New endpoints, SDK releases, chain support, and spec changes. Updated as features ship.
proof: "merkle" returns full EIP-1186 storage proofs. Verified live via a USDC condition against a holder wallet: mappingSlot: 9, 7-node accountProof, storageProof value matches the raw balance.eth_getProof.eth_getProof. No backend change; docs updated across openapi.yaml, llms-full.txt, the Merkle-proof blog, and the A2A/x402 specs.blockHeight (integer) and blockHash (64-character hex) inside the ECDSA-signed payload — the Bitcoin chain tip at the time of wallet state observation.blockNumber+blockTimestamp on EVM, slot on Solana, ledgerIndex+ledgerHash on XRPL, blockHeight+blockHash on Bitcoin.POST /v1/attest, POST /v1/trust, POST /v1/trust/batch.AttestationResult and TrustCheck schemas updated with the new blockHeight and blockHash fields.blockNumber and blockTimestamp are now present on every signed result across all 30 EVM chains. Previously, if the RPC helper silently failed on the block-lookup step, an attestation could sign with the anchor fields absent.eth_blockNumber or eth_getBlockByNumber fails, the API now returns 503 with a retryable error payload (no credits charged) instead of signing a partial result.POST /v1/attest, POST /v1/trust, POST /v1/trust/batch.AttestationResult and TrustCheck schema descriptions updated; the prior “26 of 30” carve-out for Taiko, Ronin, Moonriver, and Viction was stale — those chains have always returned the same anchor fields via direct public RPC.slot field (integer) identifying the Solana ledger slot at which the wallet state was read. Parallel to blockNumber on EVM chains and ledgerIndex on XRPL.POST /v1/attest, POST /v1/trust, POST /v1/trust/batch.AttestationResult and TrustCheck schemas updated with the new slot field.insumer-skill — Wallet Auth for Claude Codejose. Verified end-to-end on April 13.smithery skill add douglasborthwick/insumer-skill.@insumermodel/plugin-eliza v2.0.0 — Scoped Package Renameeliza-plugin-insumer to @insumermodel/plugin-eliza to match the elizaOS registry format convention (all entries in index.json use @org/plugin-name).@insumermodel/plugin-eliza@2.0.0. Same 10 actions, same source code, zero functional changes.eliza-plugin-insumer deprecated on npm pointing to the new name.npm install @insumermodel/plugin-eliza./v1/trust for Counterparty Risk ScoringPOST /v1/trust as the wallet analysis signal in their counterparty risk scoring API. Trust profile dimensions surface at signal_scores.wallet.details.insumer_trust in every Revettr score responsebitcoinWallet parameter on POST /v1/attest and GET /v1/trust. Supports P2PKH (1...), P2SH (3...), bech32 (bc1q...), and Taproot (bc1p...) addressesbitcoinWallet to add a native BTC balance check alongside stablecoins, governance, NFTs, staking, Solana, and XRPL@insumermodel/mppx-token-gate listed as the first entry on Tempo’s new Extensions page. Wraps any MPP Method.Server to grant free access to token holders — one API call checks ownership across 33 chains and returns a signed receipt/v1/attest for Pre-Transaction VerificationPOST /v1/attest as the pre-transaction verification layer in their Settlement Attestation Record (SAR) flow. Wallet auth qualifies agents going in, SAR verifies delivery coming outmulti-attest-verify.js shipped in insumer-examples. Zero dependencies, supports ES256 (P-256) and EdDSA (Ed25519), handles both raw P1363 signatures and JWT compact JWSPOST /v1/attest. Agents declare wallet conditions, join channels, and receive per-agent ECDSA-signed attestation JWTs. Sessions re-verify on demand. Sell the token, lose the sessionPOST /v1/keys/buy. 10 free attestation calls per agentchannel parameter added to POST /v1/keys/buy for partner revenue share trackingPOST /v1/attest. Restrict product visibility and purchases based on wallet conditions. Wallet-verified discounts apply automatically at checkout. No coupon codes to leakPOST /v1/attest. Gate any page, post, or block with a shortcode. Connects MetaMask, Phantom, and Coinbase Wallet simultaneouslyPOST /v1/attest returning met: false for native gas token balances (ETH, POL, BNB, AVAX, etc.) on all 30 EVM chains when using contractAddress: "native". Root cause: balance lookup was using eth_call with the