This release includes 2 breaking changes for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Summary
AI summaryHosted MCP Server available at https://app.maiat.io/api/mcp and global URL migration to the same domain.
Full changelog
🛡️ Maiat Protocol v0.5.0
Highlights
- MCP Server — hosted at
https://app.maiat.io/api/mcp(no install, just a URL) - Oracle Sync — auto-attest cron now calls
TrustScoreOracle.updateScore()on-chain - ScarabToken — ERC-20 with transfer tax, deployed on Base Sepolia
- Token Forensics — deep token analysis at
/api/v1/token/{address}/forensics - Review Economy — upvote/downvote with Scarab rewards (+2 per upvote)
🔌 MCP Integration (Claude Desktop / Cursor)
{
"mcpServers": {
"maiat": {
"url": "https://app.maiat.io/api/mcp"
}
}
}
Tools: get_agent_trust · get_token_forensics · report_outcome · get_scarab_balance
What's New
Phase 1 — Oracle Sync
TrustScoreOracle.updateScore()called on every auto-attest cron run- EAS attestations now in sync with DB scores
- Separate deployer key (
EAS_DEPLOYER_KEY) isolated from ACP wallet
ScarabToken.sol (Base Sepolia)
- Address:
0x2F808cc071D7B54d23a7647d79d7EF6E2C830d31 - Transferable ERC-20 (not soulbound)
- 2% transfer tax → protocol treasury
- 33 tests (27 unit + 6 fuzz), all passing
Token Forensics
GET /api/v1/token/{address}/forensics- Honeypot detection, rug pull risk, liquidity analysis
- Full example in SKILL.md
Hosted MCP Server
POST https://app.maiat.io/api/mcp— Streamable HTTP transport- PR #93 merged
Review Economy
- Upvote/downvote buttons on ReviewCard
- Reviewer earns +2 Scarab per upvote received
- AI quality scoring + summary generation
- Review cost: 2 Scarab (down from 5)
Feedback Loop
- All API responses include
queryIdfor outcome tracking POST /api/v1/outcomefor agents to report job results- Caller tracking: IP + User-Agent + clientId in QueryLog
📦 npm Packages Updated
| Package | Version |
|---|---|
| maiat-sdk | 0.3.0 |
| @jhinresh/mcp-server | 0.3.2 |
| @jhinresh/elizaos-plugin | 0.2.1 |
| @jhinresh/agentkit-plugin | 0.2.1 |
| @jhinresh/game-maiat-plugin | 0.1.1 |
| @jhinresh/viem-guard | 0.1.1 |
| @jhinresh/virtuals-plugin | 0.2.1 |
🏗️ Infrastructure
- Global URL migration:
maiat-protocol.vercel.app→app.maiat.io - README
Connect in 30 Secondssection - 133 contract tests, 0 failures (PR #92)
📦 npm Packages (all latest)
| Package | Version |
|---------|---------|
| @jhinresh/mcp-server | 0.3.2 |
| maiat-sdk | 0.3.0 |
| @jhinresh/agentkit-plugin | 0.2.1 |
| @jhinresh/elizaos-plugin | 0.2.1 |
| @jhinresh/virtuals-plugin | 0.2.1 |
| @jhinresh/game-maiat-plugin | 0.1.1 |
| @jhinresh/viem-guard | 0.1.1 |
Breaking Changes
- Global URL migration: maiat-protocol.vercel.app → app.maiat.io
- Hosted MCP Server replaces local installation (now reachable at https://app.maiat.io/api/mcp)
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About JhiNResH/maiat-protocol
Trust infrastructure for the agent economy. 4 tools: agent trust scores (18K+ agents indexed)
Related context
Related tools
Beta — feedback welcome: [email protected]