Spec Driven Development
MCP Server that facilitates spec-driven development workflows, not just Vibe Coding.
作者提供的说明(英文原文)
Lightning wallet for AI agents via Nostr Wallet Connect (NIP-47): budget caps, confirm, audit log.
这三项永远不会合并成一个分数:意见、测量和人气是不同的东西。
我们还没有为它写通俗的介绍。下面是我们从注册中心读取到的事实。
选择你使用的 AI 应用,然后复制设置。
NWC_CONNECTION_STRING, NWC_DAILY_BUDGET_SATS, NWC_READ_ONLY标为机密的值是你账户的钥匙。千万不要分享给别人,也不要粘贴到聊天里。
你需要
你用的是哪个应用?
在上方选择你的应用。我们会记住它,下次按钮会显示“安装到 …”。
打开 Claude Desktop → Settings → Developer → Edit Config,把下面的内容粘贴到 claude_desktop_config.json
{
"mcpServers": {
"nwc": {
"command": "npx",
"args": [
"-y",
"nwc-mcp"
],
"env": {
"NWC_CONNECTION_STRING": "your-value",
"NWC_DAILY_BUDGET_SATS": "your-value",
"NWC_READ_ONLY": "your-value"
}
}
}
}在终端中运行这条命令
claude mcp add nwc --env NWC_CONNECTION_STRING=your-value --env NWC_DAILY_BUDGET_SATS=your-value --env NWC_READ_ONLY=your-value -- npx -y nwc-mcp运行前请先填写空着的值。
粘贴到项目中的 .cursor/mcp.json,或 ~/.cursor/mcp.json
{
"mcpServers": {
"nwc": {
"command": "npx",
"args": [
"-y",
"nwc-mcp"
],
"env": {
"NWC_CONNECTION_STRING": "your-value",
"NWC_DAILY_BUDGET_SATS": "your-value",
"NWC_READ_ONLY": "your-value"
}
}
}
}浏览器会先询问是否打开应用,然后应用会显示设置并请你确认。密钥的值会留空,由你自己填写。
粘贴到项目中的 .vscode/mcp.json
{
"servers": {
"nwc": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"nwc-mcp"
],
"env": {
"NWC_CONNECTION_STRING": "your-value",
"NWC_DAILY_BUDGET_SATS": "your-value",
"NWC_READ_ONLY": "your-value"
}
}
}
}浏览器会先询问是否打开应用,然后应用会显示设置并请你确认。密钥的值会留空,由你自己填写。
这个服务器在你的电脑上运行,而 ChatGPT 只能连接互联网上的服务器。请选择其他应用。
你的选择通过 Cookie 保存在这台设备上,无需账户。
NWC_DAILY_BUDGET_SATS envNWC_READ_ONLY env这些设置是根据作者在注册中心的条目生成的。如果 README 的写法不同,请以 README 为准。
它在你的电脑上运行;安装后,工具列表会显示在你的 AI 应用中。
我们检查的是任何人都能看到的信息;我们没有阅读代码。不适用的检查项不计入总数。 · 检查于 2026年11月7日
注册名称已通过 GitHub 账户 llmops-pro 验证,该账户拥有此仓库
我们还没有从 GitHub 读取这个仓库
我们还没有从 GitHub 读取这个仓库
它在你的电脑上运行,没有互联网端点
在你的电脑上运行,改用本地设置
它在你的电脑上运行;我们只能读取互联网端点的工具列表
与注册中心里这个分类中所有活跃的服务器比较。只有当发布者拥有该仓库时,星标数才计入。
它在 1 项适用的基础检查中通过了 1 项。我们没有阅读代码。在添加密钥或令牌之前,请先看看这个服务器要求哪些权限,并使用只具备所需权限的密钥。
你需要填写:NWC_CONNECTION_STRING
它在你的电脑上运行。你的 AI 应用会在需要时启动它,数据不会经过作者的服务器(除非它自己调用在线服务)。
GitHub 仓库最后更新于–,最新版本(0.2.3)于5个月前进入注册中心。
支持 MCP 的应用,例如 Claude Desktop、Claude Code、Cursor 和 VS Code。你的电脑上还需要有 Node.js。
同一分类中有:Spec Driven Development, Remote Desktop Commander, MemberVault MCP by usefulapi
同一分类中其他作者的服务器,按星标数排序。
如何看卡片:★ GitHub 星标i三大支柱:评价 · 检查 · 使用情况i更新 = 最新版本发布到注册中心的时间i
MCP Server that facilitates spec-driven development workflows, not just Vibe Coding.
