@solidus-network/mcp 0.1.0

package/LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for describing the origin of the Work and
+      reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Support. While redistributing the Work or
+      Derivative Works thereof, You may choose to offer, and charge a
+      fee for, acceptance of support, warranty, indemnity, or other
+      liability obligations and/or rights consistent with this License.
+      However, in accepting such obligations, You may act only on Your
+      own behalf and on Your sole responsibility, not on behalf of any
+      other Contributor, and only if You agree to indemnify, defend,
+      and hold each Contributor harmless for any liability incurred by,
+      or claims asserted against, such Contributor by reason of your
+      accepting any such warranty or support.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2026 Solidus Network
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+   implied. See the License for the specific language governing permissions
+   and limitations under the License.

package/README.md

@@ -0,0 +1,120 @@
+# @solidus-network/mcp
+
+An [MCP](https://modelcontextprotocol.io) (Model Context Protocol) server that exposes Solidus as
+**run-time tools an agent can call** — resolve a `did:solidus` DID, verify a credential, and
+check/create/authorize a scoped spend mandate. Point any MCP-compatible client (Claude Code, Cursor,
+Windsurf, or a custom agent loop) at it over stdio and those become ordinary tool calls.
+
+## Status — read this first
+
+- **First release (0.1.0).** New package, testnet-grade.
+- **Solidus L1 is testnet-only — there is no mainnet.** DIDs resolve as `did:solidus:testnet:<addr>`.
+  Treat anything you create through these tools (DIDs, credentials, mandates) as sandbox data, not a
+  durable production record.
+- **Credential signing (BBS+) has no external security audit yet.** Do not protect production-grade
+  value with it.
+- **`agent_pay` authorizes; it never settles.** Solidus is not a payment rail. The tool checks a
+  mandate and, if it's within scope, hands back a signed envelope for the caller to present to
+  *their own* rail (Moka, x402, whatever they already use). No money moves through this package or
+  through Solidus at any point.
+
+## Install / run
+
+You don't install this globally — an MCP client launches it on demand:
+
+```bash
+npx @solidus-network/mcp
+```
+
+### Claude Code (`.mcp.json`)
+
+```json
+{
+  "mcpServers": {
+    "solidus": {
+      "command": "npx",
+      "args": ["-y", "@solidus-network/mcp"],
+      "env": {
+        "SOLIDUS_API_KEY": "<your operator key, only needed for create_mandate>"
+      }
+    }
+  }
+}
+```
+
+Any other MCP client (Cursor, Windsurf, a custom `StdioClientTransport`) works the same way — it's a
+standard stdio MCP server, `command: npx`, `args: ["-y", "@solidus-network/mcp"]`.
+
+## Tools
+
+5 tools, 3 read (no side effects, no auth) and 2 write (side effects; a human should confirm the
+terms before an agent calls them):
+
+| Tool | Type | What it does |
+|---|---|---|
+| `resolve_did` | read | Resolve a `did:solidus` DID document from the Solidus chain. |
+| `verify_credential` | read | Verify a Solidus verifiable credential by id against the chain. |
+| `check_mandate` | read | Check whether a spend-mandate envelope authorizes a given amount/currency/rail. Pure — no auth, moves nothing. This is the counterparty refusal check. |
+| `create_mandate` | write | Issue a scoped `spend_mandate` credential (bounded by `maxAmount`/`currency`/`rail`/`expiresAt`) for an agent, on behalf of a principal DID. Returns the checkable envelope — never the private key or credential bundle. |
+| `agent_pay` | write | Authorize a payment under a mandate and return the envelope for the caller's own rail. **Settles nothing** — a refusal short-circuits and does no further work. |
+
+## Configuration
+
+All optional except where noted; the server has working defaults for every read tool out of the box.
+
+| Env var | Default | Used by |
+|---|---|---|
+| `SOLIDUS_RPC_URL` | `https://rpc.solidus.network` | `resolve_did`, `verify_credential` (chain SDK) |
+| `SOLIDUS_AGENTS_URL` | `https://agents.solidus.network` | `check_mandate`, `create_mandate`, `agent_pay` (agents backend) |
+| `SOLIDUS_API_KEY` | — | `create_mandate` only — an operator bearer token. The other four tools need no auth. |
+| `SOLIDUS_SDK_MODE` | `testnet` | Chain SDK mode: `testnet` (public chain, no key needed for reads), `mainnet`, or `stub` (local Postgres-backed simulation for development — requires `SOLIDUS_STUB_DB_URL`, never point a real client at it). |
+
+## End-to-end example
+
+A mandate bounds what an agent can spend; `check_mandate` is the refusal an agent's counterparty runs
+before accepting a payment. This walks resolving a DID, hitting the refusal, then raising the mandate
+and succeeding:
+
+```jsonc
+// 1. Resolve the paying agent's DID
+resolve_did({ "did": "did:solidus:testnet:<addr>" })
+// → { "did": "did:solidus:testnet:<addr>", "document": { ... }, "resolved": true }
+
+// 2. Issue a mandate capped at 500 TRY
+create_mandate({
+  "agentId": "<agent-id>",
+  "principalDid": "did:solidus:testnet:<principal-addr>",
+  "maxAmount": "500",
+  "currency": "TRY",
+  "rail": "moka",
+  "expiresAt": "2026-08-01T00:00:00.000Z"
+})
+// → { "mandateId": "...", "envelope": "<base64url envelope>", "expiresAt": "2026-08-01T00:00:00.000Z" }
+
+// 3. The counterparty checks a 750 TRY charge against it — over the cap, refused
+check_mandate({ "envelope": "<envelope from step 2>", "amount": 750, "currency": "TRY", "rail": "moka" })
+// → { "authorized": false, "reason": "amount exceeds mandate limit" }
+
+// 4. Raise the mandate to 1000 TRY
+create_mandate({ /* same as step 2, "maxAmount": "1000" */ })
+// → { "mandateId": "...", "envelope": "<new envelope>", "expiresAt": "..." }
+
+// 5. agent_pay authorizes the same 750 TRY charge under the raised mandate
+agent_pay({ "envelope": "<envelope from step 4>", "amount": 750, "currency": "TRY", "rail": "moka" })
+// → { "authorized": true, "envelope": "<same envelope>", "header": "x-solidus-mandate" }
+```
+
+Step 5's `envelope` and `header` are what the caller sends to *their own* payment rail — Solidus's
+part ends at authorization.
+
+## Trust boundary
+
+This package is a thin adapter over [`@solidus-network/sdk`](https://www.npmjs.com/package/@solidus-network/sdk)
+(chain reads) and [`@solidus-network/agent-identity`](https://www.npmjs.com/package/@solidus-network/agent-identity)
+(mandates, credentials). It holds no issuer keys and does no cryptography of its own — credential
+signing happens in the Solidus backend; trust in a credential is trust in the issuer key, not in this
+code.
+
+## License
+
+Apache-2.0

