@purplesquirrel/hedera-mcp 0.1.0

package/CHANGELOG.md

@@ -0,0 +1,14 @@
+# Changelog
+
+## 0.1.0
+
+Initial release — comprehensive build-only MCP server for Hedera (Hashgraph).
+
+- 51 tools across Account, Token (HTS), Consensus (HCS), Smart Contract (EVM), File, Schedule, and Network services.
+- Keyless reads via the Mirror Node REST API.
+- Build-only writes: transactions are frozen and returned as unsigned base64 for offline signing. The server never holds keys or executes.
+- `hedera_decode_transaction` for reviewing built transactions before signing.
+- Supports mainnet / testnet / previewnet via `HEDERA_NETWORK`.
+- Verified: `tsc` clean against `@hashgraph/sdk` 2.81.0; MCP stdio smoke test passes (live testnet Mirror Node read + build-only write round-trip).
+- **Live execution verified on testnet:** build-only output signed externally and submitted — `create_topic` and `submit_message` both `SUCCESS`, confirmed independently via Mirror Node. The server held no key at any point.
+- Added `gen-key.mjs` (throwaway ECDSA keypair → `.env`) and `resolve-account.mjs` (resolve auto-created account id from a faucet-funded EVM address) for reproducible verification.

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Matthew Karsten
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,127 @@
+# hedera-mcp
+
+![hedera-mcp](./logo.svg)
+
+**Comprehensive Model Context Protocol server for Hedera (Hashgraph).** Full coverage of every core Hedera service — Account, Token (HTS), Consensus (HCS), Smart Contract (EVM), File, Schedule, and Network — exposed as **51 MCP tools** any AI agent (Claude, Cursor, etc.) can call.
+
+> **Build-only. Never holds keys.** Reads hit the public Mirror Node REST API (no auth). Writes return an *unsigned, frozen* transaction (base64) for you to sign and submit with your own wallet/SDK/CLI. This server never sees a private key and never executes anything.
+
+---
+
+## Why this exists
+
+The official Hedera Agent Kit ships a preconfigured MCP server, but its tool surface is intentionally small (balance, transfer, deploy). This server fills the gap with **end-to-end coverage** of the Hedera API, organized for developer education and agent-driven onboarding — so a developer can go from "certified" to "shipping their first HTS token / HCS topic / contract" inside a single AI session.
+
+| Service | Official starter MCP | **hedera-mcp** |
+|---|---|---|
+| Account | balance | create, transfer, update, delete, allowances, info, balances, NFTs |
+| Token (HTS) | transfer, deploy | create FT/NFT, mint, burn, transfer, associate, freeze, KYC, pause, wipe, delete, info |
+| Consensus (HCS) | — | create/update/delete topic, submit + read messages |
+| Smart contract | — | deploy, execute, eth_call read, info |
+| File | — | create, append, delete, info |
+| Schedule | — | create, sign, delete, info |
+| Network | — | tx lookup, nodes, fees, supply, exchange rate, decode |
+
+## Security model
+
+- **Reads** → public Mirror Node REST. No keys, no account required.
+- **Writes** → the tool constructs the transaction, freezes it for offline signing, and returns base64 bytes plus a human summary. You inspect it (`hedera_decode_transaction`), then sign and submit yourself.
+- The only optional environment input is `HEDERA_OPERATOR_ID` — an **account id**, used as the default payer/treasury when building. Never a key.
+
+This mirrors the posture of [goat-network-mcp](https://github.com/ExpertVagabond/goat-network-mcp): safe to run anywhere, safe to give to an autonomous agent.
+
+## Install
+
+```bash
+npm install
+npm run build
+```
+
+## Configure (Claude Desktop / Claude Code)
+
+```json
+{
+  "mcpServers": {
+    "hedera": {
+      "command": "node",
+      "args": ["/absolute/path/to/hedera-mcp/dist/index.js"],
+      "env": {
+        "HEDERA_NETWORK": "testnet",
+        "HEDERA_OPERATOR_ID": "0.0.1234"
+      }
+    }
+  }
+}
+```
+
+| Env var | Default | Notes |
+|---|---|---|
+| `HEDERA_NETWORK` | `testnet` | `mainnet` \| `testnet` \| `previewnet` |
+| `HEDERA_OPERATOR_ID` | _(unset)_ | Optional default payer/treasury **account id** (not a key) |
+| `HEDERA_MIRROR_URL` | per-network | Override Mirror Node REST base (e.g. a private/HGraph node) |
+
+## Build-only workflow
+
+```
+agent calls hedera_create_fungible_token
+        │
+        ▼
+hedera-mcp builds + freezes the TokenCreateTransaction
+        │
+        ▼
+returns base64 (unsigned)  ──►  you sign in HashPack / SDK / CLI  ──►  submit to Hedera
+```
+
+Inspect anything before signing:
+
+```
+hedera_decode_transaction { transactionBase64: "<bytes>" }
+→ { type: "TokenCreateTransaction", transactionId, nodeAccountIds, maxTransactionFee, ... }
+```
+
+## Tool catalog (51)
+
+**Account (8):** create_account · transfer_hbar · update_account · delete_account · approve_hbar_allowance · get_account_info · get_account_balance · get_account_nfts
+
+**Token / HTS (18):** create_fungible_token · create_nft_collection · mint_fungible · mint_nft · burn_token · transfer_token · transfer_nft · associate_token · dissociate_token · freeze_token_account · unfreeze_token_account · grant_kyc · revoke_kyc · pause_token · unpause_token · wipe_token · delete_token · get_token_info · get_nft_info
+
+**Consensus / HCS (6):** create_topic · submit_message · update_topic · delete_topic · get_topic_info · get_topic_messages
+
+**Smart contract / EVM (4):** deploy_contract · execute_contract · query_contract (eth_call) · get_contract_info
+
+**File (4):** create_file · append_file · delete_file · get_file_info
+
+**Schedule (4):** create_schedule · sign_schedule · delete_schedule · get_schedule_info
+
+**Network / utility (6):** get_transaction · get_network_nodes · get_exchange_rate · get_network_supply · get_network_fees · decode_transaction
+
+## Development
+
+```bash
+npm run lint       # tsc --noEmit
+npm run build      # compile to dist/
+node test-smoke.mjs    # MCP stdio: live Mirror Node read + build-only write + decode
+node demo.mjs          # narrated "developer's first session" walkthrough (build-only)
+node test-execute.mjs  # LIVE testnet submit (needs a throwaway key in .env — see below)
+```
+
+### Live execution verification
+
+`test-execute.mjs` proves the build-only output is real: the MCP server builds an
+unsigned transaction, the harness signs it with a **throwaway testnet key from `.env`**
+and submits it, then confirms the result independently via Mirror Node. The server
+stays build-only the whole time — only the test harness ever touches a key.
+
+```
+HEDERA_NETWORK=testnet
+HEDERA_OPERATOR_ID=0.0.xxxxxx
+HEDERA_OPERATOR_KEY=302e0201...    # rotate/discard after verifying
+```
+
+Get a free testnet account at [portal.hedera.com](https://portal.hedera.com).
+
+Built on [`@hashgraph/sdk`](https://www.npmjs.com/package/@hashgraph/sdk) and [`@modelcontextprotocol/sdk`](https://www.npmjs.com/package/@modelcontextprotocol/sdk).
+
+## License
+
+MIT © Matthew Karsten

