@aibtc/mcp-server 1.70.0 → 1.70.1

package/README.md

@@ -10,7 +10,7 @@ Bitcoin-native MCP server for AI agents: BTC/STX wallets, DeFi yield, sBTC peg,
 - **Bitcoin L1** - Check balances, send BTC, manage UTXOs via mempool.space
 - **Agent's Own Wallet** - Agents get their own wallet to perform blockchain transactions
 - **Secure Storage** - Wallets encrypted with AES-256-GCM and stored locally
-- **150+ Tools** - Bitcoin L1 + comprehensive Stacks L2 operations
+- **350+ Tools** - Bitcoin L1 + comprehensive Stacks L2 operations
 - **sBTC Support** - Native Bitcoin on Stacks operations
 - **Token Operations** - SIP-010 fungible token transfers and queries
 - **NFT Support** - SIP-009 NFT holdings, transfers, and metadata
@@ -276,7 +276,7 @@ Claude: Done! Transaction broadcast: abc123...
 
 Both addresses are derived from the same recovery phrase, making it easy to manage both Layer 1 (Bitcoin) and Layer 2 (Stacks) assets.
 
-## Available Tools (150+ total)
+## Available Tools (350+ total)
 
 ### Wallet Management
 | Tool | Description |
@@ -542,7 +542,7 @@ Or use any SIP-010 token by contract ID: `SP2X...::token-name`
 
 | Environment Variable | Description | Default |
 |---------------------|-------------|---------|
-| `NETWORK` | `mainnet` or `testnet` | `mainnet` (installer) / `testnet` (if unset) |
+| `NETWORK` | `mainnet` or `testnet` | `mainnet` |
 | `API_URL` | Default x402 API base URL | `https://x402.biwas.xyz` |
 | `CLIENT_MNEMONIC` | (Optional) Pre-configured mnemonic | - |
 | `HIRO_API_KEY` | (Optional) Hiro API key for higher rate limits | - |
@@ -550,7 +550,7 @@ Or use any SIP-010 token by contract ID: `SP2X...::token-name`
 | `SPEND_LIMIT_DAILY_USTX` / `SPEND_LIMIT_SESSION_USTX` | STX spend cap per day / per unlock (micro-STX) | `10000000` (10 STX) |
 | `SPEND_LIMIT_DAILY_SATS` / `SPEND_LIMIT_SESSION_SATS` | BTC spend cap per day / per unlock (sats) | `50000` |
 
-**Note on `NETWORK`:** The `--install` command writes `NETWORK=mainnet` by default (pass `--testnet` to use testnet). If you omit `NETWORK` from your config entirely, the runtime fallback is `testnet`. Most users should set this explicitly.
+**Note on `NETWORK`:** The `--install` command writes `NETWORK=mainnet` by default (pass `--testnet` to use testnet). If you omit `NETWORK` from your config entirely, the runtime fallback is also `mainnet`.
 
 **Note on spending limits:** A default-on safety rail meters every outbound spend (`transfer_stx`, `transfer_btc`, x402/L402 auto-payments) against a cumulative per-session and per-day cap, so a single bad instruction or a malicious endpoint can't drain the wallet. A spend over the cap is blocked and reports the remaining budget. Raise the caps via the env vars above, or disable with `SPEND_LIMIT_ENABLED=false`. See [SECURITY.md](SECURITY.md#limit-blast-radius).
 
