@odatano/nightgate-mcp

MCP server that lets AI agents use NIGHTGATE, the Midnight blockchain attestation layer: anchor documents, prove zero-knowledge predicates over hidden fields, manage disclosure grants, verify everything against live contract state, and poll async jobs. Wallet lifecycle (connect, send, deploy) is deliberately not exposed.

Requirements

• Node.js >= 20

• A running NIGHTGATE instance (>= 0.14.0 for the full tool set)

Related MCP server: aip-identity

Getting a NIGHTGATE instance

The fastest way is the official Docker image; no Node setup, no host app (published from the NIGHTGATE repo on every release, details in its docs/docker.md):

docker run -d --name nightgate -p 4004:4004 \
  -e ENCRYPTION_KEY=$(openssl rand -hex 32) \
  -e NIGHTGATE_HTTP_PASSWORD=change-me \
  -v nightgate-data:/data \
  ghcr.io/odatano/nightgate:latest

That container targets Midnight preprod by default, serves with HTTP basic auth (nightgate / your password), persists its database in the nightgate-data volume, and proves in-process (wasm), so no proof server is needed to start. Point this MCP server at it with:

NIGHTGATE_BASE_URL=http://localhost:4004
NIGHTGATE_USERNAME=nightgate
NIGHTGATE_PASSWORD=change-me

For agent operation, create a scoped grant once (as the operator, e.g. via curl against createAgentGrant) and hand the returned ngat_... token to the agent as NIGHTGATE_TOKEN; the write tools are then limited to the grant's allowlist, budget and pinned session.

Alternatively any CAP app using the @odatano/nightgate plugin works, e.g. the NIGHTGATE repo itself via npm run dev.

Setup

npm install
npm run build

Configuration is environment-driven:

Use with Claude Code

claude mcp add nightgate \
  --env NIGHTGATE_BASE_URL=http://localhost:4004 \
  --env NIGHTGATE_USERNAME=alice \
  -- node /path/to/NIGHTGATE-MCP/dist/index.js

Or in a project .mcp.json:

{
  "mcpServers": {
    "nightgate": {
      "command": "node",
      "args": ["/path/to/NIGHTGATE-MCP/dist/index.js"],
      "env": {
        "NIGHTGATE_BASE_URL": "http://localhost:4004",
        "NIGHTGATE_USERNAME": "alice"
      }
    }
  }
}

Tools

All verification tools return verified: false as a clean negative rather than an error when the attestation or proof is absent. Write tools require a connected wallet session (sessionId); creating sessions stays outside MCP by design.

Integration check

npm run integration

Runs an in-memory MCP client against the server: asserts the tool set, schemas, and argument validation. Optional live round-trip:

NIGHTGATE_LIVE=1 NIGHTGATE_BASE_URL=... NIGHTGATE_USERNAME=... \
NIGHTGATE_TEST_CONTRACT=<vault address> NIGHTGATE_TEST_PAYLOAD_HASH=<64 hex> \
npm run integration

License

Apache-2.0