# Witnessory

> An observatory of the internet's move to post-quantum cryptography: how far servers have moved (key exchange,
> certificates, SSH, DNSSEC, routing, mail) and how close quantum computers are to breaking what has not, measured
> from probes on several networks whose every reading is signed (Ed25519 and ML-DSA-65). Free to read.

## Data

- https://witnessory.org/view.json: the current view, refreshed hourly. `layers.<layer>.headline` holds the headline
  figures (each with `median`, `min`, `max` and `n` across probes); `params.as_of_utc` says when; `view_sha256` names
  the exact computation. Cross-origin requests are allowed.
- Layers measured monthly (keys: post-quantum TLS on the top 10,000 sites; ssh; dnssec) appear once each month's scan
  has run.

## Reports

- https://witnessory.org/reports/: monthly reports, every figure read from a published view named by its hash.
  October 2026: https://witnessory.org/reports/2026-10.html (post-quantum key exchange at 59% of top sites,
  post-quantum signatures at 0% across certificates, DNSSEC, DKIM and RPKI).

## Check one site

- `GET https://check.witnessory.org/api/check?domain=example.org`: whether a browser gets post-quantum key exchange
  from that site, signed. Description: https://check.witnessory.org/openapi.json and
  https://check.witnessory.org/llms.txt. Free, no key; 20 new checks an hour from one address.

## Run a probe

- https://witnessory.org/probe.html: install a probe (Linux, Raspberry Pi, Windows, Docker, Python) and measure from
  your own network. Source and terms: https://github.com/witnessory/probe (Apache 2.0).
- https://coordinator.witnessory.org/probes.json: every active probe's network and country, counts by country and
  network, and the probes with the most credits (also as a page at /probes). One probe: /p/<probe id>.json.

## The client and MCP server (for your code or your agent)

- `pip install witnessory`
  (package `witnessory`, Apache 2.0, standard library only; source: https://github.com/witnessory/client).
- Python: `witnessory.check("example.org")`, `witnessory.headline()`, `witnessory.probes()`, `witnessory.pricing()`,
  `witnessory.verify(result)`. Command line: `witnessory check example.org`.
- MCP server over stdio: command `witnessory`, argument `mcp`; tools `check_site`, `pq_headline`, `probe_map`,
  `service_status`, `pricing`. A plan's key goes in the environment variable `WITNESSORY_KEY`.

## Paid services (prices as data: https://witnessory.org/pricing.json)

- Watching your own sites from several networks over time with alerts and signed, anchored evidence (Watch 10 $19
  a month, Watch 100 $99), API keys with higher limits ($19 and $99 a month; `Authorization: Bearer <key>` on the
  checker), signed and anchored evidence reports ($9 for up to 10 hostnames, $39 for up to 50), data licences,
  enterprise. Page: https://witnessory.org/services.html
- Agents pay per request, no account, instant delivery: HTTP 402 (x402 v2), USDC on Base. Index:
  https://api.witnessory.org/pay (catalogue for crawlers: https://api.witnessory.org/.well-known/x402).
  `GET /pay/check?domain=example.org` $0.01 (one fresh signed check); `POST /pay/check-many` $0.10 (up to 20);
  `POST /pay/watch?plan=watch-10` $19 (daily checks of up to 10 hostnames for 31 days, alerts to a webhook, a signed
  monthly evidence file anchored in Bitcoin; first results in the answer), `?plan=watch-100` $99;
  `POST /pay/report?size=10` $9 and `/pay/report` $39 (up to 50 hostnames; results in the answer, the signed and
  anchored report within the hour); `POST /pay/key?plan=api-developer` $19 (2,000 fresh checks in 31 days),
  `?plan=api-pro` $99 (25,000). Ask without payment to get the 402 with the exact requirements.
- People: checkout opens soon. Register interest: `POST https://coordinator.witnessory.org/v1/interest` with
  `{"email": "...", "product": "<id from pricing.json>"}`; or write to hello@witnessory.org to buy now.
- Status of every service: https://coordinator.witnessory.org/status.json

## Contact

- Questions, buying, partnerships: hello@witnessory.org.

- Security: security@witnessory.org (https://witnessory.org/.well-known/security.txt).