package/dist/context.d.ts

@@ -0,0 +1,55 @@
+/**
+ * HederaCtx — the keyless heart of the server.
+ *
+ * Design contract: this server NEVER holds, reads, or asks for a private key.
+ *  - Read/query tools hit the public Mirror Node REST API (no auth).
+ *  - Write tools BUILD a transaction, freeze it, and return the unsigned bytes
+ *    (base64) plus a human summary. The caller signs & submits with their own
+ *    wallet / SDK / CLI. Nothing is ever executed from here.
+ *
+ * The only optional input is HEDERA_OPERATOR_ID — an *account id* (not a key) —
+ * used as the default payer/treasury when building transactions.
+ */
+import { AccountId, Client, Transaction } from "@hashgraph/sdk";
+import { type NetworkConfig } from "./networks.js";
+export declare function resolveTxType(tx: Transaction): string;
+export interface BuildResult {
+    /** Short transaction-type label, e.g. "TokenCreateTransaction" */
+    type: string;
+    /** Frozen, unsigned transaction encoded as base64 */
+    base64: string;
+    /** Generated transaction id (payer@valid-start) */
+    transactionId: string;
+}
+export declare class HederaCtx {
+    readonly network: NetworkConfig;
+    readonly operatorId?: AccountId;
+    private _client?;
+    constructor();
+    /** Node account ids for this network as SDK AccountId objects. */
+    get nodeAccountIds(): AccountId[];
+    /**
+     * A network Client used only for offline operations (node list, fee schedules).
+     * No operator/key is set — it is never used to execute anything.
+     */
+    get client(): Client;
+    /** Resolve the payer account: explicit arg → env operator → error. */
+    payer(payerAccountId?: string): AccountId;
+    /**
+     * Freeze a transaction for offline signing (build-only) and serialize to base64.
+     * Sets a generated transaction id from the payer and the network's node accounts,
+     * so the resulting bytes are valid to sign and submit as-is.
+     */
+    build(tx: Transaction, payerAccountId?: string): BuildResult;
+    /** Render a BuildResult as the standard tool response. */
+    render(result: BuildResult, summary: string): string;
+    /** Build + render in one call. */
+    buildAndRender(tx: Transaction, summary: string, payerAccountId?: string): string;
+    /** GET a Mirror Node REST path (keyless). `path` should start with "/api/v1/...". */
+    mirror<T = any>(path: string): Promise<T>;
+    /** POST to a Mirror Node REST path (used for contracts/call eth_call reads). */
+    mirrorPost<T = any>(path: string, body: unknown): Promise<T>;
+    explorerTx(txId: string): string;
+}
+/** Pretty-print any JSON payload for tool output. */
+export declare function json(value: unknown): string;

