Open-source building blocks for sovereign commerce, identity, and trust.

• Machine-payable APIs and Lightning payment gating
• Deterministic Nostr identities and encrypted access control
• Privacy-preserving trust and anonymous reputation
• Spoken verification, anti-deepfake, and coercion resistance
• Fair meeting points and spatial coordination
• AI agent tooling for sovereign Nostr interaction
• Cryptographic primitives: ring signatures, range proofs, Shamir secret sharing
• Nostr protocol extensions and conformance testing

Built on Nostr, Lightning, and zero-trust cryptography. Every repo works standalone or as a composable part of the ecosystem.

Visual guides: Ecosystem overview | L402 pipeline | Identity stack

• toll-booth: Gate any HTTP API behind Lightning payments. Add toll-booth-announce, 402-announce, 402-indexer, and 402-pub for discovery. Add toll-booth-mcp for analytics and toll-booth-dvm for NIP-90 exposure.
• 402-mcp: Let AI agents discover, pay for, and consume paid APIs. Pair with toll-booth and 402-pub.
• bray: Give AI agents a sovereign Nostr identity. 106 tools across identity, social, payments, moderation, and privacy. Built on nsec-tree for identity derivation and dominion for encrypted access.
• nostr-veil: Privacy-preserving Web of Trust. Anonymous trust assertions using LSAG ring signatures over NIP-85. Built on ring-sig.
• rendezvous-kit: Build fair meeting-point or spatial apps. Add geohash-kit and rendezvous-mcp.
• spoken-token: Add human-speakable rotating verification codes. Pair with canary-kit.
• nsec-tree: Derive deterministic, unlinkable Nostr sub-identities from one master secret. Use it when one seed needs separate identities for roles, apps, bots, or privacy boundaries. Add nsec-tree-cli for an offline-first CLI. Used by bray and signet.
• canary-kit: Build spoken verification, duress detection, or privacy-preserving identity flows. Add ring-sig, range-proof, and shamir-words.
• signet: Decentralised identity verification for Nostr. 4 verification tiers, ZKP age proofs, Signet IQ scoring. Built on nostr-attestations and range-proof.
• dominion: Encrypted access control with epoch-based key rotation. Tiered audiences, HKDF content keys, Shamir secret sharing. Used by bray.
• nostr-attestations: One Nostr event kind for all attestations (NIP-VA, kind 31000). Credentials, endorsements, vouches, provenance, licensing, and trust.
• jurisdiction-kit: Work with jurisdiction and professional-registry data. Pair with canary-kit or signet for identity-sensitive flows.
• nip-drafts: 30 Nostr protocol extensions covering service coordination, trust, payments, disputes, key hierarchy, and encrypted access.

• toll-booth -> toll-booth-announce -> 402-announce -> 402-indexer -> 402-pub -> 402-mcp: Gate an API, announce it on Nostr, index it, publish a directory, let AI agents consume it.
• toll-booth -> toll-booth-mcp: Monitor a toll-booth with analytics dashboards and widget UIs.
• geohash-kit -> rendezvous-kit -> rendezvous-mcp: Encode spatial data, compute fair meeting points, expose to AI agents.
• nsec-tree -> bray -> dominion: Derive sub-identities, give them to an AI agent, gate content access by tier and epoch.
• nsec-tree -> spoken-token / canary-kit: Derive purpose-specific Nostr identities, attach spoken verification or higher-trust identity flows.
• ring-sig -> nostr-veil: Anonymous trust assertions -- prove group membership without revealing who endorsed.
• nostr-attestations -> signet -> canary-kit / jurisdiction-kit: Issue verifiable attestations, verify identities with tiers and ZKP age proofs, add jurisdiction context.
• spoken-token -> canary-kit -> ring-sig / range-proof / shamir-words: Spoken verification, privacy-preserving proofs, human-recoverable secret handling.
• shamir-core -> shamir-words -> nsec-tree-cli: Core secret sharing, BIP-39 word output, offline identity recovery.

Make APIs payable, discoverable, and consumable by people and agents.

Start with toll-booth to put a Lightning paywall in front of an API. Add announcement and indexing repos for discovery, then 402-mcp when the client is an AI agent.

Build location-aware workflows and fair meeting-point tools.

Start with rendezvous-kit for meeting-point logic. Use geohash-kit for geospatial primitives and Nostr location filters. Use rendezvous-mcp when you want that flow exposed to agents.

Build spoken verification, anti-deepfake, deterministic Nostr identity trees, encrypted access control, and decentralised identity verification.

Start with spoken-token for human-speakable rotating codes, nsec-tree for deterministic unlinkable Nostr identities, signet for multi-tier identity verification, or canary-kit for full spoken-verification flows with duress detection and group sync.

Give AI agents sovereign Nostr identities with trust-aware tooling.

Privacy-preserving trust and verifiable attestations.

Standalone cryptographic building blocks used across the ecosystem.

Work with jurisdiction and professional-registry intelligence for regulated or identity-sensitive flows.

Nostr protocol extensions and conformance testing.