cascrow-mcp 1.8.0 → 3.1.0

package/package.json

@@ -1,9 +1,15 @@
 {
   "name": "cascrow-mcp",
-  "version": "1.8.0",
-  "description": "MCP server for Cascrow — trust infrastructure for the agent economy: AI verification, on-chain reputation, and milestone escrow on the XRP Ledger",
+  "version": "3.1.0",
+  "description": "MCP server for Cascrow — trust infrastructure for the agent economy: AI verification, on-chain reputation, and non-custodial milestone escrow (MilestoneEscrowV3, native XRP)",
   "type": "module",
   "main": "index.js",
+  "files": [
+    "index.js",
+    "README.md",
+    "CHANGELOG.md",
+    "LICENSE"
+  ],
   "bin": {
     "cascrow-mcp": "index.js"
   },
@@ -11,7 +17,7 @@
     "start": "node index.js"
   },
   "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.15.0"
+    "@modelcontextprotocol/sdk": "^1.32.1"
   },
   "keywords": [
     "mcp",

package/REMOTE_HTTP_SERVER.md

@@ -1,97 +0,0 @@
-# Remote HTTP MCP Server — Smithery Listing
-
-**Status: Done.** The HTTP transport described below is live at
-`src/app/api/mcp/route.ts` (Streamable HTTP, `@modelcontextprotocol/sdk`,
-`WebStandardStreamableHTTPServerTransport`), serving the same 18 tools as this
-package's stdio server. `smithery.yaml` already lists both the remote URL
-(`https://cascrow.com/api/mcp`) and the local `npx cascrow-mcp` stdio fallback.
-The plan below is kept as a historical record of what was built and why —
-nothing in it is still pending.
-
-**Update (2026-08-03):** both this HTTP transport and the stdio server now also work
-without an API key — an unauthenticated caller gets a restricted server exposing only
-`cascrow_verify_work` (anonymous, 3/day per IP, same tier as `POST /api/verify/standalone`),
-instead of the transport-level 401 described below. Full 18-tool access still requires
-`Authorization: Bearer csk_...` exactly as documented.
-
-## Why
-
-The current `cascrow-mcp` package runs locally via `npx` (stdio transport).
-That works for **Claude Desktop** only.
-
-A remote HTTP MCP server at `https://cascrow.com/mcp` would enable:
-- **Claude.ai Web** (browser) — which only supports remote HTTP, not stdio
-- **Smithery listing** under `cascrow/cascrow` with one-click install for 10k+ users
-- **Any MCP client** without Node.js installed
-
-## The Use Case (no escrow needed)
-
-The primary value right now is **AI work verification**, independent of payments:
-
-- Agent does work → calls `cascrow_mcp_submit` with `amountUSD: 0`
-- 5 independent AI models vote on whether the work is complete
-- User sees: "4/5 models approved, 89% confidence"
-- Public certificate at `cascrow.com/proof/[hash]`
-
-This works today on testnet. No MetaMask, no wallet, no escrow required.
-Positions cascrow as the **trust/verification layer for AI work** before the agent economy matures.
-
-## What Needs to Be Built
-
-### 1. HTTP MCP Endpoint — `src/app/api/mcp/route.ts`
-
-Replace stdio transport with HTTP transport using `@modelcontextprotocol/sdk`:
-
-```ts
-import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
-import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
-
-// Same 16 tools as cascrow-mcp/index.js but served over HTTP
-// Auth: API key from Authorization header or ?api_key= query param
-```
-
-The 16 tools already exist in `cascrow-mcp/index.js` — they just need to be
-ported from stdio to HTTP transport. All business logic (`/api/mcp/submit`,
-`/api/contracts`, etc.) stays unchanged.
-
-### 2. Smithery Registration
-
-- Create Smithery account under `cascrow` org (not personal `moeller` namespace)
-- Go to smithery.ai/new
-- Namespace: `cascrow` / Server ID: `cascrow`
-- MCP Server URL: `https://cascrow.com/mcp`
-- Result: `smithery.ai/server/cascrow/cascrow` with one-click install
-
-### 3. Auth for Remote Connections
-
-Remote users authenticate with their cascrow API key (`csk_...`).
-Two options (both fine):
-- `Authorization: Bearer csk_...` header
-- `?api_key=csk_...` query param (easier for Smithery config UI)
-
-### 4. Smithery Config Schema (update smithery.yaml)
-
-```yaml
-startCommand:
-  type: http
-  configSchema:
-    type: object
-    properties:
-      CASCROW_API_KEY:
-        type: string
-        description: "Your cascrow API key (csk_...)"
-    required:
-      - CASCROW_API_KEY
-  url: https://cascrow.com/mcp
-```
-
-## Effort Estimate
-
-~4–6 hours. The hard parts (tools, auth, business logic) are already done.
-Only the transport layer needs to change.
-
-## When to Do This
-
-**Now** — the verification use case (amountUSD: 0) works on testnet today.
-Getting listed on Smithery/Claude.ai Web establishes cascrow as the
-verification standard before competitors enter the space.

