@xrpl-utilities/mcp 0.1.6

package/dist/services/pulse.js

@@ -0,0 +1,66 @@
+/**
+ * XR-Pulse: normalized XRPL signal feed bridging public-source news,
+ * on-chain whale activity, and XLS-70/80/81 permissioned-domain
+ * lifecycle events into one time-ordered stream.
+ *
+ * News carries a four-hour XRPL price-window correlation. Whale rows
+ * carry sender + receiver addresses with XRPScan institutional
+ * labels. Permissioned-domain rows mirror XR-Trust's /events with
+ * cross-product enrichment. Paid via x402 ($0.10 USD per query).
+ */
+export const pulse = {
+    id: "pulse",
+    label: "XR-Pulse",
+    baseUrl: "https://pulse.xrpl-utilities.io",
+    manifestUrl: "https://pulse.xrpl-utilities.io/agents.json",
+    knownSchemaVersions: ["1.10.0", "1.10.1"],
+    tools: [
+        {
+            name: "xrpl_pulse_recent_events",
+            description: "Return the most-recent normalized XRPL signal events newest-first. " +
+                "Mixes three streams: public-source news (regulatory press + " +
+                "central banks + crypto media filtered for XRP/RLUSD/XRPL/Ripple), " +
+                "on-chain whale activity (every Payment above the storage " +
+                "threshold), and XLS-70/80/81 permissioned-domain lifecycle " +
+                "events sourced from XR-Trust. Each event carries title, brief, " +
+                "published_at, source_appearances[], correlation (news only), " +
+                "active_utility (per-source canonical shape), and " +
+                "target_addresses[]. Costs $0.10 USD per call paid via XRPL x402.",
+            inputSchema: {
+                type: "object",
+                properties: {
+                    limit: {
+                        type: "integer",
+                        description: "Max events to return (1-500). Default 50.",
+                        minimum: 1,
+                        maximum: 500,
+                        default: 50,
+                    },
+                    since_iso: {
+                        type: "string",
+                        description: "ISO 8601 timestamp; only events with published_at >= this " +
+                            "are returned. Optional.",
+                    },
+                    min_whale_usd: {
+                        type: "number",
+                        description: "Suppress whale events below this USD threshold. Default " +
+                            "$500,000 (whale-grade only). Pass 0 to see the full " +
+                            "$50k+ activity stream.",
+                        minimum: 0,
+                    },
+                    payment_signature: {
+                        type: "string",
+                        description: "x402 v2 PAYMENT-SIGNATURE header.",
+                    },
+                },
+                additionalProperties: false,
+            },
+            method: "POST",
+            path: "/events/recent",
+            authMode: "inline_x402",
+            bodyFromArgs: true,
+            stripArgs: ["payment_signature"],
+        },
+    ],
+};
+//# sourceMappingURL=pulse.js.map

package/dist/services/pulse.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pulse.js","sourceRoot":"","sources":["../../src/services/pulse.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,MAAM,CAAC,MAAM,KAAK,GAAe;IAC/B,EAAE,EAAE,OAAO;IACX,KAAK,EAAE,UAAU;IACjB,OAAO,EAAE,iCAAiC;IAC1C,WAAW,EAAE,6CAA6C;IAC1D,mBAAmB,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC;IACzC,KAAK,EAAE;QACL;YACE,IAAI,EAAE,0BAA0B;YAChC,WAAW,EACT,qEAAqE;gBACrE,8DAA8D;gBAC9D,oEAAoE;gBACpE,2DAA2D;gBAC3D,6DAA6D;gBAC7D,iEAAiE;gBACjE,+DAA+D;gBAC/D,mDAAmD;gBACnD,kEAAkE;YACpE,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,KAAK,EAAE;wBACL,IAAI,EAAE,SAAS;wBACf,WAAW,EAAE,2CAA2C;wBACxD,OAAO,EAAE,CAAC;wBACV,OAAO,EAAE,GAAG;wBACZ,OAAO,EAAE,EAAE;qBACZ;oBACD,SAAS,EAAE;wBACT,IAAI,EAAE,QAAQ;wBACd,WAAW,EACT,4DAA4D;4BAC5D,yBAAyB;qBAC5B;oBACD,aAAa,EAAE;wBACb,IAAI,EAAE,QAAQ;wBACd,WAAW,EACT,0DAA0D;4BAC1D,sDAAsD;4BACtD,wBAAwB;wBAC1B,OAAO,EAAE,CAAC;qBACX;oBACD,iBAAiB,EAAE;wBACjB,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,mCAAmC;qBACjD;iBACF;gBACD,oBAAoB,EAAE,KAAK;aAC5B;YACD,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,gBAAgB;YACtB,QAAQ,EAAE,aAAa;YACvB,YAAY,EAAE,IAAI;YAClB,SAAS,EAAE,CAAC,mBAAmB,CAAC;SACjC;KACF;CACF,CAAC"}

