@aibtc/mcp-server 1.70.1 → 1.72.0

package/dist/tools/credentials.tools.js

@@ -22,7 +22,7 @@ export function registerCredentialsTools(server) {
      */
     server.registerTool("credentials_list", {
         description: "List all stored credentials. Shows service names, key names, and last-updated timestamps. Does NOT reveal credential values.",
-        inputSchema: {},
+        inputSchema: z.object({}),
     }, async () => {
         try {
             await ensureUnlocked();
@@ -42,10 +42,10 @@ export function registerCredentialsTools(server) {
      */
     server.registerTool("credentials_get", {
         description: "Retrieve a stored credential value by service and key. Returns the decrypted value. WARNING: The returned value is sensitive — do not log or display it unnecessarily.",
-        inputSchema: {
+        inputSchema: z.object({
             service: z.string().min(1).describe("Service name (e.g. 'github', 'openrouter')"),
             key: z.string().min(1).describe("Key name within the service (e.g. 'api_key', 'token')"),
-        },
+        }),
     }, async ({ service, key }) => {
         try {
             await ensureUnlocked();
@@ -74,14 +74,14 @@ export function registerCredentialsTools(server) {
      */
     server.registerTool("credentials_set", {
         description: "Store or update a credential. Encrypts the value with AES-256-GCM and saves to ~/.aibtc/credentials.enc. If the service/key pair already exists, it is updated.",
-        inputSchema: {
+        inputSchema: z.object({
             service: z.string().min(1).describe("Service name (e.g. 'github', 'openrouter')"),
             key: z.string().min(1).describe("Key name within the service (e.g. 'api_key', 'token')"),
             value: z
                 .string()
                 .min(1)
                 .describe("The credential value to store — WARNING: sensitive"),
-        },
+        }),
     }, async ({ service, key, value }) => {
         try {
             await ensureUnlocked();
@@ -104,10 +104,10 @@ export function registerCredentialsTools(server) {
      */
     server.registerTool("credentials_delete", {
         description: "Remove a stored credential by service and key. The encrypted store file is rewritten without the deleted entry.",
-        inputSchema: {
+        inputSchema: z.object({
             service: z.string().min(1).describe("Service name (e.g. 'github', 'openrouter')"),
             key: z.string().min(1).describe("Key name within the service (e.g. 'api_key', 'token')"),
-        },
+        }),
     }, async ({ service, key }) => {
         try {
             await ensureUnlocked();
@@ -130,7 +130,7 @@ export function registerCredentialsTools(server) {
      */
     server.registerTool("credentials_unlock", {
         description: "Verify that the credential store password works and show store info. Uses ARC_CREDS_PASSWORD env var. Creates a new empty store if none exists.",
-        inputSchema: {},
+        inputSchema: z.object({}),
     }, async () => {
         try {
             await credentials.unlock();

package/dist/tools/defi.tools.d.ts

@@ -1,3 +1,3 @@
-import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { McpServer } from "@modelcontextprotocol/server";
 export declare function registerDefiTools(server: McpServer): void;
 //# sourceMappingURL=defi.tools.d.ts.map

package/dist/tools/defi.tools.js

@@ -15,11 +15,11 @@ Returns the expected output amount for swapping tokenX to tokenY.
 Use full contract IDs for tokens (e.g., 'SP102V8P0F7JX67ARQ77WEA3D3CFB5XW39REDT0AM.token-wstx-v2').
 
 Note: ALEX DEX is only available on mainnet.`,
-        inputSchema: {
+        inputSchema: z.object({
             tokenX: z.string().describe("Input token contract ID"),
             tokenY: z.string().describe("Output token contract ID"),
             amountIn: z.string().describe("Amount of tokenX to swap (in smallest units)"),
-        },
+        }),
     }, async ({ tokenX, tokenY, amountIn }) => {
         try {
             if (NETWORK !== "mainnet") {
@@ -54,7 +54,7 @@ Swaps tokenX for tokenY using the ALEX AMM.
 Use full contract IDs for tokens.
 
