Every change Wellknown observed on this MCP server, newest first, with what it was before and what it became. Tool-surface changes carry the definition diff. Nothing here is edited after the fact.
Changed the definition of "cypher_mint_coupon" and "cypher_update_coupon"
Create a new operator-owned discount coupon.
The coupon owns its binding: ``tool_ids`` names the tools it
discounts, and re-pricing a tool never touches it. A coupon bound
to no tool discounts nothing, however many patrons redeem it.⟨28 unchanged words⟩ uniqueness).","type":"string"},"tool_ids":{"anyOf":[{"items":{"type":"string"},"type":"array"},{"type":"null"}],"default":null,"description":"The tools this coupon discounts — tool ids or MCP\ntool names, or ``[\"*\"]`` for every tool priced above zero."},"total_uses":{"anyOf":[{"type":"integer ⟨70 unchanged words⟩
⟨36 unchanged words⟩ rows survive (they key on coupon id). ``tool_ids`` replaces the coupon's binding — tool ids or MCP tool names, ``["*"]`` for every paid tool, ``[]`` to unbind it. RESTRICTED to operator — requires proof.
⟨33 unchanged words⟩ ":"null"}],"default":null},"tool_ids":{"anyOf":[{"items":{"type":"string"},"type":"array"},{"type":"null"}],"default":null},"total_uses":{"anyOf":[{"type":"integer ⟨32 unchanged words⟩
Changed the definition of "cypher_check_proof_status", "cypher_receive_npub_proof" and "cypher_request_npub_proof"
Check whether apreviously-cachedproofdpop_tokengrant is still valid. Mirrors ``check_oauth_status`` for the npub-proof ⟨13 unchanged words⟩ dpop_token?" before burning credits on a guaranteed failure. Expiry is read from the grant itself; the only store consulted is the patron's revocation watermark. Free, no side effects —does not evict the cache ortouchestouchnorelays.relay.
Changed the definition of "cypher_restore_neon_schema"
Re-runPrepare``ensure_schema()``thisonoperator'severydatabaseNeonVaultschemathisagain,operatorignoringuses.the breadcrumb. Diagnostic / recovery tool forthe case where thewhen NeonHTTP SQL API is returning
Changed the definition of "cypher_session_status"
⟨14 unchanged words⟩ do next. Free. Lifecycle states: - ready:OperatorVaultisANDwarmpricingandmodelfullyverifiedoperationalon—thisvaultcall.ANDProceedpricing
Certificate recorded, valid to 2026-12-31
Authorization not required
First tool surface recorded: 112 tools (server version 3.4.7)
Showing the latest 7 events. The API returns up to 500 and filters by kind: ?kind=tool_surface_changed
⟨106 unchanged words⟩ nsec signed it). On success, returnsthea new ``dpop_token``:—an Operator-signed **proof grant envelope** ``{"grant": …, "nonce": …}`` bound to thesamepatron, this challenge, and the duration the patrontoken.named. The calling application MUST rememberitthatandwhole string and pass it asthe``dpop_token``parameteron every subsequent paid tool call. Theproofgrant(aishashself-verifying;ofnothingtheabouttoken)it is storedin the vault keyed by that hash — the MCP never stores the raw token itself.here. Free.
⟨113 unchanged words⟩ the relay mailbox. **Returns** a ``dpop_token`` — thedemonstrated-proof-of-possession tokenone-timethatchallengethenoncecallingshownapplicationin theMUSTDM.rememberPassanditpasstoas``receive_npub_proof``the ``dpop_token``toparametercollectontheeveryreply.subsequentIt ispaidatoolmatchingcall.token,ThenotMCP doesanotcredential:retainonthisitsvalueownacrossitrestarts.authorizes nothing. **Lifecycle:**The``receive_npub_proof``cachedreturns the proof grant, which expires after thepatron's chosendurationduration.the patron named in their reply. When itexpires, call ``request_npub_proof``again for a fresh challenge,then wait for the user, thencall ``receive_npub_proof``. Free.