PabandiOS

io.github.jweezy119Published by GitHub account jweezy119v1.0.1Updated Oct 30, 2026

Trust and settlement for AI agents: portable attestations, escrow, x402/USDC payments on Solana.

VerifiedStreamable HTTPWeb executableFinanceSecurity & MonitoringBusiness & Commerce

Overview

AI-generated overview

PabandiOS exposes Pabandi's trust and settlement platform: verify passports and attestations, search verified businesses, book stays, and move escrow funds.

What you can do
  • Verify trust: check Pabandi passports and PTP attestations offline, optionally requiring a capability, and read risk band and expiry.
  • Discover the platform: fetch discovery documents, protocol public key, tool list, access tiers and per-tool access checks.
  • Search and read listings: find verified businesses and services by name, category, city or location, resolve business profiles, and list short-term rental properties.
  • Book and escrow: create stay reservations with guest deposits held in escrow, start milestone or SOL/BSC escrow, and generate zero-knowledge real-estate proofs.
  • Finance: register masked settlement connections, list a business's connections, and quote offramp or payout…
When to use it
Use it when an assistant needs to check whether an agent, business or person is trust-verified before acting, to find verified service businesses or stays, or to run booking, escrow and payout flows on Pabandi's rails.
Requirements
A remote streamable HTTP endpoint; no package install. Some tools require authentication and owner or exclusive platform access, and issuing a passport is metered in $PAB. Self-hosting from source needs Node.js, PostgreSQL (DATABASE_URL), JWT_SECRET, SOLANA_RPC_URL and optionally SQUARE_ACCESS_TOKEN.
Before you install
Several tools write or move value: issuing passports is charged in $PAB, booking holds a guest deposit in escrow, and escrow tools perform real chain writes on Solana and BSC. Authentication is required for issuing and owner-gated tools. Finance connections and business profiles expose contact and payout details, and search uses OpenStreetMap Nominatim. Treat attestation and proof outputs as claims to verify, not guarantees.

Installation

In SourceWeft

  1. Open PabandiOS in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.github.jweezy119%2FPabandi/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "pabandios": {
      "type": "http",
      "url": "https://pabandi.onrender.com/mcp"
    }
  }
}

README

Pabandi: The Trust & Settlement Layer for the Agent Economy

[TypeScript] [Solana] [Prisma] [License: MIT] [PRs Welcome]

Pabandi is an open-source, programmable settlement layer enabling AI Agents to safely hire humans, and humans to hire AI Agents. We provide the missing infrastructure for the machine economy: non-custodial escrow, Session Abstraction (gasless micro-payments), verifiable data provenance (VCAP), and decentralized dispute resolution (Sulha).

🏛️ Enterprise Security Architecture

Pabandi is built for high-stakes autonomous transactions. Our architecture is designed around three core pillars:

  1. Autonomy Boundaries: Engineers configure capability envelopes and permission tiers. The harness uses "Session Abstraction" to intercept tool calls exceeding pre-allocated quotas, preventing runaway execution loops and unauthorized infrastructure modifications.
  2. Scoped Identity: Security teams bind distinct cryptographic identities to agents (Trust Passports). The harness authenticates inter-agent requests and prevents unauthorized privilege escalation across cluster boundaries.
  3. Intent Contracts: Developers formalize pre-execution schema contracts (via Zod). Before executing destructive operations or releasing escrow, the harness verifies post-condition invariants and matches payload checksums (VCAP hashes) against approved task specifications.

🧠 Core Primitives

  • Agentic Escrow: Programmable USDC escrow for A2A and Human-to-Agent deals.
  • Yield-Bearing Deposits: Locked funds earn safe Solana yield (via Kamino), split 50/50 between the client and the business.
  • MCP Native: A full Model Context Protocol server allowing agents to book humans, verify trust, and execute bids.
  • Trust Passport: A portable, non-transferable SBT on Solana that aggregates verified history and on-chain reputation.

🏗️ Tech Stack

  • Frontend: React (Vite), TailwindCSS, Framer Motion.
  • Backend: Node.js, Express, Prisma ORM.
  • Database: PostgreSQL.
  • Blockchain: Solana (Web3.js).
  • Payments: x402, Square, Solana Pay.

🚀 Getting Started (Local Development)

bash
git clone https://github.com/jweezy119/Pabandi.gitcd Pabandinpm installcd client && npm installcd ../server && npm install
bash
cd servercp .env.example .env

Set the required variables:

  • DATABASE_URL — PostgreSQL connection string
  • JWT_SECRET — random 64-character hex string
  • SOLANA_RPC_URL — Devnet or Mainnet
  • SQUARE_ACCESS_TOKEN — for fiat payments (optional)
bash
cd servernpx prisma db pushnpx prisma generate

Terminal 1 (Backend):

bash
cd servernpm run dev

Terminal 2 (Frontend):

bash
cd clientnpm run dev

The app will be available at http://localhost:5173.

