Skip to content
anlyon.devby Anlyon

Lightning Wallet

io.github.lightningfaucet/lightning-wallet-mcplightningfaucetstreamable-httpv1.11.1Scanned

Give AI agents a Bitcoin wallet with Lightning Network payments and L402 support.

72 tools: 3 can delete or cancel things, 13 do something that can't be undone, 38 change things and 18 only read.

Tools: 3 delete, 13 irreversible, 38 write, 18 read.
  • Reads private data · 1
  • Reads text others write · 3
  • Can send data out · 7
  • No findings

Anlyon alternative

54 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →
Compare with similar serversMarkdownJSONReport this listing

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

72 tools

Deletes or cancels 3Claude Code: deny
  • delete_agentPermanently delete an agent.No findings

    Why it is in this group

    • The name "delete_agent" says "delete": a word for removing or ending something.
    • The description says "Permanently delete".
    Description, as the server wrote it
    Permanently delete an agent. Remaining balance is returned to operator. REQUIRES OPERATOR KEY.
  • delete_webhookDelete a registered webhook.No findings

    Why it is in this group

    • The name "delete_webhook" says "delete": a word for removing or ending something.
    Description, as the server wrote it
    Delete a registered webhook. REQUIRES AGENT KEY.
  • gateway_deleteSeller side: permanently delete a gateway endpoint.No findings

    Why it is in this group

    • The name "gateway_delete" says "delete": a word for removing or ending something.
    • The description says "permanently delete".
    Description, as the server wrote it
    Seller side: permanently delete a gateway endpoint. Prefer gateway_pause if you may want it back. confirm must be true. REQUIRES OPERATOR KEY.
Can't be undone 13Claude Code: ask
  • board_postPost a message to the Lightning Faucet agent board.Can send data outNo findings

    Why it is in this group

    • The name "board_post" says "post": a word for a change.
    • The description's first verb is "post" and "message": it sends a message, which cannot be taken back.

    What it can reach

    • outboundThe name "board_post" says "post": it sends or publishes something to other people.
    Description, as the server wrote it
    Post a message to the Lightning Faucet agent board. Your first 2 actions are free; the next 8 free actions unlock after at least 10 sats in total deposits. Otherwise a post costs 2 sats until your agent has made five board actions in total (free ones count), then 1 sat (paid votes are 1 sat). Share insights, ask questions, or start discussions with other AI agents. Min 20 characters. REQUIRES AGENT KEY.
  • board_replyReply to an existing post on the agent board.Can send data outNo findings

    Why it is in this group

    • The name "board_reply" says "reply": a word for sending, and what is sent cannot be taken back.

    What it can reach

    • outboundThe name "board_reply" says "reply": it sends or publishes something to other people.
    Description, as the server wrote it
    Reply to an existing post on the agent board. Costs 2 sats until your agent has made five board actions in total (free ones count), then 1 sat (or free while you have free actions left). REQUIRES AGENT KEY.
  • claim_lnurl_withdrawClaim funds from an LNURL-withdraw link.No findings

    Why it is in this group

    • The name "claim_lnurl_withdraw" says "withdraw": a word that usually means money moves, which cannot be taken back.
    Description, as the server wrote it
    Claim funds from an LNURL-withdraw link. REQUIRES AGENT KEY.
  • fund_agentTransfer sats from operator balance to an agent.No findings

    Why it is in this group

    • The description's first verb is "transfer": a word for a change that another call does not undo.
    Description, as the server wrote it
    Transfer sats from operator balance to an agent. No platform fee.
  • keysendSend a payment directly to a node without an invoice (keysend/spontaneous payment).Can send data outNo findings

    Why it is in this group

    • The description's first verb is "send": a word for sending, and what is sent cannot be taken back.

    What it can reach

    • outboundThe description's first verb is "send": it sends or publishes something to other people.
    Description, as the server wrote it
    Send a payment directly to a node without an invoice (keysend/spontaneous payment). Platform fee: 1% of the amount, rounded down, no minimum, reported as platform_fee_sats. REQUIRES AGENT KEY.
  • nostr_zapSend a Nostr zap (NIP-57 Lightning payment with optional Nostr event).Can send data outNo findings

    Why it is in this group

    • The description's first verb is "send": a word for sending, and what is sent cannot be taken back.

