Skip to main content
Glama

BlindOracle MCP Server

Trust layer for the x402 agent economy. ERC-8004 passports · x402 + Fedimint payments · ProofDB delegation chains · MASSAT security audits · Chainlink/Kalshi/Polymarket prediction-market settlement.

License: Apache 2.0 Python 3.11+ MCP

A Model Context Protocol (MCP) server that exposes the BlindOracle marketplace as MCP tools — verifiable agent commerce with cryptographic identity, sub-cent inter-agent payments, append-only audit trails, and prediction-market settlement composed from Chainlink + Kalshi + Polymarket oracles.

What this server gives your agent

Capability

How

Portable identity

ERC-8004 passport — chain-anchored agent_id bound to operator_id. Free to mint. Replaces OAuth for credential rotation.

Payment

x402 HTTP 402 challenge + Fedimint ecash settlement. Sub-cent per call. No merchant-of-record.

Audit

ProofDB — 15 cryptographic proof kinds incl. ProofOfDelegation (kind 30014). HMAC-SHA256, append-only, 18+ month queryable. MiCA/SOC2-ready.

Security

MASSAT framework covers all 10 OWASP Agent Security categories (ASI01–ASI10). Our own audit score (4.3/10) is published publicly.

Prediction markets

Kalshi WebSocket + Polymarket CLOB + Chainlink CRE settlement. Live treasury on Base.

Related MCP server: AgentStamp

Quick start (5 minutes)

# Install
git clone https://github.com/craigmbrown/blindoracle-mcp.git
cd blindoracle-mcp
pip install -e .

# Run the MCP server
python main.py

Or add to your Claude Desktop / Cursor / continue.dev MCP config:

{
  "mcpServers": {
    "blindoracle": {
      "command": "python",
      "args": ["/path/to/blindoracle-mcp/main.py"]
    }
  }
}

What's in this repo

main.py                      MCP server entry point (FastMCP)
pyproject.toml               Package metadata + dependencies
core/                        Core MCP tooling + BLP framework + chainlink integration
prediction_markets/          Kalshi + Polymarket + market aggregator
sub_agents/                  Design/Implementation/Testing/Deployment/Operations agents
alerting/                    Alert routing + email/whatsapp channels (env-var configured)
trading_signals/             Signal generator + store
contracts/                   Solidity smart contracts (PrivateClaimVerifier, AgentRegistry, etc.)
cre-workflows/               Chainlink CRE workflow definitions

Configuration

The server reads its operator-specific configuration from environment variables. No hard-coded secrets. Common variables:

Variable

Purpose

Default

BLINDORACLE_OPERATOR_EMAIL

Where alerts route to

operator@example.com (placeholder)

BLINDORACLE_OPERATOR_WHATSAPP

P0 alert SMS-style channel

(none)

BLINDORACLE_SENDER_EMAIL

Outbound email From: address

agent@example.com (placeholder)

BLINDORACLE_PASSPORT_ID

Your ERC-8004 passport ID

(mint free at the BlindOracle marketplace)

BLINDORACLE_ECASH_WALLET

Fedimint mint URL for ecash settlement

TheBaby federation default

For prediction-market integrations, also set KALSHI_API_KEY, POLYMARKET_API_KEY, CHAINLINK_RPC_URL per your provider docs.

Try the live marketplace (no install needed)

# See real settled cash on Base — the marketplace IS running
curl https://api.craigmbrown.com/a2a/treasury/balances

# Read the agent-services manifest (15 live services)
curl https://craigmbrown.com/.well-known/agent-services.json | jq '.services | length'

# See the public MCP server card
curl https://craigmbrown.com/.well-known/mcp/server-card.json

Architecture & deeper reading

Repo

What

blindoracle-marketplace-client

Python client SDK for calling the BlindOracle marketplace

massat-framework

MASSAT security audit toolkit (OWASP ASI01-10) — used to audit MCP servers

awesome-erc8004

Curated reading list for the ERC-8004 standard

Production evidence

  • Live treasury on Base at 0x5E70…4EB9 — verifiable via curl https://api.craigmbrown.com/a2a/treasury/balances

  • $0.76 settled cash across 7 of 9 settlement rails (x402, Fedimint, Lightning, USDC, ...)

  • 15 services live at /.well-known/agent-services.json

  • 50+ agent fleet in production with BLP 49/60 reliability score

  • MASSAT audit score 4.3/10 — published publicly; transparency is the differentiator

  • 17 /a2a/* endpoints live at api.craigmbrown.com/a2a/

License

Apache 2.0 — see LICENSE. Open-core: the framework is permissively licensed; the hosted marketplace API has a paid tier for operators.

Contributing

PRs welcome. Issues tracker at github.com/craigmbrown/blindoracle-docs/issues.

For security disclosures: please email security@craigmbrown.com (do NOT file a public issue). MASSAT audit findings welcome via the same channel.


Author: Craig Brown · craigmbrown.com · @cmb24k2

A
license - permissive license
-
quality - not tested
D
maintenance

Maintenance

Maintainers
Response time
Release cycle
Releases (12mo)
Commit activity
Issues opened vs closed

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/craigmbrown/blindoracle-mcp'

If you have feedback or need assistance with the MCP directory API, please join our Discord server