# io.github.lonniev/dpyc-oracle (remote · dpyc-oracle.fastmcp.app)

DPYC Social Contract community concierge — free MCP for membership, governance, and onboarding

- Trust score: 65/100 (medium)
- Change this week: +4
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-20

## Components

- remote · `dpyc-oracle.fastmcp.app`: 65/100 (this document), [markdown](https://verifymcp.io/servers/lonniev-dpyc-oracle/dpyc-oracle.md), [page](https://verifymcp.io/servers/lonniev-dpyc-oracle/dpyc-oracle)

## Channel facts

- Endpoint: `https://dpyc-oracle.fastmcp.app/mcp`
- Transports: `streamable-http`
- Auth: `none`
- Version: `0.2.15`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-20.

- **Endpoint Security**: 57/100
  - The endpoint's TLS certificate is valid, in date, and uses a strong key.
  - Authorisation not fully verified: no authorisation is required to call this server, and 29 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.
  - HTTPS is enforced; there's no plaintext access path.
  - HSTS check failed: the Strict-Transport-Security header is absent.
  - DNSSEC check failed: this domain isn't protected by DNSSEC.
- **Transport & Reachability**: 100/100
  - Verified streamable-http transport via a live MCP handshake.
- **Schema Quality & AI Usability**: 75/100
  - AI-judged instruction clarity (excellent).
  - Context-footprint check failed: tool/resource definitions use about 3716 tokens (~128/item across 29 items; 29 tools + 0 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 33/100
  - Stability observed for 10 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 71/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 0% of tool parameters carry a description.
  - Structured output schemas are declared (100% of tools); any adoption earns full credit.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### Claude

```bash
claude mcp add --transport http lonniev-dpyc-oracle https://dpyc-oracle.fastmcp.app/mcp
```

### Codex

```toml
[mcp_servers.lonniev-dpyc-oracle]
url = "https://dpyc-oracle.fastmcp.app/mcp"
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "lonniev-dpyc-oracle": {
      "type": "remote",
      "url": "https://dpyc-oracle.fastmcp.app/mcp",
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add lonniev-dpyc-oracle --url https://dpyc-oracle.fastmcp.app/mcp --transport streamable-http
```

### Hermes

```yaml
mcp_servers:
  lonniev-dpyc-oracle:
    url: "https://dpyc-oracle.fastmcp.app/mcp"
```

### Other

```json
{
  "mcpServers": {
    "lonniev-dpyc-oracle": {
      "type": "http",
      "url": "https://dpyc-oracle.fastmcp.app/mcp"
    }
  }
}
```

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-20 (score 65, +1)

No change was recorded against any check on this day. Stability & Change Management went from 30 to 33. That category is still filling its 30-day observation window: 9 days of observed history at the previous scan, 10 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-08-18 (score 64, +1)

- [functional] New tool “get_relays”
- [functional] New tool “resolve_authority_for”
- [functional] New tool “resolve_service”

### 2026-08-16 (score 63, +1)

No change was recorded against any check on this day. Stability & Change Management went from 17 to 20. That category is still filling its 30-day observation window: 5 days of observed history at the previous scan, 6 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-08-14 (score 62, +1)

No change was recorded against any check on this day. Stability & Change Management went from 10 to 13. That category is still filling its 30-day observation window: 3 days of observed history at the previous scan, 4 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-08-12 (score 61, +1)

No change was recorded against any check on this day. Stability & Change Management went from 3 to 7. That category is still filling its 30-day observation window: 1 days of observed history at the previous scan, 2 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-08-11 (score 60, +2)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-08-10 (score 58)

First indexed and scored.

## MCP tools (29)

### `about` (~45 tokens)

Extended narration about DPYC, the Social Contract, and the Oracle.

Fetches README.md and GOVERNANCE.md from the dpyc-community repo and
assembles a comprehensive context answer.

Output parameters:

- `result` (string)

### `lookup_member` (~57 tokens)

Look up a member by their Nostr npub.

Can look up any role's npub — citizen, operator, or authority.
Returns the full member record if found, or a not-found message.

Input parameters:

- `npub` (string, required)

Output parameters:

- `result`

### `get_tax_rate` (~111 tokens)

Explain how Tollbooth certification taxation works.

Taxation is ad valorem and **per-Authority** — there is no single
network-wide number, and the Oracle deliberately quotes none. The
actual fee is the Authority's own accounting, set in its pricing model
and reported at transaction time. This tool is a docent: it explains
the model and points to the live source. For the exact figure, query
the relevant Authority's ``check_price`` for ``certify_credits``.

