io.github.lonniev/dpyc-oracle

io.github.lonniev/dpyc-oraclelonnievstreamable-httpv0.4.0Scanned 23 hours ago

DPYC Social Contract community concierge — free MCP for membership, governance, and onboarding

30 tools: 1 can delete or cancel things, 1 do something that can't be undone, 14 change things and 14 only read.

Reads private data · 1
Reads text others write · 0
Can send data out · 1
1 finding

Tools listed without sign-in. Remote posture

Anlyon alternative

16 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

30 tools

Deletes or cancels 1Removes, cancels or revokes something.Claude Code: deny

deregister_operatorRemove an Operator from the DPYC community registry.No findings
Why it is in this group
- The description's first verb is "remove": a word for removing or ending something.
Description, as the server wrote it
Remove an Operator from the DPYC community registry. Called by an Authority when the operator leaves it or the Authority disowns the operator; the request must be signed with the Authority's key. An Operator cannot exist without a sponsoring Authority, so deregistration removes the member file entirely, returning the Operator to initial state.

Can't be undone 1Sends, pays, publishes or merges: once done, it cannot be taken back.Claude Code: ask

publish_campaignPublish a pricing campaign to the DPYC community.Can send data outNo findings
Why it is in this group
- The name "publish_campaign" says "publish": a word for a change that another call does not undo.
What it can reach
- outboundThe name "publish_campaign" says "publish": it sends or publishes something to other people.
Description, as the server wrote it
Publish a pricing campaign to the DPYC community. Commits both a machine-importable JSON file and a human-readable Markdown summary to the dpyc-community campaigns directory. The request must be signed with ``author_npub``'s key (NIP-98), so a campaign is published only under its author's own name.

Changes things 14Creates or changes something that can be changed back.Claude Code: ask

