Forging and sharing the tools to reclaim your freedom.

Open-source building blocks for sovereign identity, data, money, connection, and trust — built on Nostr, Lightning, and zero-trust cryptography. Use one, use many, or use them all together.

Explore the ecosystem See 27 use cases View on GitHub
npx @forgesworn/toll-booth demo

A full Lightning-paywalled API on localhost in one command — or pay 21 sats for a joke on the live demo.

60open-source projects
10focus areas
33npm packages

Freedom isn’t ours to grant — it’s already yours. We forge the tools to help you reclaim what you’ve lost, keep what you hold, and share them openly: a commons that belongs to everyone. Each is a real alternative to what you use now — as good or better, and free in every sense: free of cost, free of capture, free to use without permission.

The vows we’re held to

  • Permissionless by design

    No one needs our approval, or anyone’s, to run what we make. Walk away any time and take everything — it was always yours.

  • A real alternative, not a lecture

    We win by making something you’d choose anyway. If it only appeals to people who already care about freedom, we built it badly.

  • Serve the person, not the platform

    Every tool answers to the human using it. Safety without surveillance; ownership without a landlord.

  • Value for value

    Your time, talent, or treasure keeps us building. No strings, no backers, no state — no one owns our direction.

Ecosystem

Nine stacks, one architecture

Each stack solves one problem well. Together they form a composable toolkit for sovereign commerce, identity, and trust.

L402 / Machine Payments 14

Make APIs payable, discoverable, and consumable by people and agents

Spatial / Meeting 5

Build location-aware workflows and fair meeting-point tools

Identity / Access 20

Hardware-backed Nostr signing, deterministic identities, spoken verification, encrypted access control, and decentralised identity verification

Storage / Data 3

Keep your files alive across machines you control: encrypted, content-addressed Blossom storage that is reachable without depending on one host

AI Agents 1

Give AI agents sovereign Nostr identities with trust-aware tooling

Trust / Privacy 3

Privacy-preserving trust and verifiable attestations

Cryptographic Primitives 5

Standalone cryptographic building blocks used across the ecosystem

Compliance 1

Work with jurisdiction and professional-registry intelligence

Protocol / Standards 6

Nostr protocol extensions and conformance testing

Tooling / Demos 2

Ship, harden, and demonstrate ForgeSworn libraries

Payments

How the money pieces fit

Every payment tool hangs off one idea: a constrained connection to a wallet you don’t hold. nwc-kit is that connection, farrier-kit checks it, a bridge turns any node into a wallet, and the L402 tools sell and discover paid APIs on top. Each box links to its project.

THE CONNECTION App / agent nwc-kit — a constrained NIP-47 connection to a wallet you don't hold nwc-kit the connection farrier-kit — verify BOLT-11 invoices and payment preimages farrier-kit · verify NWC User wallet over NWC nwc-lnd-bridge — make any LND node speak NWC, invoice-only by default nwc-lnd-bridge invoice-only LND / the mint funds issues invoices pays L402 · PAID APIS toll-booth — L402 middleware: gate any API behind Lightning toll-booth gates an API publish 402-announce — publish paid APIs to Nostr as kind 31402 events 402-announce 402.pub — live directory of L402 paid APIs 402.pub directory discover 402-mcp — let AI agents discover, pay and consume 402 APIs 402-mcp agent pays
Nostr · NWC Lightning · money discovery depends on the connection

The connection is the load-bearing piece; everything else is built on it. An app reaches a wallet through nwc-kit, with farrier-kit verifying invoices and preimages. That wallet is either the user’s own over NWC, or an nwc-lnd-bridge fronting a node you run. On top, toll-booth sells access to an API, 402-announce and 402.pub make it discoverable, and 402-mcp lets an agent find and pay for it — both ends settling through the same connection.

L402 / Machine Payments

Make APIs payable, discoverable, and consumable by people and agents.

toll-booth

Any API becomes a Lightning toll booth in one line. L402 middleware for Express, Hono, Deno, Bun, and Workers. Payment rails hardened by a full security review in v5.

npm install @forgesworn/toll-booth
GitHub Live demo

toll-booth-rs

L402 payment middleware for Rust. Gates any HTTP API behind Lightning payments, with trusted-proxy IP handling and zeroised key material.

GitHub

402-announce

Announce HTTP 402 services on Nostr for decentralised discovery using kind 31402.

GitHub

402-mcp

MCP client for AI agents to discover, pay for, and consume L402 and x402 APIs.

GitHub

402-pub

Live directory at 402.pub for Lightning-paid APIs.

GitHub Website

toll-booth-announce

Bridge between toll-booth and 402-announce for Nostr service announcements.

GitHub

toll-booth-dvm

Expose any toll-booth-gated API as a NIP-90 Data Vending Machine on Nostr. Results are NIP-44-encrypted to the requester; upstream access is fail-closed behind an explicit whitelist.

GitHub

toll-booth-mcp

MCP server with read-only analytics and widget UIs for toll-booth deployments. Credential-class fields are redacted before anything reaches the LLM context.

