com.solinkify/mcp
NPM · @SOLINKIFY/MCP · SCANNED SEP 20
Pay for x402 paywalls, datasets, and store checkouts on Solana, behind hard spending caps.
Available components
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security89
- No malware found by supply-chain analysis.Pass
- CVE check failed: a known high-severity CVE affects uuid 8.3.2, reached via @solana/web3.js > jayson > uuid. A fixed version is available. View diagnostics → Fail
- No install/post-install scripts declared.Pass
- 56 of 169 dependencies flagged as unhealthy (2 deprecated). View diagnostics → Partial
Provenance & Transparency19
- Repository check failed: no source repository is declared. See how to fix → View diagnostics → Fail
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 52 days ago).Pass
- Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability82
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 2154 tokens (~119/item across 18 items; 18 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management83
- Stability observed for 25 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Tool Safety75
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- 0 of 2 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "pay_get_session" implies "pay" and declares no destructiveHint at all, which the MCP spec reads as destructive by default. See how to fix → Fail
- An AI judge read all 18 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
How do I install the com.solinkify/mcp server?
com.solinkify/mcp runs locally as an npm package, launched with npx -y @solinkify/mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
npm · @solinkify/mcp
claude mcp add com-solinkify-mcp -- npx -y @solinkify/mcp
{
"mcpServers": {
"com-solinkify-mcp": {
"command": "npx",
"args": [
"-y",
"@solinkify/mcp"
]
}
}
} {
"servers": {
"com-solinkify-mcp": {
"command": "npx",
"args": [
"-y",
"@solinkify/mcp"
]
}
}
} codex mcp add com-solinkify-mcp -- npx -y @solinkify/mcp
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"com-solinkify-mcp": {
"type": "local",
"command": [
"npx",
"-y",
"@solinkify/mcp"
],
"enabled": true
}
}
} openclaw mcp add com-solinkify-mcp --command npx --arg -y --arg @solinkify/mcp
mcp_servers:
com-solinkify-mcp:
command: "npx"
args: ["-y", "@solinkify/mcp"] {
"McpServers": {
"com-solinkify-mcp": {
"Transport": "stdio",
"Command": "npx",
"Arguments": [
"-y",
"@solinkify/mcp"
]
}
}
} assistant mcp add com-solinkify-mcp -t stdio -c npx -a -y @solinkify/mcp
{
"mcpServers": {
"com-solinkify-mcp": {
"command": "npx",
"args": [
"-y",
"@solinkify/mcp"
]
}
}
} Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 19 Sept 26 −3
- Stability: pass → 0.80 functional
- 18 Sept 26 +1
- Stability: 0.97 → pass security
- 16 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 90 to 93. That category is still filling its 30-day observation window: 27 days of observed history at the previous scan, 28 at this one. The score rises as the window fills, whether or not the server changes.
- 14 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 83 to 87. That category is still filling its 30-day observation window: 25 days of observed history at the previous scan, 26 at this one. The score rises as the window fills, whether or not the server changes.
- 12 Sept 26 −3
- Stability: pass → 0.80 functional
- 11 Sept 26 +1
- Stability: 0.97 → pass security
- 9 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 90 to 93. That category is still filling its 30-day observation window: 27 days of observed history at the previous scan, 28 at this one. The score rises as the window fills, whether or not the server changes.
- 7 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 83 to 87. That category is still filling its 30-day observation window: 25 days of observed history at the previous scan, 26 at this one. The score rises as the window fills, whether or not the server changes.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 20 Sept 2026 · Analysed npm/@solinkify/mcp@0.3.3
Provenance No attestation
The registry publishes no build provenance for this version, so there is nothing to verify.
| Result | No attestation |
|---|---|
| Ecosystem | npm |
Background: How many MCP packages publish verified provenance →
Vulnerabilities 3 findings
| ID | CVE | Severity | Vector | Fix available |
|---|---|---|---|---|
| GHSA-3gc7-fjrx-p6mg | CVE-2025-3194 | high | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | no |
| GHSA-528h-pc64-c93x | CVE-2026-71429 | medium | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | yes |
| GHSA-w5hq-g745-h8pq | CVE-2026-41907 | high | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N | yes |
Background: What a vulnerability scan can and cannot prove →
Dependencies 169 packages
| Packages resolved | 169 |
|---|---|
| Deprecated | 2 |
| Stale | 53 |
| No linked repository | 2 |
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
datahub_buy ~132
Buy a DataHub dataset (x402 settlement on Solana, 99% goes to the seller) and return the download link. Pays in USDC by default; set token to USDT to settle in USDT instead. Spending caps apply.
| Name | Type | Req | Description |
|---|---|---|---|
| book_id | string | yes | The dataset id returned by datahub_search (a uuid), not its title. Buying the same dataset twice pays twice; use datahub_download to re-fetch something already owned. |
| token | string | – | Stablecoin to pay with. The agent wallet must hold this token and a little SOL for fees. Defaults to USDC. |
No output schema declared.
