PabandiOS

io.github.jweezy119由 GitHub 账号 jweezy119 发布v1.0.1更新于 Oct 30, 2026

Trust and settlement for AI agents: portable attestations, escrow, x402/USDC payments on Solana.

已验证Streamable HTTP可网页运行金融安全与监控商业与电商

概览

AI 生成的概览

PabandiOS 提供 Pabandi 信任与结算平台:验证护照与证明、搜索认证商家、预订住宿并处理托管资金。

可以做什么
  • 验证信任:离线校验 Pabandi 护照与 PTP 证明,可要求特定能力,并返回风险等级与有效期。
  • 发现平台:获取发现文档、协议公钥、工具清单、访问层级,并检查单个工具的访问权限。
  • 搜索与查询:按名称、类别、城市或位置查找认证商家与服务,解析商家资料,列出短租住宿。
  • 预订与托管:创建住宿预订并将客人押金放入托管,启动里程碑式或 SOL/BSC 托管,生成零知识房产证明。
  • 金融:登记脱敏的结算连接、列出商家的连接,并报价出金或打款费用。
  • 预测:预测潜在预订的爽约与完成概率、每小时需求以及推荐时段。
适用场景
当助手需要在行动前确认某个代理、商家或个人是否通过信任验证,需要查找认证服务商家或住宿,或在 Pabandi 通道上完成预订、托管与打款流程时使用。
运行要求
远程 streamable HTTP 端点,无需安装包。部分工具需要身份验证以及所有者或专属平台权限,签发护照按 $PAB 计费。从源码自建需要 Node.js、PostgreSQL(DATABASE_URL)、JWT_SECRET、SOLANA_RPC_URL,可选 SQUARE_ACCESS_TOKEN。
安装前请注意
多个工具会写入或转移价值:签发护照按 $PAB 收费,预订会将客人押金放入托管,托管工具会在 Solana 与 BSC 上进行真实链上写入。签发与所有者专属工具需要身份验证。金融连接与商家资料会暴露联系方式与收款信息,搜索使用 OpenStreetMap Nominatim。证明与证明输出应视为待核实的声明,而非保证。

安装

在 SourceWeft 中

  1. 打开 控制台中的 PabandiOS,将其添加到工作区。
  2. 为需要使用其工具的对话启用该服务。

Web executable,通过 Streamable HTTP。 远程服务在工作区中配置后即可从网页运行时运行。

交给智能体安装

把这段提示词粘贴到 Claude Code、Codex、Cursor 等智能体,或 SourceWeft 对话中。智能体会读取该服务器的安装指南,先向你展示发布者、端点和登录方式,经你同意后再把它添加到你的客户端。密钥不会写进任何命令。

阅读 https://sourceweft.com/mcp/io.github.jweezy119%2FPabandi/install.md,并按其中说明把这个 MCP 服务器接入我的客户端。修改任何配置之前,先告诉我它的发布者、端点和登录方式,等我确认。不要把 API 密钥写进命令或我会提交的文件;问我密钥应从哪里获取。

查看智能体所依据的安装指南

其他 MCP 客户端

把它添加到你客户端的 mcpServers 配置中。

{
  "mcpServers": {
    "pabandios": {
      "type": "http",
      "url": "https://pabandi.onrender.com/mcp"
    }
  }
}

README

Pabandi: The Trust & Settlement Layer for the Agent Economy

[TypeScript] [Solana] [Prisma] [License: MIT] [PRs Welcome]

Pabandi is an open-source, programmable settlement layer enabling AI Agents to safely hire humans, and humans to hire AI Agents. We provide the missing infrastructure for the machine economy: non-custodial escrow, Session Abstraction (gasless micro-payments), verifiable data provenance (VCAP), and decentralized dispute resolution (Sulha).


🏛️ Enterprise Security Architecture

Pabandi is built for high-stakes autonomous transactions. Our architecture is designed around three core pillars:

  1. Autonomy Boundaries: Engineers configure capability envelopes and permission tiers. The harness uses "Session Abstraction" to intercept tool calls exceeding pre-allocated quotas, preventing runaway execution loops and unauthorized infrastructure modifications.
  2. Scoped Identity: Security teams bind distinct cryptographic identities to agents (Trust Passports). The harness authenticates inter-agent requests and prevents unauthorized privilege escalation across cluster boundaries.
  3. Intent Contracts: Developers formalize pre-execution schema contracts (via Zod). Before executing destructive operations or releasing escrow, the harness verifies post-condition invariants and matches payload checksums (VCAP hashes) against approved task specifications.

🧠 Core Primitives

  • Agentic Escrow: Programmable USDC escrow for A2A and Human-to-Agent deals.
  • Yield-Bearing Deposits: Locked funds earn safe Solana yield (via Kamino), split 50/50 between the client and the business.
  • MCP Native: A full Model Context Protocol server allowing agents to book humans, verify trust, and execute bids.
  • Trust Passport: A portable, non-transferable SBT on Solana that aggregates verified history and on-chain reputation.

