Back to Browse

Tollbooth Authority Northamerica MCP Server

Developer ToolsUse Caution4.2MCP RegistryLocalRemote
Free

Server data from the Official MCP Registry

Tollbooth Authority — North America regional certifier

About

Tollbooth Authority — North America regional certifier

Remote endpoints: streamable-http: https://tollbooth-authority-northamerica.fastmcp.app/mcp

Security Report

4.2
Use Caution4.2High Risk

This is a well-structured MCP server that acts as a regional certifier in the DPYC Lightning-funded ecosystem. The codebase is minimal (~90 lines of actual server code), with the bulk of security-critical logic delegated to the vetted `tollbooth-dpyc` wheel. Authentication and authorization are appropriately handled through Nostr keypairs and credential templates. No malicious patterns, hardcoded secrets, or dangerous operations were detected. Permissions align with the server's purpose (network access for Lightning/API calls, environment variable access for credentials, database access for Neon). One minor quality concern regarding broad exception handling in test utilities prevents a higher score. Supply chain analysis found 7 known vulnerabilities in dependencies (1 critical, 3 high severity).

7 files analyzed · 9 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

env_vars

Check that this permission is expected for this type of plugin.

HTTP Network Access

Connects to external APIs or services over the internet.

database

Check that this permission is expected for this type of plugin.

How to Install & Connect

Available as Local & Remote

This plugin can run on your machine or connect to a hosted endpoint. during install.

Documentation

View on GitHub

From the project's GitHub README.

Tollbooth Authority — North America

The North American on-ramp to the Lightning turnpike.

Identity: npub1zummm5awn88kw2hz6deeyjprpw0fzuv9rvzrxf3vu453yyqzvdss49xd2t Parent: DPYC Prime Authority (npub1l94pd…mq8pf) Peer Authorities under Prime: tollbooth-authority (Lonnie-Authority) Sub-Authority: tollbooth-authority-newengland Service: https://tollbooth-authority-northamerica.fastmcp.app/mcp Neon region: aws-us-west-2 (Oregon)

A peer-level Authority under DPYC Prime, serving North American operators. Operators may choose this Authority to keep certification latency and audit trails in-region.

The metaphors in this project are drawn with admiration from The Phantom Tollbooth by Norton Juster, illustrated by Jules Feiffer (1961). We just built the payment infrastructure.


Architecture

This repository is a thin consumer of the tollbooth-dpyc wheel's tollbooth.authority extension (wheel ≥ 0.22.1). The entire deployable surface lives in src/tollbooth_authority/server.py (~90 lines): a FastMCP instance, an OperatorRuntime, and two register_*_tools(mcp, runtime) calls. Onboarding state machine, Schnorr signer, replay tracker, Neon tenant provisioning, and the 16 Authority @tool definitions are wheel-resident and shared with every other Authority MCP in the ecosystem.

For the protocol semantics, certificate format (Schnorr/NIP-33 kind 30079), fee cascade, registry enforcement, and tool catalog, see the canonical tollbooth-authority README — this repo is identical in behavior, distinct only in identity, region, and Neon tenant.

Deploy

Two secrets required by Horizon:

Env varValue
TOLLBOOTH_NOSTR_OPERATOR_NSECThis Authority's nsec
NEON_DATABASE_URLA pooled Neon connection string in aws-us-west-2

Everything else — BTCPay credentials for the cashier, operator credential templates — arrives via Secure Courier post-deploy (see docs/how-to-add-authority.md in the community repo).

The DPYC Ecosystem

DPYC is a federation of independent, SSE-based MCP servers sharing one Lightning-funded economy. This Authority certifies operators across the network. Sibling repos:

Core & governance

Operators (paid MCP services)

Utilities & advocates

License

Apache-2.0

Reviews

No reviews yet

Be the first to review this server!