NostrDVMBLOCK
Framework to run NIP90 Nostr DVMs
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
This framework provides a way to easily build and/or run Nostr NIP90 DVMs in Python.
This project is currently under development and additional tasks and features are added along the way. This means the project is in alpha status, interfaces might still change/break at this stage.
Getting started
Create a new venv by running "python -m venv venv"
- Place .env file (based on .env_example) in main folder.
- If you want the framework to manage wallets and lnaddresses automatically for you, create a
LNbitsaccount on an accessible instance of your choice, enter one account's id and admin key (this account will create other accounts for the dvms). Otherwise leave the lnbits .env variables empty and update each of your DVM's profile with a lightning address of your choice or alternativly, make sure the DVM is free. - the framework will then automatically create keys, nip89 tags and if lnbits is used zapable NIP57
lightning addressesfor your dvms in this file. - Activate the venv by typing
".venv\Scripts\activate"on Windows or"source venv/bin/activate"otherwise - pip install nostr-dvm
- Run python3 main.py. (or check single examples in the example folder)
In each task component DVM examples are already prepared. Feel free to play along with the existing ones. You can also add new tasks by using the interface, just like the existing tasks in the tasks folder.
A bot is running by default that lists and communicates with the DVMs added to it, so your DVMs can be controled via any regular social client as well.
If LNBits is not used, make sure your DVM's nostr accounts have a valid lightning address.
A tutorial on how to add additional tasks, as well as the larger server backend will be added at a later stage.
SDK version and upgrading
This checkout targets nostr-sdk==0.45.1. Older SDK releases are not supported. When upgrading an existing checkout, install it into t
c553334a5761OBSERVED · 2026-10-08Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add vue --env ANTHROPIC_API_KEY=${ANTHROPIC_API_KEY} --env COINSTATSOPENAPI_KEY=${COINSTATSOPENAPI_KEY} --env DVM_PRIVATE_KEY_=${DVM_PRIVATE_KEY_} --env DVM_PRIVATE_KEY_BOT=${DVM_PRIVATE_KEY_BOT} -- npx -y [email protected]{
"mcpServers": {
"vue": {
"command": "npx",
"args": [
"-y",
"[email protected]"
],
"env": {
"ANTHROPIC_API_KEY": "${ANTHROPIC_API_KEY}",
"COINSTATSOPENAPI_KEY": "${COINSTATSOPENAPI_KEY}",
"DVM_PRIVATE_KEY_": "${DVM_PRIVATE_KEY_}",
"DVM_PRIVATE_KEY_BOT": "${DVM_PRIVATE_KEY_BOT}"
}
}
}
}Exposed tools (2)
1 read · 1 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
Noogle | read | Other Stuff on Nostr |
get_nostr_notes | write | from nostr_sdk import Client, Keys, NostrSigner, Filter, Kind, PublicKey, RelayUrl |
Trust audit
BLOCKgrade D · trust 67/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | FAIL |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (5 observation(s))
- Network
- declared (5 observation(s))
- Shell
- declared (7 observation(s))
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (25)
data = pickle.load(handle)
__import__(module)
print(self.dvm_config.PRIVATE_KEY)
print(self.dvm_config.PRIVATE_KEY)
#print(self.dvm_config.PRIVATE_KEY)
.env_example
.env_example
.env_example
.env_example
.env_example
self.assertEqual(function("test")[-1], "success")env_path = Path('../../.env')url = 'http://127.0.0.1:53770/predict'
url = 'http://127.0.0.1:8080/process'
cashu_wallet.private_key = PrivateKey(bytes.fromhex(nut_wallet.privkey), raw=True)
outgoing_wallet.private_key = PrivateKey(bytes.fromhex(nut_wallet.privkey), raw=True)
incoming_wallet.private_key = PrivateKey(bytes.fromhex(nut_wallet.privkey), raw=True)
encrypted_msg = base64.b64decode(encrypted)
iv = base64.b64decode(encoded_iv)
git+https://github.com/huggingface/diffusers.git
realesrgan @git+https://github.com/xinntao/Real-ESRGAN.git
git+https://github.com/huggingface/diffusers.git
git+https://github.com/huggingface/diffusers.git
git+https://github.com/huggingface/diffusers.git
hcai-nova-utils, clip_interrogator, git+https://github.com/huggingface/diffusers.git
Gates applied: no_behavioural_pass.
c553334a5761full audit observations/trust-audit/mcp-server/believethehype__nostrdvm.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-08 | c553334a5761 | BLOCK | D | 67 | first audit |
Questions
What is the NostrDVM MCP server?
Framework to run NIP90 Nostr DVMs
What tools does NostrDVM expose?
2 in total: 1 read-only, 1 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is NostrDVM safe to connect to an agent?
No — not without reading the findings first. The audit graded it D (67/100) and found 1 critical or high issue in the source. Each one is listed on this page with the file and line it is on.
What credentials does NostrDVM need?
It reads ANTHROPIC_API_KEY, COINSTATSOPENAPI_KEY, DVM_PRIVATE_KEY_, DVM_PRIVATE_KEY_BOT, DVM_PRIVATE_KEY_BOT_, HUGGINGFACE_PASSWORD, HUGGINGFACE_TOKEN, LIBRE_TRANSLATE_API_KEY, LNBITS_ACCESS_TOKEN, LNBITS_ADMIN_KEY, LNBITS_ADMIN_KEY_ and LNBITS_INVOICE_KEY_ from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does NostrDVM run?
It speaks stdio, so it runs as a local process your client starts. It is published on npm as vue at 0.0.0.
How current is this page?
The grade is for one exact copy of the source (c553334a5761), read on 2026-10-08. The repository is watched and re-audited when it changes.