### `economic_model` (~98 tokens)

Explain the DPYC Social Contract economic model — qualitatively.

Describes how value flows through the network: ad valorem
certification fees, the cascade up the Certification Chain to the
First Curator, and where the live numbers actually live. The Oracle
quotes **no** rates, counts, or revenue figures — those belong to the
Authorities' pricing models and the live registry, not to a docent.
Free, unauthenticated.

### `get_rulebook` (~34 tokens)

Fetch the DPYC Social Contract governance document.

Returns the raw markdown of GOVERNANCE.md from the dpyc-community repo.

Output parameters:

- `result` (string)

### `how_to_join` (~53 tokens)

Tier-specific onboarding guide for joining the DPYC Social Contract.

Covers all five tiers: Citizen, Advocate, Operator, Authority, and
First Curator. Includes Nostr keygen instructions and practical next
steps.

Output parameters:

- `result` (string)

### `who_is_first_curator` (~39 tokens)

Identify the First Curator (Prime Authority) of the Certification Chain.

Returns the curator's npub, display name, and member record.

Output parameters:

- `result`

### `network_versions` (~52 tokens)

Get current recommended versions of all Tollbooth components.

Returns component versions, minimum compatibility, active protocols,
and a short advisory summary. Data is fetched live from
network-status.json in the dpyc-community repo.

### `network_advisory` (~53 tokens)

Get current network deployment advisory.

Returns human-readable guidance on what changed recently, urgent
upgrades, and actions operators should take. Fetched live from
ADVISORY.md in the dpyc-community repo.

Output parameters:

- `result` (string)

### `how_to_add_authority` (~108 tokens)

End-to-end guide for spinning up a new Tollbooth Authority.

Returns the eight-step procedure covering identity, region selection,
GitHub workspace, dpyc-community registry entry, Neon + BTCPay + Horizon
deployment, BTCPay credential delivery via Secure Courier, the
self-registration challenge-response with the parent Authority, and
pre-funding the cert-fee balance. Fetched live from docs/how-to-add-authority.md
in the dpyc-community repo.

Output parameters:

- `result` (string)

### `service_status` (~38 tokens)

Diagnostic: report this service's software versions and runtime info.

Free, unauthenticated. Use to verify deployment versions across the
DPYC ecosystem.

### `list_services` (~220 tokens)

Enumerate the live DPYC service network with self-described summaries.

Reads the member roster from the dpyc-community registry, then (when
\``probe=True``) performs a lightweight MCP handshake against each
member's public service endpoint to fetch that service's *own*
self-description and tool inventory. Nothing about the services is
hardcoded here — descriptions are authored by each service, and prices
come from each Operator/Authority pricing model (call the service's
\``check_price``).

Resilient by design: per-service timeout, partial results, brief
caching, and a registry-only fallback when an endpoint is asleep or
unreachable. A sleeping service never breaks the listing. Free,
unauthenticated.

Args:
    probe: Handshake each endpoint for a live self-description. Set
        False for a fast registry-only listing (no network fan-out).
    kind: Role filter — "all", "operator", "authority", or "advocate".

Input parameters:

- `kind` (string)
- `probe` (boolean)

### `get_relays` (~84 tokens)

Return the DPYC Nostr relay set (primary-first).

The single source of truth is ``dpyc-community/relays.json``. An Operator
seeds its relay set from here at cold start (its only fixed dependency is
this Oracle endpoint), then reads its own bootstrap config from Nostr using
just its nsec — no direct GitHub access.

### `resolve_authority_for` (~80 tokens)

Resolve the certifying Authority for an operator npub.

Returns the Authority's ``{npub, url, name}`` (from the operator's
\``upstream_authority_npub``). Use this after bootstrap to learn — and
verify — which Authority signed your config, without reading GitHub.

Input parameters:

- `npub` (string, required)

### `resolve_service` (~95 tokens)

Resolve a DPYC service by ``name`` or ``npub``.

Returns ``{npub, url, name, role, purchase_mode}`` where ``purchase_mode``
is the registry-topology fact ``"certified"`` or ``"direct"`` (not a price).
Supply exactly one of ``name`` or ``npub``.

Input parameters:

- `name` (string)
- `npub` (string)

### `request_citizenship` (~233 tokens)

Begin the citizen registration process (Operator-owned flow).

