FiatDock
NPM · FIATDOCK-MCP · 2 COMPONENTS · SCANNED AUG 3
Non-custodial USDC <-> bank for AI agents via x402 + Transak. Own funds only; PT + EU/EEA; 18+.
Available components
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score →
Supply Chain Security87
- No malware found by supply-chain analysis.Pass
- Only part of the dependency tree could be resolved (113 of 117), so this covers what we could see, not the whole tree.Partial
- No install/post-install scripts declared.Pass
- Only part of the dependency tree could be resolved (113 of 117), so this covers what we could see, not the whole tree. View diagnostics → Partial
Provenance & Transparency45
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 4 days ago).Pass
- Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability81
- 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 1752 tokens (~146/item across 12 items; 10 tools + 2 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management27
- Stability observed for 8 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
- Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.
npm · fiatdock-mcp
claude mcp add com-fiatdock-fiatdock-mcp -- npx -y fiatdock-mcp
codex mcp add com-fiatdock-fiatdock-mcp -- npx -y fiatdock-mcp
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"com-fiatdock-fiatdock-mcp": {
"type": "local",
"command": [
"npx",
"-y",
"fiatdock-mcp"
],
"enabled": true
}
}
} openclaw mcp add com-fiatdock-fiatdock-mcp --command npx --arg -y --arg fiatdock-mcp
mcp_servers:
com-fiatdock-fiatdock-mcp:
command: "npx"
args: ["-y", "fiatdock-mcp"] {
"mcpServers": {
"com-fiatdock-fiatdock-mcp": {
"command": "npx",
"args": [
"-y",
"fiatdock-mcp"
]
}
}
} Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 2 Aug 26 +45
- Provenance: unverified → fail ▼ security
- Install scripts: unverified → pass ▲ security
- Known CVEs: unverified → partial ▲ security
- Malware scan: unverified → pass ▲ security
- Tool coverage: 100 → unverified ▼ functional
- Schema quality: 100 → unverified ▼ functional
- Schema quality: unverified → excellent ▲ functional
- License: unverified → pass ▲ functional
- Maintenance: unverified → pass ▲ functional
- MCP protocol: unverified → pass ▲ functional
- Stability: unverified → 0.23 ▲ functional
- Dependency health: unverified → partial ▲ functional
- Licence: MIT functional
- 1 Aug 26 −9
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 31 Jul 26 +28
- Schema quality: unverified → 100 ▲ functional
- Tool coverage: unverified → 100 ▲ functional
- 30 Jul 26 −28
- Tool coverage: 100 → unverified ▼ functional
- Schema quality: 100 → unverified ▼ functional
- 27 Jul 26 34
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 3 Aug 2026 · Analysed npm/[email protected]
Provenance none
Ecosystem: npm · Outcome: none
Dependencies 113 packages
113 packages in the resolved dependency tree · 112 deprecated · 29 stale.
The dependency tree was only partially resolved, so these counts may be incomplete.
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.
call_service Call a marketplace service ~232
Invoke a listed FiatDock service. PAID listings go THROUGH the gateway (POST /s/:id) so the non-custodial split is enforced — normally TWO legs (99% seller + 1% FiatDock), or ONE full-price leg to the seller during that seller's first-month 0% launch window; with AGENT_PRIVATE_KEY this signs and pays whatever the 402 lists automatically; without a key it returns the 402 challenge. FREE / first-party listings are forwarded to their real MCP endpoint directly (no payment). Pass the service's expected request body as `args`.
| Name | Type | Req | Description |
|---|---|---|---|
| args | object | — | JSON payload to send to the service (e.g. an MCP JSON-RPC request body) — shape is defined by that service |
| id | string | yes | Listing id (svc_…) to invoke, from search_services |
| maxPriceUsd | number | — | Price-bait guard for PAID listings: refuse to pay if the gateway's total x402 charge exceeds this many USD. Falls back to the FIATDOCK_MAX_PRICE_USD env var; default no ceiling. |
| Name | Type | Req | Description |
|---|---|---|---|
| ok | boolean | yes | true when the underlying service returned a 2xx |
| result | — | — | The service's response body — parsed JSON when it returned JSON, otherwise the raw text |
| routedThroughGateway | boolean | yes | true if PAID (settled 99% seller / 1% FiatDock via /s/:id); false if FREE/first-party direct |
| service | string | yes | Listing id that was invoked |
| status | number | yes | HTTP status returned by the service (or the gateway) |
No examples provided.
