Skip to main content
Glama
molpha

Molpha MCP

Official
by molpha

Molpha MCP

CI License: MIT Node.js

A Model Context Protocol (MCP) server that lets AI agents fetch signed Molpha oracle data, publish it on Solana, and build verifier calldata for EVM and Starknet.

Molpha turns HTTP API responses into threshold-signed payloads that can be verified on Solana, EVM, and Starknet. This server exposes that workflow as MCP tools, with signing behind a local, Privy, or Turnkey wallet, or, on mcp.molpha.io, behind your own wallet.

WARNING

This release targets Solana Devnet and Sepolia verifier networks. Treat it as testnet software, not a production security boundary. Write tools spend SOL, and round tools may consume subscription quota or pay USDC for x402 rounds, unless dry-run mode is enabled.

Quick start

Two recommended ways to connect:

mcp.molpha.io

Local (stdio)

Install

Nothing: add the URL to your client

npx, Node.js 24 or later

Signer

Your own wallet. The server holds no key.

Local keypair, Privy or Turnkey, held by the server

Subscription rounds

Sign in with SIWX, then execute_subscription_round

execute_subscription_round

Spending limits

Your wallet's own policy

Dry-run lock and daily caps in the server

Best for

Getting started, agents that bring their own wallet

Unattended agents, private API sources

mcp.molpha.io

Nothing to install, and no keys to hand over. Add the URL to your client.

Claude Code:

claude mcp add --transport http molpha https://mcp.molpha.io/mcp

Cursor (.cursor/mcp.json):

{ "mcpServers": { "molpha": { "url": "https://mcp.molpha.io/mcp" } } }

The read tools work straight away. The server has no wallet of its own, so name the one you mean: submitter for describe_feed and get_latest_value, payer for get_x402_status.

Anything that needs a signature is returned for your own wallet to sign, so each such operation is two or three tool calls around one signature:

Operation

Tools, in order

The wallet signs

Subscription round

begin_session → complete_session → execute_subscription_round

A text message, once per session

x402 round

prepare_x402_round → execute_x402_round

A USDC transfer, not broadcast

Solana submit

prepare_submit_attestation → send_signed_transaction

The submit transaction

autoSubmit, dryRun and encryptSecrets are not offered here. Set spending limits in the wallet's own policy, and use the local server for private API work.

Sign in with your wallet (SIWX)

A subscription round on mcp.molpha.io is authorized by a sign-in session: the wallet signs one Sign-In-With-X text message (the x402 sign-in-with-x extension, in its Solana form), and the gateway issues a short-lived bearer token. The message is not a transaction and moves no funds.

Step

Call

Result

1

describe_access({ address, owner? })

Whether the wallet is a subscription owner or delegate, and its limits

2

begin_session({ address, owner? })

The message to sign and an opaque challenge

3

The wallet signs message

An Ed25519 signature over its exact UTF-8 bytes

4

complete_session({ challenge, signature })

A sessionToken and its expiresAt

5

execute_subscription_round({ sessionToken, apiConfig, signaturesRequired, chains })

The signed attestation and verifier arguments

  • Who can sign in. The subscription owner, or a delegate the owner added with add_delegate. A delegate passes the owner's address as owner.

  • How to sign. The message as returned: raw UTF-8, no prefix, no envelope, no trailing newline. The signature may be base58, base64 or hex. solana sign-offchain-message wraps the text and is refused with invalid_signature.

  • What the token is. A credential for one wallet and one gateway, valid 30 minutes by default and never past the subscription term. It only identifies the caller: the gateway re-reads the subscription and delegate from chain on every round, so remove_delegate ends access whatever tokens exist. It passes through this server and is never stored or logged.

  • What it needs. A gateway with sessionAuth: true in GET /v1/info. Otherwise begin_session answers sessions_unavailable and x402 rounds remain available.

The full walkthrough, with a signing example, delegate setup, gateway routes and error codes, is in docs/integration.md.