ERC-20 balanceOf selector instead of eth_getBalancemet: false. Root cause: getAssetsByOwner was called with showNativeBalance: false, so native SOL was never in the token mapprovider_jwks / kid / payload / sig) now in the spec. Suggestions for kid field and full signed payload accepted by spec author.POST /v1/attest output maps directly to the extension wire format.eliza-plugin-insumer expanded from 4 to 10 actions covering the complete autonomous agent lifecycle — no human required at any step: BUY_API_KEY, CREATE_MERCHANT, CONFIGURE_TOKENS, ADD_CREDITS, VERIFY_WALLET, CHECK_TRUST, CHECK_TRUST_BATCH, ACP_DISCOUNT, UCP_DISCOUNT, CONFIRM_PAYMENT.currency field to token config for XRPL trust line support, fixed ACP/UCP discount display to read correct response fields.POST /v1/keys/buy — buy an API key with USDC, no email or prior authentication required. The sender wallet from the on-chain transaction becomes the key’s identity. One key per wallet.POST /v1/keys/create) remains unchanged for human developers.mcp-server-insumer v1.8.0: new insumer_buy_key tool.langchain-insumer v0.10.0: new InsumerBuyKeyTool (26 tools total).eliza-plugin-insumer v1.1.0: new BUY_API_KEY action (4 actions total).POST /v1/credits/buy and POST /v1/merchants/{id}/credits now verify the on-chain sender. First purchase registers the sender wallet to the API key. Subsequent purchases must come from the same sender.updateWallet parameter (boolean): set to true to change the registered wallet. The verified USDC transfer from the new address proves ownership.mcp-server-insumer v1.7.14 published to npm with updateWallet on both buy credits tools.langchain-insumer tools updated with update_wallet parameter.langchain-insumer v0.9.13 published to PyPI: added XRPL response field documentation to attest() docstring and README — ledgerHash, trustLineState: { frozen }, and frozen trust line behavior (met: false).POST /v1/attest with 4 conditions (USDC balance, Coinbase KYC, country verification, Gitcoin Passport) in a single API callerror.code: "rpc_failure" when an upstream data source is unavailable after retries. No attestation signed, no JWT issued, no credits charged. Retryable after 2–5 seconds.failedConditions array identifying which source and chain failed.POST /v1/attest, POST /v1/trust, POST /v1/verify, POST /v1/acp/discount, POST /v1/ucp/discount. (POST /v1/trust/batch handles failures per-wallet and always returns 200.)insumer-verify v1.3.0, mcp-server-insumer v1.7.5, langchain-insumer v0.9.7, eliza-plugin-insumer v1.0.4 published with rpc_failure documentation.RpcFailureEnvelope schema on all 5 endpoints.format: "jwt" parameter on POST /v1/attest returns an ES256-signed JWT bearer token alongside the standard attestation response. No additional cost.pass, results, conditionHash, blockNumber, and blockTimestamp. 30-minute expiry. Verifiable via JWKS at /.well-known/jwks.json or GET /v1/jwks.insumer-verify v1.2.0 published to npm: auto-detects JWT string vs attestation object.mcp-server-insumer v1.7.3, langchain-insumer v0.9.5, eliza-plugin-insumer v1.0.2 updated with Wallet Auth support.mcp-server-insumer v1.6.2 published to npm: updated README with langchain-community PR #549 cross-reference, wallet trust tool descriptions now reflect optional Solana + XRPL dimensions (up to 20 checks), batch wallet trust mentions xrplWallet parameter, aligned version strings in server.json and src/index.tslangchain-insumer v0.9.1 published to PyPI: added XRPL usage examples to README (native XRP, RLUSD trust line, wallet trust with XRPL dimensions), fixed wallet trust tool description to reflect optional Solana + XRPL dimensions (up to 20 checks)langchain-community PR #549 updated to 25 tools: added xrpl_wallet to 5 existing tools (attest, wallet_trust, batch_wallet_trust, check_discount, verify), added 5 new tools (acp_discount, ucp_discount, request_domain_verification, verify_domain, validate_code), fixed missing InsumerComplianceTemplates in __all__, added World Chain (480) to Merkle proof chain listacp-ucp-onchain-eligibility-example repo: XRPL examples across all flows (attest, trust, merchant onboarding, ACP, UCP, credits), fixed missing auth headers in full_agent_flow.pyinsumer-examples repo: added XRPL