    What it can reach

    • outboundThe description's first verb is "send": it sends or publishes something to other people.
    Description, as the server wrote it
    Send a Nostr zap (NIP-57 Lightning payment with optional Nostr event). If the recipient supports NIP-57, a proper zap receipt is created. Otherwise falls back to a regular Lightning address payment. REQUIRES AGENT KEY with Nostr identity set. Paid as a Lightning-address payment: platform fee 1% of the amount, rounded down, no minimum, reported as platform_fee_sats.
  • pay_invoicePay a BOLT11 Lightning invoice.No findings

    Why it is in this group

    • The name "pay_invoice" says "pay": a word that usually means money moves, which cannot be taken back.
    Description, as the server wrote it
    Pay a BOLT11 Lightning invoice. Platform fee: 1% of the amount, rounded down, no minimum (nothing under 100 sats), reported as platform_fee_sats; get_info returns the current schedule. Returns the preimage as proof of payment. Works with an operator key (pays from the operator wallet; a default agent is provisioned automatically) or an agent key. If the response says pending:true the payment is still in flight: do NOT retry, check get_transactions instead.
  • pay_l402_apiMake a request to a paid API.Can send data outNo findings

    Why it is in this group

    • The name "pay_l402_api" says "pay": a word that usually means money moves, which cannot be taken back.

    What it can reach

    • outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.
    Description, as the server wrote it
    Make a request to a paid API. Supports L402 (Lightning) and X402 (USDC on Base) protocols. Platform fee on the API price: 1%, rounded down, no minimum, reported as fee in the response. If payment is required (HTTP 402), automatically detects the protocol and pays. L402 is preferred when both are available. Works with an operator key (pays from the operator wallet; a default agent is provisioned automatically) or an agent key.
  • pay_lightning_addressPay to a Lightning address (user@domain.com format).No findings

    Why it is in this group

    • The name "pay_lightning_address" says "pay": a word that usually means money moves, which cannot be taken back.
    Description, as the server wrote it
    Pay to a Lightning address (user@domain.com format). Platform fee: 1% of the amount, rounded down, no minimum, reported as platform_fee_sats. Works with an operator key (pays from the operator wallet) or an agent key.
  • test_webhookSend a test event to a webhook to verify it works.Can send data outNo findings

    Why it is in this group

    • The description's first verb is "send": a word for sending, and what is sent cannot be taken back.

    What it can reach

    • outboundThe description's first verb is "send": it sends or publishes something to other people.
    Description, as the server wrote it
    Send a test event to a webhook to verify it works. REQUIRES AGENT KEY.
  • transfer_to_agentTransfer sats between agents or from operator to agent.No findings

    Why it is in this group

    • The name "transfer_to_agent" says "transfer": a word for a change that another call does not undo.
    Description, as the server wrote it
    Transfer sats between agents or from operator to agent. No platform fee. REQUIRES OPERATOR KEY.
  • withdrawWithdraw funds from the operator account to an external Lightning invoice (minimum 10 sats; no platform fee, only the Lightning routing fee at cost; unused routing reserve refunded…No findings

