Mcp Identity

io.github.zekebuilds-labPublished by GitHub account zekebuilds-labv0.7.2Updated Oct 24, 2026

DoI score lookup, vouch event builder, and offline schnorr verify for AI agents.

VerifiedSTDIODesktop onlyFinanceSecurity & Monitoring

Overview

AI-generated overview

Local MCP server that looks up PowForge Depth-of-Identity scores for Nostr pubkeys, builds vouch events, and verifies signed DoI certificates offline.

What you can do
  • Look up a Nostr pubkey's multi-dimensional identity score (network, longevity, kinetic-filter cost) from the PowForge oracle
  • Build an unsigned Nostr vouch event for another pubkey, which the caller signs itself
  • Verify a signed DoI certificate offline with Schnorr verification, without network access
  • Handle L402 payment negotiation with the oracle transparently on paid lookups
When to use it
Useful when an assistant or agent-facing service needs a quantitative Sybil-resistance signal about a Nostr caller, for example to price requests, set rate limits, or route traffic by identity depth.
Requirements
Runs locally over stdio, typically launched with npx from the npm package, so Node.js is needed. Network access to the PowForge oracle endpoint (ORACLE_URL, defaulting to the public production endpoint) for score lookups. ORACLE_PUBKEY optionally overrides the oracle's Schnorr pubkey used for offline verification. The README mentions an LNBITS_INVOICE_KEY environment variable for paying Lightning invoices.
Before you install
Score lookups are paid through L402: the wrapper pays a Lightning invoice from a wallet you configure, so real money can be spent per call. The README mentions an LNBITS_INVOICE_KEY environment variable for that wallet, which is a spending credential. Lookups send the queried pubkey to the third-party oracle. Vouch events are built unsigned and must be signed by the caller. Source is in a private repository, so the code cannot be reviewed.

Installation

In SourceWeft

  1. Open Mcp Identity in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

@powforge/mcp-identity

[zekebuilds-lab/mcp-identity MCP server]

MCP server that scores any Nostr pubkey's depth-of-identity before your handler runs. Chaintip-anchored Schnorr cert, L402 priced, drop-in for AI agents that need Sybil resistance on top of paid APIs.

npm: npm i @powforge/mcp-identity

Homepage: https://powforge.dev/explorer

Whitepaper: https://powforge.dev/whitepaper

What It Does

Three MCP tools that wrap the PowForge Depth-of-Identity Oracle:

  • doi_score_lookup — given a Nostr pubkey (hex or npub), returns multi-dimensional identity score (network, longevity, kinetic-filter cost). L402-priced via the upstream oracle.
  • doi_sign_vouch — builds an unsigned Nostr event for vouching depth-of-identity for another pubkey. Caller signs; oracle counts toward score on observation.
  • doi_score_verify — offline Schnorr verification of a signed DoI cert returned from the oracle. No network.

Why Identity-Anchored Pricing

Most paid-API services charge per-request flat. That fails on agent-to-agent surfaces where:

  1. New agents look identical to scrapers — no signal on intent or risk.
  2. Long-tail abusers extract value cheaper than they impose cost.
  3. Whitelist gating doesn't scale to open agent ecosystems.

DoI gives your server a quantitative number for "how much would it cost to fake this caller's identity at this depth" — anchored to a specific Bitcoin chaintip cert that's non-repudiable. Use it as a multiplier on your L402 macaroon price, a rate-limit input, or a routing key.

Quick Start

bash
npm i @powforge/mcp-identity

Add to your MCP config (Claude Desktop, Cursor, etc):

json
{  "mcpServers": {    "powforge-identity": {      "command": "npx",      "args": ["-y", "@powforge/mcp-identity"]    }  }}

Restart the client. Three new tools appear under powforge-identity.

Why Chaintip-Anchored

The score includes a Schnorr signature over (score, dimensions, score_chaintip_height, score_chaintip_blockhash). That binds the claim to Bitcoin's kinetic filter — recomputable PageRank scores can be silently rewritten, but a chaintip-anchored cert is a fixed claim against a known time. Verification is offline.

The oracle's falsifiable claim window is documented in the whitepaper.

L402 Pricing

The MCP server transparently handles the L402 macaroon dance with oracle.powforge.dev. First call returns a 402 with a Lightning invoice; the wrapper pays from a wallet you configure (env: LNBITS_INVOICE_KEY) and retries. No keys, no accounts.

Status

License

MIT.

Source

Source lives in a private development repo. Issues, questions, and bug reports welcome here.

Source: README.md at commit 59042c8

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

1
  1. v0.7.2LatestSep 16, 2026

Score

40% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts

    Declare a license in the repository or the registry entry.