Remote Desktop Commander: use files, terminal and processes on your own computers from any AI app.
List courses; add users to courses, remove course access or delete users in MemberVault.
按原文从作者的仓库复制。PopNx MCP 没有审查或背书其内容。HTML、图片和脚本已被移除。链接会离开本站。
A Lightning wallet for your LLM agent. MCP server that exposes Nostr Wallet Connect (NIP-47) wallet operations as tools your agent can call — read balance, generate invoices, pay invoices, pay Lightning Addresses, pay LNURLs, batch payments, keysend — all wrapped in a defense-in-depth safety stack.
Drop it into Claude Desktop, Claude Code, Cursor, or any MCP-speaking client. Hand the agent a sub-wallet (not your main one). Set a daily cap. Let it spend sats on your behalf within rails you control.
v0.2 — all spend tools shipped. Twelve tools (7 read/receive + 5 spend + 1 confirm), four safety gates, full audit log. Validated end-to-end against Alby Hub + Olympus by ZEUS routing — real outbound payment settled in 8 seconds.
The safety stack is the load-bearing reason this is usable in production: the agent can request a payment, but the *server* refuses anything that breaches your configured limits, demands a second-step confirmation if you set one, and writes every call to a structured audit log.
| Tool | Purpose |
|---|---|
nwc_get_info | Wallet capabilities, supported NIP-47 methods, node pubkey, network, alias. Call first. |
nwc_get_balance | Spendable balance in sats (and msat). |
nwc_lookup_invoice | Look up an invoice by payment hash or bolt11; returns state + preimage if settled. |
nwc_list_transactions | List transactions with filters (time range, direction, unpaid). |
nwc_decode_invoice | Parse a bolt11 locally — amount, memo, expiry, payee pubkey. No network call. |
nwc_budget_status | Current spend budget state — daily spent, caps, lifetime spent. |
| Tool | Purpose |
|---|---|
nwc_make_invoice | Create a bolt11 invoice for a given amount of sats. |
| Tool | Purpose |
|---|---|
nwc_pay_invoice | Pay a bolt11. Amount-resolution for amountless invoices via amount_override_sats. |
nwc_pay_lightning_address | Pay name@domain.tld (LUD-16). Direct LNURL-pay resolution, non-proxied by default. |
nwc_pay_lnurl | Pay a raw lnurl1... bech32 string (LUD-01). |
nwc_multi_pay_invoice | Pay up to 20 invoices in one call. Sum is checked against the budget cap atomically. |
nwc_pay_keysend | Spontaneous payment direct to a pubkey. Default-off — opt in via NWC_KEYSEND_ENABLED=true. |
nwc_confirm_payment | Execute a two-step-confirm payment by consuming its one-time token. |
The canonical buyer setup is Alby Hub PRO with a dedicated sub-wallet for the agent — that's what this server has been smoke-tested against. But the protocol is wallet-agnostic; anything that speaks NIP-47 works.
