@aibtc/mcp-server 1.71.0 → 1.72.1

package/README.md

@@ -27,7 +27,9 @@ Bitcoin-native MCP server for AI agents: BTC/STX wallets, DeFi yield, sBTC peg,
 npx @aibtc/mcp-server@latest --install
 ```
 
-That's it! This automatically configures Claude Code. Restart your terminal and start chatting.
+This configures Claude Code and creates the agent's wallet: it prints the Stacks and Bitcoin addresses, a generated password and the 24-word mnemonic **once**. Write both down. The mnemonic is stored only encrypted (AES-256-GCM) in `~/.aibtc/` on this machine, and the password is not saved anywhere; the agent asks for it to unlock, and you can change it with `wallet_rotate_password`. If a wallet for the network already exists it is kept. The wallet is only created when the install runs in an interactive terminal (never into a pipe or CI log). Pass `--no-wallet` to skip it and create or import one from the agent instead.
+
+Restart your terminal, send a little STX to the printed address, and ask the agent to unlock the wallet and make a paid inference call.
 
 ### Claude Desktop (App)
 
@@ -114,6 +116,37 @@ npx @aibtc/mcp-server@latest --install --cursor --testnet   # Cursor, testnet
 
 > **Why npx?** Using `npx @aibtc/mcp-server@latest` ensures you always get the newest version automatically. Global installs (`npm install -g`) won't auto-update.
 
+### Tool Profiles
+
+Every tool definition is loaded into the model's context, so `--install` writes `AIBTC_TOOLS=core`: a lean core of 25 tools: wallet (including `wallet_rotate_password`), balances, STX/BTC/sBTC transfers, x402 (`list_x402_endpoints`, `probe_x402_endpoint`, `execute_x402_endpoint`) and earning (`earning_opportunities`, `bounty_list/get/submit`, `identity_register`).
+
+Add groups with `AIBTC_TOOLS=core,defi,ordinals` in the server's `env` (the core is always included), or load everything with `AIBTC_TOOLS=all` / `--profile full`. If `AIBTC_TOOLS` is not set at all, every tool is loaded, so configs written by earlier versions keep all their tools:
+
+```bash
+npx @aibtc/mcp-server@latest --install --profile full   # writes AIBTC_TOOLS=all
+```
+
+| Group | Tools |
+|-------|-------|
+| `wallet` | Wallet management extras, encrypted credential store |
+| `stacks` | Stacks transactions, contracts, tokens, NFTs, chain queries, nonce tools |
+| `sbtc` | sBTC deposit/withdraw, Styx BTC→sBTC |
+| `bitcoin` | Bitcoin L1 UTXOs, mempool watch |
+| `lightning` | Lightning (Spark) wallet and L402 payments |
+| `stacking` | PoX stacking, dual stacking, StackSpot |
+| `defi` | ALEX, Zest, Bitflow, Jingswap, yield hunter/dashboard, Tenero analytics |
+| `pillar` | Pillar smart wallet |
+| `ordinals` | Inscriptions, runes, PSBT, ordinals marketplace/P2P, taproot multisig |
+| `bns` | BNS names |
+| `identity` | ERC-8004 identity and reputation, message signing |
+| `social` | Nostr, AIBTC inbox |
+| `earn` | Bounty board (create, accept, pay, my views) |
+| `legion` | AIBTC News Legion |
+| `markets` | Stacks prediction market, At Stake |
+| `dev` | Scaffolding, OpenRouter, settings, inference marketplace, arXiv |
+
+The server's instructions list the groups that are off, so the agent can tell you which one to enable. The OpenRouter `bridge` starts from the full set and narrows it with its own `--read-only`/`--allow`/`--block` flags.
+
 ### Manual Configuration
 
 If you prefer to configure manually, add the following to your client's config file. The `-y` flag stops npx from prompting for confirmation.