Local (stdio)

The server runs on your machine and holds the signer, so one tool call runs a round or submits to Solana, and MOLPHA_DRY_RUN keeps every write a preview until you turn it off.

Needs Node.js 24 or later. Nothing to clone or build.

1. Look around, no wallet. Read-only: capabilities, providers, sourceIds, prices, feed values.

claude mcp add molpha -- npx -y @molpha/mcp@0.2.0 --read-only

2. Build with a testnet wallet. Put your signer settings in a .env file (see Setup), then check them. The doctor prints a ready-to-paste config for your client, with secrets left as placeholders:

npx -y @molpha/mcp@0.2.0 doctor

A config like this keeps every write a preview (MOLPHA_DRY_RUN=true):

claude mcp add molpha -e SIGNER_BACKEND=keychain -e KEYCHAIN_BACKEND=privy -e PRIVY_APP_ID='<privy-app-id>' -e PRIVY_APP_SECRET='<privy-app-secret>' -e PRIVY_WALLET_ID='<privy-wallet-id>' -e PRIVY_WALLET_ADDRESS='<base58-solana-address>' -e MOLPHA_DRY_RUN=true -- npx -y @molpha/mcp@0.2.0

3. Spend only when you mean to: fund the wallet, then set MOLPHA_DRY_RUN=false in the server's config. The full guide, with Cursor, VS Code, Codex and Claude Desktop, is docs/integration.md.

With no signer configured the server starts read-only and offers only the read tools (runLevel: "read-only" in get_capabilities). --read-only or SIGNER_BACKEND=none forces it.

Related MCP server: Pangle Coordinator

Tools

Tool

Access

Description

get_capabilities

Read

Run level, program id, registry version, nodes, gateways, chains, verifier addresses, x402 caps and source-payment policy.

derive_source_id

Read, local

Derive an apiConfig's sourceId (how). No transaction, no wallet.

describe_feed

Read

Read the Solana feed for (sourceId, signaturesRequired, submitter) and the signer's subscription status.

get_latest_value

Read

Read the latest attested value stored in a Solana feed account.

describe_access

Read

Whether a wallet is a subscription owner or delegate, with the plan's and the delegate's limits.

get_x402_status

Read

Quote the next x402 round, show where payment goes, and read a payer's USDC balance and remaining daily budget.

list_providers

Read

The data providers the gateway integrates and the flows it serves (providers).

get_provider

Read

One provider's flows, disclosure and ready-made feeds, each with a complete apiConfig and sourceId.

quote_source_payment

Read

Price a paywalled source with one unpaid request, including the worst-case total.

execute_subscription_round

Spends quota

Run a round paid from a USDC subscription; return the signed attestation plus verifier arguments. autoSubmit: true settles Solana in the same call.

execute_x402_round

Spends USDC

Run a round paid per request over x402; same output.

build_verifier_calldata

Read, local

Build EVM/Starknet verifier address and verify() call arguments. Calldata only: it verifies nothing.

submit_attestation

Write

Submit a signed attestation to Solana. Accepts a round tool's output unmodified.

On mcp.molpha.io the one-call round and submit tools become prepare/sign/execute pairs (above). Every tool returns structuredContent and carries MCP annotations; see Structured output and annotations. For tolerance-mode aggregation and the full configuration table, see docs/reference.md.

Round timing. Rounds run on a fixed 100 ms tick. Requests for one feed (the same source and quorum) inside one tick share a round, so a feed runs at most 10 rounds per second, and one wallet gets at most one round per tick for a feed: a second request in the same tick is answered with HTTP 409, which the round tools retry a tick later before failing with round_conflict. See Round timing.

Setup

For the local server.

Signer. Put your settings in a .env file and check them with the doctor. It prints a ready-to-paste config for your client with secrets left as placeholders. Use a dedicated testnet wallet.

SIGNER_BACKEND=memory
OWNER_KEYPAIR=/absolute/path/to/owner-keypair.json
SOLANA_RPC=https://api.devnet.solana.com
MOLPHA_DRY_RUN=true

Privy and Turnkey settings are in docs/reference.md and .env.example.

npx -y @molpha/mcp@0.2.0 doctor

Dry-run lock. MOLPHA_DRY_RUN=true locks execute_subscription_round, execute_x402_round and submit_attestation to previews. A call with dryRun: false is refused with dry_run_locked, so going live is a change to the server's config, never to one tool call.

Subscription. Subscribing debits USDC, so it is kept out of the MCP tools and runs as a CLI command with the same signer configuration. --max-price-usdc is a cap in USDC base units (6 decimals); drop --dry-run to subscribe, or use extend to extend one.

npx -y @molpha/mcp@0.2.0 provision subscribe --plan Basic --max-price-usdc 20000000 --dry-run

Client. Every client launches the local server with npx. Snippets for Claude Code, Cursor, VS Code, Codex and Claude Desktop are in docs/integration.md, ready-to-edit copies are in examples, and Claude Desktop users can install the molpha-mcp.mcpb bundle attached to each release.

Example prompts

Discover. Use Molpha to inspect the current oracle capabilities. Summarize the registry version, node count, chains, gateways, and verifier addresses. Make no writes.

Derive. Derive a Molpha sourceId for https://api.example.com/v1/finalized/price using the JSON path $.price. Show me the canonical JSON and the sourceId. Do not send a transaction.

Fetch. For that source, run a subscription round with 3 signatures for the EVM chain. Summarize the value, timestamp, registry version and verifier call. Treat the signed attestation as the trust anchor, not the value alone.

Provider. List the integrated data providers, describe TickerLayer's btcusd feed, and run it with 3 signatures for Solana, passing the apiConfig exactly as given.

Check spend. Call get_x402_status for 3 signatures. Tell me the price, where payment goes, and my USDC balance before I authorize an execute_x402_round.

Publish. If I give you a newer signed attestation, preview submit_attestation with dryRun: true, explain the exact write, and wait for my confirmation before submitting.

Use a public endpoint that returns stable, independently reproducible data: live ticker endpoints may differ across oracle nodes and fail to reach quorum.

How it works

flowchart LR
    Client["MCP client"] <-->|"stdio / HTTP"| Server["Molpha MCP server"]
    Server --> Guardrails["Dry-run · daily caps · spend caps"]
    Server --> Signer["Signer adapter<br/>local · Privy · Turnkey"]
    Server --> SDK["Molpha SDK / x402 client"]
    SDK --> Gateway["Molpha gateway"]
    Gateway <--> Nodes["Oracle node quorum"]
    SDK <--> Solana["Solana program<br/>feeds · subscriptions"]
    Gateway --> Artifact["Threshold-signed attestation"]
    Artifact --> Server
    Server --> Args["EVM / Starknet verifier args,<br/>or submit_attestation on Solana"]

The server is an adapter and policy boundary, not a new source of truth. Oracle nodes independently fetch the committed API configuration and produce one aggregate signature after reaching quorum; the server returns that self-contained signed artifact. Consumers trust a value only after verifying the signed payload against its registry version.

Development

git clone https://github.com/molpha/mcp.git
cd mcp
npm ci
cp .env.example .env
npm run build

Point a client at the built server with node /absolute/path/to/mcp/dist/src/server.js.

npm run dev          # start from TypeScript
npm run typecheck && npm test && npm run build   # run before opening a pull request
npm run gen:install  # rewrite the generated install snippets in the docs and examples
npm run smoke:pack   # pack the tarball and run it with npx over stdio (needs network)
npm run pack:mcpb    # build the Claude Desktop bundle from an allowlist

@molpha/sdk is pinned to an exact version and resolved from the npm registry; to try a local checkout run npm install ../sdk and do not commit the result. Install snippets are generated from src/install-config.ts: edit the renderers, not the generated text, because npm test fails when a generated file is out of date.

