# FiatDock (npm · fiatdock-mcp)

Non-custodial USDC <-> bank for AI agents via x402 + Transak. Own funds only; PT + EU/EEA; 18+.

- Trust score: 70/100 (medium)
- Change this week: +36
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-03

## Components

- remote · `fiatdock.com`: 71/100, [markdown](https://verifymcp.io/servers/com-fiatdock-fiatdock-mcp/fiatdock.md), [page](https://verifymcp.io/servers/com-fiatdock-fiatdock-mcp/fiatdock)
- npm · `fiatdock-mcp`: 70/100 (this document), [markdown](https://verifymcp.io/servers/com-fiatdock-fiatdock-mcp/fiatdock-mcp.md), [page](https://verifymcp.io/servers/com-fiatdock-fiatdock-mcp/fiatdock-mcp)

## Channel facts

- Registry: `npm`
- Package: `fiatdock-mcp`
- Version: `1.4.0`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-03.

- **Supply Chain Security**: 87/100
  - No malware found by supply-chain analysis.
  - Only part of the dependency tree could be resolved (113 of 117), so this covers what we could see, not the whole tree.
  - No install/post-install scripts declared.
  - Only part of the dependency tree could be resolved (113 of 117), so this covers what we could see, not the whole tree.
- **Provenance & Transparency**: 45/100
  - Source repository is publicly reachable at the declared URL.
  - Provenance check failed: no build-provenance attestation is published.
  - Clear OSI-approved license (MIT).
  - Actively maintained (last published 4 days ago).
  - Disclosure check failed: no security disclosure policy was found in the source repository.
- **Schema Quality & AI Usability**: 81/100
  - 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).
  - AI-judged instruction clarity (excellent).
  - Context-footprint check failed: tool/resource definitions use about 1752 tokens (~146/item across 12 items; 10 tools + 2 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 27/100
  - Stability observed for 8 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
  - Structured output schemas are declared (100% of tools); any adoption earns full credit.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### Claude

```bash
claude mcp add com-fiatdock-fiatdock-mcp -- npx -y fiatdock-mcp
```

### Codex

```bash
codex mcp add com-fiatdock-fiatdock-mcp -- npx -y fiatdock-mcp
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "com-fiatdock-fiatdock-mcp": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "fiatdock-mcp"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add com-fiatdock-fiatdock-mcp --command npx --arg -y --arg fiatdock-mcp
```