@@ -627,11 +627,13 @@ The skill is automatically included when you install the MCP server. Find it at:
 skill/
 ├── SKILL.md                        # Bitcoin L1 core workflows
 └── references/
+    ├── at-stake.md                 # El Salvador prediction market & side legions
     ├── genesis-lifecycle.md        # Agent registration & check-in
     ├── inscription-workflow.md     # Bitcoin inscription guide
     ├── pillar-wallet.md            # Pillar smart wallet guide
     ├── stacks-defi.md              # Stacks L2 / DeFi operations
-    └── troubleshooting.md          # Common issues and solutions
+    ├── troubleshooting.md          # Common issues and solutions
+    └── x402-inbox.md               # x402 inbox messaging
 ```
 
 ## Development

package/dist/config/contracts.d.ts

@@ -12,7 +12,7 @@ export declare const MAINNET_CONTRACTS: {
     readonly POX_4: "SP000000000000000000002Q6VF78.pox-4";
     readonly ALEX_AMM_POOL: "SP3K8BC0PPEVCV7NZ6QSRWPQ2JE9E5B6N3PA0KBR9.amm-swap-pool-v1-1";
     readonly ALEX_TOKEN: "SP102V8P0F7JX67ARQ77WEA3D3CFB5XW39REDT0AM.token-alex";
-    readonly ALEX_WSTX: "SP3K8BC0PPEVCV7NZ6QSRWPQ2JE9E5B6N3PA0KBR9.token-wstx-v2";
+    readonly ALEX_WSTX: "SP102V8P0F7JX67ARQ77WEA3D3CFB5XW39REDT0AM.token-wstx-v2";
     readonly ZEST_MARKET: "SP1A27KFY4XERQCCRCARCYD1CC5N7M6688BSYADJ7.v0-4-market";
     readonly ZEST_DATA: "SP1A27KFY4XERQCCRCARCYD1CC5N7M6688BSYADJ7.protocol-data";
     readonly ZEST_MARKET_VAULT: "SP1A27KFY4XERQCCRCARCYD1CC5N7M6688BSYADJ7.v0-market-vault";
@@ -75,7 +75,7 @@ export declare function getContracts(network: Network): {
     readonly POX_4: "SP000000000000000000002Q6VF78.pox-4";
     readonly ALEX_AMM_POOL: "SP3K8BC0PPEVCV7NZ6QSRWPQ2JE9E5B6N3PA0KBR9.amm-swap-pool-v1-1";
     readonly ALEX_TOKEN: "SP102V8P0F7JX67ARQ77WEA3D3CFB5XW39REDT0AM.token-alex";
-    readonly ALEX_WSTX: "SP3K8BC0PPEVCV7NZ6QSRWPQ2JE9E5B6N3PA0KBR9.token-wstx-v2";
+    readonly ALEX_WSTX: "SP102V8P0F7JX67ARQ77WEA3D3CFB5XW39REDT0AM.token-wstx-v2";
     readonly ZEST_MARKET: "SP1A27KFY4XERQCCRCARCYD1CC5N7M6688BSYADJ7.v0-4-market";
     readonly ZEST_DATA: "SP1A27KFY4XERQCCRCARCYD1CC5N7M6688BSYADJ7.protocol-data";
     readonly ZEST_MARKET_VAULT: "SP1A27KFY4XERQCCRCARCYD1CC5N7M6688BSYADJ7.v0-market-vault";
@@ -118,7 +118,7 @@ export declare const WELL_KNOWN_TOKENS: {
         readonly sBTC: "SM3VDXK3WZZSA84XXFKAFAF15NNZX32CTSG82JFQ4.sbtc-token";
         readonly USDCx: "SP120SBRBQJ00MCWS7TM5R8WJNTTKD5K0HFRC2CNE.usdcx";
         readonly ALEX: "SP102V8P0F7JX67ARQ77WEA3D3CFB5XW39REDT0AM.token-alex";
-        readonly wSTX: "SP3K8BC0PPEVCV7NZ6QSRWPQ2JE9E5B6N3PA0KBR9.token-wstx-v2";
+        readonly wSTX: "SP102V8P0F7JX67ARQ77WEA3D3CFB5XW39REDT0AM.token-wstx-v2";
     };
     readonly testnet: {
         readonly STX: "native";
@@ -146,7 +146,7 @@ export declare function getWellKnownTokens(network: Network): {
     readonly sBTC: "SM3VDXK3WZZSA84XXFKAFAF15NNZX32CTSG82JFQ4.sbtc-token";
     readonly USDCx: "SP120SBRBQJ00MCWS7TM5R8WJNTTKD5K0HFRC2CNE.usdcx";
     readonly ALEX: "SP102V8P0F7JX67ARQ77WEA3D3CFB5XW39REDT0AM.token-alex";
-    readonly wSTX: "SP3K8BC0PPEVCV7NZ6QSRWPQ2JE9E5B6N3PA0KBR9.token-wstx-v2";
+    readonly wSTX: "SP102V8P0F7JX67ARQ77WEA3D3CFB5XW39REDT0AM.token-wstx-v2";
 } | {
     readonly STX: "native";
     readonly sBTC: "ST1F7QA2MDF17S807EPA36TSS8AMEFY4KA9TVGWXT.sbtc-token";

package/dist/config/contracts.js

@@ -16,7 +16,7 @@ export const MAINNET_CONTRACTS = {
     // ALEX DEX (SDK handles most operations, but we need pool contract for queries)
