io.github.jarod-vyent/xrpl-identity-mcp

xrpl-identity-mcp

xrpl-identity-mcp is the first identity-focused MCP server for the XRP Ledger: DIDs (XLS-40), credentials (XLS-70), multisig signer lists, and safe transaction prepare/verify/submit workflows. It prepares unsigned transactions, reads ledger state, verifies signed blobs against intent, and can submit pre-signed blobs without ever taking custody of keys.

Built by Jarod Vyent, from the team behind SciPHR.

Security Model

These invariants are core behavior:

1. No key custody. The server has no seed, private key, mnemonic, wallet import, or signing path. Signing happens in the user's wallet or agent.
2. Network is explicit. XRPL_NETWORK is mainnet, testnet, or devnet. The default is testnet. Every tool result includes network.
3. Mainnet submit is opt-in. tx_submit_signed on mainnet is blocked unless ALLOW_MAINNET_SUBMIT=true is set.
4. Prepare, verify, then submit. Write workflows return unsigned JSON with instructions to sign externally, call tx_decode_verify, and only then call tx_submit_signed.

Quickstart

Claude MCP:

claude mcp add xrpl-identity -- npx -y xrpl-identity-mcp

Generic MCP client config:

{
  "mcpServers": {
    "xrpl-identity": {
      "command": "npx",
      "args": ["-y", "xrpl-identity-mcp"],
      "env": {
        "XRPL_NETWORK": "testnet"
      }
    }
  }
}

Environment variables:

Variable	Values	Default	Purpose
XRPL_NETWORK	mainnet, testnet, devnet	testnet	Selects the XRPL network.
XRPL_ENDPOINT	WebSocket URL	Network default	Overrides the rippled WebSocket endpoint.
ALLOW_MAINNET_SUBMIT	true or unset	unset	Required for tx_submit_signed on mainnet.

Default endpoints:

Network	Endpoint
mainnet	wss://xrplcluster.com
testnet	wss://s.altnet.rippletest.net:51233
devnet	wss://s.devnet.rippletest.net:51233

Tools

Tool	What it does	Network writes?
did_resolve	Resolve an XLS-40 DID object and fetch an ipfs:// or https:// DID document when present.	No
did_prepare_set	Prepare an unsigned DIDSet transaction.	No
did_prepare_delete	Prepare an unsigned DIDDelete transaction.	No
credential_prepare_create	Prepare an unsigned CredentialCreate transaction.	No
credential_prepare_accept	Prepare an unsigned CredentialAccept transaction.	No
credential_prepare_delete	Prepare an unsigned CredentialDelete transaction.	No
credential_verify	Read a credential object and report existence, acceptance, and expiration.	No
credential_list	List up to 400 credential objects visible to an account, with issuer/subject filtering.	No
account_identity_summary	Summarize auth posture, signer list, DID presence, and credential counts for an account.	No
signer_list_prepare_set	Prepare an unsigned SignerListSet transaction for multisig create, replace, or delete.	No
tx_decode_verify	Decode a signed blob, compute hash, and compare against expected intent.	No
tx_submit_signed	Submit a pre-signed blob and poll for validation. Mainnet requires ALLOW_MAINNET_SUBMIT=true.	Yes

Example Agent Flows

Resolve a DID and read its document:

1. Call did_resolve with address set to a classic XRPL address or did:xrpl:<address>.
2. Inspect decoded.URI, decoded.Data, and decoded.DIDDocument.
3. If the URI is ipfs:// or https://, inspect document and documentSource. Only text and JSON documents are inlined; binary content (for example an image) is reported as documentSource, documentContentType, and documentByteLength with documentSkipped explaining why the body was omitted.

Issue and accept a credential on testnet:

1. Set XRPL_NETWORK=testnet.
2. Call credential_prepare_create with issuer, subject, credential type, optional expiration, and optional URI.
3. Sign the returned unsignedTx externally with the issuer account.
4. Call tx_decode_verify with the signed blob and the expected intent.
5. Call tx_submit_signed.
6. Call credential_prepare_accept for the subject, sign externally, verify with tx_decode_verify, then submit.
7. Call credential_verify to confirm accepted: true and expired: false.

Verify a signed blob before submitting:

1. Call tx_decode_verify with signedBlob and an expectedIntent partial transaction JSON.
2. Check matches and any mismatches.
3. Submit only when the decoded transaction matches the user's intent.

Development

npm install
npm run typecheck
npm run build
SKIP_INTEGRATION=1 npm test

Integration tests target testnet and are skipped when SKIP_INTEGRATION=1. To run the account summary integration test, set XRPL_INTEGRATION_ACCOUNT to a funded testnet account address.

License

MIT