Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

Wever Pay Open Exchange Public Beta

REMOTE · WEVER-PAY-AGENT-MESH-PHASE5-STAGING.QUIET-SALAD-E96E.WORKERS.DEV

Open Base Sepolia testnet exchange for autonomous buyer and seller agents, with signed receipts.

+4 this week 63 Trust /100

Last scanned (2 hours ago)

Scores higher than 44% of remote servers

Reachable. Last reached 5 Nov 2026.

Category Crypto and Web3

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →

Endpoint Security46
  • The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
  • Authorisation not fully verified: this server exposes a tool marked destructive (revoke_owner_mandate) and its handshake is open, but we could not confirm whether a tool call is gated, so we do not assert it is callable unauthenticated. View diagnostics → Unverified
  • HTTPS enforcement could not be verified: the plaintext port answered with HTTP 405, which proves neither a plaintext path nor enforcement. View diagnostics → Unverified
  • HSTS check failed: the Strict-Transport-Security header is absent. See how to fix → View diagnostics → Fail
  • DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability100
Schema Quality & AI Usability65
  • AI-judged instruction clarity (good).Pass
  • Tool/resource definitions use about 2415 tokens (~48/item across 50 items; 50 tools + 0 resources), lean.Pass
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management50
  • Stability observed for 15 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage68
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 3% of tool parameters carry a description.Partial
Tool Safety100
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • All 7 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.Pass
  • An AI judge read all 51 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 5 Nov 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 47 to 50. That category is still filling its 30-day observation window: 14 days of observed history at the previous scan, 15 at this one. The score rises as the window fills, whether or not the server changes.

  • 3 Nov 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 40 to 43. That category is still filling its 30-day observation window: 12 days of observed history at the previous scan, 13 at this one. The score rises as the window fills, whether or not the server changes.

  • 1 Nov 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 33 to 37. That category is still filling its 30-day observation window: 10 days of observed history at the previous scan, 11 at this one. The score rises as the window fills, whether or not the server changes.

  • 30 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 27 to 30. That category is still filling its 30-day observation window: 8 days of observed history at the previous scan, 9 at this one. The score rises as the window fills, whether or not the server changes.

  • 28 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 20 to 23. That category is still filling its 30-day observation window: 6 days of observed history at the previous scan, 7 at this one. The score rises as the window fills, whether or not the server changes.

  • 26 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 13 to 17. That category is still filling its 30-day observation window: 4 days of observed history at the previous scan, 5 at this one. The score rises as the window fills, whether or not the server changes.

  • 25 Oct 26 −13
    • Stability: pass → 0.13 functional
  • 24 Oct 26 0
    • HSTS header: unverified → fail ▼ security
    • Stability: unverified → pass ▲ security
    • Injection markers: unverified → pass ▲ security
    • Transport: fail → pass ▲ security
    • Authorization: Authorisation not fully verified: this server exposes a tool marked destructive (revoke_owner_mandate) and its handshake is open, but we could not confirm whether a tool call is gated, so we do not assert it is callable unauthenticated. security
    • Endpoint reachability: unreachable → reachable ▲ functional
    • Tool coverage: unverified → 100 ▲ functional
    • MCP protocol: unverified → pass ▲ functional
Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 5 Nov 2026 · Probed https://wever-pay-agent-mesh-phase5-staging.quiet-salad-e96e.workers.dev/mcp

TLS valid

Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .

Subject Issuer Valid from Valid until Key Signature Serial
CN=quiet-salad-e96e.workers.dev CN=WE1,O=Google Trust Services,C=US 12 Oct 2026 11 Jan 2027 ECDSA 256 ECDSA-SHA256 fe74637e4ef489740e366c9815bbb5fc
SANs: quiet-salad-e96e.workers.dev, *.quiet-salad-e96e.workers.dev
CN=WE1,O=Google Trust Services,C=US (CA) CN=GTS Root R4,O=Google Trust Services LLC,C=US 13 Dec 2023 20 Feb 2029 ECDSA 256 ECDSA-SHA384 7ff31977972c224a76155d13b6d685e3
CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE 15 Nov 2023 28 Jan 2028 ECDSA 384 SHA256-RSA 7fe530bf331343bedd821610493d8a1b

Background: What to check on a remote MCP endpoint →

DNSSEC insecure

Validation of wever-pay-agent-mesh-phase5-staging.quiet-salad-e96e.workers.dev. — Not signed

Zone DS Keys Algorithms Outcome
. trust_anchor 20326, 38696 8, 8 Verified
dev. present 60074 8 Verified
workers.dev. absent Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation
Authentication No authorisation required

The endpoint answered without asking for a token. Anyone who knows the URL can reach it.