package/dist/context.js

@@ -0,0 +1,162 @@
+/**
+ * HederaCtx — the keyless heart of the server.
+ *
+ * Design contract: this server NEVER holds, reads, or asks for a private key.
+ *  - Read/query tools hit the public Mirror Node REST API (no auth).
+ *  - Write tools BUILD a transaction, freeze it, and return the unsigned bytes
+ *    (base64) plus a human summary. The caller signs & submits with their own
+ *    wallet / SDK / CLI. Nothing is ever executed from here.
+ *
+ * The only optional input is HEDERA_OPERATOR_ID — an *account id* (not a key) —
+ * used as the default payer/treasury when building transactions.
+ */
+import { AccountAllowanceApproveTransaction, AccountCreateTransaction, AccountDeleteTransaction, AccountId, AccountUpdateTransaction, Client, ContractCreateTransaction, ContractExecuteTransaction, FileAppendTransaction, FileCreateTransaction, FileDeleteTransaction, ScheduleCreateTransaction, ScheduleDeleteTransaction, ScheduleSignTransaction, TokenAssociateTransaction, TokenBurnTransaction, TokenCreateTransaction, TokenDeleteTransaction, TokenDissociateTransaction, TokenFreezeTransaction, TokenGrantKycTransaction, TokenMintTransaction, TokenPauseTransaction, TokenRevokeKycTransaction, TokenUnfreezeTransaction, TokenUnpauseTransaction, TokenWipeTransaction, TopicCreateTransaction, TopicDeleteTransaction, TopicMessageSubmitTransaction, TopicUpdateTransaction, TransactionId, TransferTransaction, } from "@hashgraph/sdk";
+import { resolveNetwork } from "./networks.js";
+/**
+ * Resolve a human-readable transaction type. The @hashgraph/sdk bundle is
+ * minified, so `constructor.name` is mangled (e.g. "T") — we match by prototype
+ * via instanceof, which is unaffected by minification.
+ */
+const TX_TYPES = [
+    [TransferTransaction, "TransferTransaction"],
+    [AccountCreateTransaction, "AccountCreateTransaction"],
+    [AccountUpdateTransaction, "AccountUpdateTransaction"],
+    [AccountDeleteTransaction, "AccountDeleteTransaction"],
+    [AccountAllowanceApproveTransaction, "AccountAllowanceApproveTransaction"],
+    [TokenCreateTransaction, "TokenCreateTransaction"],
+    [TokenMintTransaction, "TokenMintTransaction"],
+    [TokenBurnTransaction, "TokenBurnTransaction"],
+    [TokenAssociateTransaction, "TokenAssociateTransaction"],
+    [TokenDissociateTransaction, "TokenDissociateTransaction"],
+    [TokenFreezeTransaction, "TokenFreezeTransaction"],
+    [TokenUnfreezeTransaction, "TokenUnfreezeTransaction"],
+    [TokenGrantKycTransaction, "TokenGrantKycTransaction"],
+    [TokenRevokeKycTransaction, "TokenRevokeKycTransaction"],
+    [TokenPauseTransaction, "TokenPauseTransaction"],
+    [TokenUnpauseTransaction, "TokenUnpauseTransaction"],
+    [TokenWipeTransaction, "TokenWipeTransaction"],
+    [TokenDeleteTransaction, "TokenDeleteTransaction"],
+    [TopicCreateTransaction, "TopicCreateTransaction"],
+    [TopicMessageSubmitTransaction, "TopicMessageSubmitTransaction"],
+    [TopicUpdateTransaction, "TopicUpdateTransaction"],
+    [TopicDeleteTransaction, "TopicDeleteTransaction"],
+    [ContractCreateTransaction, "ContractCreateTransaction"],
+    [ContractExecuteTransaction, "ContractExecuteTransaction"],
+    [FileCreateTransaction, "FileCreateTransaction"],
+    [FileAppendTransaction, "FileAppendTransaction"],
+    [FileDeleteTransaction, "FileDeleteTransaction"],
+    [ScheduleCreateTransaction, "ScheduleCreateTransaction"],
+    [ScheduleSignTransaction, "ScheduleSignTransaction"],
+    [ScheduleDeleteTransaction, "ScheduleDeleteTransaction"],
+];
+export function resolveTxType(tx) {
+    for (const [cls, name] of TX_TYPES) {
+        if (tx instanceof cls)
+            return name;
+    }
+    return "Transaction";
+}
+export class HederaCtx {
+    network;
+    operatorId;
+    _client;
+    constructor() {
+        this.network = resolveNetwork();
+        const opId = process.env.HEDERA_OPERATOR_ID?.trim();
+        if (opId && opId !== "0.0.xxxxxx") {
+            this.operatorId = AccountId.fromString(opId);
