mcp-identity

Local

powforge.devSecurity0Updated 25w ago

About mcp-identity

mcp-identity is an MCP server for AI agents that need identity signals from Nostr public keys. It offers score lookup, vouch-event construction, and offline verification of Schnorr-signed certificates.

Key features

01Look up multi-dimensional DoI scores
02Build unsigned Nostr vouch events
03Verify signed DoI certificates offline
04Pay oracle charges through L402

Use cases

01Assess a caller's identity depth
02Create a vouch event for another public key
03Verify a certificate without network access

MCP support

Exposes three MCP tools for querying the DoI oracle, building Nostr vouch events, and verifying signed certificates. It handles L402 payment and retry when a configured Lightning wallet is available.

Configuration

Local server config is the same for every client. Copy it into your client’s MCP config file.

mcp.json · Universal config

{
  "mcpServers": {
    "zekebuilds-lab-mcp-identity": {
      "command": "npx",
      "args": [
        "-y",
        "@powforge/mcp-identity"
      ],
      "env": {
        "ORACLE_URL": "<ORACLE_URL>",
        "ORACLE_PUBKEY": "<ORACLE_PUBKEY>"
      }
    }
  }
}

Run commandnpx -y @powforge/mcp-identity

Environment variables to set

ORACLE_URLPowForge Depth-of-Identity oracle base URL. Defaults to public production endpoint when running via npx; override for self-hosted or local dev.

ORACLE_PUBKEYSecretSchnorr pubkey of the DoI oracle, used for offline envelope verification. Defaults to the production PowForge oracle pubkey; override only if pointing at a self-hosted oracle.

Local servers need a runtime on your machine (e.g. Node.js 18+). Config file locations differ by client; see your client’s docs.

Packages

npm@powforge/mcp-identity0.7.2stdio

Tools

Saved tool list · updated 2w ago

Parameter	Type	Required	Description
auth	object	No	L402 paid auth. Omit on first call to receive the challenge.
auth.macaroon	string	Yes
auth.preimage	string	Yes
pubkey	string	Yes	64-hex Nostr pubkey or npub1... bech32 string

Details

From the project README

@powforge/mcp-identity

MCP server that scores any Nostr pubkey's depth-of-identity before your handler runs. Chaintip-anchored Schnorr cert, L402 priced, drop-in for AI agents that need Sybil resistance on top of paid APIs.

npm: npm i @powforge/mcp-identity

Homepage: https://powforge.dev/explorer

Whitepaper: https://powforge.dev/whitepaper

What It Does

Three MCP tools that wrap the PowForge Depth-of-Identity Oracle:

doi_score_lookup — given a Nostr pubkey (hex or npub), returns multi-dimensional identity score (network, longevity, kinetic-filter cost). L402-priced via the upstream oracle.
doi_sign_vouch — builds an unsigned Nostr event for vouching depth-of-identity for another pubkey. Caller signs; oracle counts toward score on observation.
doi_score_verify — offline Schnorr verification of a signed DoI cert returned from the oracle. No network.

Why Identity-Anchored Pricing

Most paid-API services charge per-request flat. That fails on agent-to-agent surfaces where:

New agents look identical to scrapers — no signal on intent or risk.
Long-tail abusers extract value cheaper than they impose cost.
Whitelist gating doesn't scale to open agent ecosystems.

DoI gives your server a quantitative number for "how much would it cost to fake this caller's identity at this depth" — anchored to a specific Bitcoin chaintip cert that's non-repudiable. Use it as a multiplier on your L402 macaroon price, a rate-limit input, or a routing key.

Quick Start

npm i @powforge/mcp-identity

Add to your MCP config (Claude Desktop, Cursor, etc):

{
  "mcpServers": {
    "powforge-identity": {
      "command": "npx",
      "args": ["-y", "@powforge/mcp-identity"]
    }
  }
}

Restart the client. Three new tools appear under powforge-identity.

Why Chaintip-Anchored

The score includes a Schnorr signature over (score, dimensions, score_chaintip_height, score_chaintip_blockhash). That binds the claim to Bitcoin's kinetic filter — recomputable PageRank scores can be silently rewritten, but a chaintip-anchored cert is a fixed claim against a known time. Verification is offline.

The oracle's falsifiable claim window is documented in the whitepaper.

L402 Pricing

The MCP server transparently handles the L402 macaroon dance with oracle.powforge.dev. First call returns a 402 with a Lightning invoice; the wrapper pays from a wallet you configure (env: LNBITS_INVOICE_KEY) and retries. No keys, no accounts.

Status

v0.7.0 published to npm 2026-04-28.
Three tools exposed.
Cert format documented in the whitepaper.
Oracle availability monitored at https://powforge.dev/oracle/freshness.

License

MIT.

Source

Source lives in a private development repo. Issues, questions, and bug reports welcome here.

Comments

Markdown supported

New to MCP?

From what the protocol is to installing your first server, these answers cover most first questions.

Read the getting-started guide

An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.