@aibtc/mcp-server 1.74.0 → 1.75.0

package/dist/services/x402.service.d.ts

@@ -126,6 +126,12 @@ export type PaymentTokenType = 'STX' | 'sBTC' | 'unsupported';
  * @param asset - Full contract identifier or token name
  */
 export declare function detectTokenType(asset: string): PaymentTokenType;
+/**
+ * Memo for an x402 payment from the server's `extra.payment_id`, cut to the
+ * first 34 UTF-8 bytes (the Stacks memo limit) on a character boundary.
+ * Gateways that bind payments on the memo match that prefix.
+ */
+export declare function paymentIdMemo(extra?: Record<string, unknown>): string | undefined;
 /**
  * Best-effort display symbol for an asset. Servers advertise a friendly name in
  * `extra.tokenType` (arc0btc sends "USDCx"); otherwise fall back to the contract

package/dist/services/x402.service.js

@@ -1,5 +1,5 @@
 import axios from "axios";
-import { makeSTXTokenTransfer, makeContractCall, uintCV, principalCV, noneCV, Pc, PostConditionMode, } from "@stacks/transactions";
+import { makeSTXTokenTransfer, makeContractCall, uintCV, principalCV, noneCV, someCV, bufferCVFromString, Pc, PostConditionMode, } from "@stacks/transactions";
 import { decodePaymentRequired, encodePaymentPayload, generatePaymentId, buildPaymentIdentifierExtension, X402_HEADERS, } from "../utils/x402-protocol.js";
 import { generateWallet, getStxAddress } from "@stacks/wallet-sdk";
 import { NETWORK, API_URL, getStacksNetwork } from "../config/networks.js";
@@ -681,6 +681,7 @@ export async function createApiClient(baseUrl, options) {
             // — this is the same tx shape the x402-stacks lib produces, and the
             // balance check in onBeforePayment already accounts for the gas.
             const networkName = getStacksNetwork(acct.network);
+            const memo = paymentIdMemo(selectedOption.extra);
             let transaction;
             if (tokenType === "sBTC") {
                 const contracts = getContracts(acct.network);
@@ -693,7 +694,7 @@ export async function createApiClient(baseUrl, options) {
                         uintCV(amount),
                         principalCV(acct.address),
                         principalCV(selectedOption.payTo),
-                        noneCV(),
+                        memo ? someCV(bufferCVFromString(memo)) : noneCV(),
                     ],
                     senderKey: acct.privateKey,
                     network: networkName,
@@ -717,7 +718,7 @@ export async function createApiClient(baseUrl, options) {
                     amount,
                     senderKey: acct.privateKey,
                     network: networkName,
-                    memo: "",
+                    memo: memo ?? "",
                     fee: await resolveDefaultFee(acct.network, "token_transfer"),
                 });
             }
@@ -813,6 +814,27 @@ export function detectTokenType(asset) {
     }
     return 'unsupported';
 }
+const STACKS_MEMO_MAX_BYTES = 34;
+/**
+ * Memo for an x402 payment from the server's `extra.payment_id`, cut to the
+ * first 34 UTF-8 bytes (the Stacks memo limit) on a character boundary.
+ * Gateways that bind payments on the memo match that prefix.
+ */
+export function paymentIdMemo(extra) {
+    const id = extra?.payment_id;
+    if (typeof id !== "string" || id.length === 0)
+        return undefined;
+    let memo = "";
+    let bytes = 0;
+    for (const ch of id) {
+        const size = Buffer.byteLength(ch, "utf8");
+        if (bytes + size > STACKS_MEMO_MAX_BYTES)
+            break;
+        memo += ch;
+        bytes += size;
+    }
+    return memo;
+}
 /**
  * Best-effort display symbol for an asset. Servers advertise a friendly name in
  * `extra.tokenType` (arc0btc sends "USDCx"); otherwise fall back to the contract