aboutExtended narration about DPYC, the Social Contract, and the Oracle.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Extended narration about DPYC, the Social Contract, and the Oracle. Fetches README.md and GOVERNANCE.md from the dpyc-community repo and assembles a comprehensive context answer.
cast_ban_voteCast a Lightning-funded vote in an active ban election.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Cast a Lightning-funded vote in an active ban election. Not yet implemented — will verify npub membership, validate the election is active, and record the vote with a Lightning payment proof.
confirm_citizenshipComplete the citizen registration by submitting a signed Nostr event.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Complete the citizen registration by submitting a signed Nostr event. This is part of the **citizen** registration flow (Operator-owned). The Operator calls this on behalf of a patron after the patron has signed the cryptographic challenge from request_citizenship. Verifies: 1. The challenge exists and hasn't expired 2. The Schnorr signature is valid 3. The event's pubkey matches the claimed npub 4. The event content contains the issued nonce 5. The npub is not already registered On success, commits directly to dpyc-community/members/citizens/{npub}.json to register the new Citizen immediately.
how_to_add_authorityEnd-to-end guide for spinning up a new Tollbooth Authority.1 finding
Why it is in this group
- The name "how_to_add_authority" says "add": a word for a change.
Findings
- Info
  The description mentions "credential".
  Matched text
  description: "...n + BTCPay + Horizon deployment, BTCPay credential delivery via Secure Courier, the self-r..."
  What this check looks for
Description, as the server wrote it
End-to-end guide for spinning up a new Tollbooth Authority. Returns the eight-step procedure covering identity, region selection, GitHub workspace, dpyc-community registry entry, Neon + BTCPay + Horizon deployment, BTCPay credential delivery via Secure Courier, the self-registration challenge-response with the parent Authority, and pre-funding the cert-fee balance. Fetched live from docs/how-to-add-authority.md in the dpyc-community repo.
how_to_joinTier-specific onboarding guide for joining the DPYC Social Contract.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Tier-specific onboarding guide for joining the DPYC Social Contract. Covers all five tiers: Citizen, Advocate, Operator, Authority, and First Curator. Includes Nostr keygen instructions and practical next steps.
initiate_ban_electionInitiate a community ban election against a member.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Initiate a community ban election against a member. Not yet implemented — will create a GitHub Issue with a 72-hour discussion period and Lightning-funded economic voting.
register_advocateRegister a new Advocate in the DPYC community registry.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Register a new Advocate in the DPYC community registry. Advocates are community utility services that provide shared infrastructure (e.g., OAuth2 callback collectors) but aren't monetized Operators or certification Authorities. The request must be signed with ``npub``'s own key (NIP-98): a service registers itself, and no one can register an npub they do not hold.
register_authorityRegister a new Authority in the DPYC community registry.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Register a new Authority in the DPYC community registry. Called by an Authority service at the end of the onboarding protocol (after the candidate proves npub ownership and the Prime Authority approves). Commits a new ``members/authorities/{npub}.json`` file to dpyc-community on GitHub. The full Authority onboarding protocol is a 3-step Nostr DM challenge-response flow: 1. ``register_authority_npub(npub)`` — Authority sends DM challenge 2. ``confirm_authority_claim(npub)`` — verifies candidate DM, escalates to Prime 3. ``check_authority_approval(npub)`` — Prime approves, this tool is called
register_operatorRegister a new Operator in the DPYC community registry.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Register a new Operator in the DPYC community registry. Called by an Authority service when its owner approves an operator's adoption request; the request must be signed with the Authority's key.
renounce_membershipCitizen self-removal from the DPYC Social Contract via automated PR.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Citizen self-removal from the DPYC Social Contract via automated PR. Not yet implemented — will create a GitHub PR to remove the member from the registry.
report_relay_failureReport that a relay in the DPYC set was unreachable, and re-rank it.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Report that a relay in the DPYC set was unreachable, and re-rank it. A report does not set a relay's rank. It asks the Oracle to measure that relay *now*, and the Oracle's own probe decides. A false or mistaken report therefore costs one probe and changes nothing — no caller can demote a healthy relay by asserting that it is down. Report only failures. Successes are far too frequent to be worth carrying, and a relay that works needs no announcement.
request_citizenshipBegin the citizen registration process (Operator-owned flow).No findings
Why it is in this group
- The name "request_citizenship" says "request": a word for a change.
Description, as the server wrote it
Begin the citizen registration process (Operator-owned flow). This is the **citizen** registration path. Called by the Operator on behalf of a patron — invokes the Oracle directly. No Authority npub is required or consulted. The patron's npub is registered as a Citizen in the DPYC community. The npub provided here becomes the user's **patron identity** — the keypair they will use for credit purchases and service access across all Tollbooth-monetized services. Not to be confused with **operator** registration, which goes through the Authority via a Nostr DM delegation request. Issues a cryptographic challenge that the applicant must sign with their Nostr private key (nsec) to prove they own the claimed npub. The nsec never leaves the applicant's device. Returns a challenge_id, nonce, and signing instructions. The applicant signs a Nostr event containing the nonce and submits it via confirm_citizenship within 10 minutes.
update_operatorUpdate an existing Operator's registry entry.No findings
Why it is in this group
- The name "update_operator" says "update": a word for a change.
Description, as the server wrote it
Update an existing Operator's registry entry. Used when an Operator moves to a new MCP endpoint, changes its display name, or needs to correct a registration. Called by an Authority when its owner approves the operator's update request; the request must be signed with that Authority's key.
who_is_first_curatorIdentify the First Curator (Prime Authority) of the Certification Chain.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Identify the First Curator (Prime Authority) of the Certification Chain. Returns the curator's npub, display name, and member record.

