Hekkova

com.hekkovaPublished by hekkova.comOfficial publisherv1.0.0Updated Oct 26, 2026

TPermanent memory layer for AI agents. Mint moments to the Polygon blockchain via MCP.

VerifiedStreamable HTTPWeb executableFinanceKnowledge & MemoryMedia & Design

Overview

AI-generated overview

Hekkova is a remote MCP server that lets an AI assistant mint photos, videos, audio and text as permanent, encrypted NFT records on the Polygon blockchain.

What you can do
  • Mint media or text as permanent moments on Polygon, with IPFS pinning and optional encryption
  • Fetch a public URL such as a post or web page and mint it, extracting title and image automatically
  • List, filter and inspect minted moments by Block ID, including CIDs, transaction hash, phase and tags
  • Change a moment's privacy phase and export all moments as JSON or CSV with a 24-hour download link
  • Check remaining mint credits, plan and phase-shift balance, and read account identity and wallet address
When to use it
Useful when you want an assistant to archive media or text as tamper-evident, blockchain-anchored records with privacy tiers, or to keep a permanent, exportable memory of moments across sessions. It is aimed at users already holding a Hekkova account and credits rather than general-purpose storage.
Requirements
A remote endpoint at mcp.hekkova.com reached over streamable HTTP, with OAuth authentication required. A Hekkova account and API key are needed, and minting consumes credits tied to a plan; paid packs raise rate limits.
Before you install
Minting writes permanent, public-chain data and spends credits, and phase changes cost 1-2 credits. Media is pinned to IPFS and Filecoin and encrypted via Lit Protocol, so anything minted may be retrievable beyond your control. An API key is a bearer credential; keep it private and revoke it if exposed. Exports produce a 24-hour download URL.

Installation

In SourceWeft

  1. Open Hekkova in the dashboard and add it to a workspace.
  2. Connect the required credentials. They are stored privately and never shown on public pages.
  3. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/com.hekkova%2Fmcp/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config. The client completes OAuth sign-in on first connect.

{
  "mcpServers": {
    "hekkova": {
      "type": "http",
      "url": "https://mcp.hekkova.com/mcp"
    }
  }
}

README

Hekkova MCP Server

The permanent memory layer for AI agents. Connect any MCP-compatible AI (Claude, ChatGPT, Gemini, Cursor, custom agents) and mint moments — photos, videos, audio, text — permanently to the Polygon blockchain with IPFS + Filecoin storage, Lit Protocol encryption, and privacy tiers that let you control who sees what.


Quick Start

bash
# 1. Install dependenciesnpm install
# 2. Copy and configure environment variablescp .env.example .env# Edit .env with your Supabase, Thirdweb, Pinata, and Stripe credentials
# 3. Seed the local test account and API keynpm run seed
# 4. Start the development servernpm run dev# → Server running at http://localhost:3000/mcp

Connect with Claude Desktop

Add this to your Claude Desktop config file:

macOS: ~/Library/Application Support/Claude/claude_desktop_config.json Windows: %APPDATA%\Claude\claude_desktop_config.json

json
{  "mcpServers": {    "hekkova": {      "type": "url",      "url": "http://localhost:3000/mcp",      "headers": {        "Authorization": "Bearer hk_test_local_dev_key_12345678"      }    }  }}

For production, replace the URL and API key:

json
{  "mcpServers": {    "hekkova": {      "type": "url",      "url": "https://mcp.hekkova.com/mcp",      "headers": {        "Authorization": "Bearer hk_live_YOUR_API_KEY"      }    }  }}

Get your API key at hekkova.com/dashboard/keys.


Tool Reference

ToolDescription
mint_momentMint media (photo, video, audio, text) permanently to Polygon. Encrypts based on phase, pins to IPFS, mints ERC-721 NFT. Returns a Block ID.
mint_from_urlFetch a public URL (tweet, Instagram post, image, web page) and mint it. Extracts og:title and og:image automatically.
list_momentsPaginated list of all minted moments. Filterable by phase, category, or search query.
get_momentFull details for a single moment by Block ID: CIDs, transaction hash, phase, tags, and more.
update_phaseChange a moment's privacy phase. Costs 1 credit (text/image) or 2 credits (video). Legacy Plan includes 10 free Phase Shifts/month.
export_momentsExport all moments as JSON or CSV. Returns a 24-hour download URL with all Block IDs and IPFS CIDs.
get_balanceCheck remaining mint credits, current plan (free / arc_builder / legacy), and phase shift balance.
get_accountAccount identity: Light ID, display name, wallet address, default phase, and legacy plan status.