No examples provided.
datahub_download ~94
Fetch a fresh download link for a DataHub dataset the agent already owns, either from a past purchase receipt or an active subscription. Proves ownership with a signed wallet message. Costs nothing, so prefer it over buying the same dataset again.
| Name | Type | Req | Description |
|---|---|---|---|
| book_id | string | yes | Id of a dataset this wallet already owns through datahub_buy or datahub_subscribe. Fails if there is no receipt and no active subscription. |
No output schema declared.
No examples provided.
datahub_review ~120
Rate a DataHub dataset you have purchased (1-5 stars, optional comment). Verified-purchase only: the marketplace rejects wallets without a receipt for the dataset. No payment involved.
| Name | Type | Req | Description |
|---|---|---|---|
| book_id | string | yes | Id of a dataset this wallet has already bought. Reviewing without a purchase receipt is rejected. |
| comment | string | – | Optional review text, up to 2000 characters. Published publicly next to the rating. |
| rating | integer | yes | Star rating from 1 (worst) to 5 (best), whole numbers only. |
No output schema declared.
No examples provided.
datahub_search ~133
Search the Solinkify DataHub marketplace. Returns id, title, price (USD stablecoin), seller, category, and sales count. Datasets: buy with datahub_buy. API listings (kind "api"): the price is per request — access them by calling gate_fetch on their api_base_url.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | Maximum number of listings to return, 1 to 50. Defaults to 10. |
| query | string | – | Free-text filter matched against title, author, description, category and format. Omit to browse everything. Plain keywords work best; there is no query syntax. |
No output schema declared.
No examples provided.
datahub_subscribe ~105
Subscribe to a recurring DataHub dataset (time-based access, on-chain payment with the plan's USDC price). While active, every update of the dataset can be fetched with datahub_download — no per-download payment. Renewing extends from the current expiry. Spending caps apply.
| Name | Type | Req | Description |
|---|---|---|---|
| book_id | string | yes | Id of a dataset that offers a subscription plan. datahub_search reports one under "subscription"; datasets without a plan must be bought with datahub_buy instead. |
No output schema declared.
No examples provided.
gate_check_delivery ~107
Check what each side says was delivered for a payment: the hash the gate filed for what it served, and the hash the agent filed for what it received. Use it to confirm a purchase arrived intact, or to show a discrepancy. Read-only and free. Note it records WHICH bytes were delivered, not whether their contents were correct.
| Name | Type | Req | Description |
|---|---|---|---|
| payment_id | string | yes | The payment id returned by gate_fetch. Only payments settled through an escrow have one; prepaid and subscription access do not. |
No output schema declared.
No examples provided.
gate_fetch ~110
Fetch a Gate-protected URL, automatically paying the x402 paywall from the agent wallet (prepaid balance preferred, escrow payment otherwise). Returns the page content plus what was paid. Refuses and explains if the price exceeds the per-payment or daily cap. Ungated URLs are fetched normally and cost nothing.
| Name | Type | Req | Description |
|---|---|---|---|
| url | string | yes | Absolute https:// URL to retrieve. If it answers HTTP 402 the paywall is paid automatically, so check the price with gate_get_price first when the cost matters. |
No output schema declared.
No examples provided.
gate_find_endpoints ~203
Browse the public Solinkify registry of x402-priced endpoints: paid APIs and content an agent can buy per request. Returns url, price per request, currency, network and access modes for each one, plus whether it fits the configured spending caps. Use it to find a paid data source without being handed the URL, then call gate_get_price or gate_fetch on the url. Read-only and free. Every entry was verified by machine: it answers a real HTTP 402 with a valid x402 manifest that pays the wallet which listed it.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | Maximum number of endpoints to return, 1 to 100. Defaults to 20. |
| max_price_usd | number | – | Drop endpoints priced above this many USD per request. Omit to see every price. |
| query | string | – | Free-text filter matched against title, description and tags. Omit to list everything. Plain keywords work best; there is no query syntax. |
No output schema declared.
No examples provided.
gate_get_price ~110
Preview a Solinkify Gate paywall (HTTP 402 / x402) without paying: price, currency, and available access modes (pay-per-request, prepaid, subscription). Call this before gate_fetch to learn the price. Costs nothing and never moves money.
| Name | Type | Req | Description |
|---|---|---|---|
| url | string | yes | Absolute https:// URL of the gated page or API endpoint to inspect, e.g. https://example.com/api/report. If the URL is not paywalled the tool says so instead of returning a price. |
No output schema declared.
No examples provided.
gate_prepaid_balance ~82
Show the agent's Solinkify pre-paid balance for a stablecoin (deposited once, then debited per request without signing a transaction each time). Read-only.
| Name | Type | Req | Description |
|---|---|---|---|
| token | string | – | Stablecoin whose pre-paid balance to read. Balances are tracked per token, so USDC and USDT are separate pots. Defaults to USDC. |
No output schema declared.
No examples provided.
gate_prepaid_deposit ~136
Deposit stablecoin into the Solinkify pre-paid balance so future gate_fetch calls debit it without a per-request transaction. Moves money: the full deposit counts against the daily spending cap at once, and the balance can be withdrawn later.
| Name | Type | Req | Description |
|---|---|---|---|
| amount_usd | number | yes | Amount to deposit, in whole currency units (1.5 means $1.50, not 1500000 base units). Must be positive and within the remaining daily cap. |
| token | string | – | Stablecoin to deposit. Must match the token the target endpoints price in, since balances do not convert between tokens. Defaults to USDC. |
No output schema declared.
