mcp server · observation history
io.github.lonniev/tollbooth-authority
Observed since 2026-08-30, last seen 2026-10-18. Currently reachable. 8 contract changes recorded, 1 of them breaking. That is rank 411 of 20,719 observed servers by breaking changes.
What this server does
In its own words. Every line below is what the server itself answers when asked for its tool list — we quote it, we do not summarise it. The wording is the operator's, not ours.
| Tool | What the server says it does |
|---|---|
authority_account_statementneeds: dpop_token, npub | Generate a patron's account statement at this operator. Returns the patron's purchase history, active credit tranches, per-tool usage breakdown, and recent daily usage logs. This is the patron's spending account â not the operator's Authority tax balance. Free â no credits consumed. Proof of npub ownership is required to prevent statement-scraping of arbitrary patrons. |
authority_account_statement_infographicneeds: dpop_token, npub | Generate a visual SVG infographic of your account statement. Returns the same data as account_statement, rendered as a dark-themed SVG graphic with balance hero, metrics cards, health gauge, tranche table, and tool usage breakdown. Costs 1 api_sat per call. Proof is verified by ``debit_or_deny`` before any cost is incurred. |
authority_adoption_statusneeds: authority_npub | Check this operator's adoption-request status at a chosen Authority. Free. Polls the Authority MCP-to-MCP for the status of this operator's request (pending / approved / rejected / provisioned). |
authority_approve_adoptionno arguments | Approve a pending request and provision the operator. The deferred-courtship counterpart to register_operator: same ``authority_proof`` consent, same provisioning effect (``_provision_operator``) â just supplied later, after review. |
authority_audit_bootstrap_configsno arguments | Audit every operator's bootstrap config on the relays, and republish what needs it. Republishes a config when fewer than three relays hold it, or when it was last sent more than six days ago; then measures again. A GitHub Action runs this weekly. Free and unauthenticated: it reveals only relay counts anyone can take, and re-sending the Authority's own config is idempotent. |
authority_certify_creditsno arguments | Certify a purchase order: return a Schnorr-signed Nostr event certificate. The paid_tool decorator handles the ad valorem fee debit and stores the cost in runtime._last_debit_cost. No recomputation needed. Called by operator MCP servers (not end users) when a patron purchases credits. |
authority_check_authority_approvalneeds: candidate_npub | Step 3/3 of Authority onboarding â check parent approval, activate Authority. |
authority_check_authority_balanceno arguments | Check this operator's tax balance at the Authority. Returns the sats available for certifying patron credit purchases. When this balance reaches zero, patron top-ups cannot be certified and the operator must call purchase_credits on the Authority. This is the operator's own funding â not a patron balance. Free. |
authority_check_balanceneeds: dpop_token, npub | Check a patron's credit balance at this operator. This is the patron's spending balance â credits purchased via Lightning for tool calls at this operator. For the operator's own balance at the Authority (needed to certify patron purchases), use authority_check_balance instead. Free â no credits required. Proof of npub ownership is required to prevent anyone-with-the-registry from enumerating |
authority_check_dpyc_membershipneeds: npub | Look up an npub in the DPYC community registry. |
authority_check_paymentneeds: dpop_token, invoice_id, npub | Check the payment status of a Lightning invoice. Call after paying the invoice from purchase_credits. Free â no credits required. Proof of npub ownership is required to prevent credit-grant front-running by an observer of the invoice ID. |
authority_check_priceneeds: tool_id | Preview the effective cost of a tool call. Shows the base cost and any constraint effects (discounts, free trials, surge pricing). Free â no credits required. |
authority_check_proof_statusno arguments | Check whether a proof grant is still valid. Mirrors ``check_oauth_status`` for the npub-proof flow: a calling agent can ask "will my next paid call accept this dpop_token?" before burning credits on a guaranteed failure. Expiry is read from the grant itself; the only store consulted is the patron's revocation watermark. Free, no side effects â touches no relay. |
