@aibtc/mcp-server 1.70.1 → 1.72.0

package/dist/services/x402-discovery.service.js

@@ -0,0 +1,170 @@
+/**
+ * Live x402 endpoint discovery.
+ *
+ * x402.aibtc.com and stx402.com publish an OpenAPI spec, and stx402.com runs a
+ * directory of x402 endpoints registered by third parties. Reading those at call
+ * time keeps `list_x402_endpoints` in step with what the hosts actually serve,
+ * instead of a hand-maintained list that goes stale when routes move.
+ *
+ * Results are cached briefly. A failed fetch is never cached and never replaced
+ * with stale or invented entries: the source is reported as unavailable.
+ */
+import { NETWORK } from "../config/networks.js";
+export const OPENAPI_SOURCES = [
+    {
+        source: "x402.aibtc.com",
+        baseUrl: { mainnet: "https://x402.aibtc.com", testnet: "https://x402.aibtc.dev" },
+    },
+    {
+        source: "stx402.com",
+        baseUrl: { mainnet: "https://stx402.com" },
+    },
+];
+const DIRECTORY_URL = "https://stx402.com/registry/list";
+const DIRECTORY_PAGE_SIZE = 50;
+/** Hard stop so a misbehaving `total` cannot turn one call into hundreds of requests. */
+const DIRECTORY_MAX_PAGES = 20;
+export const DISCOVERY_CACHE_TTL_MS = 10 * 60 * 1000;
+const FETCH_TIMEOUT_MS = 10_000;
+const cache = new Map();
+async function cached(key, load) {
+    const hit = cache.get(key);
+    if (hit && Date.now() - hit.at < DISCOVERY_CACHE_TTL_MS) {
+        return hit.value;
+    }
+    const value = await load();
+    cache.set(key, { at: Date.now(), value });
+    return value;
+}
+/** Test seam. */
+export function clearDiscoveryCache() {
+    cache.clear();
+}
+async function fetchJson(url) {
+    const response = await fetch(url, {
+        headers: { Accept: "application/json" },
+        signal: AbortSignal.timeout(FETCH_TIMEOUT_MS),
+    });
+    if (!response.ok) {
+        throw new Error(`GET ${url} returned HTTP ${response.status}`);
+    }
+    return response.json();
+}
+const METHODS = ["get", "post", "put", "delete"];
+/**
+ * Summaries on these hosts lead with the pricing tier, e.g. "(paid, standard) Decode a
+ * transaction" or "(free) List models". Split that into a cost label and a description.
+ * The exact price is only known from the 402 challenge, so it is not guessed here.
+ */
+export function parseSummary(summary) {
+    const match = summary.match(/^\((free|paid)(?:,\s*([^)]+))?\)\s*(.*)$/i);
+    if (match) {
+        const [, kind, tier, rest] = match;
+        return {
+            cost: kind.toLowerCase() === "free" ? "FREE" : `paid${tier ? ` (${tier.trim()})` : ""}`,
+            description: rest,
+        };
+    }
+    if (/\(free\)/i.test(summary)) {
+        return { cost: "FREE", description: summary.replace(/\s*\(free\)/i, "") };
+    }
+    return { cost: "see probe_x402_endpoint", description: summary };
+}
+/** Map an OpenAPI spec to endpoint entries. Admin-only operations are left out. */
+export function endpointsFromOpenApi(spec, source) {
+    const endpoints = [];
+    for (const [path, operations] of Object.entries(spec.paths ?? {})) {
+        for (const method of METHODS) {
+            const op = operations[method];
+            if (!op)
+                continue;
+            const tags = op.tags ?? [];
+            if (tags.some((tag) => /admin/i.test(tag)))
+                continue;
+            const { cost, description } = parseSummary(op.summary ?? op.description ?? "");
+            // tokenType selects the payment asset; execute_x402_endpoint handles that itself.
+            const params = Object.fromEntries((op.parameters ?? [])