package/dist/services/sentinel.d.ts

@@ -0,0 +1,11 @@
+/**
+ * XR-Sentinel: XRPL wallet activity-pattern classifier.
+ *
+ * Returns a 0-100 activity_score, an activity_level (Low / Medium /
+ * High / Dormant / Unknown), a confidence tier, an array of
+ * behavioral signals from a published catalog, and an AI-generated
+ * narrative reasoning. Free for the marketing-site origin; paid via
+ * x402 ($0.10 USD) for agents.
+ */
+import type { ServiceDef } from "../types.js";
+export declare const sentinel: ServiceDef;

package/dist/services/sentinel.js

@@ -0,0 +1,84 @@
+/**
+ * XR-Sentinel: XRPL wallet activity-pattern classifier.
+ *
+ * Returns a 0-100 activity_score, an activity_level (Low / Medium /
+ * High / Dormant / Unknown), a confidence tier, an array of
+ * behavioral signals from a published catalog, and an AI-generated
+ * narrative reasoning. Free for the marketing-site origin; paid via
+ * x402 ($0.10 USD) for agents.
+ */
+export const sentinel = {
+    id: "sentinel",
+    label: "XR-Sentinel",
+    baseUrl: "https://sentinel.xrpl-utilities.io",
+    manifestUrl: "https://sentinel.xrpl-utilities.io/agents.json",
+    knownSchemaVersions: ["2026-05"],
+    tools: [
+        {
+            name: "xrpl_sentinel_scan",
+            description: "Classify an XRPL wallet by its on-chain activity pattern. Returns " +
+                "activity_score (0-100, higher = more automated/service-like), " +
+                "activity_level (Low/Medium/High/Dormant/Unknown), confidence, " +
+                "signals[] from a 22-entry behavioral catalog, top_counterparties[] " +
+                "with XRPScan labels, an AI-generated reasoning narrative, and a " +
+                "_delta block when prior recorded scans exist. Costs $0.10 USD per " +
+                "call paid via XRPL x402 (XRP or RLUSD). Pass payment_signature " +
+                "from your x402-xrpl client.",
+            inputSchema: {
+                type: "object",
+                properties: {
+                    address: {
+                        type: "string",
+                        description: "XRPL classic address (r-prefixed, base58).",
+                        pattern: "^r[1-9A-HJ-NP-Za-km-z]{24,34}$",
+                    },
+                    payment_signature: {
+                        type: "string",
+                        description: "x402 v2 PAYMENT-SIGNATURE header (base64-encoded JSON of a " +
+                            "signed XRPL Payment matching one of the requirements returned " +
+                            "by an initial unauthenticated probe). Omit for free " +
+                            "marketing-site preview, supply for the paid agent path.",
+                    },
+                },
+                required: ["address"],
+                additionalProperties: false,
+            },
+            method: "POST",
+            path: "/scan",
+            authMode: "inline_x402",
+            bodyFromArgs: true,
+            stripArgs: ["payment_signature"],
+        },
+        {
+            name: "xrpl_sentinel_scan_history",
+            description: "Return up to 25 prior recorded scans for an address so an agent " +
+                "can read trajectory without scanning the wallet N times. Each " +
+                "history row carries score, level, signals, features, and " +
+                "scanned_at. Costs $0.10 USD per call paid via XRPL x402. " +
+                "Recording began with schema 2.1.0; older paid scans were not " +
+                "persisted.",
+            inputSchema: {
+                type: "object",
+                properties: {
+                    address: {
+                        type: "string",
+                        description: "XRPL classic address.",
+                        pattern: "^r[1-9A-HJ-NP-Za-km-z]{24,34}$",
+                    },
+                    payment_signature: {
+                        type: "string",
+                        description: "x402 v2 PAYMENT-SIGNATURE header.",
+                    },
+                },
+                required: ["address"],
+                additionalProperties: false,
+            },
+            method: "POST",
+            path: "/scan/history",
+            authMode: "inline_x402",
+            bodyFromArgs: true,
+            stripArgs: ["payment_signature"],
+        },
+    ],
+};
+//# sourceMappingURL=sentinel.js.map

package/dist/services/sentinel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sentinel.js","sourceRoot":"","sources":["../../src/services/sentinel.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,MAAM,CAAC,MAAM,QAAQ,GAAe;IAClC,EAAE,EAAE,UAAU;IACd,KAAK,EAAE,aAAa;IACpB,OAAO,EAAE,oCAAoC;IAC7C,WAAW,EAAE,gDAAgD;IAC7D,mBAAmB,EAAE,CAAC,SAAS,CAAC;IAChC,KAAK,EAAE;QACL;YACE,IAAI,EAAE,oBAAoB;YAC1B,WAAW,EACT,oEAAoE;gBACpE,gEAAgE;gBAChE,gEAAgE;gBAChE,qEAAqE;gBACrE,kEAAkE;gBAClE,oEAAoE;gBACpE,iEAAiE;gBACjE,6BAA6B;YAC/B,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,OAAO,EAAE;wBACP,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,4CAA4C;wBACzD,OAAO,EAAE,gCAAgC;qBAC1C;oBACD,iBAAiB,EAAE;wBACjB,IAAI,EAAE,QAAQ;wBACd,WAAW,EACT,6DAA6D;4BAC7D,gEAAgE;4BAChE,sDAAsD;4BACtD,yDAAyD;qBAC5D;iBACF;gBACD,QAAQ,EAAE,CAAC,SAAS,CAAC;gBACrB,oBAAoB,EAAE,KAAK;aAC5B;YACD,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,OAAO;YACb,QAAQ,EAAE,aAAa;YACvB,YAAY,EAAE,IAAI;YAClB,SAAS,EAAE,CAAC,mBAAmB,CAAC;SACjC;QACD;YACE,IAAI,EAAE,4BAA4B;YAClC,WAAW,EACT,kEAAkE;gBAClE,gEAAgE;gBAChE,2DAA2D;gBAC3D,2DAA2D;gBAC3D,+DAA+D;gBAC/D,YAAY;YACd,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,OAAO,EAAE;wBACP,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,uBAAuB;wBACpC,OAAO,EAAE,gCAAgC;qBAC1C;oBACD,iBAAiB,EAAE;wBACjB,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,mCAAmC;qBACjD;iBACF;gBACD,QAAQ,EAAE,CAAC,SAAS,CAAC;gBACrB,oBAAoB,EAAE,KAAK;aAC5B;YACD,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,eAAe;YACrB,QAAQ,EAAE,aAAa;YACvB,YAAY,EAAE,IAAI;YAClB,SAAS,EAAE,CAAC,mBAAmB,CAAC;SACjC;KACF;CACF,CAAC"}

package/dist/services/telemetry.d.ts

@@ -0,0 +1,21 @@
+/**
+ * XR-Telemetry: XRPL macro snapshot — supply, liquidity, AMM, derived
+ * Active Float (3-second settlement supply), and the Burst Math
+ * utility floor.
+ *
+ * Two payment flows are exposed:
+ *
+ *  1. The async invoice flow (quote → pay → status → results), which
+ *     mirrors how a human user buys a snapshot. Useful for agents
+ *     that hold a wallet and can do the polling themselves.
+ *
+ *  2. The one-shot /scan endpoint, which uses the standard x402
+ *     verify-then-work-then-settle pattern (caller provides
+ *     PAYMENT-SIGNATURE in the request, server verifies, runs the
+ *     snapshot, settles, returns).
+ *
+ * MCP exposes both — agents pick the path that matches their wallet
+ * abstraction. $0.10 USD per call.
+ */
+import type { ServiceDef } from "../types.js";
+export declare const telemetry: ServiceDef;

package/dist/services/telemetry.js

@@ -0,0 +1,118 @@
+/**
+ * XR-Telemetry: XRPL macro snapshot — supply, liquidity, AMM, derived
+ * Active Float (3-second settlement supply), and the Burst Math
+ * utility floor.
+ *
+ * Two payment flows are exposed:
+ *
+ *  1. The async invoice flow (quote → pay → status → results), which
+ *     mirrors how a human user buys a snapshot. Useful for agents
+ *     that hold a wallet and can do the polling themselves.
+ *
+ *  2. The one-shot /scan endpoint, which uses the standard x402
+ *     verify-then-work-then-settle pattern (caller provides
+ *     PAYMENT-SIGNATURE in the request, server verifies, runs the
+ *     snapshot, settles, returns).
+ *
+ * MCP exposes both — agents pick the path that matches their wallet
+ * abstraction. $0.10 USD per call.
+ */
+export const telemetry = {
+    id: "telemetry",
+    label: "XR-Telemetry",
+    baseUrl: "https://telemetry.xrpl-utilities.io",
+    manifestUrl: "https://telemetry.xrpl-utilities.io/agents.json",
+    knownSchemaVersions: ["1.1.0"],
+    tools: [
+        {
+            name: "xrpl_telemetry_snapshot",
+            description: "One-shot XRPL macro snapshot. Returns supply (total / circulating " +
+                "/ escrowed / dormant / AMM-locked / exchange omnibus / DEX " +
+                "orderbook depth), liquidity (per-region 24h flows), amm (top " +
+                "pairs + vaults), derived_models.active_float (modeled supply " +
+                "available for 3-second settlement, with the full additive " +
+                "mathematical_bridge), and utility_floor (baseline equilibrium " +
+                "price + premium ratio). Standard x402 verify-then-work-then-" +
+                "settle. $0.10 USD per call. Pass payment_signature.",
+            inputSchema: {
+                type: "object",
+                properties: {
+                    payment_signature: {
+                        type: "string",
+                        description: "x402 v2 PAYMENT-SIGNATURE header.",
+                    },
+                },
+                additionalProperties: false,
+            },
+            method: "POST",
+            path: "/scan",
+            authMode: "inline_x402",
+            bodyFromArgs: true,
+            stripArgs: ["payment_signature"],
+        },
+        {
+            name: "xrpl_telemetry_get_quote",
+            description: "Start the async invoice flow: returns invoice_id, amount in " +
+                "drops, payTo address, deepLink + QR, and expiry. The caller " +
+                "pays the XRPL Payment to that address from any wallet, then " +
+                "polls xrpl_telemetry_get_status until paid: true, then calls " +
+                "xrpl_telemetry_get_results. The MCP wrapper itself doesn't " +
+                "require a payment_signature header, but the snapshot still " +
+                "costs $0.10 USD - the payment just happens out-of-band as a " +
+                "regular XRPL Payment instead of an inline x402 header.",
+            inputSchema: {
+                type: "object",
+                properties: {},
+                additionalProperties: false,
+            },
+            method: "POST",
+            path: "/quote",
+            authMode: "async_invoice",
+            bodyFromArgs: true,
+        },
+        {
+            name: "xrpl_telemetry_get_status",
+            description: "Poll the status of an invoice from xrpl_telemetry_get_quote. " +
+                "Returns paid (bool), amount, ledger_index when settled, and " +
+                "expiry. The MCP wrapper itself doesn't require a payment header " +
+                "(the operator's check is just reading the validated XRPL ledger " +
+                "for the deposit transaction).",
+            inputSchema: {
+                type: "object",
+                properties: {
+                    invoice_id: {
+                        type: "string",
+                        description: "Invoice id from the /quote response.",
+                    },
+                },
+                required: ["invoice_id"],
+                additionalProperties: false,
+            },
+            method: "GET",
+            path: "/status/{invoice_id}",
+            authMode: "async_invoice",
+        },
+        {
+            name: "xrpl_telemetry_get_results",
+            description: "Fetch the full TelemetryPayload for an invoice once paid. Same " +
+                "shape as xrpl_telemetry_snapshot. The MCP wrapper doesn't need " +
+                "a payment header here because the $0.10 already settled when " +
+                "the caller paid the deeplink in step 2 of the flow.",
+            inputSchema: {
+                type: "object",
+                properties: {
+                    invoice_id: {
+                        type: "string",
+                        description: "Paid invoice id.",
+                    },
+                },
+                required: ["invoice_id"],
+                additionalProperties: false,
+            },
+            method: "GET",
+            path: "/results/{invoice_id}",
+            authMode: "async_invoice",
+        },
+    ],
+};
+//# sourceMappingURL=telemetry.js.map