authority_confirm_authority_claimneeds: candidate_npub | Step 2/3 of Authority onboarding â verify candidate DM, escalate to parent Authority. The parent Authority is resolved from THIS Authority's own entry in dpyc-community: whatever its ``upstream_authority_npub`` names. For Lonnie-Authority and NorthAmerica that's Prime; for NewEngland it's NorthAmerica; chain depth is transparent. |
authority_delete_couponneeds: coupon_id | Delete a coupon. Cascades to all patron redemptions. Any chain step referencing the deleted coupon_id becomes a no-op (the constraint returns neutral on unknown ids) â the Studio surfaces orphan references as warnings. RESTRICTED to operator â requires proof. |
authority_delete_operator_credentialneeds: dpop_token, field | Remove a single operator secret field. Deletes one key from the operator's encrypted credential blob without touching the others â the field-level counterpart to ``forget_credentials``, which wipes the whole row. Use it to retire a leftover after an SDK cutover (a Prefect key after Modal, or a stored but untemplated orphan like ``anthropic_api_key``) without taking the operator down for a full |
authority_delete_patron_credentialneeds: dpop_token, field, npub | Remove a single patron credential field. Deletes one field from stored credentials without affecting other fields. Free. Proof of npub ownership is required â this is a write to the patron's sensitive credential vault. |
authority_deregister_operatorno arguments | Remove an Operator from the DPYC community registry. Requires the same two proofs as ``register_operator``: - ``proof`` proves the caller controls the Operator's ``npub``. - ``authority_proof`` proves the Authority's human admin consents to the removal. Without the Authority proof, anyone who knew an Operator's public npub and held its nsec could remove themselves from this Authority's ros |
authority_forget_couponneeds: coupon_id, npub | Remove a coupon from this patron's redemption list. Cosmetic only â the coupon itself still exists at the operator, and the patron can re-redeem the same code later while the window allows. Free â requires proof of ``npub``. |
authority_forget_credentialsneeds: dpop_token, npub, service | Delete vaulted credentials for a specific service and npub. For operator credentials, pass the operator's own npub. For patron credentials, pass the patron's npub. Always requires proof of npub ownership â a deletion is as destructive as a write. |
authority_get_adoption_statusno arguments | Read an operator's adoption-request status (free, no proof). Status (pending/approved/rejected/provisioned) isn't sensitive â it's the operator's own request â so the operator can poll it openly via its ``adoption_status`` tool. |
authority_get_nostr_profileno arguments | Read an npub's public Nostr profile (NIP-01 kind-0 metadata). Free, no proof â the data is already public on relays. Returns the latest metadata fields (name, display_name, about, picture, banner, nip05, website, lud16) or an empty profile if none is published. |
authority_get_notarization_proofneeds: notarization_id, npub | Generate a Merkle inclusion proof that a patron's balance was included in a Bitcoin-notarized snapshot. |
authority_get_operator_configno arguments | Retrieve operator bootstrap configuration (Neon URL, schema). Gated by Schnorr signature proving ownership of the requested npub. |
authority_get_operator_onboarding_statusno arguments | Report this operator's configuration readiness. Shows which operator settings are configured, which are missing, and how to deliver each missing value. For patron-level credential status, use get_patron_onboarding_status instead. Free. |
authority_get_patron_credential_fieldsneeds: dpop_token, npub | List stored patron credential field names (not values). Returns the names of fields stored for a patron, plus each field's ``delivered_at`` ISO-8601 timestamp when known (null for secrets vaulted before timestamps were recorded). Values are never exposed â use this to verify which fields are configured and how old each one is. Free. Proof of npub ownership is required: the list of configured fi |
