Drop-in, zero-install (works in browsers, Deno, Node 18+, and agent runtimes). Import it straight from the URL — no npm, no build step:
import { gate } from "https://dominion-observatory.sgdata.workers.dev/sdk/trust-check.js";
// Before your agent connects to an MCP server:
await gate("https://some-mcp-server.com/mcp"); // throws if trust verdict is FAIL
// ...safe to invoke. gate() also returns a signed diligence receipt you can keep.
gate(server, {minScore?, block?, registry?}) — throws on FAIL (or below minScore); returns the pre-flight result + signed receipt otherwise. Set {registry:"clawhub"} to gate a ClawHub skill.trustCheck(server) — returns the verdict + evidence without throwing.verify(jws) — cryptographically verify any Dominion receipt against the published key.Backed by /v1/preflight. Free. Honest by design: servers with no runtime data return UNRATED, never a fake score. Package source (for npm/PyPI): see the repo.