### Hermes

```yaml
mcp_servers:
  com-fiatdock-fiatdock-mcp:
    command: "npx"
    args: ["-y", "fiatdock-mcp"]
```

### Other

```json
{
  "mcpServers": {
    "com-fiatdock-fiatdock-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "fiatdock-mcp"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-02 (score 70, +45)

- [security regression] Provenance: unverified → fail
- [security improvement] Install scripts: unverified → pass
- [security improvement] Known CVEs: unverified → partial
- [security improvement] Malware scan: unverified → pass
- [functional regression] Tool coverage: 100 → unverified
- [functional regression] Schema quality: 100 → unverified
- [functional improvement] Schema quality: unverified → excellent
- [functional improvement] License: unverified → pass
- [functional improvement] Maintenance: unverified → pass
- [functional improvement] MCP protocol: unverified → pass
- [functional improvement] Stability: unverified → 0.23
- [functional improvement] Dependency health: unverified → partial
- [functional] Licence: MIT

### 2026-08-01 (score 25, −9)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-31 (score 34, +28)

- [functional improvement] Schema quality: unverified → 100
- [functional improvement] Tool coverage: unverified → 100

### 2026-07-30 (score 6, −28)

- [functional regression] Tool coverage: 100 → unverified
- [functional regression] Schema quality: 100 → unverified

### 2026-07-27 (score 34)

First indexed and scored.

## MCP tools (10)

### `create_offramp_session` (~309 tokens)

Create off-ramp session (USDC → bank)

Convert the agent's USDC to fiat in the owner's OWN bank account. Returns a one-time checkoutUrl (forward it to the human owner; valid 5 minutes, single use) and a partnerOrderId to track. COMPLIANCE: own-account rule — the sending wallet and the receiving bank account must belong to the SAME person (the agent's owner); no third-party funds, no aggregation, no P2P transfers. 18+; service area: Portugal + Transak-supported EU/EEA countries (NOT the UK). Crypto is volatile; not investment advice.

Input parameters:

- `cryptoAmount` (number, required): USDC amount to sell
- `customerId` (string): Stable agent/customer id
- `email` (string): Owner's Transak account email
- `fiatCurrency` (string): e.g. EUR, default EUR
- `network` (string): USDC network, default base
- `provider` (string): Licensed fiat provider to use. Omit for the server default. `mtpelerin` settles by SEPA bank transfer across the SEPA zone and is NOT gated on Transak's activation state; note that its order status i…
- `ref` (string): Optional referral code (1-64 chars: letters, digits, _ or -)

Output parameters:

- `checkoutUrl` (string): One-time branded checkout URL (valid ~5 minutes, single use) — forward to the human owner
- `customerKey` (string): Returned ONCE on the first session with a new customerId — store securely
- `customerKeyNote` (string): How to use customerKey
- `note` (string): Next-step instructions
- `partnerOrderId` (string): Order id — track it with get_order_status

### `create_onramp_session` (~305 tokens)

Create on-ramp session (fiat → USDC)

Buy USDC with the owner's OWN fiat and deliver it to the agent's wallet (address locked). Returns checkoutUrl + partnerOrderId. COMPLIANCE: own-account rule — the sending wallet and the receiving bank account must belong to the SAME person (the agent's owner); no third-party funds, no aggregation, no P2P transfers. 18+; service area: Portugal + Transak-supported EU/EEA countries (NOT the UK). Crypto is volatile; not investment advice.

Input parameters:

- `customerId` (string): Stable agent/customer id
- `email` (string): Owner's Transak account email
- `fiatAmount` (number, required): Fiat amount to spend
- `fiatCurrency` (string): e.g. EUR, default EUR
- `network` (string): USDC network, default base
- `provider` (string): Licensed fiat provider to use. Omit for the server default. `mtpelerin` settles by SEPA bank transfer across the SEPA zone and is NOT gated on Transak's activation state; note that its order status i…
- `ref` (string): Optional referral code (1-64 chars: letters, digits, _ or -)
- `walletAddress` (string, required): Agent wallet that receives USDC

Output parameters:

- `checkoutUrl` (string): One-time branded checkout URL (valid ~5 minutes, single use) — forward to the human owner
- `customerKey` (string): Returned ONCE on the first session with a new customerId — store securely
- `customerKeyNote` (string): How to use customerKey
- `note` (string): Next-step instructions
- `partnerOrderId` (string): Order id — track it with get_order_status

### `get_quote` (~138 tokens)

Get a free quote

Free quote before paying: exchange rate, total fees (all itemised, incl. the 1% service commission), and amount received. Quotes are indicative, not guaranteed. side=SELL (USDC->fiat) or BUY (fiat->USDC).

Input parameters:

- `cryptoAmount` (number): USDC amount (required for SELL)
