# Nostr Signer

> Approve Nostr signatures with your own browser signer without exposing a private key.

- name: com.frontiercrown.signer/nostr-signer
- version: 0.4.0
- connection class: R0 (autonomous)
- trust: 90/100
- quality: 85/100 (good)
- owner: not claimed
- descriptor: https://api.protogrid.dev/v1/servers/com.frontiercrown.signer%2Fnostr-signer
- tools: https://api.protogrid.dev/v1/servers/com.frontiercrown.signer%2Fnostr-signer/tools

**An agent can connect right now, no human step.** Remote endpoint, no authentication, reachable on the last probe.

## Connection (mcpServers)

```json
{
  "mcpServers": {
    "nostr-signer": {
      "type": "http",
      "url": "https://signer.frontiercrown.com/mcp"
    }
  }
}
```


## Trust

- hygiene: 100
- liveness: 100
- freshness: 85
- provenance: 75
- drivers: +repository +dns-namespace +reachable +uptime-100% ~updated-40d-ago
- Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed.

## Quality 85/100 (good)

### protocol: 75 (weight 25)

- warn `protocol.modern`: newest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
- n/a `protocol.stateless`: only applies to 2026-07-28 servers
- pass `protocol.transport`: streamable HTTP
- n/a `protocol.list_ttl`: only applies to 2026-07-28 servers

### authorization: n/a (weight 15)

- n/a `auth.prm`, `auth.as_metadata`, `auth.cimd`: no remote uses OAuth
- n/a `auth.secret_in_url`: no templated URL

### tool hygiene: 86 (weight 30)

- pass `tools.descriptions`: every tool has a description
- pass `tools.description_length`: descriptions are concise
- pass `tools.schemas`: every tool has an object input schema
- pass `tools.annotations`: 17 of 17 tools declare readOnlyHint or destructiveHint
- fail `tools.directory_hints`: no tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: prepare_grynvault_supporter_invoice (idempotentHint); publish_event (idempotentHint); create_grynvault_supporter_invoice (idempotentHint); …
- pass `tools.token_cost`: about 2,162 tokens to load every tool
- pass `tools.api_dump`: tools are not a one-to-one API dump

### stability: 100 (weight 15)

- pass `stability.changes`: no tool changes in 30 days
- pass `stability.rug_pull`: no tool changed its meaning under the same name

### dependencies: n/a (weight 15)

- n/a `deps.known_vulns`, `deps.mcp_sdk_version`, `deps.resolvable`: no npm or PyPI package

- tools: 17, about 2,162 tokens to load them all
- tool set hash: e61c4c6bf7628566ddcbd7b22e28ae9d
- badge: [![protogrid quality](https://protogrid.dev/badge/com.frontiercrown.signer/nostr-signer.svg)](https://protogrid.dev/servers/com.frontiercrown.signer/nostr-signer)
- Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed.

### Tool changes

_No tool definition changes recorded._

## Remotes

- https://signer.frontiercrown.com/mcp (streamable-http, auth none, reachable true, uptime30d 1)

## Packages

_none_

## Tools (17)

- `approve_grynvault_browser_handoff`: Sign a short-lived, read-only Grynvault account handoff code so the browser tab that created it can receive its own dashboard. This does not create an invoice, publish a Nostr event, change settlement, or grant wallet custody.
- `begin_nostrconnect_pairing`: Advanced fallback: create a nostrconnect:// URI for the user to scan or open in a remote signer. Never accepts an nsec.
- `connect_bunker`: Connect a bunker:// URI only when the user knowingly supplied it. Prefer the local setup page so connection secrets are not placed in chat. Never accepts an nsec.
- `create_grynvault_nip05_invoice`: After separate explicit user confirmation, sign the prepared authorization and create exactly one pending 2,000-sat name@frontiercrown.com invoice. Does not pay, settle, activate, or prove identity.
- `create_grynvault_supporter_invoice`: After separate explicit user confirmation, sign the prepared authorization and create exactly one pending Grynvault supporter invoice. Does not pay it and never treats a redirect as settlement.
- `disconnect_signer`: Forget the in-memory signer session and all prepared events.
- `get_grynvault_account_dashboard`: Read the connected Nostr identity's Grynvault supporter, payment, and NIP-05 dashboard using a short-lived signed authorization. This does not create an invoice or change settlement.
- `get_public_key`: Return the public key exposed by the currently paired signer.
- `get_setup_url`: Return the loopback-only page used to connect a NIP-07 browser extension or an advanced NIP-46 signer.
- `get_signer_status`: Check whether a user-controlled NIP-07 or NIP-46 signer is connected.
- `prepare_event`: Validate and bind an exact unsigned Nostr event for user review. This does not sign or publish. Show the user every field before requesting a signature.
- `prepare_grynvault_nip05_invoice`: Check and normalize a name@frontiercrown.com identifier, then prepare its exact 2,000-sat invoice authorization. Does not sign, reserve the name, create, pay, or settle an invoice.
- `prepare_grynvault_supporter_invoice`: Prepare an exact, short-lived signed-authorization request for a one-time donation of 21 to 1,000,000 sats or the fixed 2,100-sat 30-day membership. Does not sign, create, pay, or settle an invoice.
- `prepare_note`: Prepare and bind an exact unsigned kind:1 note for user review. This does not sign or publish.
- `publish_event`: Publish a previously verified signed event to configured relays. Requires separate explicit user intent.
- `query_events`: Read a bounded set of verified public profile or note events from selected relays.
- `sign_event`: Ask the paired signer to approve and sign the exact event bound to a fresh intent. Requires explicit user intent and never publishes.