Back to Browse

Bolthub Sdk MCP Server

Developer ToolsLow Risk10.0MCP RegistryLocal
Free

Server data from the Official MCP Registry

The bolthub API marketplace, L402 gateways, and your other MCP servers, on one Lightning budget.

About

The bolthub API marketplace, L402 gateways, and your other MCP servers, on one Lightning budget.

Security Report

10.0
Low Risk10.0Low Risk

Valid MCP server (1 strong, 1 medium validity signals). No known CVEs in dependencies. ⚠️ Package registry links to a different repository than scanned source. Imported from the Official MCP Registry. Trust signals: trusted author (4/4 approved). 1 finding(s) downgraded by scanner intelligence.

12 files analyzed · 1 issue found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

What You'll Need

Set these up before or after installing:

LND REST API URL (recommended wallet; pair with LND_MACAROON). A wallet is optional — without one, free tools and marketplace search still work; paid calls return their payment challenge.Optional

Environment variable: LND_REST_HOST

Hex-encoded macaroon for LND (use a pay-scoped macaroon in production). Required with LND_REST_HOST.Required

Environment variable: LND_MACAROON

Nostr Wallet Connect string — easiest setup, works with CoinOS, Alby Hub, Zeus, and more. Alternative to LND.Required

Environment variable: NWC_URI

LNbits instance URL (pair with LNBITS_ADMIN_KEY). Alternative wallet.Optional

Environment variable: LNBITS_URL

Admin API key for LNbits. Required with LNBITS_URL.Required

Environment variable: LNBITS_ADMIN_KEY

Phoenixd HTTP API URL (pair with PHOENIXD_PASSWORD). Alternative wallet.Optional

Environment variable: PHOENIXD_URL

HTTP password for Phoenixd. Required with PHOENIXD_URL.Required

Environment variable: PHOENIXD_PASSWORD

Maximum sats the server may spend per session (process lifetime), across ALL sources. Unset = unlimited; 0 = free tools only. The config file's budget.sat takes precedence.Optional

Environment variable: BUDGET_SATS

Account token for tools that act on YOUR bolthub account (workspace, listing, audit, earnings, and node tools). Optional even for those: the connect_account tool pairs via the browser instead. Never needed to discover, call, or pay for APIs — buying is account-less.Required

Environment variable: BOLTHUB_ACCOUNT_TOKEN

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "ai-bolthub-mcp": {
      "env": {
        "NWC_URI": "your-nwc-uri-here",
        "LNBITS_URL": "your-lnbits-url-here",
        "BUDGET_SATS": "your-budget-sats-here",
        "LND_MACAROON": "your-lnd-macaroon-here",
        "PHOENIXD_URL": "your-phoenixd-url-here",
        "LND_REST_HOST": "your-lnd-rest-host-here",
        "LNBITS_ADMIN_KEY": "your-lnbits-admin-key-here",
        "PHOENIXD_PASSWORD": "your-phoenixd-password-here",
        "BOLTHUB_ACCOUNT_TOKEN": "your-bolthub-account-token-here"
      },
      "args": [
        "-y",
        "@bolthub/mcp"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

bolthub SDK

Source code for every publicly published bolthub.ai package: the npm @bolthub/* scope and the bolthub / bolthub-verify PyPI packages.

bolthub is a payment layer for agent-to-tool commerce: charge agents for your MCP tools and APIs per call, settling straight to your wallet over Lightning (L402), with bolthub never in the funds path. These packages are the open-source side of that: the tool-payment SDK, payment clients, MCP servers, a CLI, and origin-verification middleware.

PackageRegistryDirectoryWhat it is
@bolthub/paynpmpackages/payThe payments SDK, both sides: price an MCP tool or HTTP endpoint (createPaywall), pay for tools within a budget (ToolClient for MCP, L402Client for HTTP), wallet adapters (LND, LNbits, Phoenixd, NWC, WebLN); rails: L402, facilitator. Zero runtime dependencies
@bolthub/mcpnpmpackages/mcpThe bolthub MCP server: marketplace + specific gateways + your other MCP servers behind one config entry, with one shared Lightning budget
@bolthub/clinpmpackages/cliTerminal client for the marketplace
@bolthub/verifynpmpackages/verifyGateway signature verification middleware (Express/Fastify/Node)
bolthubPyPIpackages/agent-pythonThe payments SDK in Python: L402 client + wallets, and the seller-side paywall
bolthub-verifyPyPIpackages/verify-pythonPython gateway signature verification (Flask/Django/FastAPI)

packages/shared is internal (never published); it is here because @bolthub/mcp bundles it.

Consolidation (2026-07): @bolthub/agent merged into @bolthub/pay (≥0.4.0); @bolthub/mcp-registry and @bolthub/mcp-bridge merged into @bolthub/mcp. The old names are deprecated on npm and point here.

Relationship to the bolthub platform

The bolthub platform (gateway, API, web app) lives in a private monorepo. The SDK packages above are developed there and synced to this repository, which is the publish origin: releases are tagged here and built + published by CI with npm provenance, so what's on npm is verifiably built from this public source.

Issues and PRs are welcome here, but note that this repo is a generated mirror: PRs are never merged directly. Accepted changes are applied to the monorepo first (with attribution), then sync back out with the next release. See CONTRIBUTING.md before opening a PR.

Verifying what you install

Published dist/ bundles are built with Bun from this source and ship source maps with embedded sources, so the tarball itself is readable.

# provenance: confirm the tarball was built from this repo by GitHub Actions
npm audit signatures

# or rebuild and compare yourself
git clone https://github.com/signaltech-org/bolthub-sdk
cd bolthub-sdk && bun install
cd packages/mcp && bun run build

See SECURITY.md for the trust model (what touches your wallet credentials and what doesn't) and how to report vulnerabilities.

Development

bun install
bun test

Each TypeScript package builds with bun run build from its directory (@bolthub/pay must be built before the packages that bundle it).

License

MIT

Reviews

No reviews yet

Be the first to review this server!