HederaToolbox

The intelligence layer for AI agents on Hedera.

23 tools. 7 modules. Pay per call in HBAR. No registration.

HederaToolbox is a production Model Context Protocol server. It gives AI agents structured, metered access to the full Hedera ecosystem — HCS topics, tokens, identity, smart contracts, governance, compliance, and Fixatum DID registration.

Built for agents that need to reason about Hedera, not just interact with it.

Demo

Claude Desktop — one business objective, no steps specified, agent decides everything:

Terminal agent — autonomous compliance workflow running headless:

Related MCP server: x402engine-mcp

Autonomous Agent Examples

Five production-ready agents in examples/. Clone the repo, fund once, run. Zero dependencies beyond Node.js 18+.

One-time setup for all agents:

git clone https://github.com/mountainmystic/hederatoolbox.git
cd hederatoolbox

# Send any HBAR to the platform wallet from your Hedera account.
# Your account ID becomes your API key automatically within 10 seconds.
# Platform wallet: 0.0.10309126

Windows users: set env vars before running: set HEDERA_ACCOUNT_ID=0.0.YOUR_ID && set TOKEN_ID=0.0.731861 && node examples/whale-alert-agent.mjs Or edit the config constants directly at the top of each file.

👁️ Agent Reputation Monitor

examples/agent-reputation-monitor.mjs

Watches a list of Fixatum-registered AI agents on a schedule. Detects grade changes and significant score drops — then writes a tamper-proof record to your HCS topic when a change is observed.

Built for platforms that accept agents as counterparties, DAOs monitoring delegate agents, and operators tracking a deployed agent fleet. Polling is free (fixatum_score costs nothing) — you only pay 0.1 HBAR when an alert actually fires.

Create a watched-agents.json file next to the script:

[
  { "did": "did:hedera:mainnet:z..._0.0.123456", "label": "MyAgent" },
  { "did": "did:hedera:mainnet:z..._0.0.789012", "label": "PartnerAgent" }
]

Then run:

HEDERA_ACCOUNT_ID=0.0.YOUR_ID HCS_TOPIC_ID=0.0.YOUR_TOPIC node examples/agent-reputation-monitor.mjs

# Single agent via env var:
HEDERA_ACCOUNT_ID=0.0.YOUR_ID HCS_TOPIC_ID=0.0.YOUR_TOPIC WATCH_DID=did:hedera:mainnet:z... node examples/agent-reputation-monitor.mjs

First run establishes baselines only — no alerts fire on startup. State is saved to agents-state.json and survives restarts.

Cost: Free to poll · 0.1 ℏ per alert written to HCS

Agents without a Fixatum DID cannot be monitored. Get one at fixatum.com/register.

🔎 Compliance + KYA Onboarding

examples/compliance-kya-onboarding-agent.mjs

Screens any Hedera account before doing business with them. Runs identity resolution, on-chain risk screening, and optional KYC verification — then pulls a live Fixatum KYA trust score (0–100) for free as part of the same run. The full result is written as a single tamper-proof record to your own HCS topic.

Returns APPROVED, REJECTED, PENDING_REVIEW, or PENDING_KYC.

Designed for token issuers, DEXes, DAOs, and treasury managers who want auditable counterparty screening with a reputation layer, not just a binary pass/fail.

HEDERA_ACCOUNT_ID=0.0.YOUR_ID HCS_TOPIC_ID=0.0.YOUR_TOPIC SUBJECT=0.0.999999 node examples/compliance-kya-onboarding-agent.mjs

# With KYC check and tamper verification:
HEDERA_ACCOUNT_ID=0.0.YOUR_ID HCS_TOPIC_ID=0.0.YOUR_TOPIC SUBJECT=0.0.999999 KYC_TOKEN_ID=0.0.731861 node examples/compliance-kya-onboarding-agent.mjs

HCS_TOPIC_ID is required — records write to your own topic, not a shared one. If you have a Fixatum DID, your agent_topic_id works here. Get one at fixatum.com/register.

Cost: ~1.3 ℏ base · ~2.3 ℏ with verify · ~2.8 ℏ with verify + KYC

Note: identity_check_sanctions is on-chain behavioural analysis of Hedera transaction patterns only. It is not a legal sanctions check against any government watchlist.

🐋 Whale Alert Monitor

examples/whale-alert-agent.mjs

Monitors any Hedera token for unusual whale concentration on a schedule. When top-10 holders exceed your threshold, writes a tamper-proof whale_alert record to HCS and prints the Hashscan proof URL.

HEDERA_ACCOUNT_ID=0.0.YOUR_ID TOKEN_ID=0.0.731861 node examples/whale-alert-agent.mjs

Cost: 0.2 ℏ per check · 5 ℏ only when anomaly fires

🔍 Token Due Diligence

examples/token-due-diligence-agent.mjs

Full investment and listing due diligence on any Hedera token in one run. Pulls price data, deep holder analysis, admin key risks, and treasury account identity — outputs a structured risk report with an overall verdict.