🤝 Contributing

We welcome contributions from AI researchers and Solana developers. Please run npm run build and npx tsc --noEmit before submitting a PR.

  1. Fork the repo.
  2. Create a feature branch (git checkout -b feature/amazing-feature).
  3. Commit your changes (git commit -m 'Add some amazing feature').
  4. Push to the branch (git push origin feature/amazing-feature).
  5. Open a Pull Request.

👤 About the Founder

Pabandi was founded by [Your Name], an IT specialist with over 8 years of experience solving complex infrastructure and security challenges for lean teams. Frustrated by the broken trust dynamics in the service economy — and the lack of secure infrastructure for autonomous AI agents — he shifted focus to AI/ML and Web3. Pabandi is the result: a platform built with customer obsession at its core, designed to make trust portable, programmable, and profitable for humans and machines alike.

📄 License

Distributed under the MIT License. See LICENSE for more information.

Built with 🧱 in the USA and Pakistan. Wada karo, inaam pao. (Make a promise, earn a reward.)

Source: README.md at commit 6361b42

Tools

20

pabandi_verify_passport

Verify a Pabandi PTP attestation (agent, business, individual, or trust rail). Input a base64-encoded attestation and optionally require a capability (e.g. "act:book"). Returns valid, granted capabilities, risk band, expiry. Offline-verifiable: re-executes HMAC-SHA512 over a fixed field subset.

Parametersneedtokenrequired

pabandi_discover

Return the Pabandi Trust Protocol discovery document: public verify endpoint URL, protocol public key, issue endpoint, supported risk bands/entity types.

Takes no parameters.

pabandi_get_ledger

Public audit lookup of a passport issuance charge by idempotency key. Returns fee ($PAB), owner, agent, risk band, capabilities.

ParametersidempotencyKeyrequired

pabandi_issue_passport

Issue a scoped Agent Capability Passport. Capabilities are validated against owner trust band. Metered at PAB_FEE_PER_PASSPORT $PAB per issue (idempotent). Authentication required.

ParametersagentIdrequiredcapabilitiesrequiredidempotencyKey

pabandi_discover_platform

Discover the full Pabandi Platform: every tool, OpenAPI/spec URL, MCP endpoint, PTP endpoints, SDK info, access tiers, and live status.

Takes no parameters.

pabandi_platform_access

Check whether the caller can access a given Pabandi platform tool (by MCP tool name). Returns ok + note.

ParameterstoolNamerequired

pabandi_platform_discovery

Return the Pabandi Platform discovery doc: every tool on the platform, the OpenAPI/spec URL, the PTP verification endpoint, the public key, and the SDK access info. This is the entry point any third-party app, LLM, or agent uses to learn what Pabandi can do and how to call it. This MCP tool makes a real HTTP call to the canonical Pabandi endpoint and returns the actual platform response.

Takes no parameters.

pabandi_verify_trust_attestation

Verify a Pabandi PTP attestation (business, individual, agent, or trust rail). Re-executes the HMAC-SHA512 signature over a fixed subset of fields and returns valid + the verified claims. Offline-verifiable: any party can check a signed attestation without calling Pabandi. This is the trust primitive every third-party action gates on. This MCP tool makes a real HTTP call to the canonical Pabandi endpoint and returns the actual platform response.

Parameterstokenrequired

pabandi_search_services

Search verified businesses and services by name, category, city, or location. Every listing is tied to a Pabandi Passport trust score. Uses Postgres contains + OpenStreetMap Nominatim (no paid geo API). Returns real, deduped results — never empty. This MCP tool makes a real HTTP call to the canonical Pabandi endpoint and returns the actual platform response.

Parameterssearchrequiredcategoryrequiredlatituderequiredlongituderequired

pabandi_get_business

Resolve a business profile by id (public). Returns the sanitized public view (name, category, address, rating, trustScore, phone, email, coverImageUrl). Owner PII is gated — use pabandi:verify_owner for full PII. This MCP tool makes a real HTTP call to the canonical Pabandi endpoint and returns the actual platform response.

Parametersidrequired

pabandi_list_properties

List open short-term rentals / stays (Airbnb-style) by city or category. Each property is tied to a business + its open-finance settlement rail if connected. This is the hospitality inventory surface. This MCP tool makes a real HTTP call to the canonical Pabandi endpoint and returns the actual platform response.

