io.github.tang-vu/keryx

Measured conclusion: Deep-tested. L2 outcome: tools_ok.

Budgeted research with cited evidence and visible payment state on the selected Arc network.

Add to your agent

Copy this into your MCP client config:

{
  "mcpServers": {
    "keryx": {
      "url": "https://keryx.cc/mcp",
      "transport": "streamable-http"
    }
  }
}

Measured tools (27)

• evidence_draft read-only

  Assemble user-selected claim spans and related-work quote themes from saved Include paper records and caller-supplied retained Keryx report rows. A theme may carry author-written statements (contribution, agreement, disagreement, gap); a statement naming a paper is exported only with a citation and a selected retained excerpt from each named paper, otherwise it is withheld. Exported citations and BibTeX/RIS entries are checked to correspond one to one. Exact version/excerpt matching does not authenticate imported reports or verify semantic support. No fetching, model, database, history, payment or reward I/O. Inputs and returned draft can be retained by your MCP client; choose that client’s privacy settings before sharing private passages.

  Parameters:

  • draft — Version-1 private-evidence-draft contract, at most 65536 UTF-8 bytes. Optional assembly {mode:append} or {mode:regenerate,themeId} quotes retained text without model calls; optional readingStatuses separates caller-observed unread/unavailable records from unknown status. See docs/evidence-drafts.md and docs/engineering/related-work283-completion-2026-10-12.md.

  Hints: read-only yes · destructive no · idempotent yes · open-world no

• research_feedback_read read-only

  Original-caller private opinion on the exact delivered ordinary research answer. Requires its private bearer capability; a public report ID or link grants no authority. First choice is retained, exact retries are idempotent. Silence is no response. No research, source fetching, revision execution, refunds, signing or payments.

  Parameters:

  • token (required) — string — Private capability received with your original completed answer. Keep it out of reports, prompts to Keryx research, public links and exports.

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• research_feedback_submit

  Original-caller private opinion on the exact delivered ordinary research answer. Requires its private bearer capability; a public report ID or link grants no authority. First choice is retained, exact retries are idempotent. Silence is no response. No research, source fetching, revision execution, refunds, signing or payments.

  Parameters:

  • choice (required) — string
  • token (required) — string — Private capability received with your original completed answer. Keep it out of reports, prompts to Keryx research, public links and exports.
  • reason — string

  Hints: read-only no · destructive no · idempotent yes · open-world yes

• draft_check read-only

  Split a private passage into sentences, bind citation markers ([3], cite{key}, [@key], Author (Year)) to a BibTeX, RIS or DOI/link reference list, and compare each cited sentence with source text you supply. Each verdict (supported, partly-supported, not-found, source-unavailable) carries a verbatim excerpt of that text or states that no supporting passage was found; a source without supplied text is always source-unavailable. Deterministic wording comparison, not semantic review. No fetching, model, database, history, payment or reward I/O. Inputs and results can be retained by your MCP client; choose that client’s privacy settings before sharing private passages.

  Parameters:

  • check — Version-1 private-draft-check contract, method lexical-overlap-v2, at most 65536 UTF-8 bytes. Optional sources[].identity binds exact DOI/URL and contentVersion; suggestions[] stays separate from written citations. No fetching or payment. See docs/draft-check.md.

  Hints: read-only yes · destructive no · idempotent yes · open-world no

• evidence_procurement read-only

  Assess missing evidence requirements, supplied provider offers, selections, deliveries and caller reviews with the shared private evidence procurement contract. Amounts are exact integer micro-USDC. Signature and content-binding checks do not establish delivery quality, buyer authority, payment or settlement. No fetching, model, provider, database, history, purchase, escrow or reward I/O. Caller selections and reviews are assertions, not financial authorization. Inputs and results may be retained by your MCP client; choose its privacy settings before sharing private material.

  Parameters:

  • format — Optional receipt format: json (default), markdown or csv. Formatted text is bounded to 524288 UTF-8 bytes and cannot be restored. Structured procurement stays unchanged.
  • packet — Version-1 private-evidence-procurement packet, at most 65536 UTF-8 bytes. Supply original inputs, never a derived procurement result.

  Hints: read-only yes · destructive no · idempotent yes · open-world no

• deliverable_acceptance_read read-only

  Owner-only ordinary prepaid A2A deliverable state. Requires explicit deliverable:read. Historical remedy:none and missing response window remain visible. Native/enrolled, Monthly, private v2 and browser-only originals are unavailable. Not source-decision agreement or semantic verification.

  Parameters:

  • id (required) — string

  Hints: read-only yes · destructive no · idempotent yes · open-world no

• deliverable_acceptance_submit

  Record Accept, Request revision or Reject for the original customer's exact retained delivery. Requires explicit deliverable:write, expected current revision/digests and an idempotency key. Reason is private; publishState explicitly shares state/timestamp only. Request storage does not execute a revision/refund, recharge, change reservations or claw back rewards. Your MCP client may retain private messages.