Result No authorisation required
HTTP status 200
Header Value
content-security-policy default-src 'none'; frame-ancestors 'none'; base-uri 'none'
x-content-type-options nosniff

Background: How OAuth 2.1 works in the 2026 MCP spec →

Transports 2 probes
Transport URL Outcome Status Location
streamable-http https://wever-pay-agent-mesh-phase5-staging.quiet-salad-e96e.workers.dev/mcp Verified 200
http (plaintext) http://wever-pay-agent-mesh-phase5-staging.quiet-salad-e96e.workers.dev/mcp Inconclusive 405
MCP tools · 50 exposed · ~2,356 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
claim_external_deposit ~86

Claim a completed external Base Sepolia USDC transfer for an owned wallet. The exchange derives and verifies the bound EVM source, exact asset transfer, amount, recipient, and unique transaction before canonical ledger credit.

NameTypeReqDescription
amountMinorintegeryes–
idempotencyKeystringyes–
transactionHashstringyes–
walletIdstringyes–

No output schema declared.

No examples provided.

complete_participant_registration ~40

Prove Ed25519 key control, create or replay the canonical exchange account, and activate one scoped credential generation.

NameTypeReqDescription
completionobjectyes–

No output schema declared.

No examples provided.

create_wallet ~79

Create or bind a permitted BUYER or SELLER wallet for the authenticated agent after EVM ownership proof. Published limits apply per verified identity, never globally.

NameTypeReqDescription
addressstringyes–
displayNamestringyes–
idempotencyKeystringyes–
ownershipProofstringyes–
rolestringyes–

No output schema declared.

No examples provided.

discover_assurance_services ~18

Discover signed-offer commerce assurance services.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

discover_commerce_index ~21

Read the signed receipt-backed Wever Commerce Index manifest.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

execute_authorized_purchase ~44

Execute a signed agent purchase automatically within a standing mandate.

NameTypeReqDescription
agentRequestobjectyes–
offerobjectyes–
paymentPayloadobject––

No output schema declared.

No examples provided.

fulfill_commerce_purchase ~104

Fulfill one paid dynamic purchase exactly once with a seller-signed Ed25519 artifact. The output schema is validated, seller proceeds and the existing fee are settled, and a network-signed economic receipt is issued.

NameTypeReqDescription
fulfillmentobjectyesA JSON object accepted only when its canonical serialized form is at most 50000 characters and its nesting depth is at most 64.
idempotencyKeystringyes–
purchaseIdstringyes–

No output schema declared.

No examples provided.

generate_client_configuration ~33

Generate a credential-free MCP or A2A connection configuration for a supported agent client.

NameTypeReqDescription
clientstringyes–

No output schema declared.

No examples provided.

get_balance ~28

Read available and pending test-USDC for one owned wallet.

NameTypeReqDescription
walletIdstringyes–

No output schema declared.

No examples provided.

get_commerce_purchase_status ~42

Read an authorized buyer or seller view of one dynamic purchase, fulfillment state, signed receipt, and next recovery action.

NameTypeReqDescription
purchaseIdstringyes–

No output schema declared.

No examples provided.

get_commerce_receipt ~33

Read an existing canonical commerce receipt involving an owned buyer or seller wallet.

NameTypeReqDescription
receiptIdstringyes–

No output schema declared.

No examples provided.

get_connection_bundle ~19

Retrieve the universal signed Wever Pay connection bundle.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

get_connection_health ~20

Read sanitized distribution, connection, and organic-use status.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

get_discovery_manifest ~31

Read the signed manifest connecting Wever Pay identities, endpoints, protocols, payment networks, and verification instructions.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

get_economic_history ~27

Read portable verified economic history for an agent.

NameTypeReqDescription
agentIdstringyes–

No output schema declared.

No examples provided.

get_external_funding_instructions ~46

Read the exact Base Sepolia test-USDC transfer and claim instructions for an owned wallet. This does not move or credit value.

NameTypeReqDescription
walletIdstringyes–

No output schema declared.

No examples provided.

get_network_metrics ~24

Read public-safe discovery, commerce, verification, recovery, and availability metrics.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

get_participant_account ~19

Inspect the authenticated participant's canonical exchange account.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

get_participant_registration_requirements ~54

Read the active isolated Base Sepolia participant contract, canonical exchange registration authority, lifecycle state, activation prerequisites, policy, credentials, wallets, funding, service admission, commerce, receipts, withdrawal, and recovery rules.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

get_payment ~30

Read a payment for which the participant owns the buyer or seller wallet.

NameTypeReqDescription
paymentIdstringyes–

No output schema declared.

No examples provided.

get_payment_request ~32

Read a payment request owned by or explicitly addressed to the authenticated participant.

NameTypeReqDescription
paymentRequestIdstringyes–

No output schema declared.

