io.github.lonniev/roastify-mcp
REMOTE · ROASTIFY-MCP.FASTMCP.APP
Roastify Developer API MCP Service — Tollbooth DPYC monetization
Available components
Last scanned (5 hours ago)
Scores higher than 19% of remote servers
Reachable. Last reached 5 Nov 2026.
Category E-commerce
Recent critical change
Authorization (15 Oct 2026). See the changelog before you install this server.
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security89
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- The endpoint enforces authorisation, advertised via RFC 9728 protected-resource metadata. View diagnostics → Pass
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- HSTS check failed: the Strict-Transport-Security header is absent. See how to fix → View diagnostics → Fail
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
- The authorisation server offers only Dynamic Client Registration (RFC 7591), which MCP 2026-07-28 deprecated in favour of Client ID Metadata Documents. View diagnostics → Partial
Transport & Reachability0
- Transport blocked by authentication: the endpoint requires auth we don't have to verify streamable-http. See how to fix → View diagnostics → Unverified
Schema Quality & AI Usability0
- Schema blocked by authentication: the endpoint requires auth we don't have to read it. See how to fix → Unverified
Stability & Change Management0
- Stability not yet verified: not enough scan history yet (needs a 30-day window).Unverified
Tool Coverage0
- Tool coverage blocked by authentication: the endpoint requires auth we don't have to read its tools.Unverified
Tool Safety0
- Tool safety blocked by authentication: the endpoint requires auth we don't have to read its tools.Unverified
Capabilities0
- Capabilities blocked by authentication: the endpoint requires auth we don't have to read them. See how to fix → Unverified
Unverified: 6 categories
Categories scored 0 because we could not verify them: authentication we do not have, an unreachable endpoint, or not enough scan history. We only credit what we can confirm. Claim this server and supply a read-only token to verify it and lift the score.
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 18 Oct 26 −40
- Endpoint reachability: reachable → behind authorisation ▼ security
- Stability: pass → unverified ▼ security
- Tool safety: pass → unverified ▼ security
- Transport: pass → unverified ▼ security
- Authorization: fail → pass ▲ security
- First check of Authorization: partial security
- Capabilities: pass → unverified ▼ functional
- Tool coverage: 100 → unverified ▼ functional
- First check of Schema quality: unverified functional
- 15 Oct 26 +2
- Authorization: unverified → fail ▼ critical
- Tool “roastify_delete_operator_credential” rewrote its description, which is the text the model reads security
- Tool “roastify_update_operator_credential” rewrote its description, which is the text the model reads security
- Tool “roastify_delete_coupon” is now declared destructive security
- Tool “roastify_delete_design” is now declared destructive security
- Tool “roastify_delete_operator_credential” is now declared destructive security
- Tool “roastify_delete_patron_credential” is now declared destructive security
- Tool “roastify_forget_coupon” is now declared destructive security
- Tool “roastify_forget_credentials” is now declared destructive security
- Tool “roastify_publish_nostr_profile” is now declared destructive security
- Tool “roastify_receive_credentials” is now declared destructive security
- Tool “roastify_receive_npub_proof” is now declared destructive security
- Tool “roastify_receive_patron_credentials” is now declared destructive security
- Tool “roastify_reset_pricing_model” is now declared destructive security
- Tool “roastify_set_pricing_model” is now declared destructive security
- Schema quality: 205 → 239 ▼ functional
- Tool coverage: 72% → 100% ▲ functional
- Destructive annotations: All 8 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation. functional
- Server version: 4.1.0 → 0.22.6 functional
- “roastify_account_statement” reworded the description of “dpop_token” cosmetic
- “roastify_account_statement_infographic” reworded the description of “dpop_token” cosmetic
- “roastify_add_design_element” reworded the description of “dpop_token” cosmetic
- “roastify_add_design_element” reworded the description of “npub” cosmetic
- “roastify_adoption_status” reworded the description of “authority_npub” cosmetic
- “roastify_adoption_status” reworded the description of “dpop_token” cosmetic
- “roastify_artwork_status” reworded the description of “dpop_token” cosmetic
- “roastify_artwork_status” reworded the description of “npub” cosmetic
- “roastify_browse_catalog” reworded the description of “dpop_token” cosmetic
- “roastify_browse_catalog” reworded the description of “npub” cosmetic
- “roastify_check_balance” reworded the description of “dpop_token” cosmetic
- “roastify_check_payment” reworded the description of “dpop_token” cosmetic
- “roastify_check_price” reworded the description of “dpop_token” cosmetic
- “roastify_check_price” reworded the description of “npub” cosmetic
- “roastify_check_proof_status” reworded the description of “dpop_token” cosmetic
- “roastify_check_stock” reworded the description of “dpop_token” cosmetic
- “roastify_check_stock” reworded the description of “npub” cosmetic
- “roastify_delete_coupon” reworded the description of “coupon_id” cosmetic
- “roastify_delete_coupon” reworded the description of “dpop_token” cosmetic
- “roastify_delete_design” reworded the description of “dpop_token” cosmetic
- “roastify_delete_design” reworded the description of “npub” cosmetic
- “roastify_delete_operator_credential” reworded the description of “dpop_token” cosmetic
- “roastify_delete_patron_credential” reworded the description of “dpop_token” cosmetic
- “roastify_fetch_design” reworded the description of “dpop_token” cosmetic
- “roastify_fetch_design” reworded the description of “npub” cosmetic
- “roastify_forget_coupon” reworded the description of “coupon_id” cosmetic
- “roastify_forget_coupon” reworded the description of “dpop_token” cosmetic
- “roastify_forget_coupon” reworded the description of “npub” cosmetic
- “roastify_forget_credentials” reworded the description of “dpop_token” cosmetic
- “roastify_generate_artwork” reworded the description of “dpop_token” cosmetic
- “roastify_generate_artwork” reworded the description of “npub” cosmetic
- “roastify_get_blend” reworded the description of “dpop_token” cosmetic
- “roastify_get_blend” reworded the description of “npub” cosmetic
- “roastify_get_catalog_product” reworded the description of “dpop_token” cosmetic
- “roastify_get_catalog_product” reworded the description of “npub” cosmetic
- “roastify_get_design_text” reworded the description of “dpop_token” cosmetic
- “roastify_get_design_text” reworded the description of “npub” cosmetic
- “roastify_get_my_product” reworded the description of “dpop_token” cosmetic
- “roastify_get_my_product” reworded the description of “npub” cosmetic
- “roastify_get_nostr_profile” reworded the description of “npub” cosmetic
- “roastify_get_patron_credential_fields” reworded the description of “dpop_token” cosmetic
- “roastify_get_patron_onboarding_status” reworded the description of “dpop_token” cosmetic
- “roastify_list_coupons” reworded the description of “dpop_token” cosmetic
- “roastify_list_design_versions” reworded the description of “dpop_token” cosmetic
- “roastify_list_design_versions” reworded the description of “npub” cosmetic
- “roastify_list_designs” reworded the description of “dpop_token” cosmetic
- “roastify_list_designs” reworded the description of “npub” cosmetic
- “roastify_list_my_coupons” reworded the description of “dpop_token” cosmetic
- “roastify_list_my_coupons” reworded the description of “npub” cosmetic
- “roastify_list_my_products” reworded the description of “dpop_token” cosmetic