+        }
+    }
+    /** Node account ids for this network as SDK AccountId objects. */
+    get nodeAccountIds() {
+        return this.network.nodeAccountIds.map((id) => AccountId.fromString(id));
+    }
+    /**
+     * A network Client used only for offline operations (node list, fee schedules).
+     * No operator/key is set — it is never used to execute anything.
+     */
+    get client() {
+        if (!this._client) {
+            this._client = Client.forName(this.network.name);
+        }
+        return this._client;
+    }
+    /** Resolve the payer account: explicit arg → env operator → error. */
+    payer(payerAccountId) {
+        if (payerAccountId)
+            return AccountId.fromString(payerAccountId);
+        if (this.operatorId)
+            return this.operatorId;
+        throw new Error("No payer account. Pass `payerAccountId`, or set HEDERA_OPERATOR_ID in the environment.");
+    }
+    /**
+     * Freeze a transaction for offline signing (build-only) and serialize to base64.
+     * Sets a generated transaction id from the payer and the network's node accounts,
+     * so the resulting bytes are valid to sign and submit as-is.
+     */
+    build(tx, payerAccountId) {
+        const payer = this.payer(payerAccountId);
+        const txId = TransactionId.generate(payer);
+        tx.setTransactionId(txId).setNodeAccountIds(this.nodeAccountIds).freeze();
+        return {
+            type: resolveTxType(tx),
+            base64: Buffer.from(tx.toBytes()).toString("base64"),
+            transactionId: txId.toString(),
+        };
+    }
+    /** Render a BuildResult as the standard tool response. */
+    render(result, summary) {
+        return [
+            `✅ Built (unsigned) ${result.type} on ${this.network.name}`,
+            "",
+            summary,
+            "",
+            `Transaction ID: ${result.transactionId}`,
+            "",
+            "Sign & submit (this server never does):",
+            "  • SDK:  Transaction.fromBytes(Buffer.from(b64,'base64')).sign(key).execute(client)",
+            "  • Wallet: import the bytes into HashPack / Blade, or use the `hedera` CLI",
+            "",
+            "Transaction (base64):",
+            result.base64,
+        ].join("\n");
+    }
+    /** Build + render in one call. */
+    buildAndRender(tx, summary, payerAccountId) {
+        return this.render(this.build(tx, payerAccountId), summary);
+    }
+    /** GET a Mirror Node REST path (keyless). `path` should start with "/api/v1/...". */
+    async mirror(path) {
+        const url = `${this.network.mirror}${path}`;
+        const res = await fetch(url, { headers: { accept: "application/json" } });
+        if (!res.ok) {
+            const body = await res.text().catch(() => "");
+            throw new Error(`Mirror Node ${res.status} for ${path}: ${body.slice(0, 300)}`);
+        }
+        return (await res.json());
+    }
+    /** POST to a Mirror Node REST path (used for contracts/call eth_call reads). */
+    async mirrorPost(path, body) {
+        const url = `${this.network.mirror}${path}`;
+        const res = await fetch(url, {
+            method: "POST",
+            headers: { "content-type": "application/json", accept: "application/json" },
+            body: JSON.stringify(body),
+        });
+        if (!res.ok) {
+            const text = await res.text().catch(() => "");
+            throw new Error(`Mirror Node ${res.status} for ${path}: ${text.slice(0, 300)}`);
+        }
+        return (await res.json());
+    }
+    explorerTx(txId) {
+        // HashScan expects transaction ids in the form 0.0.x-seconds-nanos
+        const normalized = txId.replace("@", "-").replace(/\.(\d+)$/, "-$1");
+        return `${this.network.explorer}/transaction/${normalized}`;
+    }
+}
+/** Pretty-print any JSON payload for tool output. */
+export function json(value) {
+    return JSON.stringify(value, null, 2);
+}
+//# sourceMappingURL=context.js.map

