Server data from the Official MCP Registry
Lightning trust + audit oracle. Score, pay, and audit L402 endpoints with Ed25519 receipts.
Lightning trust + audit oracle. Score, pay, and audit L402 endpoints with Ed25519 receipts.
SatRank is a Bitcoin Lightning trust oracle with reasonable architecture and mostly appropriate permissions for its stated purpose. However, there are notable security concerns around credential handling (hardcoded test credentials and unencrypted macaroon storage), missing input validation on the L402 macaroon parameter, and insufficient error handling that could leak implementation details. The MCP server itself is well-structured, but the backend API requires hardening before production use. Supply chain analysis found 2 known vulnerabilities in dependencies (1 critical, 0 high severity). Package verification found 1 issue (1 critical, 0 high severity).
4 files analyzed · 10 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
This plugin requests these system permissions. Most are normal for its category.
Unverified package source
We couldn't verify that the installable package matches the reviewed source code. Proceed with caution.
Set these up before or after installing:
Environment variable: SATRANK_API_BASE
Add this to your MCP configuration file:
{
"mcpServers": {
"dev-satrank-mcp": {
"env": {
"SATRANK_API_BASE": "your-satrank-api-base-here"
},
"args": [
"-y",
"satrank"
],
"command": "npx"
}
}
}From the project's GitHub README.
Lightning trust oracle for AI agents on L402. Bitcoin-pure.
POST /api/intent (paid 2 sats via L402): an agent passes a category + budget + SLA, gets back the top-K endpoints with full Bayesian breakdown.POST /api/intent paid, 2 sats via L402
GET /api/services/:url_hash free, per-endpoint score snapshot
GET /api/services/categories free, list of catalogue categories
GET /api/services/best free, top-3 per category
GET /api/oracle/budget free, last 24h revenue + paid-probe spend
GET /health
GET /.well-known/satrank-key oracle pubkey for offline verify
Three tools for any MCP-compatible AI runtime (Claude Code, Cursor, Codex, n8n):
intent forwards POST /api/intent (paid)
get_endpoint_score forwards GET /api/services/:url_hash (free)
verify_assertion offline Schnorr verification of kind 30782 (no network)
Install in Claude Code:
claude mcp add satrank -- npx -y satrank-mcp
Self-hosters point SATRANK_API_BASE at their own deployment.
13 source files. Read top-to-bottom in 30 minutes.
src/
├── types.ts Stage, Posterior, Endpoint, Observation
├── config.ts zod env schema, parsed once at boot
├── logger.ts JSON-line stdout
├── db.ts pg Pool + idempotent schema bootstrap
├── schema.sql 8 tables in ONE file (no migrations folder)
├── lnd.ts minimal LND REST client (3 ops)
├── nostr.ts kind 30782 sign + publish + offline verify
├── scoring.ts Beta(α,β) per stage, Wilson CI95, ranker
├── probe.ts HTTP probe with optional L402 pay
├── crawler.ts l402.directory + RSS + DNS + cron
├── api.ts Express, 5 routes, native L402 paid gate
├── mcp.ts MCP server, 3 tools, ships verbatim to npm
└── index.ts boot + shutdown
cp .env.example .env
# minimum: set DATABASE_URL
npm install
npm run build
npm start
For paid probes + paid /api/intent gate, set LND_REST_URL + LND_MACAROON_HEX + L402_MACAROON_SECRET. For Nostr trust assertions, set NOSTR_PRIVATE_KEY.
For each (endpoint, stage), maintain a Beta(α, β) posterior with α₀ = β₀ = 1 (uniform prior). On every observation:
Stage mean: α / (α+β). 95% credible interval via Wilson (closed-form). End-to-end success: ∏ stage_means across the 5 stages, assuming stage independence.
is_meaningful is true iff every stage has at least MEANINGFUL_N_OBS_MIN observations.
AGPL-3.0
Be the first to review this server!
by Modelcontextprotocol · Developer Tools
Read, search, and manipulate Git repositories programmatically
by Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
by mcp-marketplace · Developer Tools
Create, build, and publish Python MCP servers to PyPI — conversationally.