PabandiOS

io.github.jweezy119由 GitHub 帳號 jweezy119 發布v1.0.1更新於 Oct 30, 2026

Trust and settlement for AI agents: portable attestations, escrow, x402/USDC payments on Solana.

已驗證Streamable HTTP可網頁執行金融安全與監控商業與電商

概覽

AI 產生的概覽

PabandiOS 提供 Pabandi 信任與結算平台:驗證護照與證明、搜尋認證商家、預訂住宿並處理託管資金。

可以做什麼
  • 驗證信任:離線檢核 Pabandi 護照與 PTP 證明,可要求特定能力,並回傳風險等級與有效期限。
  • 探索平台:取得探索文件、協定公鑰、工具清單、存取層級,並檢查單一工具的存取權限。
  • 搜尋與查詢:依名稱、類別、城市或位置尋找認證商家與服務,解析商家資料,列出短期租賃住宿。
  • 預訂與託管:建立住宿預訂並將旅客押金放入託管,啟動里程碑式或 SOL/BSC 託管,產生零知識房地產證明。
  • 金融:登記去識別化的結算連結、列出商家的連結,並報價出金或撥款費用。
  • 預測:預測潛在預訂的未到場與完成機率、每小時需求以及建議時段。
適用情境
當助理需要在行動前確認某個代理、商家或個人是否通過信任驗證,需要尋找認證服務商家或住宿,或在 Pabandi 通道上完成預訂、託管與撥款流程時使用。
執行需求
遠端 streamable HTTP 端點,無需安裝套件。部分工具需要身分驗證以及擁有者或專屬平台權限,簽發護照依 $PAB 計費。從原始碼自架需要 Node.js、PostgreSQL(DATABASE_URL)、JWT_SECRET、SOLANA_RPC_URL,選用 SQUARE_ACCESS_TOKEN。
安裝前請注意
多個工具會寫入或移轉價值:簽發護照依 $PAB 收費,預訂會將旅客押金放入託管,託管工具會在 Solana 與 BSC 上進行真實鏈上寫入。簽發與擁有者專屬工具需要身分驗證。金融連結與商家資料會揭露聯絡方式與收款資訊,搜尋使用 OpenStreetMap Nominatim。證明輸出應視為待核實的主張,而非保證。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 PabandiOS,將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Web executable,透過 Streamable HTTP。 遠端服務在工作區中設定後即可從網頁執行環境執行。

交給代理程式安裝

把這段提示詞貼上到 Claude Code、Codex、Cursor 等代理程式,或 SourceWeft 對話中。代理程式會讀取該伺服器的安裝指南,先向你展示發布者、端點和登入方式,經你同意後再把它新增到你的客戶端。金鑰不會寫進任何命令。

閱讀 https://sourceweft.com/mcp/io.github.jweezy119%2FPabandi/install.md,並按其中說明把這個 MCP 伺服器接入我的客戶端。修改任何設定之前,先告訴我它的發布者、端點和登入方式,等我確認。不要把 API 金鑰寫進命令或我會提交的檔案;問我金鑰應從哪裡取得。

檢視代理程式所依據的安裝指南

其他 MCP 客戶端

把它新增到你客戶端的 mcpServers 設定中。

{
  "mcpServers": {
    "pabandios": {
      "type": "http",
      "url": "https://pabandi.onrender.com/mcp"
    }
  }
}

README

Pabandi: The Trust & Settlement Layer for the Agent Economy

[TypeScript] [Solana] [Prisma] [License: MIT] [PRs Welcome]

Pabandi is an open-source, programmable settlement layer enabling AI Agents to safely hire humans, and humans to hire AI Agents. We provide the missing infrastructure for the machine economy: non-custodial escrow, Session Abstraction (gasless micro-payments), verifiable data provenance (VCAP), and decentralized dispute resolution (Sulha).


🏛️ Enterprise Security Architecture

Pabandi is built for high-stakes autonomous transactions. Our architecture is designed around three core pillars:

  1. Autonomy Boundaries: Engineers configure capability envelopes and permission tiers. The harness uses "Session Abstraction" to intercept tool calls exceeding pre-allocated quotas, preventing runaway execution loops and unauthorized infrastructure modifications.
  2. Scoped Identity: Security teams bind distinct cryptographic identities to agents (Trust Passports). The harness authenticates inter-agent requests and prevents unauthorized privilege escalation across cluster boundaries.
  3. Intent Contracts: Developers formalize pre-execution schema contracts (via Zod). Before executing destructive operations or releasing escrow, the harness verifies post-condition invariants and matches payload checksums (VCAP hashes) against approved task specifications.

🧠 Core Primitives

  • Agentic Escrow: Programmable USDC escrow for A2A and Human-to-Agent deals.
  • Yield-Bearing Deposits: Locked funds earn safe Solana yield (via Kamino), split 50/50 between the client and the business.
  • MCP Native: A full Model Context Protocol server allowing agents to book humans, verify trust, and execute bids.
  • Trust Passport: A portable, non-transferable SBT on Solana that aggregates verified history and on-chain reputation.