package/dist/services/telemetry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry.js","sourceRoot":"","sources":["../../src/services/telemetry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAIH,MAAM,CAAC,MAAM,SAAS,GAAe;IACnC,EAAE,EAAE,WAAW;IACf,KAAK,EAAE,cAAc;IACrB,OAAO,EAAE,qCAAqC;IAC9C,WAAW,EAAE,iDAAiD;IAC9D,mBAAmB,EAAE,CAAC,OAAO,CAAC;IAC9B,KAAK,EAAE;QACL;YACE,IAAI,EAAE,yBAAyB;YAC/B,WAAW,EACT,oEAAoE;gBACpE,6DAA6D;gBAC7D,+DAA+D;gBAC/D,+DAA+D;gBAC/D,4DAA4D;gBAC5D,gEAAgE;gBAChE,8DAA8D;gBAC9D,qDAAqD;YACvD,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,iBAAiB,EAAE;wBACjB,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,mCAAmC;qBACjD;iBACF;gBACD,oBAAoB,EAAE,KAAK;aAC5B;YACD,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,OAAO;YACb,QAAQ,EAAE,aAAa;YACvB,YAAY,EAAE,IAAI;YAClB,SAAS,EAAE,CAAC,mBAAmB,CAAC;SACjC;QACD;YACE,IAAI,EAAE,0BAA0B;YAChC,WAAW,EACT,8DAA8D;gBAC9D,8DAA8D;gBAC9D,8DAA8D;gBAC9D,+DAA+D;gBAC/D,6DAA6D;gBAC7D,6DAA6D;gBAC7D,8DAA8D;gBAC9D,wDAAwD;YAC1D,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE,EAAE;gBACd,oBAAoB,EAAE,KAAK;aAC5B;YACD,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,QAAQ;YACd,QAAQ,EAAE,eAAe;YACzB,YAAY,EAAE,IAAI;SACnB;QACD;YACE,IAAI,EAAE,2BAA2B;YACjC,WAAW,EACT,+DAA+D;gBAC/D,8DAA8D;gBAC9D,kEAAkE;gBAClE,kEAAkE;gBAClE,+BAA+B;YACjC,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,UAAU,EAAE;wBACV,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,sCAAsC;qBACpD;iBACF;gBACD,QAAQ,EAAE,CAAC,YAAY,CAAC;gBACxB,oBAAoB,EAAE,KAAK;aAC5B;YACD,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,sBAAsB;YAC5B,QAAQ,EAAE,eAAe;SAC1B;QACD;YACE,IAAI,EAAE,4BAA4B;YAClC,WAAW,EACT,iEAAiE;gBACjE,iEAAiE;gBACjE,+DAA+D;gBAC/D,qDAAqD;YACvD,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,UAAU,EAAE;wBACV,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,kBAAkB;qBAChC;iBACF;gBACD,QAAQ,EAAE,CAAC,YAAY,CAAC;gBACxB,oBAAoB,EAAE,KAAK;aAC5B;YACD,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,uBAAuB;YAC7B,QAAQ,EAAE,eAAe;SAC1B;KACF;CACF,CAAC"}

