BlindOracle MCP Server

Trust layer for the x402 agent economy. ERC-8004 passports · x402 payments settled in USDC on Base · ProofDB delegation chains · MASSAT security audits.

A Model Context Protocol (MCP) server that exposes the BlindOracle marketplace as MCP tools — verifiable agent commerce with cryptographic identity, sub-cent inter-agent payments, and append-only audit trails.

What this server gives your agent

Quick start (5 minutes)

# Install
git clone https://github.com/craigmbrown/blindoracle-mcp.git
cd blindoracle-mcp
pip install -e .

# Run the MCP server
python main.py

Or add to your Claude Desktop / Cursor / continue.dev MCP config:

{
  "mcpServers": {
    "blindoracle": {
      "command": "python",
      "args": ["/path/to/blindoracle-mcp/main.py"]
    }
  }
}

What's in this repo

main.py                      MCP server entry point (FastMCP)
pyproject.toml               Package metadata + dependencies
core/                        Core MCP tooling + BLP framework
sub_agents/                  Design/Implementation/Testing/Deployment/Operations agents
alerting/                    Alert routing + email/whatsapp channels (env-var configured)
trading_signals/             Signal generator + store
contracts/                   Solidity smart contracts (PrivateClaimVerifier, AgentRegistry, etc.)

Configuration

The server reads its operator-specific configuration from environment variables. No hard-coded secrets. Common variables:

Try the live marketplace (no install needed)

# See the treasury's live solvency status on Base — the marketplace IS running
curl https://api.craigmbrown.com/a2a/treasury/balances

# Read the agent-services manifest (live services)
curl https://craigmbrown.com/.well-known/agent-services.json | jq '.services | length'

# See the public MCP server card
curl https://craigmbrown.com/.well-known/mcp/server-card.json

Architecture & deeper reading

• How BlindOracle Works — architecture + settlement pipeline + privacy layer + payment rails

• API Reference — services with schemas

• Solo FAQ — 10 owner questions for 1–5 agent fleets

• Team FAQ — 5–50 agent fleets

• Marketplace-Operator FAQ — 50+ agents, MiCA/SOC2/SLA

• ERC-8004 migration guide — 3-phase OAuth → ERC-8004 path

Related repos

Production evidence

• Live treasury on Base at 0x5E70…4EB9 — solvency status verifiable via curl https://api.craigmbrown.com/a2a/treasury/balances

• Settlement rail: x402/USDC on Base — the only customer settlement rail

• Services live at /.well-known/agent-services.json

• 42+ agent fleet in production, BLP framework 60/60 property coverage

• MASSAT self-audit findings published publicly (OWASP ASI01–ASI10)

• /a2a/* endpoints live at api.craigmbrown.com/a2a/

License

Apache 2.0 — see LICENSE. Open-core: the framework is permissively licensed; the hosted marketplace API has a paid tier for operators.

Contributing

PRs welcome. Issues tracker at github.com/craigmbrown/blindoracle-docs/issues.

For security disclosures: please email security@craigmbrown.com (do NOT file a public issue). MASSAT audit findings welcome via the same channel.

Author: Craig Brown · craigmbrown.com · @cmb24k2