HEDERA_ACCOUNT_ID=0.0.YOUR_ID TOKEN_ID=0.0.731861 node examples/token-due-diligence-agent.mjs

Cost: ~1.0 ℏ per report (token_price + token_analyze + identity_resolve on treasury)

🗳️ DAO Governance Monitor

examples/dao-monitor-agent.mjs

Watches active governance proposals for a Hedera token on a schedule. Alerts when a proposal is closing within 24 hours. Pass --analyze with a PROPOSAL_ID for deep vote tally and outcome prediction.

# Monitor proposals
HEDERA_ACCOUNT_ID=0.0.YOUR_ID TOKEN_ID=0.0.731861 node examples/dao-monitor-agent.mjs

# Deep-analyze a specific proposal (requires HCS topic)
HEDERA_ACCOUNT_ID=0.0.YOUR_ID TOKEN_ID=0.0.731861 TOPIC_ID=0.0.999 PROPOSAL_ID=42 node examples/dao-monitor-agent.mjs --analyze

Cost: 0.2 ℏ per check · 1.0 ℏ for deep analysis · 10 ℏ covers ~12 days at 4 checks/day

Connect

MCP endpoint:

https://api.hederatoolbox.com/mcp

Claude.ai (web or mobile) Settings → Connectors → Add → paste the endpoint URL above.

Claude Desktop app

Step 1 — install the package globally (required, do this once):

npm install -g @hederatoolbox/platform

Step 2 — add to claude_desktop_config.json under mcpServers:

{
  "mcpServers": {
    "hederatoolbox": {
      "command": "npx",
      "args": ["-y", "@hederatoolbox/platform"]
    }
  }
}

Restart Claude Desktop after saving the config.

Windows users: if you see npm error could not determine executable to run, your npm global directory may not exist yet. Run these first:

mkdir %APPDATA%\npm
npm config set prefix %APPDATA%\npm
npm install -g @hederatoolbox/platform

OpenClaw / ClawHub

Install the HederaToolbox skill directly from ClawHub:

clawhub install mountainmystic/hederatoolbox

Then add your Hedera account ID to your OpenClaw environment:

HEDERA_ACCOUNT_ID=0.0.YOUR_ACCOUNT_ID

Skill listing: clawhub.ai/mountainmystic/hederatoolbox

Cursor / other MCP-compatible clients Use the endpoint URL directly in your MCP server config.

How It Works

HederaToolbox uses agent-native HBAR payments. No accounts, no OAuth, no email.

1. get_terms        -> read the Terms of Service         (free)
2. confirm_terms    -> record consent                    (free)
3. account_info     -> get platform wallet + pricing     (free)
4. send HBAR        -> your account ID becomes your key  (auto-provisioned)
5. call any tool    -> pass your Hedera account ID as api_key

Platform wallet: 0.0.10309126 (mainnet)

Credits are persistent. Unused balance carries over indefinitely.

Safety Architecture

All safety controls run server-side and cannot be bypassed by modifying the npm package.

• Consent gate — confirm_terms required before any paid tool executes

• Atomic balance deduction — balance check and deduct are a single SQL operation, race-condition proof

• Loop guard — same tool called >20 times in 60s by the same key is blocked automatically

• No private keys — we never see your private key and never ask for it. You authenticate with your Hedera account ID — a public identifier, like a username. Your key stays in your wallet.

Terms of Service: get_terms tool or /public/terms.json

Tools

Free — Onboarding and Legal

Module 1 — HCS Topic Intelligence

Module 2 — Compliance and Audit Trail

Module 3 — Governance Intelligence

Module 4 — Token Intelligence

Module 5 — Identity Resolution

Module 6 — Smart Contract Intelligence

Accepts both Hedera native IDs (0.0.123456) and EVM addresses (0x...).

Module 7 — Fixatum DID Identity

Register agents on Fixatum — a W3C DID issuance and KYA (Know Your Agent) trust scoring platform built on Hedera.

Call fixatum_register without ed25519_public_key to get key generation instructions first — no charge until registration proceeds.

Changelog

v3.5.3 — Fixatum DID module added (fixatum_register, fixatum_score, fixatum_status) — 23 tools, 7 modules

v3.4.5 — Agent examples improved, xagent persona rewrite

v3.4.2 — X agent (Telegram-gated autonomous tweet drafting), agent examples added to repo

v3.4.0 — Repriced all tools across all 6 modules

v3.3.1 — Full security audit: SQLite-backed rate limiting, API key validation, 1MB body cap, separate BACKUP_SECRET, 90-day PII purge, HITL removed, legal pages deployed

Known Limitations

• Mirror node balance endpoint occasionally returns empty for high-holder tokens. Metadata unaffected.

Links

Note: The old package @hederaintel/platform is deprecated. Update your config to use @hederatoolbox/platform.

License

npm package — provided for integration use only.

Remote server and all backend logic — Proprietary. See LICENSE.md.

Enterprise licensing and SLA inquiries: open an issue titled [Enterprise].

Website

hederatoolbox.com

On-Chain Identity

HederaToolbox has a permanent platform identity record written to Hedera mainnet.