Morning Light Desk MCP — Alexa+ 可流式 HTTP MCP（亚马逊开发者黑客松）
概览
自托管、只读的模型上下文协议服务器，适用于Alexa+及其他MCP主机。它与官方TypeScript SDK（@modelcontextprotocol/server和@modelcontextprotocol/node）在MCP规范或更高版本上通信。 服务器不存储任何东西。它不记录工具参数。它不持有私钥，也没有代码路径来签署、发送、连接或批准任何东西。 check_link和safety_tip是从我们早期的私人原型移植过来的。 1. 粘贴的12字或24字种子短语在任何规则阅读前被拒绝。2. 诈骗规则适用于全文。转发消息如“批准此交易以领取您的空投”或“投资我们的质押池并翻倍您的SOL”，是 ，因为这些词属于发送者，而非请求 Iris 本人。3. 拒绝信涵盖的是请求 Iris 做的事：定价或买卖建议、连接或用钱包登录、签署或批准。4.
概述（AI 翻译）
亚马逊开发者黑客松 — Alexa+ 赛道
自托管、只读的模型上下文协议服务器，适用于Alexa+及其他MCP主机。它使用官方TypeScript SDK（@modelcontextprotocol/server和@modelcontextprotocol/node）在MCP规范2025-11-25或更高版本上使用可流式HTTP。
服务器不存储任何东西。它不记录工具参数。它不持有私钥，也没有代码路径来签署、发送、连接或批准任何东西。
✝️🧿🪬
它的作用
| 工具 | 输入 | 结果 |
|---|---|---|
explain_transaction |
公共索拉纳 signature |
程序、发现和平衡线来自sol-decode.js（复制自我们的页面elghaly-dev/iris-35）。一次getTransaction呼叫公共RPC。 |
check_scam |
A situation：对方说了什么，或他们收到的消息 |
九种模式的固定规则：助记词请求、假支持DM、假空投、双倍赠送、无限批准、权限变更（SetAuthority、系统分配）、紧急“验证钱包”链接、验证/同步或停用、用钱包扫描二维码。返回verdict、reason、why和next_steps。 |
本页由 AI 翻译，技术细节请以原文为准。
README
以下为原文 README 节选，完整内容请查看原文。
iris-alexa
Amazon Developer Hackathon — Alexa+ track
Self-hosted, read-only Model Context Protocol server for Alexa+ and other MCP hosts. It speaks Streamable HTTP with the official TypeScript SDK (@modelcontextprotocol/server and @modelcontextprotocol/node) on MCP spec 2025-11-25 or later.
git clone https://github.com/elghaly-dev/iris-alexa.git
cd iris-alexa
The server stores nothing. It does not log tool arguments. It holds no private key and has no code path that signs, sends, connects, or approves anything.
✝️🧿🪬
What it does
| Tool | Input | Result |
|---|---|---|
explain_transaction |
Public Solana signature |
Programs, findings, and balance lines from sol-decode.js (copied from our page elghaly-dev/iris-35). One getTransaction call to the public RPC. |
check_scam |
A situation: what the person said, or the message they received |
Fixed rules for nine patterns: seed-phrase request, fake support DM, fake airdrop, doubling giveaway, unlimited approval, authority change (SetAuthority, System Assign), urgent “verify wallet” link, validate/sync-or-be-deactivated, QR code to scan with the wallet. Returns verdict, reason, why, and next_steps. |
check_link |
A url or domain |
Official domain, lookalike domain, punycode host, lure words in the host, or a short link it cannot see through. Never opens the link. |
safety_tip |
Optional topic |
One short reminder written to be spoken aloud. Topics: general, seed_phrase, links, approvals, support, qr_codes. |
clean_up_steps |
target: iphone, android, or wallet |
A checklist you do yourself on that device. |
check_link and safety_tip were ported from an earlier private prototype of ours.
AI-assisted analysis of public pages.
Order of checks
- A pasted 12- or 24-word seed phrase is refused before any rule reads it.
- The scam rules run on the whole text. A forwarded message that says “approve this transaction to claim your airdrop” or “invest in our staking pool and double your SOL” is a scam, because those words belong to the sender, not to the person asking Iris.
- Refusals cover what the person asks Iris to do: price or buy/sell advice, connect or sign in with a wallet, sign or approve.
- Otherwise the verdict is
no_known_patternwith the text “This is not a clearance.”
“Never share your seed phrase” by itself is advice and is not flagged. The same sentence followed by “reply with your 24 word phrase here” is a scam, because the request is still there.
Link rules
- Normalize the host with the WHATWG URL parser (add
https://when needed, IDNA toxn--, lowercase, drop a trailing dot, drop the port). Judgement usesURL.hostnamealone, sohttps://[email protected]/isevil.example.
安装
npx mcp-inspector --cli http://127.0.0.1:3000/mcp --transport http --method tools/list