Nostr Bray MCP Policy · 240 Tools

POLICY

How to control Nostr Bray

PolicyLayer is an MCP gateway — it sits between your AI agents and Nostr Bray, and nothing reaches the server without passing your rules. These are the rules we recommend:

Block financial tools by default

{
  "marketplace-pay": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Requires human approval."
      }
    ]
  }
}

Financial tools should be explicitly enabled per use case, not open by default.

Deny destructive operations

{
  "blossom-delete": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "article-publish": {
    "limits": [
      {
        "counter": "article-publish_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "article-list": {
    "limits": [
      {
        "counter": "article-list_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Nostr Bray — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON NOSTR BRAY →

Instant setup, no code required.

FULL CATALOGUE

All 240 Nostr Bray tools

FINANCIAL 3 tools

Financial marketplace-pay Pay an L402 invoice via NWC and store credentials for authenticated API calls. Financial zap-make-invoice Generate a Lightning invoice via NWC to receive payments. Financial zap-send Pay a Lightning invoice via Nostr Wallet Connect (NWC). SPENDS REAL SATS. Decodes the invoice and shows amount

DESTRUCTIVE 10 tools

Destructive blossom-delete Delete a blob from a blossom media server by SHA-256 hash. Destructive group-remove-user Remove a user from a NIP-29 group (kind 9001 admin event). Destructive label-remove Delete a label event via kind 5 deletion. Only works for labels you authored. Destructive marketplace-credentials-clear Clear all stored L402 credentials from memory. Use when switching identity or cleaning up. Destructive marketplace-retire Retire (delete) a service announcement by publishing a kind 5 deletion event. The service will no longer appea Destructive tombstone Overwrite an addressable event (kind 30000-39999) with empty content, effectively deleting it from relays. Use Destructive trust-revoke Revoke a previously issued attestation. Active identity must match the original attestor. Destructive vault-revoke Revoke a pubkey from the vault config. Fetches the current config, adds the pubkey to the revoked list, signs, Destructive zap-wallet-clear Remove the NWC wallet for the active identity. Falls back to the global NWC_URI if set.

EXECUTE 13 tools

Execute cast-spell Execute a NIP-A7 Spell (kind 777). Fetches the Spell event, resolves runtime variables ($me → your pubkey, $co Execute execute-action Execute an action found via search-actions. Pass the exact action name and its parameters. Execute identity-restore-shamir Reconstruct a secret from Shamir shard files. Returns the restored npub for verification. Execute identity-switch Switch the active Nostr identity. ALL subsequent tool calls will sign events and query relays as the new ident Execute marketplace-probe Send an HTTP request to an endpoint and inspect the response. Execute nip44-encrypt Encrypt a plaintext string using NIP-44 for a recipient pubkey. Uses the active identity\ Execute onboard-verified Guided workflow to build a verified trust profile. Shows your current Signet tier, what steps remain (self-dec Execute relay-auth Authenticate to a relay that requires NIP-42 AUTH. Connects to the relay, waits for an AUTH challenge, signs a Execute trust-attest-chain Follow endorsement references to build a transitive trust chain. Starting from a subject, queries attestations Execute trust-ring-lsag-sign Create an LSAG (Linkable SAG) signature with a key image tied to an election ID. If the same signer signs twic Execute trust-ring-prove Create a ring signature proving anonymous group membership. A verifier can confirm Execute trust-spoken-verify Verify a spoken token response against the shared secret. Execute vault-encrypt Encrypt content using a content key derived from the active identity for a given tier and epoch. No network ac

WRITE 76 tools

Write article-publish Publish a long-form article (NIP-23, kind 30023). Creates a replaceable event with title, markdown content, an Write badge-accept Accept a badge and add it to your profile badges (NIP-58, kind 30008). Updates your profile badge list preserv Write badge-award Award a badge to one or more recipients (NIP-58, kind 8). The badge must be defined first via badge-create. Write badge-create Define a new badge (NIP-58, kind 30009). Creates a replaceable badge definition with name, description, and op Write blossom-mirror Upload a file to multiple blossom servers for redundancy. Provide a source URL (existing blob), file path, or Write blossom-repair Find a broken blob on other blossom servers by SHA-256 hash and optionally re-upload to a target server. Searc Write blossom-servers Read or update your preferred blossom server list (kind 10063). Without servers parameter, reads the current l Write blossom-upload Upload a file to a blossom media server. Returns the blob URL and SHA-256 hash. Write calendar-create Create a calendar event (NIP-52). Auto-detects date-based (kind 31922, YYYY-MM-DD) vs time-based (kind 31923, Write calendar-rsvp RSVP to a calendar event (NIP-52, kind 31925). Pass the event coordinate (kind:pubkey:d-tag format) and your s Write canary-beacon-create Create an encrypted liveness beacon for a CANARY group. Write canary-group-create Create an encrypted CANARY verification group. All members share a secret seed Write canary-group-join Join an existing CANARY group using a shared seed (received via NIP-17 DM). Write canary-session-create Create a CANARY verification session for two-party spoken verification. Write community-approve Approve a post in a community you moderate (NIP-72, kind 4550). Wraps the original event for inclusion in the Write community-create Create a moderated community (NIP-72, kind 34550). Communities are open and approval-based, different from NIP Write community-post Post to a community (NIP-72). Creates a kind 1 note with an a-tag pointing to the community. A moderator must Write contacts-follow Follow a Nostr pubkey. Fetches current contact list, adds the pubkey, publishes updated kind 3. If the list wo Write contacts-unfollow Unfollow a Nostr pubkey. Fetches current contact list, removes the pubkey, publishes updated kind 3. If the li Write dispatch-ack Acknowledge receipt of a dispatch task. Tells the sender Write dispatch-cancel Cancel a dispatch task you previously sent or received. Notifies the other party that the task should be aband Write dispatch-capability-publish Publish your agent\ Write dispatch-failure Report that a dispatch task failed after you attempted it. Use when you tried to complete the task but encount Write dispatch-propose Propose an alternative approach for a dispatch task. Use when you can\ Write dispatch-refuse Refuse a dispatch task you cannot or should not complete. Tells the sender Write dispatch-reply Send a result back for a completed dispatch task. Use after finishing a think or build task received via dispa Write dispatch-send Send a collaboration task to a trusted Nostr identity. Think tasks request read-only code analysis. Build task Write dispatch-status Send a status update to collaborators. Use to broadcast availability (e.g. Write dm-by-name Send an encrypted DM to a contact by name — no pubkey needed. Searches your contacts, finds the match, and sen Write dm-send Send an encrypted direct message. Accepts any identifier: name, NIP-05, npub, or hex pubkey. Default: NIP-17 g Write group-add-user Add or update a user\ Write group-create Create a NIP-29 group (kind 9004 admin event). The relay assigns membership state from the event. Optionally s Write group-send Send a message to a NIP-29 group. Write group-set-roles Define role names and their permissions in a NIP-29 group (kind 9007 admin event). Each role entry is { name, Write group-update Update NIP-29 group metadata (kind 9002 admin event). Supply only the fields you want to change. Write handler-publish Publish a NIP-XX Machine Application Handler card (kind 31990) advertising MCP transport endpoints. Lets other Write identity-create Generate a fresh Nostr identity with a BIP-39 mnemonic seed. Returns { npub, mnemonic }. Store the mnemonic se Write identity-migrate Migrate from an old identity to the active one. Shows preview first — set confirm: true to execute. Publishes Write identity-prove Create a cryptographic linkage proof between the master key and the active identity. Write identity-restore Re-sign migratable events (profile, contacts, relay list) under the active identity. Skips attestations (trust Write identity-setup Set up a multi-persona identity from the current master secret. Derives named persona sub-identities, optional Write label-create Label an event, pubkey, or addressable event using NIP-32 (kind 1985). Write label-self Self-label your own content (kind 1985). Useful for content warnings, categories, Write list-followset-create Create a named follow set (NIP-51, kind 30000). Write list-followset-manage Add or remove pubkeys from a named follow set (NIP-51, kind 30000). Write list-mute Manage your mute list (NIP-51, kind 10000). Add or remove pubkeys, event IDs, keywords, or hashtags. Write list-pin Manage pinned events (NIP-51, kind 10001). Add or remove event IDs from your pin list. Write listing-close Mark a classified listing as sold or closed (NIP-99, kind 30402). Write listing-create Create a classified listing (NIP-99, kind 30402). Publishes a replaceable event with title, Write marketplace-announce Publish a kind 31402 service announcement on Nostr. Write marketplace-update Update an existing kind 31402 service announcement. Same pubkey + identifier replaces the previous version (NI Write nip-publish Publish a community NIP (kind 30817) — a custom protocol specification on Nostr. Write post-queue-cancel Cancel a scheduled post by event ID. Removes it from the queue. Write post-schedule Schedule a Nostr event for future publication. Signs the event now and queues it on disk. Use nostr-bray publi Write privacy-commit Create a Pedersen commitment to a secret value. Returns a public commitment point (safe to share) and a blindi Write privacy-publish-proof Publish a range proof as a kind 30078 (NIP-78) Nostr event. Includes the commitment, proof, range description, Write publish-event Sign and publish a Nostr event with any kind, content, and tags. Use for custom or experimental event kinds no Write relay-add Add a single relay to the active identity\ Write relay-set Publish a kind 10002 relay list for the active identity. Warns if a relay list already exists. Write safety-activate Switch to an alternative identity configuration. Write safety-configure Configure an alternative identity persona and pre-warm relay connections. Write signet-challenge Publish a kind 31000 challenge event against a verifier suspected of misconduct. Provide a reason code and opt Write signet-policy-set Publish a kind 30078 Signet community policy signed by the active identity. Sets minimum verification tiers fo Write signet-vouch Vouch for another user by publishing a kind 31000 attestation signed by the active identity. Use Write trust-attest-temporal Create and publish an attestation with occurredAt field — records when the attested event actually happened, w Write trust-claim Make a direct statement about another identity — an endorsement, review, vouch, or any attestor-originated cla Write trust-proof-publish Publish a cryptographic linkage proof as a kind 30078 event. Requires confirmation — this is irreversible. Write trust-request Send an attestation request to another Nostr identity via NIP-17 encrypted DM. Write vault-create Create a Dominion vault config with named access tiers. Signs and publishes the config as a kind 30078 event. Write wiki-publish Publish or update a wiki article (NIP-54, kind 30818). Creates a replaceable event keyed by topic (d-tag). Con Write zap-wallet-set Set the NWC wallet URI for the active identity. Each persona can have its own Lightning wallet.

READ 138 tools

Read article-list List long-form article metadata (NIP-23, kind 30023) by author — titles, slugs, summaries, and dates without f Read article-read Read long-form article(s) (NIP-23, kind 30023) by author. Optionally fetch a specific article by slug. Accepts Read badge-list List badges defined by an author or displayed on a profile (NIP-58). Mode Read blossom-check Verify a blob exists and is intact on a blossom server. HEAD request to check existence, optionally downloads Read blossom-discover Discover blossom servers used by contacts. Fetches kind 10063 (NIP-B7 server list) events from the given pubke Read blossom-list List blobs uploaded by a pubkey on a blossom server. Read blossom-usage Check storage usage across blossom servers for a pubkey. Returns per-server blob count and total size, plus ag Read blossom-verify Verify all media URLs in a note are still accessible. Pass the note content and get back alive/broken status p Read calendar-read Fetch calendar events (NIP-52, kinds 31922 + 31923) by author and/or date range. Accepts any identifier for au Read canary-beacon-check Check a CANARY beacon\ Read canary-duress-detect Check if a spoken verification word is a duress signal. Read canary-duress-signal Generate a duress signal for a CANARY group. Returns the duress word (indistinguishable Read canary-group-current Get the current verification word for a CANARY group. Read canary-group-members List members and admins of a CANARY group. Read canary-group-verify Verify a spoken word against a CANARY group. Read canary-session-current Get the current verification words for an active CANARY session. Read canary-session-verify Verify a spoken word against an active CANARY session. Read community-feed Read approved posts in a community (NIP-72). Fetches kind 4550 approved posts and unwraps the original content Read community-list Discover communities on Nostr (NIP-72). Fetches kind 34550 community definitions. Read contacts-get Fetch the contact list (kind 3 follows) for a Nostr identity. Accepts any identifier: name, NIP-05, npub, or h Read contacts-search Search your contacts by name, display name, or NIP-05. Resolves profiles in one batch — much faster than fetch Read count Count events matching a filter on the active identity\ Read decode Decode a nip19 entity (npub, nsec, note, nevent, nprofile, naddr) or nostr: URI to its components. Read dispatch-capability-discover Discover dispatch-capable agents on Nostr. Searches for NIP-89 capability cards (kind 31990) tagged with the d Read dispatch-capability-read Read a specific agent\ Read dispatch-check Check for incoming collaboration tasks from trusted Nostr identities. Returns dispatch messages: think tasks, Read dispatch-query Ask the task sender a clarifying question before delivering results. Use mid-task when you need more informati Read dm-conversation Read DM conversation with a specific person. Accepts any identifier: name, NIP-05, npub, or hex pubkey. Shows Read dm-read Read direct messages addressed to the active identity. Decrypts both NIP-17 (gift wrap) and NIP-04 (legacy). E Read encode-naddr Encode an addressable event reference as a bech32 naddr. Read encode-nevent Encode an event ID with relay hints and optional author as a bech32 nevent. Read encode-note Encode a hex event ID as a bech32 note. Read encode-nprofile Encode a hex pubkey with relay hints as a bech32 nprofile. Read encode-npub Encode a hex public key as a bech32 npub. Read encode-nsec Encode a hex private key as a bech32 nsec. WARNING: private key material flows through the MCP transport. Read feed-by-name Fetch recent posts by a contact, searching by name instead of pubkey. Returns an error if zero or multiple con Read feed-discover Discover new accounts worth following, ranked by trust score. Strategies: trust-adjacent (contacts-of-contacts Read fetch Fetch events by nip19 code (note, nevent, nprofile, npub, naddr). Resolves the entity and queries relays. Read filter Test if a Nostr event matches a given filter. Returns true or false. Read group-chat Fetch recent chat messages from a NIP-29 group. Read group-info Fetch group metadata (name, about, picture) for a NIP-29 group. Read group-members List members of a NIP-29 group. Read handler-discover Discover MCP-capable handlers on Nostr. Searches for kind 31990 events that include mcp transport tags. Option Read hashtag-feed Fetch notes (kind 1) with a specific hashtag. Uses standard tag filtering — works on all relays, no NIP-50 req Read identity-accept-migration Accept a migration from an external signer (Amber, nsec.app, etc). Signs and publishes the acceptance event vi Read identity-backup Fetch profile, contacts, relay list, and attestations for a pubkey. Returns a portable JSON bundle (no private Read identity-backup-shamir Split the active identity\ Read identity-derive Derive a child Nostr identity from the master key by purpose and index. Deterministic — same inputs always pro Read identity-derive-persona Derive a named persona (e.g. Read identity-list List all known identities (master + all derived). Returns array of { npub, purpose, index, personaName }. Neve Read identity-recover Recover a master identity from Shamir word-list shard files. Reconstructs the secret, derives the master npub, Read key-decrypt Decrypt an ncryptsec (NIP-49) with a password. Returns the derived pubkey for verification — never the raw key Read key-encrypt Encrypt a secret key with a password (NIP-49 ncryptsec). Returns the ncryptsec string and the derived pubkey. Read key-public Derive a public key (hex + npub) from a secret key (nsec or hex). WARNING: the secret key is transmitted throu Read label-read Query NIP-32 labels for a target event, pubkey, or address. Read label-search Find all events/pubkeys that have been given a specific label in a namespace. Read list-bookmark Manage bookmarks (NIP-51). Without a name, manages general bookmarks (kind 10003). Read list-bookmark-read Read bookmarks. Without a name, reads general bookmarks (kind 10003). Read list-check-muted Check if a pubkey, event ID, keyword, or hashtag is on your mute list. Read list-followset-read Read a named follow set by name (NIP-51, kind 30000). Read list-mute-read Read your current mute list (NIP-51, kind 10000). Returns all muted pubkeys, events, keywords, and hashtags. Read list-pin-read Read your pinned events list (NIP-51, kind 10001). Read listing-read Read classified listing(s) (NIP-99, kind 30402) by author and optional slug. Read listing-search Search classified listings (NIP-99, kind 30402) by hashtag or geohash location. Read marketplace-call Make an authenticated API call using L402 credentials obtained from marketplace-pay. Read marketplace-compare Compare two or more L402 services side by side — pricing, capabilities, and shared features. Read marketplace-discover Discover L402/x402 paid API services announced on Nostr (kind 31402). Read marketplace-inspect Get full details of a specific L402 service by event ID, or by provider pubkey + identifier. Read marketplace-reputation Check a service provider\ Read marketplace-search Full-text search across L402 service names, descriptions, topics, and capabilities. Read moderation-filter Filter a set of events against the active identity\ Read nip-list List all official Nostr NIPs from the protocol repository. Read nip-read Fetch community NIPs (kind 30817) from relays. Filter by author, identifier, or defined kind. Read nip-show Fetch and display the full content of an official NIP by number. Read nip05-lookup Resolve a NIP-05 identifier (user@domain) to a Nostr pubkey. Also returns relay hints if the server provides t Read nip05-relays Fetch relay hints from a NIP-05 identifier. The NIP-05 server can suggest preferred relays for each pubkey. Re Read nip05-verify Verify that a NIP-05 identifier (user@domain) resolves to the expected pubkey. Returns { verified: true/false Read nip44-decrypt Decrypt a NIP-44 ciphertext using the active identity\ Read post-queue-list List all scheduled posts waiting to be published. Read privacy-open Verify a Pedersen commitment opening. Given the original value and blinding factor, check they match the publi Read privacy-prove-age Prove age is within a range without revealing the exact age. Supports formats like Read privacy-prove-range Prove a secret value is within [min, max] without revealing the value. Returns a cryptographic range proof tha Read privacy-prove-threshold Prove a value exceeds a threshold without revealing the exact value. Useful for income verification, balance c Read privacy-read-proof Fetch and verify range proof events from relays. Returns a list of proofs with their verification status, labe Read privacy-verify-age Verify an age range proof. Checks that the subject is within the expected age range without learning their exa Read privacy-verify-range Verify a range proof. Checks that the committed value is within [min, max] without learning the value. Supply Read privacy-verify-threshold Verify a threshold proof. Checks that the committed value is >= threshold without learning the value. Read profile-by-name Look up a contact\ Read relay-compare Compare 2 or more relays side-by-side. For each relay: NIP-11 metadata, response time, Read relay-count Count events matching a filter without fetching them (NIP-45). Sends a COUNT request to each relay. Falls back Read relay-discover Discover relays used by your contacts. Fetches kind 10002 (NIP-65) relay lists from your follow list, Read relay-diversity Analyse your relay set for centralisation risk. Checks unique operators, software diversity, Read relay-health Check health of the active identity\ Read relay-info Fetch the NIP-11 relay information document for a relay URL. Read relay-list List the relay set (read/write) for the active identity. Optionally check for shared relays with another ident Read relay-nip-search Find relays that support specific NIPs. Queries NIP-11 info documents and filters to relays Read relay-query Query events from Nostr relays by kind, author, ids, tags, or time range. Useful for discovering events, scann Read search-actions Search ${catalog.size} additional actions by describing what you want to do. Read search-notes Full-text search for notes (kind 1) using NIP-50. Requires relay support for NIP-50 — if results are empty, tr Read search-profiles Search for Nostr profiles (kind 0) by keyword using NIP-50. Requires relay support for NIP-50 — if results are Read signet-badge Get a quick trust summary for a pubkey — returns their Signet tier, trust score, composite level, and flags. U Read signet-credentials List all kind 31000 Signet credentials held by a pubkey — includes tier, type, method, profession, jurisdictio Read signet-policy-check Check whether a pubkey satisfies a community\ Read signet-verifiers Search for Signet-registered professional verifiers. Filter by jurisdiction (e.g. Read trust-attest Verify someone else\ Read trust-attest-check-revoked Check if a specific attestation has been revoked. Queries relays for the latest version of the attestation and Read trust-attest-filter Build a Nostr relay filter for attestation queries. Returns a filter object suitable for relay subscriptions. Read trust-attest-parse Parse a kind 31000 attestation event into a fully typed object with all metadata fields: type, subject, assert Read trust-read Read kind 31000 attestations from relays. Filter by subject, type, or attestor. Works with both assertion-firs Read trust-request-list Scan received NIP-17 DMs for attestation request payloads. Read trust-ring-key-image Compute the key image for the active identity in a specific election context. Use this to pre-check whether th Read trust-ring-lsag-verify Verify an LSAG signature and check the key image against a list of known images to detect double-signing. Retu Read trust-ring-verify Verify a ring signature proof. Read trust-score Compute a trust score for a Nostr identity using the web-of-trust graph and kind 31000 attestations. Accepts a Read trust-spoken-challenge Generate a spoken verification token for in-person identity confirmation. Read trust-spoken-directional Generate a directional token pair where each role gets a different token. Prevents the Read trust-spoken-encode Generate a spoken token in an alternative encoding: PIN digits for phone keypads, hex for technical contexts, Read trust-verify Validate the structural correctness of a kind 31000 attestation event. Read vault-config Fetch a vault config and return a summary of tier names, member counts, revoked count, grant count, and curren Read vault-members Fetch a vault config and list all members annotated with trust levels. Optionally query another author\ Read vault-read Decrypt ciphertext using the content key derived from the active identity for a given tier and epoch. No netwo Read vault-read-shared Decrypt ciphertext using a vault key that was shared with you by another identity. Fetches the encrypted share Read vault-rotate Show the current epoch ID and explain how epoch-based key rotation works. Purely informational — to rotate acc Read verify-event Verify a Nostr event\ Read verify-person Verify a Nostr identity: checks NIP-05, trust score, kind 31000 attestations, linkage proofs, and (in full mod Read whoami Returns the active identity\ Read wiki-list List wiki topics (NIP-54, kind 30818). Returns unique topics with latest title, summary, and author. Optionall Read wiki-read Read wiki article(s) by topic (NIP-54, kind 30818). Without an author, returns versions from multiple authors Read zap-balance Request wallet balance via NWC. Sends a get_balance request to the wallet service. Read zap-decode Decode basic fields from a bolt11 Lightning invoice string. Read zap-list-transactions List recent Lightning transactions via NWC. Read zap-lookup-invoice Look up a Lightning invoice status via NWC. Read zap-receipts Fetch zap receipts (kind 9735) for the active identity. Returns sender, amount in msats, and message.

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Nostr Bray

Can an AI agent move money through the Nostr Bray MCP server? +

Yes. The Nostr Bray server exposes 3 financial tools including marketplace-pay, zap-make-invoice, zap-send. Without a policy, an autonomous agent can call these with no spend caps, no rate limits, and no approval flow. PolicyLayer lets you block financial tools by default, require human approval, or set per-tool rate limits — enforced on every call.

Can an AI agent delete data through the Nostr Bray MCP server? +

Yes. The Nostr Bray server exposes 10 destructive tools including blossom-delete, group-remove-user, label-remove. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Nostr Bray? +

The Nostr Bray server has 76 write tools including article-publish, badge-accept, badge-award. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Nostr Bray.

How many tools does the Nostr Bray MCP server expose? +

240 tools across 5 categories: Destructive, Execute, Financial, Read, Write. 138 are read-only. 102 can modify, create, or delete data.

How do I enforce a policy on Nostr Bray? +

Register the Nostr Bray MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Nostr Bray

What Nostr Bray exposes to your agents

The most dangerous Nostr Bray tools

How to control Nostr Bray

All 240 Nostr Bray tools

Related servers

Questions about Nostr Bray

Enforce policy on every Nostr Bray tool call.