Back to Browse

Tollbooth Authority Newengland MCP Server

Developer ToolsUse Caution4.2MCP RegistryLocalRemote
Free

Server data from the Official MCP Registry

Tollbooth Authority New England — sub-regional certifier under North America

About

Tollbooth Authority New England — sub-regional certifier under North America

Remote endpoints: streamable-http: https://tollbooth-authority-newengland.fastmcp.app/mcp

Security Report

4.2
Use Caution4.2High Risk

This is a well-structured MCP server implementing a regional certification authority within the Tollbooth ecosystem. The codebase is thin (~90 lines of application code) and delegates security-critical operations to the upstream `tollbooth-dpyc` wheel. No malicious patterns, credential exfiltration, or dangerous code execution vulnerabilities were identified. Permissions align appropriately with its purpose as a financial certification service. Minor code quality observations exist but do not materially impact security. Supply chain analysis found 7 known vulnerabilities in dependencies (1 critical, 3 high severity).

7 files analyzed · 10 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

env_vars

Check that this permission is expected for this type of plugin.

HTTP Network Access

Connects to external APIs or services over the internet.

database

Check that this permission is expected for this type of plugin.

system_info

Check that this permission is expected for this type of plugin.

How to Install & Connect

Available as Local & Remote

This plugin can run on your machine or connect to a hosted endpoint. during install.

Documentation

View on GitHub

From the project's GitHub README.

Tollbooth Authority New England

The New England exit off the North American on-ramp.

Identity: npub157hmysd6sw7m8kkldycnnc74mssxp9nweddk2p5sw9l2nktr950qyxrenn Parent: tollbooth-authority-northamerica (npub1zummm…xd2t) Service: https://tollbooth-authority-newengland.fastmcp.app/mcp Neon region: aws-us-east-2 (Ohio)

A sub-regional Authority certified by NorthAmerica. The first 3-deep Authority chain in the DPYC ecosystem (Prime → NorthAmerica → NewEngland); operators serving New England patrons may choose NE to keep certification latency and audit trails as local as the protocol allows.

The metaphors in this project are drawn with admiration from The Phantom Tollbooth by Norton Juster, illustrated by Jules Feiffer (1961). We just built the payment infrastructure.


Architecture

This repository is a thin consumer of the tollbooth-dpyc wheel's tollbooth.authority extension (wheel ≥ 0.22.1). The entire deployable surface lives in src/tollbooth_authority/server.py (~90 lines): a FastMCP instance, an OperatorRuntime, and two register_*_tools(mcp, runtime) calls. Onboarding state machine, Schnorr signer, replay tracker, Neon tenant provisioning, and the Authority @tool definitions are wheel-resident and shared with every other Authority MCP in the ecosystem.

NE was scaffolded from tollbooth-authority at the start (May 16, 2026) but is no longer a fork — wheel v0.22.0 collapsed every shared module into tollbooth.authority.*. The two repos now coexist as independent thin consumers of the same mixin, distinct only in identity, region, and Neon tenant.

For protocol semantics, certificate format, fee cascade, and tool catalog, see the canonical tollbooth-authority README.

Onboarding chain note

NE's onboarding (confirm_authority_claimcheck_authority_approval) escalates to NorthAmerica, not Prime — the wheel's resolve_my_parent_npub reads NE's own upstream_authority_npub from the dpyc-community registry and routes the approval DM there. The 3-deep chain is transparent to the protocol; the registry is the source of truth.

Deploy

Two secrets required by Horizon:

Env varValue
TOLLBOOTH_NOSTR_OPERATOR_NSECNE's nsec
NEON_DATABASE_URLA pooled Neon connection string in aws-us-east-2

Everything else — BTCPay credentials for the cashier — arrives via Secure Courier post-deploy (see docs/how-to-add-authority.md in the community repo).

DPYC Ecosystem

NE is one Authority in the wider DPYC federation — a Social Contract of Operators and Authorities bound by transparent, auditable economic rules, with a Certification Chain cascading from the First Curator down through regional Authorities like this one.

License

Apache-2.0

Reviews

No reviews yet

Be the first to review this server!