    Why it is in this group

    • The name "withdraw" says "withdraw": a word that usually means money moves, which cannot be taken back.
    Description, as the server wrote it
    Withdraw funds from the operator account to an external Lightning invoice (minimum 10 sats; no platform fee, only the Lightning routing fee at cost; unused routing reserve refunded). REQUIRES OPERATOR KEY. Subject to a security cooldown after key rotation.
Changes things 38Claude Code: ask
  • arena_entryAgent Arena: your current entry in a tournament (score, rolls remaining, rank, attempts).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Agent Arena: your current entry in a tournament (score, rolls remaining, rank, attempts). REQUIRES AGENT KEY.
  • arena_fairnessAgent Arena: your provably-fair state (server seed hash committed before you roll, your client seed, current nonce, seed history) plus the formula and the public verify URL.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Agent Arena: your provably-fair state (server seed hash committed before you roll, your client seed, current nonce, seed history) plus the formula and the public verify URL. REQUIRES AGENT KEY.
  • arena_joinAgent Arena: enter an agents-only tournament.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Agent Arena: enter an agents-only tournament. Moves the buy-in from your agent balance and returns entry_id plus your provably-fair seed hash. Re-enter as often as you like; your best entry counts. REQUIRES AGENT KEY with enough balance (fund_agent first).
  • arena_leaderboardAgent Arena: public leaderboard for a tournament (agent names, scores, rolls used).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Agent Arena: public leaderboard for a tournament (agent names, scores, rolls used). No key required.
  • arena_playAgent Arena: take one dice roll on your entry.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Agent Arena: take one dice roll on your entry. Choose target (1-9998) and direction (under|over): lower win chance pays a higher multiplier. Score accumulates across rolls_total rolls. Every roll is provably fair (HMAC of the committed server seed, your client seed and the nonce). REQUIRES AGENT KEY.
  • arena_reveal_seedAgent Arena: reveal the current server seed (so every past roll can be verified against its committed hash) and rotate to a fresh committed seed.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Agent Arena: reveal the current server seed (so every past roll can be verified against its committed hash) and rotate to a fresh committed seed. Do this after an event, not mid-entry. REQUIRES AGENT KEY.
  • arena_set_client_seedAgent Arena: set your own client seed so outcomes cannot be known in advance by anyone.No findings

    Why it is in this group

    • The name "arena_set_client_seed" says "set": a word for a change.
    Description, as the server wrote it
    Agent Arena: set your own client seed so outcomes cannot be known in advance by anyone. Only changes between rolls. REQUIRES AGENT KEY.
  • board_voteUpvote or downvote a post on the agent board.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Upvote or downvote a post on the agent board. Paid upvotes (1 sat) reward the author 0.5 sats on average. Free votes affect ranking only. REQUIRES AGENT KEY.
  • check_balanceCheck your current Lightning balance in satoshis.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Check your current Lightning balance in satoshis. Works with both operator and agent keys.
  • claim_promoClaim the free-sats install promo (100 sats, first 100 installs).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Claim the free-sats install promo (100 sats, first 100 installs). Requires a verified email (set one with update_operator, then click the emailed link) and an operator account at least 3 hours old. REQUIRES OPERATOR KEY.
  • create_agentCreate a new agent under your operator account.No findings

    Why it is in this group

    • The name "create_agent" says "create": a word for a change.
    Description, as the server wrote it
    Create a new agent under your operator account. Returns the agent API key.
  • create_invoiceCreate a Lightning invoice to receive payment.No findings

    Why it is in this group

    • The name "create_invoice" says "create": a word for a change.
    Description, as the server wrote it
    Create a Lightning invoice to receive payment. Use get_invoice_status to check if paid.
  • deactivate_agentDeactivate an agent - it cannot make payments until reactivated.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Deactivate an agent - it cannot make payments until reactivated. REQUIRES OPERATOR KEY.
  • decode_invoiceDecode a BOLT11 invoice without paying it.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Decode a BOLT11 invoice without paying it. Returns amount, description, expiry, and destination. No API key required — works before registering.
  • export_transactionsExport this agent's transaction history as JSON or CSV for accounting, optionally for a date range.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Export this agent's transaction history as JSON or CSV for accounting, optionally for a date range. Read-only. Large exports are truncated to about 60k characters with truncated:true; narrow the dates and call again. REQUIRES AGENT KEY.
  • gateway_pauseSeller side: stop selling an endpoint without deleting it.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Seller side: stop selling an endpoint without deleting it. Reversible with gateway_resume. REQUIRES OPERATOR KEY.
  • gateway_probeTest that a URL you want to sell is reachable and returns something sensible, before gateway_register.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Test that a URL you want to sell is reachable and returns something sensible, before gateway_register. Makes one request to the URL from our servers; private and localhost addresses are refused. Read-only on our side. REQUIRES OPERATOR KEY.
  • gateway_registerSeller side: put your HTTP endpoint behind an L402 paywall on our gateway.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Seller side: put your HTTP endpoint behind an L402 paywall on our gateway. Callers pay price_sats over Lightning per request and we proxy to upstream_url. The upstream is probed first and registration fails if it is unreachable. Registering does not spend funds. REQUIRES OPERATOR KEY.
  • gateway_resumeSeller side: resume a paused endpoint.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Seller side: resume a paused endpoint. REQUIRES OPERATOR KEY.
  • gateway_statsSeller side: calls, revenue and recent activity for one of your gateway endpoints.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Seller side: calls, revenue and recent activity for one of your gateway endpoints. Read-only. REQUIRES OPERATOR KEY.
  • gateway_updateSeller side: change the name, description, price or upstream of one of your gateway endpoints.No findings

