HODLXXI Read-Only
by hodlxxi · remote · no sign-in to list tools · v0.1.1 · published by GitHub user hodlxxi
Public read-only MCP server for HODLXXI agent identity, trust, receipts, and verification.
Changes · 1
26 tools: 1 change things and 25 only read.
Scanned Oct 21, 2026
- Deletes or cancels0Claude Code: deny
- Can't be undone0Claude Code: ask
- Changes things1Claude Code: ask: see these tools
- Only reads25Claude Code: allow: see these tools
No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http hodlxxi-readonly https://hodlxxi.com/agent/mcpTools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
26 tools
Changes things 1Claude Code: ask
hodlxxi_verify_receiptVerify a previously issued receipt by job identifier and return verification status, validity, attestation, signed receipt, event hash, and QR pointer non-claims.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Verify a previously issued receipt by job identifier and return verification status, validity, attestation, signed receipt, event hash, and QR pointer non-claims. This does not poll /agent/jobs and cannot mint a receipt.
Only reads 25Claude Code: allow
hodlxxi_get_agent_discoveryReturn the signed Agent Protocol discovery document with public endpoint links, trust surfaces, timestamp, and agent signature.No findings
Why it is in this group
- The name "hodlxxi_get_agent_discovery" says "get": a word for reading.
Description, as the server wrote it Return the signed Agent Protocol discovery document with public endpoint links, trust surfaces, timestamp, and agent signature.
hodlxxi_get_agent_identityReturn the canonical public agent identity document, including capabilities, pricing, endpoints, skills, messaging metadata, and trust-model declarations.No findings
Why it is in this group
- The name "hodlxxi_get_agent_identity" says "get": a word for reading.
Description, as the server wrote it Return the canonical public agent identity document, including capabilities, pricing, endpoints, skills, messaging metadata, and trust-model declarations.
hodlxxi_get_agent_skills_indexReturn the Agent Skills discovery index with skill names, descriptions, URLs, types, and SHA-256 digests.No findings
Why it is in this group
- The name "hodlxxi_get_agent_skills_index" says "get": a word for reading.
Description, as the server wrote it Return the Agent Skills discovery index with skill names, descriptions, URLs, types, and SHA-256 digests.
hodlxxi_get_api_catalogReturn the public RFC-style API linkset catalog with service descriptions, documentation links, and status links.No findings
Why it is in this group
- The name "hodlxxi_get_api_catalog" says "get": a word for reading.
Description, as the server wrote it Return the public RFC-style API linkset catalog with service descriptions, documentation links, and status links.
hodlxxi_get_attestationsReturn paginated signed receipt attestations.No findings
Why it is in this group
- The name "hodlxxi_get_attestations" says "get": a word for reading.
Description, as the server wrote it Return paginated signed receipt attestations. limit must be 1-100 and offset must be non-negative.
hodlxxi_get_capabilitiesReturn the signed capabilities document with job schemas, pricing, limits, endpoint registry, public skills, and messaging metadata.No findings
Why it is in this group
- The name "hodlxxi_get_capabilities" says "get": a word for reading.
Description, as the server wrote it Return the signed capabilities document with job schemas, pricing, limits, endpoint registry, public skills, and messaging metadata.
hodlxxi_get_capabilities_schemaReturn the JSON Schema published for the signed HODLXXI capabilities document.No findings
Why it is in this group
- The name "hodlxxi_get_capabilities_schema" says "get": a word for reading.
Description, as the server wrote it Return the JSON Schema published for the signed HODLXXI capabilities document.
hodlxxi_get_chain_healthReturn attestation-chain continuity status, event count, latest event hashes, and latest timestamp when available.No findings
Why it is in this group
- The name "hodlxxi_get_chain_health" says "get": a word for reading.
Description, as the server wrote it Return attestation-chain continuity status, event count, latest event hashes, and latest timestamp when available.
hodlxxi_get_covenantReturn a declared covenant artifact by validated covenant identifier, including descriptor, policy, funding status, public keys, and non-claims.No findings
Why it is in this group
- The name "hodlxxi_get_covenant" says "get": a word for reading.