@@ -181,7 +214,7 @@ NETWORK = "mainnet"
 
 ## Giving Claude a Wallet
 
-When you first use @aibtc/mcp-server, Claude doesn't have a wallet. Here's the smooth onboarding flow:
+`--install` creates a wallet for you (see [Quick Start](#quick-start)). If you installed with `--no-wallet`, configured the client by hand, or want another wallet, the agent can create or import one:
 
 ### Example Conversation
 
@@ -547,7 +580,7 @@ Or use any SIP-010 token by contract ID: `SP2X...::token-name`
 | Environment Variable | Description | Default |
 |---------------------|-------------|---------|
 | `NETWORK` | `mainnet` or `testnet` | `mainnet` |
-| `API_URL` | Default x402 API base URL | `https://x402.biwas.xyz` |
+| `AIBTC_TOOLS` | `core`, `core,<group,...>`, or `all` (see [Tool Profiles](#tool-profiles)). `--install` writes `core` | all tools when unset |
 | `CLIENT_MNEMONIC` | (Optional) Pre-configured mnemonic | - |
 | `HIRO_API_KEY` | (Optional) Hiro API key for higher rate limits | - |
 | `SPEND_LIMIT_ENABLED` | Set `false` to disable the wallet spending limit | `true` |

package/dist/bridge/index.js

@@ -27,8 +27,8 @@
  *   --network <net>        mainnet|testnet for the spawned server (default mainnet)
  *   --max-turns <n>        tool-call loop cap (default 10)
  */
-import { Client } from "@modelcontextprotocol/sdk/client/index.js";
-import { StdioClientTransport } from "@modelcontextprotocol/sdk/client/stdio.js";
+import { StdioClientTransport } from "@modelcontextprotocol/client/stdio";
+import { Client } from "@modelcontextprotocol/client";
 import { STATIC_ENDPOINTS } from "../endpoints/registry.js";
 const OPENROUTER_URL = "https://openrouter.ai/api/v1/chat/completions";
 const DEFAULT_MODEL = "anthropic/claude-3.5-haiku";

package/dist/config/networks.js

@@ -1,5 +1,8 @@
 export const NETWORK = process.env.NETWORK === "testnet" ? "testnet" : "mainnet";
-export const API_URL = process.env.API_URL || "https://x402.biwas.xyz";
+// Base URL for bare-path x402 calls. Fixed per network, not read from the
+// environment: the server loads the .env of whatever directory the client
+// starts it in, and a project's generic API_URL must not redirect payments.
+export const API_URL = NETWORK === "mainnet" ? "https://x402.aibtc.com" : "https://x402.aibtc.dev";
 export function getStacksNetwork(network) {
     return network === "mainnet" ? "mainnet" : "testnet";
 }

package/dist/index.d.ts

@@ -1,3 +1,3 @@
 #!/usr/bin/env node
-import "dotenv/config";
+export {};
 //# sourceMappingURL=index.d.ts.map

package/dist/index.js

@@ -1,16 +1,19 @@
 #!/usr/bin/env node
-import "dotenv/config";
 import fs from "fs/promises";
 import path from "path";
 import os from "os";
 import { createRequire } from "module";
-import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
-import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { randomBytes } from "crypto";
+import { serveStdio } from "@modelcontextprotocol/server/stdio";
+import { McpServer } from "@modelcontextprotocol/server";
 import { registerAllTools } from "./tools/index.js";
+import { describeSelection, resolveToolSelection } from "./tools/profiles.js";
 import { installBountyHint } from "./tools/bounty-hint.js";
 import { NETWORK, API_URL } from "./config/index.js";
 import { redactSensitive } from "./utils/redact.js";
 import { initializeStorage } from "./utils/storage.js";
+import { getWalletManager } from "./services/wallet-manager.js";
+import { getLightningManager } from "./services/lightning-manager.js";
 const require = createRequire(import.meta.url);
 const packageJson = require("../package.json");
 // =============================================================================
@@ -64,30 +67,30 @@ async function writeJsonConfig(filePath, config) {
     await fs.writeFile(filePath, JSON.stringify(config, null, 2));
 }
 // Standard MCP server entry shared by every JSON-based client config.
-function serverEntry(network) {
+function serverEntry(env) {
     return {
         command: "npx",
         args: ["-y", SERVER_NPM],
-        env: { NETWORK: network },
+        env,
     };
 }
 // Most clients (Claude Code, Claude Desktop, Cursor, Windsurf, Gemini CLI) use
 // the same `{ "mcpServers": { "aibtc": {...} } }` JSON shape.
-async function writeMcpServersJson(configPath, network) {
+async function writeMcpServersJson(configPath, env) {
     const config = await readJsonConfig(configPath);
     const servers = (config.mcpServers ??= {});
-    servers["aibtc"] = serverEntry(network);
+    servers["aibtc"] = serverEntry(env);
     await writeJsonConfig(configPath, config);
 }
 // VS Code (.vscode/mcp.json) uses a `servers` key and a typed stdio entry.
-async function writeVsCodeJson(configPath, network) {
+async function writeVsCodeJson(configPath, env) {
     const config = await readJsonConfig(configPath);
     const servers = (config.servers ??= {});
     servers["aibtc"] = {
         type: "stdio",
         command: "npx",
         args: ["-y", SERVER_NPM],
-        env: { NETWORK: network },
+        env,
     };
     await writeJsonConfig(configPath, config);
 }
@@ -106,7 +109,7 @@ function stripCodexSection(content) {
     }
     return out.join("\n");
 }
-async function writeCodexToml(configPath, network) {
+async function writeCodexToml(configPath, env) {
     let existing = "";
     try {
         existing = await fs.readFile(configPath, "utf8");
@@ -123,7 +126,7 @@ async function writeCodexToml(configPath, network) {
         `args = ["-y", "${SERVER_NPM}"]`,
         "",
         "[mcp_servers.aibtc.env]",
-        `NETWORK = "${network}"`,
+        ...Object.entries(env).map(([key, value]) => `${key} = "${value}"`),
     ].join("\n");
     const content = (preserved ? `${preserved}\n\n` : "") + block + "\n";
     await fs.mkdir(path.dirname(configPath), { recursive: true });
@@ -188,23 +191,86 @@ function resolveInstallTarget() {
     // Default to the entry explicitly marked as default (flag === null) — Claude Code.
     return matched[0] ?? INSTALL_TARGETS.find((t) => t.flag === null);
 }
+/**
+ * Create the agent's wallet during install so a fresh user can fund it right
+ * away. The generated password and the mnemonic are printed once and not
+ * stored in plain text; the password can be changed with wallet_rotate_password.
+ * Returns the Stacks address of the new or already-existing wallet.
+ */
+async function ensureInstallWallet(network) {
+    await initializeStorage();
+    const walletManager = getWalletManager();
+    const existing = (await walletManager.listWallets()).find((w) => w.network === network);
+    if (existing) {
+        console.log(`\n👛 Existing ${network} wallet kept: ${existing.name} (${existing.address})`);
+        return existing.address;
+    }
+    const password = randomBytes(18).toString("base64url");
+    const wallet = await walletManager.createWallet("main", password, network);
+    // Print the credentials before anything else can fail: the wallet is already
+    // on disk, and without the password it can never be unlocked.
+    console.log(`\n👛 Wallet created (${network}), stored encrypted in ~/.aibtc/`);
+    console.log(`   Stacks:    ${wallet.address}`);
+    if (wallet.btcAddress)
+        console.log(`   Bitcoin:   ${wallet.btcAddress}`);
+    console.log(`\n   Password:  ${password}`);
+    console.log(`   Mnemonic:  ${wallet.mnemonic}`);
+    console.log("\n⚠️  Write both down now. They are shown once and the password is not saved anywhere.");
+    console.log("   The password unlocks the wallet; change it any time by asking your agent to rotate it.");
+    console.log("   The mnemonic is the only way to recover the wallet and its funds.");
+    // Same unified setup as wallet_create: a Lightning wallet derived from the
+    // same mnemonic (mainnet only). Its failure is reported, the main wallet stands.
+    try {
+        const lightning = await getLightningManager().setupFromMainMnemonic(wallet.mnemonic, password, "main", network);
+        if (lightning.kind === "setup") {
+            console.log(`   Lightning: ${lightning.depositAddress} (deposit address, same mnemonic)`);
+        }
+    }
+    catch (error) {
+        console.error(`   Lightning setup failed: ${redactSensitive(error instanceof Error ? error.message : String(error))}. ` +
+            "Ask your agent to run lightning_create later.");
+    }
+    return wallet.address;
+}
 async function runInstall() {
     const network = process.argv.includes("--testnet") ? "testnet" : "mainnet";
+    // Only --profile full installs everything; resolving against AIBTC_TOOLS=core
+    // also validates the flag.
+    const fullProfile = resolveToolSelection(process.argv, { AIBTC_TOOLS: "core" }).all;
     const target = resolveInstallTarget();
     const configPath = target.configPath();
     console.log(`🔧 Installing @aibtc/mcp-server to ${target.label}...\n`);
-    await target.write(configPath, network);
+    const env = { NETWORK: network };
+    env.AIBTC_TOOLS = fullProfile ? "all" : "core";
+    await target.write(configPath, env);
     console.log("✅ Successfully installed!\n");
     console.log(`   Client:  ${target.label}`);
     console.log(`   Config:  ${configPath}`);
     console.log(`   Network: ${network}`);
-    console.log("\n📋 Next steps:");
-    console.log(`   1. ${target.restart}`);
-    console.log("   2. Ask the agent: \"What's your wallet address?\"");
-    console.log("   3. The agent will guide you through wallet setup\n");
-    if (network === "testnet") {
-        console.log("💡 Tip: Get testnet STX at https://explorer.hiro.so/sandbox/faucet?chain=testnet\n");
+    console.log(`   Tools:   ${fullProfile ? "all" : "lean core (set AIBTC_TOOLS=core,defi,ordinals,... in the env, or re-run with --profile full)"}`);
+    // The wallet's password and mnemonic are printed once, so only create it when
+    // a person is reading the terminal, never into a pipe, file or CI log.
+    let address = null;
+    if (process.argv.includes("--no-wallet")) {
+        // Explicitly skipped
+    }
+    else if (!process.stdout.isTTY) {
+        console.log("\n👛 Wallet not created: output is not a terminal, and the password and mnemonic");
+        console.log("   are only ever printed to one. Re-run --install in a terminal, or ask the agent to create one.");
+    }
+    else {
+        address = await ensureInstallWallet(network);
     }
+    console.log(`\n📋 ${target.restart}, then try:`);
+    const fund = network === "testnet"
+        ? "testnet STX from https://explorer.hiro.so/sandbox/faucet?chain=testnet"
+        : "0.01 STX";
+    console.log(address
+        ? `   1. Send ${fund} to ${address}`
+        : `   1. Ask your agent: "What's your wallet address?" and send it ${fund}`);
+    console.log(`   2. Ask your agent: "Unlock my wallet" and give it the password`);
+    const x402Host = network === "testnet" ? "x402.aibtc.dev" : "x402.aibtc.com";
+    console.log(`   3. Ask it: "Make a paid inference call on ${x402Host}" (0.001 STX per call)\n`);
 }
 // =============================================================================
 // YIELD HUNTER DAEMON
@@ -251,36 +317,45 @@ else if (process.argv.includes("--install") || process.argv.includes("install"))
 }
 else {
     // Normal MCP server mode
-    const server = new McpServer({
-        name: "aibtc-mcp-server",
-        version: packageJson.version,
-    }, {
-        instructions: [
-            "This server lets an agent earn and move real Bitcoin/sBTC on Stacks.",
-            "",
-            "Hunt bounties. The most direct way to earn here is the sBTC bounty board:",
-            "call bounty_list to see open bounties, bounty_get for the task detail, do",
-            "the work, then bounty_submit your deliverable. Accepted submissions are paid",
-            "in sBTC. Check periodically for new open bounties.",
-            "",
-            "For the full menu of ways to put assets to work (stacking, DeFi yield,",
-            "trading, paid endpoints), call earning_opportunities. Submitting to a bounty",
-            "requires a Registered (L1+) on-chain identity — see identity_register.",
-        ].join("\n"),
-    });
-    // Append a bounty-board hint to spend/onboarding-tool output.
-    // Must wrap registerTool before registration; restore it after.
-    const restoreBountyHint = installBountyHint(server);
-    // Register all tools from the modular registry
-    registerAllTools(server);
-    restoreBountyHint();
+    // One instance per connection. serveStdio picks the protocol era from the
+    // opening message (2025-era `initialize` or a 2026-07-28 envelope) and pins
+    // the instance built by this factory to the connection.
+    function createServer(toolSelection) {
+        const server = new McpServer({
+            name: "aibtc-mcp-server",
+            version: packageJson.version,
+        }, {
+            instructions: [
+                "This server lets an agent earn and move real Bitcoin/sBTC on Stacks.",
+                "",
+                "Hunt bounties. The most direct way to earn here is the sBTC bounty board:",
+                "call bounty_list to see open bounties, bounty_get for the task detail, do",
+                "the work, then bounty_submit your deliverable. Accepted submissions are paid",
+                "in sBTC. Check periodically for new open bounties.",
+                "",
+                "For the full menu of ways to put assets to work (stacking, DeFi yield,",
+                "trading, paid endpoints), call earning_opportunities. Submitting to a bounty",
+                "requires a Registered (L1+) on-chain identity — see identity_register.",
+                "",
+                describeSelection(toolSelection),
+            ].join("\n"),
+        });
+        // Append a bounty-board hint to spend/onboarding-tool output.
+        // Must wrap registerTool before registration; restore it after.