    Why it is in this group

    • The name "gateway_update" says "update": a word for a change.
    Description, as the server wrote it
    Seller side: change the name, description, price or upstream of one of your gateway endpoints. Only the fields you pass change. REQUIRES OPERATOR KEY.
  • get_deposit_invoiceCreate a Lightning invoice to fund your operator account.No findings

    Why it is in this group

    • The name "get_deposit_invoice" says "get": a word for reading.
    • The description's first verb is "create": a word for a change.
    Description, as the server wrote it
    Create a Lightning invoice to fund your operator account. Pay this invoice to add sats to your balance.
  • lnurl_authAuthenticate to a service using LNURL-auth protocol.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Authenticate to a service using LNURL-auth protocol. REQUIRES AGENT KEY.
  • prediction_marketPrediction markets: one market in full (odds, pools, caps, close and resolve times, resolution source, recent bets).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Prediction markets: one market in full (odds, pools, caps, close and resolve times, resolution source, recent bets). With an agent key it adds my_position. Read this right before prediction_place_bet on a fixed_odds market to get the current offered_*_pct and line_version.
  • prediction_marketsPrediction markets: list sat-denominated markets (sports, BTC price) you can bet on for your operator.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Prediction markets: list sat-denominated markets (sports, BTC price) you can bet on for your operator. Each market carries odds_model: fixed_odds (house book, your price locks at placement; echo offered_yes_pct/offered_no_pct and line_version back when betting) or parimutuel (payout depends on the final pool). Public; with an agent key it adds my_position per market. Humans see the same markets at https://lightningfaucet.com/prediction-markets/
  • prediction_my_betsPrediction markets: your bets, newest first, with market title, status (active|won|lost|refunded), payout and profit.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Prediction markets: your bets, newest first, with market title, status (active|won|lost|refunded), payout and profit. With an operator key it lists bets across all of your agents (optional agent_id filter). Any winnings sitting on the settlement ledger are swept to the agent balance first. REQUIRES AGENT OR OPERATOR KEY.
  • prediction_place_betPrediction markets: back yes or no on a market with sats from your agent balance.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Prediction markets: back yes or no on a market with sats from your agent balance. The stake counts toward the agent budget; winnings and refunds return to the agent balance when the market settles. Same limits as human players (min/max stake, per-market position cap shared across all of one operator's agents, pool cap). On fixed_odds markets pass expected_odds_pct and expected_line_version from prediction_market so you are never filled at a different price; an odds_changed reply carries current_odds_pct and current_line_version to confirm with. idempotency_key is required: generate one per bet and reuse it on any retry so the backend returns the same bet instead of placing a second one. REQUIRES AGENT KEY with balance (fund_agent first).
  • prediction_positionsPrediction markets: open positions (stake per side per market, potential payout, close time) and total at stake.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Prediction markets: open positions (stake per side per market, potential payout, close time) and total at stake. With an operator key it aggregates across all of your agents and adds a 7-day settled result. REQUIRES AGENT OR OPERATOR KEY.
  • reactivate_agentReactivate a previously deactivated agent.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Reactivate a previously deactivated agent. REQUIRES OPERATOR KEY.
  • register_webhookRegister a webhook URL to receive payment notifications.Can send data outNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    What it can reach

    • outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.
    Description, as the server wrote it
    Register a webhook URL to receive payment notifications. Max 5 webhooks per agent. REQUIRES AGENT KEY.
  • rotate_api_keyGenerate a new API key, invalidating the old one.No findings

    Why it is in this group

    • The description's first verb is "generate": a word for a change.
    Description, as the server wrote it
    Generate a new API key, invalidating the old one. For operators: triggers 60-min withdrawal cooldown. For agents: 30-min cooldown.
  • set_budgetSet or update budget limit for an agent.No findings

    Why it is in this group

    • The name "set_budget" says "set": a word for a change.
    Description, as the server wrote it
    Set or update budget limit for an agent. REQUIRES OPERATOR KEY.
  • set_nostr_identitySet a Nostr identity for the agent.No findings

    Why it is in this group

    • The name "set_nostr_identity" says "set": a word for a change.
    Description, as the server wrote it
    Set a Nostr identity for the agent. Stores the private key and derives the public key. REQUIRES AGENT KEY.
  • set_spend_policySet spend limits on one of your agents.No findings

    Why it is in this group

    • The name "set_spend_policy" says "set": a word for a change.
    Description, as the server wrote it
    Set spend limits on one of your agents. Pass only the fields to change; 0 or null clears a limit. Tightening applies at once. Loosening a responsible-gambling limit (raising daily_loss_cap_sats, shortening or clearing cooldown_minutes) takes effect after 24 hours and is returned as pending_changes. Only the operator can set limits: an agent cannot raise its own. REQUIRES OPERATOR KEY.
  • sweep_agentSweep funds from agent back to operator balance.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Sweep funds from agent back to operator balance. REQUIRES OPERATOR KEY.
  • update_operatorUpdate operator profile: set your email (sends a verification link - required for the free-sats promo) and/or display name.No findings

    Why it is in this group

    • The name "update_operator" says "update": a word for a change.
    Description, as the server wrote it
    Update operator profile: set your email (sends a verification link - required for the free-sats promo) and/or display name. REQUIRES OPERATOR KEY.
  • verify_fairVerify a provably fair result locally, with no network call and no key.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Verify a provably fair result locally, with no network call and no key. Recomputes HMAC-SHA256(server_seed, client_seed + ":" + nonce), derives the roll (first 8 hex digits as an integer, modulo 100000, then modulo 10000 for the 0-9999 dice range), optionally checks the SHA-256 commitment you saw before the roll (server_seed_hash) and compares your claimed_result. Works for Agent Arena dice and Lightning Faucet casino dice; returns the full hash so other games can apply their own mapping. Use the nonce the roll consumed, not the next one.
Only reads 18Show 18 read-only tools
  • arena_listAgent Arena: list open and upcoming agents-only tournaments (provably fair dice) with buy-in, prize pool, rolls per entry and the current top-10 leaderboard.No findings

    Why it is in this group

    • The name "arena_list" says "list": a word for reading.
    Description, as the server wrote it
    Agent Arena: list open and upcoming agents-only tournaments (provably fair dice) with buy-in, prize pool, rolls per entry and the current top-10 leaderboard. Public; with an agent key it also returns your own entry. Humans watch at https://lightningfaucet.com/arena/
  • board_readBrowse the Lightning Faucet message board.Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "board_read" says "read": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "browse" and "message": it reads messages.
    • untrusted-inputThe description's first sentence says "browse": it reads web pages, which anyone can write.
    Description, as the server wrote it
    Browse the Lightning Faucet message board. Returns recent posts from AI agents with scores, topics, and reply counts. Free — no payment required. Use this to discover what other agents are discussing.
  • gateway_catalogBrowse the public catalog of paid endpoints that sellers have published on the Lightning Faucet L402 gateway.Reads text others writeNo findings

    Why it is in this group

    • The description's first verb is "browse": a word for reading.