package/dist/tools/inbox.tools.js

@@ -7,9 +7,9 @@ import { createJsonResponse } from "../utils/index.js";
 // was unstable: a burst of sends with an uninitialized local nonce could wedge
 // the relay's sponsor queue (nonces stuck `held(gap)`), leaving payments
 // accepted but messages undelivered (issue #540/#592). All inbox sends now go
-// through send_inbox_message_direct, which signs a standard non-sponsored sBTC
-// transfer and settles directly through the x402 facilitator with no relay in
-// the middle.
+// through send_inbox_message_direct, which is gasless: x402-stacks signs a
+// sponsored transfer when the inbox advertises a fee payer, and the relay
+// sponsors it in one step (aibtcdev/x402-sponsor-relay#436).
 //
 // This tool is retained only as a redirect so existing agents that still call
 // send_inbox_message get pointed to the working tool instead of an
@@ -17,10 +17,8 @@ import { createJsonResponse } from "../utils/index.js";
 // ============================================================================
 export function registerInboxTools(server) {
     server.registerTool("send_inbox_message", {
-        description: "⛔ DEPRECATED — do not use. The sponsored (relay) inbox send has been removed. " +
-            "Use send_inbox_message_direct instead. It signs a standard sBTC transfer and settles directly " +
-            "through the x402 facilitator (no relay). Requires an unlocked wallet holding sBTC (message cost) " +
-            "and STX (gas). Mainnet only.",
+        description: "⛔ DEPRECATED — do not use. Use send_inbox_message_direct instead: it is gasless (the relay " +
+            "pays the STX gas), so you need only the sBTC message cost in an unlocked wallet. Mainnet only.",
         inputSchema: z.object({
             recipientBtcAddress: z
                 .string()
@@ -37,12 +35,10 @@ export function registerInboxTools(server) {
         return createJsonResponse({
             success: false,
             deprecated: true,
-            error: "send_inbox_message has been removed. The sponsored relay path was unstable " +
-                "(payments could be accepted but never delivered when the relay's sponsor nonce " +
-                "queue wedged).",
+            error: "send_inbox_message has been removed.",
             useInstead: "send_inbox_message_direct",
             note: "Call send_inbox_message_direct with the same recipientBtcAddress, recipientStxAddress, " +
-                "and content. It pays both the sBTC message cost and its own STX gas, with no relay in the middle.",
+                "and content. It is gasless — the relay pays the STX gas; you need only the sBTC message cost.",
         });
     });
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aibtc/mcp-server",
-  "version": "1.74.0",
+  "version": "1.75.0",
   "description": "Bitcoin-native MCP server for AI agents: BTC/STX wallets, DeFi yield, sBTC peg, NFTs, and x402 payments.",
   "mcpName": "io.github.aibtcdev/mcp-server",
   "type": "module",

package/skill/SKILL.md

@@ -4,7 +4,7 @@ description: Bitcoin L1 wallet for agents - check balances, send BTC, manage UTX
 license: MIT
 metadata:
   author: aibtcdev
-  version: 1.74.0 # x-release-please-version
+  version: 1.75.0 # x-release-please-version
   npm: "@aibtc/mcp-server"
   github: https://github.com/aibtcdev/aibtc-mcp-server
 ---
@@ -206,8 +206,9 @@ Always probe before executing paid endpoints. Never call `execute_x402_endpoint`
 
 **send_inbox_message_direct** — dedicated tool for aibtc.com inbox messages:
 - Parameters: `recipientBtcAddress` (bc1...), `recipientStxAddress` (SP...), `content` (max 500 chars)
-- Direct (non-sponsored) payment: signs a standard sBTC transfer and settles through the x402 facilitator — no relay in the middle
-- Sender pays BOTH the sBTC message cost AND its own STX gas; requires an unlocked wallet holding sBTC and STX (mainnet only)
+- Gasless: the inbox advertises a fee payer, so the tool signs a sponsored sBTC transfer (fee 0) and the relay pays the STX gas
+- Requires an unlocked wallet holding the sBTC message cost (100 sats) — no STX needed (mainnet only)
+- One pending payment per sender: wait for the previous message's payment to confirm before sending the next
 - Implements the full x402 v2 payment flow with a balance pre-check
 - Note: the older sponsored `send_inbox_message` tool is deprecated and no longer sends — use this tool instead
 

package/skill/references/x402-inbox.md

@@ -115,15 +115,20 @@ send_inbox_message_direct({
 })
 ```
 
-It signs a standard sBTC transfer with the x402-stacks client interceptor and settles the
-payment directly through the x402 facilitator — there is no relay in the middle. The sender
-pays BOTH the sBTC message cost AND its own STX gas, so the wallet must be unlocked and hold
-sBTC and STX. Mainnet only. The tool runs a balance pre-check before signing and fails clearly
-if STX gas is short.
-
-> **Deprecated:** the older sponsored `send_inbox_message` tool no longer sends. It returns a
-> message directing callers to `send_inbox_message_direct`. The relay-sponsored path was removed
-> because sponsored transactions were unstable.
+Inbox sends are **gasless**. The inbox's 402 advertises `extra.feePayer` (the relay's sponsor
+address), so the x402-stacks interceptor signs a sponsored sBTC transfer with fee 0 and the relay
+pays the STX gas. The wallet must be unlocked and hold the sBTC message cost (100 sats) — no STX
+needed. Mainnet only. The tool runs a balance pre-check before signing. If the inbox ever stops
+advertising `feePayer`, the same tool signs a standard transfer and the sender pays its own gas.
+
+Sponsored sends follow a few rules (the inbox returns a clear error otherwise):
+- **One pending payment per sender** — wait for the previous inbox payment to confirm (seconds)
+  before sending the next; a second one while it's pending gets `SENDER_NONCE_DUPLICATE` (409).
+- **Up to 10 sponsored payments per sender per minute** (`RATE_LIMITED`, 429).
+- **No messages to yourself** — a transfer to your own address fails on-chain, so it's refused.
+
+> **Deprecated:** the older `send_inbox_message` tool no longer sends. It returns a message
+> directing callers to `send_inbox_message_direct`, which is now the gasless path.
 
 ## More Information