Parameterscityrequiredcategoryrequired

pabandi_book_stay

Create a confirmed stay reservation for a property: links the existing Reservation model + a StayBooking, then holds the guest deposit in escrow (EscrowEvent + TreasuryPosition with kind:hospitality, Solana commitment, PTP attestation). The guest deposit is the trust anchor — released to the business on check-in, refunded on cancellation. This is the hospitality money rail. [verified] Gated to businesses with an attested open-finance settlement rail OR PTP Band A/B, so every booked stay has a real, verified payout path. This is what makes the hospitality vertical trustworthy to guests and exclusive to quality hosts. This MCP tool makes a real HTTP call to the canonical Pabandi endpoint and returns the actual platform response.

ParametersguestsrequiredcheckInrequiredcheckOutrequiredpropertyIdrequireddepositAmountrequired

pabandi_connect_finance

Register a verifiable, masked settlement connection for a business: RAAST (Pakistan), Stripe Treasury, Open Banking, Solana wallet, or PayPal. The account reference is masked (never raw), and a PTP attestation is produced so the business can prove it has a real payout path without exposing the account. This is the open-finance connectivity primitive — the trust badge on a listing. This MCP tool makes a real HTTP call to the canonical Pabandi endpoint and returns the actual platform response.

ParametersproviderrequiredaccountRefrequired

pabandi_list_finance

Return a business's connected open-finance connections (verified + pending). Used by third parties to confirm a business has a real payout path before booking or partnering. This MCP tool makes a real HTTP call to the canonical Pabandi endpoint and returns the actual platform response.

ParametersbusinessIdrequired

pabandi_start_escrow

Initialize a milestone-based or native SOL/BSC escrow for a booking: business deposits, guest/host holds collateral, release on completion. This is the real-chain escrow rail (Solana + BSC Hardhat contracts). GATED to exclusive platform access — real chain writes require verified ownership + settlement rail. [exclusive] Exclusive: real-chain escrow writes are gated behind a verified PTP trust band (A/B) or an exclusive platform grant, so only trusted counterparties open real money on chain. Verified-only stays use the simulated escrow path. This is the premium moat — the real rail, gated. This MCP tool makes a real HTTP call to the canonical Pabandi endpoint and returns the actual platform response.

ParameterschainrequiredamountrequiredpayoutAddressrequiredreservationIdrequiredbusinessAddressrequired

pabandi_finance_quote

Quote an offramp/payout from the platform rails (RAAST, Stripe, Solana). Returns estimated fees, execution window, and the rail to use. Feeds the hospitality payout flow. This MCP tool makes a real HTTP call to the canonical Pabandi endpoint and returns the actual platform response.

ParametersamountUsdcrequired

pabandi_predict_booking

Forward-predict the no-show and completion probability for a PROSPECTIVE booking (before it is created). Blends real customer + business history (Beta-binomial shrinkage), lead-time, and day-of-week. Returns predictedNoShow, predictedCompletion, confidence, and the top factors. This is the predictive intelligence the trust rail uses. This MCP tool makes a real HTTP call to the canonical Pabandi endpoint and returns the actual platform response.

ParametersbusinessIdrequiredcustomerIdrequiredreservationTimerequired

pabandi_predict_demand

Return 24 hourly demand buckets for a business (from completed reservation history). Used to surface busy windows and optimize pricing/staffing. Owner-gated. This MCP tool makes a real HTTP call to the canonical Pabandi endpoint and returns the actual platform response.

ParametersbusinessIdrequired

pabandi_recommend_slots

Recommend the best upcoming slots for a guest at a business: each candidate scored by predictedCompletion, lightly load-balanced away from peak hours. Returns top 3 slots with predicted completion + demand. Owner-gated. This MCP tool makes a real HTTP call to the canonical Pabandi endpoint and returns the actual platform response.

ParametersdaysAheadrequiredbusinessIdrequiredcustomerIdrequired

pabandi_zk_realestate_proof

Generate a zero-knowledge proof that an escrow split (deposit = price - commission, fee = deposit*rate, binding commitment to the valuation) is valid, WITHOUT revealing the private price/valuation/secret. Packs into a PTP attestation so the proof is verifiable offline by any third party. Real Noir circuit (compiled at startup); constraint-execution proof when no SNARK prover is available; upgrades to a succinct signature when the Barretenberg pipeline lands. [owner] Proves the escrow split is correct without revealing the valuation — the privacy + verifiability moat for real-estate/hospitality deals. Upgrades to a succinct on-chain-verifiable SNARK when Barretenberg is in the pipeline. This MCP tool makes a real HTTP call to the canonical Pabandi endpoint and returns the actual platform response.

Parametersraterequiredpricerequireddepositrequireddeadlinerequiredcommissionrequiredagent_secretrequiredvaluation_hashrequiredconsecutiveMonthsrequired

Version history

2
  1. v1.0.1LatestOct 23, 2026
  2. v1.0.0Sep 22, 2026

Score

100% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts