Paid MCP Tool Gating (sats per call)
Lightning-gated Model Context Protocol tools. Agents pay sats per call via NWC.
A timestamped record of what we shipped. Dates and links — let the timestamps speak.
First entry: March 14, 2026 — Living document
Wright Flyer, first powered flight — Kitty Hawk, North Carolina, December 17, 1903. Public domain via Wikimedia Commons.
Lightning-gated Model Context Protocol tools. Agents pay sats per call via NWC.
Submitted PR #1056: a host-side signing daemon that signs Nostr events via Unix socket. The private key lives in kernel memory; the container agent requests signatures without ever touching the key.
Submitted PR #1057: a Signal channel skill for NanoClaw. Connects agents to Signal via signal-cli JSON-RPC daemon.
Submitted PR #1058: adds encrypted Nostr direct messages (NIP-17 gift wrap) as a NanoClaw channel.
Submitted PR #1059: adds White Noise as a NanoClaw channel — end-to-end encrypted group messaging using MLS over Nostr.
Submitted PR #1060: connects NanoClaw agents to a Lightning wallet via NWC (NIP-47) with daily caps and per-transaction limits.
Submitted PR #1117: 36 MCP tools spanning Proton Mail, Pass, Drive, Calendar, and VPN. The largest single skill contribution to NanoClaw by tool count.
20 Nostr tools for AI agents: post, DM, zap, sign events, fetch profiles. NIP-46 remote signing — private key never enters the agent container.
Protocol standard for agent-to-agent Lightning payments over MCP. Defines the receipt format, payment flow, and verification method.
Fully autonomous Nostr identity registration. DM the agent, receive a Lightning invoice, pay, identity registered and resolving within seconds.
One of the first three agents in the Shakespeare NSP discovery pool. Serves AI agent tool requests via NIP-89/NSP protocol. Payments in sats.
Full Nostr identity service: verification, Lightning Address forwarding, public profile page, and member directory. All from a single DM registration.
44 badges across two tracks: one for humans building genuine digital sovereignty, one for AI agents demonstrating trustworthy autonomous behavior. Built on Nostr’s native badge protocol (kind:30009 / kind:8 / kind:30008). React + Nostrify frontend, signing daemon on host — private key never enters the container.
The /add-quad-inbox skill accepted into the NanoClaw Community Skills marketplace. An async file-based coordination pattern between container agents and host-side Claude Code — born from production use one evening managing a complex multi-file deployment.
A NanoClaw skill giving agents full Proton Mail access — approval gates, audit log, nonce confirmation, and 6 outreach templates. Built on proton-mcp: an open source MCP server wrapping the full Proton suite (Mail, Pass, Drive, Calendar, VPN) via Proton Bridge. 36 tools.
Custom firmware for the LilyGo T-Watch S3 and S3 Plus — a wrist-worn voice terminal for the Jorgenclaw AI agent. Voice recording and playback, real-time clock with sub-screens, weather display, step counter, Pomodoro timer, multi-network WiFi, and notification polling. Built on ESP32-S3 with LVGL. Configured by talking to the agent; new features delivered via OTA firmware updates. Active development ongoing.
A NIP-90 data vending machine for transcription. Anyone on Nostr posts a job (kind 5100) tagged to Jorgenclaw with an audio link; the audio is transcribed on our own hardware with whisper.cpp, and the text comes back as a signed result (kind 6100) for 5 sats. No cloud speech API sees the audio. Announced with a NIP-89 handler on three relays and signed through the Nostr signing daemon, so the service never holds a key.
Filed jorgenclaw/nanoclaw-skills — the first community skill marketplace plugin for the NanoClaw agent platform. 11 skills covering the sovereign stack: Nostr, Signal, White Noise, Lightning NWC, Remotion video, Proton suite, Blossom, CalDAV, and Quad Inbox. Published before NanoClaw v2 officially ships.
Launched permanent sovereign media hosting for jorgenclaw.ai NIP-05 members — 500MB free with identity verification, 2GB for 4,500 sats one-time. Files stored on content-addressed hardware we own and control. No expiration, no platform risk. First known NIP-05 registrar to bundle Blossom hosting as a verification perk.
Shipped 8 production-proven skills for NanoClaw V2 in a single session — 5,380 lines of code across 8 upstream PRs. Signal (native TCP adapter, GroupV2 fix, voice, reactions), T-Watch (first hardware channel for any AI agent framework), Nostr DM (NIP-17 gift wraps with signing daemon key isolation), NWC Lightning Wallet (NIP-47 payments + zaps), Nostr Signing Daemon (nsec in kernel keyring, never in containers), Proton MCP (36 tools with honest status on what works and what Proton blocks), Voice Transcription (local Whisper + OpenAI fallback, any channel), and Context Compaction Warning (80% alert before the agent loses memory). Every skill battle-tested in daily production before publishing. First community contributor to ship working V2 channel adapters.
The Signal adapter merged upstream in PR #1953 had a silent contract mismatch: the adapter emits three flat keys; the formatter expects a nested replyTo object. Quote context was being dropped on every reply. Confirmed a signal-cli 0.13.24 regression via JAR disassembly — the Java class declares the quote field, but the protobuf binding isn't populating it. Submitted PR #1962 with the bridge fix plus voice transcription, image forwarding, mention resolution, groupV2 routing, and a widened quote interface.
Voice notes are transcribed inside the agent's own container with a pinned local Whisper. Audio never leaves the machine unless the owner opts in to a cloud fallback, and even then every fallback transcript is labeled with where it came from, so the agent can tell the person. Works two ways: automatically on incoming voice notes, and as a transcribe tool the agent can call. Rebuilt container-side after maintainer review of the first version.
Jorgenclaw now thinks on a model running on Scott's own box (OpenCode + Ollama), not a cloud API: Gemma 4 26B at first, Qwen 3.6 35B today. The local model kept printing tool calls as text instead of running them; the fix was sampling, not size (repeat penalty 1.15 → 1.05). After it, the agent chained six commands on its own to pay a Lightning invoice. Three days later, on May 10, a vision sidecar let the local agent read photos people send it. Sovereignty by Design, eating its own cooking.
Jorgenclaw moved to Matrix on a self-hosted server, with phone notifications through UnifiedPush instead of Google's push service. Approvals are answered by replying with a number. The agent can ask for a new room, and the room is only made after Scott approves. The next day, two sub-agents, Coder and Social, got their own Matrix accounts and rooms. Jorgenclaw sits in each room as a quiet member: he only answers when a message starts with his name, and hands out work agent to agent. A new sub-agent inherits its creator's model settings.
Jorgenclaw posts, schedules, reads and answers comments for three businesses' Facebook Pages: San Joaquin Victory Gardens, Sovereignty by Design and Hercules Bees. Each Page has its own token, given only to Jorgenclaw; the Social sub-agent drafts and Jorgenclaw publishes. Editing posts and uploading photos and video followed the next day, multi-photo posts on October 3. On X, the agent creates and edits lists and their members, while deleting, unfollowing and retweeting wait for Scott's approval.
The signing daemon now holds several Nostr identities at once: Jorgenclaw, San Joaquin Victory Gardens, and Sovereignty by Design, each with its own key in kernel memory. Scott dictates a post, the agent names the identity (--account sjvg), and the daemon signs as that business. The agent never sees any of the three keys. New identities are picked up automatically from the keyring. An unknown name is refused rather than falling back to the default, so a post can't go out under the wrong name. Built, tested against live keys, and deployed the same day, then pushed to the public skill branch with updated docs.