create_offramp_session Create off-ramp session (USDC → bank) ~309
Convert the agent's USDC to fiat in the owner's OWN bank account. Returns a one-time checkoutUrl (forward it to the human owner; valid 5 minutes, single use) and a partnerOrderId to track. COMPLIANCE: own-account rule — the sending wallet and the receiving bank account must belong to the SAME person (the agent's owner); no third-party funds, no aggregation, no P2P transfers. 18+; service area: Portugal + Transak-supported EU/EEA countries (NOT the UK). Crypto is volatile; not investment advice.
| Name | Type | Req | Description |
|---|---|---|---|
| cryptoAmount | number | yes | USDC amount to sell |
| customerId | string | — | Stable agent/customer id |
| string | — | Owner's Transak account email | |
| fiatCurrency | string | — | e.g. EUR, default EUR |
| network | string | — | USDC network, default base |
| provider | string | — | Licensed fiat provider to use. Omit for the server default. `mtpelerin` settles by SEPA bank transfer across the SEPA zone and is NOT gated on Transak's activation state; note that its order status i… |
| ref | string | — | Optional referral code (1-64 chars: letters, digits, _ or -) |
| Name | Type | Req | Description |
|---|---|---|---|
| checkoutUrl | string | yes | One-time branded checkout URL (valid ~5 minutes, single use) — forward to the human owner |
| customerKey | string | — | Returned ONCE on the first session with a new customerId — store securely |
| customerKeyNote | string | — | How to use customerKey |
| note | string | — | Next-step instructions |
| partnerOrderId | string | yes | Order id — track it with get_order_status |
No examples provided.
create_onramp_session Create on-ramp session (fiat → USDC) ~305
Buy USDC with the owner's OWN fiat and deliver it to the agent's wallet (address locked). Returns checkoutUrl + partnerOrderId. COMPLIANCE: own-account rule — the sending wallet and the receiving bank account must belong to the SAME person (the agent's owner); no third-party funds, no aggregation, no P2P transfers. 18+; service area: Portugal + Transak-supported EU/EEA countries (NOT the UK). Crypto is volatile; not investment advice.
| Name | Type | Req | Description |
|---|---|---|---|
| customerId | string | — | Stable agent/customer id |
| string | — | Owner's Transak account email | |
| fiatAmount | number | yes | Fiat amount to spend |
| fiatCurrency | string | — | e.g. EUR, default EUR |
| network | string | — | USDC network, default base |
| provider | string | — | Licensed fiat provider to use. Omit for the server default. `mtpelerin` settles by SEPA bank transfer across the SEPA zone and is NOT gated on Transak's activation state; note that its order status i… |
| ref | string | — | Optional referral code (1-64 chars: letters, digits, _ or -) |
| walletAddress | string | yes | Agent wallet that receives USDC |
| Name | Type | Req | Description |
|---|---|---|---|
| checkoutUrl | string | yes | One-time branded checkout URL (valid ~5 minutes, single use) — forward to the human owner |
| customerKey | string | — | Returned ONCE on the first session with a new customerId — store securely |
| customerKeyNote | string | — | How to use customerKey |
| note | string | — | Next-step instructions |
| partnerOrderId | string | yes | Order id — track it with get_order_status |
No examples provided.
get_order_status Get order status ~41
Check the status of an on/off-ramp order by partnerOrderId.
| Name | Type | Req | Description |
|---|---|---|---|
| partnerOrderId | string | yes | Order id returned when the session was created |
| Name | Type | Req | Description |
|---|---|---|---|
| createdAt | string | — | ISO 8601 session creation time |
| customerId | string | — | Customer id the session was created with |
| isBuyOrSell | string | — | Order direction |
| ref | string | — | Referral code if one was set |
| status | string | yes | SESSION_CREATED -> PROCESSING -> COMPLETED | FAILED | CANCELLED | EXPIRED |
| updatedAt | string | — | ISO 8601 time of the last webhook update |
No examples provided.
