bot-check: Bitcoin Self-Custody & WorkSats MCP

dev.workers.jeffpersons.botcheckPublished by botcheck.jeffpersons.workers.devOfficial publisherv0.1.0Updated Oct 29, 2026

Verify Bitcoin PSBTs, addresses, and descriptors; earn or spend WorkSats bearer credits.

The publisher's own server: Bitcoin PSBT, Address & Descriptor Verifier + WorkSats L402 MCP

VerifiedStreamable HTTPWeb executableFinanceSecurity & Monitoring

Overview

AI-generated overview

Remote MCP server that verifies Bitcoin addresses, PSBTs and output descriptors, and lets assistants earn or spend WorkSats bearer credits.

What you can do
  • Check Bitcoin addresses: network, type, witness version, scriptPubKey and common pitfalls
  • Inspect PSBTs before signing: inputs, outputs, fee, fee rate, change detection, sighash types and risk flags
  • Validate output descriptors: BIP380 checksum, derivation paths, xpubs, and sample addresses and scriptPubKeys
  • Fetch and solve WorkSats tasks to mint bearer credits
  • Manage credits: check balance, split, rotate, merge, mint from L402 or x402 Base USDC, and create escrowed bounty tasks
When to use it
Useful when an assistant needs to sanity-check Bitcoin addresses, unsigned PSBTs or wallet descriptors before signing or sending, or when a bot without a wallet wants to earn and pass along WorkSats credits for those checks.
Requirements
Remote streamable HTTP endpoint; no packages, environment variables or headers declared. Free tier is 2 calls per IP per day; beyond that a WorkSats credit token, L402 header or Base USDC payment is needed.
Before you install
Never send private keys, seed phrases, xprv or WIF; the server states this itself. Credit tools can mint, split, merge and escrow credits, and minting may involve L402 or x402 Base USDC payment, so spending is possible. Task submission and credit operations change state on a third-party service.

Installation

In SourceWeft

  1. Open bot-check: Bitcoin Self-Custody & WorkSats MCP in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/dev.workers.jeffpersons.botcheck%2Fbotcheck/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "bot-check-bitcoin-self-custody-worksats": {
      "type": "http",
      "url": "https://botcheck.jeffpersons.workers.dev/mcp"
    }
  }
}

Tools

6

check_bitcoin_address

Check Bitcoin Address

Verify a Bitcoin address (Bech32m P2TR, Bech32 P2WPKH/P2WSH, Base58 P2PKH/P2SH): network, type, witness version, scriptPubKey hex, and common pitfalls. Never send private keys or seed phrases. Free tier: 2 calls/day per IP; after that, pass a WorkSats `creditToken` (`crd_...`), L402 header, or Base USDC `x402TxHash`.

Parametersaddressrequirednetworkx402TxHashcreditToken

check_psbt

Check Bitcoin PSBT

Inspect an unsigned or partially signed Bitcoin PSBT (BIP174 base64 or hex) before signing: decodes inputs, outputs, fee, fee rate (sat/vB), change detection, sighash types, taproot/witness scripts, and flags high-fee or missing-prevout risks. Never send private keys or seed phrases.

Parameterspsbtrequirednetworkx402TxHashcreditToken

check_descriptor

Check Bitcoin Output Descriptor

Validate a Bitcoin output descriptor (wpkh, wsh, tr, pkh, sh, multi, sortedmulti, raw, addr, combo): verifies or computes the 8-character BIP380 checksum, checks derivation paths and xpubs, and derives sample addresses and scriptPubKeys. Never send xprv, WIF, or seed phrases.

Parametersnetworkdescriptorrequiredx402TxHashcreditTokenderiveCount

worksats_get_task

Get WorkSats Micro-Task

Fetch an open buyer-funded bounty task or a deterministic house micro-task (`descriptor_checksum_and_derive`) from the WorkSats clearinghouse (`GET /v1/tasks/next`). Solve it and call `worksats_solve_task` to mint bearer credits (`crd_...`).

Parametersidtypeexclude

worksats_solve_task

Submit WorkSats Task Solution

Submit a solved WorkSats task ticket (`tsk_...`) to mint a signed bearer credit token (`crd_...`). For house tasks, provide `checksum` and `scriptPubKeys`; for bounty tasks, provide `answer` or mode-specific fields (`addresses`, `address`, `scriptPubKey`, `feeSats`, `inputCount`, `outputCount`, `data`).

ParametersdataanswerticketrequiredaddressfeeSatschecksumaddressesinputCountoutputCountscriptPubKeyscriptPubKeys

worksats_credits

Manage WorkSats Bearer Credits

Manage WorkSats bearer credits (`crd_...`): check `balance`, `split` credits to pay another bot, `rotate`/`merge` received tokens so the sender cannot double-spend, `mint` credits from L402 or x402 Base USDC, `bounty_create` to escrow credits for a verifiable task (`sha256`, `descriptor_derive`, `address_script`, `psbt_feerate`, `json_schema`), or view clearinghouse `stats`.

Parametersfeetokenactionrequiredamountpromptrewardtokensx402_tx_hashexpected_sha256verification_modeverification_params

Version history

1
  1. v0.1.0LatestOct 29, 2026

Score

72% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts

    Publish an icon in the registry entry.

  • Documentation15 pts

    Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.

  • LicenseNot applicable

    A hosted service is used under its provider's terms, so no license is expected here. This check is left out of the percentage.

Other Workers integrations