verification to Python, Node.js, and bash examples, added XRPL curl examples to READMEmcp-server-insumer v1.6.0 published to npm (updated to v1.6.2 same day): xrplWallet parameter on all 7 wallet-accepting tools, XRPL added to ChainId, OnboardingChainId, and UsdcChainId schemas, new currency field for trust line tokens, taxon field for NFT collections, xrplAddress in USDC payment settingslangchain-insumer v0.9.0 published to PyPI: xrpl_wallet parameter on attest, wallet_trust, check_discount, verify, acp_discount, and ucp_discount tools and wrapper methods (updated to v0.9.1 same day)openapi-gpt.yaml) updated with XRPL parameters across all endpoints and legacy server removedrGm7WCVp9gb4jZHWTEtGUr4dd74z2XuWhE) as second check in the XRPL trust dimension. Wallet trust profiles now support up to 20 checks across 6 dimensionsPOST /v1/attest call: Ethereum, Base, Polygon, Arbitrum, Optimism, BNB Chain, Avalanche, Solana, and XRP Ledger"xrpl" to OnboardingChainId enum in OpenAPI spec, enabling merchants to configure XRPL tokens via PUT /v1/merchants/:id/tokensxrplWallet parameter documentation to commerce (/v1/acp/discount, /v1/ucp/discount), verification, and API reference developer pagesnft_ownership validation incorrectly requiring the currency field. Currency is now only required for token_balance conditions on trust line tokenschainId: "xrpl"). Native XRP balance verification, trust line token verification (RLUSD, any issued token), and NFT ownership verificationxrplWallet field on all 7 wallet-accepting endpoints: POST /v1/attest, POST /v1/trust, POST /v1/trust/batch, GET /v1/discount/check, POST /v1/verify, POST /v1/acp/discount, POST /v1/ucp/discountcurrency (XRPL currency code, auto hex-encoded) and taxon (optional NFT filter)ledgerIndex and ledgerHash (XRPL equivalent of block number/hash) for freshness and snapshot verificationmet: false for frozen trust lines even if balance exceeds threshold, with trustLineState: { frozen: true } in the resultopenapi.yaml, llms.txt, llms-full.txt, and all marketing/blog pages to reflect 32-chain supportapi.insumermodel.comversion: 1.0.0 to llms.txt and llms-full.txt for agent cache invalidationeas_attestation condition type with 5 pre-configured compliance templates: coinbase_verified_account, coinbase_verified_country, coinbase_one, gitcoin_passport_score, gitcoin_passport_activeGET /v1/compliance/templates endpoint for listing available templatesPOST /v1/acp/discount and POST /v1/ucp/discount for OpenAI/Stripe ACP and Google UCP commerce protocol integrationfarcaster_id condition type for social identity verification via IdRegistry on Optimism/developers/ into hub + 6 focused vertical pages: verification, trust, compliance, commerce, onboarding, api-referencemcp-server-insumer v1.2.0 and langchain-insumer v0.5.0 with EAS + compliance toolsPOST /v1/trust for ECDSA-signed wallet trust fact profiles across 4 dimensions (stablecoins, governance, NFTs, staking), 17 checks, 7 chainsPOST /v1/trust/batch for profiling up to 10 wallets per request. Shared block fetches make batch 5-8x faster than sequential callsGET /v1/jwks endpoint for public key discovery. Static JWKS also at /.well-known/jwks.jsonkid field added to all signed responses for key rotation supportevaluatedCondition and conditionHash (SHA-256) in attestation results for tamper-evidenceblockNumber (hex) and blockTimestamp (ISO 8601) in RPC chain results for freshness verificationinsumer-verify v1.1.3 published on npm: client-side ECDSA signature verification, condition hash checking, block freshness, and expiry validation. Zero dependenciesproof: "merkle" parameter on POST /v1/attest and POST /v1/trust/v1/discount/check and /v1/verify responses. Booleans only by defaultunsafe-eval from CSP script-src across all pagesX-API-Key authentication (insr_live_ prefix)POST /v1/attest, GET /v1/credits, POST /v1/credits/buy, and 8 merchant onboarding endpointsllms.txt, llms-full.txt, openapi.yaml, ai-plugin.jsonmcp-server-insumer published on npm. Listed on Official MCP Registry, awesome-mcp-servers, mcp.so, mcpservers.orglangchain-insumer published on PyPIframe-src, XSS fixes, email validation, rate limitingunsafe-inline from CSP script-srcrobots.txttranslate="no" on brand names site-wide