No examples provided.

get_purchase_recovery_status ~29

Inspect durable recovery state for an owned Payment Identifier.

NameTypeReqDescription
paymentIdentifierstringyes–

No output schema declared.

No examples provided.

get_sandbox_access_requirements ~31

Read the testnet-only authentication, standing-mandate, and verification requirements without issuing credentials.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

get_testnet_funding_status ~64

Read the authenticated participant's automated funding grant, canonical deposit, provider-transfer state, ledger projection, and machine-readable WAIT_FOR_RECONCILIATION, RETRY_SAME_REQUEST, USE_EXTERNAL_FUNDING, or RECOVERY_REQUIRED action without starting another transfer.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

get_verified_offer ~26

Inspect one indexed service and its verified provenance.

NameTypeReqDescription
serviceIdstring––

No output schema declared.

No examples provided.

get_verified_provider ~27

Inspect one signed provider identity and its verified offers.

NameTypeReqDescription
providerIdstring––

No output schema declared.

No examples provided.

get_wallet ~25

Read one wallet owned by the authenticated participant.

NameTypeReqDescription
walletIdstringyes–

No output schema declared.

No examples provided.

get_withdrawal_status ~61

Read one withdrawal and its canonical provider-transfer, ledger status, and machine-readable WAIT_FOR_RECONCILIATION, RETRY_SAME_REQUEST, or RECOVERY_REQUIRED action after proving ownership of the source wallet.

NameTypeReqDescription
withdrawalIdstringyes–

No output schema declared.

No examples provided.

inspect_commerce_service ~35

Inspect one existing commerce directory service.

NameTypeReqDescription
idempotencyKeystringyes–
serviceIdstringyes–

No output schema declared.

No examples provided.

issue_signed_offer ~29

Issue an official x402 signed offer with Payment Identifier support.

NameTypeReqDescription
serviceIdstringyes–

No output schema declared.

No examples provided.

list_transactions ~40

Read bounded ledger history for one owned wallet.

NameTypeReqDescription
cursorstring|null––
limitinteger––
walletIdstringyes–

No output schema declared.

No examples provided.

purchase_commerce_service ~97

Purchase a dynamically admitted service with an owned wallet through the existing direct-payment and ledger authority. Exact replay returns the same purchase and payment.

NameTypeReqDescription
buyerWalletIdstringyes–
idempotencyKeystringyes–
inputobjectyesA JSON object accepted only when its canonical serialized form is at most 50000 characters and its nesting depth is at most 64.
serviceIdstringyes–

No output schema declared.

No examples provided.

recover_authorized_purchase ~30

Resume an owned uncertain purchase through the existing durable recovery path.

NameTypeReqDescription
paymentIdentifierstringyes–

No output schema declared.

No examples provided.

recover_commerce_purchase ~60

Resume an uncertain buyer authorization with the same purchase identity and economic idempotency key, without creating a second charge.

NameTypeReqDescription
buyerWalletIdstringyes–
idempotencyKeystringyes–
purchaseIdstringyes–

No output schema declared.

No examples provided.

refund_payment ~51

Refund a sale from the participant's owned seller wallet through existing fee-reversal rules.

NameTypeReqDescription
amountMinorintegeryes–
idempotencyKeystringyes–
paymentIdstringyes–

No output schema declared.

No examples provided.

register_commerce_service ~102

Automatically admit a versioned service into the existing commerce directory and Commerce Index after bounded JSON Schema draft 2020-12, examples, price, endpoint, content hash, seller, payout, and fulfillment-key validation. No seller approval is required.

NameTypeReqDescription
idempotencyKeystringyes–
payoutOwnershipProofstringyesEIP-191 signature by the seller wallet address over the published payout-ownership message.
serviceobjectyes–

No output schema declared.

No examples provided.

register_owner_mandate ~30

Register a reusable owner-signed mandate for autonomous agent execution.

NameTypeReqDescription
mandateobjectyes–

No output schema declared.

No examples provided.

report_compatibility ~61

Record a bounded client compatibility result as external-unclassified unless separately verified as organic.

NameTypeReqDescription
clientstringyes–
notesstring––
reporterstring––
stagestringyes–
successbooleanyes–

No output schema declared.

No examples provided.

request_commerce_refund ~76

Create a durable buyer refund request for a paid dynamic purchase. The seller resolves it through the existing seller-authorized refund_payment tool and fee-reversal ledger rules.

NameTypeReqDescription
amountMinorintegeryes–
idempotencyKeystringyes–
purchaseIdstringyes–
reasonstringyes–

No output schema declared.

No examples provided.

request_participant_challenge ~45

Request a five-minute server-signed Ed25519 challenge for any schema-valid agent.external. registration through automated cryptographic challenge-response.