+                .filter((p) => p.name !== "tokenType")
+                .map((p) => [p.name, p.description ?? p.in]));
+            const schema = op.requestBody?.content?.["application/json"]?.schema;
+            const required = new Set(schema?.required ?? []);
+            const body = Object.fromEntries(Object.entries(schema?.properties ?? {}).map(([name, prop]) => [
+                name,
+                `${prop.description ?? name}${required.has(name) ? "" : " (optional)"}`,
+            ]));
+            endpoints.push({
+                path,
+                method: method.toUpperCase(),
+                description,
+                cost,
+                category: tags[0] ?? "Other",
+                source,
+                ...(Object.keys(params).length > 0 && { params }),
+                ...(Object.keys(body).length > 0 && { body }),
+            });
+        }
+    }
+    return endpoints;
+}
+/** Fetch one host's endpoints from its OpenAPI spec. */
+export function fetchOpenApiEndpoints(source, network = NETWORK) {
+    const baseUrl = source.baseUrl[network];
+    if (!baseUrl) {
+        return Promise.reject(new Error(`${source.source} has no ${network} deployment`));
+    }
+    return cached(`openapi:${baseUrl}`, async () => {
+        const spec = (await fetchJson(`${baseUrl}/openapi.json`));
+        if (!spec.paths) {
+            throw new Error(`${baseUrl}/openapi.json has no paths`);
+        }
+        return endpointsFromOpenApi(spec, source.source);
+    });
+}
+/** Fetch every entry in the stx402.com endpoint directory (mainnet only). */
+export function fetchDirectoryEntries() {
+    return cached("directory", async () => {
+        const entries = [];
+        let total = Infinity;
+        for (let page = 0; page < DIRECTORY_MAX_PAGES && entries.length < total; page++) {
+            const offset = page * DIRECTORY_PAGE_SIZE;
+            const data = (await fetchJson(`${DIRECTORY_URL}?limit=${DIRECTORY_PAGE_SIZE}&offset=${offset}`));
+            if (!Array.isArray(data.entries)) {
+                throw new Error(`${DIRECTORY_URL} response has no entries array`);
+            }
+            total = data.total ?? entries.length + data.entries.length;
+            for (const e of data.entries) {
+                if (!e.url)
+                    continue;
+                entries.push({
+                    name: e.name ?? e.url,
+                    url: e.url,
+                    category: e.category ?? "other",
+                    status: e.status ?? "unknown",
+                    owner: e.owner ?? "",
+                });
+            }
+            if (data.entries.length < DIRECTORY_PAGE_SIZE)
+                break;
+        }
+        return entries;
+    });
+}
+function errorMessage(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+/** Fetch every OpenAPI source in parallel, reporting failures per source. */
+export async function discoverOpenApiEndpoints(sources = OPENAPI_SOURCES, network = NETWORK) {
+    const results = await Promise.allSettled(sources.map((s) => fetchOpenApiEndpoints(s, network)));
+    const endpoints = [];
+    const unavailable = [];
+    results.forEach((result, i) => {
+        if (result.status === "fulfilled") {
+            endpoints.push(...result.value);
+        }
+        else {
+            unavailable.push({ source: sources[i].source, error: errorMessage(result.reason) });
+        }
+    });
+    return { endpoints, unavailable };
+}
+//# sourceMappingURL=x402-discovery.service.js.map