package/dist/services/trust.d.ts

@@ -0,0 +1,11 @@
+/**
+ * XR-Trust: directory + drill-down for XRPL permissioned-asset stack
+ * (XLS-70 Credentials, XLS-80 PermissionedDomains, XLS-81 Permissioned
+ * DEX), with XLS-40 DID identity bridge.
+ *
+ * /domains, /domain/{id}, /credentials/issuers, and /events are all
+ * x402-paid for agents ($0.10 USD per call). The marketing site uses
+ * the web-origin bypass; MCP callers pay normally.
+ */
+import type { ServiceDef } from "../types.js";
+export declare const trust: ServiceDef;

package/dist/services/trust.js

@@ -0,0 +1,140 @@
+/**
+ * XR-Trust: directory + drill-down for XRPL permissioned-asset stack
+ * (XLS-70 Credentials, XLS-80 PermissionedDomains, XLS-81 Permissioned
+ * DEX), with XLS-40 DID identity bridge.
+ *
+ * /domains, /domain/{id}, /credentials/issuers, and /events are all
+ * x402-paid for agents ($0.10 USD per call). The marketing site uses
+ * the web-origin bypass; MCP callers pay normally.
+ */
+export const trust = {
+    id: "trust",
+    label: "XR-Trust",
+    baseUrl: "https://trust.xrpl-utilities.io",
+    manifestUrl: "https://trust.xrpl-utilities.io/agents.json",
+    knownSchemaVersions: ["2026-11"],
+    tools: [
+        {
+            name: "xrpl_trust_list_domains",
+            description: "Enumerate all XRPL PermissionedDomain (XLS-80) ledger objects on " +
+                "validated mainnet. Each record carries domain_id, owner_address, " +
+                "owner_label (XRPScan), accepted_credentials[] (with hex-decoded " +
+                "credential_type when ASCII-printable), institutional_issuer_count, " +
+                "and full ledger metadata. Walk_status indicates snapshot " +
+                "completeness. $0.10 USD per call paid via x402.",
+            inputSchema: {
+                type: "object",
+                properties: {
+                    limit: {
+                        type: "integer",
+                        minimum: 1,
+                        maximum: 500,
+                        default: 100,
+                    },
+                    offset: {
+                        type: "integer",
+                        minimum: 0,
+                        default: 0,
+                    },
+                    payment_signature: {
+                        type: "string",
+                        description: "x402 v2 PAYMENT-SIGNATURE header.",
+                    },
+                },
+                additionalProperties: false,
+            },
+            method: "GET",
+            path: "/domains",
+            authMode: "inline_x402",
+        },
+        {
+            name: "xrpl_trust_get_domain",
+            description: "Drill down on a single PermissionedDomain by 64-hex LedgerIndex. " +
+                "Returns the list-view fields plus lifecycle (created_at, " +
+                "last_modified_at, modification_count, walked from PreviousTxnID " +
+                "meta chain), permissioned_market (XLS-81 owner-side offers + " +
+                "AMMs), and identity (XLS-40 DID + parsed .well-known/" +
+                "xrp-ledger.toml when published). $0.10 USD per call.",
+            inputSchema: {
+                type: "object",
+                properties: {
+                    domain_id: {
+                        type: "string",
+                        description: "64-character hex LedgerIndex of the PermissionedDomain object.",
+                        pattern: "^[A-Fa-f0-9]{64}$",
+                    },
+                    payment_signature: {
+                        type: "string",
+                        description: "x402 v2 PAYMENT-SIGNATURE header.",
+                    },
+                },
+                required: ["domain_id"],
+                additionalProperties: false,
+            },
+            method: "GET",
+            path: "/domain/{domain_id}",
+            authMode: "inline_x402",
+        },
+        {
+            name: "xrpl_trust_credential_issuers",
+            description: "Aggregated view of every distinct credential issuer referenced " +
+                "across all PermissionedDomain objects. Each entry: issuer_address, " +
+                "issuer_label, domains_referencing (count), credential_types_issued " +
+                "(sorted unique). Useful for ranking which institutional issuers " +
+                "are most adopted on-chain. $0.10 USD per call.",
+            inputSchema: {
+                type: "object",
+                properties: {
+                    payment_signature: {
+                        type: "string",
+                        description: "x402 v2 PAYMENT-SIGNATURE header.",
+                    },
+                },
+                additionalProperties: false,
+            },
+            method: "GET",
+            path: "/credentials/issuers",
+            authMode: "inline_x402",
+        },
+        {
+            name: "xrpl_trust_recent_events",
+            description: "XLS-70/80/81 lifecycle event stream sourced from XR-Trust's " +
+                "long-lived XRPL WebSocket subscribe loop. Each event carries " +
+                "tx_type (PermissionedDomainSet/Delete, CredentialCreate/Accept/" +
+                "Delete, OfferCreate/OfferCancel, AMMCreate/etc.), tx_hash, " +
+                "account, domain_id, ledger_index, and tx_type-specific payload " +
+                "(credential_type for XLS-70, taker_gets/pays for XLS-81). " +
+                "Cursor via since=trust_lifecycle_<n>. $0.10 USD per call.",
+            inputSchema: {
+                type: "object",
+                properties: {
+                    since: {
+                        type: "string",
+                        description: "Event-id cursor (e.g. 'trust_lifecycle_42'); only events " +
+                            "after this id are returned. Optional.",
+                    },
+                    limit: {
+                        type: "integer",
+                        minimum: 1,
+                        maximum: 500,
+                        default: 100,
+                    },
+                    tx_type: {
+                        type: "string",
+                        description: "Comma-separated filter on TransactionType (e.g. " +
+                            "'PermissionedDomainSet,CredentialCreate'). Optional.",
+                    },
+                    payment_signature: {
+                        type: "string",
+                        description: "x402 v2 PAYMENT-SIGNATURE header.",
+                    },
+                },
+                additionalProperties: false,
+            },
+            method: "GET",
+            path: "/events",
+            authMode: "inline_x402",
+        },
+    ],
+};
+//# sourceMappingURL=trust.js.map

