CrossingKey MCP
REMOTE · MCP.CROSSINGKEYINTELLIGENCE.COM
Agent-native MCP for governed commerce, x402 payments, paid capabilities, and verifiable receipts.
Available components
Last scanned (12 hours ago)
Scores higher than 8% of remote servers
Reachable. Last reached 5 Nov 2026.
Category Finance and Payments
Recent critical change
Authorization (3 Nov 2026). See the changelog before you install this server.
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security57
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- Authorisation not yet verified: we couldn't confirm whether this endpoint requires it. View diagnostics → Unverified
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- HSTS check failed: the Strict-Transport-Security header is absent. See how to fix → View diagnostics → Fail
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability0
- Transport check failed: declared streamable-http, but the endpoint returned HTTP 530. See how to fix → View diagnostics → Fail
Schema Quality & AI Usability0
- Schema not yet verified: we couldn't read the endpoint's schema, or could read only part of its tool list.Unverified
Stability & Change Management0
- Stability not yet verified: not enough scan history yet (needs a 30-day window).Unverified
Tool Coverage0
- Tool coverage not yet verified: we couldn't read the endpoint's tools, or could read only part of the list.Unverified
Tool Safety0
- Tool safety not yet verified: we couldn't read the endpoint's tools, or could read only part of the list.Unverified
Capabilities0
- Capabilities not yet verified: we couldn't read the endpoint's capabilities.Unverified
Unverified: 5 categories
Categories scored 0 because we could not verify them: authentication we do not have, an unreachable endpoint, or not enough scan history. We only credit what we can confirm.
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 4 Nov 26 −58
- Endpoint reachability: reachable → not serving MCP ▼ security
- Stability: fail → unverified ▼ security
- Authorization: fail → unverified ▼ security
- Tool safety: pass → unverified ▼ security
- Transport: pass → fail ▼ security
- HSTS header: pass → fail ▼ security
- Schema quality: 100 → unverified ▼ functional
- Capabilities: pass → unverified ▼ functional
- Tool coverage: 100 → unverified ▼ functional
- 3 Nov 26 +58
- Authorization: unverified → fail ▼ critical
- Stability: unverified → fail ▼ security
- Injection markers: unverified → pass ▲ security
- HSTS header: fail → pass ▲ security
- Transport: fail → pass ▲ security
- Endpoint reachability: not serving MCP → reachable ▲ functional
- Tool coverage: unverified → 100 ▲ functional
- Schema quality: unverified → 100 ▲ functional
- MCP protocol: unverified → pass ▲ functional
- 29 Oct 26 −60
- Endpoint reachability: reachable → not serving MCP ▼ security
- Authorization: fail → unverified ▼ security
- Stability: pass → unverified ▼ security
- Tool safety: pass → unverified ▼ security
- Transport: pass → fail ▼ security
- HSTS header: pass → fail ▼ security
- Schema quality: 100 → unverified ▼ functional
- Capabilities: pass → unverified ▼ functional
- Tool coverage: 100 → unverified ▼ functional
- 27 Oct 26 +60
- Authorization: unverified → fail ▼ critical
- Injection markers: unverified → pass ▲ security
- Stability: unverified → pass ▲ security
- HSTS header: fail → pass ▲ security
- Transport: fail → pass ▲ security
- Endpoint reachability: not serving MCP → reachable ▲ functional
- Tool coverage: unverified → 100 ▲ functional
- Schema quality: unverified → 100 ▲ functional
- MCP protocol: unverified → pass ▲ functional
- Server version: 4.0.0-rc.1 → 5.0.1 functional
- 19 Oct 26 −44
- Endpoint reachability: reachable → not serving MCP ▼ security
- Stability: fail → unverified ▼ security
- Authorization: fail → unverified ▼ security
- Tool safety: pass → unverified ▼ security
- Transport: pass → fail ▼ security
- Schema quality: 100 → unverified ▼ functional
- Capabilities: pass → unverified ▼ functional
- Tool coverage: 100 → unverified ▼ functional
- 18 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 1 to 4.