get_quote Get a free quote ~138
Free quote before paying: exchange rate, total fees (all itemised, incl. the 1% service commission), and amount received. Quotes are indicative, not guaranteed. side=SELL (USDC->fiat) or BUY (fiat->USDC).
| Name | Type | Req | Description |
|---|---|---|---|
| cryptoAmount | number | — | USDC amount (required for SELL) |
| fiatAmount | number | — | Fiat amount (for BUY) |
| fiatCurrency | string | — | e.g. EUR, default EUR |
| network | string | — | USDC network, default base |
| side | string | — | SELL = USDC to fiat, BUY = fiat to USDC |
| Name | Type | Req | Description |
|---|---|---|---|
| feeBreakdown | array | yes | Provider's itemised fee list |
| network | string | — | USDC network the quote assumes |
| note | string | — | Human-readable caveat (quotes are indicative) |
| paymentMethod | string | — | Settlement method, e.g. sepa_bank_transfer |
| rate | number | yes | Exchange rate used (fiat per USDC) |
| side | string | yes | Quote direction |
| totalFee | number | yes | Total fees in fiat, all itemised (incl. the 1% service commission) |
| youReceive | string | yes | Amount received after all fees, e.g. '44.6 EUR' |
| youSend | string | yes | Amount the sender pays, e.g. '50 USDC' |
No examples provided.
get_service Get a marketplace service's detail ~78
Full detail for one FiatDock marketplace listing, including how to call it: PAID listings route through the gateway via call_service (the 99/1 split is enforced); FREE/first-party listings expose their real MCP endpoint to call directly. Read-only, free.
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | yes | Listing id (svc_…) from search_services |
| Name | Type | Req | Description |
|---|---|---|---|
| callHint | string | — | Plain-language instruction for how an agent invokes this listing |
| category | string | — | Category slug (data, search, finance, dev, productivity, ai, web, other) |
| createdAt | string | — | ISO 8601 listing creation time |
| description | string | — | Full description |
| feeBps | number | — | Effective gateway commission in basis points right now: 0 during the seller's first-month launch waiver (buyer pays the FULL price directly to the seller), else 100 (1%). PAID listings only (ADR-0022… |
| firstParty | boolean | — | Platform's own featured listing (official) |
| gatewayUrl | string|null | yes | How to reach it: a relative /s/:id (PAID — invoke via call_service, 99/1 split) OR an absolute MCP endpoint URL (FREE/first-party — call directly). null for stdio (npm package) listings — run those l… |
| id | string | yes | Listing id (svc_…) — pass to get_service / call_service |
| install | object | — | Ready-to-use local launch spec for stdio listings (npx -y <package>) |
| listingType | string | — | "http" (hosted Streamable-HTTP endpoint) or "stdio" (an npm package agents run locally via npx; always free, not remotely callable) |
| mcpEndpoint | string | — | Real MCP endpoint — present only for FREE/first-party (direct) listings |
| name | string | yes | Service name |
| networks | array | — | Chain slugs the service settles on |
| packageName | string | — | npm package name — present only on stdio listings; install with npx -y <packageName> |
| priceUsd | number | yes | Price per call in US dollars (0 = free) |
| rating | object | — | Verified-purchase rating aggregate: { count, average (1-5) } |
| reviews | array | — | Recent verified-purchase reviews, newest first |
| sellerId | string | — | Opaque seller id that owns the listing |
| sellerName | string | — | Seller display name, if set |
| status | string | — | Listing status: pending | verified | suspended |
| summary | string | — | One-line summary |
| tags | array | — | Free-text tags |
| verified | boolean | yes | Verified seller (KYC + active badge) or first-party (platform-vouched) |
No examples provided.
search_services Search the FiatDock marketplace ~147
Find paid + free MCP services other agents have published on the FiatDock marketplace. Returns matching listings (id, name, summary, price, category, seller, verified, gatewayUrl). Use get_service for full detail and call_service to invoke one. Read-only, free.
