io.github.lonniev/cypher-mcp

Generate a patron's account statement at this operator. Returns the patron's purchase history, active credit tranches, per-tool usage breakdown, and recent daily usage logs. This is the patron's spending account — not the operator's Authority tax balance. Free — no credits consumed. Proof of npub ownership is required to prevent statement-scraping of arbitrary patrons.

Generate a visual SVG infographic of your account statement. Returns the same data as account_statement, rendered as a dark-themed SVG graphic with balance hero, metrics cards, health gauge, tranche table, and tool usage breakdown. Costs 1 api_sat per call. Proof is verified by ``debit_or_deny`` before any cost is incurred.

Check this operator's adoption-request status at a chosen Authority. Free. Polls the Authority MCP-to-MCP for the status of this operator's request (pending / approved / rejected / provisioned).

Record where a symbol lives so future triage scopes its grep.

Record an enforceable code invariant.

Record the Journeyman's rationale for a fix (unverified provenance).

Answer what changed on a capability since a given time.

Answer what contradicts a capability's assertions or guarding invariants.

Answer what sources a capability was derived from.

Answer which invariants guard a capability.

Answer who authorized a capability's authoritative why.

Answer why a capability exists with PROV-attributed assertions and gaps.

Author the authoritative why for a capability.

Attach a capability to one of the symbols that implement it.

Attach the Journeyman's rationale to a specific code symbol.

Show a capability's patent grounding.

Check this operator's tax balance at the Authority. Returns the sats available for certifying patron credit purchases. When this balance reaches zero, patron top-ups cannot be certified and the operator must call purchase_credits on the Authority. This is the operator's own funding — not a patron balance. Free.

Check a patron's credit balance at this operator. This is the patron's spending balance — credits purchased via Lightning for tool calls at this operator. For the operator's own balance at the Authority (needed to certify patron purchases), use authority_check_balance instead. Free — no credits required. Proof of npub ownership is required to prevent anyone-with-the-registry from enumerating balances.

Check the payment status of a Lightning invoice. Call after paying the invoice from purchase_credits. Free — no credits required. Proof of npub ownership is required to prevent credit-grant front-running by an observer of the invoice ID.

Preview the effective cost of a tool call. Shows the base cost and any constraint effects (discounts, free trials, surge pricing). Free — no credits required.

Check whether a previously-cached dpop_token is still valid. Mirrors ``check_oauth_status`` for the npub-proof flow: a calling agent can ask "will my next paid call accept this dpop_token?" before burning credits on a guaranteed failure. Free, no side effects — does not evict the cache or touch relays.

Mark an issue as actively being worked at the start of an agent's turn.

Return the code-orienteering scope for an intent keyword.

Operator-only: publish a new named Cypher query template. The template must reference each declared parameter as $name (binding, not interpolation). param_schema maps param name -> {"type": ..., "required": true|false}; types: string, int, float, bool, list.

Delete a coupon. Cascades to all patron redemptions. Any chain step referencing the deleted coupon_id becomes a no-op (the constraint returns neutral on unknown ids) — the Studio surfaces orphan references as warnings. RESTRICTED to operator — requires proof.

Remove a single operator secret field. Deletes one key from the operator's encrypted credential blob without touching the others — the field-level counterpart to ``forget_credentials``, which wipes the whole row. Use it to retire a leftover after an SDK cutover (a Prefect key after Modal, or a stored but untemplated orphan like ``anthropic_api_key``) without taking the operator down for a full re-delivery. Stored-but-untemplated fields are first-class: the delete is keyed on what is vaulted, not on what the current template declares. Idempotent — already-absent fields report ``removed: false`` without rewriting the vault. RESTRICTED to the operator — requires proof (nsec-signed kind-27235 or a cached dpop_token phrase); patron proofs are rejected. A deletion is as destructive as a write.

Remove a single patron credential field. Deletes one field from stored credentials without affecting other fields. Free. Proof of npub ownership is required — this is a write to the patron's sensitive credential vault.

Operator-only: delete a catalog entry by key.

Execute a published, parameterized Cypher query by its key. You supply the key of an operator-published query plus its parameters. The operator owns the query text; you never see or write raw Cypher. If the operator has published a query as a named tool (e.g. ``cypher_find_airline_flights``), you can call that directly instead. Billing note: you are charged only for a delivered answer. If the key is unknown, the parameters are invalid, or the query fails, the call raises and your debit is rolled back (no charge for value not delivered).

Explain why a capability exists and where it lives.

Show what a patent reference numeral describes.

Report how issues were located, to measure grep-scope shrinkage.

Find airline routes between two cities (named-tool smoke test).

Remove a coupon from this patron's redemption list. Cosmetic only — the coupon itself still exists at the operator, and the patron can re-redeem the same code later while the window allows. Free — requires proof of ``npub``.

Delete vaulted credentials for a specific service and npub. For operator credentials, pass the operator's own npub. For patron credentials, pass the patron's npub. Always requires proof of npub ownership — a deletion is as destructive as a write.

Read an npub's public Nostr profile (NIP-01 kind-0 metadata). Free, no proof — the data is already public on relays. Returns the latest metadata fields (name, display_name, about, picture, banner, nip05, website, lud16) or an empty profile if none is published.

Generate a Merkle inclusion proof that a patron's balance was included in a Bitcoin-notarized snapshot.

Report this operator's configuration readiness. Shows which operator settings are configured, which are missing, and how to deliver each missing value. For patron-level credential status, use get_patron_onboarding_status instead. Free.

List stored patron credential field names (not values). Returns the names of fields stored for a patron, plus each field's ``delivered_at`` ISO-8601 timestamp when known (null for secrets vaulted before timestamps were recorded). Values are never exposed — use this to verify which fields are configured and how old each one is. Free. Proof of npub ownership is required: the list of configured fields is itself sensitive (reveals which integrations a patron has set up).

Report a patron's credential readiness for this operator. For set-once services (eXcalibur, TheBrain), shows which patron secrets are configured and which are missing. For dynamic/OAuth2 services (Schwab), reports that no patron credentials are needed. Free. Proof of npub ownership is required because credential presence is sensitive information about the patron's setup.

Get the active pricing model for this operator. Free. If no model exists, self-initializes a scaffold with all registered tools at 0 sats. No economic data from code.

Operator-only: fetch one catalog entry (template + schema + metadata). Includes ``edit_url`` — a one-click deep link into the hosted Neo4j Browser that pre-targets this operator's AuraDB and loads the template in EDIT mode, so the analyst refines it in Neo4j's own UI and saves it back with ``update_query``. Omitted if the operator's Neo4j credentials aren't delivered yet (best-effort; the raw template is always present to paste).

Register a symbol an invariant guards.

Index a code symbol as belonging to a service.

Explain an invariant and what it guards.

Fetch an issue's GitHub URLs, fix PRs, and provenance chain for browser click-through.

Record that a service consumes a capability.

Ground a capability in a patent reference numeral.

Ground an invariant in a patent reference numeral.

Attach an issue to the capability it is about.