Versioning and publishing use Changesets: if a pull request changes published behavior, run npx changeset. On merge to main, release.yml opens a "Version Packages" PR and, when that merges, publishes @molpha/mcp to npm (trusted publishing, no token) and server.json to the MCP registry.

Bug reports and focused pull requests are welcome. For security issues, use GitHub's private vulnerability reporting instead of a public issue.

Documentation

License

Released under the MIT License.

Available Tools

8 tools
molpha_agent_statusGet x402 agent escrow statusA

Read the caller's x402 agent escrow (advisory: USDC ATA balance, amount committed to unsettled rounds, unsettled round count) and the next round's quoted price for a given quorum. Escrow is derived server-side per (payer, gateway). A non-existent escrow is normal pre-first-round — it's created lazily. Call before payment: "x402" fetches to see whether the escrow is already funded, or to pre-fund it out of band.

ParametersJSON Schema
NameRequiredDescriptionDefault
signaturesRequiredNo

TDQS

A4.1/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden of behavioral disclosure. It adds valuable context: escrow is derived server-side per (payer, gateway), non-existent escrow is normal and lazily created, and the balance is labeled 'advisory'. This goes beyond the simple 'Read' verb and helps agents understand edge cases.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is appropriately sized at three sentences. It front-loads the main purpose, then provides return data details, then gives usage guidance. Every sentence earns its place with no filler or repetition.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Despite lacking an output schema, the description enumerates the returned fields (USDC ATA balance, committed amount, unsettled round count, quoted price) and covers the pre-first-round normal behavior for missing escrow. The only notable gap is the ambiguous parameter mapping, but for a single-parameter read tool, this is otherwise complete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema has one optional parameter, signaturesRequired, but the description never mentions it explicitly. 'A given quorum' is a vague hint that likely maps to the parameter, but with 0% schema coverage, the description fails to compensate by clearly explaining how the parameter controls the quorum. This leaves room for ambiguity.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses the explicit verb 'Read' and names the resource ('x402 agent escrow') along with a specific secondary output ('next round's quoted price'). This clearly distinguishes it from sibling tools like molpha_get_latest or molpha_execute, which serve different purposes.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides clear contextual guidance by stating 'Call before payment' and explaining the use case (checking if escrow is already funded or pre-funding out of band). However, it does not explicitly name alternatives or exclusion criteria, so it stops short of a 5.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

molpha_derive_feedDerive Molpha feedIdA

Locally derive the feedId for a declarative spec (apiConfig + quorum) — no transaction, no subscription required. feedId = keccak256(owner || apiConfigHash || signaturesRequired); the feed itself is created lazily on-chain at first settle (subscription or x402 round). Call this to preview a feedId before molpha_fetch_verified, or to check what feedId a given spec resolves to for the current signer. Prefer settled/finalized data — independent nodes must converge on a byte-identical value to co-sign.

ParametersJSON Schema
NameRequiredDescriptionDefault
apiConfigYes
signaturesRequiredYes
rejectNonDeterministicNo

TDQS

A4.4/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the full burden and does so thoroughly. It discloses that computation is local, requires no transaction or subscription, that the feed is created lazily on-chain at first settle, and that independent nodes must converge on a byte-identical value, which implies a deterministic algorithm. This is a rich behavioral disclosure beyond simple read/write hints.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is compact and information-dense, covering purpose, formula, use cases, and determinism requirements in just a few sentences. Every sentence adds value and there is no redundancy or fluff.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The description provides strong context for the main computation and use, but it omits the return value format, which is critical since there is no output schema. It also does not cover edge cases like invalid specs or how rejectNonDeterministic affects behavior. Given the nested apiConfig complexity and absence of an output schema, the description is incomplete for full agent comprehension.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description must explain the parameters. It explains apiConfig and signaturesRequired via the formula 'feedId = keccak256(owner || apiConfigHash || signaturesRequired)', but the third parameter, rejectNonDeterministic, is never mentioned. It also does not explain the structure or required fields within apiConfig, leaving the agent to infer from the bare schema. This incomplete compensation for a low-coverage schema warrants a low score.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's function: 'Locally derive the feedId for a declarative spec (apiConfig + quorum)'. It uses a specific verb ('derive') and resource ('feedId'), and distinguishes itself from siblings by emphasizing local derivation and the fact no transaction/subscription is required, contrasting with molpha_fetch_verified.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explicitly tells when to use the tool: 'Call this to preview a feedId before molpha_fetch_verified, or to check what feedId a given spec resolves to for the current signer.' It also advises preferring settled/finalized data, giving important context about when relying on this derived value is appropriate vs. using verified data.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

