mcp-server-insumer 1.7.3 → 1.7.5

package/README.md

@@ -8,7 +8,7 @@ Enables AI agents (Claude Desktop, Cursor, Windsurf, and any MCP-compatible clie
 
 **In production:** [DJD Agent Score](https://github.com/jacobsd32-cpu/djdagentscore) (Coinbase x402 ecosystem) uses InsumerAPI for AI agent wallet trust scoring. [Case study](https://insumermodel.com/blog/djd-agent-score-insumer-api-integration.html).
 
-Also available as: [LangChain](https://pypi.org/project/langchain-insumer/) (25 tools, PyPI) | [langchain-community](https://github.com/langchain-ai/langchain/pull/549) (25 tools, PR #549) | [OpenAI GPT](https://chatgpt.com/g/g-699c5e43ce2481918b3f1e7f144c8a49-insumerapi-verify) (GPT Store) | [insumer-verify](https://www.npmjs.com/package/insumer-verify) (client-side verification, npm)
+Also available as: [LangChain](https://pypi.org/project/langchain-insumer/) (25 tools, PyPI) | [langchain-community](https://github.com/langchain-ai/langchain/pull/549) (25 tools, PR #549) | [ElizaOS](https://www.npmjs.com/package/eliza-plugin-insumer) (3 actions, npm) | [OpenAI GPT](https://chatgpt.com/g/g-699c5e43ce2481918b3f1e7f144c8a49-insumerapi-verify) (GPT Store) | [insumer-verify](https://www.npmjs.com/package/insumer-verify) (client-side verification, npm)
 
 **[Full AI Agent Verification API guide](https://insumermodel.com/ai-agent-verification-api/)** — covers all 32 chains, trust profiles, commerce protocols, and signature verification.
 
@@ -109,6 +109,20 @@ The `sig` is an ECDSA P-256 signature over `{id, pass, results, attestedAt}`. Th
 
 No balances. No amounts. Just a cryptographically signed true/false.
 
+### Wallet Auth (JWT)
+
+Add `format: "jwt"` to the `insumer_attest` tool parameters to receive the attestation as a standard JWT bearer token:
+
+```json
+{
+  "wallet": "0xd8dA6BF26964aF9D7eEd9e03E53415D37aA96045",
+  "conditions": [ ... ],
+  "format": "jwt"
+}
+```
+
+The response includes an additional `jwt` field containing an ES256-signed JWT. This token is verifiable by any standard JWT library via the JWKS endpoint at `GET /v1/jwks` — making it compatible with Kong, Nginx, Cloudflare Access, AWS API Gateway, and other middleware that accepts JWT bearer tokens.
+
 ## Verify the Response
 
 Your agent gets the attestation. Your application should verify it. Install [insumer-verify](https://www.npmjs.com/package/insumer-verify):
@@ -205,6 +219,12 @@ This runs 4 independent checks: ECDSA signature, condition hash integrity, block
 | `insumer_ucp_discount` | Check discount eligibility in Google UCP format. Returns title, extension field, and applied array. 1 merchant credit. |
 | `insumer_validate_code` | Validate an INSR-XXXXX discount code. Returns validity, discount percent, expiry. Free, no auth. |
 
+## Handling `rpc_failure` Errors
+
+If the API cannot reach one or more data sources (RPC nodes, Helius, XRPL, Covalent) after retries, endpoints that produce signed attestations (`insumer_attest`, `insumer_trust`, `insumer_trust_batch`) return `ok: false` with error code `rpc_failure`. No signature, no JWT, no credits charged. This is a retryable error — the MCP client should retry after a short delay (2-5 seconds).
+
+**Important:** `rpc_failure` is NOT a verification failure. Do not treat it as `pass: false`. It means the data source was temporarily unavailable and the API refused to sign an unverified result.
+
 ## Supported Chains (32)
 
 **EVM**: Ethereum, BNB Chain, Base, Avalanche, Polygon, Arbitrum, Optimism, Chiliz, Soneium, Plume, Sonic, Gnosis, Mantle, Scroll, Linea, zkSync Era, Blast, Taiko, Ronin, Celo, Moonbeam, Moonriver, Viction, opBNB, World Chain, Unichain, Ink, Sei, Berachain, ApeChain

package/build/index.js

@@ -82,7 +82,7 @@ const NftCollectionSchema = z.object({
 // --- Server setup ---
 const server = new McpServer({
     name: "insumer",
-    version: "1.7.3",
+    version: "1.7.4",
 });
 // ============================================================
 // KEY DISCOVERY

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mcp-server-insumer",
-  "version": "1.7.3",
+  "version": "1.7.5",
   "description": "MCP server for The Insumer Model — read-first blockchain verification infrastructure that returns ECDSA-signed, privacy-preserving booleans across 32 chains without exposing wallet balances. 26 tools: attestation, wallet trust profiles, compliance templates, ACP/UCP commerce, Merkle proofs, instant API key setup. Not a loyalty program. Not an oracle.",
   "license": "MIT",
   "author": "Douglas Borthwick",

package/server.json

@@ -6,12 +6,12 @@
     "url": "https://github.com/douglasborthwick-crypto/mcp-server-insumer",
     "source": "github"
   },
-  "version": "1.7.2",
+  "version": "1.7.4",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "mcp-server-insumer",
-      "version": "1.7.2",
+      "version": "1.7.4",
       "transport": {
         "type": "stdio"
       },