- “roastify_list_my_products” reworded the description of “npub” cosmetic
- “roastify_mint_coupon” reworded the description of “dpop_token” cosmetic
- “roastify_move_elements” reworded the description of “dpop_token” cosmetic
- “roastify_move_elements” reworded the description of “npub” cosmetic
- “roastify_oracle_lookup_member” reworded the description of “npub” cosmetic
- “roastify_purchase_credits” reworded the description of “dpop_token” cosmetic
- “roastify_receive_credentials” reworded the description of “dpop_token” cosmetic
- “roastify_receive_npub_proof” reworded the description of “dpop_token” cosmetic
- “roastify_receive_patron_credentials” reworded the description of “credential_card” cosmetic
- “roastify_receive_patron_credentials” reworded the description of “dpop_token” cosmetic
- “roastify_receive_patron_credentials” reworded the description of “sender_npub” cosmetic
- “roastify_redeem_coupon” reworded the description of “code” cosmetic
- “roastify_redeem_coupon” reworded the description of “dpop_token” cosmetic
- “roastify_redeem_coupon” reworded the description of “npub” cosmetic
- “roastify_report_issue” reworded the description of “dpop_token” cosmetic
- “roastify_request_adoption” reworded the description of “dpop_token” cosmetic
- “roastify_request_patron_credentials” reworded the description of “sender_npub” cosmetic
- “roastify_reset_pricing_model” reworded the description of “dpop_token” cosmetic
- “roastify_restore_credits” reworded the description of “dpop_token” cosmetic
- “roastify_restore_neon_schema” reworded the description of “dpop_token” cosmetic
- “roastify_set_pricing_model” reworded the description of “dpop_token” cosmetic
- “roastify_set_pricing_model” reworded the description of “model_json” cosmetic
- “roastify_set_product_description” reworded the description of “dpop_token” cosmetic
- “roastify_set_product_description” reworded the description of “npub” cosmetic
- “roastify_stash_design” reworded the description of “dpop_token” cosmetic
- “roastify_stash_design” reworded the description of “npub” cosmetic
- “roastify_update_coupon” reworded the description of “clear_total_uses” cosmetic
- “roastify_update_coupon” reworded the description of “clear_uses_per_patron” cosmetic
- “roastify_update_coupon” reworded the description of “coupon_id” cosmetic
- “roastify_update_coupon” reworded the description of “discount_percent” cosmetic
- “roastify_update_coupon” reworded the description of “dpop_token” cosmetic
- “roastify_update_coupon” reworded the description of “name” cosmetic
- “roastify_update_coupon” reworded the description of “tool_ids” cosmetic
- “roastify_update_coupon” reworded the description of “total_uses” cosmetic
- “roastify_update_coupon” reworded the description of “uses_per_patron” cosmetic
- “roastify_update_coupon” reworded the description of “valid_from” cosmetic
- “roastify_update_coupon” reworded the description of “valid_until” cosmetic
- “roastify_update_design_text” reworded the description of “dpop_token” cosmetic
- “roastify_update_design_text” reworded the description of “npub” cosmetic
- “roastify_update_operator_credential” reworded the description of “dpop_token” cosmetic
- “roastify_update_patron_credential” reworded the description of “dpop_token” cosmetic
- Tool “roastify_account_statement” changed its title: Roastify Account Statement → Account statement cosmetic
- Tool “roastify_account_statement_infographic” changed its title: Roastify Account Statement Infographic → Account statement infographic cosmetic
- Tool “roastify_add_design_element” changed its title: Roastify Add Design Element → Add a design element cosmetic
- Tool “roastify_adoption_status” changed its title: Roastify Adoption Status → Adoption status cosmetic
- Tool “roastify_artwork_status” changed its title: Roastify Artwork Status → Artwork job status cosmetic
- Tool “roastify_browse_catalog” changed its title: Roastify Browse Catalog → Browse the catalog cosmetic
- Tool “roastify_check_authority_balance” changed its title: Roastify Check Authority Balance → Authority balance cosmetic
- Tool “roastify_check_balance” changed its title: Roastify Check Balance → Check balance cosmetic
- Tool “roastify_check_payment” changed its title: Roastify Check Payment → Check payment cosmetic
- Tool “roastify_check_price” changed its title: Roastify Check Price → Check price cosmetic
- Tool “roastify_check_proof_status” changed its title: Roastify Check Proof Status → Check proof status cosmetic
- Tool “roastify_check_stock” changed its title: Roastify Check Stock → Check stock cosmetic
- Tool “roastify_delete_coupon” changed its title: Roastify Delete Coupon → Delete coupon cosmetic
- Tool “roastify_delete_design” changed its title: Roastify Delete Design → Delete a design cosmetic
- Tool “roastify_delete_operator_credential” changed its title: Roastify Delete Operator Credential → Delete operator credential cosmetic
- Tool “roastify_delete_patron_credential” changed its title: Roastify Delete Patron Credential → Delete patron credential cosmetic
- Tool “roastify_fetch_design” changed its title: Roastify Fetch Design → Fetch a design cosmetic
- Tool “roastify_forget_coupon” changed its title: Roastify Forget Coupon → Forget coupon cosmetic
- Tool “roastify_forget_credentials” changed its title: Roastify Forget Credentials → Forget credentials cosmetic
- Tool “roastify_generate_artwork” changed its title: Roastify Generate Artwork → Generate artwork cosmetic
- Tool “roastify_get_blend” changed its title: Roastify Get Blend → Get a blend cosmetic
- Tool “roastify_get_catalog_product” changed its title: Roastify Get Catalog Product → Get a catalog product cosmetic
- Tool “roastify_get_design_text” changed its title: Roastify Get Design Text → Get design text cosmetic
- Tool “roastify_get_my_product” changed its title: Roastify Get My Product → Get my product cosmetic
- Tool “roastify_get_nostr_profile” changed its title: Roastify Get Nostr Profile → Nostr profile cosmetic
- Tool “roastify_get_notarization_proof” changed its title: Roastify Get Notarization Proof → Notarization proof cosmetic
- Tool “roastify_get_operator_onboarding_status” changed its title: Roastify Get Operator Onboarding Status → Operator onboarding status cosmetic
- Tool “roastify_get_patron_credential_fields” changed its title: Roastify Get Patron Credential Fields → Patron credential fields cosmetic
- Tool “roastify_get_patron_onboarding_status” changed its title: Roastify Get Patron Onboarding Status → Patron onboarding status cosmetic
- Tool “roastify_get_pricing_model” changed its title: Roastify Get Pricing Model → Pricing model cosmetic
- Tool “roastify_list_canonical_identities” changed its title: Roastify List Canonical Identities → Tool identities cosmetic
- Tool “roastify_list_constraint_types” changed its title: Roastify List Constraint Types → Constraint types cosmetic
- Tool “roastify_list_coupons” changed its title: Roastify List Coupons → Coupons cosmetic
- Tool “roastify_list_design_versions” changed its title: Roastify List Design Versions → List design versions cosmetic
- Tool “roastify_list_designs” changed its title: Roastify List Designs → List designs cosmetic
- Tool “roastify_list_my_coupons” changed its title: Roastify List My Coupons → My coupons cosmetic
- Tool “roastify_list_my_products” changed its title: Roastify List My Products → List my products cosmetic
- Tool “roastify_list_notarizations” changed its title: Roastify List Notarizations → Notarizations cosmetic
- Tool “roastify_mint_coupon” changed its title: Roastify Mint Coupon → Mint coupon cosmetic
- Tool “roastify_move_elements” changed its title: Roastify Move Elements → Move design elements cosmetic
- Tool “roastify_notarize_ledger” changed its title: Roastify Notarize Ledger → Notarize ledger cosmetic
- Tool “roastify_oracle_about” changed its title: Roastify Oracle About → About DPYC cosmetic