Privacy Phases

PhaseAccessEncryption
new_moonOwner onlyLit Protocol (owner wallet ACC)
crescentClose circle (2–10 people)Lit Protocol (shared access conditions)
gibbousExtended group (up to 50)Token-gated via Hekkova ERC-721
full_moonFully publicNone

Moment Categories

CategoryMeaning
super_moonMajor life event
blue_moonRare moment
super_blue_moonOnce-in-a-lifetime
eclipseTime-locked — sealed until eclipse_reveal_date
nullUncategorized

Rate Limits

PlanRequests/minMints/min
Sandbox (test keys)101
Standard (any paid pack)6010
Legacy Plan12020

Rate limit headers are included on every response:

X-RateLimit-Limit: 60X-RateLimit-Remaining: 58X-RateLimit-Reset: 1710680460

Running Tests

bash
# Make sure the server is running in another terminalnpm run dev
# Run the test clientnpm run test-client

Deployment

Vercel (Serverless)

bash
npm install -g vercelvercel

Add a vercel.json:

json
{  "builds": [{ "src": "src/server.ts", "use": "@vercel/node" }],  "routes": [{ "src": "/(.*)", "dest": "src/server.ts" }]}

Set all environment variables in the Vercel dashboard under Project → Settings → Environment Variables.

Railway

bash
npm install -g @railway/clirailway loginrailway initrailway up

Set environment variables in the Railway dashboard. Railway will auto-detect the npm start script.

Fly.io

bash
npm install -g flyctlfly auth loginfly launch

Fly will generate a fly.toml. Set secrets with:

bash
fly secrets set SUPABASE_URL=... SUPABASE_SERVICE_KEY=... THIRDWEB_SECRET_KEY=...fly deploy

Project Structure

hekkova-mcp/├── src/│   ├── server.ts          # Express + MCP server, auth middleware, rate limiter│   ├── config.ts          # Typed config from environment variables│   ├── types/index.ts     # TypeScript interfaces (Account, Moment, ApiKey, etc.)│   ├── services/│   │   ├── auth.ts        # API key validation and hashing│   │   ├── database.ts    # Supabase queries (moments, accounts, API keys)│   │   ├── blockchain.ts  # Thirdweb/Polygon minting (stub → real)│   │   ├── storage.ts     # Pinata IPFS pinning (stub → real)│   │   └── encryption.ts  # Lit Protocol encryption (stub → real)│   └── tools/│       ├── mint-moment.ts│       ├── mint-from-url.ts│       ├── list-moments.ts│       ├── get-moment.ts│       ├── update-phase.ts│       ├── export-moments.ts│       ├── get-balance.ts│       └── get-account.ts├── scripts/│   ├── seed.ts            # Creates test account + API key in Supabase│   └── test-client.ts     # Exercises all 8 tools against the running server├── package.json├── tsconfig.json├── .env.example└── README.md

Supabase Schema

You will need these tables in your Supabase project:

sql
-- Accountscreate table accounts (  id text primary key default gen_random_uuid()::text,  display_name text not null,  light_id text,  wallet_address text,  mints_remaining integer not null default 0,  total_minted integer not null default 0,  default_phase text not null default 'new_moon',  legacy_plan boolean not null default false,  created_at timestamptz not null default now());
-- API Keyscreate table api_keys (  id text primary key default gen_random_uuid()::text,  account_id text not null references accounts(id) on delete cascade,  key_hash text not null unique,  key_prefix text not null,  environment text not null default 'live',  created_at timestamptz not null default now(),  revoked_at timestamptz);
-- Momentscreate table moments (  id text primary key default gen_random_uuid()::text,  account_id text not null references accounts(id) on delete cascade,  block_id text not null unique,  token_id integer not null,  title text not null,  description text,  phase text not null,  category text,  encrypted boolean not null default false,  media_cid text not null,  metadata_cid text not null,  media_type text not null,  polygon_tx text not null,  source_url text,  source_platform text,  eclipse_reveal_date timestamptz,  tags text[] not null default '{}',  timestamp timestamptz not null default now(),  created_at timestamptz not null default now());
-- Indexescreate index on api_keys(key_hash);create index on moments(account_id, timestamp desc);create index on moments(block_id);

Full Spec

See the full technical specification: hekkova-mcp-server-spec.md

Production endpoint: https://mcp.hekkova.com/mcp

Source: README.md at commit 00e6792

Tools

0
This server asks for a credential such as an API key, so SourceWeft could not read its tools without one and has not indexed them.

Version history

1
  1. v1.0.0LatestSep 16, 2026

Score

75% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts

    Declare a license in the repository or the registry entry.