package/dist/agent-pay.d.ts

@@ -0,0 +1,24 @@
+import type { Deps } from './deps.js';
+export interface AgentPayArgs {
+    envelope: string;
+    amount: number | string;
+    currency: string;
+    rail: 'moka' | 'x402';
+}
+export interface AgentPayResult {
+    authorized: boolean;
+    reason?: string;
+    /** Present only when authorized — the SAME envelope, ready to present to the caller's own rail. */
+    envelope?: string;
+    /** The `X-Solidus-Mandate` header name to send the envelope under. */
+    header?: string;
+}
+/**
+ * Write tool: authorises a payment under a mandate. Solidus never settles
+ * money (see agent-identity's present.ts) — so this reuses `checkMandate`
+ * and, if authorised, hands back the envelope + header name for the caller
+ * to present to their own rail (Moka / x402). A refusal is returned
+ * unchanged and performs no further work.
+ */
+export declare function agentPay(deps: Pick<Deps, 'agentsBaseUrl' | 'fetchImpl'>, args: AgentPayArgs): Promise<AgentPayResult>;
+//# sourceMappingURL=agent-pay.d.ts.map

package/dist/agent-pay.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-pay.d.ts","sourceRoot":"","sources":["../src/agent-pay.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAErC,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,MAAM,GAAG,MAAM,CAAA;IACvB,QAAQ,EAAE,MAAM,CAAA;IAChB,IAAI,EAAE,MAAM,GAAG,MAAM,CAAA;CACtB;AAED,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,OAAO,CAAA;IACnB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,mGAAmG;IACnG,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,sEAAsE;IACtE,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED;;;;;;GAMG;AACH,wBAAsB,QAAQ,CAC5B,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,eAAe,GAAG,WAAW,CAAC,EAC/C,IAAI,EAAE,YAAY,GACjB,OAAO,CAAC,cAAc,CAAC,CAQzB"}

package/dist/agent-pay.js

@@ -0,0 +1,17 @@
+import { MANDATE_HEADER } from '@solidus-network/agent-identity/verify';
+import { checkMandate } from './check-mandate.js';
+/**
+ * Write tool: authorises a payment under a mandate. Solidus never settles
+ * money (see agent-identity's present.ts) — so this reuses `checkMandate`
+ * and, if authorised, hands back the envelope + header name for the caller
+ * to present to their own rail (Moka / x402). A refusal is returned
+ * unchanged and performs no further work.
+ */
+export async function agentPay(deps, args) {
+    const outcome = await checkMandate(deps, args);
+    if (!outcome.authorized) {
+        return { authorized: false, reason: outcome.reason };
+    }
+    return { authorized: true, envelope: args.envelope, header: MANDATE_HEADER };
+}
+//# sourceMappingURL=agent-pay.js.map

