Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

io.github.lonniev/tollbooth-authority-newengland

REMOTE · TOLLBOOTH-AUTHORITY-NEWENGLAND.FASTMCP.APP

Tollbooth Authority New England — sub-regional certifier under North America

0 this week 36 Trust /100

Last scanned (48 minutes ago)

Scores higher than 19% of remote servers

Reachable. Last reached 5 Nov 2026.

Category Finance and Payments

Recent critical change

Authorization (15 Oct 2026). See the changelog before you install this server.

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →

Endpoint Security89
Transport & Reachability0
Schema Quality & AI Usability0
  • Schema blocked by authentication: the endpoint requires auth we don't have to read it. See how to fix → Unverified
Stability & Change Management0
  • Stability not yet verified: not enough scan history yet (needs a 30-day window).Unverified
Tool Coverage0
  • Tool coverage blocked by authentication: the endpoint requires auth we don't have to read its tools.Unverified
Tool Safety0
  • Tool safety blocked by authentication: the endpoint requires auth we don't have to read its tools.Unverified
Capabilities0
  • Capabilities blocked by authentication: the endpoint requires auth we don't have to read them. See how to fix → Unverified

Unverified: 6 categories

Categories scored 0 because we could not verify them: authentication we do not have, an unreachable endpoint, or not enough scan history. We only credit what we can confirm. Claim this server and supply a read-only token to verify it and lift the score.

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 18 Oct 26 −41
    • Endpoint reachability: reachable → behind authorisation ▼ security
    • Stability: pass → unverified ▼ security
    • Tool safety: pass → unverified ▼ security
    • Transport: pass → unverified ▼ security
    • Authorization: fail → pass ▲ security
    • First check of Authorization: partial security
    • Capabilities: pass → unverified ▼ functional
    • Tool coverage: 100 → unverified ▼ functional
    • First check of Schema quality: unverified functional
  • 15 Oct 26 +2
    • Authorization: unverified → fail ▼ critical
    • Tool “authority_delete_operator_credential” rewrote its description, which is the text the model reads security
    • Tool “authority_register_operator” rewrote its description, which is the text the model reads security
    • Tool “authority_update_operator_credential” rewrote its description, which is the text the model reads security
    • Tool “authority_confirm_authority_claim” is now declared destructive security
    • Tool “authority_delete_coupon” is now declared destructive security
    • Tool “authority_delete_operator_credential” is now declared destructive security
    • Tool “authority_delete_patron_credential” is now declared destructive security
    • Tool “authority_deregister_operator” is now declared destructive security
    • Tool “authority_forget_coupon” is now declared destructive security
    • Tool “authority_forget_credentials” is now declared destructive security
    • Tool “authority_publish_nostr_profile” is now declared destructive security
    • Tool “authority_receive_credentials” is now declared destructive security
    • Tool “authority_receive_npub_proof” is now declared destructive security
    • Tool “authority_reset_pricing_model” is now declared destructive security
    • Tool “authority_set_pricing_model” is now declared destructive security
    • Schema quality: 156 → 172 ▼ functional
    • Tool coverage: 73% → 100% ▲ functional
    • Destructive annotations: All 8 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation. functional
    • Server version: 3.4.7 → 0.5.9 functional
    • “authority_account_statement” reworded the description of “dpop_token” cosmetic
    • “authority_account_statement_infographic” reworded the description of “dpop_token” cosmetic
    • “authority_adoption_status” reworded the description of “authority_npub” cosmetic
    • “authority_adoption_status” reworded the description of “dpop_token” cosmetic
    • “authority_certify_credits” reworded the description of “dpop_token” cosmetic
    • “authority_check_balance” reworded the description of “dpop_token” cosmetic
    • “authority_check_dpyc_membership” reworded the description of “npub” cosmetic
    • “authority_check_payment” reworded the description of “dpop_token” cosmetic
    • “authority_check_price” reworded the description of “dpop_token” cosmetic
    • “authority_check_price” reworded the description of “npub” cosmetic
    • “authority_check_proof_status” reworded the description of “dpop_token” cosmetic
    • “authority_delete_coupon” reworded the description of “coupon_id” cosmetic
    • “authority_delete_coupon” reworded the description of “dpop_token” cosmetic
    • “authority_delete_operator_credential” reworded the description of “dpop_token” cosmetic
    • “authority_delete_patron_credential” reworded the description of “dpop_token” cosmetic
    • “authority_deregister_operator” reworded the description of “dpop_token” cosmetic
    • “authority_forget_coupon” reworded the description of “coupon_id” cosmetic
    • “authority_forget_coupon” reworded the description of “dpop_token” cosmetic
    • “authority_forget_coupon” reworded the description of “npub” cosmetic
    • “authority_forget_credentials” reworded the description of “dpop_token” cosmetic
    • “authority_get_nostr_profile” reworded the description of “npub” cosmetic
    • “authority_get_operator_config” reworded the description of “dpop_token” cosmetic
    • “authority_get_patron_credential_fields” reworded the description of “dpop_token” cosmetic
    • “authority_get_patron_onboarding_status” reworded the description of “dpop_token” cosmetic
    • “authority_list_coupons” reworded the description of “dpop_token” cosmetic
    • “authority_list_my_coupons” reworded the description of “dpop_token” cosmetic
    • “authority_list_my_coupons” reworded the description of “npub” cosmetic
    • “authority_mint_coupon” reworded the description of “dpop_token” cosmetic
    • “authority_operator_status” reworded the description of “dpop_token” cosmetic
    • “authority_oracle_lookup_member” reworded the description of “npub” cosmetic
    • “authority_purchase_credits” reworded the description of “dpop_token” cosmetic
    • “authority_receive_credentials” reworded the description of “dpop_token” cosmetic
    • “authority_receive_npub_proof” reworded the description of “dpop_token” cosmetic
    • “authority_redeem_coupon” reworded the description of “code” cosmetic
    • “authority_redeem_coupon” reworded the description of “dpop_token” cosmetic
    • “authority_redeem_coupon” reworded the description of “npub” cosmetic
    • “authority_register_operator” reworded the description of “dpop_token” cosmetic
    • “authority_report_issue” reworded the description of “dpop_token” cosmetic
    • “authority_request_adoption” reworded the description of “dpop_token” cosmetic
    • “authority_reset_pricing_model” reworded the description of “dpop_token” cosmetic
    • “authority_restore_credits” reworded the description of “dpop_token” cosmetic
    • “authority_restore_neon_schema” reworded the description of “dpop_token” cosmetic
    • “authority_set_pricing_model” reworded the description of “dpop_token” cosmetic
    • “authority_set_pricing_model” reworded the description of “model_json” cosmetic
    • “authority_update_coupon” reworded the description of “clear_total_uses” cosmetic
    • “authority_update_coupon” reworded the description of “clear_uses_per_patron” cosmetic
    • “authority_update_coupon” reworded the description of “coupon_id” cosmetic
    • “authority_update_coupon” reworded the description of “discount_percent” cosmetic
    • “authority_update_coupon” reworded the description of “dpop_token” cosmetic
    • “authority_update_coupon” reworded the description of “name” cosmetic
    • “authority_update_coupon” reworded the description of “tool_ids” cosmetic
    • “authority_update_coupon” reworded the description of “total_uses” cosmetic
    • “authority_update_coupon” reworded the description of “uses_per_patron” cosmetic
    • “authority_update_coupon” reworded the description of “valid_from” cosmetic
    • “authority_update_coupon” reworded the description of “valid_until” cosmetic
    • “authority_update_operator” reworded the description of “dpop_token” cosmetic
    • “authority_update_operator_credential” reworded the description of “dpop_token” cosmetic
    • “authority_update_patron_credential” reworded the description of “dpop_token” cosmetic
    • Tool “authority_account_statement” changed its title: Account statement cosmetic
    • Tool “authority_account_statement_infographic” changed its title: Account statement infographic cosmetic
    • Tool “authority_adoption_status” changed its title: Adoption status cosmetic
    • Tool “authority_approve_adoption” changed its title: Approve adoption cosmetic
    • Tool “authority_audit_bootstrap_configs” changed its title: Audit bootstrap configs cosmetic
    • Tool “authority_certify_credits” changed its title: Certify credits cosmetic
    • Tool “authority_check_authority_approval” changed its title: Authority approval cosmetic
    • Tool “authority_check_authority_balance” changed its title: Authority balance cosmetic
    • Tool “authority_check_balance” changed its title: Check balance cosmetic
    • Tool “authority_check_dpyc_membership” changed its title: DPYC membership cosmetic
    • Tool “authority_check_payment” changed its title: Check payment cosmetic
    • Tool “authority_check_price” changed its title: Check price cosmetic
    • Tool “authority_check_proof_status” changed its title: Check proof status cosmetic
    • Tool “authority_confirm_authority_claim” changed its title: Confirm Authority claim cosmetic
    • Tool “authority_delete_coupon” changed its title: Delete coupon cosmetic
    • Tool “authority_delete_operator_credential” changed its title: Delete operator credential cosmetic
    • Tool “authority_delete_patron_credential” changed its title: Delete patron credential cosmetic
    • Tool “authority_deregister_operator” changed its title: Deregister operator cosmetic
    • Tool “authority_forget_coupon” changed its title: Forget coupon cosmetic
    • Tool “authority_forget_credentials” changed its title: Forget credentials cosmetic
    • Tool “authority_get_adoption_status” changed its title: Adoption request status cosmetic
    • Tool “authority_get_nostr_profile” changed its title: Nostr profile cosmetic
    • Tool “authority_get_notarization_proof” changed its title: Notarization proof cosmetic
    • Tool “authority_get_operator_config” changed its title: Operator config cosmetic
    • Tool “authority_get_operator_onboarding_status” changed its title: Operator onboarding status cosmetic
    • Tool “authority_get_patron_credential_fields” changed its title: Patron credential fields cosmetic
    • Tool “authority_get_patron_onboarding_status” changed its title: Patron onboarding status cosmetic
    • Tool “authority_get_pricing_model” changed its title: Pricing model cosmetic
    • Tool “authority_list_adoption_requests” changed its title: Adoption requests cosmetic
    • Tool “authority_list_canonical_identities” changed its title: Tool identities cosmetic
    • Tool “authority_list_constraint_types” changed its title: Constraint types cosmetic
    • Tool “authority_list_coupons” changed its title: Coupons cosmetic
    • Tool “authority_list_my_coupons” changed its title: My coupons cosmetic
    • Tool “authority_list_neon_alerts” changed its title: Database quota alerts cosmetic
    • Tool “authority_list_notarizations” changed its title: Notarizations cosmetic
    • Tool “authority_mint_coupon” changed its title: Mint coupon cosmetic
    • Tool “authority_network_persistence_health” changed its title: Network persistence health cosmetic
    • Tool “authority_notarize_ledger” changed its title: Notarize ledger cosmetic
    • Tool “authority_operator_status” changed its title: Operator status cosmetic
    • Tool “authority_oracle_about” changed its title: About DPYC cosmetic
    • Tool “authority_oracle_get_tax_rate” changed its title: DPYC tax rate cosmetic
    • Tool “authority_oracle_how_to_join” changed its title: How to join DPYC cosmetic
    • Tool “authority_oracle_lookup_member” changed its title: Look up a DPYC member cosmetic
    • Tool “authority_oracle_network_advisory” changed its title: Network advisories cosmetic
    • Tool “authority_publish_nostr_profile” changed its title: Publish Nostr profile cosmetic
    • Tool “authority_purchase_credits” changed its title: Buy credits cosmetic
    • Tool “authority_receive_adoption_request” changed its title: Receive adoption request cosmetic
    • Tool “authority_receive_credentials” changed its title: Receive credentials cosmetic
    • Tool “authority_receive_neon_402_alert” changed its title: Receive database quota alert cosmetic
    • Tool “authority_receive_npub_proof” changed its title: Receive npub proof cosmetic
    • Tool “authority_redeem_coupon” changed its title: Redeem coupon cosmetic
    • Tool “authority_register_authority_npub” changed its title: Register Authority npub cosmetic
    • Tool “authority_register_operator” changed its title: Register operator cosmetic
    • Tool “authority_reject_adoption” changed its title: Reject adoption cosmetic
    • Tool “authority_repair_operator_schema” changed its title: Repair operator schema cosmetic
    • Tool “authority_report_issue” changed its title: Report an issue cosmetic
    • Tool “authority_request_adoption” changed its title: Request adoption cosmetic
    • Tool “authority_request_credential_channel” changed its title: Open credential channel cosmetic
    • Tool “authority_request_echo” changed its title: Request echo cosmetic
    • Tool “authority_request_npub_proof” changed its title: Request npub proof cosmetic
    • Tool “authority_reset_pricing_model” changed its title: Reset pricing model cosmetic
    • Tool “authority_restore_credits” changed its title: Restore credits cosmetic
    • Tool “authority_restore_neon_schema” changed its title: Restore database schema cosmetic
    • Tool “authority_service_status” changed its title: Service status cosmetic
    • Tool “authority_session_status” changed its title: Session status cosmetic
    • Tool “authority_set_pricing_model” changed its title: Set pricing model cosmetic
    • Tool “authority_update_coupon” changed its title: Update coupon cosmetic
    • Tool “authority_update_operator” changed its title: Update operator cosmetic
    • Tool “authority_update_operator_credential” changed its title: Update operator credential cosmetic
    • Tool “authority_update_patron_credential” changed its title: Update patron credential cosmetic
  • 13 Oct 26 0
    • New tool “authority_request_echo” functional
  • 30 Sept 26 0
    • Tool “authority_check_proof_status” rewrote its description, which is the text the model reads security
    • Tool “authority_receive_npub_proof” rewrote its description, which is the text the model reads security
    • Tool “authority_request_npub_proof” rewrote its description, which is the text the model reads security
    • “authority_check_proof_status” reworded the description of “dpop_token” cosmetic
  • 29 Sept 26 0
    • Tool “authority_restore_neon_schema” rewrote its description, which is the text the model reads security
    • New tool “authority_audit_bootstrap_configs” functional
  • 28 Sept 26 0
    • We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
  • 25 Sept 26 0
    • We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
  • 31 Aug 26 0
    • Server version: 3.3.1 → 3.4.7 functional
Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 5 Nov 2026 · Probed https://tollbooth-authority-newengland.fastmcp.app/mcp

TLS valid

Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .

Subject Issuer Valid from Valid until Key Signature Serial
CN=*.fastmcp.app CN=Amazon RSA 2048 M04,O=Amazon,C=US 17 Jun 2026 31 Dec 2026 RSA 2048 SHA256-RSA a1583bafd89c7b58780ef1a0a0d2ad7
SANs: *.fastmcp.app
CN=Amazon RSA 2048 M04,O=Amazon,C=US (CA) CN=Amazon Root CA 1,O=Amazon,C=US 23 Aug 2022 23 Aug 2030 RSA 2048 SHA256-RSA 773124f2a952e3ed18a58bdb85d1bc0ce5f27
CN=Amazon Root CA 1,O=Amazon,C=US (CA) CN=Starfield Services Root Certificate Authority - G2,O=Starfield Technologies\, Inc.,L=Scottsdale,ST=Arizona,C=US 25 May 2015 31 Dec 2037 RSA 2048 SHA256-RSA 67f944a2a27cdf3fac2ae2b01f908eeb9c4c6

Background: What to check on a remote MCP endpoint →

DNSSEC insecure

Validation of tollbooth-authority-newengland.fastmcp.app. — Not signed

Zone DS Keys Algorithms Outcome
. trust_anchor 20326, 38696 8, 8 Verified
app. present 23684 8 Verified
fastmcp.app. absent Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation
Authentication Enforced and verified

The endpoint asked for a token and published valid RFC 9728 metadata describing how to get one.

Result Enforced and verified
Enforced On connection
HTTP status 401

WWW-Authenticate challenge Bearer resource_metadata="https://tollbooth-authority-newengland.fastmcp.app/.well-known/oauth-protected-resource/mcp"

Bearer resource_metadata="https://tollbooth-authority-newengland.fastmcp.app/.well-known/oauth-protected-resource/mcp"
Header Value
www-authenticate Bearer resource_metadata="https://tollbooth-authority-newengland.fastmcp.app/.well-known/oauth-protected-resource/mcp"

Protected resource metadata

Document https://tollbooth-authority-newengland.fastmcp.app/.well-known/oauth-protected-resource/mcp
Retrieved Yes
Resource https://tollbooth-authority-newengland.fastmcp.app/mcp
Authorisation server https://tollbooth-authority-newengland.fastmcp.app/

Background: How OAuth 2.1 works in the 2026 MCP spec →

Transports 2 probes
Transport URL Outcome Status Location
streamable-http https://tollbooth-authority-newengland.fastmcp.app/mcp Auth required 401
http (plaintext) http://tollbooth-authority-newengland.fastmcp.app/mcp HTTPS enforced 301 https://tollbooth-authority-newengland.fastmcp.app/mcp
MCP tools · 70 exposed · ~11,233 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
authority_account_statement ~180

Generate a patron's account statement at this operator. Returns the patron's purchase history, active credit tranches, per-tool usage breakdown, and recent daily usage logs. This is the patron's spending account — not the operator's Authority tax balance. Free — no credits consumed. Proof of npub ownership is required to prevent statement-scraping of arbitrary patrons.

NameTypeReqDescription
daysinteger–Number of days of daily usage history to include (default 30).
dpop_tokenstringyesProof that the caller holds npub: the grant envelope from receive_npub_proof, or the raw JSON of a kind-27235 Nostr event signed by npub whose `u` tag is this tool's name.
npubstringyesThe patron's Nostr public key (npub1...).

Structured output declared, but exposes no named fields.