- 17 Oct 26 −1
No change was recorded against any check on this day. Stability & Change Management went from 4 to 1.
- 16 Oct 26 +44
- Authorization: unverified → fail ▼ critical
- Stability: unverified → fail ▼ security
- Injection markers: unverified → pass ▲ security
- Transport: fail → pass ▲ security
- The server rewrote its instructions, which are the text every model session reads security
- Tool “credits.options” rewrote its description, which is the text the model reads security
- Tool “xkey.validate” rewrote its description, which is the text the model reads security
- Endpoint reachability: not serving MCP → reachable ▲ functional
- Tool coverage: 95% → 100% ▲ functional
- Tool coverage: unverified → 100 ▲ functional
- Schema quality: unverified → 100 ▲ functional
- MCP protocol: unverified → pass ▲ functional
- Schema quality: excellent → good functional
- Server version: 3.0.1 → 4.0.0-rc.1 functional
- New tool “mcp.launch_audit” functional
- New tool “x402.purchase_path_audit” functional
- “artifact.integrity_manifest” dropped the optional parameter “idempotency_key” cosmetic
- “artifact.integrity_manifest” dropped the optional parameter “payment_payload” cosmetic
- Tool “xkey.validate” changed its title: Validate structured XKEY intake → XKEY Intake Validation cosmetic
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 5 Nov 2026 · Probed https://mcp.crossingkeyintelligence.com/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=crossingkeyintelligence.com | CN=YE2,O=Let's Encrypt,C=US | 16 Oct 2026 | 14 Jan 2027 | ECDSA 256 | ECDSA-SHA384 | 604e45e5ea367038aefaec30a8820c19cc8 |
| SANs: *.crossingkeyintelligence.com, crossingkeyintelligence.com | ||||||
| CN=YE2,O=Let's Encrypt,C=US (CA) | CN=Root YE,O=ISRG,C=US | 3 Sept 2025 | 2 Sept 2028 | ECDSA 384 | ECDSA-SHA384 | 4df3b15dd6c0784c507cd37b58e6f115 |
| CN=Root YE,O=ISRG,C=US (CA) | CN=ISRG Root X2,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | ECDSA-SHA384 | 872165fc34b6e5fba8add5b3705fb53a |
| CN=ISRG Root X2,O=Internet Security Research Group,C=US (CA) | CN=ISRG Root X1,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | SHA256-RSA | 6c8f1dc727c7117f7baf853ac980f9cd |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of mcp.crossingkeyintelligence.com. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| com. | present | 19718 | 13 | Verified |
| crossingkeyintelligence.com. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication Inconclusive
We could not reach the endpoint well enough to judge its authorisation posture.
| Result | Inconclusive |
|---|---|
| HTTP status | 530 |
| Header | Value |
|---|---|
| x-frame-options | SAMEORIGIN |
| referrer-policy | same-origin |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://mcp.crossingkeyintelligence.com/mcp | HTTP error | 530 | |
| http (plaintext) | http://mcp.crossingkeyintelligence.com/mcp | HTTPS enforced | 301 | https://mcp.crossingkeyintelligence.com/mcp |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
artifact.integrity_manifest Purchase Artifact Integrity Manifest ~79
PAID $0.10 USDC on Base via x402. Creates deterministic SHA-256 entries and a root manifest hash for supplied text artifacts. Calling this MCP tool does not spend funds; it returns the exact PAYMENT-REQUIRED challenge and canonical paid execution endpoint.
| Name | Type | Req | Description |
|---|---|---|---|
| artifacts | array | yes | Artifacts to include in the integrity manifest. |
| Name | Type | Req | Description |
|---|---|---|---|
| accepts | array | – | – |
| asset | string|null | – | – |
| capability | string | – | – |
| confirmation_expectations | string | – | – |
| entitlementId | string | – | – |
| error | string | – | – |
| execution_mode | string | – | – |
| execution_url | string|null | – | – |
| extensions | object | – | – |
| input | object | – | – |
| instruction | string | – | – |
| network | string|null | – | – |
| pay_to | string|null | – | – |
| payment_required | boolean | – | – |
| payment_required_header | string | – | – |
| price | string|null | – | – |
| purchaseId | string | – | – |
| resource | object | – | – |
| settlement_expectations | string | – | – |
| status | string | – | – |
| x402Version | number | – | – |
No examples provided.
