hive-mcp-keet-bridge

MCP server — Hive–Holepunch/Keet identity bridge

Bridges holepunchto/keet-identity-key (Apache-2.0) into the Hive agentic identity network. Exposes DID resolution, signed attestation verification, and a partner directory as MCP tools. Read-only resolution and attestation — Hive does not operate hyperdht bootstrap nodes or Keet servers.

Holepunch is a partner. This shim composes on top of the Holepunch identity primitive. It does not fork, replace, or compete with Keet, hyperswarm, or hyperdht.

---

Partner doctrine

Layer	Owner
DHT peer discovery and transport	Holepunch (hyperswarm, hyperdht)
HD ed25519 key derivation	Holepunch (keet-identity-key, Apache-2.0)
Keet UX and messaging	Holepunch / Keet
DID resolution and trust registry	Hive
Signed attestation and receipt layer	Hive
x402 agent commerce pricing	Hive

---

Tools

Tool	Description	Read-only
keet_identity_resolve	Resolve a Keet identity key (ed25519, hex or base58) to a did:hive: DID document and agent_card URI	Yes
keet_did_link	Link a Keet identity key to a Hive DID — idempotent, requires a signed attestation proving key control	Write (Hive registry only)
keet_signed_attestation_verify	Verify an ed25519 attestation signed by a Keet identity key — no network call required	Yes
keet_hyperdht_announce	Return cached hyperdht announce record for a given identity key — Hive does not operate hyperdht	Yes
keet_partner_directory	Holepunch + Keet partner integration directory with canonical links and Hive bridge endpoints	Yes

---

Endpoints

Path	Method	Description
/mcp	POST	JSON-RPC 2.0 MCP endpoint (protocol: 2024-11-05)
/health	GET	Server health and tool count
/.well-known/mcp.json	GET	MCP manifest

---

Connect

MCP client config (stdio-compatible HTTP)

{
  "mcpServers": {
    "hive-mcp-keet-bridge": {
      "url": "https://hive-mcp-keet-bridge.onrender.com/mcp",
      "transport": "http"
    }
  }
}

Smithery

Submit at: https://smithery.ai/new?repo=srotzin/hive-mcp-keet-bridge

Glama / MCP.so

Auto-crawled from GitHub. Claim after 24-72h at:

• https://glama.ai/mcp/servers/srotzin/hive-mcp-keet-bridge

---

Usage examples

Resolve a Keet identity key

{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "keet_identity_resolve",
    "arguments": {
      "identity_key": "a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4e5f6a1b2"
    }
  }
}

Verify a signed attestation

{
  "jsonrpc": "2.0",
  "id": 2,
  "method": "tools/call",
  "params": {
    "name": "keet_signed_attestation_verify",
    "arguments": {
      "identity_key": "a1b2c3d4e5f6...",
      "message": "did:hive:keet:abc123",
      "signature": "<base64-encoded ed25519 signature>"
    }
  }
}

Partner directory

{
  "jsonrpc": "2.0",
  "id": 3,
  "method": "tools/call",
  "params": {
    "name": "keet_partner_directory",
    "arguments": { "format": "json" }
  }
}

---

Key derivation spec

Identity keys are produced by holepunchto/keet-identity-key — a BIP32-style hierarchical deterministic (HD) derivation generating ed25519 keypairs for the Keet identity system. This library is licensed under Apache-2.0 and is developed and maintained by Holepunch.

Hive's DID composition maps each Keet identity root deterministically to a did:hive:keet:<base64url-pubkey> string. The mapping is purely additive — the Holepunch key derivation spec is unchanged.

---

Boundary: what Hive does not do

• Hive does not operate hyperdht bootstrap nodes.
• Hive does not operate Keet servers or relay traffic.
• Hive does not fork or modify keet-identity-key.
• Hive does not issue settlement assets on behalf of Holepunch or Tether.
• This shim does not claim to run on the Keet network — it resolves and attests.

---

Runtime

• Node.js >= 18
• Express 4.x
• Zero DHT or P2P dependencies in this shim
• LLM calls: https://hivecompute-g2g7.onrender.com/v1/compute/chat/completions (Hive internal)

---

Pairs with

• holepunchto/keet-identity-key (Apache-2.0) — key derivation spec
• future: hive-keet-attest backend — signed attestation persistence layer (in roadmap)
• hive-mcp-inbox spec — peer-to-peer agent messaging over Holepunch transport

---

License

MIT — see LICENSE.

Composes on top of holepunchto/keet-identity-key, which is licensed under the Apache License, Version 2.0. That library is referenced as a specification — it is not bundled with this package.

---

Hive Civilization. Brand gold #C08D23. Treasury 0x15184bf50b3d3f52b60434f8942b7d52f2eb436e.

Hive Civilization Directory

Part of the Hive Civilization — agent-native financial infrastructure.

• Endpoint Directory: https://thehiveryiq.com
• Live Leaderboard: https://hive-a2amev.onrender.com/leaderboard
• Revenue Dashboard: https://hivemine-dashboard.onrender.com
• Other MCP Servers: https://github.com/srotzin?tab=repositories&q=hive-mcp

Brand: #C08D23