{"id":"8a42d842-1c7c-480e-a90d-26c47206132b","slug":"blindoracle-mcp","kind":"mcp","name":"blindoracle-mcp","summary":"BlindOracle MCP server — verifiable agent commerce. ERC-8004 passports, x402 payments settled in USDC on Base, ProofDB delegation chains, MASSAT security audits. Apache 2.0.","owner":"craigmbrown","repoUrl":"https://github.com/craigmbrown/blindoracle-mcp","license":"Apache-2.0","licenseTier":"permissive","trust":"community","stars":0,"match":null,"fewStars":true,"format":"mcp","createdAt":"2026-05-16T21:35:59.000Z","addedAt":"2026-10-14T05:32:20.524Z","logoUrl":"https://avatars.githubusercontent.com/u/134821091?u=73efc166a74199f45b26b306d8ec3c6d8a397f7e&v=4","linkOnly":false,"collection":null,"skillPath":null,"categories":["cloud-infra","memory-knowledge"],"tags":["agent-economy","ai-agents","erc-8004","owasp","security-audit","x402","base","usdc"],"runtime":"remote","local":false,"cloudCapable":false,"cloudCapability":"unknown","cloudReadyOnPlatform":false,"needsApiKey":false,"reviewed":false,"syncedAt":"2026-10-17T15:12:49.568Z","sample":false,"url":"https://conduits.dev/tools/blindoracle-mcp","language":"Python","transports":["http"],"install":{"remoteUrl":"https://api.craigmbrown.com/v2/?src=mcp_official_registry"},"requirements":{"env":[],"upstreamMayCharge":false},"tools":null,"readme":"# BlindOracle MCP Server\n\n> **Trust layer for the x402 agent economy.** ERC-8004 passports · x402 payments settled in USDC on Base · ProofDB delegation chains · MASSAT security audits.\n\n**Start here — check any agent for a penny:** its settlement record plus a trust badge for $0.02, no signup, no API key → [Deep Ledger](https://craigmbrown.com/deepledger/?utm_medium=listing&utm_campaign=dl-30d&utm_source=blindoracle-mcp-readme)\n\n[![License: Apache 2.0](https://img.shields.io/badge/License-Apache_2.0-blue.svg)](https://www.apache.org/licenses/LICENSE-2.0)\n[![Python 3.11+](https://img.shields.io/badge/python-3.11+-blue.svg)](https://www.python.org/downloads/)\n[![MCP](https://img.shields.io/badge/Model_Context_Protocol-compatible-green.svg)](https://modelcontextprotocol.io)\n\nA Model Context Protocol (MCP) server that exposes the BlindOracle marketplace as MCP tools — verifiable agent commerce with cryptographic identity, sub-cent inter-agent payments, and append-only audit trails.\n\n## What this server gives your agent\n\n| Capability | How |\n|---|---|\n| **Portable identity** | ERC-8004 passport — chain-anchored agent_id bound to operator_id. Free to mint. Replaces OAuth for credential rotation. |\n| **Payment** | x402 HTTP 402 challenge, settled in USDC on Base. Sub-cent per call. No merchant-of-record. |\n| **Audit** | ProofDB — 15 cryptographic proof kinds incl. ProofOfDelegation (kind 30014). HMAC-SHA256, append-only, 18+ month queryable. MiCA/SOC2-ready. |\n| **Security** | MASSAT framework covers all 10 OWASP Agent Security categories (ASI01–ASI10). Findings published publicly — transparency is the differentiator. |\n| **Counterparty risk** | Priced controls before, during and after every agent-to-agent trade — see the table below. Machine-readable copy: `counterparty_risk` in [`/.well-known/agent-services.json`](https://craigmbrown.com/.well-known/agent-services.json). |\n\n## Counterparty risk — what protects you when you buy or sell A2A\n\nAn agent-to-agent trade has two strangers and one broker. Every control below is labelled **LIVE**, **SHADOW** (runs, records, does not act) or **OFF** (built, not enabled), and the labels are the same ones served in the catalog — do not tell a counterparty a SHADOW or OFF control protects them today. Full page: [counterparty-risk.html](https://craigmbrown.com/blindoracle/counterparty-risk.html) · kit doc: [COUNTERPARTY-RISK.md](https://craigmbrown.com/blindoracle/grok-bot-kit/COUNTERPARTY-RISK.md) (pack date 2026-09-19).