🏗️ Tech Stack

  • Frontend: React (Vite), TailwindCSS, Framer Motion.
  • Backend: Node.js, Express, Prisma ORM.
  • Database: PostgreSQL.
  • Blockchain: Solana (Web3.js).
  • Payments: x402, Square, Solana Pay.

🚀 Getting Started (Local Development)

bash
git clone https://github.com/jweezy119/Pabandi.gitcd Pabandinpm installcd client && npm installcd ../server && npm install
bash
cd servercp .env.example .env

Set the required variables:

  • DATABASE_URL — PostgreSQL connection string
  • JWT_SECRET — random 64-character hex string
  • SOLANA_RPC_URL — Devnet or Mainnet
  • SQUARE_ACCESS_TOKEN — for fiat payments (optional)
bash
cd servernpx prisma db pushnpx prisma generate

Terminal 1 (Backend):

bash
cd servernpm run dev

Terminal 2 (Frontend):

bash
cd clientnpm run dev

The app will be available at http://localhost:5173.


🤝 Contributing

We welcome contributions from AI researchers and Solana developers. Please run npm run build and npx tsc --noEmit before submitting a PR.

  1. Fork the repo.
  2. Create a feature branch (git checkout -b feature/amazing-feature).
  3. Commit your changes (git commit -m 'Add some amazing feature').
  4. Push to the branch (git push origin feature/amazing-feature).
  5. Open a Pull Request.

👤 About the Founder

Pabandi was founded by [Your Name], an IT specialist with over 8 years of experience solving complex infrastructure and security challenges for lean teams. Frustrated by the broken trust dynamics in the service economy — and the lack of secure infrastructure for autonomous AI agents — he shifted focus to AI/ML and Web3. Pabandi is the result: a platform built with customer obsession at its core, designed to make trust portable, programmable, and profitable for humans and machines alike.


📄 License

Distributed under the MIT License. See LICENSE for more information.

Built with 🧱 in the USA and Pakistan. Wada karo, inaam pao. (Make a promise, earn a reward.)

來源:README.md,提交 6361b42

工具

20

pabandi_verify_passport

Verify a Pabandi PTP attestation (agent, business, individual, or trust rail). Input a base64-encoded attestation and optionally require a capability (e.g. "act:book"). Returns valid, granted capabilities, risk band, expiry. Offline-verifiable: re-executes HMAC-SHA512 over a fixed field subset.

輸入參數needtoken必填

pabandi_discover

Return the Pabandi Trust Protocol discovery document: public verify endpoint URL, protocol public key, issue endpoint, supported risk bands/entity types.

無需輸入參數。

pabandi_get_ledger

Public audit lookup of a passport issuance charge by idempotency key. Returns fee ($PAB), owner, agent, risk band, capabilities.

輸入參數idempotencyKey必填

pabandi_issue_passport

Issue a scoped Agent Capability Passport. Capabilities are validated against owner trust band. Metered at PAB_FEE_PER_PASSPORT $PAB per issue (idempotent). Authentication required.

輸入參數agentId必填capabilities必填idempotencyKey

pabandi_discover_platform

Discover the full Pabandi Platform: every tool, OpenAPI/spec URL, MCP endpoint, PTP endpoints, SDK info, access tiers, and live status.

無需輸入參數。

pabandi_platform_access

Check whether the caller can access a given Pabandi platform tool (by MCP tool name). Returns ok + note.

輸入參數toolName必填

pabandi_platform_discovery

Return the Pabandi Platform discovery doc: every tool on the platform, the OpenAPI/spec URL, the PTP verification endpoint, the public key, and the SDK access info. This is the entry point any third-party app, LLM, or agent uses to learn what Pabandi can do and how to call it. This MCP tool makes a real HTTP call to the canonical Pabandi endpoint and returns the actual platform response.

無需輸入參數。

pabandi_verify_trust_attestation

Verify a Pabandi PTP attestation (business, individual, agent, or trust rail). Re-executes the HMAC-SHA512 signature over a fixed subset of fields and returns valid + the verified claims. Offline-verifiable: any party can check a signed attestation without calling Pabandi. This is the trust primitive every third-party action gates on. This MCP tool makes a real HTTP call to the canonical Pabandi endpoint and returns the actual platform response.

輸入參數token必填

pabandi_search_services

Search verified businesses and services by name, category, city, or location. Every listing is tied to a Pabandi Passport trust score. Uses Postgres contains + OpenStreetMap Nominatim (no paid geo API). Returns real, deduped results — never empty. This MCP tool makes a real HTTP call to the canonical Pabandi endpoint and returns the actual platform response.

輸入參數search必填category必填latitude必填longitude必填

pabandi_get_business

Resolve a business profile by id (public). Returns the sanitized public view (name, category, address, rating, trustScore, phone, email, coverImageUrl). Owner PII is gated — use pabandi:verify_owner for full PII. This MCP tool makes a real HTTP call to the canonical Pabandi endpoint and returns the actual platform response.

輸入參數id必填

pabandi_list_properties

List open short-term rentals / stays (Airbnb-style) by city or category. Each property is tied to a business + its open-finance settlement rail if connected. This is the hospitality inventory surface. This MCP tool makes a real HTTP call to the canonical Pabandi endpoint and returns the actual platform response.

