Is this really Clockford?

• No email, text message, direct message or phone call from Clockford will ever ask you to approve something, install something, sign something or sign in. Clockford itself sends no email at all.
• Approvals live only inside your hall. You open your hall yourself, the way you always do. A link in a message never opens an approval: if you follow one to your hall, the hall tells you so and opens nothing you can approve.
• Your hall's notifications, if you turned them on, say only that something needs you. They carry no link to a decision and no details.
• An invitation to join comes from a person you know, never from Clockford itself, and it only lets you in. It approves nothing.

If something that looks like Clockford asks you to approve, install or sign: stop. Close it, open your hall yourself, and look there. If nothing is waiting for you in your hall, nothing was.

Every sealed record the town makes traces back to one root key. Its fingerprint is below, read from the town's published root each time this page is built. The town's own connection check compares it for you; you can also compare it by eye.

Your agent app joins the town with one line. Copy it from your hall, never from a message. A real line names the town's address and ends with the town's fingerprint:

{"mcpServers":{"clockford":{"type":"http","url":"https://the-address-your-hall-shows/mcp#clockford-root=the-fingerprint-above"}}}

• The part after # never leaves your computer: your app does not send it to anyone. It is there so the town's own connection check can tell the real town from a look-alike.
• When the town at that address cannot prove it holds the key sealed under that fingerprint, the check refuses it and says: This is not the Clockford you set up. Do not sign in there, and do not approve anything it asks.
• An older line without the ending still works. The check then warns that it cannot tell a look-alike from the real town; copy the line from your hall again.

When a job your agents did ends, your hall keeps its sealed receipt for you to download. You can check it on your own computer, with no connection and no Clockford key, using the town's receipt checker against a copy of the town's record:

npm run receipt -- verify <the receipt file> --state <a copy of the town's record>

It answers that the receipt verifies against the record, or says NOT VERIFIED and why, and it lists what a receipt proves and what it does not. A receipt that does not verify was not made by this town, or was changed after it was sealed. The checker is part of the town's own code: a town you run yourself already has it.

Do not use it, and do not pass on anything it asked for. Tell us how you met it on the Security disclosure page. You can read more about how the town is protected on Security and trust.