package/dist/services/trust.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust.js","sourceRoot":"","sources":["../../src/services/trust.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,MAAM,CAAC,MAAM,KAAK,GAAe;IAC/B,EAAE,EAAE,OAAO;IACX,KAAK,EAAE,UAAU;IACjB,OAAO,EAAE,iCAAiC;IAC1C,WAAW,EAAE,6CAA6C;IAC1D,mBAAmB,EAAE,CAAC,SAAS,CAAC;IAChC,KAAK,EAAE;QACL;YACE,IAAI,EAAE,yBAAyB;YAC/B,WAAW,EACT,mEAAmE;gBACnE,mEAAmE;gBACnE,kEAAkE;gBAClE,qEAAqE;gBACrE,2DAA2D;gBAC3D,iDAAiD;YACnD,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,KAAK,EAAE;wBACL,IAAI,EAAE,SAAS;wBACf,OAAO,EAAE,CAAC;wBACV,OAAO,EAAE,GAAG;wBACZ,OAAO,EAAE,GAAG;qBACb;oBACD,MAAM,EAAE;wBACN,IAAI,EAAE,SAAS;wBACf,OAAO,EAAE,CAAC;wBACV,OAAO,EAAE,CAAC;qBACX;oBACD,iBAAiB,EAAE;wBACjB,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,mCAAmC;qBACjD;iBACF;gBACD,oBAAoB,EAAE,KAAK;aAC5B;YACD,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,UAAU;YAChB,QAAQ,EAAE,aAAa;SACxB;QACD;YACE,IAAI,EAAE,uBAAuB;YAC7B,WAAW,EACT,mEAAmE;gBACnE,2DAA2D;gBAC3D,kEAAkE;gBAClE,+DAA+D;gBAC/D,uDAAuD;gBACvD,sDAAsD;YACxD,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,SAAS,EAAE;wBACT,IAAI,EAAE,QAAQ;wBACd,WAAW,EACT,gEAAgE;wBAClE,OAAO,EAAE,mBAAmB;qBAC7B;oBACD,iBAAiB,EAAE;wBACjB,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,mCAAmC;qBACjD;iBACF;gBACD,QAAQ,EAAE,CAAC,WAAW,CAAC;gBACvB,oBAAoB,EAAE,KAAK;aAC5B;YACD,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,qBAAqB;YAC3B,QAAQ,EAAE,aAAa;SACxB;QACD;YACE,IAAI,EAAE,+BAA+B;YACrC,WAAW,EACT,iEAAiE;gBACjE,qEAAqE;gBACrE,qEAAqE;gBACrE,kEAAkE;gBAClE,gDAAgD;YAClD,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,iBAAiB,EAAE;wBACjB,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,mCAAmC;qBACjD;iBACF;gBACD,oBAAoB,EAAE,KAAK;aAC5B;YACD,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,sBAAsB;YAC5B,QAAQ,EAAE,aAAa;SACxB;QACD;YACE,IAAI,EAAE,0BAA0B;YAChC,WAAW,EACT,8DAA8D;gBAC9D,+DAA+D;gBAC/D,iEAAiE;gBACjE,6DAA6D;gBAC7D,iEAAiE;gBACjE,4DAA4D;gBAC5D,2DAA2D;YAC7D,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,KAAK,EAAE;wBACL,IAAI,EAAE,QAAQ;wBACd,WAAW,EACT,2DAA2D;4BAC3D,uCAAuC;qBAC1C;oBACD,KAAK,EAAE;wBACL,IAAI,EAAE,SAAS;wBACf,OAAO,EAAE,CAAC;wBACV,OAAO,EAAE,GAAG;wBACZ,OAAO,EAAE,GAAG;qBACb;oBACD,OAAO,EAAE;wBACP,IAAI,EAAE,QAAQ;wBACd,WAAW,EACT,kDAAkD;4BAClD,sDAAsD;qBACzD;oBACD,iBAAiB,EAAE;wBACjB,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,mCAAmC;qBACjD;iBACF;gBACD,oBAAoB,EAAE,KAAK;aAC5B;YACD,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,SAAS;YACf,QAAQ,EAAE,aAAa;SACxB;KACF;CACF,CAAC"}

