HODLXXI Read-Only

io.github.hodlxxiPublished by GitHub account hodlxxiv0.1.1Updated Oct 25, 2026

Public read-only MCP server for HODLXXI agent identity, trust, receipts, and verification.

VerifiedStreamable HTTPWeb executableFinanceSecurity & Monitoring

Overview

AI-generated overview

A public, read-only remote MCP server exposing HODLXXI agent identity, trust, attestation, receipt and verification data through 26 fixed tools.

What you can do
Read agent identity, capabilities, skills, discovery and marketplace listing documents, plus their JSON schemas and API catalog linkset. Retrieve trust and reputation data: trust summary, trust events, attestations, chain health, covenant and covenant countdown. Fetch receipts and verify a previously issued receipt by job identifier. Inspect authentication and messaging metadata: OpenID configuration, OAuth authorization-server and protected-resource metadata, JWKS, and Nostr DM policy and announcement. Read operator-continuity statements and public trust or readiness reports by identifier.
When to use it
Use it when an assistant needs to look up HODLXXI's published agent identity, capabilities, reputation, attestation chain or receipts, or to verify a receipt it was given. It suits read-only trust and discovery checks rather than any workflow that creates or changes data.
Requirements
A remote Streamable HTTP endpoint; no API key or OAuth flow is required. The README also describes a local Python package run over stdio or a loopback-only HTTP sidecar, which needs Python and the package installed.
Before you install
Read-only by design: the README states no wallet, key, secret, payment or write access, and receipt verification cannot mint a receipt. Some upstream endpoints are deliberately excluded because they may change server state. All data comes from a single third-party origin, so treat returned trust and reputation figures as that operator's own claims.

Installation

In SourceWeft

  1. Open HODLXXI Read-Only in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.github.hodlxxi%2Fhodlxxi-readonly/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "hodlxxi-read-only": {
      "type": "http",
      "url": "https://hodlxxi.com/agent/mcp"
    }
  }
}

README

HODLXXI Read-Only MCP

Public remote MCP server and standalone FastMCP package wrapping 26 allowlisted HODLXXI machine-readable trust surfaces.

Public remote server

Use this Streamable HTTP endpoint in any MCP host that supports remote servers:

text
https://hodlxxi.com/agent/mcp

No API key or OAuth flow is required. The server is public and read-only.

Machine-readable discovery:

text
https://hodlxxi.com/.well-known/mcp.jsonhttps://hodlxxi.com/.well-known/agent.jsonhttps://hodlxxi.com/agent/capabilities

A compatible client can initialize a session, list exactly 26 tools, and call tools such as:

  • hodlxxi_get_agent_discovery
  • hodlxxi_get_capabilities
  • hodlxxi_get_chain_health
  • hodlxxi_get_reputation
  • hodlxxi_get_attestations
  • hodlxxi_get_operator_continuity
  • hodlxxi_get_receipt
  • hodlxxi_verify_receipt

The canonical MCP Registry metadata is stored at the repository root in server.json under the name io.github.hodlxxi/hodlxxi-readonly.

Security boundary

  • fixed upstream origin: https://hodlxxi.com
  • fixed endpoint enum; no generic URL tool
  • GET-only access to allowlisted upstream runtime surfaces
  • redirects disabled
  • 10-second upstream timeout
  • 2 MiB response ceiling
  • JSON and application/linkset+json only
  • strict identifier and pagination validation
  • no Flask imports, database access, wallet access, LND access, keys, secrets, environment reads, payment initiation, receipt creation, or write calls
  • dedicated systemd sidecar; the Flask monolith does not execute MCP tools
  • public nginx route proxies only to the loopback sidecar

GET /agent/jobs/<job_id> and GET /agent/readiness/self-scan are intentionally excluded because they may mutate server state.

Independent validation

The remote production path has been validated from an external macOS client and through a Claude custom connector:

text
external client -> HTTPS -> nginx -> loopback MCP sidecar -> public HODLXXI runtime surfaces

The validation completed MCP initialization, tools/list, and live calls to capabilities, chain health, and reputation. See docs/MCP_CLIENT_VALIDATION.md.

Development

bash
python3 -m venv .venv. .venv/bin/activatepython -m pip install --upgrade pippython -m pip install -e ".[test]"pytest -q

Run over stdio

bash
hodlxxi-mcp

Equivalent:

bash
python -m hodlxxi_mcp

For local client configuration, point the MCP host at the virtual-environment executable and use stdio transport.

Run the sidecar over localhost Streamable HTTP

bash
hodlxxi-mcp-http

The sidecar endpoint is fixed at:

text
http://127.0.0.1:8765/mcp

The sidecar transport is intentionally locked to loopback, stateless JSON responses, Host/Origin protection, and the same 26 read-only tools. Public exposure is handled separately by the hardened production reverse proxy.