No examples provided.

authority_account_statement_infographic ~180

Generate a visual SVG infographic of your account statement. Returns the same data as account_statement, rendered as a dark-themed SVG graphic with balance hero, metrics cards, health gauge, tranche table, and tool usage breakdown. Costs 1 api_sat per call. Proof is verified by ``debit_or_deny`` before any cost is incurred.

NameTypeReqDescription
daysinteger–Number of days of daily usage history to include (default 30).
dpop_tokenstringyesProof that the caller holds npub: the grant envelope from receive_npub_proof, or the raw JSON of a kind-27235 Nostr event signed by npub whose `u` tag is this tool's name.
npubstringyesThe Nostr public key (npub1...) whose statement to render.

Structured output declared, but exposes no named fields.

No examples provided.

authority_adoption_status ~131

Check this operator's adoption-request status at a chosen Authority. Free. Polls the Authority MCP-to-MCP for the status of this operator's request (pending / approved / rejected / provisioned).

NameTypeReqDescription
authority_npubstringyesThe npub of the Authority the request was sent to.
dpop_tokenstring–Proof that the caller holds the operator's npub: the grant envelope from receive_npub_proof, or the raw JSON of a kind-27235 Nostr event signed by the operator whose `u` tag is this tool's name.

Structured output declared, but exposes no named fields.

No examples provided.

authority_approve_adoption ~98

Approve a pending request and provision the operator. The deferred-courtship counterpart to register_operator: same ``authority_proof`` consent, same provisioning effect (``_provision_operator``) — just supplied later, after review.

NameTypeReqDescription
authority_proofstring–Proof signed by the Authority's OWN npub (owner consent).
operator_npubstring–The operator npub to approve and provision.

Structured output declared, but exposes no named fields.

No examples provided.

authority_audit_bootstrap_configs ~101

Audit every operator's bootstrap config on the relays, and republish what needs it. Republishes a config when fewer than three relays hold it, or when it was last sent more than six days ago; then measures again. A GitHub Action runs this weekly. Free and unauthenticated: it reveals only relay counts anyone can take, and re-sending the Authority's own config is idempotent.

Input schema present but exposes no named parameters.

Structured output declared, but exposes no named fields.

No examples provided.

authority_certify_credits ~194

Certify a purchase order: return a Schnorr-signed Nostr event certificate. The paid_tool decorator handles the ad valorem fee debit and stores the cost in runtime._last_debit_cost. No recomputation needed. Called by operator MCP servers (not end users) when a patron purchases credits.

NameTypeReqDescription
amount_satsinteger–The total purchase amount in satoshis. Must be positive.
dpop_tokenstring–Proof that the caller holds npub. Either the grant envelope that receive_npub_proof returned, or the raw JSON of a kind-27235 Nostr event signed by npub: content "", a `u` tag holding this tool's exa…
npubstring–The operator's DPYC npub (from register_operator response).

Structured output declared, but exposes no named fields.

No examples provided.

authority_check_authority_approval ~49

Step 3/3 of Authority onboarding — check parent approval, activate Authority.

NameTypeReqDescription
candidate_npubstringyesThe Nostr npub of the candidate awaiting parent Authority approval.

Structured output declared, but exposes no named fields.

No examples provided.

authority_check_authority_balance ~72

Check this operator's tax balance at the Authority. Returns the sats available for certifying patron credit purchases. When this balance reaches zero, patron top-ups cannot be certified and the operator must call purchase_credits on the Authority. This is the operator's own funding — not a patron balance. Free.

Input schema present but exposes no named parameters.

Structured output declared, but exposes no named fields.

No examples provided.

authority_check_balance ~166

Check a patron's credit balance at this operator. This is the patron's spending balance — credits purchased via Lightning for tool calls at this operator. For the operator's own balance at the Authority (needed to certify patron purchases), use authority_check_balance instead. Free — no credits required. Proof of npub ownership is required to prevent anyone-with-the-registry from enumerating balances.

NameTypeReqDescription
dpop_tokenstringyesProof that the caller holds npub: the grant envelope from receive_npub_proof, or the raw JSON of a kind-27235 Nostr event signed by npub whose `u` tag is this tool's name.
npubstringyesThe Nostr public key (npub1...) whose balance to check.

Structured output declared, but exposes no named fields.

No examples provided.

authority_check_dpyc_membership ~46

Look up an npub in the DPYC community registry.

NameTypeReqDescription
npubstringyesThe Nostr public key (npub1...) to look up.

Structured output declared, but exposes no named fields.

No examples provided.

authority_check_payment ~152

Check the payment status of a Lightning invoice. Call after paying the invoice from purchase_credits. Free — no credits required. Proof of npub ownership is required to prevent credit-grant front-running by an observer of the invoice ID.

NameTypeReqDescription
dpop_tokenstringyesProof that the caller holds npub: the grant envelope from receive_npub_proof, or the raw JSON of a kind-27235 Nostr event signed by npub whose `u` tag is this tool's name.
invoice_idstringyesThe invoice ID returned by purchase_credits.
npubstringyesThe Nostr public key (npub1...) that purchased the invoice.

Structured output declared, but exposes no named fields.

No examples provided.

authority_check_price ~246

Preview the effective cost of a tool call. Shows the base cost and any constraint effects (discounts, free trials, surge pricing). Free — no credits required.

NameTypeReqDescription
dpop_tokenstring–Proof that the caller holds npub: the grant envelope from receive_npub_proof, or the raw JSON of a kind-27235 Nostr event signed by npub whose `u` tag is this tool's name.
npubstring–Optional patron npub; with it, the preview includes that patron's coupons and constraint effects.
tool_idstringyesEither the tool's UUID (from the pricing model) or a bare capability string (e.g. ``"deal_scenario"``). FE callers usually have the capability name; this resolves both so the FE doesn't need to deriv…
tool_kwargsstring–Optional JSON object with tool call parameters for ad valorem / categorical-multiplier pricing preview (e.g. '{"amount_sats": 5000}' or '{"difficulty": "sovereign", "mode": "live"}').

Structured output declared, but exposes no named fields.