package/dist/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../src/context.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EACL,kCAAkC,EAClC,wBAAwB,EACxB,wBAAwB,EACxB,SAAS,EACT,wBAAwB,EACxB,MAAM,EACN,yBAAyB,EACzB,0BAA0B,EAC1B,qBAAqB,EACrB,qBAAqB,EACrB,qBAAqB,EACrB,yBAAyB,EACzB,yBAAyB,EACzB,uBAAuB,EACvB,yBAAyB,EACzB,oBAAoB,EACpB,sBAAsB,EACtB,sBAAsB,EACtB,0BAA0B,EAC1B,sBAAsB,EACtB,wBAAwB,EACxB,oBAAoB,EACpB,qBAAqB,EACrB,yBAAyB,EACzB,wBAAwB,EACxB,uBAAuB,EACvB,oBAAoB,EACpB,sBAAsB,EACtB,sBAAsB,EACtB,6BAA6B,EAC7B,sBAAsB,EAEtB,aAAa,EACb,mBAAmB,GACpB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,cAAc,EAAsB,MAAM,eAAe,CAAC;AAEnE;;;;GAIG;AACH,MAAM,QAAQ,GAAyD;IACrE,CAAC,mBAAmB,EAAE,qBAAqB,CAAC;IAC5C,CAAC,wBAAwB,EAAE,0BAA0B,CAAC;IACtD,CAAC,wBAAwB,EAAE,0BAA0B,CAAC;IACtD,CAAC,wBAAwB,EAAE,0BAA0B,CAAC;IACtD,CAAC,kCAAkC,EAAE,oCAAoC,CAAC;IAC1E,CAAC,sBAAsB,EAAE,wBAAwB,CAAC;IAClD,CAAC,oBAAoB,EAAE,sBAAsB,CAAC;IAC9C,CAAC,oBAAoB,EAAE,sBAAsB,CAAC;IAC9C,CAAC,yBAAyB,EAAE,2BAA2B,CAAC;IACxD,CAAC,0BAA0B,EAAE,4BAA4B,CAAC;IAC1D,CAAC,sBAAsB,EAAE,wBAAwB,CAAC;IAClD,CAAC,wBAAwB,EAAE,0BAA0B,CAAC;IACtD,CAAC,wBAAwB,EAAE,0BAA0B,CAAC;IACtD,CAAC,yBAAyB,EAAE,2BAA2B,CAAC;IACxD,CAAC,qBAAqB,EAAE,uBAAuB,CAAC;IAChD,CAAC,uBAAuB,EAAE,yBAAyB,CAAC;IACpD,CAAC,oBAAoB,EAAE,sBAAsB,CAAC;IAC9C,CAAC,sBAAsB,EAAE,wBAAwB,CAAC;IAClD,CAAC,sBAAsB,EAAE,wBAAwB,CAAC;IAClD,CAAC,6BAA6B,EAAE,+BAA+B,CAAC;IAChE,CAAC,sBAAsB,EAAE,wBAAwB,CAAC;IAClD,CAAC,sBAAsB,EAAE,wBAAwB,CAAC;IAClD,CAAC,yBAAyB,EAAE,2BAA2B,CAAC;IACxD,CAAC,0BAA0B,EAAE,4BAA4B,CAAC;IAC1D,CAAC,qBAAqB,EAAE,uBAAuB,CAAC;IAChD,CAAC,qBAAqB,EAAE,uBAAuB,CAAC;IAChD,CAAC,qBAAqB,EAAE,uBAAuB,CAAC;IAChD,CAAC,yBAAyB,EAAE,2BAA2B,CAAC;IACxD,CAAC,uBAAuB,EAAE,yBAAyB,CAAC;IACpD,CAAC,yBAAyB,EAAE,2BAA2B,CAAC;CACzD,CAAC;AAEF,MAAM,UAAU,aAAa,CAAC,EAAe;IAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,QAAQ,EAAE,CAAC;QACnC,IAAI,EAAE,YAAY,GAAG;YAAE,OAAO,IAAI,CAAC;IACrC,CAAC;IACD,OAAO,aAAa,CAAC;AACvB,CAAC;AAWD,MAAM,OAAO,SAAS;IACX,OAAO,CAAgB;IACvB,UAAU,CAAa;IACxB,OAAO,CAAU;IAEzB;QACE,IAAI,CAAC,OAAO,GAAG,cAAc,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,IAAI,EAAE,CAAC;QACpD,IAAI,IAAI,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;YAClC,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IAED,kEAAkE;IAClE,IAAI,cAAc;QAChB,OAAO,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3E,CAAC;IAED;;;OAGG;IACH,IAAI,MAAM;QACR,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACnD,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,sEAAsE;IACtE,KAAK,CAAC,cAAuB;QAC3B,IAAI,cAAc;YAAE,OAAO,SAAS,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;QAChE,IAAI,IAAI,CAAC,UAAU;YAAE,OAAO,IAAI,CAAC,UAAU,CAAC;QAC5C,MAAM,IAAI,KAAK,CACb,wFAAwF,CACzF,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,EAAe,EAAE,cAAuB;QAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC3C,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,MAAM,EAAE,CAAC;QAC1E,OAAO;YACL,IAAI,EAAE,aAAa,CAAC,EAAE,CAAC;YACvB,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACpD,aAAa,EAAE,IAAI,CAAC,QAAQ,EAAE;SAC/B,CAAC;IACJ,CAAC;IAED,0DAA0D;IAC1D,MAAM,CAAC,MAAmB,EAAE,OAAe;QACzC,OAAO;YACL,sBAAsB,MAAM,CAAC,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;YAC3D,EAAE;YACF,OAAO;YACP,EAAE;YACF,mBAAmB,MAAM,CAAC,aAAa,EAAE;YACzC,EAAE;YACF,yCAAyC;YACzC,sFAAsF;YACtF,6EAA6E;YAC7E,EAAE;YACF,uBAAuB;YACvB,MAAM,CAAC,MAAM;SACd,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC;IAED,kCAAkC;IAClC,cAAc,CAAC,EAAe,EAAE,OAAe,EAAE,cAAuB;QACtE,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,cAAc,CAAC,EAAE,OAAO,CAAC,CAAC;IAC9D,CAAC;IAED,qFAAqF;IACrF,KAAK,CAAC,MAAM,CAAU,IAAY;QAChC,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;QAC5C,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE,CAAC,CAAC;QAC1E,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,eAAe,GAAG,CAAC,MAAM,QAAQ,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QAClF,CAAC;QACD,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAM,CAAC;IACjC,CAAC;IAED,gFAAgF;IAChF,KAAK,CAAC,UAAU,CAAU,IAAY,EAAE,IAAa;QACnD,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;QAC5C,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC3B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,EAAE,kBAAkB,EAAE;YAC3E,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;SAC3B,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,eAAe,GAAG,CAAC,MAAM,QAAQ,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QAClF,CAAC;QACD,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAM,CAAC;IACjC,CAAC;IAED,UAAU,CAAC,IAAY;QACrB,mEAAmE;QACnE,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QACrE,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,gBAAgB,UAAU,EAAE,CAAC;IAC9D,CAAC;CACF;AAED,qDAAqD;AACrD,MAAM,UAAU,IAAI,CAAC,KAAc;IACjC,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AACxC,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,19 @@
+#!/usr/bin/env node
+/**
+ * Hedera MCP Server
+ *
+ * Comprehensive Model Context Protocol coverage for Hedera (Hashgraph):
+ * Account, Token (HTS), Consensus (HCS), Smart Contract (EVM), File, Schedule,
+ * and Network services.
+ *
+ * Security posture (matches goat-network-mcp): BUILD-ONLY, never holds keys.
+ *  - Reads/queries hit the public Mirror Node REST API (no auth).
+ *  - Writes build + freeze + serialize an UNSIGNED transaction (base64). The
+ *    caller signs and submits with their own wallet/SDK/CLI. Nothing executes here.
+ *
+ * Environment:
+ *   HEDERA_NETWORK      mainnet | testnet (default) | previewnet
+ *   HEDERA_OPERATOR_ID  optional default payer/treasury ACCOUNT ID (not a key)
+ *   HEDERA_MIRROR_URL   optional Mirror Node REST override
+ */
+export {};