     ALEX_AMM_POOL: "SP3K8BC0PPEVCV7NZ6QSRWPQ2JE9E5B6N3PA0KBR9.amm-swap-pool-v1-1",
     ALEX_TOKEN: "SP102V8P0F7JX67ARQ77WEA3D3CFB5XW39REDT0AM.token-alex",
-    ALEX_WSTX: "SP3K8BC0PPEVCV7NZ6QSRWPQ2JE9E5B6N3PA0KBR9.token-wstx-v2",
+    ALEX_WSTX: "SP102V8P0F7JX67ARQ77WEA3D3CFB5XW39REDT0AM.token-wstx-v2",
     // Zest Protocol v2
     ZEST_MARKET: "SP1A27KFY4XERQCCRCARCYD1CC5N7M6688BSYADJ7.v0-4-market",
     ZEST_DATA: "SP1A27KFY4XERQCCRCARCYD1CC5N7M6688BSYADJ7.protocol-data", // read-only helper for v0-4-market positions

package/dist/tools/defi.tools.js

@@ -12,7 +12,7 @@ export function registerDefiTools(server) {
         description: `Get a swap quote from ALEX DEX.
 
 Returns the expected output amount for swapping tokenX to tokenY.
-Use full contract IDs for tokens (e.g., 'SP3K8BC0PPEVCV7NZ6QSRWPQ2JE9E5B6N3PA0KBR9.token-wstx-v2').
+Use full contract IDs for tokens (e.g., 'SP102V8P0F7JX67ARQ77WEA3D3CFB5XW39REDT0AM.token-wstx-v2').
 
 Note: ALEX DEX is only available on mainnet.`,
         inputSchema: {

package/dist/tools/endpoint.tools.js

@@ -2,7 +2,7 @@ import { z } from "zod";
 import { createApiClient, API_URL, probeEndpoint, formatPaymentAmount, checkSufficientBalance, generateDedupKey, checkDedupCache, recordTransaction, X402_DEDUP_TTL_MS, NETWORK } from "../services/x402.service.js";
 import { ALL_ENDPOINTS, searchEndpoints, formatEndpointsTable, getEndpointsBySource, getCategories, } from "../endpoints/registry.js";
 import { createJsonResponse, createErrorResponse } from "../utils/index.js";
-import { X402_HEADERS } from "../utils/x402-protocol.js";
+import { X402_HEADERS, decodePaymentResponse } from "../utils/x402-protocol.js";
 import { extractPaymentIdFromPaymentSignature, extractTxidFromPaymentSignature, pollTransactionConfirmation, } from "../utils/x402-recovery.js";
 import { formatCanonicalPaymentStatus } from "../utils/x402-payment-state.js";
 import { emitPaymentLog } from "../utils/x402-payment-logging.js";
@@ -317,8 +317,13 @@ For aibtc.com inbox messages, use send_inbox_message_direct instead — it signs
                 },
             });
             const response = await api.request({ method, url: parsed.requestPath, params, data });
+            const paymentResponseTxid = decodePaymentResponse(response.headers?.[X402_HEADERS.PAYMENT_RESPONSE])?.transaction ||
+                undefined;
+            const paymentBodyTxid = response.data?.payment?.txid;
             const rawTxid = response.data?.txid ||
                 response.data?.payment_txid ||
+                paymentResponseTxid ||
+                (typeof paymentBodyTxid === "string" ? paymentBodyTxid : undefined) ||
                 response.headers?.['x-transaction-id'] ||
                 undefined;
             // Detect whether a payment was made by checking for the payment-signature

package/dist/tools/index.js

@@ -32,6 +32,8 @@ import { registerTeneroTools } from "./tenero.tools.js";
 import { registerOrdinalsP2PTools } from "./ordinals-p2p.tools.js";
 import { registerOrdinalsMarketplaceTools } from "./ordinals-marketplace.tools.js";
 import { registerTaprootMultisigTools } from "./taproot-multisig.tools.js";
+import { registerPsbtTools } from "./psbt.tools.js";
+import { registerSettingsTools } from "./settings.tools.js";
 import { registerJingswapTools } from "./jingswap.tools.js";
 import { registerSigningTools } from "./signing.tools.js";
 import { registerInferenceMarketplaceTools } from "./inference-marketplace.tools.js";
@@ -161,13 +163,17 @@ export function registerAllTools(server) {
     registerOrdinalsMarketplaceTools(server);
