HODLXXI Read-Only MCP server
online · 100% uptimeio.github.hodlxxi/hodlxxi-readonly·v0.1.1Public read-only MCP server for HODLXXI agent identity, trust, receipts, and verification.
0 stars
Reviews
Write oneNobody has reviewed HODLXXI Read-Only yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
HODLXXI Read-Only tools (26)
write = sends, deletes, buys or postshodlxxi_get_agent_discoveryFreeReturn the signed Agent Protocol discovery document with public endpoint links, trust surfaces, timestamp, and agent signature.
hodlxxi_get_agent_identityFreeReturn the canonical public agent identity document, including capabilities, pricing, endpoints, skills, messaging metadata, and trust-model declarations.
hodlxxi_get_agent_skills_indexFreeReturn the Agent Skills discovery index with skill names, descriptions, URLs, types, and SHA-256 digests.
hodlxxi_get_api_catalogFreeReturn the public RFC-style API linkset catalog with service descriptions, documentation links, and status links.
hodlxxi_get_attestationsFreeReturn paginated signed receipt attestations. limit must be 1-100 and offset must be non-negative.
hodlxxi_get_capabilitiesFreeReturn the signed capabilities document with job schemas, pricing, limits, endpoint registry, public skills, and messaging metadata.
hodlxxi_get_capabilities_schemaFreeReturn the JSON Schema published for the signed HODLXXI capabilities document.
hodlxxi_get_chain_healthFreeReturn attestation-chain continuity status, event count, latest event hashes, and latest timestamp when available.
hodlxxi_get_covenantFreeReturn a declared covenant artifact by validated covenant identifier, including descriptor, policy, funding status, public keys, and non-claims.
hodlxxi_get_covenant_countdownFreeReturn the machine-readable covenant countdown with chain height, spend paths, estimated unlocks, funding status, and conservative trust interpretation.
hodlxxi_get_jwksFreeReturn the public RSA JSON Web Key Set used to verify HODLXXI-issued JWT signatures. No private JWK fields are exposed.
hodlxxi_get_marketplace_listingFreeReturn the normalized marketplace listing with discovery links, job types, pricing, skills, reputation snapshot, chain health, and trust model.
hodlxxi_get_mcp_server_cardFreeReturn the live MCP discovery server card for https://hodlxxi.com/agent/mcp, which nginx routes to the separate read-only sidecar rather than the Flask monolith.
hodlxxi_get_nostr_announcementFreeReturn the signed Nostr announcement template, advertised NIP-89/NIP-90 kinds, discovery links, and explicit non-goals.
hodlxxi_get_nostr_dm_policyFreeReturn public NIP-17/NIP-59 messaging policy metadata, including intake status, custody limitations, accepted kind, and size ceiling.
hodlxxi_get_oauth_authorization_serverFreeReturn OAuth authorization-server metadata, including the HODLXXI agent_auth discovery block and disabled registration endpoint references.
hodlxxi_get_oauth_protected_resourceFreeReturn OAuth protected-resource metadata, including resource issuer, authorization servers, JWKS URI, scopes, and bearer method.
hodlxxi_get_openid_configurationFreeReturn OpenID Connect discovery metadata: issuer, authorization and token endpoints, JWKS URI, grants, scopes, PKCE, and signing algorithms.
hodlxxi_get_operator_continuityFreeReturn the public operator-continuity statement, operator and agent public keys, covenant status, rotation policy, and verification references.
hodlxxi_get_receiptFreeReturn a previously issued signed receipt by job identifier. Optional requester-proof fields depend on the historical receipt.
hodlxxi_get_reportFreeReturn a public machine-readable trust or readiness report by validated report identifier, including its canonical SHA-256 field when present.
hodlxxi_get_reputationFreeReturn aggregate public operating history, evidenced job counts, attestation count, trust and confidence averages, pattern distribution, and rolling trust trend.
hodlxxi_get_skillsFreeReturn the checked-in public skill catalog with metadata, repository paths, and installation URLs.
hodlxxi_get_trust_eventsFreeReturn the paginated public trust-event chain with hashes, receipt linkage, timestamps, public key, and signatures.
hodlxxi_get_trust_summaryFreeReturn the compact trust summary for a validated public agent identifier.
hodlxxi_verify_receiptFreeVerify a previously issued receipt by job identifier and return verification status, validity, attestation, signed receipt, event hash, and QR pointer non-claims. This does not poll /agent/jobs and cannot mint a receipt.
