Hive Keet Bridge

io.github.srotzinPublished by GitHub account srotzinv1.0.0Updated Oct 25, 2026

MCP server bridging holepunchto/keet-identity-key to the Hive agentic identity network

VerifiedStreamable HTTPWeb executableKnowledge & MemorySecurity & Monitoring

Overview

AI-generated overview

Remote MCP bridge that resolves Keet identity keys to Hive DIDs, verifies signed ed25519 attestations, and links keys to the Hive registry.

What you can do
Resolve a Keet identity key (hex or base58) to a did:hive DID document and agent card URI, and look up cached hyperdht announce records for a key without Hive operating hyperdht itself. Verify ed25519 attestations signed by a Keet identity key, with no network call needed. Link a Keet identity key to a Hive DID, an idempotent write to the Hive registry that requires a signed attestation proving key control. Browse a Holepunch and Keet partner directory with canonical links and bridge endpoints.
When to use it
Useful when an assistant needs to map Keet identity keys to Hive DIDs, check that a key signed a given message, or register a key-to-DID link in the Hive registry. Mostly relevant to agent identity and attestation workflows rather than general tasks.
Requirements
A remote MCP endpoint over streamable HTTP; no local runtime or package is needed. No authentication, environment variables or headers are declared. The client connects to the hosted gateway URL.
Before you install
The link tool writes to the Hive registry, so confirm before linking a key. Identity keys and attestation signatures are sent to a third-party hosted service. The README mentions x402 agent commerce pricing and Hive financial infrastructure, so check for any paid usage before relying on it.

Installation

In SourceWeft

  1. Open Hive Keet Bridge in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.github.srotzin%2Fhive-mcp-keet-bridge/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "hive-keet-bridge": {
      "type": "http",
      "url": "https://hive-mcp-gateway.onrender.com/keet-bridge/mcp"
    }
  }
}

README

hive-mcp-keet-bridge

MCP server — Hive–Holepunch/Keet identity bridge

Bridges holepunchto/keet-identity-key (Apache-2.0) into the Hive agentic identity network. Exposes DID resolution, signed attestation verification, and a partner directory as MCP tools. Read-only resolution and attestation — Hive does not operate hyperdht bootstrap nodes or Keet servers.

Holepunch is a partner. This shim composes on top of the Holepunch identity primitive. It does not fork, replace, or compete with Keet, hyperswarm, or hyperdht.

Partner doctrine

LayerOwner
DHT peer discovery and transportHolepunch (hyperswarm, hyperdht)
HD ed25519 key derivationHolepunch (keet-identity-key, Apache-2.0)
Keet UX and messagingHolepunch / Keet
DID resolution and trust registryHive
Signed attestation and receipt layerHive
x402 agent commerce pricingHive

Tools

ToolDescriptionRead-only
keet_identity_resolveResolve a Keet identity key (ed25519, hex or base58) to a did:hive: DID document and agent_card URIYes
keet_did_linkLink a Keet identity key to a Hive DID — idempotent, requires a signed attestation proving key controlWrite (Hive registry only)
keet_signed_attestation_verifyVerify an ed25519 attestation signed by a Keet identity key — no network call requiredYes
keet_hyperdht_announceReturn cached hyperdht announce record for a given identity key — Hive does not operate hyperdhtYes
keet_partner_directoryHolepunch + Keet partner integration directory with canonical links and Hive bridge endpointsYes

Endpoints

PathMethodDescription
/mcpPOSTJSON-RPC 2.0 MCP endpoint (protocol: 2024-11-05)
/healthGETServer health and tool count
/.well-known/mcp.jsonGETMCP manifest

Connect

MCP client config (stdio-compatible HTTP)

json
{  "mcpServers": {    "hive-mcp-keet-bridge": {      "url": "https://hive-mcp-keet-bridge.onrender.com/mcp",      "transport": "http"    }  }}

Smithery

Submit at: https://smithery.ai/new?repo=srotzin/hive-mcp-keet-bridge

Glama / MCP.so

Auto-crawled from GitHub. Claim after 24-72h at:

  • https://glama.ai/mcp/servers/srotzin/hive-mcp-keet-bridge

Usage examples

Resolve a Keet identity key

json
{  "jsonrpc": "2.0",  "id": 1,  "method": "tools/call",  "params": {    "name": "keet_identity_resolve",    "arguments": {      "identity_key": "a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4e5f6a1b2"    }  }}

Verify a signed attestation

json
{  "jsonrpc": "2.0",  "id": 2,  "method": "tools/call",  "params": {    "name": "keet_signed_attestation_verify",    "arguments": {      "identity_key": "a1b2c3d4e5f6...",      "message": "did:hive:keet:abc123",      "signature": "<base64-encoded ed25519 signature>"    }  }}

Partner directory

json
{  "jsonrpc": "2.0",  "id": 3,  "method": "tools/call",  "params": {    "name": "keet_partner_directory",    "arguments": { "format": "json" }  }}

Key derivation spec

Identity keys are produced by holepunchto/keet-identity-key — a BIP32-style hierarchical deterministic (HD) derivation generating ed25519 keypairs for the Keet identity system. This library is licensed under Apache-2.0 and is developed and maintained by Holepunch.

Hive's DID composition maps each Keet identity root deterministically to a did:hive:keet:<base64url-pubkey> string. The mapping is purely additive — the Holepunch key derivation spec is unchanged.

Boundary: what Hive does not do

  • Hive does not operate hyperdht bootstrap nodes.
  • Hive does not operate Keet servers or relay traffic.
  • Hive does not fork or modify keet-identity-key.
  • Hive does not issue settlement assets on behalf of Holepunch or Tether.
  • This shim does not claim to run on the Keet network — it resolves and attests.

Runtime

  • Node.js >= 18
  • Express 4.x
  • Zero DHT or P2P dependencies in this shim
  • LLM calls: https://hivecompute-g2g7.onrender.com/v1/compute/chat/completions (Hive internal)

Pairs with

  • holepunchto/keet-identity-key (Apache-2.0) — key derivation spec
  • future: hive-keet-attest backend — signed attestation persistence layer (in roadmap)
  • hive-mcp-inbox spec — peer-to-peer agent messaging over Holepunch transport

License

MIT — see LICENSE.

Composes on top of holepunchto/keet-identity-key, which is licensed under the Apache License, Version 2.0. That library is referenced as a specification — it is not bundled with this package.

Hive Civilization. Brand gold #C08D23. Treasury 0x15184bf50b3d3f52b60434f8942b7d52f2eb436e.

Hive Civilization Directory

Part of the Hive Civilization — agent-native financial infrastructure.

Brand: #C08D23

Source: README.md at commit 84bbcc9

Tools

0
SourceWeft has not read this server's tools yet.

Version history

1
  1. v1.0.0LatestSep 16, 2026

Score

75% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts

    Declare a license in the repository or the registry entry.