MCP.Market

HODLXXI Read-Only MCP server

online · 100% uptime
by hodlxxi·io.github.hodlxxi/hodlxxi-readonly·v0.1.1

Public read-only MCP server for HODLXXI agent identity, trust, receipts, and verification.

A88/100grade A
What users say
No reviews yet
Be the first
Safety scan
A88/100

full report

Adoption
Growing

0 stars

Reviews

Write one

Nobody has reviewed HODLXXI Read-Only yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

HODLXXI Read-Only tools (26)

write = sends, deletes, buys or posts
  • hodlxxi_get_agent_discoveryFree

    Return the signed Agent Protocol discovery document with public endpoint links, trust surfaces, timestamp, and agent signature.

  • hodlxxi_get_agent_identityFree

    Return the canonical public agent identity document, including capabilities, pricing, endpoints, skills, messaging metadata, and trust-model declarations.

  • hodlxxi_get_agent_skills_indexFree

    Return the Agent Skills discovery index with skill names, descriptions, URLs, types, and SHA-256 digests.

  • hodlxxi_get_api_catalogFree

    Return the public RFC-style API linkset catalog with service descriptions, documentation links, and status links.

  • hodlxxi_get_attestationsFree

    Return paginated signed receipt attestations. limit must be 1-100 and offset must be non-negative.

  • hodlxxi_get_capabilitiesFree

    Return the signed capabilities document with job schemas, pricing, limits, endpoint registry, public skills, and messaging metadata.

  • hodlxxi_get_capabilities_schemaFree

    Return the JSON Schema published for the signed HODLXXI capabilities document.

  • hodlxxi_get_chain_healthFree

    Return attestation-chain continuity status, event count, latest event hashes, and latest timestamp when available.

  • hodlxxi_get_covenantFree

    Return a declared covenant artifact by validated covenant identifier, including descriptor, policy, funding status, public keys, and non-claims.

  • hodlxxi_get_covenant_countdownFree

    Return the machine-readable covenant countdown with chain height, spend paths, estimated unlocks, funding status, and conservative trust interpretation.

  • hodlxxi_get_jwksFree

    Return the public RSA JSON Web Key Set used to verify HODLXXI-issued JWT signatures. No private JWK fields are exposed.

  • hodlxxi_get_marketplace_listingFree

    Return the normalized marketplace listing with discovery links, job types, pricing, skills, reputation snapshot, chain health, and trust model.

  • hodlxxi_get_mcp_server_cardFree

    Return the live MCP discovery server card for https://hodlxxi.com/agent/mcp, which nginx routes to the separate read-only sidecar rather than the Flask monolith.

  • hodlxxi_get_nostr_announcementFree

    Return the signed Nostr announcement template, advertised NIP-89/NIP-90 kinds, discovery links, and explicit non-goals.

  • hodlxxi_get_nostr_dm_policyFree

    Return public NIP-17/NIP-59 messaging policy metadata, including intake status, custody limitations, accepted kind, and size ceiling.

  • hodlxxi_get_oauth_authorization_serverFree

    Return OAuth authorization-server metadata, including the HODLXXI agent_auth discovery block and disabled registration endpoint references.

  • hodlxxi_get_oauth_protected_resourceFree

    Return OAuth protected-resource metadata, including resource issuer, authorization servers, JWKS URI, scopes, and bearer method.

  • hodlxxi_get_openid_configurationFree

    Return OpenID Connect discovery metadata: issuer, authorization and token endpoints, JWKS URI, grants, scopes, PKCE, and signing algorithms.

  • hodlxxi_get_operator_continuityFree

    Return the public operator-continuity statement, operator and agent public keys, covenant status, rotation policy, and verification references.

  • hodlxxi_get_receiptFree

    Return a previously issued signed receipt by job identifier. Optional requester-proof fields depend on the historical receipt.

  • hodlxxi_get_reportFree

    Return a public machine-readable trust or readiness report by validated report identifier, including its canonical SHA-256 field when present.

  • hodlxxi_get_reputationFree

    Return aggregate public operating history, evidenced job counts, attestation count, trust and confidence averages, pattern distribution, and rolling trust trend.

  • hodlxxi_get_skillsFree

    Return the checked-in public skill catalog with metadata, repository paths, and installation URLs.

  • hodlxxi_get_trust_eventsFree

    Return the paginated public trust-event chain with hashes, receipt linkage, timestamps, public key, and signatures.

  • hodlxxi_get_trust_summaryFree

    Return the compact trust summary for a validated public agent identifier.

  • hodlxxi_verify_receiptFree

    Verify a previously issued receipt by job identifier and return verification status, validity, attestation, signed receipt, event hash, and QR pointer non-claims. This does not poll /agent/jobs and cannot mint a receipt.

Public scan report

scanner v0.1.9 · 2026-09-25 · same rubric, same numbers if you re-run it

no findings
  • –Code scanremote-only server, no package to scann/a
  • Live reliabilityremote reachable in 1142ms20/20
  • Tool poisoning26 tool descriptions checked15/15
  • Auth qualityopen endpoint, read-only tools10/15
  • Maintenancelast push 0 days ago15/15
  • Maintainer identityregistry namespace matches repository owner6/10
Overall 88/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How HODLXXI Read-Only compares

Against every graded AI and agents MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
88/100
higher than 80% of 4,460 AI and agents servers
Tools
26
the typical AI and agents server has 6
Tools that change things
0%
typical: 0%. Fewer write tools means less an agent can break
Uptime
100%
of our recent checks; the typical remote AI and agents server answers 100%
Response time
578 ms
faster than 23% of 2,331 AI and agents servers

What its tools let an agent do: 26 read

Install HODLXXI Read-Only in Claude Code, Cursor or VS Code

claude mcp add --transport http hodlxxi-readonly https://hodlxxi.com/agent/mcp
Add to Cursor

What the publisher says

From the HODLXXI Read-Only repository's README, as published. We do not edit it. Read it on GitHub

Universal Bitcoin Identity Layer

A production-focused Flask service that bridges OAuth2/OpenID Connect with Lightning Network authentication. The project couples hardened security defaults, Redis-backed rate limiting, RS256 JWT issuance, and Postgres persistence so Bitcoin-enabled applications can expose standards-compliant identity endpoints.

🚀 Highlights

  • Security-first OAuth2/OIDC core – RS256 tokens with on-disk JWKS rotation, PKCE validation, HTTPS enforcement through app.security, and Redis-powered rate limiting with production fail-closed behavior and explicit non-production in-memory fallback warnings.
  • Lightning-aware identity workflows – LNURL-auth challenge storage, Bitcoin signature verification helpers, and adapters that keep the legacy authorization views working while the storage layer matured.
  • Persistent storage – SQLAlchemy models for OAuth clients/codes/tokens, sessions, LNURL challenges, proof-of-funds requests, and audit logs backed by Postgres with Redis coordination for ephemeral state.
  • Operational tooling – /metrics/prometheus endpoint, structured JSON logging, and a reusable create_app() factory (app/factory.py) for factory-based deployments.
  • Typed configuration surface – Environment-driven configuration validated by app.config, including production guardrails for secrets, Redis, and database connectivity.

🏗️ Architecture at a Glance

Further documentation lives in the app/ directory and supporting deployment guides under deployment/.

🧰 Prerequisites

  • Python 3.10+
  • Postgres 13+
  • Redis 6+
  • Bitcoin Core 24+ (for RPC-backed features)

For local development you can omit Postgres/Redis by exporting DATABASEURL and REDISURL pointing to ephemeral services (e.g. docker-compose) or by relying on the in-memory storage adapter for tests.

🏁 Quick Start

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

HODLXXI Read-Only: common questions

Is HODLXXI Read-Only MCP server safe?
Yes, by our scan: it is graded A (88/100). Read the HODLXXI Read-Only safety report
How do I install HODLXXI Read-Only?
It runs remotely at hodlxxi.com. Add it to Claude Code, Cursor, VS Code or Claude Desktop with the snippets above, or call it through the mcp.market gateway without installing anything.
Does HODLXXI Read-Only need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is HODLXXI Read-Only maintained?
The last commit was 40 days ago (2026-09-25). The latest release is v0.1.1.
Is HODLXXI Read-Only up?
100% of our last 28 checks got an answer. We check remote servers about four times a day.
What can I use instead of HODLXXI Read-Only?
Servers from other publishers that do the same job: Spotifyscraper MCP server, Emilia Protocol MCP server and Agoragentic Agent OS MCP server.
How does HODLXXI Read-Only compare with other AI and agents MCP servers?
safety score 88/100 (higher than 80% of 4,460 AI and agents servers); tools 26 (the typical AI and agents server has 6); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to HODLXXI Read-Only

Same job from other publishers: the closest match first, then the best rated.

  • Spotifyscraper
    Public Spotify metadata, lyrics and podcasts for LLM agents. No API key, read-only.
    B
  • Emilia Protocol
    Exact-action approval for consequential agent actions: request, track, and verify signed receipts.
    B
  • Agoragentic Agent OS MCP
    Triptych OS (Agent OS) MCP for governed routing, receipts, and USDC settlement on Base.
    B
  • three.ws Marketplace
    Browse and discover the public three.ws agent marketplace and skills catalog. Read-only.
    A
  • Attestix
    AI agent identity, signed credentials, delegated authority and governance evidence.
    A