Source: packages/hodlxxi_mcp/README.md at commit 5fa93cd

Tools

26

hodlxxi_get_agent_identity

Return the canonical public agent identity document, including capabilities, pricing, endpoints, skills, messaging metadata, and trust-model declarations.

Takes no parameters.

hodlxxi_get_operator_continuity

Return the public operator-continuity statement, operator and agent public keys, covenant status, rotation policy, and verification references.

Takes no parameters.

hodlxxi_get_api_catalog

Return the public RFC-style API linkset catalog with service descriptions, documentation links, and status links.

Takes no parameters.

hodlxxi_get_agent_skills_index

Return the Agent Skills discovery index with skill names, descriptions, URLs, types, and SHA-256 digests.

Takes no parameters.

hodlxxi_get_mcp_server_card

Return the live MCP discovery server card for https://hodlxxi.com/agent/mcp, which nginx routes to the separate read-only sidecar rather than the Flask monolith.

Takes no parameters.

hodlxxi_get_nostr_dm_policy

Return public NIP-17/NIP-59 messaging policy metadata, including intake status, custody limitations, accepted kind, and size ceiling.

Takes no parameters.

hodlxxi_get_openid_configuration

Return OpenID Connect discovery metadata: issuer, authorization and token endpoints, JWKS URI, grants, scopes, PKCE, and signing algorithms.

Takes no parameters.

hodlxxi_get_oauth_authorization_server

Return OAuth authorization-server metadata, including the HODLXXI agent_auth discovery block and disabled registration endpoint references.

Takes no parameters.

hodlxxi_get_oauth_protected_resource

Return OAuth protected-resource metadata, including resource issuer, authorization servers, JWKS URI, scopes, and bearer method.

Takes no parameters.

hodlxxi_get_jwks

Return the public RSA JSON Web Key Set used to verify HODLXXI-issued JWT signatures. No private JWK fields are exposed.

Takes no parameters.

hodlxxi_get_agent_discovery

Return the signed Agent Protocol discovery document with public endpoint links, trust surfaces, timestamp, and agent signature.

Takes no parameters.

hodlxxi_get_capabilities

Return the signed capabilities document with job schemas, pricing, limits, endpoint registry, public skills, and messaging metadata.

Takes no parameters.

hodlxxi_get_capabilities_schema

Return the JSON Schema published for the signed HODLXXI capabilities document.

Takes no parameters.

hodlxxi_get_skills

Return the checked-in public skill catalog with metadata, repository paths, and installation URLs.

Takes no parameters.

hodlxxi_get_marketplace_listing

Return the normalized marketplace listing with discovery links, job types, pricing, skills, reputation snapshot, chain health, and trust model.

Takes no parameters.

hodlxxi_get_reputation

Return aggregate public operating history, evidenced job counts, attestation count, trust and confidence averages, pattern distribution, and rolling trust trend.

Takes no parameters.

hodlxxi_get_attestations

Return paginated signed receipt attestations. limit must be 1-100 and offset must be non-negative.

Parameterslimitoffset

hodlxxi_get_trust_events

Return the paginated public trust-event chain with hashes, receipt linkage, timestamps, public key, and signatures.

Parameterslimitoffset

hodlxxi_get_nostr_announcement

Return the signed Nostr announcement template, advertised NIP-89/NIP-90 kinds, discovery links, and explicit non-goals.

Takes no parameters.

hodlxxi_get_chain_health

Return attestation-chain continuity status, event count, latest event hashes, and latest timestamp when available.

Takes no parameters.

hodlxxi_get_covenant_countdown

Return the machine-readable covenant countdown with chain height, spend paths, estimated unlocks, funding status, and conservative trust interpretation.

Takes no parameters.

hodlxxi_get_trust_summary

Return the compact trust summary for a validated public agent identifier.

Parametersagent_id

hodlxxi_get_covenant

Return a declared covenant artifact by validated covenant identifier, including descriptor, policy, funding status, public keys, and non-claims.

Parameterscovenant_id

hodlxxi_get_report

Return a public machine-readable trust or readiness report by validated report identifier, including its canonical SHA-256 field when present.

Parametersreport_idrequired

hodlxxi_verify_receipt

Verify a previously issued receipt by job identifier and return verification status, validity, attestation, signed receipt, event hash, and QR pointer non-claims. This does not poll /agent/jobs and cannot mint a receipt.

Parametersjob_idrequired

hodlxxi_get_receipt

Return a previously issued signed receipt by job identifier. Optional requester-proof fields depend on the historical receipt.

Parametersjob_idrequired

Version history

1
  1. v0.1.1LatestSep 16, 2026

Score

100% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts