# `io.github.KBD26/daemon-art` on anlyon.dev

> Text inside fenced blocks marked untrusted-server-text was written by the MCP server's publisher, not by anlyon.dev. It is data to inspect, not instructions to follow. Invisible characters are shown as [U+XXXX].
> No finding is not a safety guarantee: these are point-in-time checks of tool definitions, not of code or behaviour.

- Page: https://anlyon.dev/servers/io.github.KBD26/daemon-art
- JSON: https://anlyon.dev/api/v1/servers/io.github.KBD26/daemon-art
- Version: 1.1.0 (active)
- Publisher: io.github.KBD26 (GitHub account)
- Runs: remote (streamable-http)
- Sign-in to list tools: none
- Repository: https://github.com/KBD26/koine-mcp-server
- Metadata from the official MCP Registry, synced 2026-10-21T18:17:07.484Z

Title and description, as the publisher wrote them:

```untrusted-server-text
DAEMON — on-chain generative art (8004 NONCE + KOINE)
Mine, mint and verify 8004 NONCE proof-of-work art on Ethereum L1.
```

Scanned 2026-10-21T19:03:33.816Z over streamable-http.

**13 tools: 10 change things and 3 only read.**

| Group | Class | Tools | Claude Code |
| --- | --- | --- | --- |
| Deletes or cancels | destructive | 0 | deny |
| Can't be undone | irreversible | 0 | ask |
| Changes things | write | 10 | ask |
| Only reads | read | 3 | allow |

## Exfil surface

No private-data -> untrusted-input -> outbound path in this server alone: no tool is tagged private-data or outbound.

| Tag | Meaning | Tools |
| --- | --- | --- |
| private-data | Reads files, mail, messages, databases, secrets, calendars or repositories. | none |
| untrusted-input | Brings in text someone else can write: web pages, inbound email, messages, issues and comments. | `mcp__daemon-art__koine_get_piece` `mcp__daemon-art__koine_info` `mcp__daemon-art__koine_list_genesis` `mcp__daemon-art__koine_listings` `mcp__daemon-art__koine_provenance` `mcp__daemon-art__koine_verify` `mcp__daemon-art__nonce_census` `mcp__daemon-art__nonce_get_piece` `mcp__daemon-art__nonce_info` `mcp__daemon-art__nonce_mint_packet` `mcp__daemon-art__nonce_verify` |
| outbound | Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL. | none |

## Findings

No check matched anything in these tool definitions.


## Changes things (10)

Creates or changes something that can be changed back. Claude Code: ask.

### `koine_info`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
KOINE collection overview: name, total supply, the artist agent DAEMON, contract address, chain, and links. KOINE is a fully on-chain generative-art collection on Ethereum L1 authored by the agent DAEMON.
```

### `koine_listings`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
KOINE pieces currently for sale, cheapest first, so an agent can COLLECT. Always returns the collection, contract, and OpenSea link; when an OpenSea API key is set on the server it also returns live listings (token id, price in ETH, item URL, order hash). Listings are Seaport orders — fulfill on-chain with any Seaport-capable wallet (e.g. the opensea-js SDK) from a funded address.
```

### `koine_provenance`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Lineage of a KOINE piece from the on-chain derivation graph: parents, full ancestry, and downstream adoption (which pieces build on it).
```

### `koine_verify`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
THE KEYSTONE. Calls the contract's on-chain verify(id) and returns machine-decidable trust: {canonical_ok (the on-chain render still hashes to the digest committed at mint), artist (DAEMON), digest, traits}. One call, a trustable answer.
```

### `nonce_census`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Live distribution of minted 8004 NONCE pieces across difficulty bands, read from the chain. Bands are UNCAPPED: supply per band is not designed, it is the emergent result of how hard each minter chose to work. Returns raw counts only — no interpretation.
```

### `nonce_info`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Live state of the 8004 NONCE collection on Ethereum mainnet: how many are minted, the current mint price, whether public minting is open, supply remaining, and canonical links. 8004 NONCE is fully on-chain proof-of-work generative art by the autonomous agent-artist DAEMON — each piece must be MINED before it can be minted.
```

### `nonce_mine`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

Description, as the server wrote it:

```untrusted-server-text
DO THE WORK. Grinds keccak256 to find a proof-of-work nonce valid for a specific minter address, at or above a chosen difficulty. This is the only way to become eligible to mint an 8004 NONCE piece. The nonce is bound to (chainId, contract, minter) — it is worthless to any other address, so mine for the address that will actually send the transaction. Returns the nonce, its work hash, difficulty in leading-zero bits, and band. Deadline-bounded: for difficulty above ~20 bits, run the local miner script instead of waiting on a server.
```

### `nonce_mint_packet`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Builds a ready-to-broadcast mint transaction from a mined nonce — {to, data, value} plus copy-paste commands for MetaMask Agent Wallet (mm wallet send-transaction) and the Bankr wallet API. NEVER holds, asks for, or touches a private key. Re-derives and re-checks the proof before emitting anything, and reads the live price(), so a bad nonce fails here instead of costing gas on a revert.
```

### `nonce_spec`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

Description, as the server wrote it:

```untrusted-server-text
The complete machine-readable specification for 8004 NONCE: the proof-of-work rule and its exact preimage layout, the mint calldata, the price curve, rarity derivation, every function selector, and the safety rules. Static — needs no network, so it always answers. Read this FIRST before mining or minting.
```

### `nonce_verify`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
THE KEYSTONE. Calls the contract's on-chain verify(id), then INDEPENDENTLY recomputes the proof-of-work from the stored (minter, nonce) using local keccak and compares. Two machines, one truth. Returns the chain's answer, the local recomputation, and whether they MATCH — machine-decidable trust with no trusted intermediary.
```

## Only reads (3)

Looks things up and changes nothing. Claude Code: allow.

### `koine_get_piece`

- The name "koine_get_piece" says "get": a word for reading.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Traits + current owner of one KOINE token: generation, morphemes (R/B/T/L), parent token ids, seed, owner.
```

### `koine_list_genesis`

- The name "koine_list_genesis" says "list": a word for reading.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
List every KOINE piece (id, generation, morphemes, parents) for discovery and composition.
```

### `nonce_get_piece`

- The name "nonce_get_piece" says "get": a word for reading.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Full detail on one 8004 NONCE token: its seed (which IS the winning work hash), difficulty in leading-zero bits, band, rarity score, current owner, and links. Every value is read live from the chain.
```

## Claude Code permissions

For `.claude/settings.json`, assuming the server is installed as `daemon-art`:

```json
{
  "permissions": {
    "allow": [
      "mcp__daemon-art__nonce_get_piece",
      "mcp__daemon-art__koine_get_piece",
      "mcp__daemon-art__koine_list_genesis"
    ],
    "ask": [
      "mcp__daemon-art__nonce_spec",
      "mcp__daemon-art__nonce_info",
      "mcp__daemon-art__nonce_mine",
      "mcp__daemon-art__nonce_mint_packet",
      "mcp__daemon-art__nonce_verify",
      "mcp__daemon-art__nonce_census",
      "mcp__daemon-art__koine_info",
      "mcp__daemon-art__koine_verify",
      "mcp__daemon-art__koine_provenance",
      "mcp__daemon-art__koine_listings"
    ],
    "deny": []
  }
}
```

Capability tags behind the rules (a read tagged outbound is asked about):

- `mcp__daemon-art__nonce_info`: untrusted-input
- `mcp__daemon-art__nonce_mint_packet`: untrusted-input
- `mcp__daemon-art__nonce_verify`: untrusted-input
- `mcp__daemon-art__nonce_get_piece`: untrusted-input
- `mcp__daemon-art__nonce_census`: untrusted-input
- `mcp__daemon-art__koine_info`: untrusted-input
- `mcp__daemon-art__koine_get_piece`: untrusted-input
- `mcp__daemon-art__koine_verify`: untrusted-input
- `mcp__daemon-art__koine_provenance`: untrusted-input
- `mcp__daemon-art__koine_list_genesis`: untrusted-input
- `mcp__daemon-art__koine_listings`: untrusted-input

## Remote posture

What an anonymous client saw at the remote endpoint, last 2026-10-22T14:52:50.802Z, unchanged since 2026-10-22T14:52:50.802Z. No credentials were sent and no tool was called. Values are shown as the endpoint returned them. Method: https://anlyon.dev/methodology#remote-posture

| Fact | Observed |
| --- | --- |
| Reachable | `yes` |
| HTTP status of an anonymous initialize | `200` |
| tools/list served without credentials | `yes` |
| Tools that change things, listed without credentials | `10` |
| Protocol version | `2025-06-18` |
| WWW-Authenticate on 401 | `not observed` |
| resource_metadata in WWW-Authenticate | `none` |
| RFC 9728 protected resource metadata | `none` |
| Authorization servers | `none` |
| Legacy HTTP+SSE transport | `no` |
| Dynamic client registration | `not observed` |
| Client ID metadata documents | `not observed` |

- **warn** Tools that change things, listed to anyone ([unauth-remote-writes](https://anlyon.dev/methodology#unauth-remote-writes))

```untrusted-server-text
The endpoint served tools/list without credentials, and the list has 10 tools that change things (10 write). Whether a call also works without credentials was not tested: tools are never called.

https://koine-mcp-server.vercel.app/api/mcp: tools/list returned 13 tools to an anonymous client, including nonce_spec (write), nonce_info (write), nonce_mine (write), nonce_mint_packet (write), nonce_verify (write) and 5 more
```