
Security News
Lovable’s OJ Rewrites Vite’s Dev Server in Rust as AI Lowers the Cost of Forking Open Source
Lovable’s OJ rewrites Vite’s dev server in Rust, reducing memory use and preview times as AI lowers the cost of open source reimplementation.
neurodynamic-mcp
Advanced tools
Audio and LLM APIs for agents: free discovery and explicitly capped USDC purchases
Connect an MCP-compatible agent to NeuroDynamic audio and LLM APIs.
Free by default. Discover services, compare seven voices and inspect prices without a wallet. Purchases are optional and explicitly enabled by the wallet owner.
| Tool | What it does | Charge |
|---|---|---|
| catalogue | Read services, voices, schema or private-cloning requirements | Free |
| quote | Check the live price and payment details | Free |
| purchase_json | Generate catalogue narration or either LLM's text | Explicit purchase |
| transcribe_file | Upload and transcribe your audio | Explicit purchase |
| payment_status | Inspect an existing purchase; query LLM payment recovery | Free |
| budget_status | See the cumulative client spending cap | Free |
Current purchases use native USDC on Base, x402 v2 exact, an EOA wallet. A future merchant network option will not silently change which network this client signs for. SOL-token payments, other chains, smart accounts and automatic bridging are not supported by this client release.
Private cloning is discoverable here; purchase/enrolment stays in the approved-account workflow. This adapter does not enrol voices, bypass consent review or hold cloning bearer credentials. The audio starter includes the separate workflow.
This runs locally on the requesting machine using stdio. It is not a hosted /mcp URL, and it does not open a port. No NeuroDynamic account is needed for catalogue narration, transcription or LLM purchases.
Python 3.10+ on Linux or macOS. Windows users can use WSL. The budget lock uses POSIX file locking.
Download the ZIP and its SHA-256 file from the same official release location. Check the checksum, unpack into a directory you control, then:
python3 -m venv .venv
.venv/bin/pip install -r requirements.lock
The lock records the exact dependencies tested for this release. requirements.txt lists direct dependencies. These are client dependencies, not a disclosure of private infrastructure versions.
Add this to your MCP application's server configuration, replacing the two absolute paths:
{
"mcpServers": {
"neurodynamic": {
"command": "/absolute/path/neurodynamic-mcp/.venv/bin/python",
"args": ["/absolute/path/neurodynamic-mcp/server.py"]
}
}
}
Ask the agent: “List NeuroDynamic services and voices, then get a narration quote. Do not purchase anything.”
The adapter checks the live quote against reviewed merchant, native USDC token, network, amount and signing-domain values. Prices are introductory; if they change, the adapter stops for an update rather than accepting a higher price automatically.
Use a dedicated low-balance Base wallet. Keep its raw hexadecimal private key in a file owned by the user running the client, with mode 0600; never paste it into an agent prompt or tool call. Wallet keys stay on your requesting machine.
Create a private state directory and, for transcription, a separate input directory. Both should be owned by that user. Audio input files must be mode 0600. Only place files intended for upload in the input directory.
Add owner-controlled env settings to the server configuration:
{
"NEURODYNAMIC_BUYER_KEY_FILE": "/private/path/buyer.key",
"NEURODYNAMIC_STATE": "/private/path/neurodynamic-purchases",
"NEURODYNAMIC_INPUT_DIR": "/private/path/audio-to-upload",
"NEURODYNAMIC_TOTAL_CAP_ATOMIC": "50000"
}
50000 is 0.05 USDC total, not per call or per day. The cap persists across restarts through the state ledger. This initial client limits its configured cap to at most 1 USDC. State files are the budget history: do not delete or replace them to resolve errors. A host with shell access can alter local files, so this is not a sandbox against a malicious local user or agent.
Each purchase also requires confirm_purchase: true in its tool arguments. The owner must authorise spending; a quote is not permission to spend.
Narration example:
{
"service": "narration",
"body": {"input": "Hello from NeuroDynamic.", "voice": "bf_emma"},
"purchase_id": "my-first-narration",
"confirm_purchase": true
}
One MP3, up to 1,000 characters: 0.005 USDC. Available voice IDs: Hazel af_heart, Bella af_bella, Emma bf_emma, Alice bf_alice, George bm_george, Michael am_michael, Ben am_fenrir.
Transcription: use transcribe_file with a filename inside your input directory, a new purchase ID, language: "en" and explicit confirmation. Up to 60 seconds/12 MiB, 0.01 USDC. An unpaid quote never reads or uploads audio.
LLM examples use service: "abliterated" (0.020 USDC) or "abliterated-large" (0.035 USDC). The body needs input, optionally max_tokens (16–512), and explicit adult: true, third_party_processing: true, terms_version: "2026-09-11-llm-v1". Only acknowledge these with the user's authority after reading https://api.neurodynamic.tech/llm. Input is limited to 2,000 UTF-8 bytes. Adults 18+, lawful use; generated content can be wrong.
The adapter reserves budget and saves the signed proof before sending a paid request. It saves returned output locally with mode 0600 and records the receipt. It does not log prompts or private keys.
payment_status after uncertainty. Contact support with the request ID or transaction hash if needed. Do not send private keys, signed proofs or your state database to support.Your local state directory contains signed payment proofs, purchase metadata and returned files. Protect it like wallet material. Requests contain your chosen text/audio. Merchant operational metadata and service-specific retention are explained in the API guides. LLM requests go to third-party providers with separate retention policies; local server content-retention statements do not cover those providers or your client files.
.venv/bin/python -m unittest discover -s tests -v
.venv/bin/python tests/stdio_smoke.py
Unit tests use synthetic HTTP responses and an unfunded temporary signing key. The stdio smoke test performs only free live discovery/quotes and confirms purchases are disabled.
Release validation also completed three separately authorised operator purchases (narration, transcription and LLM), total 0.035 USDC, followed by no-charge duplicate and status checks. These are test activity, not customer sales.
FAQs
Audio and LLM APIs for agents: free discovery and explicitly capped USDC purchases
We found that neurodynamic-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Lovable’s OJ rewrites Vite’s dev server in Rust, reducing memory use and preview times as AI lowers the cost of open source reimplementation.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.