- `fiatAmount` (number): Fiat amount (for BUY)
- `fiatCurrency` (string): e.g. EUR, default EUR
- `network` (string): USDC network, default base
- `side` (string): SELL = USDC to fiat, BUY = fiat to USDC

Output parameters:

- `feeBreakdown` (array): Provider's itemised fee list
- `network` (string): USDC network the quote assumes
- `note` (string): Human-readable caveat (quotes are indicative)
- `paymentMethod` (string): Settlement method, e.g. sepa_bank_transfer
- `rate` (number): Exchange rate used (fiat per USDC)
- `side` (string): Quote direction
- `totalFee` (number): Total fees in fiat, all itemised (incl. the 1% service commission)
- `youReceive` (string): Amount received after all fees, e.g. '44.6 EUR'
- `youSend` (string): Amount the sender pays, e.g. '50 USDC'

### `get_order_status` (~41 tokens)

Get order status

Check the status of an on/off-ramp order by partnerOrderId.

Input parameters:

- `partnerOrderId` (string, required): Order id returned when the session was created

Output parameters:

- `createdAt` (string): ISO 8601 session creation time
- `customerId` (string): Customer id the session was created with
- `isBuyOrSell` (string): Order direction
- `ref` (string): Referral code if one was set
- `status` (string): SESSION_CREATED -> PROCESSING -> COMPLETED | FAILED | CANCELLED | EXPIRED
- `updatedAt` (string): ISO 8601 time of the last webhook update

### `token_price` (~156 tokens)

Token price & liquidity (free)

FREE real-time price snapshot for any EVM token by contract address: USD price, 5m/1h/6h/24h change, liquidity, 24h volume, market cap/FDV and the most-liquid DEX pair (DexScreener). Or pass a major symbol (ETH/BTC) for a Coinbase spot price. Read-only, free.

Input parameters:

- `chain` (string): Chain slug: base (default), ethereum, polygon, arbitrum, optimism, bsc, avalanche
- `symbol` (string): Major asset symbol (e.g. ETH, BTC) — used when no contract address is given
- `token` (string): ERC-20 contract address (0x…) — preferred

Output parameters:

- `asOf` (string)
- `chain` (string)
- `fdvUsd` (number|null)
- `liquidityUsd` (number|null)
- `marketCapUsd` (number|null)
- `name` (string)
- `note` (string)
- `priceChange` (object)
- `priceUsd` (number|null): Current USD price (most-liquid pair)
- `source` (string)
- `symbol` (string)
- `topPair` (object)
- `volume24hUsd` (number|null)

### `token_safety` (~156 tokens)

Token safety & rug check ($0.01)

PAID ($0.01 USDC via x402, paid automatically). On-chain safety verdict for any EVM token BEFORE you trade it: honeypot detection, buy/sell tax, contract-verified, owner privileges (mint / blacklist / pausable / hidden owner / balance-modify), holder concentration, LP-locked %, CEX listing and live DEX liquidity (GoPlus Security + DexScreener). Returns verdict safe|caution|danger with the exact risks. Not financial advice.

Input parameters:

- `chain` (string): Chain slug: base (default), ethereum, polygon, arbitrum, optimism, bsc, avalanche
- `token` (string, required): ERC-20 contract address (0x…) to screen

Output parameters:

- `asOf` (string)
- `buyTaxPct` (number|null)
- `holderCount` (number|null)
- `isHoneypot` (boolean)
- `isMintable` (boolean)
- `isOpenSource` (boolean)
- `isProxy` (boolean)
- `liquidityUsd` (number|null)
- `lpLockedPct` (number|null)
- `name` (string)
- `note` (string)
- `risks` (array)
- `sellTaxPct` (number|null)
- `source` (string)
- `symbol` (string)
- `topHolderPct` (number|null)
- `verdict` (string): Overall risk verdict
- `verdictReason` (string)

### `stablecoin_intel` (~125 tokens)

Stablecoin intelligence ($0.002)

PAID ($0.002 USDC via x402, paid automatically). Supply, peg health and per-chain breakdown for USDC and other stablecoins: total circulating supply, deviation from the $1.00 peg, peg mechanism, the amount circulating on Base (with its share of total) and the top chains by supply (DefiLlama). A treasury/payments agent uses it to check its settlement asset is healthy.

Input parameters:

- `asset` (string): Stablecoin symbol (default USDC), e.g. USDC, USDT, DAI, USDe

Output parameters:

- `asOf` (string)
- `asset` (string)
- `name` (string)
- `note` (string)
- `onBase` (object)
- `pegDeviationPct` (number|null)
- `pegMechanism` (string)
- `pegStatus` (string)
- `price` (number|null)
- `source` (string)
- `topChains` (array)
- `totalCirculatingUsd` (number|null)

### `search_services` (~147 tokens)

Search the FiatDock marketplace

Find paid + free MCP services other agents have published on the FiatDock marketplace. Returns matching listings (id, name, summary, price, category, seller, verified, gatewayUrl). Use get_service for full detail and call_service to invoke one. Read-only, free.

Input parameters:

- `category` (string): Filter by category slug: data, search, finance, dev, productivity, ai, web, other
- `q` (string): Free-text search over name, summary, description and tags
- `sort` (string): Sort order (default newest; first-party listings are always featured first)