package/dist/tools/arxiv-research.tools.d.ts

@@ -11,6 +11,6 @@
  *
  * Mirrors the arxiv-research skill (aibtcdev/skills/arxiv-research/).
  */
-import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { McpServer } from "@modelcontextprotocol/server";
 export declare function registerArxivResearchTools(server: McpServer): void;
 //# sourceMappingURL=arxiv-research.tools.d.ts.map

package/dist/tools/arxiv-research.tools.js

@@ -189,7 +189,7 @@ Each paper includes title, authors (first 3), truncated abstract, arXiv link,
 relevance score, and topic tags.
 
 Read-only. No API key required.`,
-        inputSchema: {
+        inputSchema: z.object({
             categories: z
                 .string()
                 .optional()
@@ -205,7 +205,7 @@ Read-only. No API key required.`,
                 .min(0)
                 .optional()
                 .describe("Minimum relevance score for results. Default: 3. Set to 0 to include all fetched papers."),
-        },
+        }),
     }, async ({ categories, max_results, min_score }) => {
         try {
             const cats = categories
@@ -260,7 +260,7 @@ disk — use the arxiv-research skill (bun run arxiv-research/arxiv-research.ts
 to write timestamped digest files to ~/.aibtc/arxiv-research/digests/.
 
 Read-only. No API key required.`,
-        inputSchema: {
+        inputSchema: z.object({
             categories: z
                 .string()
                 .optional()
@@ -280,7 +280,7 @@ Read-only. No API key required.`,
                 .min(0)
                 .optional()
                 .describe("Minimum relevance score for digest inclusion. Default: 3"),
-        },
+        }),
     }, async ({ categories, max_results, date, min_score }) => {
         try {
             const cats = categories
@@ -387,14 +387,14 @@ Digests are NOT created by arxiv_compile_digest (which returns Markdown inline).
 Use the skill CLI to persist digests to disk.
 
 Read-only.`,
-        inputSchema: {
+        inputSchema: z.object({
             limit: z
                 .number()
                 .min(1)
                 .max(50)
                 .optional()
                 .describe("Maximum entries to show. Default: 10"),
-        },
+        }),
     }, async ({ limit }) => {
         try {
             const maxEntries = limit ?? 10;

package/dist/tools/at-stake-legion.tools.d.ts

@@ -26,6 +26,6 @@
  * These govern the El Salvador market's two sides. Same word, different
  * contracts, different way of getting a vote.
  */
-import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { McpServer } from "@modelcontextprotocol/server";
 export declare function registerAtStakeLegionTools(server: McpServer): void;
 //# sourceMappingURL=at-stake-legion.tools.d.ts.map

package/dist/tools/at-stake-legion.tools.js

@@ -81,13 +81,13 @@ export function registerAtStakeLegionTools(server) {
             "shares with atstake_mint_complete_set.\n\n" +
             "Read-only. Defaults to the unlocked wallet, which requires one; pass an address " +
             "to read anyone without unlocking.",
-        inputSchema: {
+        inputSchema: z.object({
             side: SIDE_ARG,
             address: z
                 .string()
                 .optional()
                 .describe("Whose eligibility to report. Defaults to the unlocked wallet."),
-        },
+        }),
     }, async ({ side, address }) => {
         try {
             const chosen = resolveSide(side);
@@ -175,7 +175,7 @@ export function registerAtStakeLegionTools(server) {
             "detail and the conclude forecast come from atstake_legion_get_proposal, which " +
             "reads the chain directly.\n\n" +
             "Read-only, no wallet needed.",
-        inputSchema: {
+        inputSchema: z.object({
             side: z
                 .enum(["yes", "no", "bonded", "idle", "both"])
                 .optional()
@@ -186,7 +186,7 @@ export function registerAtStakeLegionTools(server) {
                 .optional()
                 .describe('Only proposals in this phase: "voting", "concludable", "passed", ' +