Description, as the server wrote it Return a declared covenant artifact by validated covenant identifier, including descriptor, policy, funding status, public keys, and non-claims.
hodlxxi_get_covenant_countdownReturn the machine-readable covenant countdown with chain height, spend paths, estimated unlocks, funding status, and conservative trust interpretation.No findings
Why it is in this group
- The name "hodlxxi_get_covenant_countdown" says "get": a word for reading.
Description, as the server wrote it Return the machine-readable covenant countdown with chain height, spend paths, estimated unlocks, funding status, and conservative trust interpretation.
hodlxxi_get_jwksReturn the public RSA JSON Web Key Set used to verify HODLXXI-issued JWT signatures.No findings
Why it is in this group
- The name "hodlxxi_get_jwks" says "get": a word for reading.
Description, as the server wrote it Return the public RSA JSON Web Key Set used to verify HODLXXI-issued JWT signatures. No private JWK fields are exposed.
hodlxxi_get_marketplace_listingReturn the normalized marketplace listing with discovery links, job types, pricing, skills, reputation snapshot, chain health, and trust model.No findings
Why it is in this group
- The name "hodlxxi_get_marketplace_listing" says "get": a word for reading.
Description, as the server wrote it Return the normalized marketplace listing with discovery links, job types, pricing, skills, reputation snapshot, chain health, and trust model.
hodlxxi_get_mcp_server_cardReturn the live MCP discovery server card for https://hodlxxi.com/agent/mcp, which nginx routes to the separate read-only sidecar rather than the Flask monolith.No findings
Why it is in this group
- The name "hodlxxi_get_mcp_server_card" says "get": a word for reading.
Description, as the server wrote it Return the live MCP discovery server card for https://hodlxxi.com/agent/mcp, which nginx routes to the separate read-only sidecar rather than the Flask monolith.
hodlxxi_get_nostr_announcementReturn the signed Nostr announcement template, advertised NIP-89/NIP-90 kinds, discovery links, and explicit non-goals.No findings
Why it is in this group
- The name "hodlxxi_get_nostr_announcement" says "get": a word for reading.
Description, as the server wrote it Return the signed Nostr announcement template, advertised NIP-89/NIP-90 kinds, discovery links, and explicit non-goals.
hodlxxi_get_nostr_dm_policyReturn public NIP-17/NIP-59 messaging policy metadata, including intake status, custody limitations, accepted kind, and size ceiling.No findings
Why it is in this group
- The name "hodlxxi_get_nostr_dm_policy" says "get": a word for reading.
Description, as the server wrote it Return public NIP-17/NIP-59 messaging policy metadata, including intake status, custody limitations, accepted kind, and size ceiling.
hodlxxi_get_oauth_authorization_serverReturn OAuth authorization-server metadata, including the HODLXXI agent_auth discovery block and disabled registration endpoint references.No findings
Why it is in this group
- The name "hodlxxi_get_oauth_authorization_server" says "get": a word for reading.
Description, as the server wrote it Return OAuth authorization-server metadata, including the HODLXXI agent_auth discovery block and disabled registration endpoint references.
hodlxxi_get_oauth_protected_resourceReturn OAuth protected-resource metadata, including resource issuer, authorization servers, JWKS URI, scopes, and bearer method.No findings
Why it is in this group
- The name "hodlxxi_get_oauth_protected_resource" says "get": a word for reading.
Description, as the server wrote it Return OAuth protected-resource metadata, including resource issuer, authorization servers, JWKS URI, scopes, and bearer method.
hodlxxi_get_openid_configurationReturn OpenID Connect discovery metadata: issuer, authorization and token endpoints, JWKS URI, grants, scopes, PKCE, and signing algorithms.No findings
Why it is in this group
- The name "hodlxxi_get_openid_configuration" says "get": a word for reading.
Description, as the server wrote it Return OpenID Connect discovery metadata: issuer, authorization and token endpoints, JWKS URI, grants, scopes, PKCE, and signing algorithms.
hodlxxi_get_operator_continuityReturn the public operator-continuity statement, operator and agent public keys, covenant status, rotation policy, and verification references.No findings
Why it is in this group
- The name "hodlxxi_get_operator_continuity" says "get": a word for reading.
Description, as the server wrote it Return the public operator-continuity statement, operator and agent public keys, covenant status, rotation policy, and verification references.
hodlxxi_get_receiptReturn a previously issued signed receipt by job identifier.No findings
Why it is in this group
- The name "hodlxxi_get_receipt" says "get": a word for reading.