NameTypeReqDescription
registrationRequestobjectyes–

No output schema declared.

No examples provided.

request_payment ~74

Create a bounded test-USDC request payable by one named participant agent.

NameTypeReqDescription
amountMinorintegeryes–
buyerAgentIdstringyes–
descriptionstringyes–
expiresAtstring|null––
idempotencyKeystringyes–
sellerWalletIdstringyes–

No output schema declared.

No examples provided.

request_testnet_funding ~74

Request an automated bounded Base Sepolia test-USDC grant for an owned BUYER wallet when treasury and per-identity policy allow. Funding is optional and an unavailable grant does not block enrollment, external funding, or receiving value.

NameTypeReqDescription
idempotencyKeystringyes–
walletIdstringyes–

No output schema declared.

No examples provided.

request_withdrawal ~55

Transfer available test-USDC out of an owned wallet only to its verified EVM-bound address.

NameTypeReqDescription
amountMinorintegeryes–
idempotencyKeystringyes–
walletIdstringyes–

No output schema declared.

No examples provided.

revoke_owner_mandate ~28

Apply an owner-signed mandate revocation.

NameTypeReqDescription
revocationobjectyes–

No output schema declared.

No examples provided.

revoke_participant_credential ~56

Revoke the authenticated agent's active participant credential without operator intervention. Revocation is idempotent and cannot affect another agent's credential.

NameTypeReqDescription
credentialIdstringyes–
idempotencyKeystringyes–

No output schema declared.

No examples provided.

search_commerce_services ~66

Search the existing commerce directory with bounded filters.

NameTypeReqDescription
assetstring––
idempotencyKeystringyes–
maxPriceAtomicinteger––
networkstring––
querystring––
statusstring––

No output schema declared.

No examples provided.

search_verified_offers ~90

Filter independently verified offers by policy and history.

NameTypeReqDescription
availableboolean––
capabilitystring––
cursorstring––
evidenceRequirementsarray––
limitinteger––
maximumPriceAtomicinteger––
minimumVerifiedCompletionsinteger––
networkstring––
providerIdstring––

No output schema declared.

No examples provided.

send_payment ~85

Transfer bounded available test-USDC from any participant-owned wallet, including legitimately available seller proceeds, using the existing payment engine.

NameTypeReqDescription
buyerWalletIdstringyes–
descriptionstring––
grossAmountMinorinteger––
idempotencyKeystringyes–
paymentRequestIdstring––
sellerWalletIdstring––

No output schema declared.

No examples provided.

verify_economic_receipt ~49

Verify the network Ed25519 signature and digest of an authorized canonical dynamic-commerce or completed-withdrawal receipt.

NameTypeReqDescription
receiptIdstring––
withdrawalIdstring––

No output schema declared.

No examples provided.

verify_portable_bundle ~30

Independently verify an x402 and Wever assurance artifact bundle.

NameTypeReqDescription
bundleobjectyes–

No output schema declared.

No examples provided.

Install

How do I install the Wever Pay Open Exchange Public Beta MCP server?

Wever Pay Open Exchange Public Beta is a hosted endpoint at https://wever-pay-agent-mesh-phase5-staging.quiet-salad-e96e.workers.dev/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

remote · wever-pay-agent-mesh-phase5-staging.quiet-salad-e96e.workers.dev

# add to Claude Code
claude mcp add --transport http com-weverpay-public-testnet-alpha 'https://wever-pay-agent-mesh-phase5-staging.quiet-salad-e96e.workers.dev/mcp'
Common questions

What is the Wever Pay Open Exchange Public Beta MCP server?

Wever Pay Open Exchange Public Beta is an MCP server listed in the public MCP registry as com.weverpay/public-testnet-alpha. Open Base Sepolia testnet exchange for autonomous buyer and seller agents, with signed receipts. This page covers its hosted endpoint (https://wever-pay-agent-mesh-phase5-staging.quiet-salad-e96e.workers.dev/mcp).

Is the Wever Pay Open Exchange Public Beta MCP server safe to use?

Wever Pay Open Exchange Public Beta scores 63 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the Wever Pay Open Exchange Public Beta MCP server expose?

Wever Pay Open Exchange Public Beta exposes 50 tools: get_discovery_manifest, get_network_metrics, get_connection_bundle, generate_client_configuration, get_connection_health, and 45 more. Their descriptions and schemas cost roughly 2,356 tokens of context every time the server is loaded.

Does the Wever Pay Open Exchange Public Beta MCP server require authentication?

No. We connected to Wever Pay Open Exchange Public Beta without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.

Is the Wever Pay Open Exchange Public Beta MCP server still maintained?

Wever Pay Open Exchange Public Beta is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.