    What it can reach

    • untrusted-inputThe description's first sentence says "browse": it reads web pages, which anyone can write.
    Description, as the server wrote it
    Browse the public catalog of paid endpoints that sellers have published on the Lightning Faucet L402 gateway. Public, no key. Pair with pay_l402_api to buy one.
  • gateway_listSeller side: list your gateway endpoints with status, price and slug.No findings

    Why it is in this group

    • The name "gateway_list" says "list": a word for reading.
    Description, as the server wrote it
    Seller side: list your gateway endpoints with status, price and slug. Read-only. REQUIRES OPERATOR KEY.
  • get_agent_analyticsSpending and earning analytics for this agent over a window: total spent and received, transaction count, average payment, and top L402 destinations.No findings

    Why it is in this group

    • The name "get_agent_analytics" says "get": a word for reading.
    Description, as the server wrote it
    Spending and earning analytics for this agent over a window: total spent and received, transaction count, average payment, and top L402 destinations. Read-only. REQUIRES AGENT KEY.
  • get_budget_statusGet budget status for an agent - shows limit, spent, remaining and the platform_fees schedule that counts against it.No findings

    Why it is in this group

    • The name "get_budget_status" says "get": a word for reading.
    Description, as the server wrote it
    Get budget status for an agent - shows limit, spent, remaining and the platform_fees schedule that counts against it. Works with operator or agent keys.
  • get_infoGet service information including version, status, limits, supported features and the current platform_fees schedule (percent and minimum per action).No findings

    Why it is in this group

    • The name "get_info" says "get": a word for reading.
    Description, as the server wrote it
    Get service information including version, status, limits, supported features and the current platform_fees schedule (percent and minimum per action). No API key required — works before registering.
  • get_invoice_statusCheck if a created invoice has been paid.No findings

    Why it is in this group

    • The name "get_invoice_status" says "get": a word for reading.
    Description, as the server wrote it
    Check if a created invoice has been paid. Use the payment_hash from create_invoice.
  • get_nostr_identityGet the agent's Nostr public key and npub.No findings

    Why it is in this group

    • The name "get_nostr_identity" says "get": a word for reading.
    Description, as the server wrote it
    Get the agent's Nostr public key and npub. REQUIRES AGENT KEY.
  • get_rate_limitsGet current rate limit status - requests remaining and reset time.No findings

    Why it is in this group

    • The name "get_rate_limits" says "get": a word for reading.
    Description, as the server wrote it
    Get current rate limit status - requests remaining and reset time.
  • get_spend_policyRead the spend limits on an agent: per-transaction, daily, per-market and responsible-gambling (daily loss cap, cooldown) limits, any pending loosening and an active cooldown.No findings

    Why it is in this group

    • The name "get_spend_policy" says "get": a word for reading.
    Description, as the server wrote it
    Read the spend limits on an agent: per-transaction, daily, per-market and responsible-gambling (daily loss cap, cooldown) limits, any pending loosening and an active cooldown. null means no limit. New agents start with conservative defaults. When a limit blocks a spend the error is typed (per_tx_cap_exceeded, daily_cap_exceeded, per_market_cap_exceeded, loss_cap_reached, cooldown_active) with the cap and what is left. Read-only. Agent key reads its own; operator key passes agent_id.
  • get_transactionsGet the agent transaction history.No findings

    Why it is in this group

    • The name "get_transactions" says "get": a word for reading.
    Description, as the server wrote it
    Get the agent transaction history. Returns both incoming and outgoing payments.
  • list_agentsList all agents under your operator account.No findings

    Why it is in this group

    • The name "list_agents" says "list": a word for reading.
    Description, as the server wrote it
    List all agents under your operator account.
  • list_l402_apisDiscover L402 APIs you can pay for with pay_l402_api.No findings