package/dist/transport/http.d.ts

@@ -0,0 +1,18 @@
+/**
+ * HTTP/SSE transport. Used when the MCP server runs as a hosted
+ * service (Railway, etc.) that remote MCP clients connect to over
+ * the network.
+ *
+ * Endpoints:
+ *
+ *   GET  /            - service banner + manifest pointer
+ *   GET  /healthz     - liveness probe + service ping summary
+ *   POST /mcp         - MCP JSON-RPC (streamable-http transport)
+ *   GET  /mcp         - MCP JSON-RPC SSE (legacy clients)
+ *
+ * Auth: every paid tool call still requires the caller to provide
+ * their own payment_signature in the tool args. The hosted endpoint
+ * is a transparent proxy, NOT a subsidy. Operator-issued bypass via
+ * MCP_BYPASS_KEY env var is rate-limited per-IP at the proxy layer.
+ */
+export declare function runHttp(port: number): Promise<void>;

package/dist/transport/http.js

@@ -0,0 +1,106 @@
+/**
+ * HTTP/SSE transport. Used when the MCP server runs as a hosted
+ * service (Railway, etc.) that remote MCP clients connect to over
+ * the network.
+ *
+ * Endpoints:
+ *
+ *   GET  /            - service banner + manifest pointer
+ *   GET  /healthz     - liveness probe + service ping summary
+ *   POST /mcp         - MCP JSON-RPC (streamable-http transport)
+ *   GET  /mcp         - MCP JSON-RPC SSE (legacy clients)
+ *
+ * Auth: every paid tool call still requires the caller to provide
+ * their own payment_signature in the tool args. The hosted endpoint
+ * is a transparent proxy, NOT a subsidy. Operator-issued bypass via
+ * MCP_BYPASS_KEY env var is rate-limited per-IP at the proxy layer.
+ */
+import express from "express";
+import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
+import { buildServer } from "../server.js";
+const RATE_WINDOW_MS = 60_000;
+const RATE_LIMIT_PER_WINDOW = 60; // generous; agents typically fire bursts
+const rateBuckets = new Map();
+function rateLimit(req, res) {
+    const ip = (req.headers["x-forwarded-for"] ?? req.socket.remoteAddress ?? "unknown")
+        .toString()
+        .split(",")[0]
+        .trim();
+    const now = Date.now();
+    let bucket = rateBuckets.get(ip);
+    if (!bucket || bucket.resetAt < now) {
+        bucket = { count: 0, resetAt: now + RATE_WINDOW_MS };
+        rateBuckets.set(ip, bucket);
+    }
+    bucket.count += 1;
+    if (bucket.count > RATE_LIMIT_PER_WINDOW) {
+        res.status(429).json({ error: "rate_limited", retry_after_s: Math.ceil((bucket.resetAt - now) / 1000) });
+        return false;
+    }
+    return true;
+}
+export async function runHttp(port) {
+    const app = express();
+    app.use(express.json({ limit: "1mb" }));
+    app.get("/", (_req, res) => {
+        res.json({
+            service: "xrpl-utilities-mcp",
+            description: "MCP server for the XRPL-Utilities portfolio (Sentinel, Pulse, Telemetry, Trust). Connect any MCP client to /mcp.",
+            version: "0.1.6",
+            mcp_endpoint: "/mcp",
+            docs: "https://github.com/XRPL-Utilities/xrpl-utilities-mcp",
+            portfolio: "https://xrpl-utilities.com",
+        });
+    });
+    app.get("/healthz", async (_req, res) => {
+        res.json({ status: "ok", service: "xrpl-utilities-mcp", version: "0.1.6" });
+    });
+    // Stateless mode: each /mcp request gets a fresh Server + Transport
+    // pair. The MCP SDK's streamable-http transport, even with
+    // sessionIdGenerator: undefined, doesn't reliably handle a shared
+    // transport instance across multiple unrelated requests - the second
+    // call returns 500 because the transport's internal state is still
+    // tied to the first request. The recommended stateless pattern is
+    // build-connect-handle-close per request. Cheap: the Server object
+    // is just function pointers, no expensive state.
+    app.all("/mcp", async (req, res) => {
+        if (!rateLimit(req, res))
+            return;
+        let transport = null;
+        try {
+            const mcpServer = buildServer({
+                bypassKey: process.env["MCP_BYPASS_KEY"],
+                userAgent: `xrpl-utilities-mcp/0.1.6 (http)`,
+            });
+            transport = new StreamableHTTPServerTransport({
+                sessionIdGenerator: undefined, // stateless
+            });
+            // Make sure the transport is torn down when the response closes,
+            // so a long-running SSE stream doesn't leak file descriptors.
+            res.on("close", () => {
+                transport?.close().catch(() => { });
+                mcpServer.close().catch(() => { });
+            });
+            await mcpServer.connect(transport);
+            await transport.handleRequest(req, res, req.body);
+        }
+        catch (e) {
+            // eslint-disable-next-line no-console
+            console.error("[mcp] handleRequest threw:", e.stack ?? e);
+            if (!res.headersSent) {
+                res.status(500).json({ error: "mcp_handle_failed", detail: e.message });
+            }
+        }
+    });
+    // Surface unhandled rejections in the dispatcher / SDK so we don't get
+    // mystery 500s from Express's default error handler with no body.
+    process.on("unhandledRejection", (reason) => {
+        // eslint-disable-next-line no-console
+        console.error("[mcp] unhandledRejection:", reason);
+    });
+    app.listen(port, () => {
+        // eslint-disable-next-line no-console
+        console.log(`xrpl-utilities-mcp listening on :${port} (http)`);
+    });
+}
+//# sourceMappingURL=http.js.map