Public scan report
scanner v0.1.9 · 2026-09-25 · same rubric, same numbers if you re-run it
- –Code scanremote-only server, no package to scann/a
- Live reliabilityremote reachable in 1142ms20/20
- Tool poisoning26 tool descriptions checked15/15
- Auth qualityopen endpoint, read-only tools10/15
- Maintenancelast push 0 days ago15/15
- Maintainer identityregistry namespace matches repository owner6/10
How HODLXXI Read-Only compares
Against every graded AI and agents MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 88/100
- higher than 80% of 4,460 AI and agents servers
- Tools
- 26
- the typical AI and agents server has 6
- Tools that change things
- 0%
- typical: 0%. Fewer write tools means less an agent can break
- Uptime
- 100%
- of our recent checks; the typical remote AI and agents server answers 100%
- Response time
- 578 ms
- faster than 23% of 2,331 AI and agents servers
What its tools let an agent do: 26 read
Install HODLXXI Read-Only in Claude Code, Cursor or VS Code
claude mcp add --transport http hodlxxi-readonly https://hodlxxi.com/agent/mcp
What the publisher says
From the HODLXXI Read-Only repository's README, as published. We do not edit it. Read it on GitHub
Universal Bitcoin Identity Layer
A production-focused Flask service that bridges OAuth2/OpenID Connect with Lightning Network authentication. The project couples hardened security defaults, Redis-backed rate limiting, RS256 JWT issuance, and Postgres persistence so Bitcoin-enabled applications can expose standards-compliant identity endpoints.
🚀 Highlights
- Security-first OAuth2/OIDC core – RS256 tokens with on-disk JWKS rotation, PKCE validation, HTTPS enforcement through app.security, and Redis-powered rate limiting with production fail-closed behavior and explicit non-production in-memory fallback warnings.
- Lightning-aware identity workflows – LNURL-auth challenge storage, Bitcoin signature verification helpers, and adapters that keep the legacy authorization views working while the storage layer matured.
- Persistent storage – SQLAlchemy models for OAuth clients/codes/tokens, sessions, LNURL challenges, proof-of-funds requests, and audit logs backed by Postgres with Redis coordination for ephemeral state.
- Operational tooling – /metrics/prometheus endpoint, structured JSON logging, and a reusable create_app() factory (app/factory.py) for factory-based deployments.
- Typed configuration surface – Environment-driven configuration validated by app.config, including production guardrails for secrets, Redis, and database connectivity.
🏗️ Architecture at a Glance
Further documentation lives in the app/ directory and supporting deployment guides under deployment/.
🧰 Prerequisites
- Python 3.10+
- Postgres 13+
- Redis 6+
- Bitcoin Core 24+ (for RPC-backed features)
For local development you can omit Postgres/Redis by exporting DATABASEURL and REDISURL pointing to ephemeral services (e.g. docker-compose) or by relying on the in-memory storage adapter for tests.
🏁 Quick Start
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
HODLXXI Read-Only: common questions
- Is HODLXXI Read-Only MCP server safe?
- Yes, by our scan: it is graded A (88/100). Read the HODLXXI Read-Only safety report
- How do I install HODLXXI Read-Only?
- It runs remotely at hodlxxi.com. Add it to Claude Code, Cursor, VS Code or Claude Desktop with the snippets above, or call it through the mcp.market gateway without installing anything.
- Does HODLXXI Read-Only need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is HODLXXI Read-Only maintained?
- The last commit was 40 days ago (2026-09-25). The latest release is v0.1.1.
- Is HODLXXI Read-Only up?
- 100% of our last 28 checks got an answer. We check remote servers about four times a day.
- What can I use instead of HODLXXI Read-Only?
- Servers from other publishers that do the same job: Spotifyscraper MCP server, Emilia Protocol MCP server and Agoragentic Agent OS MCP server.
- How does HODLXXI Read-Only compare with other AI and agents MCP servers?
- safety score 88/100 (higher than 80% of 4,460 AI and agents servers); tools 26 (the typical AI and agents server has 6); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.
Alternatives to HODLXXI Read-Only
Same job from other publishers: the closest match first, then the best rated.
- SpotifyscraperPublic Spotify metadata, lyrics and podcasts for LLM agents. No API key, read-only.not reviewedEstablishedB
- Emilia ProtocolExact-action approval for consequential agent actions: request, track, and verify signed receipts.not reviewedEstablishedB
Agoragentic Agent OS MCPTriptych OS (Agent OS) MCP for governed routing, receipts, and USDC settlement on Base.not reviewedEstablishedB- three.ws MarketplaceBrowse and discover the public three.ws agent marketplace and skills catalog. Read-only.not reviewedEstablishedA
- AttestixAI agent identity, signed credentials, delegated authority and governance evidence.not reviewedEstablishedA