 Note: ALEX DEX is only available on mainnet.`,
-        inputSchema: {
+        inputSchema: z.object({
             tokenX: z.string().describe("Input token contract ID"),
             tokenY: z.string().describe("Output token contract ID"),
             amountIn: z.string().describe("Amount of tokenX to swap (in smallest units)"),
@@ -63,7 +63,7 @@ Note: ALEX DEX is only available on mainnet.`,
                 .optional()
                 .default("0")
                 .describe("Minimum acceptable output amount (slippage protection)"),
-        },
+        }),
     }, async ({ tokenX, tokenY, amountIn, minAmountOut }) => {
         try {
             if (NETWORK !== "mainnet") {
@@ -99,10 +99,10 @@ Note: ALEX DEX is only available on mainnet.`,
 Returns reserve balances and pool details for a token pair.
 
 Note: ALEX DEX is only available on mainnet.`,
-        inputSchema: {
+        inputSchema: z.object({
             tokenX: z.string().describe("First token contract ID"),
             tokenY: z.string().describe("Second token contract ID"),
-        },
+        }),
     }, async ({ tokenX, tokenY }) => {
         try {
             if (NETWORK !== "mainnet") {
@@ -140,13 +140,13 @@ Returns pool ID, token pair, and factor (fee tier) for each pool.
 Use this to find which tokens can be swapped before calling alex_swap.
 
 Note: ALEX DEX is only available on mainnet.`,
-        inputSchema: {
+        inputSchema: z.object({
             limit: z
                 .number()
                 .optional()
                 .default(50)
                 .describe("Maximum number of pools to return (default 50)"),
-        },
+        }),
     }, async ({ limit }) => {
         try {
             if (NETWORK !== "mainnet") {
@@ -187,7 +187,7 @@ Each asset includes its symbol, name, and contract ID.
 Supported assets: wSTX, sBTC, stSTX, USDC, USDH, stSTXbtc.
 
 Note: Zest Protocol is only available on mainnet.`,
-        inputSchema: {},
+        inputSchema: z.object({}),
     }, async () => {
         try {
             if (NETWORK !== "mainnet") {
@@ -223,13 +223,13 @@ Returns collateral, debt, health factor, and LTV data across all assets.
 The position query returns USD-denominated totals.
 
 Note: Zest Protocol is only available on mainnet.`,
-        inputSchema: {
+        inputSchema: z.object({
             asset: z.string().default("sBTC").describe("Asset symbol (e.g., 'sBTC', 'USDC') or full contract ID"),
             address: z
                 .string()
                 .optional()
                 .describe("User address (uses wallet if not specified)"),
-        },
+        }),
     }, async ({ asset, address }) => {
         try {
             if (NETWORK !== "mainnet") {
@@ -272,10 +272,10 @@ You can use the asset symbol (e.g., 'sBTC', 'USDC') or full contract ID.
 Supported assets: wSTX, sBTC, stSTX, USDC, USDH, stSTXbtc.
 
 Note: Zest Protocol is only available on mainnet.`,
-        inputSchema: {
+        inputSchema: z.object({
             asset: z.string().describe("Asset symbol (e.g., 'sBTC', 'USDC') or full contract ID"),
             amount: z.string().describe("Amount to supply (in smallest units)"),
-        },
+        }),
     }, async ({ asset, amount }) => {
         try {
             if (NETWORK !== "mainnet") {
@@ -310,10 +310,10 @@ Removes collateral and redeems for underlying assets in one atomic operation.
 You can use the asset symbol (e.g., 'sBTC', 'USDC') or full contract ID.
 
 Note: Amount is in zToken shares. Zest Protocol is only available on mainnet.`,
-        inputSchema: {
+        inputSchema: z.object({
             asset: z.string().describe("Asset symbol (e.g., 'sBTC', 'USDC') or full contract ID"),
             amount: z.string().describe("Amount of zToken shares to withdraw"),
-        },
+        }),
     }, async ({ asset, amount }) => {
         try {
             if (NETWORK !== "mainnet") {
@@ -351,10 +351,10 @@ You can use the asset symbol (e.g., 'USDC', 'sBTC') or full contract ID.
 Three LTV tiers: ~75% (borrow limit), ~85% (partial liquidation), ~95% (full liquidation).
 
 Note: Zest Protocol is only available on mainnet.`,
-        inputSchema: {
+        inputSchema: z.object({
             asset: z.string().describe("Asset symbol (e.g., 'sBTC', 'USDC') or full contract ID"),
             amount: z.string().describe("Amount to borrow (in smallest units)"),
-        },
+        }),
     }, async ({ asset, amount }) => {
         try {
             if (NETWORK !== "mainnet") {
@@ -392,10 +392,10 @@ Note: zest_supply already handles this atomically via supply-collateral-add.
 This tool is only needed if you used vault deposit separately.
 