No examples provided.

authority_check_proof_status ~171

Check whether a proof grant is still valid. Mirrors ``check_oauth_status`` for the npub-proof flow: a calling agent can ask "will my next paid call accept this dpop_token?" before burning credits on a guaranteed failure. Expiry is read from the grant itself; the only store consulted is the patron's revocation watermark. Free, no side effects — touches no relay.

NameTypeReqDescription
dpop_tokenstring–Proof that the caller holds npub: the grant envelope from receive_npub_proof, or the raw JSON of a kind-27235 Nostr event signed by npub whose `u` tag is this tool's name.
patron_npubstring–Required. The patron's npub (npub1...).

Structured output declared, but exposes no named fields.

No examples provided.

authority_confirm_authority_claim ~107

Step 2/3 of Authority onboarding — verify candidate DM, escalate to parent Authority. The parent Authority is resolved from THIS Authority's own entry in dpyc-community: whatever its ``upstream_authority_npub`` names. For Lonnie-Authority and NorthAmerica that's Prime; for NewEngland it's NorthAmerica; chain depth is transparent.

NameTypeReqDescription
candidate_npubstringyesThe Nostr npub of the candidate who replied to the DM challenge.

Structured output declared, but exposes no named fields.

No examples provided.

authority_delete_coupon ~145

Delete a coupon. Cascades to all patron redemptions. Any chain step referencing the deleted coupon_id becomes a no-op (the constraint returns neutral on unknown ids) — the Studio surfaces orphan references as warnings. RESTRICTED to operator — requires proof.

NameTypeReqDescription
coupon_idstringyesThe id of the coupon to delete (from list_coupons).
dpop_tokenstring–Proof that the caller holds the operator's npub: the grant envelope from receive_npub_proof, or the raw JSON of a kind-27235 Nostr event signed by the operator whose `u` tag is this tool's name.

Structured output declared, but exposes no named fields.

No examples provided.

authority_delete_operator_credential ~265

Remove a single operator secret field. Deletes one key from the operator's encrypted credential blob without touching the others — the field-level counterpart to ``forget_credentials``, which wipes the whole row. Use it to retire a leftover after an SDK cutover (a Prefect key after Modal, or a stored but untemplated orphan like ``anthropic_api_key``) without taking the operator down for a full re-delivery. Stored-but-untemplated fields are first-class: the delete is keyed on what is vaulted, not on what the current template declares. Idempotent — already-absent fields report ``removed: false`` without rewriting the vault. RESTRICTED to the operator — requires the operator's proof (a kind-27235 event or a proof grant); patron proofs are rejected. A deletion is as destructive as a write.

NameTypeReqDescription
dpop_tokenstringyesProof that the caller holds npub: the grant envelope from receive_npub_proof, or the raw JSON of a kind-27235 Nostr event signed by npub whose `u` tag is this tool's name.
fieldstringyesThe operator credential field to remove (templated or not).

Structured output declared, but exposes no named fields.

No examples provided.

authority_delete_patron_credential ~142

Remove a single patron credential field. Deletes one field from stored credentials without affecting other fields. Free. Proof of npub ownership is required — this is a write to the patron's sensitive credential vault.

NameTypeReqDescription
dpop_tokenstringyesProof that the caller holds npub: the grant envelope from receive_npub_proof, or the raw JSON of a kind-27235 Nostr event signed by npub whose `u` tag is this tool's name.
fieldstringyesThe credential field name to remove.
npubstringyesThe patron's Nostr public key (npub1...).

Structured output declared, but exposes no named fields.

No examples provided.

authority_deregister_operator ~236

Remove an Operator from the DPYC community registry. Requires the same two proofs as ``register_operator``: - ``proof`` proves the caller controls the Operator's ``npub``. - ``authority_proof`` proves the Authority's human admin consents to the removal. Without the Authority proof, anyone who knew an Operator's public npub and held its nsec could remove themselves from this Authority's roster without the Authority noticing.

NameTypeReqDescription
authority_proofstring–Identity proof signed by the Authority's OWN npub — the Authority's consent to remove this Operator from the community registry under its signature.
dpop_tokenstring–Proof that the caller holds npub. Either the grant envelope that receive_npub_proof returned, or the raw JSON of a kind-27235 Nostr event signed by npub: content "", a `u` tag holding this tool's exa…
npubstring–Nostr npub of the Operator to deregister.

Structured output declared, but exposes no named fields.

No examples provided.

authority_forget_coupon ~162

Remove a coupon from this patron's redemption list. Cosmetic only — the coupon itself still exists at the operator, and the patron can re-redeem the same code later while the window allows. Free — requires proof of ``npub``.

NameTypeReqDescription
coupon_idstringyesThe id of the redeemed coupon to remove (from list_my_coupons).
dpop_tokenstring–Proof that the caller holds npub: the grant envelope from receive_npub_proof, or the raw JSON of a kind-27235 Nostr event signed by npub whose `u` tag is this tool's name.
npubstringyesThe patron's Nostr public key (npub1...).

Structured output declared, but exposes no named fields.

No examples provided.

authority_forget_credentials ~153

Delete vaulted credentials for a specific service and npub. For operator credentials, pass the operator's own npub. For patron credentials, pass the patron's npub. Always requires proof of npub ownership — a deletion is as destructive as a write.

NameTypeReqDescription
dpop_tokenstringyesProof that the caller holds npub: the grant envelope from receive_npub_proof, or the raw JSON of a kind-27235 Nostr event signed by npub whose `u` tag is this tool's name.
npubstringyesThe Nostr public key (npub1...) whose credentials to forget.
servicestringyesThe credential service to forget.

Structured output declared, but exposes no named fields.

No examples provided.

authority_get_adoption_status ~81

Read an operator's adoption-request status (free, no proof). Status (pending/approved/rejected/provisioned) isn't sensitive — it's the operator's own request — so the operator can poll it openly via its ``adoption_status`` tool.

NameTypeReqDescription
operator_npubstring–The operator npub whose request status to read.

Structured output declared, but exposes no named fields.