package/dist/index.js

@@ -0,0 +1,68 @@
+#!/usr/bin/env node
+/**
+ * Hedera MCP Server
+ *
+ * Comprehensive Model Context Protocol coverage for Hedera (Hashgraph):
+ * Account, Token (HTS), Consensus (HCS), Smart Contract (EVM), File, Schedule,
+ * and Network services.
+ *
+ * Security posture (matches goat-network-mcp): BUILD-ONLY, never holds keys.
+ *  - Reads/queries hit the public Mirror Node REST API (no auth).
+ *  - Writes build + freeze + serialize an UNSIGNED transaction (base64). The
+ *    caller signs and submits with their own wallet/SDK/CLI. Nothing executes here.
+ *
+ * Environment:
+ *   HEDERA_NETWORK      mainnet | testnet (default) | previewnet
+ *   HEDERA_OPERATOR_ID  optional default payer/treasury ACCOUNT ID (not a key)
+ *   HEDERA_MIRROR_URL   optional Mirror Node REST override
+ */
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { HederaCtx } from "./context.js";
+import { registerAccountTools } from "./tools/account.js";
+import { registerTokenTools } from "./tools/token.js";
+import { registerConsensusTools } from "./tools/consensus.js";
+import { registerContractTools } from "./tools/contract.js";
+import { registerFileTools } from "./tools/file.js";
+import { registerScheduleTools } from "./tools/schedule.js";
+import { registerNetworkTools } from "./tools/network.js";
+const ctx = new HederaCtx();
+const server = new McpServer({
+    name: "hedera-mcp",
+    version: "0.1.0",
+});
+let toolCount = 0;
+const register = (name, description, shape, handler) => {
+    server.tool(name, description, shape, async (args) => {
+        try {
+            const text = await handler(args);
+            return { content: [{ type: "text", text }] };
+        }
+        catch (err) {
+            return {
+                content: [{ type: "text", text: `Error: ${err?.message ?? String(err)}` }],
+                isError: true,
+            };
+        }
+    });
+    toolCount++;
+};
+registerAccountTools(register, ctx);
+registerTokenTools(register, ctx);
+registerConsensusTools(register, ctx);
+registerContractTools(register, ctx);
+registerFileTools(register, ctx);
+registerScheduleTools(register, ctx);
+registerNetworkTools(register, ctx);
+async function main() {
+    const transport = new StdioServerTransport();
+    await server.connect(transport);
+    console.error(`hedera-mcp running — ${toolCount} tools — ${ctx.network.name} ` +
+        `(mirror ${ctx.network.mirror})` +
+        (ctx.operatorId ? ` — default payer ${ctx.operatorId.toString()}` : " — build-only, no default payer"));
+}
+main().catch((err) => {
+    console.error("Fatal:", err);
+    process.exit(1);
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;GAgBG;AAGH,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAE1D,MAAM,GAAG,GAAG,IAAI,SAAS,EAAE,CAAC;AAE5B,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;IAC3B,IAAI,EAAE,YAAY;IAClB,OAAO,EAAE,OAAO;CACjB,CAAC,CAAC;AAEH,IAAI,SAAS,GAAG,CAAC,CAAC;AAElB,MAAM,QAAQ,GAAa,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;IAC/D,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,KAAkC,EAAE,KAAK,EAAE,IAAS,EAAE,EAAE;QACrF,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;YACjC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QACxD,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,GAAG,EAAE,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACnF,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IACH,SAAS,EAAE,CAAC;AACd,CAAC,CAAC;AAEF,oBAAoB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;AACpC,kBAAkB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;AAClC,sBAAsB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;AACtC,qBAAqB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;AACrC,iBAAiB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;AACjC,qBAAqB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;AACrC,oBAAoB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;AAEpC,KAAK,UAAU,IAAI;IACjB,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,OAAO,CAAC,KAAK,CACX,wBAAwB,SAAS,YAAY,GAAG,CAAC,OAAO,CAAC,IAAI,GAAG;QAC9D,WAAW,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG;QAChC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,oBAAoB,GAAG,CAAC,UAAU,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,iCAAiC,CAAC,CACzG,CAAC;AACJ,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAC7B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/networks.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Hedera network configuration.
+ *
+ * Mirror Node REST base URLs are public and keyless — all read/query tools use them.
+ * nodeAccountIds are stable consensus-node accounts used when freezing a build-only
+ * transaction so the serialized bytes target real nodes.
+ */
+export interface NetworkConfig {
+    /** Human label, e.g. "testnet" */
+    name: "mainnet" | "testnet" | "previewnet";
+    /** Mirror Node REST base URL (no trailing slash) */
+    mirror: string;
+    /** Consensus node account IDs used for build-only transaction freezing */
+    nodeAccountIds: string[];
+    /** HashScan explorer base for this network */
+    explorer: string;
+}
+export declare function resolveNetwork(): NetworkConfig;