| Name | Type | Req | Description |
|---|---|---|---|
| category | string | — | Filter by category slug: data, search, finance, dev, productivity, ai, web, other |
| q | string | — | Free-text search over name, summary, description and tags |
| sort | string | — | Sort order (default newest; first-party listings are always featured first) |
| verifiedOnly | boolean | — | Only verified listings (KYC'd seller or first-party) |
| Name | Type | Req | Description |
|---|---|---|---|
| count | number | yes | Number of listings returned |
| services | array | yes | Matching listings (first-party featured first) |
No examples provided.
stablecoin_intel Stablecoin intelligence ($0.002) ~125
PAID ($0.002 USDC via x402, paid automatically). Supply, peg health and per-chain breakdown for USDC and other stablecoins: total circulating supply, deviation from the $1.00 peg, peg mechanism, the amount circulating on Base (with its share of total) and the top chains by supply (DefiLlama). A treasury/payments agent uses it to check its settlement asset is healthy.
| Name | Type | Req | Description |
|---|---|---|---|
| asset | string | — | Stablecoin symbol (default USDC), e.g. USDC, USDT, DAI, USDe |
| Name | Type | Req | Description |
|---|---|---|---|
| asOf | string | yes | — |
| asset | string | yes | — |
| name | string | — | — |
| note | string | — | — |
| onBase | object | yes | — |
| pegDeviationPct | number|null | yes | — |
| pegMechanism | string | — | — |
| pegStatus | string | yes | — |
| price | number|null | yes | — |
| source | string | yes | — |
| topChains | array | yes | — |
| totalCirculatingUsd | number|null | yes | — |
No examples provided.
token_price Token price & liquidity (free) ~156
FREE real-time price snapshot for any EVM token by contract address: USD price, 5m/1h/6h/24h change, liquidity, 24h volume, market cap/FDV and the most-liquid DEX pair (DexScreener). Or pass a major symbol (ETH/BTC) for a Coinbase spot price. Read-only, free.
| Name | Type | Req | Description |
|---|---|---|---|
| chain | string | — | Chain slug: base (default), ethereum, polygon, arbitrum, optimism, bsc, avalanche |
| symbol | string | — | Major asset symbol (e.g. ETH, BTC) — used when no contract address is given |
| token | string | — | ERC-20 contract address (0x…) — preferred |
| Name | Type | Req | Description |
|---|---|---|---|
| asOf | string | yes | — |
| chain | string | — | — |
| fdvUsd | number|null | — | — |
| liquidityUsd | number|null | — | — |
| marketCapUsd | number|null | — | — |
| name | string | — | — |
| note | string | — | — |
| priceChange | object | — | — |
| priceUsd | number|null | yes | Current USD price (most-liquid pair) |
| source | string | yes | — |
| symbol | string | — | — |
| topPair | object | — | — |
| volume24hUsd | number|null | — | — |
No examples provided.
token_safety Token safety & rug check ($0.01) ~156
PAID ($0.01 USDC via x402, paid automatically). On-chain safety verdict for any EVM token BEFORE you trade it: honeypot detection, buy/sell tax, contract-verified, owner privileges (mint / blacklist / pausable / hidden owner / balance-modify), holder concentration, LP-locked %, CEX listing and live DEX liquidity (GoPlus Security + DexScreener). Returns verdict safe|caution|danger with the exact risks. Not financial advice.
| Name | Type | Req | Description |
|---|---|---|---|
| chain | string | — | Chain slug: base (default), ethereum, polygon, arbitrum, optimism, bsc, avalanche |
| token | string | yes | ERC-20 contract address (0x…) to screen |
| Name | Type | Req | Description |
|---|---|---|---|
| asOf | string | yes | — |
| buyTaxPct | number|null | yes | — |
| holderCount | number|null | — | — |
| isHoneypot | boolean | yes | — |
| isMintable | boolean | — | — |
| isOpenSource | boolean | yes | — |
| isProxy | boolean | — | — |
| liquidityUsd | number|null | — | — |
| lpLockedPct | number|null | — | — |
| name | string | — | — |
| note | string | — | — |
| risks | array | yes | — |
| sellTaxPct | number|null | yes | — |
| source | string | yes | — |
| symbol | string | — | — |
| topHolderPct | number|null | — | — |
| verdict | string | yes | Overall risk verdict |
| verdictReason | string | yes | — |
No examples provided.