capability.get ~73
FREE. Use name for legacy deterministic capability metadata or capabilityId for public marketplace metadata, rights and provenance.
| Name | Type | Req | Description |
|---|---|---|---|
| capabilityId | – | – | Exact marketplace capability identifier. Use either capabilityId or name, never both. |
| name | string | – | Exact deterministic first-party machine capability name. Use either name or capabilityId, never both. |
Structured output declared, but exposes no named fields.
No examples provided.
capability.search ~220
FREE MARKETPLACE FILTERED DISCOVERY ONLY. Search active public marketplace capabilities when one or more filters are known: text, category, provider, delivery type, or price. Metadata is free; purchased execution and deliverables are not. Do NOT use for unfiltered browsing; use catalog.list. Do NOT use for CrossingKey digital/service offers; use offers.list. For one exact capabilityId use capability.get.
| Name | Type | Req | Description |
|---|---|---|---|
| category | string | – | Optional exact marketplace category identifier. |
| deliveryType | string | – | Optional capability delivery-type filter. |
| limit | integer | – | Maximum number of results to return; 1-100, defaults to 25. |
| maxPrice | – | – | Optional inclusive maximum USDC price in atomic units. |
| minPrice | string | – | Optional inclusive minimum USDC price in atomic units. |
| offset | integer | – | Zero-based result offset; defaults to 0. |
| provider | – | – | Optional exact provider identifier. |
| query | string | – | Optional case-insensitive search text across capability name, description, and category; maximum 160 characters. |
Structured output declared, but exposes no named fields.
No examples provided.
catalog.list ~120
FREE MARKETPLACE UNFILTERED DISCOVERY ONLY. Page through active public marketplace capabilities when no search filters are needed. Metadata is free; execution, entitlement, delivery, and purchased output remain gated. Do NOT use for filtered discovery; use capability.search. Do NOT use for CrossingKey digital/service offers; use offers.list. For one exact capabilityId use capability.get.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | Maximum number of results to return; 1-100, defaults to 25. |
| offset | integer | – | Zero-based result offset; defaults to 0. |
Structured output declared, but exposes no named fields.
No examples provided.
commerce.quote ~125
FREE MARKETPLACE PAYMENT QUOTE ONLY. After selecting an active marketplace capabilityId, return authoritative gross price, CrossingKey fee, provider share, and x402 v1/v2 payment requirements. A quote grants no entitlement and performs no execution. Do NOT use for first-party paid capabilities; use cost.estimate (first-party x402 capabilities have fixed catalog prices and no quote stage). Do NOT use for generic price lookup; use cost.estimate. Paid marketplace execution requires capability.purchase with authorization and verified payment.
| Name | Type | Req | Description |
|---|---|---|---|
| capabilityId | string | yes | Exact active public marketplace capability identifier to quote. |
Structured output declared, but exposes no named fields.
No examples provided.
cost.estimate ~47
FREE read-only cost estimate. This tool never creates checkout, reserves funds, or contacts a facilitator.
| Name | Type | Req | Description |
|---|---|---|---|
| item_id | string | yes | Public offer or paid capability identifier returned by offers.list. |
| Name | Type | Req | Description |
|---|---|---|---|
| cost | – | – | – |
| cost_state | string | yes | – |
| found | boolean | yes | – |
| item_id | string | yes | – |
| payment_required | boolean | yes | – |
| payment_started | boolean | – | – |
No examples provided.
creator.apply ~73
FREE WRITE. Private creator intake for assets needing a capability model. No ownership transfer and AI training defaults false.
| Name | Type | Req | Description |
|---|---|---|---|
| provider | object | yes | Proposed provider identity for this private creator intake. |
| summary | string | yes | Private creator intake summary describing the asset, service, or capability to evaluate; 1-4000 characters. |
Structured output declared, but exposes no named fields.