                 '"failed", "expired", "pending".'),
-        },
+        }),
     }, async ({ side, phase }) => {
         try {
             const response = await fetch(AT_STAKE_API);
@@ -257,10 +257,10 @@ export function registerAtStakeLegionTools(server) {
             "this is a forecast, not a promise — but it is the forecast that tells you " +
             "whether a conclude is worth the gas.\n\n" +
             "Read-only, no wallet needed.",
-        inputSchema: {
+        inputSchema: z.object({
             side: SIDE_ARG,
             proposal_id: z.number().int().positive().describe("The proposal id."),
-        },
+        }),
     }, async ({ side, proposal_id }) => {
         try {
             const chosen = resolveSide(side);
@@ -340,7 +340,7 @@ export function registerAtStakeLegionTools(server) {
             "legion-wide interval between proposals. Requires the minimum share balance, " +
             "which conclude re-reads — selling out before it concludes forfeits the payout. " +
             "All three fields are ASCII-only. Requires an unlocked wallet.",
-        inputSchema: {
+        inputSchema: z.object({
             side: SIDE_ARG,
             title: z
                 .string()
@@ -353,7 +353,7 @@ export function registerAtStakeLegionTools(server) {
                 .string()
                 .describe(`Public URL a voter can reproduce the claim from. ASCII, max ` +
                 `${MAX_LINK_LENGTH} characters.`),
-        },
+        }),
     }, async ({ side, title, description, link }) => {
         try {
             const chosen = resolveSide(side);
@@ -452,7 +452,7 @@ export function registerAtStakeLegionTools(server) {
             "State what you checked, not that you agree. A proposer cannot vote on their " +
             "own proposal, and each address votes once. Voting opens two blocks after " +
             "propose. Requires the minimum share balance and an unlocked wallet.",
-        inputSchema: {
+        inputSchema: z.object({
             side: SIDE_ARG,
             proposal_id: z.number().int().positive().describe("The proposal id."),
             support: z
@@ -462,7 +462,7 @@ export function registerAtStakeLegionTools(server) {
                 .string()
                 .describe(`Why, in your own words — what you checked and what you found. ASCII, max ` +
                 `${MAX_RATIONALE_LENGTH} characters. Permanent and public.`),
-        },
+        }),
     }, async ({ side, proposal_id, support, rationale }) => {
         try {
             const chosen = resolveSide(side);
@@ -551,10 +551,10 @@ export function registerAtStakeLegionTools(server) {
             "The payout is shares of the proposer's own side while the market trades, and " +
             "an sBTC credit once it has resolved. The caller pays gas and receives nothing.\n\n" +
             "Requires an unlocked wallet.",
-        inputSchema: {
+        inputSchema: z.object({
             side: SIDE_ARG,
             proposal_id: z.number().int().positive().describe("The proposal id."),
-        },
+        }),
     }, async ({ side, proposal_id }) => {
         try {
             const chosen = resolveSide(side);
@@ -643,7 +643,7 @@ export function registerAtStakeLegionTools(server) {
             "Permissionless, once-only, and callable only after the market resolves and all " +
             "live proposals have settled. Pays the caller nothing. Requires an unlocked " +
             "wallet.",
-        inputSchema: { side: SIDE_ARG },
+        inputSchema: z.object({ side: SIDE_ARG }),
     }, async ({ side }) => {
         try {
             const chosen = resolveSide(side);
@@ -711,7 +711,7 @@ export function registerAtStakeLegionTools(server) {
             "pays out in claim order until it runs dry, and the unpaid remainder stays on " +
             "your credit.\n\n" +
             "Requires an unlocked wallet.",
-        inputSchema: { side: SIDE_ARG },
+        inputSchema: z.object({ side: SIDE_ARG }),
     }, async ({ side }) => {
         try {
             const chosen = resolveSide(side);