molpha_describe_feedDescribe Molpha feedA

Read a feed's on-chain state (last committed value, registryVersion, signaturesRequired) and the caller's subscription status. Pass feedId directly, or apiConfig + signaturesRequired to derive it first (see molpha_derive_feed). A missing feed account is normal pre-first-settle — feeds are created lazily. feed.valueKind is the attested encoding of the stored bytes ("value" = raw payload, "hash" = keccak digest), NOT a scale hint: Molpha attests no decimals on-chain. When apiConfig is supplied, valueEncoding reports the off-chain valueTransform that produced the number, explicitly flagged as unattested.

ParametersJSON Schema
NameRequiredDescriptionDefault
feedIdNo
apiConfigNo
signaturesRequiredNo

TDQS

A5/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description fully carries behavioral transparency by clarifying that the feed account may not exist pre-settle and by distinguishing the attested valueKind from the unattested valueEncoding. It explicitly flags valueEncoding as unattested, which is critical for an agent to avoid over-trusting the output.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The five sentences each deliver a distinct fact: purpose, input modes, missing-feed behavior, valueKind semantics, and valueEncoding semantics. No sentence is redundant or filler, achieving high information density without verbosity.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the absence of an output schema, the description enumerates the key returned fields and subscription status, and explains edge-case behavior for uninitialized feeds. It even anticipates confusion around value encoding, making the tool self-contained for correct usage.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters5/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Even though the schema only lists types, the description explains the semantic roles: feedId is a direct identifier, apiConfig + signaturesRequired are used for derivation. It also adds meaning to valueTransform by linking it to the reported valueEncoding field.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The verb 'Read' immediately identifies this as an inspection tool for on-chain feed state, naming specific fields (last committed value, registryVersion, signaturesRequired). It also explicitly contrasts with the derivation tool by explaining the two ways to supply the feed identifier, distinguishing it from sibling tools.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description directly instructs when to pass feedId versus when to use apiConfig + signaturesRequired, and references molpha_derive_feed for the derivation step. It also prepares the agent for the expected 'missing feed' condition, clarifying the normal lazy-creation lifecycle.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

molpha_executeExecute Molpha data update on SolanaA

Submit a signed DataUpdate to the Solana feed via submit_data_update. Pass the output of molpha_fetch_verified through unmodified — both the artifact shape ({ dataUpdate, signature }) and the flat shape ({ s, commitmentAddr, timestamp }) are accepted, and short hex fields are zero-padded server-side. Permissionless on-chain; the owner key pays SOL fees. EVM/Starknet execution is deliberately out of scope (see molpha_verify) — use the verifier args from molpha_fetch_verified and call verify() yourself.