GitHub

402-indexer

Nostr-native crawler that discovers L402 and x402 paid APIs.

GitHub

payment-methods

Specifications for HTTP Payment Authentication methods (Lightning, Cashu, Session).

GitHub

aperture-phoenixd

Phoenixd backend for Aperture. No LND required.

GitHub

aperture-announce

Announce Aperture L402 services on Nostr for decentralised discovery.

GitHub

farrier-kit

Lightning payment primitives that work anywhere: BOLT-11 decoding, preimage verification, LNURL-pay resolution. Browser and Node from one codebase, with language-neutral conformance vectors.

GitHub

nwc-kit

Small NIP-47 wallet client with NIP-44 v2, signed capability discovery, authenticated responses, and bounded requests.

GitHub
toll-booth → toll-booth-announce
Spatial / Meeting

Build location-aware workflows and fair meeting-point tools.

rendezvous-kit

Find fair meeting points for N participants with isochrone intersection, venue search, and fairness scoring.

npm install rendezvous-kit
GitHub

geohash-kit

Zero-dependency geohash toolkit for encoding, decoding, polygon coverage, and Nostr location filters.

GitHub

rendezvous-mcp

MCP server for AI-driven fair meeting-point discovery.

GitHub

flock-kit

Framework-free location-safety and trusted-circle primitives: the honest radar guidance core, heading engine, cue grammar, and consented live-session rules.

GitHub

capacitor-mesh-ble

Configurable Bluetooth LE mesh transport for Capacitor apps — discovery, GATT, chunking, dedup, and multi-hop relay over an encrypted phone-to-phone mesh.

GitHub
geohash-kit → rendezvous-kit → rendezvous-mcp
Identity / Access

Hardware-backed Nostr signing, deterministic identities, spoken verification, encrypted access control, and decentralised identity verification.

nsec-tree

Deterministic Nostr sub-identity derivation. One master secret, unlimited unlinkable identities.

npm install nsec-tree
GitHub Docs

heartwood

Keyless NIP-46 bridge daemon for hardware Nostr signers (ESP32 or Ledger). Keys live on the device and never touch the networked computer.

GitHub Docs

heartwood-esp32

nsec-tree signing token for Heltec WiFi LoRa 32 V3/V4 (ESP32-S3). On-device button approval, up to 8 master identities.

GitHub Website

heartwood-ledger

Heartwood signer as a Ledger embedded app. NIP-46, NIP-44, and nsec-tree personas on the secure element — emulator-proven prototype.

GitHub

bark

NIP-07 browser extension backed by NIP-46 remote signing. No user keys stored; derived personas with Heartwood.

GitHub Website Docs

cambium

Android NIP-55 signer that holds no keys. Every request is proxied to a Heartwood hardware signer over NIP-46.

GitHub Website

sapwood

Browser-based device manager for Heartwood. Web Serial and HTTP bridge, firmware updates, policy management.

GitHub Website Docs

nsec-tree-cli

Offline-first CLI for nsec-tree with derivation, proofs, and Shamir recovery.

GitHub

nsec-tree-py

Python port of nsec-tree. Conformant deterministic sub-identity derivation, interop-tested against the TypeScript implementation.

GitHub

spoken-token

Derive time-rotating, human-speakable verification tokens from a shared secret.

GitHub

canary-kit

Deepfake-proof identity verification with per-member spoken words, silent duress detection, encrypted group sync.

GitHub Docs

signet

Decentralised identity verification for Nostr. 4 verification tiers, ZKP age proofs, Signet Score (0-200).

GitHub Website

signet-credentials

Publish, fetch, parse, and validate Signet credential events on Nostr.

GitHub

signet-login

Drop-in login SDK for Nostr-aware websites with NIP-07, bunker URI, and Signet redirect/QR flows.

GitHub

signet-protocol-rs

Rust implementation of the Signet identity protocol on Nostr.

GitHub

signet-verify

Drop-in age verification SDK for websites. One script tag, one function call.

GitHub

dominion

Epoch-based encrypted access control. HKDF content keys, AES-256-GCM, Shamir secret sharing, tiered audiences.

GitHub

covey-kit

Private circle primitives for Nostr: derived per-circle keys, roles, word-code invites, personal inboxes, and convergent membership state.

GitHub

roost-kit

Nostr transport for private circles: NIP-59 gift wraps, relay fan-out, rotating inboxes, and a pre-signed offline outbox.

GitHub

keystore-kit

Browser key-at-rest — protect a secret with a PIN, WebAuthn-PRF, or a grace window; pluggable storage and burn. Curve-agnostic, pure Web Crypto, zero runtime deps.

GitHub
nsec-tree → heartwood → bark
Storage / Data

Keep your files alive across machines you control: encrypted, content-addressed Blossom storage that is reachable without depending on one host.

wildbloom

Local-first encrypted publishing over Nostr and Blossom: files that outlive their host. Publishes to standard Blossom servers over HTTPS or optional Tor, with BitTorrent as an extra lane.

