drain-mcp 0.1.17 → 0.2.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md CHANGED
@@ -1,421 +1,262 @@
1
- # DRAIN MCP Server
2
-
3
- MCP server for AI agent payments. Works with Cursor, Claude Desktop, Cline, Windsurf, and any MCP-compatible client. Pay for AI inference with USDC on Polygon no API keys needed.
4
-
5
- ## When to Use DRAIN
6
-
7
- Use DRAIN when you need to:
8
- - Call AI models (GPT-4, Claude, etc.) without API keys
9
- - Pay per-request with cryptocurrency
10
- - Operate autonomously without human payment setup
11
-
12
- Do NOT use DRAIN when:
13
- - You already have API keys for the model you need
14
- - The task doesn't require external AI inference
15
- - Cost is not a concern (DRAIN adds ~$0.04 blockchain overhead per session)
16
-
17
- ---
18
-
19
- ## TL;DR - Minimum Viable Workflow
20
-
21
- ```
22
- 1. drain_balance() Check if you have USDC
23
- 2. drain_providers() Find a provider with your model
24
- 3. drain_open_channel(...) Deposit USDC (one-time per session)
25
- 4. drain_chat(...) Use AI (repeat as needed)
26
- 5. drain_close_channel(...) Get refund (after expiry)
27
- ```
28
-
29
- ---
30
-
31
- ## Tools Reference
32
-
33
- ### drain_providers
34
- Find AI providers.
35
-
36
- ```json
37
- {
38
- "model": "gpt-4o", // optional: filter by model
39
- "onlineOnly": true // optional: only online providers (default: true)
40
- }
41
- ```
42
-
43
- Returns: List of providers with `id`, `name`, `apiUrl`, `models[]`, `status.online`
44
-
45
- ### drain_provider_info
46
- Get details about one provider.
47
-
48
- ```json
49
- {
50
- "providerId": "prov_initial_drain" // required
51
- }
52
- ```
53
-
54
- Returns: Full provider details including all models and pricing
55
-
56
- ### drain_balance
57
- Check your wallet.
58
-
59
- ```json
60
- {} // no parameters
61
- ```
62
-
63
- Returns: `{ usdc: { balance, formatted }, native: { balance, formatted }, address }`
64
-
65
- ### drain_approve
66
- Allow DRAIN contract to spend your USDC. **Required before first channel.**
67
-
68
- ```json
69
- {
70
- "amount": "100" // optional: USDC amount (default: unlimited)
71
- }
72
- ```
73
-
74
- Returns: Transaction hash
75
-
76
- ### drain_open_channel
77
- Open a payment channel. Locks USDC for the duration.
78
-
79
- ```json
80
- {
81
- "providerId": "prov_initial_drain", // required: from drain_providers()
82
- "amount": "5.00", // required: USDC to deposit
83
- "duration": "24h" // required: "1h", "24h", "7d", etc.
84
- }
85
- ```
86
-
87
- Returns: `{ channelId, provider, amount, expiresAt }`
88
-
89
- **Save the channelId** - you need it for all subsequent calls.
90
-
91
- ### drain_channel_status
92
- Check a channel's state.
93
-
94
- ```json
95
- {
96
- "channelId": "0x..." // required
97
- }
98
- ```
99
-
100
- Returns: `{ deposit, spent, remaining, expiresAt, isExpired }`
101
-
102
- ### drain_chat
103
- Send a chat completion request. Automatically handles payment.
104
-
105
- ```json
106
- {
107
- "channelId": "0x...", // required
108
- "model": "gpt-4o", // required
109
- "messages": [ // required
110
- {"role": "user", "content": "Hello"}
111
- ],
112
- "maxTokens": 1000, // optional
113
- "temperature": 0.7 // optional
114
- }
115
- ```
116
-
117
- Returns: `{ response, usage: { cost, totalSpent, remaining } }`
118
-
119
- ### drain_close_channel
120
- Close an expired channel and get refund.