- Tool “roastify_oracle_get_tax_rate” changed its title: Roastify Oracle Get Tax Rate → DPYC tax rate cosmetic
- Tool “roastify_oracle_how_to_join” changed its title: Roastify Oracle How To Join → How to join DPYC cosmetic
- Tool “roastify_oracle_lookup_member” changed its title: Roastify Oracle Lookup Member → Look up a DPYC member cosmetic
- Tool “roastify_oracle_network_advisory” changed its title: Roastify Oracle Network Advisory → Network advisories cosmetic
- Tool “roastify_publish_nostr_profile” changed its title: Roastify Publish Nostr Profile → Publish Nostr profile cosmetic
- Tool “roastify_purchase_credits” changed its title: Roastify Purchase Credits → Buy credits cosmetic
- Tool “roastify_receive_credentials” changed its title: Roastify Receive Credentials → Receive credentials cosmetic
- Tool “roastify_receive_npub_proof” changed its title: Roastify Receive Npub Proof → Receive npub proof cosmetic
- Tool “roastify_receive_patron_credentials” changed its title: Roastify Receive Patron Credentials → Receive patron credentials cosmetic
- Tool “roastify_redeem_coupon” changed its title: Roastify Redeem Coupon → Redeem coupon cosmetic
- Tool “roastify_report_issue” changed its title: Roastify Report Issue → Report an issue cosmetic
- Tool “roastify_request_adoption” changed its title: Roastify Request Adoption → Request adoption cosmetic
- Tool “roastify_request_credential_channel” changed its title: Roastify Request Credential Channel → Open credential channel cosmetic
- Tool “roastify_request_echo” changed its title: Roastify Request Echo → Request echo cosmetic
- Tool “roastify_request_npub_proof” changed its title: Roastify Request Npub Proof → Request npub proof cosmetic
- Tool “roastify_request_patron_credentials” changed its title: Roastify Request Patron Credentials → Request patron credentials cosmetic
- Tool “roastify_reset_pricing_model” changed its title: Roastify Reset Pricing Model → Reset pricing model cosmetic
- Tool “roastify_restore_credits” changed its title: Roastify Restore Credits → Restore credits cosmetic
- Tool “roastify_restore_neon_schema” changed its title: Roastify Restore Neon Schema → Restore database schema cosmetic
- Tool “roastify_service_status” changed its title: Roastify Service Status → Service status cosmetic
- Tool “roastify_session_status” changed its title: Roastify Session Status → Session status cosmetic
- Tool “roastify_set_pricing_model” changed its title: Roastify Set Pricing Model → Set pricing model cosmetic
- Tool “roastify_set_product_description” changed its title: Roastify Set Product Description → Set product description cosmetic
- Tool “roastify_stash_design” changed its title: Roastify Stash Design → Stash a design cosmetic
- Tool “roastify_update_coupon” changed its title: Roastify Update Coupon → Update coupon cosmetic
- Tool “roastify_update_design_text” changed its title: Roastify Update Design Text → Update design text cosmetic
- Tool “roastify_update_operator_credential” changed its title: Roastify Update Operator Credential → Update operator credential cosmetic
- Tool “roastify_update_patron_credential” changed its title: Roastify Update Patron Credential → Update patron credential cosmetic
- 13 Oct 26 0
- New tool “roastify_request_echo” functional
- 10 Oct 26 0
- Server version: 4.0.11 → 4.1.0 functional
- 30 Sept 26 0
- Tool “roastify_check_proof_status” rewrote its description, which is the text the model reads security
- Tool “roastify_receive_npub_proof” rewrote its description, which is the text the model reads security
- Tool “roastify_request_npub_proof” rewrote its description, which is the text the model reads security
- “roastify_check_proof_status” reworded the description of “dpop_token” cosmetic
- 29 Sept 26 0
- Tool “roastify_restore_neon_schema” rewrote its description, which is the text the model reads security
- 28 Sept 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 26 Sept 26 0
First indexed and scored.
- Server version: 4.0.9 → 4.0.10 functional
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 5 Nov 2026 · Probed https://roastify-mcp.fastmcp.app/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=*.fastmcp.app | CN=Amazon RSA 2048 M04,O=Amazon,C=US | 17 Jun 2026 | 31 Dec 2026 | RSA 2048 | SHA256-RSA | a1583bafd89c7b58780ef1a0a0d2ad7 |
| SANs: *.fastmcp.app | ||||||
| CN=Amazon RSA 2048 M04,O=Amazon,C=US (CA) | CN=Amazon Root CA 1,O=Amazon,C=US | 23 Aug 2022 | 23 Aug 2030 | RSA 2048 | SHA256-RSA | 773124f2a952e3ed18a58bdb85d1bc0ce5f27 |
| CN=Amazon Root CA 1,O=Amazon,C=US (CA) | CN=Starfield Services Root Certificate Authority - G2,O=Starfield Technologies\, Inc.,L=Scottsdale,ST=Arizona,C=US | 25 May 2015 | 31 Dec 2037 | RSA 2048 | SHA256-RSA | 67f944a2a27cdf3fac2ae2b01f908eeb9c4c6 |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of roastify-mcp.fastmcp.app. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| app. | present | 23684 | 8 | Verified |
| fastmcp.app. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication Enforced and verified
The endpoint asked for a token and published valid RFC 9728 metadata describing how to get one.
| Result | Enforced and verified |
|---|---|
| Enforced | On connection |
| HTTP status | 401 |
WWW-Authenticate challenge Bearer resource_metadata="https://roastify-mcp.fastmcp.app/.well-known/oauth-protected-resource/mcp"
Bearer resource_metadata="https://roastify-mcp.fastmcp.app/.well-known/oauth-protected-resource/mcp"| Header | Value |
|---|---|
| www-authenticate | Bearer resource_metadata="https://roastify-mcp.fastmcp.app/.well-known/oauth-protected-resource/mcp" |
Protected resource metadata
| Document | https://roastify-mcp.fastmcp.app/.well-known/oauth-protected-resource/mcp |
|---|---|
| Retrieved | Yes |
| Resource | https://roastify-mcp.fastmcp.app/mcp |
| Authorisation server | https://roastify-mcp.fastmcp.app/ |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://roastify-mcp.fastmcp.app/mcp | Auth required | 401 | |
| http (plaintext) | http://roastify-mcp.fastmcp.app/mcp | HTTPS enforced | 301 | https://roastify-mcp.fastmcp.app/mcp |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
roastify_account_statement Account statement ~181
Generate a patron's account statement at this operator. Returns the patron's purchase history, active credit tranches, per-tool usage breakdown, and recent daily usage logs. This is the patron's spending account — not the operator's Authority tax balance. Free — no credits consumed. Proof of npub ownership is required to prevent statement-scraping of arbitrary patrons.
| Name | Type | Req | Description |
|---|---|---|---|
| days | integer | – | Number of days of daily usage history to include (default 30). |
| dpop_token | string | yes | Proof that the caller holds npub: the grant envelope from receive_npub_proof, or the raw JSON of a kind-27235 Nostr event signed by npub whose `u` tag is this tool's name. |
| npub | string | yes | The patron's Nostr public key (npub1...). |
Structured output declared, but exposes no named fields.
No examples provided.
roastify_account_statement_infographic Account statement infographic ~181
Generate a visual SVG infographic of your account statement. Returns the same data as account_statement, rendered as a dark-themed SVG graphic with balance hero, metrics cards, health gauge, tranche table, and tool usage breakdown. Costs 1 api_sat per call. Proof is verified by ``debit_or_deny`` before any cost is incurred.
| Name | Type | Req | Description |
|---|---|---|---|
| days | integer | – | Number of days of daily usage history to include (default 30). |
| dpop_token | string | yes | Proof that the caller holds npub: the grant envelope from receive_npub_proof, or the raw JSON of a kind-27235 Nostr event signed by npub whose `u` tag is this tool's name. |
| npub | string | yes | The Nostr public key (npub1...) whose statement to render. |
Structured output declared, but exposes no named fields.
No examples provided.
roastify_add_design_element Add a design element ~866
Add a new element (text or image) to a design and commit a new version of it. The store is configuration management: the element is committed back to the SAME design_id (git tracks the diff). The new element's id comes back, so you can immediately edit a text element by id with update_design_text, or move/reorder either kind with move_elements. Placement is validated server-side and REFUSED, not warned: the element must fall inside the named panel (with a default margin — the dieline carries no real safe area) — or, when the product has no panels (Tubes / continuous wrap), inside the design sheet — and must not overlap any existing element (the collider's id is named). Typography is inherited for text, so a new text element matches the template. Image creation reuses a src already present in the design (no new asset upload) — pass `kind="image"` with `src_from` (an existing image id) or `src` that already appears on an image.
| Name | Type | Req | Description |
|---|---|---|---|
| client_req_id | string | – | Your idempotency key. |
| commit_message | string | – | A specific description of WHAT changed and WHY — a real commit message, not a placeholder like 'save this' or 'update'. Required. |
| design_id | string | yes | The design to add to, from roastify_list_designs. |
| dpop_token | string | – | Proof that the caller holds npub. Either the grant envelope that receive_npub_proof returned, or the raw JSON of a kind-27235 Nostr event signed by npub: content "", a `u` tag holding this tool's exa… |
| face | string | – | The panel to place it on — one of the `panels` from get_design_text (e.g. "right"). On multi-panel boxes the element must fall inside that panel; face is required there. On single-face products (Tube… |
| height | integer | – | Image frame height in design units (kind="image" only). Defaults to the donor image's height when src_from is set. |
| kind | string | – | "text" (default) or "image". |
| label | string | – | Rename the design (optional). Defaults to keeping its current label. |
| npub | string | – | The patron's Nostr public key (npub1...). Tool fees are paid from this patron's balance; dpop_token proves the caller holds it. |
| position | – | – | Where to place it. Either absolute {"x": N, "y": M} (top-left in design units), or relative to an existing element: {"below"|"above"|"rightOf"|"leftOf": "layer_id", "gap": G}. Relative is best when t… |
| src | string | – | An image src already present in this design (kind="image"); alternative to src_from. New uploads are refused — only reuse an asset already on the design. |
| src_from | string | – | Existing IMAGE element id whose src to copy (kind="image"). |
| style_from | string | – | An existing TEXT layer id (from get_design_text) whose font, size, weight, colour, alignment, and leading the new text element inherits. Required when kind="text". |
| text | string | – | The element's text (\n for line breaks). Required when kind="text". |
| version_tag | string | – | The NEXT semver version (MAJOR.MINOR.PATCH, e.g. 1.3.0, no 'v') — call roastify_list_design_versions and increment. Required; reusing one is refused. |
| width | integer | – | The text box (wrap) width, or the image frame width, in design units. Defaults to the panel width minus margins for text; required for images when not defaulting from the donor. |
Structured output declared, but exposes no named fields.
No examples provided.
roastify_adoption_status Adoption status ~132
Check this operator's adoption-request status at a chosen Authority. Free. Polls the Authority MCP-to-MCP for the status of this operator's request (pending / approved / rejected / provisioned).
| Name | Type | Req | Description |
|---|---|---|---|
| authority_npub | string | yes | The npub of the Authority the request was sent to. |
| dpop_token | string | – | Proof that the caller holds the operator's npub: the grant envelope from receive_npub_proof, or the raw JSON of a kind-27235 Nostr event signed by the operator whose `u` tag is this tool's name. |
Structured output declared, but exposes no named fields.
No examples provided.
roastify_artwork_status Artwork job status ~179
Check a Roastify artwork job. Free — polling never costs anything. A finished job carries ``artwork_url``; a failed one carries ``error``.
| Name | Type | Req | Description |
|---|---|---|---|
| dpop_token | string | – | Proof that the caller holds npub. Either the grant envelope that receive_npub_proof returned, or the raw JSON of a kind-27235 Nostr event signed by npub: content "", a `u` tag holding this tool's exa… |
| job_id | string | yes | The job id returned by roastify_generate_artwork. |
| npub | string | – | The patron's Nostr public key (npub1...). Tool fees are paid from this patron's balance; dpop_token proves the caller holds it. |
Structured output declared, but exposes no named fields.
No examples provided.
roastify_browse_catalog Browse the catalog ~197
Browse the Roastify catalog: products and coffee blends together. Plan-gated items are returned with their tier marked, not hidden. Note that Roastify's catalog carries no origin, altitude, processing, or varietal data — those live only in the Merchant App UI. Roast level and decaf status come from the blend.
| Name | Type | Req | Description |
|---|---|---|---|
| dpop_token | string | – | Proof that the caller holds npub. Either the grant envelope that receive_npub_proof returned, or the raw JSON of a kind-27235 Nostr event signed by npub: content "", a `u` tag holding this tool's exa… |
| npub | string | – | The patron's Nostr public key (npub1...). Tool fees are paid from this patron's balance; dpop_token proves the caller holds it. |
Structured output declared, but exposes no named fields.
No examples provided.
roastify_check_authority_balance Authority balance ~73
Check this operator's tax balance at the Authority. Returns the sats available for certifying patron credit purchases. When this balance reaches zero, patron top-ups cannot be certified and the operator must call purchase_credits on the Authority. This is the operator's own funding — not a patron balance. Free.
Input schema present but exposes no named parameters.
Structured output declared, but exposes no named fields.
No examples provided.
roastify_check_balance Check balance ~167
Check a patron's credit balance at this operator. This is the patron's spending balance — credits purchased via Lightning for tool calls at this operator. For the operator's own balance at the Authority (needed to certify patron purchases), use authority_check_balance instead. Free — no credits required. Proof of npub ownership is required to prevent anyone-with-the-registry from enumerating balances.
| Name | Type | Req | Description |
|---|---|---|---|
| dpop_token | string | yes | Proof that the caller holds npub: the grant envelope from receive_npub_proof, or the raw JSON of a kind-27235 Nostr event signed by npub whose `u` tag is this tool's name. |
| npub | string | yes | The Nostr public key (npub1...) whose balance to check. |
Structured output declared, but exposes no named fields.
No examples provided.
roastify_check_payment Check payment ~153
Check the payment status of a Lightning invoice. Call after paying the invoice from purchase_credits. Free — no credits required. Proof of npub ownership is required to prevent credit-grant front-running by an observer of the invoice ID.
| Name | Type | Req | Description |
|---|---|---|---|
| dpop_token | string | yes | Proof that the caller holds npub: the grant envelope from receive_npub_proof, or the raw JSON of a kind-27235 Nostr event signed by npub whose `u` tag is this tool's name. |
| invoice_id | string | yes | The invoice ID returned by purchase_credits. |
| npub | string | yes | The Nostr public key (npub1...) that purchased the invoice. |
Structured output declared, but exposes no named fields.
No examples provided.
roastify_check_price Check price ~247
Preview the effective cost of a tool call. Shows the base cost and any constraint effects (discounts, free trials, surge pricing). Free — no credits required.
| Name | Type | Req | Description |
|---|---|---|---|
| dpop_token | string | – | Proof that the caller holds npub: the grant envelope from receive_npub_proof, or the raw JSON of a kind-27235 Nostr event signed by npub whose `u` tag is this tool's name. |
| npub | string | – | Optional patron npub; with it, the preview includes that patron's coupons and constraint effects. |
| tool_id | string | yes | Either the tool's UUID (from the pricing model) or a bare capability string (e.g. ``"deal_scenario"``). FE callers usually have the capability name; this resolves both so the FE doesn't need to deriv… |
| tool_kwargs | string | – | Optional JSON object with tool call parameters for ad valorem / categorical-multiplier pricing preview (e.g. '{"amount_sats": 5000}' or '{"difficulty": "sovereign", "mode": "live"}'). |
Structured output declared, but exposes no named fields.