package/dist/agent-pay.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-pay.js","sourceRoot":"","sources":["../src/agent-pay.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAA;AAC/D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAmBjD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,IAA+C,EAC/C,IAAkB;IAElB,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IAE9C,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;QACxB,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAA;IACtD,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,cAAc,EAAE,CAAA;AAC9E,CAAC"}

package/dist/check-mandate.d.ts

@@ -0,0 +1,27 @@
+import type { Deps } from './deps.js';
+export interface CheckMandateArgs {
+    /** The `X-Solidus-Mandate` header value (base64url envelope). */
+    envelope: string;
+    amount: string | number;
+    currency: string;
+    rail: string;
+}
+export type MandateCheckOutcome = {
+    authorized: true;
+    agentDid: string;
+    principalDid: string;
+    maxAmount: string;
+    expiresAt: string;
+    verifiedAsOf: string;
+} | {
+    authorized: false;
+    reason: string;
+};
+/**
+ * Read tool (pure, no auth): the counterparty check against
+ * `POST /v1/mandates/check`. The proof IS the credential — the backend
+ * requires no bearer token here. Passes the outcome through verbatim;
+ * this is the refusal that makes the whole product trustworthy.
+ */
+export declare function checkMandate(deps: Pick<Deps, 'agentsBaseUrl' | 'fetchImpl'>, args: CheckMandateArgs): Promise<MandateCheckOutcome>;
+//# sourceMappingURL=check-mandate.d.ts.map

package/dist/check-mandate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-mandate.d.ts","sourceRoot":"","sources":["../src/check-mandate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAErC,MAAM,WAAW,gBAAgB;IAC/B,iEAAiE;IACjE,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,MAAM,GAAG,MAAM,CAAA;IACvB,QAAQ,EAAE,MAAM,CAAA;IAChB,IAAI,EAAE,MAAM,CAAA;CACb;AAED,MAAM,MAAM,mBAAmB,GAC3B;IACE,UAAU,EAAE,IAAI,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,YAAY,EAAE,MAAM,CAAA;IACpB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,YAAY,EAAE,MAAM,CAAA;CACrB,GACD;IAAE,UAAU,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAA;AAEzC;;;;;GAKG;AACH,wBAAsB,YAAY,CAChC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,eAAe,GAAG,WAAW,CAAC,EAC/C,IAAI,EAAE,gBAAgB,GACrB,OAAO,CAAC,mBAAmB,CAAC,CAY9B"}

package/dist/check-mandate.js

@@ -0,0 +1,20 @@
+/**
+ * Read tool (pure, no auth): the counterparty check against
+ * `POST /v1/mandates/check`. The proof IS the credential — the backend
+ * requires no bearer token here. Passes the outcome through verbatim;
+ * this is the refusal that makes the whole product trustworthy.
+ */
+export async function checkMandate(deps, args) {
+    const res = await deps.fetchImpl(`${deps.agentsBaseUrl}/v1/mandates/check`, {
+        method: 'POST',
+        headers: { 'content-type': 'application/json' },
+        body: JSON.stringify({
+            envelope: args.envelope,
+            amount: String(args.amount),
+            currency: args.currency,
+            rail: args.rail,
+        }),
+    });
+    return (await res.json());
+}
+//# sourceMappingURL=check-mandate.js.map

package/dist/check-mandate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-mandate.js","sourceRoot":"","sources":["../src/check-mandate.ts"],"names":[],"mappings":"AAqBA;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAA+C,EAC/C,IAAsB;IAEtB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,aAAa,oBAAoB,EAAE;QAC1E,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;YAC3B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,IAAI,EAAE,IAAI,CAAC,IAAI;SAChB,CAAC;KACH,CAAC,CAAA;IACF,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAwB,CAAA;AAClD,CAAC"}

package/dist/create-mandate.d.ts

@@ -0,0 +1,24 @@
+import type { Deps } from './deps.js';
+export interface CreateMandateArgs {
+    agentId: string;
+    principalDid: string;
+    maxAmount: string;
+    currency: string;
+    rail: string;
+    expiresAt: string;
+    ap2IntentRef?: string;
+}
+export interface CreateMandateResult {
+    mandateId: string;
+    /** The `X-Solidus-Mandate` header value — feed this straight into `check_mandate`. */
+    envelope: string;
+    expiresAt: string | null;
+}
+/**
+ * Write tool: create a spend_mandate credential via `AgentIdentity.createMandate`,
+ * then derive the checkable envelope with `buildMandateHeader`. Returns only
+ * {mandateId, envelope, expiresAt} — never the credential bundle (signature,
+ * public key, raw message vector) that `createMandate` returns underneath.
+ */
+export declare function createMandate(deps: Pick<Deps, 'agent'>, args: CreateMandateArgs): Promise<CreateMandateResult>;
+//# sourceMappingURL=create-mandate.d.ts.map