No examples provided.

authority_get_nostr_profile ~101

Read an npub's public Nostr profile (NIP-01 kind-0 metadata). Free, no proof — the data is already public on relays. Returns the latest metadata fields (name, display_name, about, picture, banner, nip05, website, lud16) or an empty profile if none is published.

NameTypeReqDescription
npubstring–The Nostr public key (npub1...) whose profile to read.

Structured output declared, but exposes no named fields.

No examples provided.

authority_get_notarization_proof ~69

Generate a Merkle inclusion proof that a patron's balance was included in a Bitcoin-notarized snapshot.

NameTypeReqDescription
notarization_idstringyesThe notarization record ID.
npubstringyesThe patron's Nostr public key (npub1...).

Structured output declared, but exposes no named fields.

No examples provided.

authority_get_operator_config ~132

Retrieve operator bootstrap configuration (Neon URL, schema). Gated by Schnorr signature proving ownership of the requested npub.

NameTypeReqDescription
dpop_tokenstring–Proof that the caller holds npub. Either the grant envelope that receive_npub_proof returned, or the raw JSON of a kind-27235 Nostr event signed by npub: content "", a `u` tag holding this tool's exa…
npubstring–Your Nostr npub (bech32).

Structured output declared, but exposes no named fields.

No examples provided.

authority_get_operator_onboarding_status ~56

Report this operator's configuration readiness. Shows which operator settings are configured, which are missing, and how to deliver each missing value. For patron-level credential status, use get_patron_onboarding_status instead. Free.

Input schema present but exposes no named parameters.

Structured output declared, but exposes no named fields.

No examples provided.

authority_get_patron_credential_fields ~191

List stored patron credential field names (not values). Returns the names of fields stored for a patron, plus each field's ``delivered_at`` ISO-8601 timestamp when known (null for secrets vaulted before timestamps were recorded). Values are never exposed — use this to verify which fields are configured and how old each one is. Free. Proof of npub ownership is required: the list of configured fields is itself sensitive (reveals which integrations a patron has set up).

NameTypeReqDescription
dpop_tokenstringyesProof that the caller holds npub: the grant envelope from receive_npub_proof, or the raw JSON of a kind-27235 Nostr event signed by npub whose `u` tag is this tool's name.
npubstringyesThe patron's Nostr public key (npub1...).

Structured output declared, but exposes no named fields.

No examples provided.

authority_get_patron_onboarding_status ~168

Report a patron's credential readiness for this operator. For set-once services (eXcalibur, TheBrain), shows which patron secrets are configured and which are missing. For dynamic/OAuth2 services (Schwab), reports that no patron credentials are needed. Free. Proof of npub ownership is required because credential presence is sensitive information about the patron's setup.

NameTypeReqDescription
dpop_tokenstringyesProof that the caller holds npub: the grant envelope from receive_npub_proof, or the raw JSON of a kind-27235 Nostr event signed by npub whose `u` tag is this tool's name.
patron_npubstringyesThe patron's Nostr public key (npub1...).

Structured output declared, but exposes no named fields.

No examples provided.

authority_get_pricing_model ~50

Get the active pricing model for this operator. Free. If no model exists, self-initializes a scaffold with all registered tools at 0 sats. No economic data from code.

Input schema present but exposes no named parameters.

Structured output declared, but exposes no named fields.

No examples provided.

authority_list_adoption_requests ~67

Owner queue: list pending operator-adoption requests. Restricted to the Authority owner (consent proof). This is the review-on-your-own-time surface the Pricing Studio renders.

NameTypeReqDescription
authority_proofstring–Proof signed by the Authority's OWN npub (owner consent).

Structured output declared, but exposes no named fields.

No examples provided.

authority_list_canonical_identities ~249

Return canonical (tool_id, mcp_name, …) for every tool the wheel exposes. The authoritative source for any client (Studio, agents, FE) that needs to know how this MCP identifies its tools. Reconcile uses this output to UUID-join against the stored pricing model — no name-based UUID derivation, no guessing. Includes both ToolIdentity-seeded tools and any UUID recorded by ``@paid_tool`` that is missing from the registry. The latter appear with ``registered: false`` (and in the top-level ``unregistered`` array) so Reconcile can flag deploy drift instead of silently reporting clean when a live tool was never seeded (#174). If the operator renames a function or rebrands a slug, the mcp_name in this output changes but tool_id stays. That's the whole point of the canonical-UUID design. Also diffs the live FastMCP wire surface against the registry. Tools exposed on the wire but absent from the registry appear in ``unregistered`` so Reconcile can flag deploy drift instead of silently under-reporting (issue #175). Free, no side effects.

Input schema present but exposes no named parameters.

Structured output declared, but exposes no named fields.

No examples provided.

authority_list_constraint_types ~50

List all available constraint types and their parameter schemas. Returns the type, category, description, and parameter specs for every constraint that can be used in a pricing pipeline. Free — no credits required.

Input schema present but exposes no named parameters.

Structured output declared, but exposes no named fields.

No examples provided.

authority_list_coupons ~121

List every coupon this operator has minted (newest first). Each row carries the current ``times_redeemed`` counter — the Studio renders a progress bar from this against ``total_uses``. RESTRICTED to operator — requires proof.

NameTypeReqDescription
dpop_tokenstring–Proof that the caller holds the operator's npub: the grant envelope from receive_npub_proof, or the raw JSON of a kind-27235 Nostr event signed by the operator whose `u` tag is this tool's name.

Structured output declared, but exposes no named fields.

No examples provided.

authority_list_my_coupons ~147

List the coupons this patron has redeemed on this operator. Returns both active and exhausted redemptions with a per-row ``status`` (``active`` / ``window_closed`` / ``patron_limit`` / ``total_limit``). Free — requires proof of ``npub``.

NameTypeReqDescription
dpop_tokenstring–Proof that the caller holds npub: the grant envelope from receive_npub_proof, or the raw JSON of a kind-27235 Nostr event signed by npub whose `u` tag is this tool's name.
npubstringyesThe patron's Nostr public key (npub1...).

Structured output declared, but exposes no named fields.

