roastify-mcp

roastify-mcp

A Tollbooth DPYC operator for theRoastify Developer API. Roastify is a white-label coffeedropshipper: it roasts, prints branded packaging, and ships direct to customers.

This operator lets an AI agent read the Roastify catalog and generate packaging artwork,paid for in Bitcoin Lightning satoshis with no account, no KYC, and no subscription.

What you're building

      YOU (operator, human in the loop)
        │                         │
        │ set & tune prices       │ drive credential intake
        ▼                         ▼
  ┌───────────────┐        ┌──────────────────────────────────────────────┐
  │ Pricing Studio│ prices │        Roastify — YOUR OPERATOR MCP           │
  │    (iOS)      ├───────▶│        FastMCP · deployed on Horizon          │
  └───────────────┘  Neon  │  ┌────────────────────────────────────────┐  │
                           │  │ roastify domain module ◀─ Roastify API  │  │
   Patron (Citizen)        │  │ @runtime.paid_tool(FROZEN_UUID) tools   │  │
   + MCP client  ─────────▶│  ├────────────────────────────────────────┤  │
   (Claude, etc.)  npub    │  │ tollbooth-dpyc SDK (the wheel)          │  │
                    +sats  │  │  ledger · vault (AES-256-GCM) · pricing │  │
                           │  │  /ConstraintGate · Secure Courier·audit │  │
                           │  └────────────────────────────────────────┘  │
                           └───┬─────────┬──────────┬───────────┬─────────┘
                               ▼         ▼          ▼           ▼
                         Neon Postgres  BTCPay▶  Sponsor     Nostr relays
                         (your schema)  Lightning Authority   proofs·courier
                         ledger+pricing invoices  certify +    DMs·audit
                                                  provision        │
                     api.roastify.app ◀── domain      │            ▼
                     (each patron's         calls      └──▶ DPYC Oracle +
                      own API key)                          dpyc-community

Onboarding roadmap

1. Nostr keypair — generate one (nak key generate). The nsec is the only env var:TOLLBOOTH_NOSTR_OPERATOR_NSEC.
2. Sponsor Authority — register; it provisions your Neon schema automatically.
3. Secure Courier — deliver your BTCPay secrets (btcpay_host, btcpay_api_key,btcpay_store_id) by Nostr DM. They are vaulted, never put in the environment.
4. Set prices in Pricing Studio — see below. Tools start unpriced and uncallable.
5. Deploy on Prefect Horizon — .fastmcp.yaml is ready.

Get Pricing Studio

Your tools ship unpriced, and nobody can call a paid tool that has no price.Pricing Studio (iOS) is the operator console: it reads and writes the pricing model livein Neon, so prices never live in code — seetollbooth-pricing-studio.

That indirection is the point. Dynamic per-tool pricing — surge, happy-hour, loyaltydiscounts, free trials for a first-time patron — is what DPYC gives you that a flat paywallnever could.

Bring your own Roastify key

Every patron delivers their own Roastify API key through the Secure Courier, vaulted pernpub. There is no operator-held key and no fallback path.

This follows from the domain rather than being a policy choice. Roastify scopes the catalog,saved designs, and plan tier to the merchant account behind the key — a patron on Base sees adifferent catalog than one on Pro. A single operator-held key would hand one merchant's worldto every caller, which is a wrong answer rather than a limitation to work around. It alsomeans this operator never holds a credential it could misuse, and revoking your key in theMerchant App severs access without involving the operator.

roastify_get_patron_onboarding_status   # what's missing
roastify_request_patron_credentials     # → you get a Nostr DM
   (reply with your Roastify API key)
roastify_receive_patron_credentials     # vaulted, encrypted at rest

Live keys start rty_live_. Sandbox keys start rty_test_ and do not fulfill — useful forexercising the read tools without touching production.

Tools

Plus the standard DPYC catalog (balance, purchase, courier, pricing, Oracle, status).

What this operator does not do, and why

It cannot create, update, delete, or sync products. Not a missing feature — the RoastifyAPI has no such endpoints. /v1/products is read-only, and the words integration, sync,shopify, and upload do not appear anywhere in theOpenAPI spec. Saved products and storefront sync areMerchant App capabilities by design.

It does not place orders. Roastify already routes orders to its own operations and reportstracking back to your storefront. An MCP layer between those adds a hop without addingjudgment, so order automation is deliberately left to Shopify and Roastify.

Artwork generation is template personalization, not design. roastify_generate_artworkrewrites the named text and image placeholders of a design you already authored in theRoastify Design Studio. It cannot author a design from scratch.

A generated artwork URL is not attached to anything. In Roastify's API the only consumerof an artwork URL is an order line — and orders are out of scope here. You receive a URL andcarry it onward yourself. That seam is accepted deliberately; it is not an oversight, and thisoperator will not simulate a design flow the API cannot complete.

The catalog has no palate data. Origin, region, altitude, processing method, and varietalexist only in the Merchant App UI. The machine-readable signals are roastLevel, isDecaf,size, and price; everything else about a coffee's character is prose in its description. Beanselection is correspondingly weaker than it looks, and this operator does not dress up anLLM's reading of a description as structured provenance data.

Artwork is a durable job

Roastify generates artwork asynchronously with no published SLA, soroastify_generate_artwork returns a claim check immediately rather than holding therequest open. The work runs detached — on Modal when the operator hascouriered long-runner credentials, in-process otherwise — and survives a serverless recycle.

claim = roastify_generate_artwork(product_id=..., fields=[...], client_req_id="my-req-1")
roastify_fetch_artwork(claim=claim)   # poll; every state answers with guidance

One fare per firing, charged when the work is requested. A job that fails refunds it — theoperator keeps nothing for work that produced no artwork. Pass client_req_id and a repeatedrequest is safe: it becomes Roastify's Idempotency-Key, so the artwork is not generatedtwice.

Development

pip install -e ".[dev]"
ruff check .
pytest -v
python -m roastify_mcp.server   # needs TOLLBOOTH_NOSTR_OPERATOR_NSEC to fully run

Upstream status

Roastify's API is version 0.3.1 and its own spec marks it beta, "subject to change."Expect to follow breaking upstream edits, and weigh that before promising this operator'scatalog to third-party merchants.

License

Apache 2.0 — see LICENSE.