This is the **citizen** registration path. Called by the Operator on
behalf of a patron — invokes the Oracle directly.  No Authority npub
is required or consulted.  The patron's npub is registered as a
Citizen in the DPYC community.

The npub provided here becomes the user's **patron identity** — the
keypair they will use for credit purchases and service access across
all Tollbooth-monetized services.

Not to be confused with **operator** registration, which goes through
the Authority via a Nostr DM delegation request.

Issues a cryptographic challenge that the applicant must sign with
their Nostr private key (nsec) to prove they own the claimed npub.
The nsec never leaves the applicant's device.

Returns a challenge_id, nonce, and signing instructions. The applicant
signs a Nostr event containing the nonce and submits it via
confirm_citizenship within 10 minutes.

Input parameters:

- `display_name` (string, required)
- `npub` (string, required)

### `confirm_citizenship` (~171 tokens)

Complete the citizen registration by submitting a signed Nostr event.

This is part of the **citizen** registration flow (Operator-owned).
The Operator calls this on behalf of a patron after the patron has
signed the cryptographic challenge from request_citizenship.

Verifies:
1\. The challenge exists and hasn't expired
2\. The Schnorr signature is valid
3\. The event's pubkey matches the claimed npub
4\. The event content contains the issued nonce
5\. The npub is not already registered

On success, commits directly to dpyc-community/members/citizens/{npub}.json
to register the new Citizen immediately.

Input parameters:

- `challenge_id` (string, required)
- `npub` (string, required)
- `signed_event_json` (string, required)

### `register_authority` (~259 tokens)

Register a new Authority in the DPYC community registry.

Called by an Authority service at the end of the onboarding protocol
(after the candidate proves npub ownership and the Prime Authority
approves). Commits a new ``members/authorities/{npub}.json`` file to
dpyc-community on GitHub.

The full Authority onboarding protocol is a 3-step Nostr DM
challenge-response flow:
1\. ``register_authority_npub(npub)`` — Authority sends DM challenge
2\. ``confirm_authority_claim(npub)`` — verifies candidate DM, escalates to Prime
3\. ``check_authority_approval(npub)`` — Prime approves, this tool is called

Parameters:
    authority_npub: Nostr npub of the new Authority curator.
    display_name: Human-readable name for the Authority.
    service_url: Public MCP endpoint URL of the Authority service.
    upstream_authority_npub: npub of the sponsoring Authority (must
        already exist as a prime_authority or authority in the registry).

Input parameters:

- `authority_npub` (string, required)
- `display_name` (string, required)
- `service_url` (string, required)
- `upstream_authority_npub` (string, required)

### `register_operator` (~155 tokens)

Register a new Operator in the DPYC community registry.

Called by an Authority service after the operator requests registration.
The Authority validates the operator's identity and sponsors the
registration by calling this tool via MCP-to-MCP.

Parameters:
    operator_npub: Nostr npub of the new Operator.
    display_name: Human-readable name for the Operator service.
    service_url: Public MCP endpoint URL of the Operator service.
    authority_npub: npub of the sponsoring Authority (must already
        exist as an authority or prime_authority in the registry).

Input parameters:

- `authority_npub` (string, required)
- `display_name` (string, required)
- `operator_npub` (string, required)
- `service_url` (string, required)

### `update_operator` (~158 tokens)

Update an existing Operator's registry entry.

Used when an Operator moves to a new MCP endpoint, changes its
display name, or needs to correct a registration.  Must be called
by the sponsoring Authority (or any Authority).

Parameters:
    operator_npub: Nostr npub of the Operator to update.
    service_url: New MCP endpoint URL (leave empty to keep current).
    display_name: New display name (leave empty to keep current).
    authority_npub: npub of the requesting Authority (must be a
        registered authority or prime_authority).

Input parameters:

- `authority_npub` (string)
- `display_name` (string)
- `operator_npub` (string, required)
- `service_url` (string)

### `deregister_operator` (~117 tokens)

Remove an Operator from the DPYC community registry.

Called when an Authority disowns an Operator.  An Operator cannot
exist without a sponsoring Authority, so deregistration removes the
member file entirely, returning the Operator to initial state.

Parameters:
    operator_npub: Nostr npub of the Operator to remove.
    authority_npub: npub of the Authority requesting deregistration
        (must be a registered authority or prime_authority).

Input parameters:

- `authority_npub` (string, required)
- `operator_npub` (string, required)

### `register_advocate` (~198 tokens)

Register a new Advocate in the DPYC community registry.