package/dist/networks.js

@@ -0,0 +1,39 @@
+/**
+ * Hedera network configuration.
+ *
+ * Mirror Node REST base URLs are public and keyless — all read/query tools use them.
+ * nodeAccountIds are stable consensus-node accounts used when freezing a build-only
+ * transaction so the serialized bytes target real nodes.
+ */
+const NETWORKS = {
+    mainnet: {
+        name: "mainnet",
+        mirror: "https://mainnet-public.mirrornode.hedera.com",
+        nodeAccountIds: ["0.0.3", "0.0.4", "0.0.5", "0.0.6", "0.0.7"],
+        explorer: "https://hashscan.io/mainnet",
+    },
+    testnet: {
+        name: "testnet",
+        mirror: "https://testnet.mirrornode.hedera.com",
+        nodeAccountIds: ["0.0.3", "0.0.4", "0.0.5", "0.0.6", "0.0.7", "0.0.8", "0.0.9"],
+        explorer: "https://hashscan.io/testnet",
+    },
+    previewnet: {
+        name: "previewnet",
+        mirror: "https://previewnet.mirrornode.hedera.com",
+        nodeAccountIds: ["0.0.3", "0.0.4", "0.0.5", "0.0.6"],
+        explorer: "https://hashscan.io/previewnet",
+    },
+};
+export function resolveNetwork() {
+    const requested = (process.env.HEDERA_NETWORK || "testnet").toLowerCase();
+    const net = NETWORKS[requested];
+    if (!net) {
+        throw new Error(`Unknown HEDERA_NETWORK="${requested}". Use one of: mainnet, testnet, previewnet.`);
+    }
+    if (process.env.HEDERA_MIRROR_URL) {
+        return { ...net, mirror: process.env.HEDERA_MIRROR_URL.replace(/\/+$/, "") };
+    }
+    return net;
+}
+//# sourceMappingURL=networks.js.map

package/dist/networks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"networks.js","sourceRoot":"","sources":["../src/networks.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAaH,MAAM,QAAQ,GAAkC;IAC9C,OAAO,EAAE;QACP,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,8CAA8C;QACtD,cAAc,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC;QAC7D,QAAQ,EAAE,6BAA6B;KACxC;IACD,OAAO,EAAE;QACP,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,uCAAuC;QAC/C,cAAc,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC;QAC/E,QAAQ,EAAE,6BAA6B;KACxC;IACD,UAAU,EAAE;QACV,IAAI,EAAE,YAAY;QAClB,MAAM,EAAE,0CAA0C;QAClD,cAAc,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC;QACpD,QAAQ,EAAE,gCAAgC;KAC3C;CACF,CAAC;AAEF,MAAM,UAAU,cAAc;IAC5B,MAAM,SAAS,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC;IAC1E,MAAM,GAAG,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;IAChC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CACb,2BAA2B,SAAS,8CAA8C,CACnF,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC;QAClC,OAAO,EAAE,GAAG,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC;IAC/E,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/tools/account.d.ts

@@ -0,0 +1,3 @@
+import type { Register } from "../types.js";
+import { HederaCtx } from "../context.js";
+export declare function registerAccountTools(register: Register, ctx: HederaCtx): void;

