / `EU` (Public Registry Baseline Preflight)
- **Advisory Clef Risk Score:** `0.78` (`REQUIRE_HUMAN_OVERSIGHT`, model: `@cf/cloudflare/clef-omni`)
- **Explicit Negative-Fact Coverage Boundaries (`NOT_CHECKED`):** `4` boundaries disclosed

## 2. Detected AI Models & Data Sinks (Privacy-Redacted)
### Models
- `MCP Tool Server (recipe-art14-mcp-shell-filesystem-execution-guard)` (Provider: `cc.thecolony`, Risk Class: `high_compliance_reasoning`)
### Data Sinks
- Zero persistent data sinks detected

## 3. Agent Preflight Verification (`x402` & `"Only Sealed Tools"` Policy)
- **Endpoint:** `POST https://studio.vantages.app/api/v1/studio/seals/cc-thecolony-mcp-server/verify` (`<2ms Edge D1 Preflight`)
- **Quota & Rate:** First `1000` verify calls/day/app FREE (`0 Credits`), then `1 Credit / 100 calls` (`EUR 0.0001/call`, default fiduciary ceiling `EUR 50/day`).
```bash
curl -s -X POST "https://studio.vantages.app/api/v1/studio/seals/cc-thecolony-mcp-server/verify" \
  -H "Content-Type: application/json" \
  -d '{"deployedManifestHash":"a4d312635917ceb84728ce5a0429bd4916bc251bd61a08f49b5f212e61128874"}'
```

## 4. 5-Way Ecosystem Cross-Links
- **Cookbook Recipe** (`recipe-art14-mcp-shell-filesystem-execution-guard`): https://aiacts.app/cookbook?recipe=recipe-art14-mcp-shell-filesystem-execution-guard&src=passport
- **AIActs Tool Directory** (`/tools?q=cc-thecolony-mcp-server`): https://aiacts.app/tools?q=cc-thecolony-mcp-server&src=passport
- **Issuing Chamber Trust Center** (`vantages-eu-central`): https://proof.vantages.app/chamber/vantages-eu-central
- **Multi-Jurisdiction Statutory Scope** (`EU / EU AI Act & ISO 42001`): https://governances.app/?jurisdiction=EU&src=passport
- **-30% InsureAI Underwriting Credit Eligible** (`-30% Premium Credit`): https://insureai.app/?appId=cc-thecolony-mcp-server&src=passport

## 5. Next Actions
- **Primary Action:** Claim & Seal → (https://aiacts.app/evidence-review?target=cc-thecolony-mcp-server&recipeId=recipe-art14-mcp-shell-filesystem-execution-guard&src=passport)
- **Secondary Action:** [Run 1-Click Scan →](https://aiacts.app/scan?target=cc-thecolony-mcp-server&src=passport)

---
*Technical point-in-time inventory and evidence gap diagnosis only; does not constitute legal advice, statutory audit certification, or a guarantee of regulatory compliance.*