io.github.zekebuilds-lab/mcp-identity

Official registry Security

DoI score lookup, vouch event builder, and offline schnorr verify for AI agents.

What can you do with io.github.zekebuilds-lab/mcp-identity?

  • doi_score_lookup — given a Nostr pubkey (hex or npub), returns multi-dimensional identity score (network, longevity, kinetic-filter cost). L402-priced via the upstream oracle.
  • doi_sign_vouch — builds an unsigned Nostr event for vouching depth-of-identity for another pubkey. Caller signs; oracle counts toward score on observation.
  • doi_score_verify — offline Schnorr verification of a signed DoI cert returned from the oracle. No network.

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

NPM package @powforge/mcp-identity
Claude Code
claude mcp add mcp-identity -e 'ORACLE_URL=https://identity.powforge.dev' -e 'ORACLE_PUBKEY=b4b12dfbc3dfdfa803bb72e344e761dc78db4ec2058c8db3f1c3ac63f9e42b44' -- npx -y @powforge/mcp-identity@0.7.2
JSON configuration (Claude Desktop, Cursor, VS Code)
{
    "mcpServers": {
        "mcp-identity": {
            "command": "npx",
            "args": [
                "-y",
                "@powforge/mcp-identity@0.7.2"
            ],
            "env": {
                "ORACLE_URL": "https://identity.powforge.dev",
                "ORACLE_PUBKEY": "b4b12dfbc3dfdfa803bb72e344e761dc78db4ec2058c8db3f1c3ac63f9e42b44"
            }
        }
    }
}

Environment variables

  • ORACLE_URL PowForge Depth-of-Identity oracle base URL. Defaults to public production endpoint when running via npx; override for self-hosted or local dev.
  • ORACLE_PUBKEY Schnorr pubkey of the DoI oracle, used for offline envelope verification. Defaults to the production PowForge oracle pubkey; override only if pointing at a self-hosted oracle.

Documentation

From the project's README on GitHub, refreshed weekly. Links open on GitHub.

Contents
  1. @powforge/mcp-identity
  2. What It Does
  3. Why Identity-Anchored Pricing
  4. Quick Start
  5. Why Chaintip-Anchored
  6. L402 Pricing
  7. Status
  8. License
  9. Source

@powforge/mcp-identity

MCP server that scores any Nostr pubkey's depth-of-identity before your handler runs. Chaintip-anchored Schnorr cert, L402 priced, drop-in for AI agents that need Sybil resistance on top of paid APIs.

npm: npm i @powforge/mcp-identity

Homepage: https://powforge.dev/explorer

Whitepaper: https://powforge.dev/whitepaper

What It Does

Three MCP tools that wrap the PowForge Depth-of-Identity Oracle:

  • doi_score_lookup — given a Nostr pubkey (hex or npub), returns multi-dimensional identity score (network, longevity, kinetic-filter cost). L402-priced via the upstream oracle.
  • doi_sign_vouch — builds an unsigned Nostr event for vouching depth-of-identity for another pubkey. Caller signs; oracle counts toward score on observation.
  • doi_score_verify — offline Schnorr verification of a signed DoI cert returned from the oracle. No network.

Why Identity-Anchored Pricing

Most paid-API services charge per-request flat. That fails on agent-to-agent surfaces where:

  1. New agents look identical to scrapers — no signal on intent or risk.
  2. Long-tail abusers extract value cheaper than they impose cost.
  3. Whitelist gating doesn't scale to open agent ecosystems.

DoI gives your server a quantitative number for "how much would it cost to fake this caller's identity at this depth" — anchored to a specific Bitcoin chaintip cert that's non-repudiable. Use it as a multiplier on your L402 macaroon price, a rate-limit input, or a routing key.

Quick Start

npm i @powforge/mcp-identity

Add to your MCP config (Claude Desktop, Cursor, etc):

{
  "mcpServers": {
    "powforge-identity": {
      "command": "npx",
      "args": ["-y", "@powforge/mcp-identity"]
    }
  }
}

Restart the client. Three new tools appear under powforge-identity.

Why Chaintip-Anchored

The score includes a Schnorr signature over (score, dimensions, score_chaintip_height, score_chaintip_blockhash). That binds the claim to Bitcoin's kinetic filter — recomputable PageRank scores can be silently rewritten, but a chaintip-anchored cert is a fixed claim against a known time. Verification is offline.

The oracle's falsifiable claim window is documented in the whitepaper.

L402 Pricing

The MCP server transparently handles the L402 macaroon dance with oracle.powforge.dev. First call returns a 402 with a Lightning invoice; the wrapper pays from a wallet you configure (env: LNBITS_INVOICE_KEY) and retries. No keys, no accounts.

Status

License

MIT.

Source

Source lives in a private development repo. Issues, questions, and bug reports welcome here.

Frequently asked questions

What is io.github.zekebuilds-lab/mcp-identity?

DoI score lookup, vouch event builder, and offline schnorr verify for AI agents.

How do I install io.github.zekebuilds-lab/mcp-identity?

It runs on your machine. In Claude Code: claude mcp add mcp-identity -e 'ORACLE_URL=https://identity.powforge.dev' -e 'ORACLE_PUBKEY=b4b12dfbc3dfdfa803bb72e344e761dc78db4ec2058c8db3f1c3ac63f9e42b44' -- npx -y @powforge/mcp-identity@0.7.2. For other clients, paste the JSON configuration from this page into their MCP settings.

Does io.github.zekebuilds-lab/mcp-identity need an API key?

Its registry entry lists no required key or secret. Some features may still need an account with the service it connects to.

Is io.github.zekebuilds-lab/mcp-identity open source?

Its code is public on GitHub, but the repository does not declare a standard license.

Who maintains io.github.zekebuilds-lab/mcp-identity?

It is published by zekebuilds-lab. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.