Only reads 14Looks things up and changes nothing.Show 14 read-only tools

check_ban_statusCheck whether an npub is banned from the DPYC Social Contract.No findings
Why it is in this group
- The name "check_ban_status" says "status": a word for reading.
Description, as the server wrote it
Check whether an npub is banned from the DPYC Social Contract. Looks up the member in the community registry and checks whether their status is "banned". Unknown npubs are not considered banned (they simply aren't members). Free, unauthenticated. Used by operators during the cold path (credit purchases) to enforce community bans.
economic_modelExplain the DPYC Social Contract economic model — qualitatively.No findings
Why it is in this group
- The description's first verb is "explain": a word for reading.
Description, as the server wrote it
Explain the DPYC Social Contract economic model — qualitatively. Describes how value flows through the network: ad valorem certification fees, the cascade up the Certification Chain to the First Curator, and where the live numbers actually live. The Oracle quotes **no** rates, counts, or revenue figures — those belong to the Authorities' pricing models and the live registry, not to a docent. Free, unauthenticated.
get_campaignRetrieve a published pricing campaign.No findings
Why it is in this group
- The name "get_campaign" says "get": a word for reading.
Description, as the server wrote it
Retrieve a published pricing campaign.
get_relaysReturn the DPYC Nostr relay set, best first.No findings
Why it is in this group
- The name "get_relays" says "get": a word for reading.
Description, as the server wrote it
Return the DPYC Nostr relay set, best first. The single source of truth is ``dpyc-community/relays.json``. An Operator seeds its relay set from here at cold start (its only fixed dependency is this Oracle endpoint), then reads its own bootstrap config from Nostr using just its nsec — no direct GitHub access. That file is a curated *guess*: it says which relays are worth using, not which are up this minute. Relays that an operator reported and the Oracle then proved unreachable are moved to the back of the list; everything else keeps its declared order, and nothing is ever dropped. This call never probes anything — it is on every operator's cold-start path, so it stays a lookup. Ranking improves only when someone hits a dead relay and says so via ``report_relay_failure``. Report failures only; successes need no announcement. Free.
get_rulebookFetch the DPYC Social Contract governance document.Reads private dataNo findings
Why it is in this group
- The name "get_rulebook" says "get": a word for reading.
What it can reach
- private-dataThe description's first sentence says "fetch" and "document": it reads documents.
Description, as the server wrote it
Fetch the DPYC Social Contract governance document. Returns the raw markdown of GOVERNANCE.md from the dpyc-community repo.
get_tax_rateExplain how Tollbooth certification taxation works.No findings
Why it is in this group
- The name "get_tax_rate" says "get": a word for reading.
Description, as the server wrote it
Explain how Tollbooth certification taxation works. Taxation is ad valorem and **per-Authority** — there is no single network-wide number, and the Oracle deliberately quotes none. The actual fee is the Authority's own accounting, set in its pricing model and reported at transaction time. This tool is a docent: it explains the model and points to the live source. For the exact figure, query the relevant Authority's ``check_price`` for ``certify_credits``.
list_campaignsList published pricing campaigns from the DPYC community.No findings
Why it is in this group
- The name "list_campaigns" says "list": a word for reading.
Description, as the server wrote it
List published pricing campaigns from the DPYC community. Optionally filter by operator or author npub.
list_servicesEnumerate the live DPYC service network with self-described summaries.No findings
Why it is in this group
- The name "list_services" says "list": a word for reading.
Description, as the server wrote it
Enumerate the live DPYC service network with self-described summaries. Reads the member roster from the dpyc-community registry, then (when ``probe=True``) performs a lightweight MCP handshake against each member's public service endpoint to fetch that service's *own* self-description and tool inventory. Nothing about the services is hardcoded here — descriptions are authored by each service, and prices come from each Operator/Authority pricing model (call the service's ``check_price``). Resilient by design: per-service timeout, partial results, brief caching, and a registry-only fallback when an endpoint is asleep or unreachable. A sleeping service never breaks the listing. Free, unauthenticated.
lookup_memberLook up a member by their Nostr npub.No findings
Why it is in this group
- The name "lookup_member" says "lookup": a word for reading.
Description, as the server wrote it
Look up a member by their Nostr npub. Can look up any role's npub — citizen, operator, or authority. Returns the full member record if found, or a not-found message.
network_advisoryGet current network deployment advisory.No findings
Why it is in this group
- The description's first verb is "get": a word for reading.
Description, as the server wrote it
Get current network deployment advisory. Returns human-readable guidance on what changed recently, urgent upgrades, and actions operators should take. Fetched live from ADVISORY.md in the dpyc-community repo.
network_versionsGet current recommended versions of all Tollbooth components.No findings
Why it is in this group
- The description's first verb is "get": a word for reading.
Description, as the server wrote it
Get current recommended versions of all Tollbooth components. Returns component versions, minimum compatibility, active protocols, and a short advisory summary. Data is fetched live from network-status.json in the dpyc-community repo.
resolve_authority_forResolve the certifying Authority for an operator npub.No findings
Why it is in this group
- The name "resolve_authority_for" says "resolve": a word for reading.
Description, as the server wrote it
Resolve the certifying Authority for an operator npub. Returns the Authority's ``{npub, url, name}`` (from the operator's ``upstream_authority_npub``). Use this after bootstrap to learn — and verify — which Authority signed your config, without reading GitHub.
resolve_serviceResolve a DPYC service by ``name`` or ``npub``.No findings
Why it is in this group
- The name "resolve_service" says "resolve": a word for reading.
Description, as the server wrote it
Resolve a DPYC service by ``name`` or ``npub``. Returns ``{npub, url, name, role, purchase_mode}`` where ``purchase_mode`` is the registry-topology fact ``"certified"`` or ``"direct"`` (not a price). Supply exactly one of ``name`` or ``npub``.
service_statusDiagnostic: report this service's software versions and runtime info.No findings
Why it is in this group
- The name "service_status" says "status": a word for reading.
Description, as the server wrote it
Diagnostic: report this service's software versions and runtime info. Free, unauthenticated. Use to verify deployment versions across the DPYC ecosystem.

