Skip to content
Menu

hashlock-mcp

AI Agents

Is this your project? Claim and verify →

Atomic settlement layer for the agent economy. Sealed-bid RFQ + HTLC settlement, fused into one operation. For AI agents (MCP-native) and institutional OTC desks.

What HEY knows

Building
Shipped this weekDerivedShipping: 1 meaningful event in 30 days; latest ship yesterday. Evidence Source

Build Momentum 23How it is measured

Latest ship
Code changes, week of 2026-10-12 – 2026-10-18 · · Code activity

Why it matters: First week of code changes after 171 quiet days.

FollowCreate alertTerminal previewView latest ship
Share

Follow puts hashlock-mcp on your private watchlist and at the top of “Since you were last here” when you come back. Then pick what HEY should notify you about. Following needs an account; browsing never does.

No account? Email me hashlock-mcp’s changes — or read its RSS feed.

No account and no password. HEY stores the address and what you asked for, sends one confirmation, and nothing else until you confirm. Every email has a one-click unsubscribe that deletes the address.

Token market · context
No token tracked
Not yet known
Unknown3 gaps: Official docs (no source), API description (no source), Official site changes (no source). No official website on record.

HEY can answer 8 of the 11 research questions that apply · Research coverage

Compare with…What Terminal access adds →
What HEY checked — why it says this
Shipping.
“Shipping” by the activity rule: 1 meaningful event in the last 30 days, the newest 2026-10-12. Not called Resumed: HEY began reading the source of the newest ships after the quiet stretch before them began, so it did not watch that gap.
SourceRepositories, changelogs and feeds HEY reads for this project, and the ship events recorded from them.ReadRecordsCode changes, week of 2026-10-12 – 2026-10-18v0.1.8 — Bearer-compatible endpoint fixWhat HEY derivedHEY’s activity rule reads the counted events as “Shipping”.Not concludedIt says what HEY can read of the building, not how good the project is, who is behind it, or what its token will do. Quiet or unknown is not "abandoned".
Verified Builder.
The quality gate found verified building evidence from the project's own sources.
Source1 registered source, 0 of them context only.ReadWhat HEY derivedThe quality gate’s stored decision: “Verified Builder”.Not concludedA verified builder is one whose shipping HEY confirmed from public evidence. It does not say who runs the project — that is the ownership claim, a separate check.
Market figures are context only and never change activity status. Methodology
LinksGitHubSources

Latest ship

Code changes this week (since Mon 12 Oct) · 4 commits

Code activitySource linked

14 active days in hashlock-tech/hashlock-mcp.

What changed, in the repository’s own words:

This week HEY looked inside 2 of 4 commits to see what changed: 1 changed code, 1 documentation or maintenance only. One code change is enough for the week to count, so HEY stopped there.

Record ship:cba307fb… · HEY counts it as building; it does not judge the release’s quality or what it means for the token.

View evidence ↗

Builder activity

Bars: meaningful, source-backed ships per week (count). Weeks run Monday to Sunday, UTC, labelled by their Monday. Commits are aggregated, a code week counted once. Hatched: 11 weeks before HEY began reading this project’s sources — not yet read, not zero.

Build timeline

  1. v0.1.8 — Bearer-compatible endpoint fix

    GitHub releaseSource verified

    v0.1.8 — Bearer-compatible endpoint fix Fixes a default-endpoint regression introduced in v0.1.7 that made all unauthenticated stdio calls return 401 Unauthorized · missing api-token for external MCP clients (Claude Desktop, Cursor, Windsurf, Raycast, anything not running inside… Show all
    • v0.1.8 — Bearer-compatible endpoint fix Fixes a default-endpoint regression introduced in v0.1.7 that made all unauthenticated stdio calls return 401 Unauthorized
    • missing api-token for external MCP clients (Claude Desktop, Cursor, Windsurf, Raycast, anything not running inside a browser). Root cause Default HASHLOCK_ENDPOINT in v0.1.7 pointed at https://hashlock.markets/api/graphql — the browser-only Next.js SSR proxy that authenticates via the httpOnly api-token cookie set by /sign/login. External MCP clients do not maintain a cookie jar, so every…
    View evidence

  2. v0.1.7 — Canonical MCP server for Hashlock Markets

    GitHub releaseSource verified

    ## ⚠️ DEPRECATED — DO NOT USE > > v0.1.7 ships with a default HASHLOCK_ENDPOINT of https://hashlock.markets/api/graphql — the browser-only cookie proxy. External MCP clients (Claude Desktop, Cursor, Windsurf, Raycast) cannot authenticate against it because they do not maintain… Show all
    • ## ⚠️ DEPRECATED — DO NOT USE > > v0.1.7 ships with a default HASHLOCK_ENDPOINT of https://hashlock.markets/api/graphql — the browser-only cookie proxy. External MCP clients (Claude Desktop, Cursor, Windsurf, Raycast) cannot authenticate against it because they do not maintain cookies, so every Bearer-authenticated call returns 401 Unauthorized
    • missing api-token. > > Use v0.1.8 instead. The npm tarball for v0.1.7 has been deprecated (npm view @hashlock-tech/mcp@0.1.7 deprecated). --- v0.1.7 — Canonical…
    View evidence

Research notes

Written by HEY researchers and reviewed before publishing. Commentary with sources — not the project's own claims, and not evidence of shipping.

Know something about hashlock-mcp? Sign in with GitHub to submit a research note. Notes are reviewed before they appear here.

Research coverage

HEY can answer 8 of the 11 research questions that apply.

8 of 11 applicable dimensions measuredShow each dimension

Identity

  • IdentityMeasuredRead 4h ago.

Building

  • Building activityMeasuredRead 7m ago.
  • RepositoriesMeasured
  • ReleasesMeasuredRead 5mo ago.
  • TimelineMeasured

Official site

  • Official docsNo sourceNo official website on record.
  • API descriptionNo sourceNo official website on record.
  • Official site changesNo sourceNo official website on record.

Code and packages

  • Repository detailsMeasuredRead 3h ago.
  • Published packagesMeasuredRead 10m ago.
  • Package advisoriesMeasuredRead 3h ago.

Not applicable here: Contract creation, Contract activity, Verified source, Contract interface, Current market, Market history, Supply distribution, Locks, Market checks, Protocol economics.

A count of what HEY has read, never a score: projects are not compared or ordered by it. Unknown is never zero. The same states: coverage API.

Sources