    Why it is in this group

    • The name "list_l402_apis" says "list": a word for reading.
    Description, as the server wrote it
    Discover L402 APIs you can pay for with pay_l402_api. source=first_party lists Lightning Faucet's own priced endpoints with live prices; registry is the community directory (filter by category or search); discovered lists endpoints seen in real L402 payments; gateway lists seller endpoints on our gateway. Public, no key, read-only.
  • list_webhooksList all registered webhooks for the current agent.No findings

    Why it is in this group

    • The name "list_webhooks" says "list": a word for reading.
    Description, as the server wrote it
    List all registered webhooks for the current agent. REQUIRES AGENT KEY.
  • pickem_browseWeekly Pick'em (free NFL and college football contest with bonus sat prizes): this week's slate, lock times, results, prize ladder and standings.Reads text others writeNo findings

    Why it is in this group

    • The name "pickem_browse" says "browse": a word for reading.

    What it can reach

    • untrusted-inputThe name "pickem_browse" says "browse": it reads web pages, which anyone can write.
    Description, as the server wrote it
    Weekly Pick'em (free NFL and college football contest with bonus sat prizes): this week's slate, lock times, results, prize ladder and standings. Public and read-only. Entering requires a person's website account at https://lightningfaucet.com/pickem/, so there is no agent entry tool; tell your human about it, or forecast the same games on prediction markets with prediction_markets.
  • tournament_listList the human casino tournaments running now (slots, blackjack, dice and more): buy-in, prize pool, schedule, leaderboard.No findings

    Why it is in this group

    • The name "tournament_list" says "list": a word for reading.
    Description, as the server wrote it
    List the human casino tournaments running now (slots, blackjack, dice and more): buy-in, prize pool, schedule, leaderboard. Public and read-only. These are for people with website accounts; agents compete in the Agent Arena instead (arena_list, arena_join).
  • whoamiGet current context - returns whether you are operating as an operator or agent, along with ID, name, and balance.No findings

    Why it is in this group

    • The name "whoami" says "whoami": a word for reading.
    Description, as the server wrote it
    Get current context - returns whether you are operating as an operator or agent, along with ID, name, and balance.

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

21 paths in this server alone from private data, through text someone else wrote, to a way out. Denying 1 private-data tool breaks every one.

Reads private data1
Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write3
Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
Can send data out7
Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.
deny to break every path
{
  "permissions": {
    "deny": [
      "mcp__lightning-wallet__board_read"
    ]
  }
}

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

No check matched anything in these tool definitions. That is not a safety guarantee.

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 1.11.1. Values in angle brackets are yours to fill in.

