io.github.lonniev/dpyc-oracle

Est-ce que io.github.lonniev/dpyc-oracle est sûr ?

Au dernier audit MCP Hub, le serveur MCP « io.github.lonniev/dpyc-oracle » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 30 outils

• about≈ 114 tokens

  Extended narration about DPYC, the Social Contract, and the Oracle. Fetches README.md and GOVERNANCE.md from the dpyc-community repo and assembles a comprehensive context answer.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "about", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"result": "texte"}}

• cast_ban_vote≈ 137 tokens

  Cast a Lightning-funded vote in an active ban election. Not yet implemented — will verify npub membership, validate the election is active, and record the vote with a Lightning payment proof.

  Paramètres, retour & exemple (3)

  Paramètres

  • npub · string · requis
  • vote · string · requis
  • election_id · string · requis

  Exemple d'appel

  {"name": "cast_ban_vote", "arguments": {"npub": "texte", "vote": "texte", "election_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• check_ban_status≈ 154 tokens

  Check whether an npub is banned from the DPYC Social Contract. Looks up the member in the community registry and checks whether their status is "banned". Unknown npubs are not considered banned (they simply aren't members). Free, unauthenticated. Used by operators during the cold path (credit purchases) to enforce community bans.

  Paramètres, retour & exemple (1)

  Paramètres

  • npub · string · requis

  Exemple d'appel

  {"name": "check_ban_status", "arguments": {"npub": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• confirm_citizenship≈ 253 tokens

  Complete the citizen registration by submitting a signed Nostr event. This is part of the **citizen** registration flow (Operator-owned). The Operator calls this on behalf of a patron after the patron has signed the cryptographic challenge from request_citizenship. Verifies: 1. The challenge exists and hasn't expired 2. The Schnorr signature is valid 3. The event's pubkey matches the claimed npub 4. The event content contains the issued nonce 5. The npub is not already registered On success, commits directly to dpyc-community/members/citizens/{npub}.json to register the new Citizen immediately.

  Paramètres, retour & exemple (3)

  Paramètres

  • npub · string · requis
  • challenge_id · string · requis
  • signed_event_json · string · requis

  Exemple d'appel

  {"name": "confirm_citizenship", "arguments": {"npub": "texte", "challenge_id": "texte", "signed_event_json": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• deregister_operator≈ 220 tokens

  Remove an Operator from the DPYC community registry. Called by an Authority when the operator leaves it or the Authority disowns the operator; the request must be signed with the Authority's key. An Operator cannot exist without a sponsoring Authority, so deregistration removes the member file entirely, returning the Operator to initial state.

  Paramètres, retour & exemple (2)

  Paramètres

  • operator_npub · string · requis
    Nostr npub of the Operator to remove.
  • authority_npub · string · requis
    npub of the Authority requesting deregistration (must be a registered authority or prime_authority).

  Exemple d'appel

  {"name": "deregister_operator", "arguments": {"operator_npub": "texte", "authority_npub": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• economic_model≈ 162 tokens

  Explain the DPYC Social Contract economic model — qualitatively. Describes how value flows through the network: ad valorem certification fees, the cascade up the Certification Chain to the First Curator, and where the live numbers actually live. The Oracle quotes **no** rates, counts, or revenue figures — those belong to the Authorities' pricing models and the live registry, not to a docent. Free, unauthenticated.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "economic_model", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_campaign≈ 172 tokens

  Retrieve a published pricing campaign.

  Paramètres, retour & exemple (4)

  Paramètres

  • slug · string · requis
    The campaign slug (directory name).
  • format · string · optionnel
    "json" for importable data, "markdown" for readable summary.
  • author_npub · string · requis
    The campaign author's npub.
  • operator_npub · string · requis
    The target operator's npub.

  Exemple d'appel

  {"name": "get_campaign", "arguments": {"slug": "texte", "author_npub": "texte", "operator_npub": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_relays≈ 269 tokens

  Return the DPYC Nostr relay set, best first. The single source of truth is ``dpyc-community/relays.json``. An Operator seeds its relay set from here at cold start (its only fixed dependency is this Oracle endpoint), then reads its own bootstrap config from Nostr using just its nsec — no direct GitHub access. That file is a curated *guess*: it says which relays are worth using, not which are up this minute. Relays that an operator reported and the Oracle then proved unreachable are moved to the back of the list; everything else keeps its declared order, and nothing is ever dropped. This call never probes anything — it is on every operator's cold-start path, so it stays a lookup. Ranking improves only when someone hits a dead relay and says so via ``report_relay_failure``. Report failures only; successes need no announcement. Free.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "get_relays", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_rulebook≈ 104 tokens

  Fetch the DPYC Social Contract governance document. Returns the raw markdown of GOVERNANCE.md from the dpyc-community repo.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "get_rulebook", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"result": "texte"}}

• get_tax_rate≈ 171 tokens

  Explain how Tollbooth certification taxation works. Taxation is ad valorem and **per-Authority** — there is no single network-wide number, and the Oracle deliberately quotes none. The actual fee is the Authority's own accounting, set in its pricing model and reported at transaction time. This tool is a docent: it explains the model and points to the live source. For the exact figure, query the relevant Authority's ``check_price`` for ``certify_credits``.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "get_tax_rate", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• how_to_add_authority≈ 189 tokens

  End-to-end guide for spinning up a new Tollbooth Authority. Returns the eight-step procedure covering identity, region selection, GitHub workspace, dpyc-community registry entry, Neon + BTCPay + Horizon deployment, BTCPay credential delivery via Secure Courier, the self-registration challenge-response with the parent Authority, and pre-funding the cert-fee balance. Fetched live from docs/how-to-add-authority.md in the dpyc-community repo.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "how_to_add_authority", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"result": "texte"}}

• how_to_join≈ 126 tokens

  Tier-specific onboarding guide for joining the DPYC Social Contract. Covers all five tiers: Citizen, Advocate, Operator, Authority, and First Curator. Includes Nostr keygen instructions and practical next steps.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "how_to_join", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"result": "texte"}}

• initiate_ban_election≈ 128 tokens

  Initiate a community ban election against a member. Not yet implemented — will create a GitHub Issue with a 72-hour discussion period and Lightning-funded economic voting.

  Paramètres, retour & exemple (2)

  Paramètres

  • reason · string · requis
  • target_npub · string · requis

  Exemple d'appel

  {"name": "initiate_ban_election", "arguments": {"reason": "texte", "target_npub": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• list_campaigns≈ 140 tokens

  List published pricing campaigns from the DPYC community. Optionally filter by operator or author npub.

  Paramètres, retour & exemple (2)

  Paramètres

  • author_npub · string · optionnel
    Filter to campaigns by this author (optional).
  • operator_npub · string · optionnel
    Filter to campaigns for this operator (optional).

  Exemple d'appel

  {"name": "list_campaigns", "arguments": {"author_npub": "texte", "operator_npub": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• list_services≈ 314 tokens

  Enumerate the live DPYC service network with self-described summaries. Reads the member roster from the dpyc-community registry, then (when ``probe=True``) performs a lightweight MCP handshake against each member's public service endpoint to fetch that service's *own* self-description and tool inventory. Nothing about the services is hardcoded here — descriptions are authored by each service, and prices come from each Operator/Authority pricing model (call the service's ``check_price``). Resilient by design: per-service timeout, partial results, brief caching, and a registry-only fallback when an endpoint is asleep or unreachable. A sleeping service never breaks the listing. Free, unauthenticated.

  Paramètres, retour & exemple (2)

  Paramètres

  • kind · string · optionnel
    Role filter — "all", "operator", "authority", or "advocate".
  • probe · boolean · optionnel
    Handshake each endpoint for a live self-description. Set False for a fast registry-only listing (no network fan-out).

  Exemple d'appel

  {"name": "list_services", "arguments": {"kind": "texte", "probe": true}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• lookup_member≈ 143 tokens

  Look up a member by their Nostr npub. Can look up any role's npub — citizen, operator, or authority. Returns the full member record if found, or a not-found message.

  Paramètres, retour & exemple (1)

  Paramètres

  • npub · string · requis

  Exemple d'appel

  {"name": "lookup_member", "arguments": {"npub": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"result": "texte"}}

• network_advisory≈ 128 tokens

  Get current network deployment advisory. Returns human-readable guidance on what changed recently, urgent upgrades, and actions operators should take. Fetched live from ADVISORY.md in the dpyc-community repo.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "network_advisory", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"result": "texte"}}

• network_versions≈ 116 tokens

  Get current recommended versions of all Tollbooth components. Returns component versions, minimum compatibility, active protocols, and a short advisory summary. Data is fetched live from network-status.json in the dpyc-community repo.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "network_versions", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• publish_campaign≈ 297 tokens

  Publish a pricing campaign to the DPYC community. Commits both a machine-importable JSON file and a human-readable Markdown summary to the dpyc-community campaigns directory. The request must be signed with ``author_npub``'s key (NIP-98), so a campaign is published only under its author's own name.

  Paramètres, retour & exemple (5)

  Paramètres

  • author_npub · string · requis
    The npub of the person who designed the campaign.
  • campaign_json · string · requis
    The full campaign export as a JSON string.
  • campaign_name · string · optionnel
    Optional display name. Derived from JSON if omitted.
  • operator_npub · string · requis
    The npub of the operator the campaign is for.
  • campaign_markdown · string · optionnel
    Optional pre-rendered Markdown. If omitted, the Oracle generates a basic summary from the JSON.

  Exemple d'appel

  {"name": "publish_campaign", "arguments": {"author_npub": "texte", "campaign_json": "texte", "operator_npub": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• register_advocate≈ 296 tokens

  Register a new Advocate in the DPYC community registry. Advocates are community utility services that provide shared infrastructure (e.g., OAuth2 callback collectors) but aren't monetized Operators or certification Authorities. The request must be signed with ``npub``'s own key (NIP-98): a service registers itself, and no one can register an npub they do not hold.

  Paramètres, retour & exemple (5)

  Paramètres

  • npub · string · requis
    Nostr npub of the Advocate service.
  • service_url · string · requis
    Public URL of the service.
  • display_name · string · requis
    Human-readable name for the service.
  • service_name · string · requis
    Machine-readable service identifier (e.g., "tollbooth-oauth2-collector").
  • service_description · string · requis
    Short description of what the service does.

  Exemple d'appel

  {"name": "register_advocate", "arguments": {"npub": "texte", "service_url": "texte", "display_name": "texte", "service_name": "texte", "service_description": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• register_authority≈ 348 tokens

  Register a new Authority in the DPYC community registry. Called by an Authority service at the end of the onboarding protocol (after the candidate proves npub ownership and the Prime Authority approves). Commits a new ``members/authorities/{npub}.json`` file to dpyc-community on GitHub. The full Authority onboarding protocol is a 3-step Nostr DM challenge-response flow: 1. ``register_authority_npub(npub)`` — Authority sends DM challenge 2. ``confirm_authority_claim(npub)`` — verifies candidate DM, escalates to Prime 3. ``check_authority_approval(npub)`` — Prime approves, this tool is called

  Paramètres, retour & exemple (4)

  Paramètres

  • service_url · string · requis
    Public MCP endpoint URL of the Authority service.
  • display_name · string · requis
    Human-readable name for the Authority.
  • authority_npub · string · requis
    Nostr npub of the new Authority curator.
  • upstream_authority_npub · string · requis
    npub of the sponsoring Authority (must already exist as a prime_authority or authority in the registry).

  Exemple d'appel

  {"name": "register_authority", "arguments": {"service_url": "texte", "display_name": "texte", "authority_npub": "texte", "upstream_authority_npub": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• register_operator≈ 239 tokens

  Register a new Operator in the DPYC community registry. Called by an Authority service when its owner approves an operator's adoption request; the request must be signed with the Authority's key.

  Paramètres, retour & exemple (4)

  Paramètres

  • service_url · string · requis
    Public MCP endpoint URL of the Operator service.
  • display_name · string · requis
    Human-readable name for the Operator service.
  • operator_npub · string · requis
    Nostr npub of the new Operator.
  • authority_npub · string · requis
    npub of the sponsoring Authority (must already exist as an authority or prime_authority in the registry).

  Exemple d'appel

  {"name": "register_operator", "arguments": {"service_url": "texte", "display_name": "texte", "operator_npub": "texte", "authority_npub": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• renounce_membership≈ 110 tokens

  Citizen self-removal from the DPYC Social Contract via automated PR. Not yet implemented — will create a GitHub PR to remove the member from the registry.

  Paramètres, retour & exemple (1)

  Paramètres

  • npub · string · requis

  Exemple d'appel

  {"name": "renounce_membership", "arguments": {"npub": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• report_relay_failure≈ 401 tokens

  Report that a relay in the DPYC set was unreachable, and re-rank it. A report does not set a relay's rank. It asks the Oracle to measure that relay *now*, and the Oracle's own probe decides. A false or mistaken report therefore costs one probe and changes nothing — no caller can demote a healthy relay by asserting that it is down. Report only failures. Successes are far too frequent to be worth carrying, and a relay that works needs no announcement.

  Paramètres, retour & exemple (4)

  Paramètres

  • mode · string · optionnel
    What was being attempted — ``"send"``, ``"read"``, or ``"unknown"``. Recorded for the human reading the logs.
  • relay · string · requis
    The relay that failed. Must already be in the DPYC set — this tool re-measures the curated set, it is not a probe-anything primitive that can be aimed at arbitrary hosts.
  • signed_event · string · requis
    A Nostr event signed by ``reporter_npub`` whose content contains the relay URL, created within the last few minutes. Stateless by design: no challenge is issued first, because a challenge store would not survive this service's recycles — and a relay report is most needed exactly when relays are broken.
  • reporter_npub · string · requis
    The reporting operator's npub.

  Exemple d'appel

  {"name": "report_relay_failure", "arguments": {"relay": "texte", "signed_event": "texte", "reporter_npub": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• request_citizenship≈ 323 tokens

  Begin the citizen registration process (Operator-owned flow). This is the **citizen** registration path. Called by the Operator on behalf of a patron — invokes the Oracle directly. No Authority npub is required or consulted. The patron's npub is registered as a Citizen in the DPYC community. The npub provided here becomes the user's **patron identity** — the keypair they will use for credit purchases and service access across all Tollbooth-monetized services. Not to be confused with **operator** registration, which goes through the Authority via a Nostr DM delegation request. Issues a cryptographic challenge that the applicant must sign with their Nostr private key (nsec) to prove they own the claimed npub. The nsec never leaves the applicant's device. Returns a challenge_id, nonce, and signing instructions. The applicant signs a Nostr event containing the nonce and submits it via confirm_citizenship within 10 minutes.

  Paramètres, retour & exemple (2)

  Paramètres

  • npub · string · requis
  • display_name · string · requis

  Exemple d'appel

  {"name": "request_citizenship", "arguments": {"npub": "texte", "display_name": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• resolve_authority_for≈ 137 tokens

  Resolve the certifying Authority for an operator npub. Returns the Authority's ``{npub, url, name}`` (from the operator's ``upstream_authority_npub``). Use this after bootstrap to learn — and verify — which Authority signed your config, without reading GitHub.

  Paramètres, retour & exemple (1)

  Paramètres

  • npub · string · requis

  Exemple d'appel

  {"name": "resolve_authority_for", "arguments": {"npub": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• resolve_service≈ 140 tokens

  Resolve a DPYC service by ``name`` or ``npub``. Returns ``{npub, url, name, role, purchase_mode}`` where ``purchase_mode`` is the registry-topology fact ``"certified"`` or ``"direct"`` (not a price). Supply exactly one of ``name`` or ``npub``.

  Paramètres, retour & exemple (2)

  Paramètres

  • name · string · optionnel
  • npub · string · optionnel

  Exemple d'appel

  {"name": "resolve_service", "arguments": {"name": "texte", "npub": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• service_status≈ 95 tokens

  Diagnostic: report this service's software versions and runtime info. Free, unauthenticated. Use to verify deployment versions across the DPYC ecosystem.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "service_status", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• update_operator≈ 260 tokens

  Update an existing Operator's registry entry. Used when an Operator moves to a new MCP endpoint, changes its display name, or needs to correct a registration. Called by an Authority when its owner approves the operator's update request; the request must be signed with that Authority's key.

  Paramètres, retour & exemple (4)

  Paramètres

  • service_url · string · optionnel
    New MCP endpoint URL (leave empty to keep current).
  • display_name · string · optionnel
    New display name (leave empty to keep current).
  • operator_npub · string · requis
    Nostr npub of the Operator to update.
  • authority_npub · string · requis
    npub of the requesting Authority (must be a registered authority or prime_authority).

  Exemple d'appel

  {"name": "update_operator", "arguments": {"operator_npub": "texte", "authority_npub": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• who_is_first_curator≈ 126 tokens

  Identify the First Curator (Prime Authority) of the Certification Chain. Returns the curator's npub, display name, and member record.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "who_is_first_curator", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"result": "texte"}}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://dpyc-oracle.fastmcp.app/mcp