  Parameters:

  • id (required) — string
  • submission (required) — object

  Hints: read-only no · destructive no · idempotent yes · open-world no

• operator_obligations_read read-only

  Read a private conservative obligation projection for the exact server-delegated reader with explicit operator:read API-key scope. Disabled without protected reader/role configuration. Partial native history remains unknown with zero safe/advisory surplus. No cash probe, signer, custody, spending, release, refund or scheduler authority. No caller owner/role selectors.

  Hints: read-only yes · destructive no · idempotent yes · open-world no

• paper_lookup read-only

  Find paper titles, recorded contributors, DOI and exact repository versions without research or payment. Default: retained catalog metadata with observation times. Set searchRepositories=true only to explicitly send the query to arXiv/Crossref (at most two requests, no paper-body reading). Missing DOI, peer review and withdrawal/replacement status remain unknown. Returns a field-scoped bibliography card with provenance, a short reference and reusable BibTeX/RIS text. Use this for exact title/ordered author/year/journal/DOI/version questions before requesting paid research; original paper text is not required for recorded metadata.

  Parameters:

  • query (required) — string — Title/topic (up to 120 characters), exact DOI (up to 200), or versioned arXiv ID/official URL.
  • language — string — Language for bibliography labels: en (default), fr or vi. Original titles, author names and venue names are preserved.
  • searchRepositories — boolean — Explicit external metadata lookup; false by default. Sends the query to official scholarly providers.

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• research

  Research a question under a USDC creator-payment budget. Keryx selects sources, pays access tolls and weighted citation rewards on the configured Arc network, then returns qualified source excerpts and a receipt. Complete synthesis and per-assertion entailment remain unverified. This remote surface uses Keryx's treasury; anonymous research is sponsored, not caller-funded usage. Public research may send your question to our search provider. The source USDC budget is separate from model and search operating costs. For retained or repository bibliography use free paper_lookup with an exact identifier. An ordinary explicit exact-original bibliography request can also return a separate metadata-only record and references without a model call or creator payment; page status and full-paper evidence remain separate. New runs record remote MCP ingress. A verified ask-scoped API key attributes the run to its wallet; anonymous runs have no wallet owner. Editable client names establish no identity or spending authority.

  Parameters:

  • question (required) — string — Research question.
  • mode — string — Research depth; default deep.
  • model — string — Optional Keryx model catalog id, for example deepseek-chat.
  • budget — number — Maximum creator-payment budget in USDC; 0 allows free sources without purchases or rewards. Clamped to the caller's tier.
  • language — string — Language of generated labels only; the original question and answer are unchanged. Omitted labels follow qualified recorded answer language when available; historical and unqualified answer language remains unknown.
  • scholarly — boolean — Opt in to bounded Crossref/arXiv paper discovery; sends the question to those providers.
  • reviewFirst — boolean — Review-first requires the authenticated live browser; this adapter refuses true.
  • researchMode
  • responseMode

  Hints: read-only no · destructive no · idempotent no · open-world yes

• keryx_status read-only

  Describe this MCP surface, its payment behavior, and the active caller tier.

  Hints: read-only yes · destructive no · idempotent yes · open-world no

• research_monthly read-only

  Read the four-request, 30-day Research Monthly quote and handoff. The current quote identifies its payment network. Never buys or redeems a plan.

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• keryx_operator_status read-only

  Observe public prepaid research operations, queue, recorded ordinary/recovered/unknown completion latency cohorts and hold/review rationale. Timing is order createdAt to updatedAt (acceptance to recorded completion/update); later reconciliation can extend it. It is not first-answer or settlement time. Missing capability stays null. No spending or execution authority; exact books and customer jobs stay private.

  Hints: read-only yes · destructive no · idempotent yes · open-world no

• keryx_public_job_ledger read-only

  Inspect a partial selected-network public web-dispatch transfer ledger and balanced exact micro-USDC vouchers. Browser funding and Keryx sponsorship are separate. Pending/ambiguous/batched-attribution legs do not enter settled totals. No customer questions/identities, private invoices, complete business books, margin, cash balance, signing or execution authority. days1–31, default7. Export via /api/operator/ledger; a checksum is not authenticity or independent settlement proof.

  Parameters:

  • days — integer

  Hints: read-only yes · destructive no · idempotent yes · open-world no

• keryx_purchase_outcomes read-only

  Read a public dispatch's retained exact-version BUY/citation/payment observations. Returns bounded sample counts, citation hit rate, calibration bands and integer micro-USDC uncited access cost. Recorded settlement is not revalidated on chain. Historical participant cohort is unknown; causal regret, missed value and cost per supported claim are unmeasured. No research, paid read, current-source backfill, private reviews, signing or learning. Use an existing dispatch ID, never a URL.