package/server.json

@@ -1,46 +0,0 @@
-{
-  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
-  "name": "io.github.jnm04/cascrow-mcp",
-  "title": "Cascrow",
-  "description": "Independent 5-model AI verification of AI-generated work — free, no account required.",
-  "websiteUrl": "https://cascrow.com",
-  "repository": {
-    "url": "https://github.com/Jnm04/Milestone-Based-Funding",
-    "source": "github",
-    "subfolder": "cascrow-mcp"
-  },
-  "version": "1.8.0",
-  "packages": [
-    {
-      "registryType": "npm",
-      "registryBaseUrl": "https://registry.npmjs.org",
-      "identifier": "cascrow-mcp",
-      "version": "1.8.0",
-      "transport": {
-        "type": "stdio"
-      },
-      "environmentVariables": [
-        {
-          "name": "CASCROW_API_KEY",
-          "description": "Cascrow API key (csk_...). Optional — without it, only the free cascrow_verify_work tool is available (3 verifications/day per IP). Get one instantly via POST /api/agent/register, no human review required.",
-          "isRequired": false,
-          "isSecret": true
-        }
-      ]
-    }
-  ],
-  "remotes": [
-    {
-      "type": "streamable-http",
-      "url": "https://cascrow.com/api/mcp",
-      "headers": [
-        {
-          "name": "Authorization",
-          "description": "Bearer csk_... API key. Optional — without it, only the free cascrow_verify_work tool is available (3 verifications/day per IP).",
-          "isRequired": false,
-          "isSecret": true
-        }
-      ]
-    }
-  ]
-}

package/smithery.yaml

@@ -1,28 +0,0 @@
-# Smithery configuration file: https://smithery.ai/docs/config#smitheryyaml
-
-# Remote HTTP transport (Claude.ai web, Claude.ai API)
-url: https://cascrow.com/api/mcp
-
-startCommand:
-  type: stdio
-  configSchema:
-    type: object
-    properties:
-      CASCROW_API_KEY:
-        type: string
-        description: "Optional. Your cascrow API key (starts with csk_) — get one at cascrow.com/register or POST /api/agent/register. Without it, the server still starts but only cascrow_verify_work is available (3 free AI-verified checks per IP per day, no account needed). Set this to unlock all 18 tools."
-        pattern: "^csk_"
-      CASCROW_BASE_URL:
-        type: string
-        description: "Cascrow API base URL. Leave blank to use the default (https://cascrow.com)."
-        default: "https://cascrow.com"
-    required: []
-  commandFunction: |-
-    (config) => ({
-      command: 'npx',
-      args: ['-y', 'cascrow-mcp'],
-      env: {
-        CASCROW_API_KEY: config.CASCROW_API_KEY || '',
-        CASCROW_BASE_URL: config.CASCROW_BASE_URL || 'https://cascrow.com'
-      }
-    })