Advocates are community utility services that provide shared
infrastructure (e.g., OAuth2 callback collectors) but aren't
monetized Operators or certification Authorities.

This is an Oracle-mediated registration — no Nostr DM
challenge-response needed. The Oracle operator (Prime Authority)
trusts the commit via GitHub token.

Parameters:
    npub: Nostr npub of the Advocate service.
    display_name: Human-readable name for the service.
    service_name: Machine-readable service identifier
        (e.g., "tollbooth-oauth2-collector").
    service_url: Public URL of the service.
    service_description: Short description of what the service does.

Input parameters:

- `display_name` (string, required)
- `npub` (string, required)
- `service_description` (string, required)
- `service_name` (string, required)
- `service_url` (string, required)

### `check_ban_status` (~90 tokens)

Check whether an npub is banned from the DPYC Social Contract.

Looks up the member in the community registry and checks whether
their status is "banned".  Unknown npubs are not considered banned
(they simply aren't members).

Free, unauthenticated.  Used by operators during the cold path
(credit purchases) to enforce community bans.

Input parameters:

- `npub` (string, required)

### `renounce_membership` (~51 tokens)

Citizen self-removal from the DPYC Social Contract via automated PR.

Not yet implemented — will create a GitHub PR to remove the member
from the registry.

Input parameters:

- `npub` (string, required)

### `initiate_ban_election` (~61 tokens)

Initiate a community ban election against a member.

Not yet implemented — will create a GitHub Issue with a 72-hour
discussion period and Lightning-funded economic voting.

Input parameters:

- `reason` (string, required)
- `target_npub` (string, required)

### `cast_ban_vote` (~72 tokens)

Cast a Lightning-funded vote in an active ban election.

Not yet implemented — will verify npub membership, validate the
election is active, and record the vote with a Lightning payment proof.

Input parameters:

- `election_id` (string, required)
- `npub` (string, required)
- `vote` (string, required)

### `publish_campaign` (~173 tokens)

Publish a pricing campaign to the DPYC community.

Commits both a machine-importable JSON file and a human-readable
Markdown summary to the dpyc-community campaigns directory.

Args:
    author_npub: The npub of the person who designed the campaign.
    operator_npub: The npub of the operator the campaign is for.
    campaign_json: The full campaign export as a JSON string.
    campaign_name: Optional display name. Derived from JSON if omitted.
    campaign_markdown: Optional pre-rendered Markdown. If omitted, the
        Oracle generates a basic summary from the JSON.

Input parameters:

- `author_npub` (string, required)
- `campaign_json` (string, required)
- `campaign_markdown` (string)
- `campaign_name` (string)
- `operator_npub` (string, required)

### `list_campaigns` (~77 tokens)

List published pricing campaigns from the DPYC community.

Optionally filter by operator or author npub.

Args:
    operator_npub: Filter to campaigns for this operator (optional).
    author_npub: Filter to campaigns by this author (optional).

Input parameters:

- `author_npub` (string)
- `operator_npub` (string)

### `get_campaign` (~99 tokens)

Retrieve a published pricing campaign.

Args:
    author_npub: The campaign author's npub.
    operator_npub: The target operator's npub.
    slug: The campaign slug (directory name).
    format: "json" for importable data, "markdown" for readable summary.

Input parameters:

- `author_npub` (string, required)
- `format` (string)
- `operator_npub` (string, required)
- `slug` (string, required)

## Diagnostics

Captured diagnostic sections: TLS, DNSSEC, Authorisation, Transports. The full working is on the page: https://verifymcp.io/servers/lonniev-dpyc-oracle/dpyc-oracle#diagnostics

## Score history

- 2026-08-20: 65
- 2026-08-19: 64
- 2026-08-18: 64
- 2026-08-17: 63
- 2026-08-16: 63
- 2026-08-15: 62
- 2026-08-14: 62
- 2026-08-13: 61
- 2026-08-12: 61
- 2026-08-11: 60
- 2026-08-10: 58

## Links

- Remote endpoint: https://dpyc-oracle.fastmcp.app/mcp
- Repository: https://github.com/lonniev/dpyc-oracle
- Changelog RSS feed: https://verifymcp.io/servers/lonniev-dpyc-oracle/dpyc-oracle.xml
- Changelog JSON feed: https://verifymcp.io/servers/lonniev-dpyc-oracle/dpyc-oracle.json
- HTML version of this page: https://verifymcp.io/servers/lonniev-dpyc-oracle/dpyc-oracle