121
-
122
- ```json
123
- {
124
- "channelId": "0x..." // required
125
- }
126
- ```
127
-
128
- Returns: `{ refunded, txHash }`
129
-
130
- **Note:** Can only close AFTER channel expires (duration ended).
131
-
132
- ---
133
-
134
- ## Decision Trees
135
-
136
- ### Starting a Session
137
-
138
- ```
139
- Do I have an active channel?
140
- ├── YES → Use drain_chat() with existing channelId
141
- └── NO →
142
- ├── drain_balance() Do I have USDC?
143
- │ ├── NO → Cannot proceed. Need USDC on Polygon.
144
- │ └── YES
145
- │ ├── drain_providers() → Find provider with my model
146
- │ │ ├── NO providers Cannot proceed. No providers available.
147
- │ │ └── Found provider
148
- │ │ ├── drain_approve() First time only, if not already approved
149
- │ │ └── drain_open_channel() Get channelId
150
- │ │ └── drain_chat() → Make requests
151
- ```
152
-
153
- ### Choosing Amount and Duration
154
-
155
- | Use Case | Amount | Duration |
156
- |----------|--------|----------|
157
- | Quick test / single query | $0.50 - $1 | 1h |
158
- | Short task (few queries) | $2 - $5 | 4h |
159
- | Extended session | $5 - $20 | 24h |
160
- | Long-running agent | $20 - $100 | 7d |
161
-
162
- Rule of thumb: **$0.01-0.05 per message** depending on model.
163
-
164
- ### Handling Errors
165
-
166
- ```
167
- "Insufficient balance"
168
- Need more USDC. Check drain_balance() for current amount.
169
-
170
- "Insufficient allowance"
171
- Run drain_approve() to allow DRAIN contract to use USDC.
172
-
173
- "Channel not found"
174
- → channelId is wrong or channel was closed. Open new channel.
175
-
176
- "Channel expired"
177
- → For drain_chat(): Channel ended. Open new channel.
178
- For drain_close_channel(): This is expected. Proceed with close.
179
-
180
- "Insufficient channel balance"
181
- Channel deposit used up. Open new channel with more funds.
182
-
183
- "Provider offline"
184
- Try drain_providers() to find alternative provider.
185
- ```
186
-
187
- ---
188
-
189
- ## Example Session
190
-
191
- ```
192
- TASK: Analyze code using GPT-4o
193
-
194
- STEP 1: Check wallet
195
- > drain_balance()
196
- ← { usdc: { formatted: "50.00" }, native: { formatted: "2.5" } }
197
- ✓ Have funds
198
-
199
- STEP 2: Find provider
200
- > drain_providers({ model: "gpt-4o" })
201
- [{ id: "prov_initial_drain", name: "DRAIN Reference Provider",
202
- models: [{ id: "gpt-4o", pricing: { input: "0.0075", output: "0.0225" }}] }]
203
- Found provider
204
-
205
- STEP 3: Open channel ($5, 24 hours)
206
- > drain_open_channel({ providerId: "prov_initial_drain", amount: "5.00", duration: "24h" })
207
- { channelId: "0x7f8a9b2c...", expiresAt: "2026-01-24T12:00:00Z" }
208
- ✓ Channel open - SAVE THIS CHANNEL ID
209
-
210
- STEP 4: Make requests (repeat as needed)
211
- > drain_chat({
212
- channelId: "0x7f8a9b2c...",
213
- model: "gpt-4o",
214
- messages: [{ role: "user", content: "Explain this code: ..." }]
215
- })
216
- { response: "This code...", usage: { cost: "0.02", remaining: "4.98" } }
217
- ✓ Got response
218
-
219
- STEP 5: Check status (optional)
220
- > drain_channel_status({ channelId: "0x7f8a9b2c..." })
221
- { deposit: "5.00", spent: "0.15", remaining: "4.85", isExpired: false }
222
-
223
- STEP 6: Close after expiry (24h later)
224
- > drain_close_channel({ channelId: "0x7f8a9b2c..." })
225
- { refunded: "4.85", txHash: "0x..." }
226
- ✓ Got refund
227
- ```
228
-
229
- ---
230
-
231
- ## Pricing Reference
232
-
233
- | Model | Input/1k tokens | Output/1k tokens | ~Cost/message |
234
- |-------|-----------------|------------------|---------------|
235
- | gpt-4o | $0.0075 | $0.0225 | $0.01-0.05 |
236
- | gpt-4o-mini | $0.00015 | $0.0006 | $0.001-0.005 |
237
-
238
- Blockchain overhead: ~$0.02 per transaction (open, close, approve).
239
- Marketplace session fee: $0.01 per channel opening (paid automatically).
240
-
241
- ---
242
-
243
- ## State Management
244
-
245
- **Persist the channelId** between calls. If you lose it:
246
- 1. You cannot make more requests on that channel
247
- 2. You cannot close the channel (funds locked until provider claims or you find the ID)
248
-
249
- Recommended: Store channelId with creation timestamp and expiry.
250
-
251
- ---
252
-
253
- ## Setup (agent does most of this autonomously)
254
-
255
- ### Agent Can Do
256
-
257
- **1. Install** — `npm install -g drain-mcp` (ask user to approve if needed)
258
-
259
- **2. Create wallet** — Generate a Polygon private key programmatically:
260
-
261
- ```javascript
262
- const { generatePrivateKey } = require('viem');
263
- const key = generatePrivateKey(); // 0x + 64 hex chars
264
- ```
265
-
266
- Or ask the user for an existing wallet key (MetaMask → Account → Export Private Key).
267
-
268
- **3. Configure** — Add to MCP client config:
269
-
270
- ```json
271
- {
272
- "mcpServers": {
273
- "drain": {
274
- "command": "drain-mcp",
275
- "env": {
276
- "DRAIN_PRIVATE_KEY": "0x_the_private_key"
277
- }
278
- }
279
- }
280
- }
281
- ```
282
-
283
- Config locations vary by client:
284
- - Cursor: `~/.cursor/mcp.json`
285
- - Claude Desktop: `~/Library/Application Support/Claude/claude_desktop_config.json`
286
- - Cline: MCP settings in VS Code
287
- - Windsurf: MCP config
288
-
289
- ### Requires Human (the one thing agents cannot do)
290
-
291
- **4. Fund the wallet** — Ask the user to send to the wallet address on Polygon:
292
- - **$1–5 USDC** (for AI services)
293
- - **$0.10 POL** (for gas, one-time)
294
-
295
- After funding, the agent operates fully autonomously — provider discovery, channel management, payments, and AI requests are all handled by the MCP tools.
296
-
297
- ### Environment Variables
298
-
299
- | Variable | Required | Default |
300
- |----------|----------|---------|
301
- | `DRAIN_PRIVATE_KEY` | ✅ | - |
302
- | `DRAIN_CHAIN_ID` | No | 137 (Polygon) |
303
- | `DRAIN_RPC_URL` | No | https://polygon-rpc.com |
304
- | `DRAIN_MARKETPLACE_URL` | No | Auto-detected from directory |
305
-
306
- **RPC Note:** Free RPCs have rate limits. If you get "rate limit" errors, try:
307
- - `https://polygon-bor-rpc.publicnode.com` (PublicNode)
308
- - `https://rpc.ankr.com/polygon` (requires free API key)
309
- - Or use a paid RPC provider (Alchemy, Infura)
310
-
311
- ---
312
-
313
- ## Lessons Learned (E2E Testing)
314
-
315
- ### Cost Estimation is Conservative
316
-
317
- The MCP server estimates costs based on message length and model pricing. Actual costs are usually **much lower** (often 10-100x less than estimate). This is intentional to prevent over-spending, but means:
318
- - A $0.10 channel can handle **many more requests** than you might think
319
- - Don't worry if estimate seems high - actual cost will be lower
320
-
321
- **Example:** Estimated $0.01, actual cost $0.000005 (5 USDC wei)
322
-
323
- ### Channel "claimed" vs "spent"
324
-
325
- When checking `drain_channel_status()`, you'll see:
326
- - `claimed`: Amount provider has claimed **on-chain** (usually 0 until they claim)
327
- - `remaining`: Deposit minus claimed (not minus spent)
328
-
329
- **Important:** Vouchers are signed off-chain. The provider can claim anytime, but usually waits to accumulate multiple payments to save gas.