- `verifiedOnly` (boolean): Only verified listings (KYC'd seller or first-party)

Output parameters:

- `count` (number): Number of listings returned
- `services` (array): Matching listings (first-party featured first)

### `get_service` (~78 tokens)

Get a marketplace service's detail

Full detail for one FiatDock marketplace listing, including how to call it: PAID listings route through the gateway via call_service (the 99/1 split is enforced); FREE/first-party listings expose their real MCP endpoint to call directly. Read-only, free.

Input parameters:

- `id` (string, required): Listing id (svc_…) from search_services

Output parameters:

- `callHint` (string): Plain-language instruction for how an agent invokes this listing
- `category` (string): Category slug (data, search, finance, dev, productivity, ai, web, other)
- `createdAt` (string): ISO 8601 listing creation time
- `description` (string): Full description
- `feeBps` (number): Effective gateway commission in basis points right now: 0 during the seller's first-month launch waiver (buyer pays the FULL price directly to the seller), else 100 (1%). PAID listings only (ADR-0022…
- `firstParty` (boolean): Platform's own featured listing (official)
- `gatewayUrl` (string|null): How to reach it: a relative /s/:id (PAID — invoke via call_service, 99/1 split) OR an absolute MCP endpoint URL (FREE/first-party — call directly). null for stdio (npm package) listings — run those l…
- `id` (string): Listing id (svc_…) — pass to get_service / call_service
- `install` (object): Ready-to-use local launch spec for stdio listings (npx -y <package>)
- `listingType` (string): "http" (hosted Streamable-HTTP endpoint) or "stdio" (an npm package agents run locally via npx; always free, not remotely callable)
- `mcpEndpoint` (string): Real MCP endpoint — present only for FREE/first-party (direct) listings
- `name` (string): Service name
- `networks` (array): Chain slugs the service settles on
- `packageName` (string): npm package name — present only on stdio listings; install with npx -y <packageName>
- `priceUsd` (number): Price per call in US dollars (0 = free)
- `rating` (object): Verified-purchase rating aggregate: { count, average (1-5) }
- `reviews` (array): Recent verified-purchase reviews, newest first
- `sellerId` (string): Opaque seller id that owns the listing
- `sellerName` (string): Seller display name, if set
- `status` (string): Listing status: pending | verified | suspended
- `summary` (string): One-line summary
- `tags` (array): Free-text tags
- `verified` (boolean): Verified seller (KYC + active badge) or first-party (platform-vouched)

### `call_service` (~232 tokens)

Call a marketplace service

Invoke a listed FiatDock service. PAID listings go THROUGH the gateway (POST /s/:id) so the non-custodial split is enforced — normally TWO legs (99% seller + 1% FiatDock), or ONE full-price leg to the seller during that seller's first-month 0% launch window; with AGENT_PRIVATE_KEY this signs and pays whatever the 402 lists automatically; without a key it returns the 402 challenge. FREE / first-party listings are forwarded to their real MCP endpoint directly (no payment). Pass the service's expected request body as `args`.

Input parameters:

- `args` (object): JSON payload to send to the service (e.g. an MCP JSON-RPC request body) — shape is defined by that service
- `id` (string, required): Listing id (svc_…) to invoke, from search_services
- `maxPriceUsd` (number): Price-bait guard for PAID listings: refuse to pay if the gateway's total x402 charge exceeds this many USD. Falls back to the FIATDOCK_MAX_PRICE_USD env var; default no ceiling.

Output parameters:

- `ok` (boolean): true when the underlying service returned a 2xx
- `result`: The service's response body — parsed JSON when it returned JSON, otherwise the raw text
- `routedThroughGateway` (boolean): true if PAID (settled 99% seller / 1% FiatDock via /s/:id); false if FREE/first-party direct
- `service` (string): Listing id that was invoked
- `status` (number): HTTP status returned by the service (or the gateway)

## Diagnostics

Captured diagnostic sections: Provenance, Dependencies. The full working is on the page: https://verifymcp.io/servers/com-fiatdock-fiatdock-mcp/fiatdock-mcp#diagnostics

## Score history

- 2026-08-03: 70
- 2026-08-02: 70
- 2026-08-01: 25
- 2026-07-31: 34
- 2026-07-30: 6
- 2026-07-28: 34
- 2026-07-27: 34

## Links

- npm package: https://www.npmjs.com/package/fiatdock-mcp
- Socket report: https://socket.dev/npm/package/fiatdock-mcp
- Repository: https://github.com/fiatdock/fiatdock
- Website: https://fiatdock.com/
- Changelog RSS feed: https://verifymcp.io/servers/com-fiatdock-fiatdock-mcp/fiatdock-mcp/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/com-fiatdock-fiatdock-mcp/fiatdock-mcp/changelog.json
- HTML version of this page: https://verifymcp.io/servers/com-fiatdock-fiatdock-mcp/fiatdock-mcp