Developers

SDKs and packages

What is published, on which channel, at which version, and what is deliberately not published yet. There is no general-purpose ECZ-ID SDK: the public record needs no client, and the published tools are read-only.

Published and installable

Versions read from the registries on 2026-10-10.

@ecocitizenz/ecz-id-mcp-verifierLive · public

npm · latest 0.9.0 · next 0.9.1

CLI, read-only stdio MCP server and Node library. Checks public Resolver posture for ECZ-IDs, MCP servers, agent manifests, API URLs, repositories, packages and container images.

bash

npx -y @ecocitizenz/ecz-id-mcp-verifier check --target ECZ-GB-RBS1NW

Documentation

ecz-idLive · public

PyPI · 0.2.0

ECZ-ID shared core for Python: result contract, reason codes, safe inspection utilities and plugin discovery. Inspects, explains and routes only.

bash

pip install ecz-id

Documentation

Ecocitizenz/ecz-id-mcp-verifierLive · public

GitHub Action · v0.9.0 (examples) · v0.9.1 latest

The verifier as a CI step with an explicit policy. REQUIRE fails the job when proof is missing. Examples pin the release whose hosted run the docs show.

yaml

uses: Ecocitizenz/ecz-id-mcp-verifier@v0.9.0

Documentation

io.github.Ecocitizenz/ecz-id-mcp-verifierLive · public

Official MCP Registry · 0.9.0

The verifier as a local stdio MCP server, listed in the Official MCP Registry. Read-only.

url

npx -y @ecocitizenz/ecz-id-mcp-verifier@0.9.0 ecz-id-mcp-server

Documentation

com.ecocitizenz/trust-mcpLive · public

Official MCP Registry · 0.2.0

First-party remote MCP server (streamable HTTP) for read-only Business Passport state lookups.

url

https://trust-mcp.ecocitizenz.com/mcp

Documentation

Editor extensions

The Developer Trust extensions for VS Code and compatible editors, published by ecocitizenz on the Visual Studio Marketplace and Open VSX. Free, local, and they upload no source, secrets or telemetry.

ecocitizenz.eczid-mcp-trustLive · public

ECZ-ID MCP Trust · VS Marketplace and Open VSX · 0.5.2

What your MCP servers expose, and what changed: MCP X-Ray, trusted baseline, Trust Delta.

bash

code --install-extension ecocitizenz.eczid-mcp-trust

ECZ-ID MCP Trust

ecocitizenz.eczid-ai-agentsLive · public

ECZ-ID Agent Trust · VS Marketplace and Open VSX · 0.4.4

What your agents can reach, and how that reach changed: Agent X-Ray, re-scan, ecz-agent.json scaffolding.

bash

code --install-extension ecocitizenz.eczid-ai-agents

ECZ-ID Agent Trust

Plugins and Python tools

Ecocitizenz/eczid-agent-pluginsLive · public

Agent plugin collection · six plugins

Read-only ECZ-ID plugins for agent hosts, installed by name from one marketplace.

text

/plugin marketplace add Ecocitizenz/eczid-agent-plugins
/plugin install eczid-dora-readiness@eczid-plugins

Plugins

ECZ-ID Python toolsLive · public

PyPI · nine domain packages beside ecz-id

Read-only inspection tools built on the shared core, for APIs, agents, MCP, SBOM, DORA and more. Each inspects, explains and routes.

Python tools and install commands

Not published, on purpose

A general-purpose ECZ-ID SDKNot offeredNot published. Integrate with the public machine record, the verifier and the contracts documented here.
ECZ-ID Intent APILive · signed inIntents are created and authorised in the TrustOps Dashboard. There is no public developer API.
IntentControl runtime and Decision APIRelease-gatedNot published, not callable. No install command exists for it, here or anywhere.
Receipt retrieval and verification APINo public retrievalPublic retrieval and public verification are not enabled.
Sandbox and self-serve API keysNot offeredNeither is offered. The public record needs no key.