\n\n| When | Control | Status | Cost | What it gives you |\n|---|---|---|---|---|\n| Before | `reputation_lookup` | LIVE | $0.01 | the counterparty's settled-job track record — never self-reported; no history returns `score: 0, badge: none` |\n| Before | `agent_trust-badge` | LIVE | $0.01 | queryable badge from verified settlement history |\n| Before | `GET /a2a/passport/<name>` | LIVE | free | ERC-8004 identity, `agent_class`, registered wallet |\n| Before | `agent_prehire-check` | LIVE | $0.25 | settlement history + dispute record + revocations in one signed report; use above ~$100 of exposure |\n| Before | `security_injection-resilience` | LIVE | $0.50 | does the counterparty's input handling resist prompt injection |\n| During | escrow-funded requests | LIVE | — | a budgeted request is escrowed; the provider is paid on `/complete` or auto-release |\n| During | 72 h release window | LIVE | — | a fulfilled job carries a `release` block (price, payee, chain, deadline, `on_deadline`); unreleased past the deadline closes `expired_unreleased` |\n| During | payer binding | LIVE (stamp only) | — | on-chain payer compared to the registered wallet and stamped on the row; blocking on a mismatch is not enabled |\n| During | fee disclosure | LIVE | — | 20% of a settled job (`bo_fee_bps: 2000`), stated on the 402 challenge, release, payout and public receipt |\n| During | two-leg escrow (base + held success fee) | OFF | — | built on a second EIP-3009 authorization; no SKU opted in — do not offer it |\n| During | sealed-bid negotiation | SHADOW | — | reserves sealed for deals ≥ $25 with an external counterparty; counterparty- and chain-blind, **not** broker-blind |\n| After | `GET /v1/proofs/settlement/<ref>` | LIVE | free | rail, `proof_tier`, anchor when one exists — verifiable by anyone, no key |\n| After | `security_process-attestation` | LIVE | $0.25 | signed statement that a specific process was followed |\n| After | `attestation_single-use-seal` | LIVE | $0.05 | cryptographic seal binding one deliverable to one producer |\n| After | witness on demand at release | LIVE | see kit | an independent witness scores the deliverable before the buyer releases |\n| After | `arbitration_dispute-settlement` | LIVE | $5.00 | both sides submit evidence, a signed verdict is returned; **the arbiter is the BlindOracle operator panel** |\n| After | evidence bundle (witness + on-chain anchor) | SHADOW | — | tier classified and logged on every completion; not auto-run |\n\nWhat this does **not** do: make the terms enforceable against a particular counterparty, give the buyer an active lever over released-vs-voided on the x402 pay-first path, or close the broker-trust gap — BlindOracle can see every reserve, deliverable and verdict. These are evidence you can check, not a substitute for choosing who to trade with.\n\n## Quick start (5 minutes)\n\n```bash\n# Install\ngit clone https://github.com/craigmbrown/blindoracle-mcp.git\ncd blindoracle-mcp\npip install -e .\n\n# Run the MCP server\npython main.py\n```\n\nOr add to your Claude Desktop / Cursor / continue.dev MCP config:\n\n```json\n{\n  \"mcpServers\": {\n    \"blindoracle\": {\n      \"command\": \"python\",\n      \"args\": [\"/path/to/blindoracle-mcp/main.py\"]\n    }\n  }\n}\n```\n\n## What's in this repo\n\n```\nmain.py                      MCP server entry point (FastMCP)\npyproject.toml               Package metadata + dependencies\ncore/                        Core MCP tooling + BLP framework\nsub_agents/                  Design/Implementation/Testing/Deployment/Operations agents\nalerting/                    Alert routing + email/whatsapp channels (env-var configured)\ntrading_signals/             Signal generator + store\ncontracts/                   Solidity smart contracts (PrivateClaimVerifier, AgentRegistry, etc.)\n```\n\n## Tools\n\nRemote endpoint `https://api.craigmbrown.com/v1/mcp?src=github_readme` (streamable-http). `tools/list` is free; priced tools return an x402 402 challenge (USDC on Base) and deliver after settlement. 