+        const restoreBountyHint = installBountyHint(server);
+        // Register all tools from the modular registry
+        registerAllTools(server, toolSelection);
+        restoreBountyHint();
+        return server;
+    }
     async function main() {
+        const toolSelection = resolveToolSelection();
         await initializeStorage();
-        const transport = new StdioServerTransport();
-        await server.connect(transport);
+        serveStdio(() => createServer(toolSelection), { onerror: (error) => console.error("MCP error:", redactSensitive(String(error))) });
         console.error("aibtc-mcp-server running on stdio");
         console.error(`Network: ${NETWORK}`);
         console.error(`API URL: ${API_URL}`);
+        console.error(`Tools: ${toolSelection.all ? "all" : ["core", ...toolSelection.groups].join(", ")}`);
     }
     main().catch((error) => {
         console.error("Fatal error:", redactSensitive(String(error)));

package/dist/tools/arxiv-research.tools.d.ts

@@ -11,6 +11,6 @@
  *
  * Mirrors the arxiv-research skill (aibtcdev/skills/arxiv-research/).
  */
-import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { McpServer } from "@modelcontextprotocol/server";
 export declare function registerArxivResearchTools(server: McpServer): void;
 //# sourceMappingURL=arxiv-research.tools.d.ts.map

package/dist/tools/arxiv-research.tools.js

@@ -189,7 +189,7 @@ Each paper includes title, authors (first 3), truncated abstract, arXiv link,
 relevance score, and topic tags.
 
 Read-only. No API key required.`,
-        inputSchema: {
+        inputSchema: z.object({
             categories: z
                 .string()
                 .optional()
@@ -205,7 +205,7 @@ Read-only. No API key required.`,
                 .min(0)
                 .optional()
                 .describe("Minimum relevance score for results. Default: 3. Set to 0 to include all fetched papers."),
-        },
+        }),
     }, async ({ categories, max_results, min_score }) => {
         try {
             const cats = categories
@@ -260,7 +260,7 @@ disk — use the arxiv-research skill (bun run arxiv-research/arxiv-research.ts
 to write timestamped digest files to ~/.aibtc/arxiv-research/digests/.
 
 Read-only. No API key required.`,
-        inputSchema: {
+        inputSchema: z.object({
             categories: z
                 .string()
                 .optional()
@@ -280,7 +280,7 @@ Read-only. No API key required.`,
                 .min(0)
                 .optional()
                 .describe("Minimum relevance score for digest inclusion. Default: 3"),
-        },
+        }),
     }, async ({ categories, max_results, date, min_score }) => {
         try {
             const cats = categories
@@ -387,14 +387,14 @@ Digests are NOT created by arxiv_compile_digest (which returns Markdown inline).
 Use the skill CLI to persist digests to disk.
 
 Read-only.`,
-        inputSchema: {
+        inputSchema: z.object({
             limit: z
                 .number()
                 .min(1)
                 .max(50)
                 .optional()
                 .describe("Maximum entries to show. Default: 10"),
-        },
+        }),
     }, async ({ limit }) => {
         try {
             const maxEntries = limit ?? 10;

package/dist/tools/at-stake-legion.tools.d.ts

@@ -26,6 +26,6 @@
  * These govern the El Salvador market's two sides. Same word, different
  * contracts, different way of getting a vote.