🏗️ Tech Stack

  • Frontend: React (Vite), TailwindCSS, Framer Motion.
  • Backend: Node.js, Express, Prisma ORM.
  • Database: PostgreSQL.
  • Blockchain: Solana (Web3.js).
  • Payments: x402, Square, Solana Pay.

🚀 Getting Started (Local Development)

bash
git clone https://github.com/jweezy119/Pabandi.gitcd Pabandinpm installcd client && npm installcd ../server && npm install
bash
cd servercp .env.example .env

Set the required variables:

  • DATABASE_URL — PostgreSQL connection string
  • JWT_SECRET — random 64-character hex string
  • SOLANA_RPC_URL — Devnet or Mainnet
  • SQUARE_ACCESS_TOKEN — for fiat payments (optional)
bash
cd servernpx prisma db pushnpx prisma generate

Terminal 1 (Backend):

bash
cd servernpm run dev

Terminal 2 (Frontend):

bash
cd clientnpm run dev

The app will be available at http://localhost:5173.


🤝 Contributing

We welcome contributions from AI researchers and Solana developers. Please run npm run build and npx tsc --noEmit before submitting a PR.

  1. Fork the repo.
  2. Create a feature branch (git checkout -b feature/amazing-feature).
  3. Commit your changes (git commit -m 'Add some amazing feature').
  4. Push to the branch (git push origin feature/amazing-feature).
  5. Open a Pull Request.

👤 About the Founder

Pabandi was founded by [Your Name], an IT specialist with over 8 years of experience solving complex infrastructure and security challenges for lean teams. Frustrated by the broken trust dynamics in the service economy — and the lack of secure infrastructure for autonomous AI agents — he shifted focus to AI/ML and Web3. Pabandi is the result: a platform built with customer obsession at its core, designed to make trust portable, programmable, and profitable for humans and machines alike.


📄 License

Distributed under the MIT License. See LICENSE for more information.

Built with 🧱 in the USA and Pakistan. Wada karo, inaam pao. (Make a promise, earn a reward.)

来源:README.md,提交 6361b42

工具

20

pabandi_verify_passport

Verify a Pabandi PTP attestation (agent, business, individual, or trust rail). Input a base64-encoded attestation and optionally require a capability (e.g. "act:book"). Returns valid, granted capabilities, risk band, expiry. Offline-verifiable: re-executes HMAC-SHA512 over a fixed field subset.

输入参数needtoken必填

pabandi_discover

Return the Pabandi Trust Protocol discovery document: public verify endpoint URL, protocol public key, issue endpoint, supported risk bands/entity types.

无需输入参数。

pabandi_get_ledger

Public audit lookup of a passport issuance charge by idempotency key. Returns fee ($PAB), owner, agent, risk band, capabilities.

输入参数idempotencyKey必填

pabandi_issue_passport

Issue a scoped Agent Capability Passport. Capabilities are validated against owner trust band. Metered at PAB_FEE_PER_PASSPORT $PAB per issue (idempotent). Authentication required.

输入参数agentId必填capabilities必填idempotencyKey

pabandi_discover_platform

Discover the full Pabandi Platform: every tool, OpenAPI/spec URL, MCP endpoint, PTP endpoints, SDK info, access tiers, and live status.

无需输入参数。

pabandi_platform_access

Check whether the caller can access a given Pabandi platform tool (by MCP tool name). Returns ok + note.

输入参数toolName必填

pabandi_platform_discovery

Return the Pabandi Platform discovery doc: every tool on the platform, the OpenAPI/spec URL, the PTP verification endpoint, the public key, and the SDK access info. This is the entry point any third-party app, LLM, or agent uses to learn what Pabandi can do and how to call it. This MCP tool makes a real HTTP call to the canonical Pabandi endpoint and returns the actual platform response.

无需输入参数。

pabandi_verify_trust_attestation

Verify a Pabandi PTP attestation (business, individual, agent, or trust rail). Re-executes the HMAC-SHA512 signature over a fixed subset of fields and returns valid + the verified claims. Offline-verifiable: any party can check a signed attestation without calling Pabandi. This is the trust primitive every third-party action gates on. This MCP tool makes a real HTTP call to the canonical Pabandi endpoint and returns the actual platform response.

输入参数token必填

pabandi_search_services

Search verified businesses and services by name, category, city, or location. Every listing is tied to a Pabandi Passport trust score. Uses Postgres contains + OpenStreetMap Nominatim (no paid geo API). Returns real, deduped results — never empty. This MCP tool makes a real HTTP call to the canonical Pabandi endpoint and returns the actual platform response.

输入参数search必填category必填latitude必填longitude必填

pabandi_get_business

Resolve a business profile by id (public). Returns the sanitized public view (name, category, address, rating, trustScore, phone, email, coverImageUrl). Owner PII is gated — use pabandi:verify_owner for full PII. This MCP tool makes a real HTTP call to the canonical Pabandi endpoint and returns the actual platform response.

输入参数id必填

pabandi_list_properties

List open short-term rentals / stays (Airbnb-style) by city or category. Each property is tied to a business + its open-finance settlement rail if connected. This is the hospitality inventory surface. This MCP tool makes a real HTTP call to the canonical Pabandi endpoint and returns the actual platform response.