No examples provided.

authority_list_neon_alerts ~85

Owner queue: operators that reported a Neon-402 (store locked). Restricted to the Authority owner. A companion to network_persistence_health: this is the reactive list (operators that already went dark); the health tool adds the proactive per-project compute posture.

NameTypeReqDescription
authority_proofstring–Proof signed by the Authority's OWN npub (owner consent).

Structured output declared, but exposes no named fields.

No examples provided.

authority_list_notarizations ~51

List recent Bitcoin notarization records.

NameTypeReqDescription
limitinteger–Maximum records to return (default 20).
statusstring–Optional filter (e.g., 'submitted', 'confirmed').

Structured output declared, but exposes no named fields.

No examples provided.

authority_mint_coupon ~278

Create a new operator-owned discount coupon. The coupon owns its binding: ``tool_ids`` names the tools it discounts, and re-pricing a tool never touches it. A coupon bound to no tool discounts nothing, however many patrons redeem it.

NameTypeReqDescription
discount_percentnumberyesPercentage off the base price (0-100).
dpop_tokenstring–Proof that the caller holds the operator's npub: the grant envelope from receive_npub_proof, or the raw JSON of a kind-27235 Nostr event signed by the operator whose `u` tag is this tool's name.
namestringyesThe catchy code patrons type to redeem (operator-scoped uniqueness).
tool_ids––The tools this coupon discounts — tool ids or MCP tool names, or ``["*"]`` for every tool priced above zero.
total_uses––Aggregate cap across all patrons (default None = unlimited).
uses_per_patron––How many tool calls one patron can claim the discount on (default 1; pass null/None for unlimited within the window).
valid_fromstringyesISO-8601 datetime when the coupon becomes active.
valid_untilstringyesISO-8601 datetime when the coupon expires.

Structured output declared, but exposes no named fields.

No examples provided.

authority_network_persistence_health ~219

Owner view: the health of the DPYC economy's accounting store (Neon). Restricted to the Authority owner. Three layers, from most to least proactive: 1. ``projects`` — if a Neon API key is configured (NEON_API_KEY), the per-project compute-quota posture across the org: hours used, %, reset date, and a status ladder (ok/warning/critical/exhausted) so a project can be topped up BEFORE it 402s. ``configured=false`` when no key is present (deliver one to enable the proactive watch). 2. ``own_store`` — reactive self-detection: whether the Authority's OWN database answers, or is itself 402-locked. Always available. 3. ``operator_alerts`` — operators that reported a 402 (from receive_neon_402_alert). Reactive, but immediate.

NameTypeReqDescription
authority_proofstring–Proof signed by the Authority's OWN npub (owner consent).

Structured output declared, but exposes no named fields.

No examples provided.

authority_notarize_ledger ~53

Build a Merkle tree of all patron balances and submit the root to Bitcoin via OpenTimestamps. Operator-only background task. Bitcoin confirmation takes 1-6 hours. Free — no credits required.

Input schema present but exposes no named parameters.

Structured output declared, but exposes no named fields.

No examples provided.

authority_operator_status ~192

View registration status, balance summary, and the Authority's Nostr npub. When an explicit ``npub`` is provided, requires a Schnorr proof of ownership — without it, anyone could enumerate balances by walking the community registry. When ``npub`` is empty, falls back to the Authority's own operator identity and skips the proof check (self- inspection is always allowed).

NameTypeReqDescription
dpop_tokenstring–Proof that the caller holds npub. Either the grant envelope that receive_npub_proof returned, or the raw JSON of a kind-27235 Nostr event signed by npub: content "", a `u` tag holding this tool's exa…
npubstring–Nostr public key (npub1...). Defaults to operator identity if empty.

Structured output declared, but exposes no named fields.

No examples provided.

authority_oracle_about ~21

Describe the DPYC ecosystem via the Oracle. Free.

Input schema present but exposes no named parameters.

Structured output declared, but exposes no named fields.

No examples provided.

authority_oracle_get_tax_rate ~23

Get the current DPYC certification tax rate. Free.

Input schema present but exposes no named parameters.

Structured output declared, but exposes no named fields.

No examples provided.

authority_oracle_how_to_join ~24

Get DPYC onboarding instructions from the Oracle. Free.

Input schema present but exposes no named parameters.

Structured output declared, but exposes no named fields.

No examples provided.

authority_oracle_lookup_member ~48

Look up a DPYC community member by npub. Free.

NameTypeReqDescription
npubstringyesThe Nostr public key (npub1...) of the member to look up.

Structured output declared, but exposes no named fields.

No examples provided.

authority_oracle_network_advisory ~24

Get active network advisories from the Oracle. Free.

Input schema present but exposes no named parameters.

Structured output declared, but exposes no named fields.

No examples provided.

authority_publish_nostr_profile ~149

Publish a CLIENT-SIGNED kind-0 profile to relays for an npub. The wheel never holds a patron nsec. The frontend signs the kind-0 metadata event with the patron's session key or a NIP-07 extension and passes the signed event (JSON) here; the wheel verifies the signature matches the npub, then relays it to public relays. The signature is the authorization — no proof token, no key custody. Free.

NameTypeReqDescription
npubstring–The patron's Nostr public key the event must be signed by.
signed_eventstring–A JSON-encoded, client-signed kind-0 event.

Structured output declared, but exposes no named fields.

No examples provided.

authority_purchase_credits ~156

Buy credits via Bitcoin Lightning. Creates a Lightning invoice. Pay it with any Lightning wallet, then call check_payment to confirm. Proof of npub ownership is required so credits land in the correct ledger. Free — no credits required to call.

NameTypeReqDescription
amount_satsinteger–Satoshis to purchase (default 1000).
dpop_tokenstringyesProof that the caller holds npub: the grant envelope from receive_npub_proof, or the raw JSON of a kind-27235 Nostr event signed by npub whose `u` tag is this tool's name.
npubstringyesThe Nostr public key (npub1...) the credits will fund.

Structured output declared, but exposes no named fields.