  */
-import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { McpServer } from "@modelcontextprotocol/server";
 export declare function registerAtStakeLegionTools(server: McpServer): void;
 //# sourceMappingURL=at-stake-legion.tools.d.ts.map

package/dist/tools/at-stake-legion.tools.js

@@ -81,13 +81,13 @@ export function registerAtStakeLegionTools(server) {
             "shares with atstake_mint_complete_set.\n\n" +
             "Read-only. Defaults to the unlocked wallet, which requires one; pass an address " +
             "to read anyone without unlocking.",
-        inputSchema: {
+        inputSchema: z.object({
             side: SIDE_ARG,
             address: z
                 .string()
                 .optional()
                 .describe("Whose eligibility to report. Defaults to the unlocked wallet."),
-        },
+        }),
     }, async ({ side, address }) => {
         try {
             const chosen = resolveSide(side);
@@ -175,7 +175,7 @@ export function registerAtStakeLegionTools(server) {
             "detail and the conclude forecast come from atstake_legion_get_proposal, which " +
             "reads the chain directly.\n\n" +
             "Read-only, no wallet needed.",
-        inputSchema: {
+        inputSchema: z.object({
             side: z
                 .enum(["yes", "no", "bonded", "idle", "both"])
                 .optional()
@@ -186,7 +186,7 @@ export function registerAtStakeLegionTools(server) {
                 .optional()
                 .describe('Only proposals in this phase: "voting", "concludable", "passed", ' +
                 '"failed", "expired", "pending".'),
-        },
+        }),
     }, async ({ side, phase }) => {
         try {
             const response = await fetch(AT_STAKE_API);
@@ -257,10 +257,10 @@ export function registerAtStakeLegionTools(server) {
             "this is a forecast, not a promise — but it is the forecast that tells you " +
             "whether a conclude is worth the gas.\n\n" +
             "Read-only, no wallet needed.",
-        inputSchema: {
+        inputSchema: z.object({
             side: SIDE_ARG,
             proposal_id: z.number().int().positive().describe("The proposal id."),
-        },
+        }),
     }, async ({ side, proposal_id }) => {
         try {
             const chosen = resolveSide(side);
@@ -340,7 +340,7 @@ export function registerAtStakeLegionTools(server) {
             "legion-wide interval between proposals. Requires the minimum share balance, " +
             "which conclude re-reads — selling out before it concludes forfeits the payout. " +
             "All three fields are ASCII-only. Requires an unlocked wallet.",
-        inputSchema: {
+        inputSchema: z.object({
             side: SIDE_ARG,
             title: z
                 .string()
@@ -353,7 +353,7 @@ export function registerAtStakeLegionTools(server) {
                 .string()
                 .describe(`Public URL a voter can reproduce the claim from. ASCII, max ` +
                 `${MAX_LINK_LENGTH} characters.`),
-        },
+        }),
     }, async ({ side, title, description, link }) => {
         try {
             const chosen = resolveSide(side);
@@ -452,7 +452,7 @@ export function registerAtStakeLegionTools(server) {
             "State what you checked, not that you agree. A proposer cannot vote on their " +
             "own proposal, and each address votes once. Voting opens two blocks after " +
             "propose. Requires the minimum share balance and an unlocked wallet.",
-        inputSchema: {
+        inputSchema: z.object({
             side: SIDE_ARG,
             proposal_id: z.number().int().positive().describe("The proposal id."),
             support: z
@@ -462,7 +462,7 @@ export function registerAtStakeLegionTools(server) {
                 .string()
                 .describe(`Why, in your own words — what you checked and what you found. ASCII, max ` +
                 `${MAX_RATIONALE_LENGTH} characters. Permanent and public.`),
-        },
+        }),
     }, async ({ side, proposal_id, support, rationale }) => {
         try {
             const chosen = resolveSide(side);
@@ -551,10 +551,10 @@ export function registerAtStakeLegionTools(server) {
             "The payout is shares of the proposer's own side while the market trades, and " +
             "an sBTC credit once it has resolved. The caller pays gas and receives nothing.\n\n" +
             "Requires an unlocked wallet.",
-        inputSchema: {
+        inputSchema: z.object({
             side: SIDE_ARG,
             proposal_id: z.number().int().positive().describe("The proposal id."),
-        },
+        }),
     }, async ({ side, proposal_id }) => {
         try {
             const chosen = resolveSide(side);
@@ -643,7 +643,7 @@ export function registerAtStakeLegionTools(server) {
             "Permissionless, once-only, and callable only after the market resolves and all " +
             "live proposals have settled. Pays the caller nothing. Requires an unlocked " +
             "wallet.",
-        inputSchema: { side: SIDE_ARG },
+        inputSchema: z.object({ side: SIDE_ARG }),
     }, async ({ side }) => {
         try {
             const chosen = resolveSide(side);
@@ -711,7 +711,7 @@ export function registerAtStakeLegionTools(server) {
             "pays out in claim order until it runs dry, and the unpaid remainder stays on " +
             "your credit.\n\n" +
             "Requires an unlocked wallet.",
-        inputSchema: { side: SIDE_ARG },
+        inputSchema: z.object({ side: SIDE_ARG }),
     }, async ({ side }) => {
         try {
             const chosen = resolveSide(side);

package/dist/tools/at-stake.tools.d.ts

@@ -24,6 +24,6 @@
  * and building one belongs in a prover, not in an MCP argument list. The
  * permissionless NO settlement, `resolve-idle`, takes no arguments and is here.
  */
-import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { McpServer } from "@modelcontextprotocol/server";
 export declare function registerAtStakeTools(server: McpServer): void;
 //# sourceMappingURL=at-stake.tools.d.ts.map