  Parameters:

  • dispatchId (required) — string

  Hints: read-only yes · destructive no · idempotent yes · open-world no

• keryx_source_learning read-only

  Read the same bounded observational source/topic record as the public creator page and API. Only write-time independently classified/funded outside observations qualify; owners, unknown and private history are excluded. Source-declared public topics, counts, recorded citation contribution, exact rational average access price, descriptive uncertainty and abrupt-shift flag. No questions, wallets or receipt identifiers. Recorded settlement is not independently revalidated. Live learned selection and exploration are withheld, with zero live exploration allowance. No research, source read, payment, private inspection or policy activation.

  Parameters:

  • sourceId (required) — string

  Hints: read-only yes · destructive no · idempotent yes · open-world no

• profile_read read-only

  Read the verified key owner's private profile and attributed activity. Requires explicit profile:read scope. No public identity, research or payment.

  Hints: read-only yes · destructive no · idempotent yes · open-world no

• profile_update

  Replace the verified key owner's private display name, handle, one-line bio/purpose and links. Requires explicit profile:write scope. No wallet selector or identity verification; no payment/history changes.

  Parameters:

  • profile (required) — object — Complete replacement; empty text clears a field. Links are bounded HTTPS links to the allowed providers or a public website.

  Hints: read-only no · destructive no · idempotent yes · open-world no

• history_read read-only

  Read bounded pages of the verified API-key wallet's ordinary current-store runs. Requires explicit history:read. Literal case-sensitive question search; storeNetwork describes the deployment, not per-run settlement. Recorded spend/allocation is not a payment receipt. No wallet selector, linked accounts, archive, private jobs, research or payment.

  Parameters:

  • to
  • from — string
  • limit — integer
  • cursor — string
  • search — string
  • funding — string
  • surface — string

  Hints: read-only yes · destructive no · idempotent yes · open-world no

• history_owned_read read-only

  Same owner-private v2 contract as /api/me/asks. Explicit history:read required. Current store, bounded filters/keysets; missing membership/claims stay explicit. Export has explicit truncation/continuation. No research, signer, payment, public-owner selector or mutation authority.

  Hints: read-only yes · destructive no · idempotent yes · open-world no

• history_export read-only

  Same owner-private v2 contract as /api/me/asks. Explicit history:read required. Current store, bounded filters/keysets; missing membership/claims stay explicit. Export has explicit truncation/continuation. No research, signer, payment, public-owner selector or mutation authority.

  Hints: read-only yes · destructive no · idempotent yes · open-world no

• history_private_jobs_list read-only

  Private data for this authenticated caller only. Exact-payer completed private jobs in the current store; explicit history:read required. Bounded scan/continuation, unknown provenance and NULL own spend/creator settlement remain explicit. No wallet selector, public report/share link, model prompt, research, source fetch, signer, purchase or mutation authority.

  Parameters:

  • to
  • from — string
  • limit — integer
  • cursor — string
  • search — string
  • network — string
  • surface — string

  Hints: read-only yes · destructive no · idempotent yes · open-world no

• history_private_jobs_detail read-only

  Private data for this authenticated caller only. Exact-payer completed private jobs in the current store; explicit history:read required. Bounded scan/continuation, unknown provenance and NULL own spend/creator settlement remain explicit. No wallet selector, public report/share link, model prompt, research, source fetch, signer, purchase or mutation authority.

  Parameters:

  • id (required) — string

  Hints: read-only yes · destructive no · idempotent yes · open-world no

• history_private_jobs_export read-only

  Private data for this authenticated caller only. Exact-payer completed private jobs in the current store; explicit history:read required. Bounded scan/continuation, unknown provenance and NULL own spend/creator settlement remain explicit. No wallet selector, public report/share link, model prompt, research, source fetch, signer, purchase or mutation authority. Manual finite JSON metadata export only; complete/truncated and continuation are returned. Result bodies are excluded.

  Parameters:

  • to
  • from — string
  • limit — integer
  • cursor — string
  • search — string
  • network — string
  • surface — string

  Hints: read-only yes · destructive no · idempotent yes · open-world no

• run_privacy_read read-only

  Owner-private current-store read using the verified key's explicit history:read scope. No wallet selector or signing. Visibility, defaults and erasure require the interactive web session. Storage admission is required.

  Parameters:

  • id (required) — string

  Hints: read-only yes · destructive no · idempotent yes · open-world no

• run_owner_export read-only

  Owner-private current-store read using the verified key's explicit history:read scope. No wallet selector or signing. Visibility, defaults and erasure require the interactive web session. Storage admission is required.

  Parameters:

  • id (required) — string
  • requestId (required) — string

  Hints: read-only yes · destructive no · idempotent yes · open-world no

• profile_identities_read read-only

  Read only the verified key owner's saved ORCID/GitHub identities. Requires explicit profile:read scope. No wallet selector, provider OAuth, linking, unlinking, research or payment. Link identities interactively in your private profile browser page.

  Hints: read-only yes · destructive no · idempotent yes · open-world no

Publisher website Repository

Measured by MCPYP probing. Untested fields are omitted, never estimated. Listing is always free; MCPYP never proxies calls or stores user tokens.