輸入參數city必填category必填

pabandi_book_stay

Create a confirmed stay reservation for a property: links the existing Reservation model + a StayBooking, then holds the guest deposit in escrow (EscrowEvent + TreasuryPosition with kind:hospitality, Solana commitment, PTP attestation). The guest deposit is the trust anchor — released to the business on check-in, refunded on cancellation. This is the hospitality money rail. [verified] Gated to businesses with an attested open-finance settlement rail OR PTP Band A/B, so every booked stay has a real, verified payout path. This is what makes the hospitality vertical trustworthy to guests and exclusive to quality hosts. This MCP tool makes a real HTTP call to the canonical Pabandi endpoint and returns the actual platform response.

輸入參數guests必填checkIn必填checkOut必填propertyId必填depositAmount必填

pabandi_connect_finance

Register a verifiable, masked settlement connection for a business: RAAST (Pakistan), Stripe Treasury, Open Banking, Solana wallet, or PayPal. The account reference is masked (never raw), and a PTP attestation is produced so the business can prove it has a real payout path without exposing the account. This is the open-finance connectivity primitive — the trust badge on a listing. This MCP tool makes a real HTTP call to the canonical Pabandi endpoint and returns the actual platform response.

輸入參數provider必填accountRef必填

pabandi_list_finance

Return a business's connected open-finance connections (verified + pending). Used by third parties to confirm a business has a real payout path before booking or partnering. This MCP tool makes a real HTTP call to the canonical Pabandi endpoint and returns the actual platform response.

輸入參數businessId必填

pabandi_start_escrow

Initialize a milestone-based or native SOL/BSC escrow for a booking: business deposits, guest/host holds collateral, release on completion. This is the real-chain escrow rail (Solana + BSC Hardhat contracts). GATED to exclusive platform access — real chain writes require verified ownership + settlement rail. [exclusive] Exclusive: real-chain escrow writes are gated behind a verified PTP trust band (A/B) or an exclusive platform grant, so only trusted counterparties open real money on chain. Verified-only stays use the simulated escrow path. This is the premium moat — the real rail, gated. This MCP tool makes a real HTTP call to the canonical Pabandi endpoint and returns the actual platform response.

輸入參數chain必填amount必填payoutAddress必填reservationId必填businessAddress必填

pabandi_finance_quote

Quote an offramp/payout from the platform rails (RAAST, Stripe, Solana). Returns estimated fees, execution window, and the rail to use. Feeds the hospitality payout flow. This MCP tool makes a real HTTP call to the canonical Pabandi endpoint and returns the actual platform response.

輸入參數amountUsdc必填

pabandi_predict_booking

Forward-predict the no-show and completion probability for a PROSPECTIVE booking (before it is created). Blends real customer + business history (Beta-binomial shrinkage), lead-time, and day-of-week. Returns predictedNoShow, predictedCompletion, confidence, and the top factors. This is the predictive intelligence the trust rail uses. This MCP tool makes a real HTTP call to the canonical Pabandi endpoint and returns the actual platform response.

輸入參數businessId必填customerId必填reservationTime必填

pabandi_predict_demand

Return 24 hourly demand buckets for a business (from completed reservation history). Used to surface busy windows and optimize pricing/staffing. Owner-gated. This MCP tool makes a real HTTP call to the canonical Pabandi endpoint and returns the actual platform response.

輸入參數businessId必填

pabandi_recommend_slots

Recommend the best upcoming slots for a guest at a business: each candidate scored by predictedCompletion, lightly load-balanced away from peak hours. Returns top 3 slots with predicted completion + demand. Owner-gated. This MCP tool makes a real HTTP call to the canonical Pabandi endpoint and returns the actual platform response.

輸入參數daysAhead必填businessId必填customerId必填

pabandi_zk_realestate_proof

Generate a zero-knowledge proof that an escrow split (deposit = price - commission, fee = deposit*rate, binding commitment to the valuation) is valid, WITHOUT revealing the private price/valuation/secret. Packs into a PTP attestation so the proof is verifiable offline by any third party. Real Noir circuit (compiled at startup); constraint-execution proof when no SNARK prover is available; upgrades to a succinct signature when the Barretenberg pipeline lands. [owner] Proves the escrow split is correct without revealing the valuation — the privacy + verifiability moat for real-estate/hospitality deals. Upgrades to a succinct on-chain-verifiable SNARK when Barretenberg is in the pipeline. This MCP tool makes a real HTTP call to the canonical Pabandi endpoint and returns the actual platform response.

輸入參數rate必填price必填deposit必填deadline必填commission必填agent_secret必填valuation_hash必填consecutiveMonths必填

版本歷史

2
  1. v1.0.1最新Oct 23, 2026
  2. v1.0.0Sep 22, 2026

評分

已滿足適用檢查項的 100%

該評分衡量此收錄條目的完整程度,依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價,也不表示伺服器安全或目前可用:可連通性是帶日期的檢查結果,評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通必需25 分
  • 已宣告認證方式必需10 分
  • 已列出工具必需15 分
  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分