 Mainnet only.`,
-        inputSchema: {
+        inputSchema: z.object({
             asset: z.string().describe("Asset symbol (e.g., 'sBTC', 'USDC') or full contract ID"),
             amount: z.string().describe("Amount of zTokens to add as collateral (in smallest units)"),
-        },
+        }),
     }, async ({ asset, amount }) => {
         try {
             if (NETWORK !== "mainnet") {
@@ -430,14 +430,14 @@ Repays borrowed assets plus accrued interest.
 You can use the asset symbol (e.g., 'USDC', 'sBTC') or full contract ID.
 
 Note: Zest Protocol is only available on mainnet.`,
-        inputSchema: {
+        inputSchema: z.object({
             asset: z.string().describe("Asset symbol (e.g., 'sBTC', 'USDC') or full contract ID"),
             amount: z.string().describe("Amount to repay (in smallest units)"),
             onBehalfOf: z
                 .string()
                 .optional()
                 .describe("Optional: repay on behalf of another address"),
-        },
+        }),
     }, async ({ asset, amount, onBehalfOf }) => {
         try {
             if (NETWORK !== "mainnet") {

package/dist/tools/dual-stacking.tools.d.ts

@@ -1,3 +1,3 @@
-import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { McpServer } from "@modelcontextprotocol/server";
 export declare function registerDualStackingTools(server: McpServer): void;
 //# sourceMappingURL=dual-stacking.tools.d.ts.map

package/dist/tools/dual-stacking.tools.js

@@ -103,12 +103,12 @@ Returns enrollment state for both the current and next cycle, the APR range
 (higher with more stacked STX), minimum enrollment amount, and current cycle data.
 
 Note: Dual Stacking is only available on mainnet.`,
-        inputSchema: {
+        inputSchema: z.object({
             address: z
                 .string()
                 .optional()
                 .describe("Address to check. Uses configured wallet if not provided."),
-        },
+        }),
     }, async ({ address }) => {
         try {
             if (NETWORK !== "mainnet") {
@@ -231,7 +231,7 @@ The rollback parameter lets you look up rewards from a specific snapshot offset
 within the cycle (default 0 = most recent).
 
 Note: Dual Stacking is only available on mainnet.`,
-        inputSchema: {
+        inputSchema: z.object({
             cycle: z.number().describe("Cycle number to query rewards for"),
             address: z
                 .string()
@@ -242,7 +242,7 @@ Note: Dual Stacking is only available on mainnet.`,
                 .optional()
                 .default(0)
                 .describe("Snapshot rollback offset within the cycle (default 0)"),
-        },
+        }),
     }, async ({ cycle, address, rollback }) => {
         try {
             if (NETWORK !== "mainnet") {
@@ -290,12 +290,12 @@ address than the signing wallet. If omitted, rewards go to the signing wallet.
 Requires an unlocked wallet with sufficient sBTC balance.
 
 Note: Dual Stacking is only available on mainnet.`,
-        inputSchema: {
+        inputSchema: z.object({
             rewardAddress: z
                 .string()
                 .optional()
                 .describe("Optional Stacks address to receive sBTC rewards. Uses signing wallet address if not provided."),
-        },
+        }),
     }, async ({ rewardAddress }) => {
         try {
             if (NETWORK !== "mainnet") {
@@ -337,7 +337,7 @@ the start of the next PoX cycle; you continue to earn rewards for the current cy
 Requires an unlocked wallet.
 
 Note: Dual Stacking is only available on mainnet.`,
-        inputSchema: {},
+        inputSchema: z.object({}),
     }, async () => {
         try {
             if (NETWORK !== "mainnet") {

package/dist/tools/earning.tools.d.ts

@@ -10,7 +10,7 @@
  * DeFi yields, bounties, deploy paid endpoints). News correspondent and the
  * trading competition are intentionally excluded from this menu.
  */
-import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { McpServer } from "@modelcontextprotocol/server";
 export interface EarningStrategy {
     /** Stable id for filtering. */
     id: string;

package/dist/tools/earning.tools.js

@@ -15,9 +15,9 @@ export const EARNING_STRATEGIES = [
         id: "stacking",
         name: "Bitcoin Stacking (PoX)",
         assets: ["STX"],
-        returns: "BTC / sBTC rewards per PoX cycle",
-        summary: "Lock STX to support Stacks consensus and earn Bitcoin rewards. Dual Stacking routes the yield as sBTC.",
-        start_with: ["get_stacking_status", "stack_stx", "dual_stacking_enroll"],
+        returns: "sBTC rewards per PoX cycle",
+        summary: "Lock STX with a PoX-5 signer manager to support Stacks consensus and earn sBTC rewards (or BTC via the manager's payout address). Dual Stacking routes the yield as sBTC.",
+        start_with: ["list_stacking_signers", "stack_stx", "get_stacking_status", "dual_stacking_enroll"],
     },
     {
         id: "defi_yield",
@@ -71,12 +71,12 @@ Each entry: \`{ id, name, assets, returns, summary, start_with, reference? }\` w
 Optional \`asset\` filter (e.g. "STX", "sBTC") returns only strategies that put that asset to work — useful for "what can I do with the STX I hold?". Matching is case-insensitive substring over each strategy's \`assets\`.
 
 Aligned with aibtc.com. The trading competition and news correspondent are intentionally not part of this menu.`,
-        inputSchema: {
+        inputSchema: z.object({
             asset: z
                 .string()
                 .optional()
                 .describe('Optional asset filter (e.g. "STX", "sBTC"). Returns only strategies that use a matching asset.'),
-        },
+        }),
     }, async ({ asset }) => {
         try {
             const filtered = asset

package/dist/tools/endpoint.tools.d.ts

@@ -1,3 +1,3 @@
-import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { McpServer } from "@modelcontextprotocol/server";
 export declare function registerEndpointTools(server: McpServer): void;
 //# sourceMappingURL=endpoint.tools.d.ts.map

package/dist/tools/endpoint.tools.js

@@ -1,12 +1,12 @@
 import { z } from "zod";
 import { createApiClient, API_URL, probeEndpoint, formatPaymentAmount, checkSufficientBalance, generateDedupKey, checkDedupCache, recordTransaction, X402_DEDUP_TTL_MS, NETWORK } from "../services/x402.service.js";
-import { ALL_ENDPOINTS, searchEndpoints, formatEndpointsTable, getEndpointsBySource, getCategories, } from "../endpoints/registry.js";
+import { STATIC_ENDPOINTS, formatEndpointsTable } from "../endpoints/registry.js";
+import { discoverOpenApiEndpoints, fetchDirectoryEntries, } from "../services/x402-discovery.service.js";
 import { createJsonResponse, createErrorResponse } from "../utils/index.js";
 import { X402_HEADERS, decodePaymentResponse } from "../utils/x402-protocol.js";
 import { extractPaymentIdFromPaymentSignature, extractTxidFromPaymentSignature, pollTransactionConfirmation, } from "../utils/x402-recovery.js";
 import { formatCanonicalPaymentStatus } from "../utils/x402-payment-state.js";
 import { emitPaymentLog } from "../utils/x402-payment-logging.js";
-const ALL_SOURCES = "x402.biwas.xyz, x402.aibtc.com, stx402.com, aibtc.com";
 /**
  * Parse and validate endpoint URL from either a full URL or path+apiUrl combination.
  * Merges any query parameters from the URL into the provided params.
@@ -130,27 +130,26 @@ function formatProbeResponse(result, method, fullUrl, callWithOptions, messagePr
 export function registerEndpointTools(server) {
     // List x402 endpoints
     server.registerTool("list_x402_endpoints", {
-        description: `List known x402 API endpoints from ${ALL_SOURCES}.
-
-The agent can:
-1. Execute x402 endpoints from these sources (paid API calls with automatic payment handling)
-2. Execute direct Stacks transactions (transfer STX, call contracts, deploy contracts)
+        description: `List x402 API endpoints. x402.aibtc.com and stx402.com are read live from their OpenAPI specs; the stx402.com directory lists x402 endpoints registered by third parties.
 