package/dist/create-mandate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-mandate.d.ts","sourceRoot":"","sources":["../src/create-mandate.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAErC,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAA;IACf,YAAY,EAAE,MAAM,CAAA;IACpB,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;IAChB,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,EAAE,MAAM,CAAA;IACjB,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB;AAED,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAA;IACjB,sFAAsF;IACtF,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CACzB;AAED;;;;;GAKG;AACH,wBAAsB,aAAa,CACjC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,EACzB,IAAI,EAAE,iBAAiB,GACtB,OAAO,CAAC,mBAAmB,CAAC,CAU9B"}

package/dist/create-mandate.js

@@ -0,0 +1,18 @@
+import { buildMandateHeader } from '@solidus-network/agent-identity';
+/**
+ * Write tool: create a spend_mandate credential via `AgentIdentity.createMandate`,
+ * then derive the checkable envelope with `buildMandateHeader`. Returns only
+ * {mandateId, envelope, expiresAt} — never the credential bundle (signature,
+ * public key, raw message vector) that `createMandate` returns underneath.
+ */
+export async function createMandate(deps, args) {
+    const { agentId, ...input } = args;
+    const result = await deps.agent.createMandate(agentId, input);
+    const header = await buildMandateHeader(result.bundle, { rail: args.rail, currency: args.currency }, {});
+    return {
+        mandateId: result.mandate.id,
+        envelope: header.value,
+        expiresAt: result.mandate.expiresAt,
+    };
+}
+//# sourceMappingURL=create-mandate.js.map

package/dist/create-mandate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-mandate.js","sourceRoot":"","sources":["../src/create-mandate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AAoB5D;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAyB,EACzB,IAAuB;IAEvB,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,EAAE,GAAG,IAAI,CAAA;IAClC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;IAC7D,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAA;IAExG,OAAO;QACL,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE;QAC5B,QAAQ,EAAE,MAAM,CAAC,KAAK;QACtB,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS;KACpC,CAAA;AACH,CAAC"}

package/dist/deps.d.ts

@@ -0,0 +1,28 @@
+import { type SolidusSDK } from '@solidus-network/sdk';
+import { type AgentIdentity } from '@solidus-network/agent-identity';
+/**
+ * Injected dependencies every tool handler needs. Handlers are pure
+ * functions of `(deps, args)` — no handler reads `process.env` directly,
+ * which is what makes them unit-testable without a real network or chain.
+ */
+export interface Deps {
+    sdk: SolidusSDK;
+    agent: AgentIdentity;
+    agentsBaseUrl: string;
+    /** Resolved chain RPC endpoint — exposed (like `agentsBaseUrl`) so the effective config is observable. */
+    rpcUrl: string;
+    fetchImpl: typeof fetch;
+}
+/**
+ * Build {@link Deps} from environment variables. Defaults the chain SDK to
+ * `testnet` mode. `stub` mode routes `did.resolve`/`credentials.verify`
+ * through a Postgres-backed simulation (`@solidus-network/sdk`'s `src/stub/*.ts`,
+ * requires `SOLIDUS_STUB_DB_URL`) — shipping that as the default would mean
+ * an installed server either crashes or returns simulated data while its
+ * tool description claims to resolve `did:solidus`. `createSdk` now makes
+ * the signer key lazy (only `did.create` needs one), so a read-only
+ * `testnet` chain client works with no key and no DB. Set
+ * `SOLIDUS_SDK_MODE=stub` explicitly to opt into stub mode for local dev.
+ */
+export declare function buildDepsFromEnv(env: Record<string, string | undefined>): Deps;
+//# sourceMappingURL=deps.d.ts.map

package/dist/deps.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deps.d.ts","sourceRoot":"","sources":["../src/deps.ts"],"names":[],"mappings":"AAAA,OAAO,EAAa,KAAK,UAAU,EAAE,MAAM,cAAc,CAAA;AACzD,OAAO,EAAuB,KAAK,aAAa,EAAE,MAAM,yBAAyB,CAAA;AAEjF;;;;GAIG;AACH,MAAM,WAAW,IAAI;IACnB,GAAG,EAAE,UAAU,CAAA;IACf,KAAK,EAAE,aAAa,CAAA;IACpB,aAAa,EAAE,MAAM,CAAA;IACrB,0GAA0G;IAC1G,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,OAAO,KAAK,CAAA;CACxB;AAWD;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAAG,IAAI,CA0B9E"}