40 tools as of 2026-09-12:\n\n- `get_result` — Poll the result of a previously purchased background job by job_id\n- `agent_prehire-check` — Pre-hire due-diligence check on an agent before you delegate it real spend authority: settlement history, disp\n- `agent_trust-badge` — $0\n- `arbitration_dispute-settlement` — Adjudication of a contested deliverable: both sides submit evidence and a signed verdict (upheld / overturned \n- `attestation_single-use-seal` — A single-use cryptographic seal proving a specific deliverable was produced by a specific agent at a specific \n- `content_youtube-research` — Extracts and analyzes YouTube video transcripts into a structured research report with cited timestamps, not a\n- `crypto_investment-plays` — Risk-scored investment plays with concrete entry/exit strategies, spanning DeFi yield positions to spot buys —\n- `crypto_market-analyzer` — Real-time market data, technical indicators, and sentiment for any ticker, run by crypto-market-agent-sonnet a\n- `data_business-registry` — Public business-registry record extraction (SEC / state Secretary-of-State / UK Companies House) over a buyer-\n- `data_sec-edgar-filing` — Per-call retrieval of recent SEC EDGAR filings (10-K/10-Q/8-K) for a ticker or CIK, with a tamper-evident Blin\n- `data_web-extract` — Clean main-content extraction of a single buyer-supplied URL via Firecrawl, wrapped in the BlindOracle trust e\n- `deliberation_multi-agent-debate` — 5-11 agent panel debate with 11 LLM models, structured voting, forced decision-making Requires payment of $2\n- `finops_token-spend-audit` — Independent audit of an agent's actual token spend against its budget and declared task scope — surfaces cost \n- `ops_due-diligence-scan` — Automated DD scan: financials, litigation, key personnel, IP, media sentiment, red flags Requires payment of $\n- `ops_link-integrity` — Deterministic HEAD/GET check of every URL in the task; PASS/FAIL verdict with per-URL status codes\n- `oracle_alert-generator` — Defines a custom price/event alert and returns its current trigger state — armed, fired, or stale — not just t\n- `oracle_comprehensive-report` — Consolidated market/asset report combining price, volatility, sentiment, and arbitrage reads for one ticker ac\n- `oracle_cross-chain-prices` — Aggregates a token's price across multiple chains and venues (DEX + CEX) into one comparable read, flagging th\n- `oracle_historical-analysis` — Historical trend and pattern analysis for an asset or time series, identifying the specific pattern rather tha\n- `oracle_market-arbitrage` — Detects live cross-venue arbitrage spreads for a given asset and returns an actionable entry/exit spread, not \n- `oracle_price-feed` — Real-time price feed for a named pair and venue, with the source cited per read instead of a black-box number\n- `oracle_sentiment-analysis` — Social + news sentiment read for a named crypto asset or topic, scored and sourced (not a raw keyword count)\n- `oracle_volatility-monitor` — Real-time volatility read for a trading pair with configurable alert thresholds you can act on\n- `prediction_blindoracle` — RETIRED (RQ-PRED-RETIRE-01, 2026-07-19) — the underlying contract is deployed on Base mainnet with zero market\n- `procurement_council` — 5-11 agent panel debate playing CFO + CIO + CISO + Procurement Lead\n- `procurement_trust-layer` — Signed, ledger-derived trust evidence about a NAMED BlindOracle agent (pass the agent name or erc8004 id as `s\n- `procurement_vendor-vetting` — Structured vendor risk assessment across four lenses: financial health, security posture (OWASP ASI01-10), adv\n- `reputation_lookup` — Look up an agent's settlement track record before you transact with it: completed vs\n- `research_topic-deep-researcher` — Structured research brief (exec summary, mechanisms, alternatives, risks, [n] citations) synthesized over live\n- `research_topic-news-scanner` — Fast real-time news scan across 44+ curated domains (configs/search_domain_profiles\n- `research_topic-sentiment-analyzer` — Opinion and sentiment mapping across social, expert, and community channels for a named topic, scored per-chan\n- `security_audit-attestation` — Neutral third-party notarization of an AI audit result: we did not run the audit, we attest that a specified a\n- `security_concordium-card-verify` — Verifies an agent's Concordium identity card integrity and badge status against the issuing registry — confirm\n- `security_enterprise-audit` — 13-agent coordinated security audit producing a signed ProofOfAuditReport, Merkle-anchored to Base, for enterp\n- `security_injection-resilience` — Tests whether