GitHub Website

wildbloom-node

Self-hosted Blossom storage node. Owner, friend and guest retention tiers over one deduplicated store; Tor is optional or run behind your own HTTPS; verified BUD-04 mirror and exact-hash repair.

GitHub

shelter-kit

Transport-neutral Blossom storage core in Rust: unbound router, BUD authorisation, content-addressed streaming store, owner/friend/guest retention and verified mirror-and-repair. A library, not a daemon.

GitHub
shelter-kit → wildbloom-node
AI Agents

Give AI agents sovereign Nostr identities with trust-aware tooling.

bray

Trust-aware Nostr MCP server for AI agents and humans. Verification, proximity, and access woven into every interaction.

npm install nostr-bray
GitHub Website
Trust / Privacy

Privacy-preserving trust and verifiable attestations.

nostr-attestations

One Nostr event kind for all attestations. NIP-VA (kind 31000).

npm install nostr-attestations
GitHub

nostr-veil

Anonymous trust assertions for Nostr. LSAG ring signatures over NIP-85.

GitHub

nostr-anon-vote

Anonymous voting on Nostr with LSAG ring signatures — double-vote prevention without revealing identity.

GitHub
Cryptographic Primitives

Standalone cryptographic building blocks used across the ecosystem.

ring-sig

SAG and LSAG ring signatures on secp256k1 for anonymous group membership proofs.

npm install @forgesworn/ring-sig
GitHub

range-proof

Pedersen commitment range proofs on secp256k1 for proving a value is in range without revealing it.

GitHub

private-equality

Socialist Millionaires' Protocol over Ristretto255 — decide whether two parties hold the same secret, revealing only one bit.

GitHub

shamir-core

Shamir's Secret Sharing over GF(256) with core utilities.

GitHub

shamir-words

Split secrets into human-readable BIP-39 word shares using Shamir's Secret Sharing.

GitHub
shamir-core → shamir-words
Compliance

Work with jurisdiction and professional-registry intelligence.

jurisdiction-kit

Professional body registries and jurisdiction intelligence for 28 countries.

npm install jurisdiction-kit
GitHub
Protocol / Standards

Nostr protocol extensions and conformance testing.

nip-drafts

36 Nostr protocol extensions for service coordination, trust, payments, disputes, key hierarchy, resource curation, and paid API discovery.

GitHub

trott-conformance

Protocol conformance test suite. Lifecycle fixtures for TROTT task kinds.

GitHub

mesh-kit

Transport-agnostic encrypted offline-mesh substrate — a MeshTransport interface, a Noise_XX SecureChannel, reliability and reconciliation, with deterministic in-memory sims.

GitHub

mesh-nostr-kit

Nostr relay transport for opaque mesh-kit frames.

GitHub

gopherkind

Signed gopherholes served from Nostr relays (kind 31436), with Gopher, Gemini, HTTP and CLI readers.

GitHub

gopherkind-protocol-py

Independent Python implementation of the Gopherkind kind 31436 grammar, interop-validated against the language-neutral fixture published by gopherkind.

GitHub
mesh-kit → mesh-nostr-kit
Tooling / Demos

Ship, harden, and demonstrate ForgeSworn libraries.

anvil

Supply-chain-hardened release tool for JS/TS libraries with reproducible-build attestation and OIDC trusted publishing.

GitHub

forgesworn-demos

Interactive demos for the ForgeSworn crypto toolkit, including range-proof, shamir-words, and ring-sig.

GitHub

See it all come together

Bray is an MCP server and CLI that give AI agents and their humans a sovereign Nostr identity — trust-aware tooling across identity, social, payments, moderation, privacy, and encrypted access, with walkthrough guides for newcomers.

Explore Bray

Find your people, not their data

flock is a group locator that guides you the last half-mile to a moving friend — by voice, sound, and vibration, enough to walk to someone with the phone still in your pocket, driving or on foot or through a crowd. When the GPS can’t be sure, it says so, instead of pointing you confidently wrong. There’s no account and no company holding you: your location is end-to-end encrypted over Nostr, shared only with the people you choose, at the precision you choose, for as long as you choose — then it’s gone. Nobody can sell it, subpoena it, or lose it in a breach. On a phone you already own — no gadget, no matching handset.

You don’t have to take our word for any of it. flock and the libraries beneath it are open source — read exactly what it does, line by line, or build your own copy from source.

Explore flock Read the code

The whole fare is the driver’s

DonkeyRide is ride-hailing with nobody in the middle taking a cut. There’s no sign-up, no phone number and no card on file — your phone makes its own key. You see the price before you request, broken down to the penny, and it is the price recorded at the end. Then you pay the driver: cash in hand, M-Pesa, or Lightning straight to their wallet. The software that put you together never touches the money, so on a £17.20 fare the driver keeps £17.20 — where a quarter of it would otherwise go to a company that did none of the driving.

The same engine dispatches nine kinds of work — locksmiths, recovery trucks, couriers, cleaners, house moves — because turning up somewhere and doing a job is one problem: agree a price, find each other, prove it happened, get paid. It is the reference implementation of the TROTT protocol, and anyone can run one.

Explore DonkeyRide Read the code