nittim.com

## Keys Paid tools need a nittim key: mint one at https://nittim.com/keys and send it as the bearer token in your MCP server config. `scan_source`, `list_modules`, `estimate_audit` and `describe_protocol` work free with no key. A paid tool called with no key may answer with a 401 sign-in challenge instead of a tool result; a client with no OAuth of its own sends `x-nittim-auth: none` in its server config to get a plain tool error instead. ## Spending money (every paid tool, identical protocol) The first call NEVER runs and NEVER charges — it answers with the price as a `cost` object, in `structuredContent` and as a fenced JSON block of the exact arguments to send back. Show that price to the person you are working for, then call again with `confirmedCost` set to the exact `cost` you were quoted; a price that moved is refused and re-quoted, never charged. Unless the key was deliberately made autonomous, that second call answers with a one-time link the ACCOUNT OWNER opens and confirms — their yes, never yours, and never inferred. A plain third call with the same arguments then runs once at that price, or set `authorization` to the id from the second answer. Repeating the second call while you wait is free and safe. ## Two tiers `audit_repo` and `audit_source` default to Audit: one structured pass over the highest-signal source. `fullScan: true` buys Full Audit — every eligible source file, priced by pass count — and `estimate_audit` prices either without charging or running anything. ## How audits are delivered `audit_repo` and `audit_source` submit and return an id immediately; nothing runs inside the call. The report lands Usually within 15 minutes* — poll `get_audit` with the id to read it. * Most reports land within 15 minutes. Worst case, 24 hours. Subscribers can run `audit_source` on their own Anthropic key via the `x-nittim-anthropic-key` header (BYOK Pro), which returns its report in the call. ## Before the AI audit Call `get_loop` — free, no key — and run it on a repository you own before spending on an audit. An AI audit is worth more on fixed code, so the Nittim Loop comes first — fix, re-run, and stop at two consecutive passes that find nothing new. The AI audit is the sensible step from there. On a repository you own, running this costs nothing and sends nothing — fix and commit before spending on an AI audit. Claude Code users can install it as the nittim-loop skill from github.com/ilanwolberger/nittim-mcp instead of fetching https://nittim.com/selfcheck.md by hand each time. ## The full protocol `describe_protocol` is free, needs no key, and returns this in full detail — the money protocol, the tiers, the Nittim Loop and its reward rules, and dispute guidance. ## Server version This is nittim's MCP server, version 0.2.0+a79f026. If tools suddenly error or look missing after they worked before, the server was likely updated — reconnect or reload the nittim MCP connection in your client and try again; nothing is lost and nothing was charged. More cases — a 401, a long-running audit, a "not found" on an id you own — are answered at https://nittim.com/agents.md under Troubleshooting.