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged untrusted-input.

Reads private data1: Reads files, mail, messages, databases, secrets, calendars or repositories.; get_rulebook
Reads text others write0: Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
Can send data out1: Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.; publish_campaign

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Remote posture

What anyone on the internet sees at the remote endpoint: an anonymous initialize and tools/list, and the public OAuth metadata.

Tools listed without sign-in

Looked at Oct 22, 2026, 15:19 UTC, unchanged since Oct 22, 2026. No credentials were sent and no tool was called. What is looked at.

Reachable: yes
HTTP status of an anonymous initialize: 200
tools/list served without credentials: yes
Tools that change things, listed without credentials: 16
Protocol version: 2025-06-18
WWW-Authenticate on 401: not observed
resource_metadata in WWW-Authenticate: not observed
RFC 9728 protected resource metadata: not observed
Authorization servers: not observed
Legacy HTTP+SSE transport: no
Dynamic client registration: not observed
Client ID metadata documents: not observed

HighThe whole server
The endpoint served tools/list without credentials, and the list has 16 tools that change things (1 destructive, 1 irreversible, 14 write). Whether a call also works without credentials was not tested: tools are never called.
Matched text
https://dpyc-oracle.fastmcp.app/mcp: tools/list returned 30 tools to an anonymous client, including deregister_operator (destructive), publish_campaign (irreversible), about (write), how_to_join (write), who_is_first_curator (write) and 11 more
What this check looks for

Findings

Matches of fixed checks, with the text they matched.

1 info

Infohow_to_add_authority
The description mentions "credential".
Matched text
description: "...n + BTCPay + Horizon deployment, BTCPay credential delivery via Secure Courier, the self-r..."
What this check looks for

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 0.4.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http dpyc-oracle https://dpyc-oracle.fastmcp.app/mcp

claude mcp add --transport http dpyc-oracle https://dpyc-oracle.fastmcp.app/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__dpyc-oracle__lookup_member",
      "mcp__dpyc-oracle__get_tax_rate",
      "mcp__dpyc-oracle__economic_model",
      "mcp__dpyc-oracle__get_rulebook",
      "mcp__dpyc-oracle__network_versions",
      "mcp__dpyc-oracle__network_advisory",
      "mcp__dpyc-oracle__service_status",
      "mcp__dpyc-oracle__list_services",
      "mcp__dpyc-oracle__get_relays",
      "mcp__dpyc-oracle__resolve_authority_for",
      "mcp__dpyc-oracle__resolve_service",
      "mcp__dpyc-oracle__check_ban_status",
      "mcp__dpyc-oracle__list_campaigns",
      "mcp__dpyc-oracle__get_campaign"
    ],
    "ask": [
      "mcp__dpyc-oracle__about",
      "mcp__dpyc-oracle__how_to_join",
      "mcp__dpyc-oracle__who_is_first_curator",
      "mcp__dpyc-oracle__how_to_add_authority",
      "mcp__dpyc-oracle__report_relay_failure",
      "mcp__dpyc-oracle__request_citizenship",
      "mcp__dpyc-oracle__confirm_citizenship",
      "mcp__dpyc-oracle__register_authority",
      "mcp__dpyc-oracle__register_operator",
      "mcp__dpyc-oracle__update_operator",
      "mcp__dpyc-oracle__register_advocate",
      "mcp__dpyc-oracle__renounce_membership",
      "mcp__dpyc-oracle__initiate_ban_election",
      "mcp__dpyc-oracle__cast_ban_vote",
      "mcp__dpyc-oracle__publish_campaign"
    ],
    "deny": [
      "mcp__dpyc-oracle__deregister_operator"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as dpyc-oracle. Review it before you use it.

Capability tags behind 2 rules

mcp__dpyc-oracle__get_rulebook private-data
mcp__dpyc-oracle__publish_campaign outbound

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/io.github.lonniev/dpyc-oracle/verify?hash=03326e41404cb0934ac938da24f3021b5d8c947e17e2509584a050da958a45ba" | jq -e '.changed == false'

Pinned hash 03326e41404c, from Oct 21, 2026, 19:32 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.github.lonniev/dpyc-oracle/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

[![anlyon.dev](https://anlyon.dev/badge/io.github.lonniev/dpyc-oracle.svg)](https://anlyon.dev/servers/io.github.lonniev/dpyc-oracle)

Source: MCP Registry · repository. Synced Oct 21, 2026, 18:38 UTC.