The case
Whitepaper
Idea tokenization — where dreamers meet believers.
Version 2.0 · May 2026 · Solana mainnet
§ 08 — Agent-native
Most ideas die in // TODO: comments. The future of building is developers and creators working alongside AI agents — Claude Code, Cursor, Cline, Codex, and the next one — generating ideas at machine speed faster than any single person can act on them. PNL is built to be the place those ideas go.
The thesis
Every developer becomes a 10x ideator. The bottleneck shifts from “having ideas” to “deciding which ones deserve to exist.” A conviction market is exactly the right substrate for that triage.
The surface
@pnlmarket/mcp-server v0.4.0 ships a Model Context Protocol server with 16 tools across read, wallet, identity, and market actions. Any MCP-compatible agent can read live PNL state, pitch ideas as markets, vote on existing ones, and claim rewards — without leaving the terminal.
Two flows ship for every write action:
- ·Deep-link. The agent prepares a draft; the user opens a URL and signs in their browser wallet. Works with any wallet — Phantom, Solflare, Backpack, Privy. No setup beyond what a normal PNL user already has.
- ·Autosign. The MCP signs locally with an encrypted-at-rest keypair and posts the market without a browser bounce. Bounded by a configurable cap (default 0.05 SOL) so the agent can't move large amounts unilaterally.
Trust model
Non-custodial by design. The MCP holds an encrypted keypair on the user's local machine — scrypt (N=217) for key derivation, AES-256-GCM for the secret, BIP39 12-word mnemonic for recovery. The passphrase is delivered via OS-native dialog or PNL_PASSPHRASE env, never typed in chat where it would flow through an LLM API.
The autosign cap is a hard ceiling — per-call overrides can only lower it, never raise. A malicious project description or notification cannot coax the agent into draining the wallet. To raise the ceiling the user must edit ~/.config/pnl/config.json themselves.
Sig-auth challenges on mutating endpoints fold a SHA-256 of the request body into the signature. An attacker who captures a sig within the 5-minute nonce window cannot rewrite the project name, vote side, or claim amount — the hash flips, the sig fails to verify, the backend rejects.
What this means for the grove
The protocol doesn't change. The on-ramp gets cheaper. An idea that would have died in a code comment can now be a live conviction market in roughly ten seconds, signed locally, no browser bounce. The community still decides what deserves to launch — agents just make it easier for more ideas to reach the community in the first place.
Full reference for the MCP server — install, tool surface, backend endpoints, env vars, security model: docs.pnl.market/docs/build/mcp-server