330
-
331
- ### RPC Rate Limits
332
-
333
- Free public RPCs (like `polygon-rpc.com`) have rate limits. If you see errors:
334
- 1. Wait 10-15 seconds and retry
335
- 2. Switch to a different RPC (see Environment Variables above)
336
- 3. Use a paid RPC for production
337
-
338
- ### Channel ID is Critical
339
-
340
- **Always persist the channelId!** If you lose it:
341
- - You cannot make more requests
342
- - You cannot close the channel (funds locked until expiry + provider claims)
343
-
344
- **Best practice:** Store channelId immediately after `drain_open_channel()` with:
345
- - Creation timestamp
346
- - Expiry timestamp
347
- - Provider ID
348
-
349
- ### Actual Costs are Tiny
350
-
351
- Real-world example from E2E test:
352
- - Channel: $0.10 USDC
353
- - Request: "What is 2+2?" → "Four."
354
- - Actual cost: **$0.000005** (5 USDC wei)
355
- - You could make **20,000 requests** with $0.10!
356
-
357
- This means small channels ($0.10-$0.50) are perfect for testing and light usage.
358
-
359
- ---
360
-
361
- ## External Endpoints
362
-
363
- Every network request the MCP server makes is listed here. The private key **never** leaves your machine.
364
-
365
- | Endpoint | Method | Data Sent | Private Key Transmitted? |
366
- |---|---|---|---|
367
- | `handshake58.com/api/mcp/providers` | GET | Nothing (public catalog) | No |
368
- | `handshake58.com/api/directory/config` | GET | Nothing (reads fee wallet) | No |
369
- | `handshake58.com/api/channels/status` | GET | channelId (public on-chain) | No |
370
- | Provider `apiUrl` `/v1/chat/completions` | POST | Chat messages + signed voucher | No — only the EIP-712 **signature** is sent |
371
- | Polygon RPC (on-chain tx) | POST | Signed transactions | No — key signs locally, only the signature is broadcast |
372
-
373
- ---
374
-
375
- ## Security & Privacy
376
-
377
- **Private key handling:** `DRAIN_PRIVATE_KEY` is loaded into memory by the local MCP server process. It is used exclusively for:
378
- 1. **EIP-712 voucher signing** — generates a cryptographic signature (off-chain, no network call)
379
- 2. **On-chain transaction signing** — signs approve/open/close/transfer transactions locally before broadcasting to Polygon RPC
380
-
381
- The private key is **never transmitted** to Handshake58 servers, AI providers, or any third party. Only the resulting signatures are sent. Providers verify signatures against the on-chain channel state — they never need or receive the key itself.
382
-
383
- **What leaves your machine:**
384
- - Public API queries to `handshake58.com` (provider list, fee wallet, channel status)
385
- - Chat messages to AI providers (sent to the provider's `apiUrl`, not to Handshake58)
386
- - Signed payment vouchers (contain a signature, not the key)
387
- - Signed on-chain transactions (broadcast to Polygon)
388
-
389
- **What stays local:**
390
- - Your private key (never transmitted)
391
- - Your wallet address derivation
392
- - All cryptographic signing operations
393
-
394
- **Recommended safeguards:**
395
- - Use a **dedicated ephemeral wallet** with $1–5 USDC. Never reuse your main wallet.