package/dist/deps.js

@@ -0,0 +1,46 @@
+import { createSdk } from '@solidus-network/sdk';
+import { createAgentIdentity } from '@solidus-network/agent-identity';
+const DEFAULT_AGENTS_URL = 'https://agents.solidus.network';
+/**
+ * Must be defaulted HERE, not left to the SDK. `@solidus-network/sdk` falls back to
+ * `http://127.0.0.1:9944` when no rpcUrl is given, so omitting this pointed a
+ * freshly-installed `npx @solidus-network/mcp` at the user's own localhost —
+ * every tool call died with "fetch failed".
+ */
+const DEFAULT_RPC_URL = 'https://rpc.solidus.network';
+/**
+ * Build {@link Deps} from environment variables. Defaults the chain SDK to
+ * `testnet` mode. `stub` mode routes `did.resolve`/`credentials.verify`
+ * through a Postgres-backed simulation (`@solidus-network/sdk`'s `src/stub/*.ts`,
+ * requires `SOLIDUS_STUB_DB_URL`) — shipping that as the default would mean
+ * an installed server either crashes or returns simulated data while its
+ * tool description claims to resolve `did:solidus`. `createSdk` now makes
+ * the signer key lazy (only `did.create` needs one), so a read-only
+ * `testnet` chain client works with no key and no DB. Set
+ * `SOLIDUS_SDK_MODE=stub` explicitly to opt into stub mode for local dev.
+ */
+export function buildDepsFromEnv(env) {
+    const agentsBaseUrl = env['SOLIDUS_AGENTS_URL'] ?? DEFAULT_AGENTS_URL;
+    const rpcUrl = env['SOLIDUS_RPC_URL'] ?? DEFAULT_RPC_URL;
+    const mode = env['SOLIDUS_SDK_MODE'] ?? 'testnet';
+    const signerPrivateKey = env['SOLIDUS_SIGNER_KEY'];
+    const token = env['SOLIDUS_API_KEY'];
+    const sdk = createSdk({
+        mode,
+        ...(rpcUrl !== undefined ? { rpcUrl } : {}),
+        ...(signerPrivateKey !== undefined ? { signerPrivateKey } : {}),
+    });
+    const agent = createAgentIdentity({
+        baseUrl: agentsBaseUrl,
+        ...(token !== undefined ? { token } : {}),
+        ...(rpcUrl !== undefined ? { solidusRpcUrl: rpcUrl } : {}),
+    });
+    return {
+        sdk,
+        agent,
+        agentsBaseUrl,
+        rpcUrl,
+        fetchImpl: globalThis.fetch,
+    };
+}
+//# sourceMappingURL=deps.js.map

package/dist/deps.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deps.js","sourceRoot":"","sources":["../src/deps.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAmB,MAAM,cAAc,CAAA;AACzD,OAAO,EAAE,mBAAmB,EAAsB,MAAM,yBAAyB,CAAA;AAgBjF,MAAM,kBAAkB,GAAG,gCAAgC,CAAA;AAC3D;;;;;GAKG;AACH,MAAM,eAAe,GAAG,6BAA6B,CAAA;AAErD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAuC;IACtE,MAAM,aAAa,GAAG,GAAG,CAAC,oBAAoB,CAAC,IAAI,kBAAkB,CAAA;IACrE,MAAM,MAAM,GAAG,GAAG,CAAC,iBAAiB,CAAC,IAAI,eAAe,CAAA;IACxD,MAAM,IAAI,GAAI,GAAG,CAAC,kBAAkB,CAAgD,IAAI,SAAS,CAAA;IACjG,MAAM,gBAAgB,GAAG,GAAG,CAAC,oBAAoB,CAAC,CAAA;IAClD,MAAM,KAAK,GAAG,GAAG,CAAC,iBAAiB,CAAC,CAAA;IAEpC,MAAM,GAAG,GAAG,SAAS,CAAC;QACpB,IAAI;QACJ,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3C,GAAG,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChE,CAAC,CAAA;IAEF,MAAM,KAAK,GAAG,mBAAmB,CAAC;QAChC,OAAO,EAAE,aAAa;QACtB,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzC,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3D,CAAC,CAAA;IAEF,OAAO;QACL,GAAG;QACH,KAAK;QACL,aAAa;QACb,MAAM;QACN,SAAS,EAAE,UAAU,CAAC,KAAK;KAC5B,CAAA;AACH,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":""}

package/dist/index.js

@@ -0,0 +1,15 @@
+#!/usr/bin/env node
+import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+import { buildDepsFromEnv } from './deps.js';
+import { buildServer } from './server.js';
+async function main() {
+    const deps = buildDepsFromEnv(process.env);
+    const server = buildServer(deps);
+    const transport = new StdioServerTransport();
+    await server.connect(transport);
+}
+main().catch((err) => {
+    console.error('solidus-mcp failed to start:', err);
+    process.exit(1);
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAA;AAChF,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAA;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAEzC,KAAK,UAAU,IAAI;IACjB,MAAM,IAAI,GAAG,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IAC1C,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,CAAA;IAChC,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAA;IAC5C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;AACjC,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,GAAG,CAAC,CAAA;IAClD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AACjB,CAAC,CAAC,CAAA"}

