Course Drift Oracle

Name: Course Drift Oracle
Author: 710git

by 710gitversion 1.0.0i★ –iRuns in the cloud

Registry nameio.github.710git/course-drift-oracle

Install

Overview

Description from the maker (original English)

Signed drift reports for the ai-agents-for-beginners course. Free summary; $0.25 full report.

PopNx MCP’s three pillars

These three are never merged into one score: opinions, measurements and popularity are different things.

User voiceiNo reviews yetReviews open together with accounts in a later step
Our basic checksi1 of 1 passedChecked from public information; code not scanned yet
UsageiNot measured yet★ –

What you can do with it

We have not written a plain-language summary for this one yet. Below are the facts we read from the registry.

Connection: Runs in the cloud
Transport: Streamable HTTP
Category: Other

Install

Pick the AI app you use, then copy the settings.

Before you install

Basic checks: 1 of 1 passed
Runs on the maker’s server: what you ask it goes through their server.
The registry lists no key to fill in.

You need

Runs in the cloudNothing to install; it connects over the internet

Which app do you use?

ClaudeClaude CodeCursorVS CodeChatGPT

Pick your app above. We remember it, so next time the button says “Install in …”.

Works in Claude on the web, desktop and mobile:

Open Settings → Connectors
Press Add custom connector
Paste the address below and press Add
If it asks you to sign in, sign in with the maker

https://signetworks.atelieri.workers.dev/mcp

Run this in your terminal

claude mcp add --transport http course-drift-oracle https://signetworks.atelieri.workers.dev/mcp

Open in Cursor

Or copy the settings yourself

Paste into .cursor/mcp.json in your project, or ~/.cursor/mcp.json

{
  "mcpServers": {
    "course-drift-oracle": {
      "url": "https://signetworks.atelieri.workers.dev/mcp"
    }
  }
}

Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.

Open in VS Code

Or copy the settings yourself

Paste into .vscode/mcp.json in your project

{
  "servers": {
    "course-drift-oracle": {
      "type": "http",
      "url": "https://signetworks.atelieri.workers.dev/mcp"
    }
  }
}

Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.

ChatGPT connects only to servers on the internet:

Open ChatGPT on the web → Settings → Connectors (Apps)
Press Create or Add (some plans need Developer mode under Advanced first)
Paste the address below, give it a name and save
If it asks you to sign in, sign in with the maker

https://signetworks.atelieri.workers.dev/mcp

Menu names can differ slightly by plan and over time.

Your choice stays on this device in a cookie; no account needed.

These settings are generated from the maker’s registry entry. If the README says otherwise, follow the README.

What it can do

We have not read this server’s tool list yet; we check endpoints in rotation.

Basic checksi

We check information anyone can see; we have not read the code. Checks that do not apply are left out of the count. · Checked Nov 6, 2026

✓ Pass
Maker matches the repo
The registry name was verified with the GitHub account 710git, which owns the repo
… Not checked yet
Still maintained
We have not read this repo from GitHub yet
… Not checked yet
Has a licence
We have not read this repo from GitHub yet
… Not checked yet
Endpoint responds
Not checked yet; we check endpoints in rotation
… Not checked yet
Sign-in with OAuth
Not checked yet; we check endpoints in rotation
… Not checked yet
No hidden instructions in tool descriptions
Not checked yet; we read the tool list when we check the endpoint

Compared with others in Otheri

More stars than 0% of the other 32464 servers in this category
Published to the registry more recently than 31% of the other 32464 servers in this category
Basic checks equal to or better than 100% of the other 32464 servers in this category

Compared with every active server in this category in the registry. Stars count only when the publisher owns the repo.

Common questions

Is Course Drift Oracle safe?

It passed 1 of 1 applicable basic checks. We have not read the code. Before adding a key or token, see what access the server asks for and use a key with only the permissions you need.

What keys or codes does it need?

The registry does not list a required key, though some servers ask you to sign in on first use.

Does it run on my computer or in the cloud?