No examples provided.

authority_receive_adoption_request ~175

Inbound: record an operator's request to be adopted by this Authority. Called MCP-to-MCP by the operator's ``request_adoption``. Verifies the operator controls ``operator_npub`` (inline Schnorr bound to the adoption sentinel — no relay round-trip), records a durable ``pending`` row, and fires a best-effort owner-notification DM. Does NOT provision — provisioning waits for the owner's ``approve_adoption``.

NameTypeReqDescription
dpop_tokenstring–Inline kind-27235 proof signed by the operator's nsec, bound to the canonical adoption sentinel. request_adoption mints this automatically.
operator_npubstring–The operator's Nostr npub requesting adoption.
service_urlstring–The operator's MCP endpoint URL.

Structured output declared, but exposes no named fields.

No examples provided.

authority_receive_credentials ~353

Pick up credentials from the Secure Courier. Completes the CREDENTIAL-DELIVERY flow (the ownership-proof counterpart is ``receive_npub_proof``). **Call this only after the user confirms they have replied.** Deterministic, one-shot retrieval: name the response you want with ``(sender_npub, service, dpop_token)`` and the tool drains ONLY the rendezvous relay that channel was pinned to. Every popped DM with the wrong session phrase is deleted and its sender is NACK'd; the first DM with the matching phrase is accepted (ACK'd) and the scan stops. If none match, the queue is drained and a ``courier_not_found`` result is returned. Do NOT poll, loop, or retry. If a credential_card (ncred1...) is provided, it is redeemed directly without any relay access (dpop_token not required for that path). On success, the payment processor client is reinitialized from the new credentials — no server restart needed.

NameTypeReqDescription
credential_cardstring–Optional. An ncred1... card to redeem directly (bypasses the relay drain; dpop_token not needed).
dpop_tokenstring–Proof that the caller holds npub: the grant envelope from receive_npub_proof, or the raw JSON of a kind-27235 Nostr event signed by npub whose `u` tag is this tool's name.
sender_npubstring–Required. The npub that sent the credentials.
servicestring–Required. The credential service name (must match the service used in request_credential_channel).

Structured output declared, but exposes no named fields.

No examples provided.

authority_receive_neon_402_alert ~205

Inbound: an operator reports its Neon store is 402-locked. Called MCP-to-MCP by the operator's runtime the instant it catches a Neon HTTP 402 on its own database. Verifies the operator controls ``npub`` (inline Schnorr bound to this tool's wire name), records a durable latest-state row, and fires a best-effort owner-notification DM. This is how the Authority learns the store is dark BEFORE a patron files a complaint.

NameTypeReqDescription
detailstring–Short, credential-free error summary (the Neon 402 message).
dpop_tokenstring–Inline kind-27235 proof signed by the operator's nsec, bound to this tool's wire name. The operator's runtime mints and sends this automatically when it catches a Neon 402.
npubstring–The reporting operator's Nostr npub (the one whose store is locked).

Structured output declared, but exposes no named fields.

No examples provided.

authority_receive_npub_proof ~362

Receive npub ownership confirmation from a patron. Completes the npub-OWNERSHIP-PROOF flow (the credential-delivery counterpart is ``receive_credentials``). **Call this only after the user confirms they have replied.** Deterministic, one-shot retrieval: name the response with ``(patron_npub, dpop_token)`` — the ``dpop_token`` being the value returned by ``request_npub_proof``. The tool drains ONLY the pinned rendezvous relay that challenge was published on, stopping at the DM whose phrase matches. Mismatched DMs are deleted and NACK'd (without revealing the expected phrase). If called before the user replies, their message will never be found. Do NOT poll, loop, or retry. The signed DM itself proves npub ownership (the patron's nsec signed it). On success, returns a new ``dpop_token``: an Operator-signed **proof grant envelope** ``{"grant": …, "nonce": …}`` bound to the patron, this challenge, and the duration the patron named. The calling application MUST remember that whole string and pass it as ``dpop_token`` on every subsequent paid tool call. The grant is self-verifying; nothing about it is stored here. Free.

NameTypeReqDescription
dpop_tokenstring–Proof that the caller holds npub: the grant envelope from receive_npub_proof, or the raw JSON of a kind-27235 Nostr event signed by npub whose `u` tag is this tool's name.
patron_npubstring–Required. The patron's npub to receive proof from.

Structured output declared, but exposes no named fields.

No examples provided.

Install

How do I install the io.github.lonniev/tollbooth-authority-newengland MCP server?

io.github.lonniev/tollbooth-authority-newengland is a hosted endpoint at https://tollbooth-authority-newengland.fastmcp.app/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

remote · tollbooth-authority-newengland.fastmcp.app

# add to Claude Code
claude mcp add --transport http lonniev-tollbooth-authority-newengland 'https://tollbooth-authority-newengland.fastmcp.app/mcp'
Common questions

What is the io.github.lonniev/tollbooth-authority-newengland MCP server?

io.github.lonniev/tollbooth-authority-newengland is an MCP server listed in the public MCP registry as io.github.lonniev/tollbooth-authority-newengland. Tollbooth Authority New England, sub-regional certifier under North America. This page covers its hosted endpoint (https://tollbooth-authority-newengland.fastmcp.app/mcp).

Is the io.github.lonniev/tollbooth-authority-newengland MCP server safe to use?

io.github.lonniev/tollbooth-authority-newengland scores 36 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the io.github.lonniev/tollbooth-authority-newengland MCP server expose?

io.github.lonniev/tollbooth-authority-newengland exposes 70 tools: authority_check_balance, authority_purchase_credits, authority_check_payment, authority_restore_credits, authority_account_statement, and 65 more. Their descriptions and schemas cost roughly 11,233 tokens of context every time the server is loaded.

Does the io.github.lonniev/tollbooth-authority-newengland MCP server require authentication?

Yes. io.github.lonniev/tollbooth-authority-newengland asked us for credentials when we connected, so you will need to authorise it in your MCP client before it can do anything.

Is the io.github.lonniev/tollbooth-authority-newengland MCP server still maintained?

io.github.lonniev/tollbooth-authority-newengland is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.