No examples provided.
roastify_check_proof_status Check proof status ~172
Check whether a proof grant is still valid. Mirrors ``check_oauth_status`` for the npub-proof flow: a calling agent can ask "will my next paid call accept this dpop_token?" before burning credits on a guaranteed failure. Expiry is read from the grant itself; the only store consulted is the patron's revocation watermark. Free, no side effects — touches no relay.
| Name | Type | Req | Description |
|---|---|---|---|
| dpop_token | string | – | Proof that the caller holds npub: the grant envelope from receive_npub_proof, or the raw JSON of a kind-27235 Nostr event signed by npub whose `u` tag is this tool's name. |
| patron_npub | string | – | Required. The patron's npub (npub1...). |
Structured output declared, but exposes no named fields.
No examples provided.
roastify_check_stock Check stock ~161
Check Roastify stock for one SKU, or the whole stock list.
| Name | Type | Req | Description |
|---|---|---|---|
| dpop_token | string | – | Proof that the caller holds npub. Either the grant envelope that receive_npub_proof returned, or the raw JSON of a kind-27235 Nostr event signed by npub: content "", a `u` tag holding this tool's exa… |
| npub | string | – | The patron's Nostr public key (npub1...). Tool fees are paid from this patron's balance; dpop_token proves the caller holds it. |
| sku | string | – | A variant SKU. Omit to get the full stock list. |
Structured output declared, but exposes no named fields.
No examples provided.
roastify_delete_coupon Delete coupon ~146
Delete a coupon. Cascades to all patron redemptions. Any chain step referencing the deleted coupon_id becomes a no-op (the constraint returns neutral on unknown ids) — the Studio surfaces orphan references as warnings. RESTRICTED to operator — requires proof.
| Name | Type | Req | Description |
|---|---|---|---|
| coupon_id | string | yes | The id of the coupon to delete (from list_coupons). |
| dpop_token | string | – | Proof that the caller holds the operator's npub: the grant envelope from receive_npub_proof, or the raw JSON of a kind-27235 Nostr event signed by the operator whose `u` tag is this tool's name. |
Structured output declared, but exposes no named fields.
No examples provided.
roastify_delete_design Delete a design ~151
Delete one of your stored designs.
| Name | Type | Req | Description |
|---|---|---|---|
| design_id | string | yes | The id from roastify_list_designs. |
| dpop_token | string | – | Proof that the caller holds npub. Either the grant envelope that receive_npub_proof returned, or the raw JSON of a kind-27235 Nostr event signed by npub: content "", a `u` tag holding this tool's exa… |
| npub | string | – | The patron's Nostr public key (npub1...). Tool fees are paid from this patron's balance; dpop_token proves the caller holds it. |
Structured output declared, but exposes no named fields.
No examples provided.
roastify_delete_operator_credential Delete operator credential ~266
Remove a single operator secret field. Deletes one key from the operator's encrypted credential blob without touching the others — the field-level counterpart to ``forget_credentials``, which wipes the whole row. Use it to retire a leftover after an SDK cutover (a Prefect key after Modal, or a stored but untemplated orphan like ``anthropic_api_key``) without taking the operator down for a full re-delivery. Stored-but-untemplated fields are first-class: the delete is keyed on what is vaulted, not on what the current template declares. Idempotent — already-absent fields report ``removed: false`` without rewriting the vault. RESTRICTED to the operator — requires the operator's proof (a kind-27235 event or a proof grant); patron proofs are rejected. A deletion is as destructive as a write.
| Name | Type | Req | Description |
|---|---|---|---|
| dpop_token | string | yes | Proof that the caller holds npub: the grant envelope from receive_npub_proof, or the raw JSON of a kind-27235 Nostr event signed by npub whose `u` tag is this tool's name. |
| field | string | yes | The operator credential field to remove (templated or not). |
Structured output declared, but exposes no named fields.
No examples provided.
roastify_delete_patron_credential Delete patron credential ~143
Remove a single patron credential field. Deletes one field from stored credentials without affecting other fields. Free. Proof of npub ownership is required — this is a write to the patron's sensitive credential vault.
| Name | Type | Req | Description |
|---|---|---|---|
| dpop_token | string | yes | Proof that the caller holds npub: the grant envelope from receive_npub_proof, or the raw JSON of a kind-27235 Nostr event signed by npub whose `u` tag is this tool's name. |
| field | string | yes | The credential field name to remove. |
| npub | string | yes | The patron's Nostr public key (npub1...). |
Structured output declared, but exposes no named fields.
No examples provided.
roastify_fetch_design Fetch a design ~203
Fetch one of your stored designs in full, with its images re-inlined.
| Name | Type | Req | Description |
|---|---|---|---|
| design_id | string | yes | The id from roastify_stash_design or roastify_list_designs. |
| dpop_token | string | – | Proof that the caller holds npub. Either the grant envelope that receive_npub_proof returned, or the raw JSON of a kind-27235 Nostr event signed by npub: content "", a `u` tag holding this tool's exa… |
| npub | string | – | The patron's Nostr public key (npub1...). Tool fees are paid from this patron's balance; dpop_token proves the caller holds it. |
| ref | string | – | Optional git ref (a commit sha or version tag) to fetch a specific version — from roastify_list_design_versions. Omit for the latest. |
Structured output declared, but exposes no named fields.
No examples provided.
roastify_forget_coupon Forget coupon ~163
Remove a coupon from this patron's redemption list. Cosmetic only — the coupon itself still exists at the operator, and the patron can re-redeem the same code later while the window allows. Free — requires proof of ``npub``.
| Name | Type | Req | Description |
|---|---|---|---|
| coupon_id | string | yes | The id of the redeemed coupon to remove (from list_my_coupons). |
| dpop_token | string | – | Proof that the caller holds npub: the grant envelope from receive_npub_proof, or the raw JSON of a kind-27235 Nostr event signed by npub whose `u` tag is this tool's name. |
| npub | string | yes | The patron's Nostr public key (npub1...). |
Structured output declared, but exposes no named fields.
No examples provided.
roastify_forget_credentials Forget credentials ~154
Delete vaulted credentials for a specific service and npub. For operator credentials, pass the operator's own npub. For patron credentials, pass the patron's npub. Always requires proof of npub ownership — a deletion is as destructive as a write.
| Name | Type | Req | Description |
|---|---|---|---|
| dpop_token | string | yes | Proof that the caller holds npub: the grant envelope from receive_npub_proof, or the raw JSON of a kind-27235 Nostr event signed by npub whose `u` tag is this tool's name. |
| npub | string | yes | The Nostr public key (npub1...) whose credentials to forget. |
| service | string | yes | The credential service to forget. |
Structured output declared, but exposes no named fields.
No examples provided.
roastify_generate_artwork Generate artwork ~338
Generate packaging artwork from one of your saved Design Studio designs. This personalizes a template you already authored: it rewrites that design's named text and image placeholders. It cannot author a design from scratch, and the artwork it produces is NOT attached to a product — Roastify's API has no product-create or storefront-sync surface. You get an artwork URL and carry it onward yourself. Roastify renders asynchronously, so this returns a job id straight away. Check it with roastify_artwork_status, which is free.
| Name | Type | Req | Description |
|---|---|---|---|
| client_req_id | string | – | Your own idempotency key. Reusing it makes a repeated request safe — Roastify will not generate the artwork twice. |
| dpop_token | string | – | Proof that the caller holds npub. Either the grant envelope that receive_npub_proof returned, or the raw JSON of a kind-27235 Nostr event signed by npub: content "", a `u` tag holding this tool's exa… |
| fields | array | yes | Placeholders to rewrite, each {"fieldId": "placeholder_title", "type": "text"|"image", "value": "..."}. An image value must be an https:// URL. |
| npub | string | – | The patron's Nostr public key (npub1...). Tool fees are paid from this patron's balance; dpop_token proves the caller holds it. |
| product_id | string | yes | A saved design's id, from list_my_products. |
Structured output declared, but exposes no named fields.