 Sources:
 - x402.biwas.xyz: DeFi analytics, market data, wallet analysis, Zest/ALEX protocols
-- x402.aibtc.com: AI inference, OpenRouter integration, Stacks utilities, hashing, storage
-- stx402.com: AI services, cryptography, storage, utilities, agent registry
-- aibtc.com: Inbox messaging system`,
-        inputSchema: {
+- x402.aibtc.com: AI inference, Stacks utilities, hashing, storage (live)
+- stx402.com: x402 endpoint registry, agent registry (ERC-8004), links (live)
+- aibtc.com: Inbox messaging
+- directory: third-party endpoints registered at stx402.com (live, mainnet). Unverified entries are hidden unless includeUnverified is true — probe before paying.
+
+Costs from live specs are tiers ("paid (standard)", "paid (dynamic)"); use probe_x402_endpoint for the exact price.`,
+        inputSchema: z.object({
             source: z
-                .enum(["x402.biwas.xyz", "x402.aibtc.com", "stx402.com", "aibtc.com", "all"])
+                .enum(["x402.biwas.xyz", "x402.aibtc.com", "stx402.com", "aibtc.com", "directory", "all"])
                 .optional()
                 .default("all")
                 .describe("Filter by API source"),
             category: z
                 .string()
                 .optional()
-                .describe("Filter by category (use without value to see available categories)"),
+                .describe("Filter by category (case-insensitive)"),
             search: z
                 .string()
                 .optional()
@@ -163,12 +162,42 @@ Sources:
                 .boolean()
                 .optional()
                 .describe("Only show paid endpoints (require x402 payment)"),
-        },
-    }, async ({ source, category, search, showFreeOnly, showPaidOnly }) => {
+            includeUnverified: z
+                .boolean()
+                .optional()
+                .default(false)
+                .describe("Include unverified third-party entries from the stx402.com directory"),
+        }),
+    }, async ({ source, category, search, showFreeOnly, showPaidOnly, includeUnverified }) => {
         try {
-            let endpoints = ALL_ENDPOINTS;
-            if (source && source !== "all") {
-                endpoints = getEndpointsBySource(source);
+            const wanted = source ?? "all";
+            const unavailable = [];
+            let endpoints = STATIC_ENDPOINTS.filter((ep) => wanted === "all" || ep.source === wanted);
+            if (wanted === "all" || wanted === "x402.aibtc.com" || wanted === "stx402.com") {
+                const live = await discoverOpenApiEndpoints();
+                endpoints.push(...live.endpoints.filter((ep) => wanted === "all" || ep.source === wanted));
+                unavailable.push(...live.unavailable.filter((u) => wanted === "all" || u.source === wanted));
+            }
+            let directory = [];
+            // Directory entries carry no method or price, so they only answer
+            // unfiltered or keyword/category browsing, not free/paid filters.
+            if ((wanted === "all" || wanted === "directory") && !showFreeOnly && !showPaidOnly) {
+                if (NETWORK !== "mainnet") {
+                    if (wanted === "directory") {
+                        unavailable.push({ source: "directory", error: "the stx402.com directory lists mainnet endpoints only" });
+                    }
+                }
+                else {
+                    try {
+                        directory = (await fetchDirectoryEntries()).filter((e) => includeUnverified || e.status === "verified");
+                    }
+                    catch (error) {
+                        unavailable.push({
+                            source: "directory",
+                            error: error instanceof Error ? error.message : String(error),
+                        });
+                    }
+                }
             }
             if (showFreeOnly) {
                 endpoints = endpoints.filter((ep) => ep.cost === "FREE");
@@ -177,38 +206,52 @@ Sources:
                 endpoints = endpoints.filter((ep) => ep.cost !== "FREE");