No examples provided.
credits.options ~38
FREE read-only legacy credit compatibility status. New prepaid-credit sales are disabled in v4; historical paid credits remain redeemable through a separate compatibility path.
Input schema present but exposes no named parameters.
| Name | Type | Req | Description |
|---|---|---|---|
| free | boolean | yes | – |
| packs | array | yes | – |
| payment_started | boolean | yes | – |
No examples provided.
execution.preflight ~59
FREE read-only execution preflight. Returns READY_FOR_HUMAN_AUTHORIZATION only; it never authorizes, purchases, settles, executes, or creates records.
| Name | Type | Req | Description |
|---|---|---|---|
| item_id | string | yes | Public offer or paid capability identifier returned by offers.list. |
| Name | Type | Req | Description |
|---|---|---|---|
| authorization_required | boolean | yes | – |
| checks | object | yes | – |
| entitlement_created | boolean | yes | – |
| execution_started | boolean | yes | – |
| item_id | string | yes | – |
| payment_started | boolean | yes | – |
| reason | string | yes | – |
| receipt_created | boolean | yes | – |
| requirements_satisfied | boolean | yes | – |
| state | string | yes | – |
No examples provided.
hash.encode Purchase SHA-256 Text Hash ~72
PAID $0.01 USDC on Base via x402. Computes a SHA-256 digest and UTF-8 byte count for supplied text. Calling this MCP tool returns a payment challenge and does not autonomously spend funds.
| Name | Type | Req | Description |
|---|---|---|---|
| text | string | yes | Input text, maximum 65536 UTF-8 bytes. |
| Name | Type | Req | Description |
|---|---|---|---|
| accepts | array | – | – |
| asset | string|null | – | – |
| capability | string | – | – |
| confirmation_expectations | string | – | – |
| entitlementId | string | – | – |
| error | string | – | – |
| execution_mode | string | – | – |
| execution_url | string|null | – | – |
| extensions | object | – | – |
| input | object | – | – |
| instruction | string | – | – |
| network | string|null | – | – |
| pay_to | string|null | – | – |
| payment_required | boolean | – | – |
| payment_required_header | string | – | – |
| price | string|null | – | – |
| purchaseId | string | – | – |
| resource | object | – | – |
| settlement_expectations | string | – | – |
| status | string | – | – |
| x402Version | number | – | – |
No examples provided.
json.repair Purchase Conservative JSON Repair ~74
PAID $0.01 USDC on Base via x402. Validates JSON and repairs a limited set of formatting errors. May return supplied content. Calling this MCP tool returns a payment challenge and does not autonomously spend funds.
| Name | Type | Req | Description |
|---|---|---|---|
| text | string | yes | Input text, maximum 65536 UTF-8 bytes. |
| Name | Type | Req | Description |
|---|---|---|---|
| accepts | array | – | – |
| asset | string|null | – | – |
| capability | string | – | – |
| confirmation_expectations | string | – | – |
| entitlementId | string | – | – |
| error | string | – | – |
| execution_mode | string | – | – |
| execution_url | string|null | – | – |
| extensions | object | – | – |
| input | object | – | – |
| instruction | string | – | – |
| network | string|null | – | – |
| pay_to | string|null | – | – |
| payment_required | boolean | – | – |
| payment_required_header | string | – | – |
| price | string|null | – | – |
| purchaseId | string | – | – |
| resource | object | – | – |
| settlement_expectations | string | – | – |
| status | string | – | – |
| x402Version | number | – | – |
No examples provided.
machine_commerce.readiness_audit Purchase Machine-Commerce Readiness Audit ~75
PAID $2.00 USDC on Base via x402. Checks machine-commerce discovery and health surfaces. Calling this MCP tool does not spend funds; it returns the exact PAYMENT-REQUIRED challenge and canonical paid execution endpoint.