No examples provided.
roastify_get_blend Get a blend ~159
Get one coffee blend: roast level, decaf status, and its variants.
| Name | Type | Req | Description |
|---|---|---|---|
| blend_id | string | yes | The blend id from browse_catalog. |
| dpop_token | string | – | Proof that the caller holds npub. Either the grant envelope that receive_npub_proof returned, or the raw JSON of a kind-27235 Nostr event signed by npub: content "", a `u` tag holding this tool's exa… |
| npub | string | – | The patron's Nostr public key (npub1...). Tool fees are paid from this patron's balance; dpop_token proves the caller holds it. |
Structured output declared, but exposes no named fields.
No examples provided.
roastify_get_catalog_product Get a catalog product ~160
Get one catalog product with its variants, sizes, prices, and dieline.
| Name | Type | Req | Description |
|---|---|---|---|
| dpop_token | string | – | Proof that the caller holds npub. Either the grant envelope that receive_npub_proof returned, or the raw JSON of a kind-27235 Nostr event signed by npub: content "", a `u` tag holding this tool's exa… |
| npub | string | – | The patron's Nostr public key (npub1...). Tool fees are paid from this patron's balance; dpop_token proves the caller holds it. |
| product_id | string | yes | The catalog product id from browse_catalog. |
Structured output declared, but exposes no named fields.
No examples provided.
roastify_get_design_text Get design text ~914
List the editable text layers of a stored design — the fields you can change. Returns each text layer's id, current text, `chars` (its length), font, `align`, box geometry (`fontSize`, `width`, `height`), and `z` (paint-order index in the top-level `elements` array) — but NOT the design's images, so it stays small enough to reason over in a conversation. Each layer's current text is its own label: infer its role (product name, tagline, story, recipe, tasting notes, …) from the words it holds. The same name often appears in several layers and inside longer blurbs; change every id that should carry it. Also returns `sheet` (the overall design extent), `panels` (the box's panel columns — front/back/left/right — recovered from the dieline, each with bounds; empty for single-face products like Tubes, where placement uses `sheet` instead), and a real `face` per layer/element (which panel its x-centre sits on, not the constant "sheet"; when panels is empty, layers keep their native faceId such as "wrap"). And `elements` — the NON-text elements (images, shapes, rules), each with id, type, name, bounds, `z`, and its `fill`/`stroke` colours — so a roast scale can be audited (a filled dot has a dark `fill`, an empty one none) and set with roastify_move_elements. `fonts` lists the families loaded on the design plus any family a layer already uses — pick from it when setting `fontFamily` via move_elements. Read those before judging the design: a header with no text value beneath it is NOT necessarily a defect — the value may be a graphic in `elements` (e.g. a five-dot roast scale under a ROAST header), and it tells you where NOT to place new text. Roastify's migrated format carries no visibility flag, so a layer that exists may still not print — do not report a missing value as a production error. Geometry: each layer's `x`/`y` is its top-left corner in design units (the sheet origin is its top-left). `width`/`height` are MEASURED text bounds, not fixed frames — text does no…
| Name | Type | Req | Description |
|---|---|---|---|
| design_id | string | yes | The id from roastify_list_designs. |
| dpop_token | string | – | Proof that the caller holds npub. Either the grant envelope that receive_npub_proof returned, or the raw JSON of a kind-27235 Nostr event signed by npub: content "", a `u` tag holding this tool's exa… |
| npub | string | – | The patron's Nostr public key (npub1...). Tool fees are paid from this patron's balance; dpop_token proves the caller holds it. |
Structured output declared, but exposes no named fields.
No examples provided.
roastify_get_my_product Get my product ~240
Get one of your saved product designs in full, with all its variants. The coffee's IDENTITY (which blend) is not a named field — it is encoded in the variant SKU, e.g. `COF-WHB-12O-HGL-BOX` → `HGL` → the High Lakes blend. Decode the SKU before writing origin/roast copy: a product's title can say one thing while its SKU is really a different blend.
| Name | Type | Req | Description |
|---|---|---|---|
| dpop_token | string | – | Proof that the caller holds npub. Either the grant envelope that receive_npub_proof returned, or the raw JSON of a kind-27235 Nostr event signed by npub: content "", a `u` tag holding this tool's exa… |
| npub | string | – | The patron's Nostr public key (npub1...). Tool fees are paid from this patron's balance; dpop_token proves the caller holds it. |
| product_id | string | yes | Your product id from list_my_products. |
Structured output declared, but exposes no named fields.
No examples provided.
roastify_get_nostr_profile Nostr profile ~102
Read an npub's public Nostr profile (NIP-01 kind-0 metadata). Free, no proof — the data is already public on relays. Returns the latest metadata fields (name, display_name, about, picture, banner, nip05, website, lud16) or an empty profile if none is published.
| Name | Type | Req | Description |
|---|---|---|---|
| npub | string | – | The Nostr public key (npub1...) whose profile to read. |
Structured output declared, but exposes no named fields.
No examples provided.
roastify_get_notarization_proof Notarization proof ~70
Generate a Merkle inclusion proof that a patron's balance was included in a Bitcoin-notarized snapshot.
| Name | Type | Req | Description |
|---|---|---|---|
| notarization_id | string | yes | The notarization record ID. |
| npub | string | yes | The patron's Nostr public key (npub1...). |
Structured output declared, but exposes no named fields.
No examples provided.
roastify_get_operator_onboarding_status Operator onboarding status ~57
Report this operator's configuration readiness. Shows which operator settings are configured, which are missing, and how to deliver each missing value. For patron-level credential status, use get_patron_onboarding_status instead. Free.
Input schema present but exposes no named parameters.
Structured output declared, but exposes no named fields.
No examples provided.
roastify_get_patron_credential_fields Patron credential fields ~192
List stored patron credential field names (not values). Returns the names of fields stored for a patron, plus each field's ``delivered_at`` ISO-8601 timestamp when known (null for secrets vaulted before timestamps were recorded). Values are never exposed — use this to verify which fields are configured and how old each one is. Free. Proof of npub ownership is required: the list of configured fields is itself sensitive (reveals which integrations a patron has set up).
| Name | Type | Req | Description |
|---|---|---|---|
| dpop_token | string | yes | Proof that the caller holds npub: the grant envelope from receive_npub_proof, or the raw JSON of a kind-27235 Nostr event signed by npub whose `u` tag is this tool's name. |
| npub | string | yes | The patron's Nostr public key (npub1...). |
Structured output declared, but exposes no named fields.
No examples provided.
roastify_get_patron_onboarding_status Patron onboarding status ~169
Report a patron's credential readiness for this operator. For set-once services (eXcalibur, TheBrain), shows which patron secrets are configured and which are missing. For dynamic/OAuth2 services (Schwab), reports that no patron credentials are needed. Free. Proof of npub ownership is required because credential presence is sensitive information about the patron's setup.
| Name | Type | Req | Description |
|---|---|---|---|
| dpop_token | string | yes | Proof that the caller holds npub: the grant envelope from receive_npub_proof, or the raw JSON of a kind-27235 Nostr event signed by npub whose `u` tag is this tool's name. |
| patron_npub | string | yes | The patron's Nostr public key (npub1...). |
Structured output declared, but exposes no named fields.
No examples provided.
roastify_get_pricing_model Pricing model ~51
Get the active pricing model for this operator. Free. If no model exists, self-initializes a scaffold with all registered tools at 0 sats. No economic data from code.