396
- - **Audit the source code** before installing: https://github.com/kimbo128/DRAIN
397
- - Run in an **isolated environment** if handling sensitive data
398
-
399
- ---
400
-
401
- ## Compatible Clients
402
-
403
- drain-mcp is an MCP server (not a CLI tool). It works with any MCP-compatible AI client:
404
-
405
- - **Cursor** — Add to `.cursor/mcp.json`
406
- - **Claude Desktop** — Add to `claude_desktop_config.json`
407
- - **Cline** — Add to MCP settings
408
- - **Windsurf** — Add to MCP config
409
- - **OpenAI Agents** — Via MCP bridge
410
- - Any agent that speaks Model Context Protocol
411
-
412
- Run `drain-mcp --help` for full documentation.
413
-
414
- ---
415
-
416
- ## Links
417
-
418
- - NPM: https://www.npmjs.com/package/drain-mcp
419
- - GitHub: https://github.com/kimbo128/DRAIN
420
- - Marketplace: https://handshake58.com
421
- - Contract: `0x1C1918C99b6DcE977392E4131C91654d8aB71e64` (Polygon)
1
+ # DRAIN MCP Server
2
+
3
+ MCP server for the DRAIN payment protocol. Agents discover service providers, open USDC payment channels on Polygon, and call any service LLM inference, web scraping, image generation, VPN, and more. No API keys, no subscriptions.
4
+
5
+ ## When to Use DRAIN
6
+
7
+ Use DRAIN when you need to:
8
+ - Call any service (LLM, scraping, image generation, etc.) without API keys
9
+ - Pay per-request with USDC on Polygon
10
+ - Access multiple service types through one protocol
11
+
12
+ Do NOT use DRAIN when:
13
+ - You already have API keys for the service you need
14
+ - The task doesn't require external services
15
+ - Cost is not a concern (DRAIN adds ~$0.04 blockchain overhead per session)
16
+
17
+ ---
18
+
19
+ ## TL;DR - Minimum Viable Workflow
20
+
21
+ ```
22
+ 1. drain_providers() Find providers (filter by model or category)
23
+ 2. drain_provider_info(id) Get provider details + usage docs
24
+ 3. drain_balance() Check USDC + POL
25
+ 4. drain_approve() Approve USDC spending (once)
26
+ 5. drain_open_channel(...) Deposit USDC, get channelId
27
+ 6. drain_chat(...) → Send requests (repeat as needed)
28
+ 7. drain_channels() → Check all channels
29
+ 8. drain_close_channel(...) → Reclaim funds (after expiry)
30
+ ```
31
+
32
+ ---
33
+
34
+ ## Tools Reference
35
+
36
+ ### drain_providers
37
+ Find service providers. Filter by model name, category, or online status.
38
+
39
+ ```json
40
+ {
41
+ "model": "gpt-4o",
42
+ "category": "scraping",
43
+ "onlineOnly": true
44
+ }
45
+ ```
46
+
47
+ Categories: `llm`, `image`, `audio`, `code`, `scraping`, `vpn`, `multi-modal`, `other`
48
+
49
+ ### drain_provider_info
50
+ Get details about a provider including usage instructions (docs). The docs explain how to format requests for that provider.
51
+
52
+ ```json
53
+ { "providerId": "hs58-openai" }
54
+ ```
55
+
56
+ ### drain_balance
57
+ Check wallet USDC balance, POL for gas, and DRAIN contract allowance.
58
+
59
+ ### drain_approve
60
+ Approve USDC spending for the DRAIN contract. Required once before opening channels.
61
+
62
+ ```json
63
+ { "amount": "100" }
64
+ ```
65
+
66
+ ### drain_open_channel
67
+ Open a payment channel. Locks USDC for the specified duration.