             }
             if (category) {
-                endpoints = endpoints.filter((ep) => ep.category.toLowerCase() === category.toLowerCase());
+                const c = category.toLowerCase();
+                endpoints = endpoints.filter((ep) => ep.category.toLowerCase() === c);
+                directory = directory.filter((e) => e.category.toLowerCase() === c);
             }
             if (search) {
-                const searchResults = searchEndpoints(search);
-                endpoints = endpoints.filter((ep) => searchResults.includes(ep));
+                const q = search.toLowerCase();
+                endpoints = endpoints.filter((ep) => ep.path.toLowerCase().includes(q) ||
+                    ep.description.toLowerCase().includes(q) ||
+                    ep.category.toLowerCase().includes(q));
+                directory = directory.filter((e) => e.name.toLowerCase().includes(q) ||
+                    e.url.toLowerCase().includes(q) ||
+                    e.category.toLowerCase().includes(q));
             }
-            if (endpoints.length === 0) {
-                const categories = getCategories();
+            const unavailableText = unavailable.length > 0
+                ? `\n\n## Unavailable sources\n${unavailable.map((u) => `- ${u.source}: ${u.error}`).join("\n")}`
+                : "";
+            if (endpoints.length === 0 && directory.length === 0) {
                 return {
                     content: [
                         {
                             type: "text",
-                            text: `No endpoints found matching your criteria.
-
-Available categories: ${categories.join(", ")}
-
-Sources: ${ALL_SOURCES}
-
-If you're looking to perform a direct blockchain action (transfer STX, call a contract), those are available via separate tools.`,
+                            text: `No endpoints found matching your criteria (source: ${wanted}).` +
+                                unavailableText +
+                                `\n\nIf you're looking to perform a direct blockchain action (transfer STX, call a contract), those are available via separate tools.`,
                         },
                     ],
                 };
             }
-            const formatted = formatEndpointsTable(endpoints);
-            const sourceInfo = source === "all"
-                ? `Sources: ${ALL_SOURCES}`
-                : `Source: ${source}`;
+            const directoryText = directory.length > 0
+                ? `\n\n## Directory (stx402.com, third-party)\n` +
+                    directory
+                        .map((e) => `- ${e.name} [${e.category}, ${e.status}]\n  ${e.url}`)
+                        .join("\n")
+                : "";
             return {
                 content: [
                     {
                         type: "text",
-                        text: `# Available x402 Endpoints (${endpoints.length} total)\n\n${sourceInfo}\nDefault API: ${API_URL}\n${formatted}\n\n---\nUse execute_x402_endpoint to call any of these endpoints.`,
+                        text: `# Available x402 Endpoints (${endpoints.length + directory.length} total)\n\n` +
+                            `Source: ${wanted}\nDefault API: ${API_URL}\n` +
+                            (endpoints.length > 0 ? `\n${formatEndpointsTable(endpoints)}` : "") +
+                            directoryText +
+                            unavailableText +
+                            `\n\n---\nUse execute_x402_endpoint to call an endpoint: pass apiUrl="https://<source>" with the path ` +
+                            `(the source is in each heading; a bare path goes to ${API_URL}), or the full url for directory entries. ` +
+                            `Use probe_x402_endpoint first to see the exact price.`,
                     },
                 ],
             };
@@ -222,16 +265,16 @@ If you're looking to perform a direct blockchain action (transfer STX, call a co
         description: `Execute an x402 API endpoint. Payment is handled automatically.
 