package/dist/resolve-did.d.ts

@@ -0,0 +1,12 @@
+import type { DIDDocument } from '@solidus-network/sdk';
+import type { Deps } from './deps.js';
+export interface ResolveDidResult {
+    did: string;
+    document: DIDDocument | null;
+    resolved: boolean;
+}
+/** Read tool: resolve a `did:solidus` DID document via the chain SDK. */
+export declare function resolveDid(deps: Pick<Deps, 'sdk'>, args: {
+    did: string;
+}): Promise<ResolveDidResult>;
+//# sourceMappingURL=resolve-did.d.ts.map

package/dist/resolve-did.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-did.d.ts","sourceRoot":"","sources":["../src/resolve-did.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AAC/C,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAErC,MAAM,WAAW,gBAAgB;IAC/B,GAAG,EAAE,MAAM,CAAA;IACX,QAAQ,EAAE,WAAW,GAAG,IAAI,CAAA;IAC5B,QAAQ,EAAE,OAAO,CAAA;CAClB;AAED,yEAAyE;AACzE,wBAAsB,UAAU,CAC9B,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,EACvB,IAAI,EAAE;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,GACpB,OAAO,CAAC,gBAAgB,CAAC,CAG3B"}

package/dist/resolve-did.js

@@ -0,0 +1,6 @@
+/** Read tool: resolve a `did:solidus` DID document via the chain SDK. */
+export async function resolveDid(deps, args) {
+    const document = await deps.sdk.did.resolve(args.did);
+    return { did: args.did, document, resolved: document !== null };
+}
+//# sourceMappingURL=resolve-did.js.map

package/dist/resolve-did.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-did.js","sourceRoot":"","sources":["../src/resolve-did.ts"],"names":[],"mappings":"AASA,yEAAyE;AACzE,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,IAAuB,EACvB,IAAqB;IAErB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACrD,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,KAAK,IAAI,EAAE,CAAA;AACjE,CAAC"}

package/dist/server.d.ts

@@ -0,0 +1,9 @@
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { Deps } from './deps.js';
+/**
+ * Build the Solidus MCP server: registers all five tools against the
+ * injected {@link Deps}. Pure factory — no env reads, no transport. The bin
+ * entrypoint (`index.ts`) supplies `Deps` and the stdio transport.
+ */
+export declare function buildServer(deps: Deps): McpServer;
+//# sourceMappingURL=server.d.ts.map

package/dist/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAA;AAEnE,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAYrC;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,IAAI,GAAG,SAAS,CA0GjD"}