package/dist/tools/at-stake.tools.d.ts

@@ -24,6 +24,6 @@
  * and building one belongs in a prover, not in an MCP argument list. The
  * permissionless NO settlement, `resolve-idle`, takes no arguments and is here.
  */
-import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { McpServer } from "@modelcontextprotocol/server";
 export declare function registerAtStakeTools(server: McpServer): void;
 //# sourceMappingURL=at-stake.tools.d.ts.map

package/dist/tools/at-stake.tools.js

@@ -56,7 +56,7 @@ export function registerAtStakeTools(server) {
             "no admin key and no oracle: it settles YES only on a Bitcoin SPV proof, and NO " +
             "by anyone calling resolve-idle after the close height.\n\n" +
             "Read-only, no wallet needed.",
-        inputSchema: {},
+        inputSchema: z.object({}),
     }, async () => {
         try {
             const [market, burnHeight] = await Promise.all([
@@ -108,12 +108,12 @@ export function registerAtStakeTools(server) {
             "position is the DIFFERENCE between the two.\n\n" +
             "Read-only. Defaults to the unlocked wallet, which requires one; pass an address " +
             "to read anyone without unlocking.",
-        inputSchema: {
+        inputSchema: z.object({
             address: z
                 .string()
                 .optional()
                 .describe("Stacks address to read. Defaults to the unlocked wallet."),
-        },
+        }),
     }, async ({ address }) => {
         try {
             const who = address ?? (await getAtStakeAccount()).address;
@@ -168,7 +168,7 @@ export function registerAtStakeTools(server) {
             "arguing either side in a legion should be reading these on Bitcoin directly " +
             "rather than taking the market's word for the balances.\n\n" +
             "Read-only, no wallet needed.",
-        inputSchema: {},
+        inputSchema: z.object({}),
     }, async () => {
         try {
             const [addresses, scripts, indices] = await Promise.all([
@@ -210,14 +210,14 @@ export function registerAtStakeTools(server) {
             "Reversible before the market resolves: atstake_merge_complete_set hands any " +
             "matched pair back for its sat. Spends real sBTC and meters against the " +
             "wallet's sats rail. Requires an unlocked wallet.",
-        inputSchema: {
+        inputSchema: z.object({
             sats: z
                 .number()
                 .int()
                 .positive()
                 .describe("sBTC sats to escrow. Mints this many shares of EACH side. The legion " +
                 "minimum is 1,000."),
-        },
+        }),
     }, async ({ sats }) => {
         try {
             const account = await getAtStakeAccount();
@@ -279,13 +279,13 @@ export function registerAtStakeTools(server) {
             "position, never the directional part.\n\n" +
             "Only works while the market is open — after resolve, use atstake_redeem. " +
             "Requires an unlocked wallet.",
-        inputSchema: {
+        inputSchema: z.object({
             sats: z
                 .number()
                 .int()
                 .positive()
                 .describe("Matched pairs to merge back into sBTC."),
-        },
+        }),
     }, async ({ sats }) => {
         try {
             const account = await getAtStakeAccount();
@@ -347,7 +347,7 @@ export function registerAtStakeTools(server) {
             "comes back in full via atstake_cancel_bid if it never fills.\n\n" +
             "One resting bid per side at a time. Spends real sBTC and meters against the " +
             "wallet's sats rail. Requires an unlocked wallet.",
-        inputSchema: {
+        inputSchema: z.object({
             side: SIDE_ARG,
             amount: z
                 .number()
@@ -360,7 +360,7 @@ export function registerAtStakeTools(server) {
                 .positive()
                 .describe("sBTC escrowed for the whole bid. Must be less than `amount` — the implied " +
                 "price per share is total_sats/amount."),
-        },
+        }),
     }, async ({ side, amount, total_sats }) => {
         try {
             const chosen = resolveSide(side);
@@ -424,13 +424,13 @@ export function registerAtStakeTools(server) {
         description: "Read a resting bid: shares wanted, sBTC escrowed, and the price that implies.\n\n" +
             "Read-only. Defaults to the unlocked wallet, which requires one; pass an address " +
             "to read anyone without unlocking.",
-        inputSchema: {
+        inputSchema: z.object({
             side: SIDE_ARG,
             address: z
                 .string()
                 .optional()
                 .describe("Bidder to read. Defaults to the unlocked wallet."),
-        },
+        }),
     }, async ({ side, address }) => {
         try {
             const chosen = resolveSide(side);
@@ -465,7 +465,7 @@ export function registerAtStakeTools(server) {
     server.registerTool("atstake_cancel_bid", {
         description: "Withdraw a resting bid and get the unfilled escrow back.\n\n" +
             "Requires an unlocked wallet.",
-        inputSchema: { side: SIDE_ARG },
+        inputSchema: z.object({ side: SIDE_ARG }),
     }, async ({ side }) => {
         try {
             const chosen = resolveSide(side);
@@ -516,11 +516,11 @@ export function registerAtStakeTools(server) {
             "Shares are map entries, not a SIP-010 token, so no fungible-token " +
             "post-condition can guard this and none is signed. Only works while the market " +
             "trades. Requires an unlocked wallet.",
-        inputSchema: {
+        inputSchema: z.object({
             side: SIDE_ARG,
             amount: z.number().int().positive().describe("Shares to send."),
             to: z.string().describe("Recipient Stacks principal."),
-        },
+        }),
     }, async ({ side, amount, to }) => {
         try {
             const chosen = resolveSide(side);
@@ -580,7 +580,7 @@ export function registerAtStakeTools(server) {
             "Only callable after the market resolves. Redeeming burns the whole position in " +
             "one call, so there is nothing left to redeem a second time.\n\n" +
             "Requires an unlocked wallet.",
-        inputSchema: {},
+        inputSchema: z.object({}),
     }, async () => {
         try {
             const account = await getAtStakeAccount();
@@ -639,7 +639,7 @@ export function registerAtStakeTools(server) {
             "their vaults either.\n\n" +
             "It pays the caller nothing and costs them gas. Moves no assets. Requires an " +
             "unlocked wallet.",
-        inputSchema: {},
+        inputSchema: z.object({}),
     }, async () => {
         try {
             const account = await getAtStakeAccount();

package/dist/tools/bitcoin.tools.d.ts

@@ -10,6 +10,6 @@
  * Data is fetched from mempool.space API (no authentication required).
  * Transfer operations require an unlocked wallet.
  */
-import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { McpServer } from "@modelcontextprotocol/server";
 export declare function registerBitcoinTools(server: McpServer): void;
 //# sourceMappingURL=bitcoin.tools.d.ts.map