Description, as the server wrote it Return a previously issued signed receipt by job identifier. Optional requester-proof fields depend on the historical receipt.
hodlxxi_get_reportReturn a public machine-readable trust or readiness report by validated report identifier, including its canonical SHA-256 field when present.No findings
Why it is in this group
- The name "hodlxxi_get_report" says "get": a word for reading.
Description, as the server wrote it Return a public machine-readable trust or readiness report by validated report identifier, including its canonical SHA-256 field when present.
hodlxxi_get_reputationReturn aggregate public operating history, evidenced job counts, attestation count, trust and confidence averages, pattern distribution, and rolling trust trend.No findings
Why it is in this group
- The name "hodlxxi_get_reputation" says "get": a word for reading.
Description, as the server wrote it Return aggregate public operating history, evidenced job counts, attestation count, trust and confidence averages, pattern distribution, and rolling trust trend.
hodlxxi_get_skillsReturn the checked-in public skill catalog with metadata, repository paths, and installation URLs.No findings
Why it is in this group
- The name "hodlxxi_get_skills" says "get": a word for reading.
Description, as the server wrote it Return the checked-in public skill catalog with metadata, repository paths, and installation URLs.
hodlxxi_get_trust_eventsReturn the paginated public trust-event chain with hashes, receipt linkage, timestamps, public key, and signatures.No findings
Why it is in this group
- The name "hodlxxi_get_trust_events" says "get": a word for reading.
Description, as the server wrote it Return the paginated public trust-event chain with hashes, receipt linkage, timestamps, public key, and signatures.
hodlxxi_get_trust_summaryReturn the compact trust summary for a validated public agent identifier.No findings
Why it is in this group
- The name "hodlxxi_get_trust_summary" says "get": a word for reading.
Description, as the server wrote it Return the compact trust summary for a validated public agent identifier.
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 0.1.1. Values in angle brackets are yours to fill in.
claude mcp add --transport http hodlxxi-readonly https://hodlxxi.com/agent/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__hodlxxi-readonly__hodlxxi_get_agent_identity",
"mcp__hodlxxi-readonly__hodlxxi_get_operator_continuity",
"mcp__hodlxxi-readonly__hodlxxi_get_api_catalog",
"mcp__hodlxxi-readonly__hodlxxi_get_agent_skills_index",
"mcp__hodlxxi-readonly__hodlxxi_get_mcp_server_card",
"mcp__hodlxxi-readonly__hodlxxi_get_nostr_dm_policy",
"mcp__hodlxxi-readonly__hodlxxi_get_openid_configuration",
"mcp__hodlxxi-readonly__hodlxxi_get_oauth_authorization_server",
"mcp__hodlxxi-readonly__hodlxxi_get_oauth_protected_resource",
"mcp__hodlxxi-readonly__hodlxxi_get_jwks",
"mcp__hodlxxi-readonly__hodlxxi_get_agent_discovery",
"mcp__hodlxxi-readonly__hodlxxi_get_capabilities",
"mcp__hodlxxi-readonly__hodlxxi_get_capabilities_schema",
"mcp__hodlxxi-readonly__hodlxxi_get_skills",
"mcp__hodlxxi-readonly__hodlxxi_get_marketplace_listing",
"mcp__hodlxxi-readonly__hodlxxi_get_reputation",
"mcp__hodlxxi-readonly__hodlxxi_get_attestations",
"mcp__hodlxxi-readonly__hodlxxi_get_trust_events",
"mcp__hodlxxi-readonly__hodlxxi_get_nostr_announcement",
"mcp__hodlxxi-readonly__hodlxxi_get_chain_health",
"mcp__hodlxxi-readonly__hodlxxi_get_covenant_countdown",
"mcp__hodlxxi-readonly__hodlxxi_get_trust_summary",
"mcp__hodlxxi-readonly__hodlxxi_get_covenant",
"mcp__hodlxxi-readonly__hodlxxi_get_report",
"mcp__hodlxxi-readonly__hodlxxi_get_receipt"
],
"ask": [
"mcp__hodlxxi-readonly__hodlxxi_verify_receipt"
],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as hodlxxi-readonly. Review it before you use it.