Nwc MCP server

Read from the package source without running it. The installed server may list more.

• nwc_budget_status

  Show the current spend-budget state: rolling-24h spent, daily cap, lifetime spent, optional total cap, and per-invoice max. Useful before attempting a payment to know whether it will be allowed.

• nwc_confirm_paymentwrite action

  Execute a previously prepared payment, identified by its one-time token. Only meaningful when NWC_REQUIRE_CONFIRM=true. The token is consumed (single use) and safety checks (budget, allowlist) are re-run before execution.

• nwc_decode_invoice

  Decode a bolt11 Lightning invoice locally (no network call). Returns amount in sats, description, payment hash, expiry, payee pubkey, and network. Use this before pay_invoice to confirm the invoice contents.

• nwc_get_balance

  Return the current spendable balance of the connected wallet, in satoshis.

• nwc_get_info

  Return the connected wallet's capabilities, supported NIP-47 methods, node pubkey, network, alias, and color. Call this first in any session to discover what the wallet supports.

• nwc_list_transactions

  List transactions on the connected wallet. Supports filtering by time range, direction (incoming/outgoing), and inclusion of unpaid invoices.

• nwc_lookup_invoice

  Look up an invoice by payment hash or bolt11 string. Returns the invoice state (paid/unpaid), settled timestamp, amount, fees paid, and preimage if settled. Provide either payment_hash OR invoice.

• nwc_make_invoicewrite action

  Create a bolt11 Lightning invoice for the given amount in sats. Safe \u2014 does not move funds; only generates a payment request. Returns the bolt11 string and payment hash.

• nwc_multi_pay_invoicewrite action

  Pay multiple bolt11 invoices sequentially in one tool call. Each invoice is decoded and safety-checked independently; the batch sum is checked against the daily and total budget caps upfront. If any pre-check or sum check fails, no payments are sent. Execution is per-invoice \u2014 a failure mid-batch does not roll back already-settled invoices.

• nwc_pay_invoicewrite action

  Pay a bolt11 Lightning invoice. Decodes locally, runs the safety pipeline (read-only gate, destination allowlist, budget cap), and either executes immediately or \u2014 if NWC_REQUIRE_CONFIRM=true \u2014 returns a one-time confirmation token to pass to nwc_confirm_payment. Returns preimage + fees on success.

• nwc_pay_keysendwrite action

  Send sats directly to a node pubkey via keysend (spontaneous payment, no invoice). Default-off \u2014 must be opt-in via NWC_KEYSEND_ENABLED=true. Power-user feature: no payment hash receipt, weaker safety surface than bolt11. Use bolt11 invoices when available. Runs the full safety pipeline (read-only gate, allowlist on pubkey, budget cap, optional two-step confirmation).

• nwc_pay_lightning_addresswrite action

  Pay a Lightning Address (e.g., alice@getalby.com). Resolves the LNURL-pay endpoint to a bolt11 invoice, then runs the safety pipeline (read-only gate, allowlist check on the LN address, budget cap, optional two-step confirmation). Returns preimage on success.

• nwc_pay_lnurlwrite action

  Pay a raw LNURL-pay endpoint (bech32 lnurl1... string). Decodes the LNURL, resolves the pay request, then runs the safety pipeline (read-only gate, allowlist check on the LNURL, budget cap, optional two-step confirmation). Use nwc_pay_lightning_address when you have a name@domain.tld instead.

• Code scan2 source files scanned25/25
• –Live reliabilityno gateway calls yet and no remote to proben/a
• –Tool poisoningtools not inspected (local package is not executed); not countedn/a
• Auth qualitystatic API keys via environment variables6/15
• Maintenancelast push 104 days ago8/15
• Maintainer identityregistry namespace matches repository owner7/10

Safety score

71/100

higher than 36% of 48,255 servers

Tools

13

the typical server has 7

Tools that change things

54%

typical: 0%. Fewer write tools means less an agent can break

Downloads a week

33

more than 22% of 12,191 servers with a package

Nwc: common questions

Is Nwc MCP server safe?

Mostly: it is graded B (71/100). Read the Nwc safety report

How do I install Nwc?

It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.

Does Nwc need an API key?

Yes. The registry entry asks for NWC_CONNECTION_STRING.

Is Nwc maintained?

The last commit was 142 days ago (2026-06-15). The latest release is v0.2.3.

What can I use instead of Nwc?

Servers from other publishers that do the same job: SSH — policy-gated remote access MCP server.

How does Nwc compare with other MCP servers?

safety score 71/100 (higher than 36% of 48,255 servers); tools 13 (the typical server has 7); tools that change things 54% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.