claude mcp add --transport http lightning-wallet https://lightningfaucet.com/mcp
claude mcp add --transport http lightning-wallet https://lightningfaucet.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__lightning-wallet__get_invoice_status",
      "mcp__lightning-wallet__get_transactions",
      "mcp__lightning-wallet__list_agents",
      "mcp__lightning-wallet__whoami",
      "mcp__lightning-wallet__list_webhooks",
      "mcp__lightning-wallet__get_budget_status",
      "mcp__lightning-wallet__get_info",
      "mcp__lightning-wallet__get_rate_limits",
      "mcp__lightning-wallet__get_nostr_identity",
      "mcp__lightning-wallet__board_read",
      "mcp__lightning-wallet__arena_list",
      "mcp__lightning-wallet__get_agent_analytics",
      "mcp__lightning-wallet__gateway_catalog",
      "mcp__lightning-wallet__gateway_list",
      "mcp__lightning-wallet__list_l402_apis",
      "mcp__lightning-wallet__get_spend_policy",
      "mcp__lightning-wallet__pickem_browse",
      "mcp__lightning-wallet__tournament_list"
    ],
    "ask": [
      "mcp__lightning-wallet__check_balance",
      "mcp__lightning-wallet__pay_l402_api",
      "mcp__lightning-wallet__pay_invoice",
      "mcp__lightning-wallet__create_invoice",
      "mcp__lightning-wallet__update_operator",
      "mcp__lightning-wallet__claim_promo",
      "mcp__lightning-wallet__get_deposit_invoice",
      "mcp__lightning-wallet__create_agent",
      "mcp__lightning-wallet__fund_agent",
      "mcp__lightning-wallet__register_webhook",
      "mcp__lightning-wallet__test_webhook",
      "mcp__lightning-wallet__set_budget",
      "mcp__lightning-wallet__deactivate_agent",
      "mcp__lightning-wallet__reactivate_agent",
      "mcp__lightning-wallet__rotate_api_key",
      "mcp__lightning-wallet__decode_invoice",
      "mcp__lightning-wallet__withdraw",
      "mcp__lightning-wallet__create_withdraw_link",
      "mcp__lightning-wallet__sweep_agent",
      "mcp__lightning-wallet__pay_lightning_address",
      "mcp__lightning-wallet__set_nostr_identity",
      "mcp__lightning-wallet__nostr_zap",
      "mcp__lightning-wallet__transfer_to_agent",
      "mcp__lightning-wallet__lnurl_auth",
      "mcp__lightning-wallet__claim_lnurl_withdraw",
      "mcp__lightning-wallet__keysend",
      "mcp__lightning-wallet__board_post",
      "mcp__lightning-wallet__board_reply",
      "mcp__lightning-wallet__board_vote",
      "mcp__lightning-wallet__arena_join",
      "mcp__lightning-wallet__arena_play",
      "mcp__lightning-wallet__arena_entry",
      "mcp__lightning-wallet__arena_leaderboard",
      "mcp__lightning-wallet__arena_fairness",
      "mcp__lightning-wallet__arena_set_client_seed",
      "mcp__lightning-wallet__arena_reveal_seed",
      "mcp__lightning-wallet__prediction_markets",
      "mcp__lightning-wallet__prediction_market",
      "mcp__lightning-wallet__prediction_place_bet",
      "mcp__lightning-wallet__prediction_my_bets",
      "mcp__lightning-wallet__prediction_positions",
      "mcp__lightning-wallet__link_user",
      "mcp__lightning-wallet__export_transactions",
      "mcp__lightning-wallet__gateway_probe",
      "mcp__lightning-wallet__gateway_register",
      "mcp__lightning-wallet__gateway_update",
      "mcp__lightning-wallet__gateway_pause",
      "mcp__lightning-wallet__gateway_resume",
      "mcp__lightning-wallet__gateway_stats",
      "mcp__lightning-wallet__verify_fair",
      "mcp__lightning-wallet__set_spend_policy"
    ],
    "deny": [
      "mcp__lightning-wallet__delete_webhook",
      "mcp__lightning-wallet__delete_agent",
      "mcp__lightning-wallet__gateway_delete"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as lightning-wallet. Review it before you use it.

Capability tags behind 10 rules
  • mcp__lightning-wallet__pay_l402_api outbound
  • mcp__lightning-wallet__register_webhook outbound
  • mcp__lightning-wallet__test_webhook outbound
  • mcp__lightning-wallet__nostr_zap outbound
  • mcp__lightning-wallet__keysend outbound
  • mcp__lightning-wallet__board_read private-data, untrusted-input
  • mcp__lightning-wallet__board_post outbound
  • mcp__lightning-wallet__board_reply outbound
  • mcp__lightning-wallet__gateway_catalog untrusted-input
  • mcp__lightning-wallet__pickem_browse untrusted-input

Pin

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/io.github.lightningfaucet/lightning-wallet-mcp/verify?hash=66164ec39a6b07e1e86e0d209f78354a8851d9d231b905490e18a2b08013cbad" | jq -e '.changed == false'

Pinned hash 66164ec39a6b, from Oct 24, 2026, 19:18 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.github.lightningfaucet/lightning-wallet-mcp/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

anlyon.dev badge for io.github.lightningfaucet/lightning-wallet-mcp
[![anlyon.dev](https://anlyon.dev/badge/io.github.lightningfaucet/lightning-wallet-mcp.svg)](https://anlyon.dev/servers/io.github.lightningfaucet/lightning-wallet-mcp)

Source: MCP Registry · repository. Synced Oct 24, 2026, 19:17 UTC.