package/dist/server.js

@@ -0,0 +1,88 @@
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import { z } from 'zod';
+import { resolveDid } from './resolve-did.js';
+import { verifyCredential } from './verify-credential.js';
+import { checkMandate } from './check-mandate.js';
+import { createMandate } from './create-mandate.js';
+import { agentPay } from './agent-pay.js';
+/** Wrap a handler's JSON-serializable result in the MCP tool-call content shape. */
+function toolResult(value) {
+    return { content: [{ type: 'text', text: JSON.stringify(value) }] };
+}
+/**
+ * Build the Solidus MCP server: registers all five tools against the
+ * injected {@link Deps}. Pure factory — no env reads, no transport. The bin
+ * entrypoint (`index.ts`) supplies `Deps` and the stdio transport.
+ */
+export function buildServer(deps) {
+    const server = new McpServer({ name: 'solidus', version: '0.1.0' });
+    server.registerTool('resolve_did', {
+        title: 'Resolve DID',
+        description: 'Resolve a did:solidus DID document from the Solidus chain. Read-only, no auth required. ' +
+            'Returns {did, document, resolved} — document is null and resolved is false if the DID is not found.',
+        inputSchema: {
+            did: z.string().describe('The did:solidus DID to resolve, e.g. did:solidus:testnet:abc123.'),
+        },
+    }, async ({ did }) => toolResult(await resolveDid(deps, { did })));
+    server.registerTool('verify_credential', {
+        title: 'Verify Credential',
+        description: 'Verify a Solidus verifiable credential by id against the Solidus chain. Read-only, no auth ' +
+            'required. Returns {vcId, result} where result is the chain verification outcome verbatim.',
+        inputSchema: {
+            vcId: z.string().describe('The verifiable credential id to verify.'),
+        },
+    }, async ({ vcId }) => toolResult(await verifyCredential(deps, { vcId })));
+    server.registerTool('check_mandate', {
+        title: 'Check Mandate',
+        description: 'Check whether a spend mandate envelope authorizes a payment of the given amount/currency/rail. ' +
+            'Read-only and pure — performs no side effects, moves no money. This is the counterparty refusal ' +
+            'check: returns {authorized:false, reason} when the mandate does not cover the request, or ' +
+            '{authorized:true, agentDid, principalDid, maxAmount, expiresAt, verifiedAsOf} when it does.',
+        inputSchema: {
+            envelope: z.string().describe('The X-Solidus-Mandate header value (base64url envelope).'),
+            amount: z.union([z.string(), z.number()]).describe('The payment amount to check against the mandate.'),
+            currency: z.string().describe('The payment currency, e.g. TRY, USD.'),
+            rail: z.string().describe("The payment rail, e.g. 'moka' or 'x402'."),
+        },
+    }, async ({ envelope, amount, currency, rail }) => toolResult(await checkMandate(deps, { envelope, amount, currency, rail })));
+    server.registerTool('create_mandate', {
+        title: 'Create Mandate',
+        description: 'Create a scoped spend_mandate credential for an agent, bounded by maxAmount/currency/rail/expiresAt, ' +
+            'on behalf of a principal DID. WRITE tool — this issues a real credential; a human should confirm ' +
+            'the terms before calling it. Returns only {mandateId, envelope, expiresAt} — never the private key ' +
+            'or credential bundle. The returned envelope is what check_mandate and agent_pay consume.',
+        inputSchema: {
+            agentId: z.string().describe('The id of the agent the mandate is issued to.'),
+            principalDid: z.string().describe('The did:solidus of the human/principal the agent acts for.'),
+            maxAmount: z.string().describe('The maximum spend amount the mandate authorizes, as a string.'),
+            currency: z.string().describe('The mandate currency, e.g. TRY, USD.'),
+            rail: z.string().describe("The payment rail this mandate is scoped to, e.g. 'moka' or 'x402'."),
+            expiresAt: z.string().describe('Absolute ISO 8601 timestamp the mandate expires at.'),
+            ap2IntentRef: z.string().optional().describe('Optional AP2 intent reference to bind the mandate to.'),
+        },
+    }, async ({ agentId, principalDid, maxAmount, currency, rail, expiresAt, ap2IntentRef }) => toolResult(await createMandate(deps, {
+        agentId,
+        principalDid,
+        maxAmount,
+        currency,
+        rail,
+        expiresAt,
+        ...(ap2IntentRef !== undefined ? { ap2IntentRef } : {}),
+    })));
+    server.registerTool('agent_pay', {
+        title: 'Agent Pay',
+        description: 'Authorize a payment under a spend mandate and, if authorized, return the envelope for the caller ' +
+            'to present to their OWN payment rail (Moka / x402). WRITE tool. This tool does NOT settle money — ' +
+            'Solidus never moves funds — it only checks the mandate and hands back an authorized envelope + the ' +
+            'X-Solidus-Mandate header name to send it under. A refused check returns {authorized:false, reason} ' +
+            'and performs no further work.',
+        inputSchema: {
+            envelope: z.string().describe('The X-Solidus-Mandate header value (base64url envelope).'),
+            amount: z.union([z.string(), z.number()]).describe('The payment amount to authorize.'),
+            currency: z.string().describe('The payment currency, e.g. TRY, USD.'),
+            rail: z.enum(['moka', 'x402']).describe('The payment rail the caller will settle on.'),
+        },
+    }, async ({ envelope, amount, currency, rail }) => toolResult(await agentPay(deps, { envelope, amount, currency, rail })));
+    return server;
+}
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAA;AACnE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAC7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAA;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACnD,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAEzC,oFAAoF;AACpF,SAAS,UAAU,CAAC,KAAc;IAChC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAA;AAC9E,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,IAAU;IACpC,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAA;IAEnE,MAAM,CAAC,YAAY,CACjB,aAAa,EACb;QACE,KAAK,EAAE,aAAa;QACpB,WAAW,EACT,0FAA0F;YAC1F,qGAAqG;QACvG,WAAW,EAAE;YACX,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kEAAkE,CAAC;SAC7F;KACF,EACD,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,UAAU,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,CAC/D,CAAA;IAED,MAAM,CAAC,YAAY,CACjB,mBAAmB,EACnB;QACE,KAAK,EAAE,mBAAmB;QAC1B,WAAW,EACT,6FAA6F;YAC7F,2FAA2F;QAC7F,WAAW,EAAE;YACX,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;SACrE;KACF,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,gBAAgB,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CACvE,CAAA;IAED,MAAM,CAAC,YAAY,CACjB,eAAe,EACf;QACE,KAAK,EAAE,eAAe;QACtB,WAAW,EACT,iGAAiG;YACjG,kGAAkG;YAClG,4FAA4F;YAC5F,6FAA6F;QAC/F,WAAW,EAAE;YACX,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0DAA0D,CAAC;YACzF,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,kDAAkD,CAAC;YACtG,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,sCAAsC,CAAC;YACrE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;SACtE;KACF,EACD,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,CAC7C,UAAU,CAAC,MAAM,YAAY,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAC7E,CAAA;IAED,MAAM,CAAC,YAAY,CACjB,gBAAgB,EAChB;QACE,KAAK,EAAE,gBAAgB;QACvB,WAAW,EACT,uGAAuG;YACvG,mGAAmG;YACnG,qGAAqG;YACrG,0FAA0F;QAC5F,WAAW,EAAE;YACX,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,+CAA+C,CAAC;YAC7E,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,4DAA4D,CAAC;YAC/F,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,+DAA+D,CAAC;YAC/F,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,sCAAsC,CAAC;YACrE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oEAAoE,CAAC;YAC/F,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,qDAAqD,CAAC;YACrF,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uDAAuD,CAAC;SACtG;KACF,EACD,KAAK,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE,EAAE,EAAE,CACtF,UAAU,CACR,MAAM,aAAa,CAAC,IAAI,EAAE;QACxB,OAAO;QACP,YAAY;QACZ,SAAS;QACT,QAAQ;QACR,IAAI;QACJ,SAAS;QACT,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxD,CAAC,CACH,CACJ,CAAA;IAED,MAAM,CAAC,YAAY,CACjB,WAAW,EACX;QACE,KAAK,EAAE,WAAW;QAClB,WAAW,EACT,mGAAmG;YACnG,oGAAoG;YACpG,qGAAqG;YACrG,qGAAqG;YACrG,+BAA+B;QACjC,WAAW,EAAE;YACX,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0DAA0D,CAAC;YACzF,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,kCAAkC,CAAC;YACtF,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,sCAAsC,CAAC;YACrE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,6CAA6C,CAAC;SACvF;KACF,EACD,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,CAC7C,UAAU,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CACzE,CAAA;IAED,OAAO,MAAM,CAAA;AACf,CAAC"}