It runs in the maker’s cloud. Connect over the internet with nothing to install, but what you send passes through the maker’s servers.

Is it still maintained?

The GitHub repo last changed –, and the latest version (1.0.0) reached the registry 2 months ago.

Which apps can use it?

Apps that support MCP, such as Claude Desktop, Claude Code, Cursor and VS Code. It connects by URL, so apps that accept remote MCP servers work too, such as ChatGPT in developer mode.

What can I use instead?

In the same category: Spec Driven Development, Remote Desktop Commander, yontu

Alternatives

Servers in the same category from other makers, sorted by stars.

Reading a card:★ GitHub starsiThree pillars: reviews · checks · usageiUpdated = latest version published to the registryi

Spec Driven Development

by formulahendry

MCP Server that facilitates spec-driven development workflows, not just Vibe Coding.

Runs on your computer★ 440MITUpdated 14 months ago

Install

Remote Desktop Commander

by desktop-commander

Remote Desktop Commander: use files, terminal and processes on your own computers from any AI app.

Runs in the cloud★ 211Updated yesterday

Install

yontu

by senrecep

Türkçe yazı denetimi: TDK kuralları, yapay zekâ izleri, metin türüne göre üslup.

Runs on your computerUpdated today

Install

README from the maker

Open the README

Copied from the maker’s repo as written. PopNx MCP has not reviewed or endorsed it. HTML, images and scripts are removed. Links lead off this site.

Course Drift Oracle

A signed drift report for Microsoft's ai-agents-for-beginners course. It scans the course for two things that go wrong quietly:

model pins that name a deployment which is deprecated or scheduled to retire
package version floors whose open >= requirement now resolves to a newer major version than the course was written against

Both are invisible in a diff. Nothing in a course repo tells you a pinned model is about to stop serving, or that pip install today pulls a package two majors ahead of what the lessons assume. Answering that question takes someone actually checking each pin against the platform's own retirement calendar and the package's real release history. This repository does that checking, continuously, and sells the result as a signed report.

Why trust it

Every report is signed, not just asserted:

Ed25519 signatures over RFC 8785 canonical JSON. The exact bytes that were signed can be reconstructed and re-hashed by anyone, in any language. A Python-signed receipt verifies against the TypeScript verifier with no shared trust between them - see oracle/receipt.py (signs) and worker/src/logic.ts (verifies).
Append-only publication chain. Every report ever published is a link in oracle/chain.jsonl, each entry pointing at the hash of the one before it. Drop an entry, edit one, or reorder two and every later link stops matching. oracle/verify_chain.py checks this independently of the code that writes it.
`verify_report` is free. Call it before paying to confirm the free summary's claims are backed by a real signature, and after paying to confirm the paid report matches the hash the free summary already committed to. A seller who serves fewer findings than promised gets caught by arithmetic, not by trust.
This repository is the source. Nothing here is a description of the product; it is the product's actual scanner, signing code, and server, in the same form that runs the live service.

Use it in five minutes

The service is an MCP server over streamable HTTP:

https://signetworks.atelieri.workers.dev/mcp

Copy-paste quickstart, plain curl, no client library (every command here was run against production before being written down):

# 1. Initialize and capture the session id from the response headers.

SESSION_ID=$(curl -si -X POST https://signetworks.atelieri.workers.dev/mcp \ -H 'Content-Type: application/json' \ -H 'Accept: application/json, text/event-stream' \ -d '{"jsonrpc":"2.0","id":1,"method":"initialize","params":{"protocolVersion":"2024-11-05","capabilities":{},"clientInfo":{"name":"quickstart","version":"1.0"}}}' \ | tr -d '\r' | awk 'tolower($1)=="mcp-session-id:"{print $2}')

2. Complete the handshake.

curl -s -X POST https://signetworks.atelieri.workers.dev/mcp \ -H 'Content-Type: application/json' \ -H 'Accept: application/json, text/event-stream' \ -H "Mcp-Session-Id: $SESSION_ID" \ -d '{"jsonrpc":"2.0","method":"notifications/initialized"}'

3. Call a free tool. Responses are SSE frames; strip the data: prefix.

The same pattern calls every tool in the table above; only the name and arguments change.