Input schema present but exposes no named parameters.
Structured output declared, but exposes no named fields.
No examples provided.
roastify_list_canonical_identities Tool identities ~250
Return canonical (tool_id, mcp_name, …) for every tool the wheel exposes. The authoritative source for any client (Studio, agents, FE) that needs to know how this MCP identifies its tools. Reconcile uses this output to UUID-join against the stored pricing model — no name-based UUID derivation, no guessing. Includes both ToolIdentity-seeded tools and any UUID recorded by ``@paid_tool`` that is missing from the registry. The latter appear with ``registered: false`` (and in the top-level ``unregistered`` array) so Reconcile can flag deploy drift instead of silently reporting clean when a live tool was never seeded (#174). If the operator renames a function or rebrands a slug, the mcp_name in this output changes but tool_id stays. That's the whole point of the canonical-UUID design. Also diffs the live FastMCP wire surface against the registry. Tools exposed on the wire but absent from the registry appear in ``unregistered`` so Reconcile can flag deploy drift instead of silently under-reporting (issue #175). Free, no side effects.
Input schema present but exposes no named parameters.
Structured output declared, but exposes no named fields.
No examples provided.
roastify_list_constraint_types Constraint types ~51
List all available constraint types and their parameter schemas. Returns the type, category, description, and parameter specs for every constraint that can be used in a pricing pipeline. Free — no credits required.
Input schema present but exposes no named parameters.
Structured output declared, but exposes no named fields.
No examples provided.
roastify_list_coupons Coupons ~122
List every coupon this operator has minted (newest first). Each row carries the current ``times_redeemed`` counter — the Studio renders a progress bar from this against ``total_uses``. RESTRICTED to operator — requires proof.
| Name | Type | Req | Description |
|---|---|---|---|
| dpop_token | string | – | Proof that the caller holds the operator's npub: the grant envelope from receive_npub_proof, or the raw JSON of a kind-27235 Nostr event signed by the operator whose `u` tag is this tool's name. |
Structured output declared, but exposes no named fields.
No examples provided.
roastify_list_design_versions List design versions ~227
List a stored design's committed versions, newest first — the git history. Each version carries its `sha`, `short_sha`, `date`, commit `message`, `tag` (the version tag if one was set at Commit), and `commit_url`. Pass a version's `sha` (or `tag`) as the `ref` to roastify_fetch_design to fetch that exact version.
| Name | Type | Req | Description |
|---|---|---|---|
| design_id | string | yes | The id from roastify_list_designs. |
| dpop_token | string | – | Proof that the caller holds npub. Either the grant envelope that receive_npub_proof returned, or the raw JSON of a kind-27235 Nostr event signed by npub: content "", a `u` tag holding this tool's exa… |
| npub | string | – | The patron's Nostr public key (npub1...). Tool fees are paid from this patron's balance; dpop_token proves the caller holds it. |
Structured output declared, but exposes no named fields.
No examples provided.
roastify_list_designs List designs ~140
List your stored designs — metadata only, newest first.
| Name | Type | Req | Description |
|---|---|---|---|
| dpop_token | string | – | Proof that the caller holds npub. Either the grant envelope that receive_npub_proof returned, or the raw JSON of a kind-27235 Nostr event signed by npub: content "", a `u` tag holding this tool's exa… |
| npub | string | – | The patron's Nostr public key (npub1...). Tool fees are paid from this patron's balance; dpop_token proves the caller holds it. |
Structured output declared, but exposes no named fields.
No examples provided.
roastify_list_my_coupons My coupons ~148
List the coupons this patron has redeemed on this operator. Returns both active and exhausted redemptions with a per-row ``status`` (``active`` / ``window_closed`` / ``patron_limit`` / ``total_limit``). Free — requires proof of ``npub``.
| Name | Type | Req | Description |
|---|---|---|---|
| dpop_token | string | – | Proof that the caller holds npub: the grant envelope from receive_npub_proof, or the raw JSON of a kind-27235 Nostr event signed by npub whose `u` tag is this tool's name. |
| npub | string | yes | The patron's Nostr public key (npub1...). |
Structured output declared, but exposes no named fields.
No examples provided.
roastify_list_my_products List my products ~204
List your own saved Roastify product designs, one page at a time. Returns has_next_page and end_cursor so you can tell a page from a complete list.
| Name | Type | Req | Description |
|---|---|---|---|
| cursor | string | – | Page cursor from a previous call's end_cursor. Omit for page 1. |
| dpop_token | string | – | Proof that the caller holds npub. Either the grant envelope that receive_npub_proof returned, or the raw JSON of a kind-27235 Nostr event signed by npub: content "", a `u` tag holding this tool's exa… |
| limit | integer | – | Items per page (1-100, default 20). |
| npub | string | – | The patron's Nostr public key (npub1...). Tool fees are paid from this patron's balance; dpop_token proves the caller holds it. |
Structured output declared, but exposes no named fields.
No examples provided.
roastify_list_notarizations Notarizations ~52
List recent Bitcoin notarization records.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | Maximum records to return (default 20). |
| status | string | – | Optional filter (e.g., 'submitted', 'confirmed'). |
Structured output declared, but exposes no named fields.
No examples provided.
roastify_mint_coupon Mint coupon ~279
Create a new operator-owned discount coupon. The coupon owns its binding: ``tool_ids`` names the tools it discounts, and re-pricing a tool never touches it. A coupon bound to no tool discounts nothing, however many patrons redeem it.
| Name | Type | Req | Description |
|---|---|---|---|
| discount_percent | number | yes | Percentage off the base price (0-100). |
| dpop_token | string | – | Proof that the caller holds the operator's npub: the grant envelope from receive_npub_proof, or the raw JSON of a kind-27235 Nostr event signed by the operator whose `u` tag is this tool's name. |
| name | string | yes | The catchy code patrons type to redeem (operator-scoped uniqueness). |
| tool_ids | – | – | The tools this coupon discounts — tool ids or MCP tool names, or ``["*"]`` for every tool priced above zero. |
| total_uses | – | – | Aggregate cap across all patrons (default None = unlimited). |
| uses_per_patron | – | – | How many tool calls one patron can claim the discount on (default 1; pass null/None for unlimited within the window). |
| valid_from | string | yes | ISO-8601 datetime when the coupon becomes active. |
| valid_until | string | yes | ISO-8601 datetime when the coupon expires. |
Structured output declared, but exposes no named fields.
No examples provided.
roastify_move_elements Move design elements ~816
Move a group of elements together and/or resize elements; commit a new version. The Designer can move only one layer at a time, so a block of layered content (a spec panel, a logo lockup) drifts out of alignment when its backing shape is moved alone. This relocks that block: name the ids and shift them as one rigid object, and separately re-centre or resize individual rectangles. The store is configuration management: the edit is committed back to the SAME design_id (git tracks the diff). Apply it onto the product with the browser courier. Nothing is validated against panel bounds here (unlike add_design_element): you are re-aligning existing, deliberately-placed content, so the caller owns the coordinates. The heavy background image is never moved unless you name its id.
| Name | Type | Req | Description |
|---|---|---|---|
| commit_message | string | – | A specific description of WHAT changed and WHY — a real commit message, not a placeholder like 'save this' or 'update'. Required. |
| design_id | string | yes | The design to edit, from roastify_list_designs. |
| dpop_token | string | – | Proof that the caller holds npub. Either the grant envelope that receive_npub_proof returned, or the raw JSON of a kind-27235 Nostr event signed by npub: content "", a `u` tag holding this tool's exa… |
| edits | array | yes | A list of geometry edits, each one of: - group shift: {"ids": ["a", "b", ...], "dx": N, "dy": M} — add the same delta to every listed element's x/y (design units; +dy is down, +dx is right). Use… |
| label | string | – | Rename the design (optional). Defaults to keeping its current label. |
| npub | string | – | The patron's Nostr public key (npub1...). Tool fees are paid from this patron's balance; dpop_token proves the caller holds it. |
| version_tag | string | – | The NEXT semver version (MAJOR.MINOR.PATCH, e.g. 1.3.0, no 'v') — call roastify_list_design_versions and increment. Required; reusing one is refused. |
Structured output declared, but exposes no named fields.