输入参数city必填category必填

pabandi_book_stay

Create a confirmed stay reservation for a property: links the existing Reservation model + a StayBooking, then holds the guest deposit in escrow (EscrowEvent + TreasuryPosition with kind:hospitality, Solana commitment, PTP attestation). The guest deposit is the trust anchor — released to the business on check-in, refunded on cancellation. This is the hospitality money rail. [verified] Gated to businesses with an attested open-finance settlement rail OR PTP Band A/B, so every booked stay has a real, verified payout path. This is what makes the hospitality vertical trustworthy to guests and exclusive to quality hosts. This MCP tool makes a real HTTP call to the canonical Pabandi endpoint and returns the actual platform response.

输入参数guests必填checkIn必填checkOut必填propertyId必填depositAmount必填

pabandi_connect_finance

Register a verifiable, masked settlement connection for a business: RAAST (Pakistan), Stripe Treasury, Open Banking, Solana wallet, or PayPal. The account reference is masked (never raw), and a PTP attestation is produced so the business can prove it has a real payout path without exposing the account. This is the open-finance connectivity primitive — the trust badge on a listing. This MCP tool makes a real HTTP call to the canonical Pabandi endpoint and returns the actual platform response.

输入参数provider必填accountRef必填

pabandi_list_finance

Return a business's connected open-finance connections (verified + pending). Used by third parties to confirm a business has a real payout path before booking or partnering. This MCP tool makes a real HTTP call to the canonical Pabandi endpoint and returns the actual platform response.

输入参数businessId必填

pabandi_start_escrow

Initialize a milestone-based or native SOL/BSC escrow for a booking: business deposits, guest/host holds collateral, release on completion. This is the real-chain escrow rail (Solana + BSC Hardhat contracts). GATED to exclusive platform access — real chain writes require verified ownership + settlement rail. [exclusive] Exclusive: real-chain escrow writes are gated behind a verified PTP trust band (A/B) or an exclusive platform grant, so only trusted counterparties open real money on chain. Verified-only stays use the simulated escrow path. This is the premium moat — the real rail, gated. This MCP tool makes a real HTTP call to the canonical Pabandi endpoint and returns the actual platform response.

输入参数chain必填amount必填payoutAddress必填reservationId必填businessAddress必填

pabandi_finance_quote

Quote an offramp/payout from the platform rails (RAAST, Stripe, Solana). Returns estimated fees, execution window, and the rail to use. Feeds the hospitality payout flow. This MCP tool makes a real HTTP call to the canonical Pabandi endpoint and returns the actual platform response.

输入参数amountUsdc必填

pabandi_predict_booking

Forward-predict the no-show and completion probability for a PROSPECTIVE booking (before it is created). Blends real customer + business history (Beta-binomial shrinkage), lead-time, and day-of-week. Returns predictedNoShow, predictedCompletion, confidence, and the top factors. This is the predictive intelligence the trust rail uses. This MCP tool makes a real HTTP call to the canonical Pabandi endpoint and returns the actual platform response.

输入参数businessId必填customerId必填reservationTime必填

pabandi_predict_demand

Return 24 hourly demand buckets for a business (from completed reservation history). Used to surface busy windows and optimize pricing/staffing. Owner-gated. This MCP tool makes a real HTTP call to the canonical Pabandi endpoint and returns the actual platform response.

输入参数businessId必填

pabandi_recommend_slots

Recommend the best upcoming slots for a guest at a business: each candidate scored by predictedCompletion, lightly load-balanced away from peak hours. Returns top 3 slots with predicted completion + demand. Owner-gated. This MCP tool makes a real HTTP call to the canonical Pabandi endpoint and returns the actual platform response.

输入参数daysAhead必填businessId必填customerId必填

pabandi_zk_realestate_proof

Generate a zero-knowledge proof that an escrow split (deposit = price - commission, fee = deposit*rate, binding commitment to the valuation) is valid, WITHOUT revealing the private price/valuation/secret. Packs into a PTP attestation so the proof is verifiable offline by any third party. Real Noir circuit (compiled at startup); constraint-execution proof when no SNARK prover is available; upgrades to a succinct signature when the Barretenberg pipeline lands. [owner] Proves the escrow split is correct without revealing the valuation — the privacy + verifiability moat for real-estate/hospitality deals. Upgrades to a succinct on-chain-verifiable SNARK when Barretenberg is in the pipeline. This MCP tool makes a real HTTP call to the canonical Pabandi endpoint and returns the actual platform response.

输入参数rate必填price必填deposit必填deadline必填commission必填agent_secret必填valuation_hash必填consecutiveMonths必填

版本历史

2
  1. v1.0.1最新Oct 23, 2026
  2. v1.0.0Sep 22, 2026

评分

已满足适用检查项的 100%

该评分衡量此收录条目的完整程度,依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价,也不表示服务器安全或当前可用:可连通性是带日期的检查结果,评分也不包含安装量或用户评价。

  • 近 30 天内可连通必需25 分
  • 已声明认证方式必需10 分
  • 已列出工具必需15 分
  • 描述必需15 分
  • 图标10 分
  • 文档15 分
  • 许可证10 分