English Français العربية

io.github.jarod-vyent/xrpl-identity-mcp

Official registry Other

MCP server for XRPL identity: DIDs, credentials, signer lists, and safe transaction workflows.

Source code Documentation

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

NPM package xrpl-identity-mcp
Claude Code 
claude mcp add xrpl-identity-mcp -e 'XRPL_NETWORK=<XRPL_NETWORK>' -e 'XRPL_ENDPOINT=<XRPL_ENDPOINT>' -e 'ALLOW_MAINNET_SUBMIT=<ALLOW_MAINNET_SUBMIT>' -- npx -y xrpl-identity-mcp@0.1.1
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "xrpl-identity-mcp": {
            "command": "npx",
            "args": [
                "-y",
                "xrpl-identity-mcp@0.1.1"
            ],
            "env": {
                "XRPL_NETWORK": "<XRPL_NETWORK>",
                "XRPL_ENDPOINT": "<XRPL_ENDPOINT>",
                "ALLOW_MAINNET_SUBMIT": "<ALLOW_MAINNET_SUBMIT>"
            }
        }
    }
}

Environment variables

  • XRPL_NETWORK XRPL network to target: mainnet, testnet, or devnet (default: testnet)
  • XRPL_ENDPOINT Custom XRPL websocket endpoint override (default: public endpoint for the selected network)
  • ALLOW_MAINNET_SUBMIT Must be set to 'true' to allow tx_submit_signed on mainnet (default: blocked)

Documentation

From the project's README on GitHub, refreshed weekly. Links open on GitHub.

Contents
  1. xrpl-identity-mcp
  2. Security Model
  3. Quickstart
  4. Tools
  5. Example Agent Flows
  6. Development
  7. License

xrpl-identity-mcp

xrpl-identity-mcp is the first identity-focused MCP server for the XRP Ledger: DIDs (XLS-40), credentials (XLS-70), multisig signer lists, and safe transaction prepare/verify/submit workflows. It prepares unsigned transactions, reads ledger state, verifies signed blobs against intent, and can submit pre-signed blobs without ever taking custody of keys.

Built by Jarod Vyent, from the team behind SciPHR.

Security Model

These invariants are core behavior:

  1. No key custody. The server has no seed, private key, mnemonic, wallet import, or signing path. Signing happens in the user's wallet or agent.
  2. Network is explicit. XRPL_NETWORK is mainnet, testnet, or devnet. The default is testnet. Every tool result includes network.
  3. Mainnet submit is opt-in. tx_submit_signed on mainnet is blocked unless ALLOW_MAINNET_SUBMIT=true is set.
  4. Prepare, verify, then submit. Write workflows return unsigned JSON with instructions to sign externally, call tx_decode_verify, and only then call tx_submit_signed.

Quickstart

Claude MCP:

claude mcp add xrpl-identity -- npx -y xrpl-identity-mcp

Generic MCP client config:

{
  "mcpServers": {
    "xrpl-identity": {
      "command": "npx",
      "args": ["-y", "xrpl-identity-mcp"],
      "env": {
        "XRPL_NETWORK": "testnet"
      }
    }
  }
}

Environment variables:

VariableValuesDefaultPurpose
XRPL_NETWORKmainnet, testnet, devnettestnetSelects the XRPL network.
XRPL_ENDPOINTWebSocket URLNetwork defaultOverrides the rippled WebSocket endpoint.
ALLOW_MAINNET_SUBMITtrue or unsetunsetRequired for tx_submit_signed on mainnet.

Default endpoints:

NetworkEndpoint
mainnetwss://xrplcluster.com
testnetwss://s.altnet.rippletest.net:51233
devnetwss://s.devnet.rippletest.net:51233

Tools

ToolWhat it doesNetwork writes?
did_resolveResolve an XLS-40 DID object and fetch an ipfs:// or https:// DID document when present.No
did_prepare_setPrepare an unsigned DIDSet transaction.No
did_prepare_deletePrepare an unsigned DIDDelete transaction.No
credential_prepare_createPrepare an unsigned CredentialCreate transaction.No
credential_prepare_acceptPrepare an unsigned CredentialAccept transaction.No
credential_prepare_deletePrepare an unsigned CredentialDelete transaction.No
credential_verifyRead a credential object and report existence, acceptance, and expiration.No
credential_listList up to 400 credential objects visible to an account, with issuer/subject filtering.No
account_identity_summarySummarize auth posture, signer list, DID presence, and credential counts for an account.No
signer_list_prepare_setPrepare an unsigned SignerListSet transaction for multisig create, replace, or delete.No
tx_decode_verifyDecode a signed blob, compute hash, and compare against expected intent.No
tx_submit_signedSubmit a pre-signed blob and poll for validation. Mainnet requires ALLOW_MAINNET_SUBMIT=true.Yes

Example Agent Flows

Resolve a DID and read its document:

  1. Call did_resolve with address set to a classic XRPL address or did:xrpl:<address>.
  2. Inspect decoded.URI, decoded.Data, and decoded.DIDDocument.
  3. If the URI is ipfs:// or https://, inspect document and documentSource. Only text and JSON documents are inlined; binary content (for example an image) is reported as documentSource, documentContentType, and documentByteLength with documentSkipped explaining why the body was omitted.

Issue and accept a credential on testnet:

  1. Set XRPL_NETWORK=testnet.
  2. Call credential_prepare_create with issuer, subject, credential type, optional expiration, and optional URI.
  3. Sign the returned unsignedTx externally with the issuer account.
  4. Call tx_decode_verify with the signed blob and the expected intent.
  5. Call tx_submit_signed.
  6. Call credential_prepare_accept for the subject, sign externally, verify with tx_decode_verify, then submit.
  7. Call credential_verify to confirm accepted: true and expired: false.

Verify a signed blob before submitting:

  1. Call tx_decode_verify with signedBlob and an expectedIntent partial transaction JSON.
  2. Check matches and any mismatches.
  3. Submit only when the decoded transaction matches the user's intent.

Development

npm install
npm run typecheck
npm run build
SKIP_INTEGRATION=1 npm test

Integration tests target testnet and are skipped when SKIP_INTEGRATION=1. To run the account summary integration test, set XRPL_INTEGRATION_ACCOUNT to a funded testnet account address.

License

MIT

Frequently asked questions

What is io.github.jarod-vyent/xrpl-identity-mcp?

MCP server for XRPL identity: DIDs, credentials, signer lists, and safe transaction workflows.

How do I install io.github.jarod-vyent/xrpl-identity-mcp?

It runs on your machine. In Claude Code: claude mcp add xrpl-identity-mcp -e 'XRPL_NETWORK=<XRPL_NETWORK>' -e 'XRPL_ENDPOINT=<XRPL_ENDPOINT>' -e 'ALLOW_MAINNET_SUBMIT=<ALLOW_MAINNET_SUBMIT>' -- npx -y xrpl-identity-mcp@0.1.1. For other clients, paste the JSON configuration from this page into their MCP settings.

Does io.github.jarod-vyent/xrpl-identity-mcp need an API key?

Its registry entry lists no required key or secret. Some features may still need an account with the service it connects to.

Is io.github.jarod-vyent/xrpl-identity-mcp open source?

Yes. Its code is on GitHub under the MIT license.

Who maintains io.github.jarod-vyent/xrpl-identity-mcp?

It is published by jarod-vyent. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.