MCP server for Lightning-powered M2M API calls with L402 payment protocol support. Automatically handles L402 payment challenges and integrates with the Alby Lightning API.
Two tools with basic descriptions and partial schemas. fetch_paid_api has a clear description (145 chars) and complete input schema with types and descriptions for all three parameters (url, params, max_budget_sats). discover_agents also has a clear description (82 chars) and complete schema with two parameters (query, directory_url). However, neither tool documents output schema structure, responses are returned as raw strings without field definitions. No error handling guidance for LLMs (e.g., 'if payment fails, try X'). Tool names follow verb_noun pattern (fetch_, discover_) which is good. Parameters lack constraints (e.g., max_budget_sats unbounded, no regex for URL format). No tool annotations (readOnlyHint, destructiveHint, idempotentHint). Risk classification present (READ_ONLY) but not integrated into tool metadata.
Search the OpenBolt directory for available paid API agents.
Fetch data from an external agent API. Automatically handles L402 Lightning payments if the endpoint is gated behind a 402 Payment Required response. The payment is made via the Alby API and the cryptographic preimage is used to authorize the second request.
Output schemas not documented. Both tools return raw strings (response.text) with no field definitions. LLMs cannot parse structure or plan downstream calls.
No error recovery guidance. fetch_paid_api returns error strings but does not tell LLM what to do next (retry, ask user, abort). E.g., 'Error paying invoice via Alby: {e}' gives no actionable path.
Parameters lack constraints. max_budget_sats has no min/max bounds (unbounded integer). url parameter has no format validation (could accept invalid URIs). directory_url defaults to localhost, which is unsafe for production.
Tool annotations missing. No readOnlyHint, destructiveHint, or idempotentHint metadata. fetch_paid_api initiates payments (destructive) but this is not declared in schema.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | D | 54 | 2026-07-28+ | v2 |
No confirmation or dry-run for irreversible operations. fetch_paid_api makes Lightning payments without a confirmation step. Agents can accidentally trigger real payments.