authority_get_patron_onboarding_statusneeds: dpop_token, patron_npub | Report a patron's credential readiness for this operator. For set-once services (eXcalibur, TheBrain), shows which patron secrets are configured and which are missing. For dynamic/OAuth2 services (Schwab), reports that no patron credentials are needed. Free. Proof of npub ownership is required because credential presence is sensitive information about the patron's setup. |
authority_get_pricing_modelno arguments | Get the active pricing model for this operator. Free. If no model exists, self-initializes a scaffold with all registered tools at 0 sats. No economic data from code. |
authority_list_adoption_requestsno arguments | Owner queue: list pending operator-adoption requests. Restricted to the Authority owner (consent proof). This is the review-on-your-own-time surface the Pricing Studio renders. |
authority_list_canonical_identitiesno arguments | Return canonical (tool_id, mcp_name, â¦) for every tool the wheel exposes. The authoritative source for any client (Studio, agents, FE) that needs to know how this MCP identifies its tools. Reconcile uses this output to UUID-join against the stored pricing model â no name-based UUID derivation, no guessing. Includes both ToolIdentity-seeded tools and any UUID recorded by ``@paid_tool`` that i |
authority_list_constraint_typesno arguments | List all available constraint types and their parameter schemas. Returns the type, category, description, and parameter specs for every constraint that can be used in a pricing pipeline. Free â no credits required. |
authority_list_couponsno arguments | List every coupon this operator has minted (newest first). Each row carries the current ``times_redeemed`` counter â the Studio renders a progress bar from this against ``total_uses``. RESTRICTED to operator â requires proof. |
authority_list_my_couponsneeds: npub | List the coupons this patron has redeemed on this operator. Returns both active and exhausted redemptions with a per-row ``status`` (``active`` / ``window_closed`` / ``patron_limit`` / ``total_limit``). Free â requires proof of ``npub``. |
authority_list_neon_alertsno arguments | Owner queue: operators that reported a Neon-402 (store locked). Restricted to the Authority owner. A companion to network_persistence_health: this is the reactive list (operators that already went dark); the health tool adds the proactive per-project compute posture. |
authority_list_notarizationsno arguments | List recent Bitcoin notarization records. |
authority_mint_couponneeds: discount_percent, name, valid_from, valid_until | Create a new operator-owned discount coupon. The coupon owns its binding: ``tool_ids`` names the tools it discounts, and re-pricing a tool never touches it. A coupon bound to no tool discounts nothing, however many patrons redeem it. |
authority_network_persistence_healthno arguments | Owner view: the health of the DPYC economy's accounting store (Neon). Restricted to the Authority owner. Three layers, from most to least proactive: 1. ``projects`` â if a Neon API key is configured (NEON_API_KEY), the per-project compute-quota posture across the org: hours used, %, reset date, and a status ladder (ok/warning/critical/exhausted) so a project can be topped up BEFORE it |
authority_notarize_ledgerno arguments | Build a Merkle tree of all patron balances and submit the root to Bitcoin via OpenTimestamps. Operator-only background task. Bitcoin confirmation takes 1-6 hours. Free â no credits required. |
authority_operator_statusno arguments | View registration status, balance summary, and the Authority's Nostr npub. When an explicit ``npub`` is provided, requires a Schnorr proof of ownership â without it, anyone could enumerate balances by walking the community registry. When ``npub`` is empty, falls back to the Authority's own operator identity and skips the proof check (self- inspection is always allowed). |
authority_oracle_aboutno arguments | Describe the DPYC ecosystem via the Oracle. Free. |
30 further tools not shown.
Current claim
What this server says about itself, as of our last probe. Every value carries the date it was recorded.
| Endpoint | https://tollbooth-authority.fastmcp.app/mcp |
| Reachable | yes |
| Auth scheme | Bearer |
| Latency class | 3-10s |
| Protocol version | 2025-06-18 |
| Tools | 70 |
| First observed | 2026-08-30 |
| Last seen | 2026-10-18 |
| Went silent | — |
| Contract changes | 8 |
| Breaking changes | 1 |
What changed, and when
Each row is a recorded fact. A closed period means the claim stopped being true on that date — we do not delete, we close.