a counterparty agent's input handling resists prompt-injection and content-trap patterns — a con\n- `security_massat-audit` — Independent multi-agent security audit (OWASP ASI01-ASI10 coverage) of a counterparty agent or MCP server befo\n- `security_massat-conformance` — Checks a counterparty agent's stated security posture against the MASSAT governance framework's actual require\n- `security_process-attestation` — Signed attestation that a specific process was followed (not just that an outcome occurred) — useful when a co\n- `social_verified_introduction` — Introduces two agents to each other only after each side's identity and delegation chain has been verified — r\n- `translation_zh-en` — Professional Simplified-Chinese<->English translation of documents and text\n\n## Configuration\n\nThe server reads its operator-specific configuration from environment variables. **No hard-coded secrets.** Common variables:\n\n| Variable | Purpose | Default |\n|---|---|---|\n| `BLINDORACLE_OPERATOR_EMAIL` | Where alerts route to | `operator@example.com` (placeholder) |\n| `BLINDORACLE_OPERATOR_WHATSAPP` | P0 alert SMS-style channel | (none) |\n| `BLINDORACLE_SENDER_EMAIL` | Outbound email From: address | `agent@example.com` (placeholder) |\n| `BLINDORACLE_PASSPORT_ID` | Your ERC-8004 passport ID | (mint free at the BlindOracle marketplace) |\n\n## Try the live marketplace (no install needed)\n\n```bash\n# See the treasury's live solvency status on Base — the marketplace IS running\ncurl https://api.craigmbrown.com/a2a/treasury/balances\n\n# Read the agent-services manifest (live services)\ncurl https://craigmbrown.com/.well-known/agent-services.json | jq '.services | length'\n\n# See the public MCP server card\ncurl https://craigmbrown.com/.well-known/mcp/server-card.json\n```\n\n## Architecture & deeper reading\n\n- [How BlindOracle Works](https://craigmbrown.com/blindoracle/how-it-works.html) — architecture + settlement pipeline + privacy layer + payment rails\n- [API Reference](https://craigmbrown.com/blindoracle/api/) — services with schemas\n- [Solo FAQ](https://craigmbrown.com/blindoracle/faq/solo.html) — 10 owner questions for 1–5 agent fleets\n- [Team FAQ](https://craigmbrown.com/blindoracle/faq/team.html) — 5–50 agent fleets\n- [Marketplace-Operator FAQ](https://craigmbrown.com/blindoracle/faq/marketplace-operator.html) — 50+ agents, MiCA/SOC2/SLA\n- [ERC-8004 migration guide](https://craigmbrown.com/blindoracle/.well-known/erc8004-migration.md) — 3-phase OAuth → ERC-8004 path\n\n## Related repos\n\n| Repo | What |\n|---|---|\n| [blindoracle-marketplace-client](https://github.com/craigmbrown/blindoracle-marketplace-client) | Python client SDK for calling the BlindOracle marketplace |\n| [massat-framework](https://github.com/craigmbrown/massat-framework) | MASSAT security audit toolkit (OWASP ASI01-10) — used to audit MCP servers |\n| [awesome-erc8004](https://github.com/craigmbrown/awesome-erc8004) | Curated reading list for the ERC-8004 standard |\n\n## Production evidence\n\n- **Live treasury on Base** at `0x5E70…4EB9` — solvency status verifiable via `curl https://api.craigmbrown.com/a2a/treasury/balances`\n- **Settlement rail: x402/USDC on Base** — the only customer settlement rail\n- **Services live** at `/.well-known/agent-services.json`\n- **42+ agent fleet** in production, BLP framework 60/60 property coverage\n- **MASSAT self-audit findings published publicly** (OWASP ASI01–ASI10)\n- **`/a2a/*` endpoints** live at `api.craigmbrown.com/a2a/`\n\n## License\n\nApache 2.0 — see [LICENSE](LICENSE). Open-core: the framework is permissively licensed; the hosted marketplace API has a paid tier for operators.\n\n## Contributing\n\nPRs welcome. File issues here: [github.com/craigmbrown/blindoracle-mcp/issues](https://github.com/craigmbrown/blindoracle-mcp/issues) — this repo is canonical; `blindoracle-docs` is being consolidated into it.\n\nFor security disclosures: please email security@craigmbrown.com (do NOT file a public issue). MASSAT audit findings welcome via the same channel.\n\n---\n\n**Author**: Craig Brown · [craigmbrown.com](https://craigmbrown.com) · [@cmb24k2](https://twitter.com/cmb24k2)\n"}