package/dist/tools/account.js

@@ -0,0 +1,79 @@
+/** Account service: create, transfer, update, delete, allowances, and Mirror Node reads. */
+import { z } from "zod";
+import { AccountAllowanceApproveTransaction, AccountCreateTransaction, AccountDeleteTransaction, AccountId, AccountUpdateTransaction, Hbar, PublicKey, TransferTransaction, } from "@hashgraph/sdk";
+import { json } from "../context.js";
+export function registerAccountTools(register, ctx) {
+    register("hedera_create_account", "Build (unsigned) a new Hedera account with a given public key and optional initial HBAR balance.", {
+        publicKey: z.string().describe("ED25519 or ECDSA public key (DER or hex) controlling the new account"),
+        initialBalanceHbar: z.number().optional().describe("Initial balance in HBAR (default 0)"),
+        memo: z.string().optional().describe("Account memo"),
+        maxAutomaticTokenAssociations: z.number().int().optional().describe("Auto token-association slots"),
+        payerAccountId: z.string().optional().describe("Payer (defaults to HEDERA_OPERATOR_ID)"),
+    }, async (a) => {
+        const tx = new AccountCreateTransaction().setKey(PublicKey.fromString(a.publicKey));
+        if (a.initialBalanceHbar != null)
+            tx.setInitialBalance(new Hbar(a.initialBalanceHbar));
+        if (a.memo)
+            tx.setAccountMemo(a.memo);
+        if (a.maxAutomaticTokenAssociations != null)
+            tx.setMaxAutomaticTokenAssociations(a.maxAutomaticTokenAssociations);
+        return ctx.buildAndRender(tx, `Create account · key ${a.publicKey.slice(0, 16)}… · ${a.initialBalanceHbar ?? 0} ℏ`, a.payerAccountId);
+    });
+    register("hedera_transfer_hbar", "Build (unsigned) an HBAR transfer from one account to another.", {
+        fromAccountId: z.string().optional().describe("Sender (defaults to payer)"),
+        toAccountId: z.string().describe("Recipient account id, e.g. 0.0.1234"),
+        amountHbar: z.number().positive().describe("Amount in HBAR"),
+        memo: z.string().optional().describe("Transaction memo"),
+        payerAccountId: z.string().optional(),
+    }, async (a) => {
+        const from = AccountId.fromString(a.fromAccountId ?? ctx.payer(a.payerAccountId).toString());
+        const to = AccountId.fromString(a.toAccountId);
+        const tx = new TransferTransaction()
+            .addHbarTransfer(from, new Hbar(-a.amountHbar))
+            .addHbarTransfer(to, new Hbar(a.amountHbar));
+        if (a.memo)
+            tx.setTransactionMemo(a.memo);
+        return ctx.buildAndRender(tx, `Transfer ${a.amountHbar} ℏ · ${from} → ${to}`, a.payerAccountId);
+    });
+    register("hedera_update_account", "Build (unsigned) an account update (memo, auto-association slots).", {
+        accountId: z.string().describe("Account to update"),
+        memo: z.string().optional(),
+        maxAutomaticTokenAssociations: z.number().int().optional(),
+        payerAccountId: z.string().optional(),
+    }, async (a) => {
+        const tx = new AccountUpdateTransaction().setAccountId(AccountId.fromString(a.accountId));
+        if (a.memo != null)
+            tx.setAccountMemo(a.memo);
+        if (a.maxAutomaticTokenAssociations != null)
+            tx.setMaxAutomaticTokenAssociations(a.maxAutomaticTokenAssociations);
+        return ctx.buildAndRender(tx, `Update account ${a.accountId}`, a.payerAccountId);
+    });
+    register("hedera_delete_account", "Build (unsigned) an account deletion, transferring the remaining balance to another account.", {
+        accountId: z.string().describe("Account to delete"),
+        transferAccountId: z.string().describe("Account that receives the remaining balance"),
+        payerAccountId: z.string().optional(),
+    }, async (a) => {
+        const tx = new AccountDeleteTransaction()
+            .setAccountId(AccountId.fromString(a.accountId))
+            .setTransferAccountId(AccountId.fromString(a.transferAccountId));
+        return ctx.buildAndRender(tx, `Delete account ${a.accountId} → balance to ${a.transferAccountId}`, a.payerAccountId);
+    });
+    register("hedera_approve_hbar_allowance", "Build (unsigned) an HBAR allowance granting a spender the right to spend from an owner account.", {
+        ownerAccountId: z.string().optional().describe("Owner (defaults to payer)"),
+        spenderAccountId: z.string().describe("Spender granted the allowance"),
+        amountHbar: z.number().positive().describe("Allowance amount in HBAR"),
+        payerAccountId: z.string().optional(),
+    }, async (a) => {
+        const owner = AccountId.fromString(a.ownerAccountId ?? ctx.payer(a.payerAccountId).toString());
+        const tx = new AccountAllowanceApproveTransaction().approveHbarAllowance(owner, AccountId.fromString(a.spenderAccountId), new Hbar(a.amountHbar));
+        return ctx.buildAndRender(tx, `Approve ${a.amountHbar} ℏ allowance · ${owner} → ${a.spenderAccountId}`, a.payerAccountId);
+    });
+    // ---- Mirror Node reads (keyless) ----
+    register("hedera_get_account_info", "Read full account info (key, balance, memo, auto-renew, associations) from the Mirror Node.", { accountId: z.string().describe("Account id or EVM address") }, async (a) => json(await ctx.mirror(`/api/v1/accounts/${encodeURIComponent(a.accountId)}`)));
+    register("hedera_get_account_balance", "Read an account's HBAR and token balances from the Mirror Node.", { accountId: z.string().describe("Account id or EVM address") }, async (a) => json(await ctx.mirror(`/api/v1/accounts/${encodeURIComponent(a.accountId)}/tokens?limit=100`)));
+    register("hedera_get_account_nfts", "List NFTs owned by an account from the Mirror Node.", {
+        accountId: z.string().describe("Account id"),
+        limit: z.number().int().min(1).max(100).optional().describe("Max NFTs (default 25)"),
+    }, async (a) => json(await ctx.mirror(`/api/v1/accounts/${encodeURIComponent(a.accountId)}/nfts?limit=${a.limit ?? 25}`)));
+}
+//# sourceMappingURL=account.js.map