ParametersJSON Schema
NameRequiredDescriptionDefault
dryRunNo
resultYes

TDQS

A4.1/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the transparency burden. It discloses meaningful behaviors: the operation is permissionless, the owner key pays SOL fees, short hex fields are zero-padded server-side, and EVM/Starknet execution is deliberately excluded. It does not mention dryRun behavior or potential failure modes, but the disclosed traits go beyond what the schema alone would imply.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is three sentences and front-loads the primary action. Every clause adds substantive context—shapes, server-side padding, permissionlessness, fee payer, and out-of-scope blockchains—without being bloated or repetitive.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The description covers the main workflow and scope exclusions well, and sibling context helps orient the agent. However, it leaves the dryRun parameter unexplained and does not describe the output or return behavior, especially since there is no output schema. It is adequate but has clear gaps.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description must compensate. It does explain the accepted shapes for the result parameter and the zero-padding normalization, but it completely omits the dryRun parameter. With two parameters and one entirely unexplained, the description only partially covers the parameter semantics.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with a specific verb and resource: 'Submit a signed DataUpdate to the Solana feed via submit_data_update.' It also distinguishes itself from sibling tools by explicitly declaring EVM/Starknet execution out of scope and pointing to molpha_verify, so it is clear what this tool does and does not do.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives explicit use guidance: pass the output of molpha_fetch_verified through unmodified, both artifact and flat shapes are accepted, and EVM/Starknet users should use molpha_verify and call verify() themselves. This is a clear when-to-use and when-not-to-use with an alternative named.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

molpha_fetch_verifiedFetch verified Molpha dataA

Trigger a signing round for a feed and return the self-contained signed payload PLUS prebuilt verifier arguments for each requested chain. The signed payload is the trust anchor — verify it or forward it to a contract; do not consume value alone. Only the solana leg can be settled from this server (via autoSubmit, or by passing this tool's output to molpha_execute unmodified); evm and starknet return contract-ready calldata only — executing verify() there is the agent's job by design (see molpha_verify). payment selects how the round is paid for: "subscription" uses the caller's active USDC subscription (fails if inactive), "x402" self-funds a per-request escrow (auto-funds up to the MOLPHA_X402_MAX_PRICE_USDC / MOLPHA_X402_MAX_SPEND_PER_DAY_USDC caps), and "auto" (default) uses the subscription when active and falls back to x402 otherwise. feedId is derived from apiConfig + signaturesRequired + the signer's pubkey when omitted (see molpha_derive_feed).

ParametersJSON Schema
NameRequiredDescriptionDefault
chainsYes
dryRunNo
feedIdNo
maxAgeNo
paymentNo
apiConfigYes
autoSubmitNoSubmit the signed DataUpdate to Solana in the same call, so a round-trip settle is one call instead of two. Requires "solana" in chains. Honours dryRun and the daily execute cap; a failed submit still returns the signed artifact so it can be retried via molpha_execute.
encryptSecretsNo
signaturesRequiredNo

TDQS

A4.8/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden and it delivers: it discloses the payment fallback behavior ("auto" uses subscription then falls back to x402), autoSubmit side effects (honours dryRun, daily cap, still returns artifact on failed submit), and warns not to consume `value` alone. This is rich behavioral context beyond the schema.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is long but every sentence earns its place, covering purpose, trust warning, per-chain behavior, payment options, and feedId derivation. It is front-loaded with the main function, then layers in constraints and alternatives without redundancy.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a complex tool with no output schema, the description covers the core invocation context: return type (signed payload + verifier args), per-chain settlement paths, payment modes, and feedId fallback. It does not detail error cases or every parameter's effect, but it provides enough for an agent to select and invoke the tool correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is low (11%), so the description must compensate. It does for key parameters: payment enum values are fully explained, feedId derivation is described, and autoSubmit's requirement ("Requires 'solana' in chains") is stated. However, several parameters like dryRun, maxAge, encryptSecrets, and signaturesRequired (beyond feedId mention) receive no semantic explanation.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with a specific verb+resource: "Trigger a signing round for a feed and return the self-contained signed payload PLUS prebuilt verifier arguments for each requested chain." This clearly states what the tool does and distinguishes it from siblings like molpha_verify (execution) and molpha_get_latest (read-only data).