     // Taproot Multisig (M-of-N coordination via OP_CHECKSIGADD, BIP-341/342)
     registerTaprootMultisigTools(server);
+    // PSBT sign/broadcast/decode (used by the ordinals marketplace, P2P and taproot multisig flows)
+    registerPsbtTools(server);
+    // Settings (Hiro API key, custom Stacks API URL, server version)
+    registerSettingsTools(server);
     // Jingswap Auction (blind batch auctions for STX/sBTC)
     registerJingswapTools(server);
     // Message Signing (BTC BIP-322, Stacks SIWS, SIP-018 structured data, Nostr NIP-01)
     registerSigningTools(server);
     // AIBTC Inference Marketplace (list/manage a paid model endpoint via wallet signature)
     registerInferenceMarketplaceTools(server);
-    // AIBTC News (signal feed, leaderboard, file signals)
+    // AIBTC News (deprecated — API retired; each tool redirects to legion_*)
     registerNewsTools(server);
     // AIBTC News Legion (mainnet aibtc-news-gov — inscribe, propose, vote, conclude)
     registerLegionTools(server);

package/dist/tools/news.tools.d.ts

@@ -1,36 +1,10 @@
 /**
- * AIBTC News Tools
+ * AIBTC News tools — deprecated.
  *
- * Tools for interacting with the aibtc.news decentralized intelligence network.
- * Agents can read signal feeds, check correspondent standings, and file signals
- * authenticated via BIP-322 signatures (bc1q P2WPKH addresses only).
- *
- * Correspondent tools (read-only, no auth required):
- * - news_list_signals  — Browse the signal feed with optional filters
- * - news_front_page    — Get the latest compiled intelligence brief
- * - news_leaderboard   — Ranked correspondents with signal counts and streaks
- * - news_check_status  — Signal counts, streak, and earnings for a BTC address
- * - news_list_beats    — List all registered beats
- * - news_list_editors  — List editors registered on a beat
- *
- * Authenticated tools (require unlocked wallet with bc1q/tb1q address):
- * - news_file_signal                — File a signal on a beat (BIP-322 signed)
- * - news_claim_beat                 — Create or join a beat (BIP-322 signed)
- * - news_editor_review_signal       — Approve or reject a signal (editor or publisher)
- * - news_editor_file_review         — Submit structured editorial review for a signal
- * - news_editor_check_earnings      — Check editor earnings for an address
- * - news_register_editor            — Register an editor on a beat (publisher only)
- * - news_deactivate_editor          — Deactivate an editor on a beat (publisher only)
- * - news_file_correction            — File a correction on a signal
- * - news_publisher_compile_brief    — Compile the daily intelligence brief (publisher only)
- * - news_publisher_set_beat_config  — Update beat details and config (publisher only)
- * - news_record_editor_payout       — Record payout txid for an editor earning (publisher only)
- *
- * Authentication: BIP-322 simple signature (P2WPKH, bc1q mainnet / tb1q testnet).
- * Message format: "METHOD /path:unix_timestamp"
- * Headers: X-BTC-Address, X-BTC-Signature, X-BTC-Timestamp
- *
- * Reference: https://aibtc.news/api (GET /api for full spec)
+ * aibtc.news migrated from an off-chain newsroom API to on-chain governance, and
+ * every endpoint these tools called now answers 410 Gone. The tool names stay
+ * registered so an agent that still calls one is told where the workflow moved
+ * (the legion_* tools) instead of getting "unknown tool".
  */
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 export declare function registerNewsTools(server: McpServer): void;