Ten tools:

Tool	Price	Returns
`drift_summary`	free	finding counts by severity and lesson, plus a signed receipt
`verify_report`	free	checks a receipt's signature and, optionally, that a findings array matches it
`drift_report`	$0.25	every finding: file, line, diagnosis, fix. Paid via MPP (Tempo testnet)
`drift_report_x402`	$0.25	the same report, paid via x402/USDC (Base Sepolia testnet)
`model_status`	free	one model id in, its signed catalog entry out: current, deprecated, retired, or an honest "unknown: not in catalog"
`model_status_batch`	$0.10	a list of model ids in, one entry per id plus an `any_action_needed` gate boolean, paid via MPP (Tempo testnet)
`model_status_batch_x402`	$0.10	the same batch lookup, paid via x402/USDC (Base Sepolia testnet)
`site_audit_summary`	free	agent-readiness score for a public site (12 checks): counts, target and date only; the per-check detail and signed receipt are the paid tier
`site_audit`	$0.25	all 12 checks with per-check status, detail and fix list as a signed dated receipt. Paid via MPP (Tempo testnet)
`site_audit_x402`	$0.25	the same full audit, paid via x402/USDC (Base Sepolia testnet)

The twelve audit checks, so you know what a score means before paying: robots-exists, robots-ai-directives, robots-not-blanket, llmstxt-exists, llmstxt-shape, llmstxt-links, mcp-advert, structured-data, title-meta, charset, content-type-sanity, homepage-response. Ten are scoreable; homepage-response and robots-not-blanket are informational readings by construction and never count for or against a site, which is why a flawless site scores 10 of 10, not 12 of 12.

A typical run:

Call drift_summary. It costs nothing and returns a signed receipt describing how many findings exist, their severity, and which lessons are affected. Decide from that whether the full report is worth buying.
Call verify_report with the receipt from step 1. Confirm the signature is valid before you pay anything.
Pay $0.25 and call drift_report (or drift_report_x402 if you are paying with USDC). You get every finding with a file, a line number, what is wrong, and the fix.
Call verify_report again, this time passing the findings array you just received alongside the same receipt. Confirm the hash matches - this is what proves you got everything you paid for, not a trimmed version of it.

Use it as a GitHub Action

Add the scanner to a course repo's CI in one line:

- uses: 710git/course-drift-oracle@v1

That is the whole add - every input below has a default.

Inputs

Input	Default	What it does
`path`	`.`	checkout-relative directory to scan
`exclude`	`""`	directory names or repo-relative paths to skip, newline-separated, on top of the scanner's built-in exclusions
`fail-on`	`critical`	fail the step if any finding at or above this severity exists (`info`, `warning`, `critical`); empty disables the gate
`include-translations`	`false`	also scan `translations/ /...` (default: the `en` tree only)
`offline`	`true`	skip live PyPI lookups; check model pins against the bundled catalog only

Outputs

Output	What it is
`critical-count`	number of critical-severity findings
`warning-count`	number of warning-severity findings
`info-count`	number of info-severity findings
`findings-path`	path to the raw `findings.json` this run produced

Why offline is the default

PyPI lookups are a live-network dependency, and a one-line CI add should not force one on a stranger by default. With offline: true (the default), the Action only checks model pins against the catalog bundled in this repo - no outbound calls beyond the checkout itself. Set offline: false to also catch package version drift against the live PyPI JSON API.

What it never touches

The Action never touches the Ed25519 signing key or the publication chain (oracle/chain.jsonl). It only reads the checkout it is given and the catalog bundled with the Action, and writes nothing back to the repo it runs in.