| Name | Type | Req | Description |
|---|---|---|---|
| url | string | yes | Base URL of the machine-commerce service to audit. |
| Name | Type | Req | Description |
|---|---|---|---|
| accepts | array | – | – |
| asset | string|null | – | – |
| capability | string | – | – |
| confirmation_expectations | string | – | – |
| entitlementId | string | – | – |
| error | string | – | – |
| execution_mode | string | – | – |
| execution_url | string|null | – | – |
| extensions | object | – | – |
| input | object | – | – |
| instruction | string | – | – |
| network | string|null | – | – |
| pay_to | string|null | – | – |
| payment_required | boolean | – | – |
| payment_required_header | string | – | – |
| price | string|null | – | – |
| purchaseId | string | – | – |
| resource | object | – | – |
| settlement_expectations | string | – | – |
| status | string | – | – |
| x402Version | number | – | – |
No examples provided.
marketplace.describe ~52
FREE, read-only marketplace overview. Use this first for marketplace-specific capability commerce, fee policy, creator rights, payment rails, and active catalog counts; use provider.describe for the broader CrossingKey provider and legacy offer surface.
Input schema present but exposes no named parameters.
Structured output declared, but exposes no named fields.
No examples provided.
mcp.launch_audit MCP Launch Audit ~71
PAID $9.00 USDC on Base via x402. Performs bounded live MCP discovery, health, transport, schema, and receiver-only checks against a public endpoint. No payment is attempted by the audit.
| Name | Type | Req | Description |
|---|---|---|---|
| url | string | yes | Public HTTP(S) MCP service base URL to audit. |
| Name | Type | Req | Description |
|---|---|---|---|
| accepts | array | – | – |
| asset | string|null | – | – |
| capability | string | – | – |
| confirmation_expectations | string | – | – |
| entitlementId | string | – | – |
| error | string | – | – |
| execution_mode | string | – | – |
| execution_url | string|null | – | – |
| extensions | object | – | – |
| input | object | – | – |
| instruction | string | – | – |
| network | string|null | – | – |
| pay_to | string|null | – | – |
| payment_required | boolean | – | – |
| payment_required_header | string | – | – |
| price | string|null | – | – |
| purchaseId | string | – | – |
| resource | object | – | – |
| settlement_expectations | string | – | – |
| status | string | – | – |
| x402Version | number | – | – |
No examples provided.
mcp.schema_audit Purchase MCP Schema Audit ~77
PAID $1.00 USDC on Base via x402. Scores supplied MCP tool schemas for discoverability, descriptions, and bounded input contracts. Calling this MCP tool does not spend funds; it returns the exact PAYMENT-REQUIRED challenge and canonical paid execution endpoint.
| Name | Type | Req | Description |
|---|---|---|---|
| tools | array | yes | MCP tool definitions to audit. |
| Name | Type | Req | Description |
|---|---|---|---|
| accepts | array | – | – |
| asset | string|null | – | – |
| capability | string | – | – |
| confirmation_expectations | string | – | – |
| entitlementId | string | – | – |
| error | string | – | – |
| execution_mode | string | – | – |
| execution_url | string|null | – | – |
| extensions | object | – | – |
| input | object | – | – |
| instruction | string | – | – |
| network | string|null | – | – |
| pay_to | string|null | – | – |
| payment_required | boolean | – | – |
| payment_required_header | string | – | – |
| price | string|null | – | – |
| purchaseId | string | – | – |
| resource | object | – | – |
| settlement_expectations | string | – | – |
| status | string | – | – |
| x402Version | number | – | – |
No examples provided.
offers.list ~74
FREE read-only public offer and capability discovery. This tool never starts payment or execution.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | Maximum number of public metadata records to return. |
| offset | integer | – | Zero-based index of first matching record; use next_offset to retrieve the next page. |
| query | string | – | Optional bounded search text. |
| Name | Type | Req | Description |
|---|---|---|---|
| free | boolean | yes | – |
| next_offset | – | yes | – |
| offers | array | yes | – |
| payment_started | boolean | yes | – |
| total | integer | yes | – |
No examples provided.