package/dist/tools/bitcoin.tools.js

@@ -92,13 +92,13 @@ export function registerBitcoinTools(server) {
     server.registerTool("get_btc_balance", {
         description: "Get the BTC balance for a Bitcoin address. " +
             "Returns both total balance (including unconfirmed) and confirmed balance.",
-        inputSchema: {
+        inputSchema: z.object({
             address: z
                 .string()
                 .optional()
                 .describe("Bitcoin address to check (bc1... for mainnet, tb1... for testnet). " +
                 "Uses wallet's Bitcoin address if not provided."),
-        },
+        }),
     }, async ({ address }) => {
         try {
             const btcAddress = await getBtcAddress(address);
@@ -181,7 +181,7 @@ export function registerBitcoinTools(server) {
     server.registerTool("get_btc_utxos", {
         description: "List all UTXOs (Unspent Transaction Outputs) for a Bitcoin address. " +
             "Useful for debugging, transparency, and understanding transaction inputs.",
-        inputSchema: {
+        inputSchema: z.object({
             address: z
                 .string()
                 .optional()
@@ -191,7 +191,7 @@ export function registerBitcoinTools(server) {
                 .optional()
                 .default(false)
                 .describe("Only return confirmed UTXOs (default: false)"),
-        },
+        }),
     }, async ({ address, confirmedOnly }) => {
         try {
             const btcAddress = await getBtcAddress(address);
@@ -219,7 +219,7 @@ export function registerBitcoinTools(server) {
             "Requires an unlocked wallet with BTC balance. " +
             "By default, only uses cardinal UTXOs (safe to spend - no inscriptions). " +
             "Set includeOrdinals=true to allow spending ordinal UTXOs (advanced users only).",
-        inputSchema: {
+        inputSchema: z.object({
             recipient: z
                 .string()
                 .describe("Bitcoin address to send to (bc1... for mainnet, tb1... for testnet)"),
@@ -242,7 +242,7 @@ export function registerBitcoinTools(server) {
                 .default(false)
                 .describe("Include ordinal UTXOs (contains inscriptions). Default: false (cardinal only). " +
                 "WARNING: Setting this to true may destroy valuable inscriptions!"),
-        },
+        }),
     }, async ({ recipient, amount, feeRate, includeOrdinals }) => {
         try {
             validateRecipientNetwork(recipient);
@@ -350,7 +350,7 @@ export function registerBitcoinTools(server) {
             "Cardinal UTXOs are regular Bitcoin outputs that do not contain ordinal inscriptions or rune balances. " +
             "These UTXOs can be safely used for regular Bitcoin transfers and fees. " +
             "Backed by the Unisat indexer; set UNISAT_API_KEY to lift free-tier rate limits.",
-        inputSchema: {
+        inputSchema: z.object({
             address: z
                 .string()
                 .optional()
@@ -360,7 +360,7 @@ export function registerBitcoinTools(server) {
                 .optional()
                 .default(false)
                 .describe("Only return confirmed UTXOs (default: false)"),
-        },
+        }),
     }, async ({ address, confirmedOnly }) => {
         try {
             const btcAddress = await getBtcAddress(address);
@@ -388,7 +388,7 @@ export function registerBitcoinTools(server) {
         description: "Get ordinal UTXOs (contain inscriptions or runes - do not spend). " +
             "Ordinal UTXOs carry inscriptions or rune balances and should not be spent in regular transfers. " +
             "Backed by the Unisat indexer; set UNISAT_API_KEY to lift free-tier rate limits.",
-        inputSchema: {
+        inputSchema: z.object({
             address: z
                 .string()
                 .optional()
@@ -398,7 +398,7 @@ export function registerBitcoinTools(server) {
                 .optional()
                 .default(false)
                 .describe("Only return confirmed UTXOs (default: false)"),
-        },
+        }),
     }, async ({ address, confirmedOnly }) => {
         try {
             const btcAddress = await getBtcAddress(address);
@@ -426,12 +426,12 @@ export function registerBitcoinTools(server) {
         description: "Get all inscriptions owned by a Bitcoin address. " +
             "Returns inscription IDs, content types, and metadata. " +
             "Backed by the Unisat indexer; set UNISAT_API_KEY to lift free-tier rate limits.",
-        inputSchema: {
+        inputSchema: z.object({
             address: z
                 .string()
                 .optional()
                 .describe("Bitcoin address to check. Uses wallet's Bitcoin address if not provided."),
-        },
+        }),
     }, async ({ address }) => {
         try {
             const btcAddress = await getBtcAddress(address);

package/dist/tools/bitflow.tools.d.ts

@@ -1,3 +1,3 @@
-import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { McpServer } from "@modelcontextprotocol/server";
 export declare function registerBitflowTools(server: McpServer): void;
 //# sourceMappingURL=bitflow.tools.d.ts.map