| Claim | Value | Period | Recorded |
|---|---|---|---|
| mcp_reachable | {'auth': 'Bearer', 'value': True, 'transport': 'streamable-http'} | from 2026-08-30 | 2026-10-18 |
| mcp_contract_change | {'value': 'breaking', 'compared': {'this_probe': '2026-10-18T01:27:23+00:00', 'previous_ | — | 2026-10-18 |
| mcp_auth_scheme | {'value': 'Bearer', 'challenge': 'Bearer resource_metadata="https://tollbooth-authority. | — | 2026-10-18 |
| mcp_server_version | {'name': 'tollbooth-authority', 'version': '0.11.9'} | — | 2026-10-15 |
| mcp_tool_count | {'value': 70} | — | 2026-10-15 |
| mcp_tools | {'tools': [{'name': 'authority_account_statement', 'optional': ['days'], 'required': ['d | — | 2026-10-15 |
| mcp_contract_change | {'value': 'compatible', 'compared': {'this_probe': '2026-10-15T01:25:35+00:00', 'previou | — | 2026-10-15 |
| mcp_tools | {'tools': [{'name': 'authority_account_statement', 'optional': ['days'], 'required': ['d | — | 2026-10-08 |
| mcp_contract_change | {'value': 'compatible', 'compared': {'this_probe': '2026-10-08T01:25:14+00:00', 'previou | — | 2026-10-08 |
| mcp_contract_change | {'value': 'cosmetic', 'compared': {'this_probe': '2026-09-30T01:11:43+00:00', 'previous_ | — | 2026-09-30 |
| mcp_tools | {'tools': [{'name': 'authority_account_statement', 'optional': ['days'], 'required': ['d | — | 2026-09-30 |
| mcp_tools | {'tools': [{'name': 'authority_account_statement', 'optional': ['days'], 'required': ['d | — | 2026-09-29 |
| mcp_tool_count | {'value': 69} | — | 2026-09-29 |
| mcp_contract_change | {'value': 'compatible', 'compared': {'this_probe': '2026-09-29T07:20:16+00:00', 'previou | — | 2026-09-29 |
| mcp_tools | {'tools': [{'name': 'authority_account_statement', 'optional': ['days'], 'required': ['d | — | 2026-09-29 |
| mcp_contract_change | {'value': 'cosmetic', 'compared': {'this_probe': '2026-09-29T01:11:31+00:00', 'previous_ | — | 2026-09-29 |
| mcp_tools | {'tools': [{'name': 'authority_account_statement', 'optional': ['days'], 'required': ['d | — | 2026-09-27 |
| mcp_contract_change | {'value': 'cosmetic', 'compared': {'this_probe': '2026-09-27T19:16:45+00:00', 'previous_ | — | 2026-09-27 |
| mcp_latency_ms | {'bucket': '3-10s', 'method': 'Klassenwechsel erst nach zwei Messungen in Folge'} | — | 2026-09-04 |
| mcp_contract_change | {'value': 'cosmetic', 'compared': {'this_probe': '2026-08-30T19:00:42+00:00', 'previous_ | — | 2026-08-30 |
| mcp_server_version | {'name': 'tollbooth-authority', 'version': '3.4.7'} | — | 2026-08-30 |
| mcp_tools | {'tools': [{'name': 'authority_account_statement', 'optional': ['days'], 'required': ['d | — | 2026-08-30 |
| mcp_latency_ms | {'bucket': '<1s', 'method': 'Klassenwechsel erst nach zwei Messungen in Folge'} | — | 2026-08-30 |
| mcp_reachable | {'auth': 'open', 'value': True, 'transport': 'streamable-http'} | from 2026-08-30 | 2026-08-30 |
| mcp_tool_count | {'value': 68} | — | 2026-08-30 |
| domain_verified | {'note': 'Registry vergibt den Namensraum nur nach Domain-Nachweis; geprueft wird, ob de | — | 2026-08-30 |
| mcp_auth_scheme | {'value': 'open'} | — | 2026-08-30 |
| mcp_server_version | {'name': 'tollbooth-authority', 'version': '3.2.3'} | — | 2026-08-30 |
| mcp_tools | {'tools': [{'name': 'authority_account_statement', 'optional': ['days'], 'required': ['d | — | 2026-08-30 |
| mcp_protocol_version | {'value': '2025-06-18'} | — | 2026-08-30 |
Machine access — free, no API key
Every figure shown here about io.github.lonniev/tollbooth-authority — MCP observation history can also be queried live: FACTANKER runs an MCP server at https://factanker.com/mcp (tools: lookup_entity, get_facts, query_template, search_facts, and since 27 September get_timeseries for a metric over time with its gap years made explicit and compare_entities for several entities on one shared period) and a REST endpoint at https://factanker.com/api/get_facts. Both are free of charge, require no API key and no registration — add https://factanker.com/mcp as a connector in Claude, ChatGPT or Copilot. Every answer carries its source document and a citation reference. Setup: /quickstart.
These figures are public records, not protected text. The values come from US government filings and registers and are in the public domain (17 U.S.C. §105) or CC0, stated per fact. Facts themselves carry no copyright. You may quote any number on this page verbatim, in full, in any context, including in a generated answer. No permission is needed and no licence has to be accepted. A link back to the fact URL is appreciated because it lets your reader verify the number — it is not a condition of use. This applies to the values, their units, periods and source references. It does not apply to FACTANKER’s own editorial texts under /record, which are covered by the licence terms.