68
+
69
+ ```json
70
+ {
71
+ "provider": "hs58-openai",
72
+ "amount": "5.00",
73
+ "duration": "24h"
74
+ }
75
+ ```
76
+
77
+ Returns channelId, expiry time, and provider usage docs. **Set a cron/timer for the expiry time to call drain_close_channel and recover funds.**
78
+
79
+ ### drain_chat
80
+ Send a paid request through a channel. Works for ALL provider types:
81
+
82
+ - **LLM providers:** Standard chat messages
83
+ - **Non-LLM providers:** JSON payload in the user message content (check provider docs)
84
+
85
+ ```json
86
+ {
87
+ "channelId": "0x...",
88
+ "model": "gpt-4o",
89
+ "messages": [{"role": "user", "content": "Hello"}]
90
+ }
91
+ ```
92
+
93
+ ### drain_channel_status
94
+ Check a channel's deposit, spending, remaining balance, and expiry.
95
+
96
+ ### drain_channels
97
+ List all known channels with status (active/expired/closed). Find expired channels that need closing.
98
+
99
+ ### drain_close_channel
100
+ Close an expired channel and reclaim unspent USDC.
101
+
102
+ ---
103
+
104
+ ## Provider Categories
105
+
106
+ Providers are not limited to LLM chat. Each provider has a `category` field and a docs endpoint explaining how to format requests.
107
+
108
+ | Category | Description | Message Format |
109
+ |----------|-------------|----------------|
110
+ | llm | Language models | Standard chat messages |
111
+ | image | Image generation | JSON in user content (see docs) |
112
+ | audio | Audio/TTS/STT | JSON in user content (see docs) |
113
+ | code | Code generation | Standard chat or JSON (see docs) |
114
+ | scraping | Web scraping | JSON in user content (see docs) |
115
+ | vpn | VPN services | JSON in user content (see docs) |
116
+ | multi-modal | Multi-modal models | Standard chat messages |
117
+ | other | Everything else | Always check docs |
118
+
119
+ **Rule: For any category other than `llm`, call `drain_provider_info` first to read the docs.**
120
+
121
+ ---
122
+
123
+ ## Decision Trees
124
+
125
+ ### Starting a Session
126
+
127
+ ```
128
+ Do I have an active channel?
129
+ ├── YES → Use drain_chat() with existing channelId
130
+ └── NO
131
+ ├── drain_balance() → Do I have USDC?
132
+ │ ├── NO → Cannot proceed. Need USDC on Polygon.
133
+ │ └── YES →
134
+ │ ├── drain_providers() → Find provider
135
+ │ │ ├── NO providers → Cannot proceed.
136
+ │ │ └── Found provider
137
+ │ │ ├── drain_approve() → First time only
138
+ │ │ └── drain_open_channel() → Get channelId
139
+ │ │ └── drain_chat() Send requests
140
+ ```
141
+
142
+ ### Choosing Amount and Duration
143
+
144
+ | Use Case | Amount | Duration |
145
+ |----------|--------|----------|
146
+ | Quick test / single query | $0.50 - $1 | 1h |
147
+ | Short task (few queries) | $2 - $5 | 4h |
148
+ | Extended session | $5 - $20 | 24h |
149
+ | Long-running agent | $20 - $100 | 7d |
150
+
151
+ ### Handling Errors
152
+
153
+ ```
154
+ "Insufficient balance"
155
+ Need more USDC. Check drain_balance().
156
+
157
+ "Insufficient allowance"
158
+ Run drain_approve().
159
+
160
+ "Channel not found"
161
+ → channelId is wrong or channel was closed. Open new channel.
162
+
163
+ "Channel expired"
164
+ For drain_chat: Open a new channel.
165
+ → For drain_close_channel: Expected. Proceed with close.
166
+
167
+ "Insufficient channel balance"
168
+ Channel deposit used up. Open new channel with more funds.
169
+
170
+ "Provider offline"
171
+ Use drain_providers() to find alternative provider.