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explicitly explains when to use this tool versus alternatives: it names molpha_execute and molpha_verify, clarifies that only the Solana leg can be settled from this server, and says evm/starknet return contract-ready calldata only. It also references molpha_derive_feed for feedId derivation, giving clear when-to-use guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

molpha_get_capabilitiesGet Molpha capabilitiesA

Returns the current Molpha verification surface: active registryVersion, registered node set, gateway endpoints, supported chains, signing scheme, and x402 spend caps. Call first to learn where a signed result can be verified.

ParametersJSON Schema
NameRequiredDescriptionDefault
includeAbiNoInclude the EVM verifier ABI in the response.

TDQS

A4.3/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description clearly indicates this is a read-only retrieval operation ('Returns') and lists the scope of the response. With no annotations provided, this adequately communicates the behavioral nature, though it does not disclose error conditions or whether authentication is required. For a simple getter, this is sufficient transparency.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two concise sentences. The first sentence inventories the return payload, and the second provides a clear action directive. No wasted words or repetition of the tool name.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's simplicity (one optional param, no output schema), the description fully covers what the tool returns and why to call it. It positions the tool relative to the sibling verification/execution tools, making the context complete for an agent.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100% for the single optional parameter (includeAbi), and the schema description already explains its meaning. The tool description adds no extra parameter context, so the baseline score of 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states a specific action ('Returns the current Molpha verification surface') and enumerates the exact contents (registryVersion, node set, endpoints, chains, signing scheme, x402 spend caps). It also distinguishes this capability-introspection tool from siblings by noting it should be called first to learn where to verify a signed result.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The instruction 'Call first to learn where a signed result can be verified' provides clear context and ordering relative to verification workflows. While it does not explicitly name alternatives or when-not to use, the guidance is unambiguous for an agent deciding to start with capability discovery.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

molpha_get_latestGet latest Molpha feedA

Read the latest on-chain feed account for a Molpha feedId. valueKind is the attested encoding of the stored bytes ("value" = raw payload, "hash" = keccak digest) — it is not a scale hint. Molpha does not attest decimals on-chain; see molpha_describe_feed's valueEncoding for the (unsigned) apiConfig provenance.

ParametersJSON Schema
NameRequiredDescriptionDefault
feedIdYes

TDQS

A3.9/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the burden of behavioral disclosure. It adds meaningful context by explaining that valueKind is the attested encoding of stored bytes and not a scale hint, and it warns that decimals are not attested on-chain. It could go further by describing the return payload shape or error behavior, but the caveats provided are valuable and non-obvious.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is three sentences and front-loaded with the core purpose. Each sentence adds unique value: the action, the valueKind clarification, and the pointer to describe_feed. There is no redundant or filler content.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given one parameter and no output schema, the description covers the essential purpose and adds important interpretative context about valueKind and decimals. It is slightly incomplete because it does not enumerate the return fields beyond valueKind, but for a simple get-latest operation it is largely sufficient.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 0% and the description does not compensate: feedId is only restated as 'a Molpha feedId' with no explanation of how to obtain, format, or validate it. The valueKind discussion likely refers to output rather than the input parameter, so it does little to clarify the sole parameter.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with a specific verb+resource: 'Read the latest on-chain feed account for a Molpha feedId.' This clearly distinguishes the tool from siblings like molpha_describe_feed or molpha_fetch_verified by identifying the exact read operation and target.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Usage guidance is implied by the name and the main action (read latest feed), and the description points to molpha_describe_feed when decimal/encoding provenance is needed. However, it does not explicitly state when to prefer this over fetch_verified or verify, or list exclusions beyond the decimal caveat.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

molpha_verifyVerify Molpha resultA

Build the verifier address and call args for a signed DataUpdate on EVM or Starknet. This tool stops at calldata by design, not by omission: the Molpha verifier is stateless, so the agent (or its contract) executes verify() itself and the server never submits an EVM/Starknet transaction or vouches for a result it did not verify on-chain. There is no EVM/Starknet execution path anywhere in this MCP server. For Solana, submit the DataUpdate via molpha_execute (or molpha_fetch_verified autoSubmit) and read it back with molpha_get_latest — there is no separate simulate-verify path. Accepts the dataUpdate/signature objects from molpha_fetch_verified verbatim; short hex fields are zero-padded to their canonical widths server-side.