openapi.quality_audit Purchase OpenAPI Quality Audit ~76
PAID $1.00 USDC on Base via x402. Evaluates structural quality and required fields in an OpenAPI document. Calling this MCP tool does not spend funds; it returns the exact PAYMENT-REQUIRED challenge and canonical paid execution endpoint.
| Name | Type | Req | Description |
|---|---|---|---|
| spec | object | yes | Parsed OpenAPI document to audit. |
| Name | Type | Req | Description |
|---|---|---|---|
| accepts | array | – | – |
| asset | string|null | – | – |
| capability | string | – | – |
| confirmation_expectations | string | – | – |
| entitlementId | string | – | – |
| error | string | – | – |
| execution_mode | string | – | – |
| execution_url | string|null | – | – |
| extensions | object | – | – |
| input | object | – | – |
| instruction | string | – | – |
| network | string|null | – | – |
| pay_to | string|null | – | – |
| payment_required | boolean | – | – |
| payment_required_header | string | – | – |
| price | string|null | – | – |
| purchaseId | string | – | – |
| resource | object | – | – |
| settlement_expectations | string | – | – |
| status | string | – | – |
| x402Version | number | – | – |
No examples provided.
pii.scan Purchase PII Pattern Scan ~78
PAID $0.01 USDC on Base via x402. Detects selected personal-data patterns and returns classifications and positions, not matched values. Heuristic, not comprehensive. Calling this MCP tool returns a payment challenge and does not autonomously spend funds.
| Name | Type | Req | Description |
|---|---|---|---|
| text | string | yes | Input text, maximum 65536 UTF-8 bytes. |
| Name | Type | Req | Description |
|---|---|---|---|
| accepts | array | – | – |
| asset | string|null | – | – |
| capability | string | – | – |
| confirmation_expectations | string | – | – |
| entitlementId | string | – | – |
| error | string | – | – |
| execution_mode | string | – | – |
| execution_url | string|null | – | – |
| extensions | object | – | – |
| input | object | – | – |
| instruction | string | – | – |
| network | string|null | – | – |
| pay_to | string|null | – | – |
| payment_required | boolean | – | – |
| payment_required_header | string | – | – |
| price | string|null | – | – |
| purchaseId | string | – | – |
| resource | object | – | – |
| settlement_expectations | string | – | – |
| status | string | – | – |
| x402Version | number | – | – |
No examples provided.
prompt.audit Purchase Prompt Heuristic Audit ~66
PAID $0.01 USDC on Base via x402. Scores selected prompt structure signals using deterministic heuristics. Calling this MCP tool returns a payment challenge and does not autonomously spend funds.
| Name | Type | Req | Description |
|---|---|---|---|
| text | string | yes | Input text, maximum 65536 UTF-8 bytes. |
| Name | Type | Req | Description |
|---|---|---|---|
| accepts | array | – | – |
| asset | string|null | – | – |
| capability | string | – | – |
| confirmation_expectations | string | – | – |
| entitlementId | string | – | – |
| error | string | – | – |
| execution_mode | string | – | – |
| execution_url | string|null | – | – |
| extensions | object | – | – |
| input | object | – | – |
| instruction | string | – | – |
| network | string|null | – | – |
| pay_to | string|null | – | – |
| payment_required | boolean | – | – |
| payment_required_header | string | – | – |
| price | string|null | – | – |
| purchaseId | string | – | – |
| resource | object | – | – |
| settlement_expectations | string | – | – |
| status | string | – | – |
| x402Version | number | – | – |
No examples provided.
provider.apply ~115
FREE public application intake. Always pending, never creates credentials or active capabilities.
| Name | Type | Req | Description |
|---|---|---|---|
| contact | string | yes | Private provider contact reference used for intake and operator follow-up; 3-300 characters. |
| description | string | yes | Public provider description; 1-2000 characters. |
| displayName | string | yes | Public provider display name; 1-120 characters. |
| slug | string | yes | Stable provider slug used for human-readable identity and duplicate checks. |
| website | string | – | Optional public HTTPS/HTTP provider website URL. |
Structured output declared, but exposes no named fields.