No examples provided.
gate_subscribe ~139
Buy (or renew) a creator's subscription plan for a Gate endpoint: one payment, then unlimited access until expiry. Moves money. The plan price is read on-chain and checked against the spending caps before paying. Fails if the endpoint has no subscription plan.
| Name | Type | Req | Description |
|---|---|---|---|
| creator_wallet | string | yes | The creator's Solana wallet address in base58 (the endpoint owner, not the agent's own wallet). Shown in the 402 manifest returned by gate_get_price. |
| endpoint_id | string | yes | Identifier the creator gave the endpoint, e.g. "premium-api". Also comes from the 402 manifest; it is not a URL. |
No output schema declared.
No examples provided.
pay_checkout ~152
Pay a pending Solinkify Pay checkout session. Settles on Solana, the merchant receives 99% instantly, and the order is marked paid. Spends from the agent wallet — or, when SOLINKIFY_OWNER_WALLET is configured, from the owner wallet under its on-chain SpendAuthority caps (ADR-008); check spend_authority_status first in that mode. Moves money and is not reversible, so confirm the amount with pay_get_session first. Sessions that are already paid or expired are refused.
| Name | Type | Req | Description |
|---|---|---|---|
| session | string | yes | Session id (uuid) or full checkout URL of a session whose status is still "pending". The amount and token are fixed by the merchant and cannot be overridden here. |
No output schema declared.
No examples provided.
pay_get_session ~107
Inspect a Solinkify Pay checkout session (from a merchant store such as WooCommerce, OpenCart or PrestaShop) before paying: amount, merchant, order id, and status. Read-only, so call it first to confirm what pay_checkout would spend.
| Name | Type | Req | Description |
|---|---|---|---|
| session | string | yes | Either the session id (a uuid) or the full checkout URL such as https://solinkify.com/checkout/<id>. Both forms are accepted; the id is extracted from the URL. |
No output schema declared.
No examples provided.
social_buy_blink ~125
Buy a product from a Solinkify Blink link as shared on X. Moves money: settles on Solana through the same escrow rails as DataHub and returns the receipt plus the download link. The price is read from the catalog and checked against the spending caps first.
| Name | Type | Req | Description |
|---|---|---|---|
| string | – | Optional buyer e-mail for the receipt. Leave it out to buy anonymously; the download link is returned either way. | |
| url | string | yes | Share link, Actions URL, or raw product id of the Blink to buy, in the same forms social_get_blink accepts. |
No output schema declared.
No examples provided.
social_get_blink ~111
Inspect a Solinkify Blink (a product shared on X as a Solana Action) before buying: title, description, price, and seller. Read-only, so use it to confirm the price before social_buy_blink.
| Name | Type | Req | Description |
|---|---|---|---|
| url | string | yes | Any form the link circulates in: a share link (https://solinkify.com/book/<id>), an Actions URL (…/api/actions/buy/<id>), or the raw product id. The id is extracted automatically. |
No output schema declared.
No examples provided.
spend_authority_status ~119
Show the on-chain SpendAuthority (ADR-008) that lets this agent pay merchants from an owner's wallet: per-payment cap, daily ceiling, what is spent/left today, and whether it has been revoked. All of it is enforced by the Solana program, not by this server. Read-only. Defaults to the SOLINKIFY_OWNER_WALLET the server is configured with.
| Name | Type | Req | Description |
|---|---|---|---|
| owner | string | – | Base58 wallet address of the funds owner to inspect. Omit to use the configured SOLINKIFY_OWNER_WALLET. |
No output schema declared.
No examples provided.
wallet_status ~69
Show the agent wallet: address, SOL for fees, stablecoin balances, Solinkify pre-paid balance, and today's remaining spending budget under the caps. Takes no arguments and never moves money. Call it first when a payment fails, to tell an empty wallet apart from a cap that has been reached.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
What is the com.solinkify/mcp server?
com.solinkify/mcp is listed in the public MCP registry as com.solinkify/mcp. Pay for x402 paywalls, datasets, and store checkouts on Solana, behind hard spending caps. This page covers its npm package (@solinkify/mcp).
Is the com.solinkify/mcp server safe to use?
com.solinkify/mcp scores 73 out of 100 on VerifyMCP. We recorded 3 known advisories against it as of 20 September 2026. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the com.solinkify/mcp server expose?
com.solinkify/mcp exposes 18 tools: wallet_status, spend_authority_status, gate_find_endpoints, gate_get_price, gate_fetch, and 13 more. Their descriptions and schemas cost roughly 2,154 tokens of context every time the server is loaded.
Is the com.solinkify/mcp server still maintained?
com.solinkify/mcp is still listed as active in the MCP registry. We last reached this channel on 20 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What licence is the com.solinkify/mcp server under?
com.solinkify/mcp declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.