ParametersJSON Schema
NameRequiredDescriptionDefault
chainYes
signatureYes
dataUpdateYes
includeAbiNo

TDQS

A4.8/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Since no annotations are provided, the description fully carries the behavioral disclosure burden. It transparently explains that the tool stops at calldata by design, the verifier is stateless, the agent executes verify() itself, and the server never submits a transaction or vouches for off-chain results. It also notes that short hex fields are zero-padded server-side, adding detailed behavior.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is longer than minimal examples, but every sentence earns its place by providing design rationale, alternatives, and input semantics. It is front-loaded with the core purpose and then expands into necessary context. Some slight redundancy exists between 'server never submits an EVM/Starknet transaction' and 'there is no EVM/Starknet execution path anywhere in this MCP server,' but overall it is well-structured and not wasteful.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's complexity (4 params, nested objects, no annotations, no output schema), the description is remarkably complete. It explains what the tool does, how inputs are obtained, what it does not do, and how to handle alternative chains (Solana). This is sufficient for an agent to select and invoke the tool correctly without further clarification.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 0%, so the description must compensate. It adds critical meaning by stating that dataUpdate and signature come from molpha_fetch_verified verbatim and that short hex fields are zero-padded, clarifying input format expectations. However, the includeAbi parameter is not explained, leaving a minor gap for that parameter.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states a specific verb and resource: 'Build the verifier address and call args for a signed DataUpdate on EVM or Starknet.' It distinguishes from siblings by explicitly noting that for Solana, molpha_execute or molpha_fetch_verified should be used instead, and that this tool only produces calldata without executing a transaction.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides explicit when-to-use and when-not-to-use guidance. It states that for Solana, use molpha_execute or molpha_fetch_verified autoSubmit and read back with molpha_get_latest, and that there is no separate simulate-verify path. It also mentions accepting dataUpdate/signature from molpha_fetch_verified verbatim, implying a workflow order.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 8 tool updatesv0.1.2
    • First observedmolpha_agent_status
    • First observedmolpha_derive_feed
    • First observedmolpha_describe_feed
    • First observedmolpha_execute
    • First observedmolpha_fetch_verified
    • First observedmolpha_get_capabilities
    • First observedmolpha_get_latest
    • First observedmolpha_verify

TDQS

A4.2/5.0

Scored across 8 tools

Disambiguation4/5

Most tools have clear distinct purposes (e.g., derive_feed vs fetch_verified, verify vs execute), but there is some overlap: describe_feed also provides the latest committed value and can derive feed IDs, making it partially redundant with get_latest and derive_feed. The detailed descriptions help differentiate, but an agent might still hesitate between get_latest and describe_feed for reading a value.

Naming Consistency4/5

All tools share the 'molpha_' prefix and most follow a verb_noun pattern (get_latest, describe_feed, derive_feed, fetch_verified). However, 'molpha_verify' and 'molpha_execute' are bare verbs, and 'molpha_agent_status' is noun_noun, so the pattern is not fully consistent. Still, the naming is predictable and readable overall.

Tool Count5/5

With 8 tools, the server is well-scoped. Each tool covers a distinct operation in the Molpha workflow: reading state, deriving IDs, checking capabilities, fetching verified data, building calldata, and submitting to Solana. There are no redundant or extraneous tools.

Completeness4/5

The core lifecycle is covered: derive feed ID, fetch verified data, verify on EVM/Starknet, execute on Solana, and read back the result. Minor gaps exist, such as no explicit subscription management (though subscription status is readable) and no historical data access, but these are acceptable for the server's apparent purpose.

Maintenance

ActivityMaintained
ResponsivenessNo issues

Related MCP Connectors

Related MCP Servers