Verifying a receipt yourself

Every response carries a receipt object: a signed statement of what was found, when, and by which key, chained to every report published before it. verify_report does the check for you over MCP, but nothing about it is a black box - the two files that do the actual work are short and readable:

oracle/receipt.py builds and signs a receipt: canonicalize the payload (RFC 8785), hash it (SHA-256), sign the hash (Ed25519).
worker/src/logic.ts does the same steps in TypeScript to check a signature. Read both side by side and there is nothing left to take on faith.

oracle/verify_chain.py walks the full publication history in oracle/chain.jsonl and confirms every signature is valid and every entry links correctly to the one before it - the check a buyer or an outside auditor would run against the whole record, not just one receipt.

A free, signed skill

skills/course-drift-check/SKILL.md is the correct procedure for using this oracle, written for agents: audit the seller before paying, pay on either rail, verify the goods after. It is free, and it is signed - the receipt.json beside it commits to the file's exact SHA-256 under the same Ed25519 key that signs every report, so an agent loading the skill can prove it is running the procedure the operators published, unaltered (oracle/sign_skill.py is the 100-line signer; verification needs nothing from us). Signature proves provenance and integrity, not correctness - the same boundary every receipt here draws.

Payments

Two rails carry identical goods:

MPP (Machine Payments Protocol) is designed to settle by card or stablecoin; this deployment currently charges on the Tempo testnet.
x402 settles in USDC and exists mainly for discovery: agents that search for services through the x402 Bazaar only find ones that settle through an x402 facilitator.

Both rails currently run on testnets - MPP against the Tempo testnet, x402 against Base Sepolia. The x402 rail's payment mechanics are proven end to end: on 2026-08-28 a real testnet settlement cleared against the live worker (the buyer client in clients/ signed a $0.25 USDC payment, the facilitator settled it on Base Sepolia, and the client independently verified the findings hash it paid for - 7 passed, 0 failed, 0 skipped). No mainnet money has moved, and MPP settlement has not yet been exercised; both stated plainly rather than glossed over. You can reproduce the proof yourself: fund a throwaway wallet with faucet USDC (no ETH needed) and run the buyer per "Wiring a real x402 payer" in clients/buyer/README.md.

What this repository contains

oracle/     the scanner and the signing code

(to run it locally: clone the course repo it scans, then python3 oracle/drift_scan.py --repo-root /path/to/ai-agents-for-beginners with no course checkout, --offline runs the model-pin checks only) worker/ the MCP server: four free tools, six paid tools, HTTP 402 web/ the storefront pages served alongside the endpoint clients/ an independent buyer client - run it yourself before you pay

Project-Office, the private repository this mirror is drawn from, holds the day-to-day working process, deploy automation, and credentials. None of that is needed to use or verify this service, so none of it is here.

Honest limits

Payments settle on testnets, not mainnet, as of this writing.
The model and package catalog this scanner checks against is maintained by hand and covers a limited set of models today. Coverage expands every cycle; it is not exhaustive yet.
Signature verification proves a report was produced by this service and has not been altered. It does not prove the report is correct - that claim rests on the sources cited inside each finding, which you are free to check yourself.

License

No license file is included. Absent one, all rights are reserved by default; this is a decision for the repository owner to make explicitly, not an oversight.

Contact

pm.agent.svc@gmail.com

Course Drift Oracle

Overview

PopNx MCP’s three pillars

What you can do with it

Install

Before you install

What it can do

Basic checksi

Maker matches the repo

Still maintained

Has a licence

Endpoint responds

Sign-in with OAuth

No hidden instructions in tool descriptions

Compared with others in Otheri

Common questions

Alternatives

Spec Driven Development

Remote Desktop Commander

yontu

README from the maker

Course Drift Oracle

Why trust it

Use it in five minutes

2. Complete the handshake.

3. Call a free tool. Responses are SSE frames; strip the data: prefix.

Use it as a GitHub Action

Inputs

Outputs

Why offline is the default

What it never touches

Verifying a receipt yourself

A free, signed skill

Payments

What this repository contains

Honest limits

License

Contact