BlindOracle
BlindOracle MCP Server
Trust layer for the x402 agent economy. ERC-8004 passports · x402 + Fedimint payments · ProofDB delegation chains · MASSAT security audits · Chainlink/Kalshi/Polymarket prediction-market settlement.
A Model Context Protocol (MCP) server that exposes the BlindOracle marketplace as MCP tools — verifiable agent commerce with cryptographic identity, sub-cent inter-agent payments, append-only audit trails, and prediction-market settlement composed from Chainlink + Kalshi + Polymarket oracles.
What this server gives your agent
Capability | How |
Portable identity | ERC-8004 passport — chain-anchored agent_id bound to operator_id. Free to mint. Replaces OAuth for credential rotation. |
Payment | x402 HTTP 402 challenge + Fedimint ecash settlement. Sub-cent per call. No merchant-of-record. |
Audit | ProofDB — 15 cryptographic proof kinds incl. ProofOfDelegation (kind 30014). HMAC-SHA256, append-only, 18+ month queryable. MiCA/SOC2-ready. |
Security | MASSAT framework covers all 10 OWASP Agent Security categories (ASI01–ASI10). Our own audit score (4.3/10) is published publicly. |
Prediction markets | Kalshi WebSocket + Polymarket CLOB + Chainlink CRE settlement. Live treasury on Base. |
Quick start (5 minutes)
# Install
git clone https://github.com/craigmbrown/blindoracle-mcp.git
cd blindoracle-mcp
pip install -e .
# Run the MCP server
python main.pyOr add to your Claude Desktop / Cursor / continue.dev MCP config:
{
"mcpServers": {
"blindoracle": {
"command": "python",
"args": ["/path/to/blindoracle-mcp/main.py"]
}
}
}What's in this repo
main.py MCP server entry point (FastMCP)
pyproject.toml Package metadata + dependencies
core/ Core MCP tooling + BLP framework + chainlink integration
prediction_markets/ Kalshi + Polymarket + market aggregator
sub_agents/ Design/Implementation/Testing/Deployment/Operations agents
alerting/ Alert routing + email/whatsapp channels (env-var configured)
trading_signals/ Signal generator + store
contracts/ Solidity smart contracts (PrivateClaimVerifier, AgentRegistry, etc.)
cre-workflows/ Chainlink CRE workflow definitionsConfiguration
The server reads its operator-specific configuration from environment variables. No hard-coded secrets. Common variables:
Variable | Purpose | Default |
| Where alerts route to |
|
| P0 alert SMS-style channel | (none) |
| Outbound email From: address |
|
| Your ERC-8004 passport ID | (mint free at the BlindOracle marketplace) |
| Fedimint mint URL for ecash settlement | TheBaby federation default |
For prediction-market integrations, also set KALSHI_API_KEY, POLYMARKET_API_KEY, CHAINLINK_RPC_URL per your provider docs.
Try the live marketplace (no install needed)
# See real settled cash on Base — the marketplace IS running
curl https://api.craigmbrown.com/a2a/treasury/balances
# Read the agent-services manifest (15 live services)
curl https://craigmbrown.com/.well-known/agent-services.json | jq '.services | length'
# See the public MCP server card
curl https://craigmbrown.com/.well-known/mcp/server-card.jsonArchitecture & deeper reading
How BlindOracle Works — architecture + settlement pipeline + privacy layer + payment rails
API Reference — all 15 services with schemas
Solo FAQ — 10 owner questions for 1–5 agent fleets
Team FAQ — 5–50 agent fleets
Marketplace-Operator FAQ — 50+ agents, MiCA/SOC2/SLA
ERC-8004 migration guide — 3-phase OAuth → ERC-8004 path
Related repos
Repo | What |
Python client SDK for calling the BlindOracle marketplace | |
MASSAT security audit toolkit (OWASP ASI01-10) — used to audit MCP servers | |
Curated reading list for the ERC-8004 standard |
Production evidence
Live treasury on Base at
0x5E70…4EB9— verifiable viacurl https://api.craigmbrown.com/a2a/treasury/balances$0.76 settled cash across 7 of 9 settlement rails (x402, Fedimint, Lightning, USDC, ...)
15 services live at
/.well-known/agent-services.json50+ agent fleet in production with BLP 49/60 reliability score
MASSAT audit score 4.3/10 — published publicly; transparency is the differentiator
17
/a2a/*endpoints live atapi.craigmbrown.com/a2a/
License
Apache 2.0 — see LICENSE. Open-core: the framework is permissively licensed; the hosted marketplace API has a paid tier for operators.
Contributing
PRs welcome. Issues tracker at github.com/craigmbrown/blindoracle-docs/issues.
For security disclosures: please email security@craigmbrown.com (do NOT file a public issue). MASSAT audit findings welcome via the same channel.
Author: Craig Brown · craigmbrown.com · @cmb24k2
Latest Blog Posts
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/craigmbrown/blindoracle-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server