package/dist/transport/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../src/transport/http.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,OAAwC,MAAM,SAAS,CAAC;AAC/D,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AACnG,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C,MAAM,cAAc,GAAG,MAAM,CAAC;AAC9B,MAAM,qBAAqB,GAAG,EAAE,CAAC,CAAC,yCAAyC;AAM3E,MAAM,WAAW,GAAG,IAAI,GAAG,EAAsB,CAAC;AAElD,SAAS,SAAS,CAAC,GAAY,EAAE,GAAa;IAC5C,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,SAAS,CAAC;SACjF,QAAQ,EAAE;SACV,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE;SACd,IAAI,EAAE,CAAC;IACV,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,IAAI,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACjC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC;QACpC,MAAM,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,GAAG,cAAc,EAAE,CAAC;QACrD,WAAW,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IAC9B,CAAC;IACD,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC;IAClB,IAAI,MAAM,CAAC,KAAK,GAAG,qBAAqB,EAAE,CAAC;QACzC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC;QACzG,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,IAAY;IACxC,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IAExC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QACzB,GAAG,CAAC,IAAI,CAAC;YACP,OAAO,EAAE,oBAAoB;YAC7B,WAAW,EACT,kHAAkH;YACpH,OAAO,EAAE,OAAO;YAChB,YAAY,EAAE,MAAM;YACpB,IAAI,EAAE,sDAAsD;YAC5D,SAAS,EAAE,4BAA4B;SACxC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QACtC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,oBAAoB,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;IAEH,oEAAoE;IACpE,2DAA2D;IAC3D,kEAAkE;IAClE,qEAAqE;IACrE,mEAAmE;IACnE,kEAAkE;IAClE,mEAAmE;IACnE,iDAAiD;IACjD,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACjC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC;YAAE,OAAO;QACjC,IAAI,SAAS,GAAyC,IAAI,CAAC;QAC3D,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,WAAW,CAAC;gBAC5B,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;gBACxC,SAAS,EAAE,iCAAiC;aAC7C,CAAC,CAAC;YACH,SAAS,GAAG,IAAI,6BAA6B,CAAC;gBAC5C,kBAAkB,EAAE,SAAS,EAAE,YAAY;aAC5C,CAAC,CAAC;YACH,iEAAiE;YACjE,8DAA8D;YAC9D,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;gBACnB,SAAS,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;gBACnC,SAAS,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACpC,CAAC,CAAC,CAAC;YACH,MAAM,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACnC,MAAM,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,sCAAsC;YACtC,OAAO,CAAC,KAAK,CAAC,4BAA4B,EAAG,CAAW,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC;YACrE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBACrB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAG,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;YACrF,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,uEAAuE;IACvE,kEAAkE;IAClE,OAAO,CAAC,EAAE,CAAC,oBAAoB,EAAE,CAAC,MAAM,EAAE,EAAE;QAC1C,sCAAsC;QACtC,OAAO,CAAC,KAAK,CAAC,2BAA2B,EAAE,MAAM,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;QACpB,sCAAsC;QACtC,OAAO,CAAC,GAAG,CAAC,oCAAoC,IAAI,SAAS,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/transport/stdio.d.ts

@@ -0,0 +1,17 @@
+/**
+ * stdio transport. Used when Claude Desktop (or any MCP client that
+ * launches the server as a subprocess) spawns this binary directly.
+ *
+ *   {
+ *     "mcpServers": {
+ *       "xrpl-utilities": {
+ *         "command": "npx",
+ *         "args": ["-y", "@xrpl-utilities/mcp", "--transport", "stdio"]
+ *       }
+ *     }
+ *   }
+ *
+ * Single-tenant: the user's MCP_BYPASS_KEY (if set) and any pre-signed
+ * payment_signature live on their machine, never leave it.
+ */
+export declare function runStdio(): Promise<void>;