No examples provided.
provider.describe ~26
FREE read-only provider and commerce policy discovery. Use this before selecting an offer or capability.
Input schema present but exposes no named parameters.
| Name | Type | Req | Description |
|---|---|---|---|
| manifest | object | yes | – |
| provider | object | yes | – |
| sequence | array | yes | – |
| stopBeforePayment | boolean | yes | – |
No examples provided.
provider.get ~37
FREE. Public active provider metadata. Pending applications require owner or administrator authorization.
| Name | Type | Req | Description |
|---|---|---|---|
| providerId | string | yes | Exact CrossingKey marketplace provider identifier. |
Structured output declared, but exposes no named fields.
No examples provided.
requirements.check ~43
FREE read-only requirements check. This tool never authorizes or starts payment or execution.
| Name | Type | Req | Description |
|---|---|---|---|
| item_id | string | yes | Public offer or paid capability identifier returned by offers.list. |
| Name | Type | Req | Description |
|---|---|---|---|
| delivery_ready | boolean|null | – | – |
| found | boolean | yes | – |
| item_id | string | yes | – |
| payment_required | boolean | yes | – |
| requirements | array | yes | – |
| type | string | – | – |
No examples provided.
result.preview ~47
FREE read-only result-shape preview. This tool never executes a capability or creates an entitlement or receipt.
| Name | Type | Req | Description |
|---|---|---|---|
| item_id | string | yes | Public offer or paid capability identifier returned by offers.list. |
| Name | Type | Req | Description |
|---|---|---|---|
| found | boolean | yes | – |
| item_id | string | yes | – |
| payment_started | boolean | – | – |
| preview_state | string | yes | – |
| result_preview | object | – | – |
No examples provided.
secret.scan Purchase Secret Pattern Scan ~77
PAID $0.01 USDC on Base via x402. Detects selected credential patterns and returns classifications and positions, not matched values. Heuristic, not comprehensive. Calling this MCP tool returns a payment challenge and does not autonomously spend funds.
| Name | Type | Req | Description |
|---|---|---|---|
| text | string | yes | Input text, maximum 65536 UTF-8 bytes. |
| Name | Type | Req | Description |
|---|---|---|---|
| accepts | array | – | – |
| asset | string|null | – | – |
| capability | string | – | – |
| confirmation_expectations | string | – | – |
| entitlementId | string | – | – |
| error | string | – | – |
| execution_mode | string | – | – |
| execution_url | string|null | – | – |
| extensions | object | – | – |
| input | object | – | – |
| instruction | string | – | – |
| network | string|null | – | – |
| pay_to | string|null | – | – |
| payment_required | boolean | – | – |
| payment_required_header | string | – | – |
| price | string|null | – | – |
| purchaseId | string | – | – |
| resource | object | – | – |
| settlement_expectations | string | – | – |
| status | string | – | – |
| x402Version | number | – | – |
No examples provided.
x402.compatibility_audit Purchase x402 Compatibility Audit ~80
PAID $1.00 USDC on Base via x402. Audits an x402 endpoint for v1/v2 compatibility defects. Calling this MCP tool does not spend funds; it returns the exact PAYMENT-REQUIRED challenge and canonical paid execution endpoint.
| Name | Type | Req | Description |
|---|---|---|---|
| url | string | yes | Public HTTP(S) x402 endpoint to audit. |
| Name | Type | Req | Description |
|---|---|---|---|
| accepts | array | – | – |
| asset | string|null | – | – |
| capability | string | – | – |
| confirmation_expectations | string | – | – |
| entitlementId | string | – | – |
| error | string | – | – |
| execution_mode | string | – | – |
| execution_url | string|null | – | – |
| extensions | object | – | – |
| input | object | – | – |
| instruction | string | – | – |
| network | string|null | – | – |
| pay_to | string|null | – | – |
| payment_required | boolean | – | – |
| payment_required_header | string | – | – |
| price | string|null | – | – |
| purchaseId | string | – | – |
| resource | object | – | – |
| settlement_expectations | string | – | – |
| status | string | – | – |
| x402Version | number | – | – |
No examples provided.
