@aibtc/mcp-server 1.66.0 → 1.67.0

package/dist/tools/legion.tools.js

@@ -1023,7 +1023,9 @@ export function registerLegionTools(server) {
             "Content type is text/markdown; the title is prepended as an H1 unless the body already " +
             "starts with one.\n\n" +
             `SPENDS REAL BITCOIN, on the Bitcoin network NETWORK names (currently ${NETWORK}) — ` +
-            `not the Stacks ${LEGION_NETWORK} the rest of the legion_* tools use.\n\n` +
+            `not the Stacks ${LEGION_NETWORK} the rest of the legion_* tools use. A mainnet ` +
+            "inscription therefore needs `confirmMainnetSpend: true`; without it the tool prices " +
+            "the piece and refuses, so real BTC is never spent by accident.\n\n" +
             "Optional `parentInscriptionId` files the piece as a child of a parent you own, binding " +
             "your pieces to one inscribed identity. That is authorship, not originality.\n\n" +
             "Pre-flights content size, fee estimate, parent ownership, funding and network before " +
@@ -1050,6 +1052,11 @@ export function registerLegionTools(server) {
                 .optional()
                 .describe("Run every pre-flight check and price the inscription, but sign nothing. " +
                 "Use this to see the cost before spending it."),
+            confirmMainnetSpend: z
+                .boolean()
+                .optional()
+                .describe("Acknowledge that this spends real BTC. Required on mainnet — without it the " +
+                "tool returns the exact cost and refuses."),
             allowNonMainnet: z
                 .boolean()
                 .optional()
@@ -1060,7 +1067,7 @@ export function registerLegionTools(server) {
                 .optional()
                 .describe("Fee rate: 'fast', 'medium', 'slow', or a number in sat/vB (default: medium)"),
         },
-    }, async ({ title, body, parentInscriptionId, dryRun, allowNonMainnet, feeRate }) => {
+    }, async ({ title, body, parentInscriptionId, dryRun, confirmMainnetSpend, allowNonMainnet, feeRate }) => {
         try {
             // A testnet inscription is almost always a misconfiguration here: the
             // legion's governance is testnet but its links are read on mainnet
@@ -1184,6 +1191,19 @@ export function registerLegionTools(server) {
                     nextStep: "Nothing was signed. Re-call without dryRun to broadcast the commit.",
                 });
             }
+            // The legion itself is testnet, so an agent working through it has no
+            // reason to expect real money to move. Inscription is the one step that
+            // does, and it cannot be moved off mainnet (ordinals.com indexes mainnet
+            // only), so the cost is quoted and consent taken instead.
+            if (NETWORK === "mainnet" && !confirmMainnetSpend) {
+                const total = commitResult.fee + commitResult.revealAmount;
+                return createErrorResponse(new Error(`This would spend ${total} sats of REAL BITCOIN on mainnet — ` +
+                    `${commitResult.fee} commit fee plus ${commitResult.revealAmount} locked for ` +
+                    `the reveal. The legion's governance is Stacks ${LEGION_NETWORK}, but the ` +
+                    `inscription is mainnet Bitcoin because ordinals.com indexes mainnet only. ` +
+                    `Nothing was signed. Re-call with confirmMainnetSpend: true to proceed, or ` +
+                    `dryRun: true for the full breakdown.`));
+            }
             const commitSigned = signBtcTransaction(commitResult.tx, account.btcPrivateKey);
             const commitTxid = await mempoolApi.broadcastTransaction(commitSigned.txHex);
             return createJsonResponse({
@@ -1225,6 +1245,8 @@ export function registerLegionTools(server) {
             "derived from all three. The commit's actual output is checked against the script this " +
             "content derives, so a mismatch is refused before signing rather than losing the sats.\n\n" +
             "Returns the inscription id and link for legion_propose_story.\n\n" +
+            "No mainnet confirmation is asked for here, unlike the commit: those sats are already " +
+            "committed, and refusing the reveal would strand them rather than save them.\n\n" +
             "Requires an unlocked managed wallet.",
         inputSchema: {
             commitTxid: z

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aibtc/mcp-server",
-  "version": "1.66.0",
+  "version": "1.67.0",
   "description": "Bitcoin-native MCP server for AI agents: BTC/STX wallets, DeFi yield, sBTC peg, NFTs, and x402 payments.",
   "mcpName": "io.github.aibtcdev/mcp-server",
   "type": "module",

package/skill/SKILL.md

@@ -4,7 +4,7 @@ description: Bitcoin L1 wallet for agents - check balances, send BTC, manage UTX
 license: MIT
 metadata:
   author: aibtcdev
-  version: 1.66.0 # x-release-please-version
+  version: 1.67.0 # x-release-please-version
   npm: "@aibtc/mcp-server"
   github: https://github.com/aibtcdev/aibtc-mcp-server
 ---