 Supported sources:
-- x402.biwas.xyz (default): Use path like "/api/pools/trending"
-- x402.aibtc.com (mainnet) / x402.aibtc.dev (testnet): Use apiUrl="https://x402.aibtc.com" with path like "/inference/openrouter/chat"
-- stx402.com: Use apiUrl="https://stx402.com" with path like "/ai/dad-joke"
+- x402.aibtc.com (mainnet) / x402.aibtc.dev (testnet), the default: Use path like "/inference/openrouter/chat"
+- x402.biwas.xyz: Use apiUrl="https://x402.biwas.xyz" with path like "/api/pools/trending"
+- stx402.com: Use apiUrl="https://stx402.com" with path like "/registry/list"
 - aibtc.com (mainnet) / aibtc.dev (testnet): Use apiUrl="https://aibtc.com" with path like "/api/inbox/{address}"
 - Any x402-compatible URL: Use url parameter with full endpoint URL
 
 Use list_x402_endpoints to discover available endpoints.
 
 For aibtc.com inbox messages, use send_inbox_message_direct instead — it signs a standard sBTC transfer and settles directly through the x402 facilitator.`,
-        inputSchema: {
+        inputSchema: z.object({
             method: z
                 .enum(["GET", "POST", "PUT", "DELETE"])
                 .default("GET")
@@ -240,7 +283,7 @@ For aibtc.com inbox messages, use send_inbox_message_direct instead — it signs
                 .string()
                 .url()
                 .optional()
-                .describe("Full endpoint URL (e.g., 'https://stx402.com/ai/dad-joke'). Takes precedence over path+apiUrl."),
+                .describe("Full endpoint URL (e.g., 'https://x402.aibtc.com/hashing/sha256'). Takes precedence over path+apiUrl."),
             path: z
                 .string()
                 .optional()
@@ -249,7 +292,7 @@ For aibtc.com inbox messages, use send_inbox_message_direct instead — it signs
                 .string()
                 .url()
                 .optional()
-                .describe("API base URL. Known sources: x402.biwas.xyz, x402.aibtc.com, stx402.com, aibtc.com. Defaults to configured API_URL."),
+                .describe("API base URL: https:// plus the source host from list_x402_endpoints (x402.aibtc.com, x402.biwas.xyz, stx402.com, aibtc.com). Defaults to x402.aibtc.com (testnet x402.aibtc.dev)."),
             params: z
                 .record(z.string(), z.string())
                 .optional()
@@ -267,7 +310,7 @@ For aibtc.com inbox messages, use send_inbox_message_direct instead — it signs
                 .string()
                 .optional()
                 .describe("Which asset to pay with when the endpoint accepts several. Accepts a symbol (\"sBTC\", \"STX\") or a full contract identifier. Defaults to the first asset this client can pay. Only STX and sBTC can be signed; requesting any other asset returns an error listing what is accepted."),
-        },
+        }),
     }, async ({ method, url, path, apiUrl, params, data, autoApprove, asset }) => {
         let fullUrl = "";
         // Hoisted so the catch can record a broadcast payment for dedup — a
@@ -462,12 +505,12 @@ For paid endpoints, returns payment details (amount, asset, recipient) without e
 After probing a paid endpoint, use execute_x402_endpoint to actually execute and pay.
 
 Supported sources:
-- x402.biwas.xyz (default): Use path like "/api/pools/trending"
-- x402.aibtc.com (mainnet) / x402.aibtc.dev (testnet): Use apiUrl="https://x402.aibtc.com" with path like "/inference/openrouter/chat"
-- stx402.com: Use apiUrl="https://stx402.com" with path like "/ai/dad-joke"
+- x402.aibtc.com (mainnet) / x402.aibtc.dev (testnet), the default: Use path like "/inference/openrouter/chat"
+- x402.biwas.xyz: Use apiUrl="https://x402.biwas.xyz" with path like "/api/pools/trending"
+- stx402.com: Use apiUrl="https://stx402.com" with path like "/registry/list"
 - aibtc.com (mainnet) / aibtc.dev (testnet): Use apiUrl="https://aibtc.com" with path like "/api/inbox/{address}"
 - Any x402-compatible URL: Use url parameter with full endpoint URL`,
-        inputSchema: {
+        inputSchema: z.object({
             method: z
                 .enum(["GET", "POST", "PUT", "DELETE"])
                 .default("GET")
@@ -476,7 +519,7 @@ Supported sources:
                 .string()
                 .url()
                 .optional()
-                .describe("Full endpoint URL (e.g., 'https://stx402.com/ai/dad-joke'). Takes precedence over path+apiUrl."),
+                .describe("Full endpoint URL (e.g., 'https://x402.aibtc.com/hashing/sha256'). Takes precedence over path+apiUrl."),
             path: z
                 .string()
                 .optional()
@@ -485,7 +528,7 @@ Supported sources:
                 .string()
                 .url()
                 .optional()
-                .describe("API base URL. Known sources: x402.biwas.xyz, x402.aibtc.com, stx402.com, aibtc.com. Defaults to configured API_URL."),
+                .describe("API base URL: https:// plus the source host from list_x402_endpoints (x402.aibtc.com, x402.biwas.xyz, stx402.com, aibtc.com). Defaults to x402.aibtc.com (testnet x402.aibtc.dev)."),
             params: z
                 .record(z.string(), z.string())
                 .optional()
@@ -498,7 +541,7 @@ Supported sources:
                 .string()
                 .optional()
                 .describe("Quote the cost in this asset when the endpoint accepts several. Accepts a symbol (\"sBTC\", \"STX\") or a full contract identifier. Defaults to the first asset this client can pay; the full accepts[] list is always returned."),
-        },
+        }),
     }, async ({ method, url, path, apiUrl, params, data, asset }) => {
         let fullUrl = "";
         try {

package/dist/tools/identity.tools.d.ts

@@ -17,6 +17,6 @@
  * - identity_unset_wallet      - Remove agent wallet association
  * - identity_transfer          - Transfer identity NFT to new owner
  */
-import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { McpServer } from "@modelcontextprotocol/server";
 export declare function registerIdentityTools(server: McpServer): void;
 //# sourceMappingURL=identity.tools.d.ts.map