x402.purchase_path_audit x402 Purchase-Path Audit ~86
PAID $19.00 USDC on Base via x402. Performs a bounded no-payment purchase-challenge audit for a selected capability, validating status, requirements, destination, amount, and receiver-only controls.
| Name | Type | Req | Description |
|---|---|---|---|
| capability | string | yes | Capability name whose no-payment challenge should be audited. |
| url | string | yes | Public HTTP(S) x402 service base URL. |
| Name | Type | Req | Description |
|---|---|---|---|
| accepts | array | – | – |
| asset | string|null | – | – |
| capability | string | – | – |
| confirmation_expectations | string | – | – |
| entitlementId | string | – | – |
| error | string | – | – |
| execution_mode | string | – | – |
| execution_url | string|null | – | – |
| extensions | object | – | – |
| input | object | – | – |
| instruction | string | – | – |
| network | string|null | – | – |
| pay_to | string|null | – | – |
| payment_required | boolean | – | – |
| payment_required_header | string | – | – |
| price | string|null | – | – |
| purchaseId | string | – | – |
| resource | object | – | – |
| settlement_expectations | string | – | – |
| status | string | – | – |
| x402Version | number | – | – |
No examples provided.
xkey.validate XKEY Intake Validation ~100
PAID $0.10 USDC on Base via x402. Validates and normalizes one bounded XKEY intake payload. Calling this MCP tool returns the exact PAYMENT-REQUIRED challenge and does not spend funds.
| Name | Type | Req | Description |
|---|---|---|---|
| idempotency_key | string | yes | Unique client-generated idempotency key; 8-160 ASCII characters. |
| raw_intake | string | yes | Raw intake text to validate and normalize; 2-100000 characters. |
| Name | Type | Req | Description |
|---|---|---|---|
| accepts | array | – | – |
| asset | string|null | – | – |
| capability | string | – | – |
| confirmation_expectations | string | – | – |
| entitlementId | string | – | – |
| error | string | – | – |
| execution_mode | string | – | – |
| execution_url | string|null | – | – |
| extensions | object | – | – |
| input | object | – | – |
| instruction | string | – | – |
| network | string|null | – | – |
| pay_to | string|null | – | – |
| payment_required | boolean | – | – |
| payment_required_header | string | – | – |
| price | string|null | – | – |
| purchaseId | string | – | – |
| resource | object | – | – |
| settlement_expectations | string | – | – |
| status | string | – | – |
| x402Version | number | – | – |
No examples provided.
How do I install the CrossingKey MCP server?
CrossingKey MCP is a hosted endpoint at https://mcp.crossingkeyintelligence.com/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · mcp.crossingkeyintelligence.com
claude mcp add --transport http com-crossingkeyintelligence-crossingkey-mcp 'https://mcp.crossingkeyintelligence.com/mcp'
What is the CrossingKey MCP server?
CrossingKey MCP is listed in the public MCP registry as com.crossingkeyintelligence/crossingkey-mcp. Agent-native MCP for governed commerce, x402 payments, paid capabilities, and verifiable receipts. This page covers its hosted endpoint (https://mcp.crossingkeyintelligence.com/mcp).
Is the CrossingKey MCP server safe to use?
CrossingKey MCP scores 23 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the CrossingKey MCP server expose?
CrossingKey MCP exposes 28 tools: marketplace.describe, provider.apply, provider.get, capability.get, capability.search, and 23 more. Their descriptions and schemas cost roughly 2,160 tokens of context every time the server is loaded.
Does the CrossingKey MCP server require authentication?
Its publisher declares no required credentials for CrossingKey MCP. We have not been able to confirm that against the live endpoint, and a server can require authorisation without declaring it here.
Is the CrossingKey MCP server still maintained?
CrossingKey MCP is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.