172
+ ```
173
+
174
+ ---
175
+
176
+ ## Setup
177
+
178
+ ### Agent Can Do
179
+
180
+ 1. **Install** — `npm install -g drain-mcp`
181
+ 2. **Create wallet** `require('viem').generatePrivateKey()` or ask user for existing key
182
+ 3. **Configure** — Add to MCP client config (see below)
183
+
184
+ ### Requires Human
185
+
186
+ 4. **Fund wallet** — Send $1-5 USDC + $0.10 POL on Polygon to the wallet address
187
+
188
+ ### MCP Config
189
+
190
+ ```json
191
+ {
192
+ "mcpServers": {
193
+ "drain": {
194
+ "command": "drain-mcp",
195
+ "env": { "DRAIN_PRIVATE_KEY": "0x..." }
196
+ }
197
+ }
198
+ }
199
+ ```
200
+
201
+ ### Environment Variables
202
+
203
+ | Variable | Required | Default |
204
+ |----------|----------|---------|
205
+ | `DRAIN_PRIVATE_KEY` | Yes | |
206
+ | `DRAIN_CHAIN_ID` | No | 137 (Polygon) |
207
+ | `DRAIN_RPC_URL` | No | polygon-rpc.com |
208
+
209
+ ---
210
+
211
+ ## Security & Privacy
212
+
213
+ ### Key Handling
214
+ `DRAIN_PRIVATE_KEY` is loaded into memory by the local MCP process. It is used for:
215
+ 1. EIP-712 voucher signing (off-chain, no network call)
216
+ 2. On-chain transaction signing (signed locally, only the signature is broadcast)
217
+
218
+ The key is never transmitted to any server. Providers verify signatures against on-chain state.
219
+
220
+ ### Spending Limits
221
+ Exposure is capped by the smart contract:
222
+ - Maximum spend = channel deposit (you choose the amount)
223
+ - Channel has a fixed duration (you choose)
224
+ - After expiry, unspent funds are reclaimable via drain_close_channel
225
+ - No recurring charges, no stored payment methods
226
+
227
+ ### What Leaves Your Machine
228
+ - Public API queries to handshake58.com (provider list, config, channel status)
229
+ - Request messages to providers (sent to the provider's apiUrl, NOT to Handshake58)
230
+ - Signed payment vouchers (contain a cryptographic signature, not the key)
231
+ - Signed on-chain transactions (broadcast to Polygon RPC)
232
+
233
+ ### What Stays Local
234
+ - Private key (never transmitted)
235
+ - All cryptographic operations (signing happens in-process)
236
+
237
+ ### External Endpoints
238
+
239
+ Every network request the MCP server makes:
240
+
241
+ | Endpoint | Method | Data Sent | Key Transmitted? |
242
+ |---|---|---|---|
243
+ | handshake58.com/api/mcp/providers | GET | Nothing (public catalog) | No |
244
+ | handshake58.com/api/directory/config | GET | Nothing (reads fee wallet) | No |
245
+ | handshake58.com/api/channels/status | GET | channelId (public on-chain data) | No |
246
+ | Provider apiUrl /v1/docs | GET | Nothing (fetches usage docs) | No |
247
+ | Provider apiUrl /v1/chat/completions | POST | Request messages + signed voucher | No |
248
+ | Polygon RPC (on-chain tx) | POST | Signed transactions | No |
249
+
250
+ ### Safeguards
251
+ - Use a **dedicated wallet** with $1-5 USDC. Never reuse your main wallet.
252
+ - **Audit the source**: https://github.com/kimbo128/DRAIN
253
+ - Run in an **isolated environment** if handling sensitive data
254
+
255
+ ---
256
+
257
+ ## Links
258
+
259
+ - NPM: https://www.npmjs.com/package/drain-mcp
260
+ - GitHub: https://github.com/kimbo128/DRAIN
261
+ - Marketplace: https://handshake58.com
262
+ - Contract: `0x1C1918C99b6DcE977392E4131C91654d8aB71e64` (Polygon)