Open-source building blocks for sovereign commerce, identity, and trust

Composable tools built on Nostr, Lightning, and zero-trust cryptography. Libraries, CLIs, MCP servers, and protocol specs. Use one, use many, or use them all together.

Explore the ecosystem View on GitHub
30open-source projects
8focus areas
21npm packages
Ecosystem

Eight stacks, one architecture

Each stack solves one problem well. Together they form a composable toolkit for sovereign commerce, identity, and trust.

L402 / Machine Payments 11

Make APIs payable, discoverable, and consumable by people and agents

Spatial / Meeting 3

Build location-aware workflows and fair meeting-point tools

Identity / Access 6

Spoken verification, deterministic Nostr identities, encrypted access control, and decentralised identity verification

AI Agents 1

Give AI agents sovereign Nostr identities with trust-aware tooling

Trust / Privacy 2

Privacy-preserving trust and verifiable attestations

Cryptographic Primitives 4

Standalone cryptographic building blocks used across the ecosystem

Compliance 1

Work with jurisdiction and professional-registry intelligence

Protocol / Standards 2

Nostr protocol extensions and conformance testing

L402 / Machine Payments

Make APIs payable, discoverable, and consumable by people and agents.

toll-booth

Any API becomes a Lightning toll booth in one line. L402 middleware for Express, Hono, Deno, Bun, and Workers.

npm install @forgesworn/toll-booth
GitHub

402-announce

Announce HTTP 402 services on Nostr for decentralised discovery using kind 31402.

GitHub

402-mcp

MCP client for AI agents to discover, pay for, and consume L402 and x402 APIs.

GitHub

402-pub

Live directory at 402.pub for Lightning-paid APIs.

GitHub Website

toll-booth-announce

Bridge between toll-booth and 402-announce for Nostr service announcements.

GitHub

toll-booth-dvm

Expose any toll-booth-gated API as a NIP-90 Data Vending Machine on Nostr.

GitHub

toll-booth-mcp

MCP server with read-only analytics and widget UIs for toll-booth deployments.

GitHub

402-indexer

Nostr-native crawler that discovers L402 and x402 paid APIs.

GitHub

payment-methods

Specifications for HTTP Payment Authentication methods (Lightning, Cashu, Session).

GitHub

aperture-phoenixd

Phoenixd backend for Aperture. No LND required.

GitHub

aperture-announce

Announce Aperture L402 services on Nostr for decentralised discovery.

GitHub
toll-booth → toll-booth-announce
Spatial / Meeting

Build location-aware workflows and fair meeting-point tools.

rendezvous-kit

Find fair meeting points for N participants with isochrone intersection, venue search, and fairness scoring.

npm install rendezvous-kit
GitHub

geohash-kit

Zero-dependency geohash toolkit for encoding, decoding, polygon coverage, and Nostr location filters.

GitHub

rendezvous-mcp

MCP server for AI-driven fair meeting-point discovery.

GitHub
geohash-kit → rendezvous-kit → rendezvous-mcp
Identity / Access

Spoken verification, deterministic Nostr identities, encrypted access control, and decentralised identity verification.

nsec-tree

Deterministic Nostr sub-identity derivation. One master secret, unlimited unlinkable identities.

npm install nsec-tree
GitHub Docs

spoken-token

Derive time-rotating, human-speakable verification tokens from a shared secret.

GitHub

nsec-tree-cli

Offline-first CLI for nsec-tree with derivation, proofs, and Shamir recovery.

GitHub

canary-kit

Deepfake-proof identity verification with per-member spoken words, silent duress detection, encrypted group sync.

GitHub Docs

signet

Decentralised identity verification for Nostr. 4 verification tiers, ZKP age proofs, Signet IQ.

GitHub

dominion

Epoch-based encrypted access control. HKDF content keys, AES-256-GCM, Shamir secret sharing, tiered audiences.

GitHub
spoken-token → canary-kit
AI Agents

Give AI agents sovereign Nostr identities with trust-aware tooling.

bray

Trust-aware Nostr MCP for AI and humans. 234 tools across identity, social, payments, dispatch, badges, communities, calendar, listings, search, moderation, privacy, spells, and encrypted access.

npm install nostr-bray
GitHub Website
Trust / Privacy

Privacy-preserving trust and verifiable attestations.

nostr-attestations

One Nostr event kind for all attestations. NIP-VA (kind 31000).

npm install nostr-attestations
GitHub

nostr-veil

Anonymous trust assertions for Nostr. LSAG ring signatures over NIP-85.

GitHub
Cryptographic Primitives

Standalone cryptographic building blocks used across the ecosystem.

ring-sig

SAG and LSAG ring signatures on secp256k1 for anonymous group membership proofs.

npm install ring-sig
GitHub

range-proof

Pedersen commitment range proofs on secp256k1 for proving a value is in range without revealing it.

GitHub

shamir-core

Shamir's Secret Sharing over GF(256) with core utilities.

GitHub

shamir-words

Split secrets into human-readable BIP-39 word shares using Shamir's Secret Sharing.

GitHub
shamir-core → shamir-words
Compliance

Work with jurisdiction and professional-registry intelligence.

jurisdiction-kit

Professional body registries and jurisdiction intelligence for 30+ countries.

npm install jurisdiction-kit
GitHub
Protocol / Standards

Nostr protocol extensions and conformance testing.

nip-drafts

30 Nostr protocol extensions: service coordination, trust, payments, disputes, key hierarchy, encrypted access.

GitHub

trott-conformance

Protocol conformance test suite. Lifecycle fixtures for TROTT task kinds.

GitHub

See it all come together

Bray is a CLI and MCP server that gives AI agents a sovereign Nostr identity -- trust-aware tooling across identity, social, payments, moderation, privacy, and encrypted access.

Explore Bray