No examples provided.
roastify_notarize_ledger Notarize ledger ~54
Build a Merkle tree of all patron balances and submit the root to Bitcoin via OpenTimestamps. Operator-only background task. Bitcoin confirmation takes 1-6 hours. Free — no credits required.
Input schema present but exposes no named parameters.
Structured output declared, but exposes no named fields.
No examples provided.
roastify_oracle_about About DPYC ~22
Describe the DPYC ecosystem via the Oracle. Free.
Input schema present but exposes no named parameters.
Structured output declared, but exposes no named fields.
No examples provided.
roastify_oracle_get_tax_rate DPYC tax rate ~24
Get the current DPYC certification tax rate. Free.
Input schema present but exposes no named parameters.
Structured output declared, but exposes no named fields.
No examples provided.
roastify_oracle_how_to_join How to join DPYC ~25
Get DPYC onboarding instructions from the Oracle. Free.
Input schema present but exposes no named parameters.
Structured output declared, but exposes no named fields.
No examples provided.
roastify_oracle_lookup_member Look up a DPYC member ~49
Look up a DPYC community member by npub. Free.
| Name | Type | Req | Description |
|---|---|---|---|
| npub | string | yes | The Nostr public key (npub1...) of the member to look up. |
Structured output declared, but exposes no named fields.
No examples provided.
roastify_oracle_network_advisory Network advisories ~25
Get active network advisories from the Oracle. Free.
Input schema present but exposes no named parameters.
Structured output declared, but exposes no named fields.
No examples provided.
roastify_publish_nostr_profile Publish Nostr profile ~150
Publish a CLIENT-SIGNED kind-0 profile to relays for an npub. The wheel never holds a patron nsec. The frontend signs the kind-0 metadata event with the patron's session key or a NIP-07 extension and passes the signed event (JSON) here; the wheel verifies the signature matches the npub, then relays it to public relays. The signature is the authorization — no proof token, no key custody. Free.
| Name | Type | Req | Description |
|---|---|---|---|
| npub | string | – | The patron's Nostr public key the event must be signed by. |
| signed_event | string | – | A JSON-encoded, client-signed kind-0 event. |
Structured output declared, but exposes no named fields.
No examples provided.
roastify_purchase_credits Buy credits ~157
Buy credits via Bitcoin Lightning. Creates a Lightning invoice. Pay it with any Lightning wallet, then call check_payment to confirm. Proof of npub ownership is required so credits land in the correct ledger. Free — no credits required to call.
| Name | Type | Req | Description |
|---|---|---|---|
| amount_sats | integer | – | Satoshis to purchase (default 1000). |
| dpop_token | string | yes | Proof that the caller holds npub: the grant envelope from receive_npub_proof, or the raw JSON of a kind-27235 Nostr event signed by npub whose `u` tag is this tool's name. |
| npub | string | yes | The Nostr public key (npub1...) the credits will fund. |
Structured output declared, but exposes no named fields.
No examples provided.
roastify_receive_credentials Receive credentials ~354
Pick up credentials from the Secure Courier. Completes the CREDENTIAL-DELIVERY flow (the ownership-proof counterpart is ``receive_npub_proof``). **Call this only after the user confirms they have replied.** Deterministic, one-shot retrieval: name the response you want with ``(sender_npub, service, dpop_token)`` and the tool drains ONLY the rendezvous relay that channel was pinned to. Every popped DM with the wrong session phrase is deleted and its sender is NACK'd; the first DM with the matching phrase is accepted (ACK'd) and the scan stops. If none match, the queue is drained and a ``courier_not_found`` result is returned. Do NOT poll, loop, or retry. If a credential_card (ncred1...) is provided, it is redeemed directly without any relay access (dpop_token not required for that path). On success, the payment processor client is reinitialized from the new credentials — no server restart needed.
| Name | Type | Req | Description |
|---|---|---|---|
| credential_card | string | – | Optional. An ncred1... card to redeem directly (bypasses the relay drain; dpop_token not needed). |
| dpop_token | string | – | Proof that the caller holds npub: the grant envelope from receive_npub_proof, or the raw JSON of a kind-27235 Nostr event signed by npub whose `u` tag is this tool's name. |
| sender_npub | string | – | Required. The npub that sent the credentials. |
| service | string | – | Required. The credential service name (must match the service used in request_credential_channel). |
Structured output declared, but exposes no named fields.
No examples provided.
roastify_receive_npub_proof Receive npub proof ~363
Receive npub ownership confirmation from a patron. Completes the npub-OWNERSHIP-PROOF flow (the credential-delivery counterpart is ``receive_credentials``). **Call this only after the user confirms they have replied.** Deterministic, one-shot retrieval: name the response with ``(patron_npub, dpop_token)`` — the ``dpop_token`` being the value returned by ``request_npub_proof``. The tool drains ONLY the pinned rendezvous relay that challenge was published on, stopping at the DM whose phrase matches. Mismatched DMs are deleted and NACK'd (without revealing the expected phrase). If called before the user replies, their message will never be found. Do NOT poll, loop, or retry. The signed DM itself proves npub ownership (the patron's nsec signed it). On success, returns a new ``dpop_token``: an Operator-signed **proof grant envelope** ``{"grant": …, "nonce": …}`` bound to the patron, this challenge, and the duration the patron named. The calling application MUST remember that whole string and pass it as ``dpop_token`` on every subsequent paid tool call. The grant is self-verifying; nothing about it is stored here. Free.
| Name | Type | Req | Description |
|---|---|---|---|
| dpop_token | string | – | Proof that the caller holds npub: the grant envelope from receive_npub_proof, or the raw JSON of a kind-27235 Nostr event signed by npub whose `u` tag is this tool's name. |
| patron_npub | string | – | Required. The patron's npub to receive proof from. |
Structured output declared, but exposes no named fields.
No examples provided.
How do I install the io.github.lonniev/roastify-mcp server?
io.github.lonniev/roastify-mcp is a hosted endpoint at https://roastify-mcp.fastmcp.app/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · roastify-mcp.fastmcp.app
claude mcp add --transport http lonniev-roastify-mcp 'https://roastify-mcp.fastmcp.app/mcp'
What is the io.github.lonniev/roastify-mcp server?
io.github.lonniev/roastify-mcp is listed in the public MCP registry as io.github.lonniev/roastify-mcp. Roastify Developer API MCP Service, Tollbooth DPYC monetization. This page covers its hosted endpoint (https://roastify-mcp.fastmcp.app/mcp).
Is the io.github.lonniev/roastify-mcp server safe to use?
io.github.lonniev/roastify-mcp scores 36 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the io.github.lonniev/roastify-mcp server expose?
io.github.lonniev/roastify-mcp exposes 70 tools: roastify_check_balance, roastify_purchase_credits, roastify_check_payment, roastify_restore_credits, roastify_account_statement, and 65 more. Their descriptions and schemas cost roughly 14,906 tokens of context every time the server is loaded.
Does the io.github.lonniev/roastify-mcp server require authentication?
Yes. io.github.lonniev/roastify-mcp asked us for credentials when we connected, so you will need to authorise it in your MCP client before it can do anything.
Is the io.github.lonniev/roastify-mcp server still maintained?
io.github.lonniev/roastify-mcp is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.