The full upstream README, mirrored here for reference. Install config, tool schemas, adoption signals, and an original overview live on the Patent by Ouroboros Apps listing page.
Patent by Ouroboros is a remote MCP server for inventors, startup founders, patent agents and attorneys, and engineers who need to check whether an idea already appears in the public patent record.
It searches United States patent records on the USPTO Open Data Portal. Google Patents is used only as a link. Every patent number in a tool result is copied from a USPTO response. The server does not fill in numbers when USPTO does not answer.
This is not legal advice. It is not a substitute for a registered patent attorney or agent. A result is not an opinion on patentability, infringement, validity, or freedom to operate.
https://patent-mcp.vercel.app/mcp (live, Streamable HTTP, OAuth sign-in)io.github.LAHutchins91/patentThe hosted MCP address is https://patent-mcp.vercel.app/mcp. A self-hosted copy uses its own origin plus /mcp. Locally that is http://127.0.0.1:8787/mcp.
Sign in when the assistant opens OAuth. Leave the client id and secret empty. The server supports OAuth 2.1 dynamic client registration and PKCE (S256). Do not paste a password or an office API key into the assistant.
Cursor, in ~/.cursor/mcp.json or a project .cursor/mcp.json:
Claude Code:
ChatGPT, Claude, Gemini, Grok, and any other Streamable HTTP client: add the same URL, choose OAuth, and leave client id and secret blank. Full steps are on /connect.
A new account includes 14 days of search access. After the trial, Pro continues through Stripe Checkout. The amount is shown by Stripe, not in this repository.
server.json is the MCP Registry manifest (io.github.LAHutchins91/patent). Its remotes[0].url is the hosted server, https://patent-mcp.vercel.app/mcp, and its icon is https://patent-mcp.vercel.app/logo.jpg. A self-hosted copy should point both at its own origin.
search_patents — keywords, claim language, CPC class, assignee, inventor, and datesget_patent — abstract, claims, status, family, and citations for one recordfind_patent_citations — documents that cite a patent, and documents that patent citessearch_prior_art — an idea description in, the closest USPTO records and their Google Patents links outCitation coverage is the USPTO grant document and USPTO office-action citations. The PatentsView citation graph is paused: USPTO paused the PatentsView PatentSearch API when PatentsView moved to the Open Data Portal on 20 March 2026.
The server listens on port 8787. GET /health returns JSON. billingConfigured is true only when STRIPE_SECRET_KEY, STRIPE_PRICE_MONTHLY, and STRIPE_PRICE_YEARLY are all set.
Tests call the public USPTO host. Office payloads that require a key are mocked. With USPTO_API_KEY in the environment, the live test uses that key instead of expecting the unauthenticated response.
Lawrence needs to supply:
| Variable | Purpose |
|---|---|
APP_BASE_URL | Public origin used as the OAuth issuer and Stripe return URL |
AUTH_SECRET | Signs browser sessions. Required in production |
USPTO_API_KEY | USPTO Open Data Portal key, sent as X-API-KEY. This is the key the hosted server uses. |
EPO_CONSUMER_KEY | Leave unset on the hosted server. The unused client reads it only when a secret is set too. |
EPO_CONSUMER_SECRET | Leave unset on the hosted server. Search stays on United States patents from USPTO. |
STRIPE_SECRET_KEY | Existing Stripe secret |
STRIPE_PRICE_MONTHLY | Existing monthly price id |
STRIPE_PRICE_YEARLY | Existing yearly price id |
STRIPE_WEBHOOK_SECRET | Stripe webhook signature secret |
STORAGE_BACKEND | memory (default), file, http, or blob |
STORAGE_PATH | JSON file used when the backend is file |
STORAGE_URL | GET/PUT URL for one JSON document when the backend is http |
STORAGE_TOKEN | Optional bearer token for that URL |
BLOB_READ_WRITE_TOKEN | Vercel Blob read-write token. Vercel injects this for a linked store. Required when STORAGE_BACKEND=blob |
STORAGE_BLOB_PATH | Blob pathname for the account document. Default patent/accounts.json |
Do not create Stripe products or prices in this app. Do not commit secrets.
USPTO_API_KEY.Old PatentsView API keys do not work on the Open Data Portal.
Patent tools are stateless searches of United States patents on the USPTO Open Data Portal. Trial and subscription state, OAuth clients, and tokens live in one JSON document behind AccountStore.
memory keeps that document in the process. It is the default and is what local tests use. It does not survive a restart or a second serverless instance.file writes STORAGE_PATH (default ./data/patent-store.json). Use it for Docker or a long-running Node process.http GETs and PUTs the same document at STORAGE_URL. Point it at storage you already run. This server does not create a database.blob stores the same document in Vercel Blob at STORAGE_BLOB_PATH (default patent/accounts.json). Set STORAGE_BACKEND=blob on Vercel. The Blob client uses BLOB_READ_WRITE_TOKEN, which Vercel injects when a Blob store is connected. Reads bypass the CDN cache. Writes send ifMatch and retry when another instance updated the document first.OAuth clients, authorization codes, access tokens, and refresh tokens are fields in that document. The consent screen posts the authorization request with the approval; nothing about the grant is kept in process memory. Expired codes and refresh tokens are removed on each write.
Vercel: the Express app is the default export of api/index.ts. vercel.json sends every path to that function and bundles logo.jpg into it, so /logo.jpg is served by the app and repository files such as /package.json are not static assets. Set the environment variables above, including STORAGE_BACKEND=blob. Point the Stripe webhook at https://<your-host>/billing/webhook.
Docker:
Locally, over Streamable HTTP: tools/list and each of the four tools, OAuth registration with PKCE, trial expiry, Stripe checkout request shape, and webhook signature verification. No live Stripe charge was made in tests.
Hosted: the server is deployed at https://patent-mcp.vercel.app. tools/list answers without a token, an unsigned tool call returns 401 with a WWW-Authenticate header, /.well-known/oauth-protected-resource returns 200, and /health reports the USPTO key as configured.
Patent by Ouroboros. More from Ouroboros: https://ouroborosapps.com