package/dist/verify-credential.d.ts

@@ -0,0 +1,11 @@
+import type { VerificationResult } from '@solidus-network/sdk';
+import type { Deps } from './deps.js';
+export interface VerifyCredentialResult {
+    vcId: string;
+    result: VerificationResult;
+}
+/** Read tool: verify a Solidus verifiable credential via the chain SDK. */
+export declare function verifyCredential(deps: Pick<Deps, 'sdk'>, args: {
+    vcId: string;
+}): Promise<VerifyCredentialResult>;
+//# sourceMappingURL=verify-credential.d.ts.map

package/dist/verify-credential.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify-credential.d.ts","sourceRoot":"","sources":["../src/verify-credential.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAA;AACtD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAErC,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,kBAAkB,CAAA;CAC3B;AAED,2EAA2E;AAC3E,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,EACvB,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GACrB,OAAO,CAAC,sBAAsB,CAAC,CAGjC"}

package/dist/verify-credential.js

@@ -0,0 +1,6 @@
+/** Read tool: verify a Solidus verifiable credential via the chain SDK. */
+export async function verifyCredential(deps, args) {
+    const result = await deps.sdk.credentials.verify(args.vcId);
+    return { vcId: args.vcId, result };
+}
+//# sourceMappingURL=verify-credential.js.map

package/dist/verify-credential.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify-credential.js","sourceRoot":"","sources":["../src/verify-credential.ts"],"names":[],"mappings":"AAQA,2EAA2E;AAC3E,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAAuB,EACvB,IAAsB;IAEtB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC3D,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,CAAA;AACpC,CAAC"}

package/package.json

@@ -0,0 +1,53 @@
+{
+  "name": "@solidus-network/mcp",
+  "version": "0.1.0",
+  "description": "Solidus MCP server — run-time agent tools: resolve did:solidus, verify credentials, check/create scoped spend mandates, and authorize payments against them.",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "bin": {
+    "solidus-mcp": "./dist/index.js"
+  },
+  "exports": {
+    ".": {
+      "import": "./dist/index.js",
+      "types": "./dist/index.d.ts"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.12.0",
+    "@solidus-network/agent-identity": "0.1.2",
+    "@solidus-network/sdk": "0.6.3",
+    "zod": "^3.22.4"
+  },
+  "keywords": [
+    "solidus",
+    "mcp",
+    "model-context-protocol",
+    "ai-agents",
+    "agent-tools",
+    "did",
+    "verifiable-credentials",
+    "spend-mandate",
+    "decentralized-identity"
+  ],
+  "author": "Solidus Network (https://solidus.network)",
+  "license": "Apache-2.0",
+  "homepage": "https://solidus.network",
+  "bugs": {
+    "url": "https://github.com/solidusnetwork/sdk/issues"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/solidusnetwork/sdk.git",
+    "directory": "mcp"
+  },
+  "publishConfig": {
+    "access": "public"
+  }
+}