# From npm (once published)
npx -y nwc-mcp
git clone cd nwc-mcp corepack enable pnpm pnpm install pnpm build
Copy .env.example to .env and fill in your NWC connection string:
cp .env.example .env
The server auto-loads .env from the current working directory and from the project root (one level up from dist/). Env vars passed by the parent process (e.g., claude mcp add --env ...) take precedence over .env. .env is gitignored — keep your NWC string out of any committed file.
| Var | Purpose |
|---|---|
NWC_CONNECTION_STRING | nostr+walletconnect://... — get this from your wallet (in Alby Hub: Sub-wallets → Connections). Treat as a secret — anyone holding it can spend up to the daily cap. |
NWC_DAILY_BUDGET_SATS | Rolling 24h spend cap. Server refuses to start without this set. |
| Var | Default | Purpose |
|---|---|---|
NWC_TOTAL_BUDGET_SATS | unset | Lifetime spend cap. |
NWC_MAX_INVOICE_SATS | unset | Per-payment cap. |
NWC_READ_ONLY | false | If true, disables all spend tools — useful for dev / eval / curious mode. |
NWC_REQUIRE_CONFIRM | false | If true, spend tools return a one-time token; payment only executes after nwc_confirm_payment with the token. Trades agent autonomy for safety. |
NWC_KEYSEND_ENABLED | false | Opt-in toggle for nwc_pay_keysend. Off because keysend is power-user (no payment hash, weaker safety surface than bolt11). |
NWC_ALLOWED_DESTINATIONS | unset | Comma-separated allowlist of LN addresses / pubkeys / LNURLs. If set, ONLY those can be paid. |
NWC_LOG_PATH | ./nwc-mcp.log | Path to the structured audit log file. |
NWC_BUDGET_STATE_PATH | ./nwc-mcp-state.json | Path to the persisted budget tracker state. |
From this directory:
claude mcp add nwc -s project node "$(pwd)/dist/index.js"
This writes a .mcp.json in the project root. Project-scoped servers load only when Claude Code starts from this directory tree. Use /mcp inside a session to inspect what's loaded. Restart the CLI to pick up a fresh dist/index.js after a rebuild.
Switch -s project to -s user if you want the server available everywhere.
See examples/claude-desktop-config.json for the manifest snippet. Copy it into your client's config, replace the path placeholder. Because the server loads .env itself, you don't need to pass NWC_* vars through the client config — leave the env block empty.
This server is designed for use by autonomous LLM agents that hold the keys to spend real sats. The defense in depth runs in this order on every spend tool call:
NWC_ALLOWED_DESTINATIONS is set, the payee (pubkey for bolt11, LN address for LUD-16, LNURL string for LUD-01, pubkey for keysend) must match. Empty allowlist = no-op.NWC_BUDGET_STATE_PATH.NWC_REQUIRE_CONFIRM=true, returns a 16-byte hex token with 5-minute TTL instead of executing. Agent must call nwc_confirm_payment with the token. Safety re-runs on consume.The floor is your NWC connection's own daily cap, set in your wallet. This server's checks are belt-and-suspenders on top — if you trust nothing about the server, the wallet still won't spend past its connection-level cap.
Independent of what the LLM tells you, tail the audit log:
tail -n 5 nwc-mcp.log
Successful call: {"ts":"...","tool":"nwc_pay_invoice","outcome":"ok","result":{"paid_sats":50,...}}. Blocked: {"ts":"...","tool":"nwc_pay_invoice","outcome":"blocked","blocked_reason":"..."}. The audit log is append-only by intent; rotate it as part of your operational hygiene.
pnpm typecheck # tsc --noEmit
pnpm test # 25 vitest cases covering Allowlist, ConfirmStore, evaluateSafety, decodeLnurl pnpm build # produces dist/index.js (~47 KB ESM bundle)
evaluateSafety is a pure function that the unit tests exercise across the full safety matrix (read-only / amount-conflict / allowlist / budget / confirm) without touching a real wallet.
For end-to-end smoke testing against a live wallet, see paywall-mcp-test/ in the parent project — a throwaway second MCP server that exposes one paid tool (premium_compliment) and validates the full agent → invoice → pay → redeem loop.
MIT — see LICENSE.
Built by LLMOps.Pro.
npub1hdg932jvwc3jdvkqywgqv0ue4nn60exrf92asy8mtazt3hjg7d2s2yw0nw — follow, DM, zap.sovereigncitizens@getalby.com — for support zaps and "this was useful" tips.