io.github.Dempty-glitch/z-zero-mcp
NPM · Z-ZERO-MCP-SERVER · SCANNED AUG 3
Payments for AI agents: gasless USDC on Base + JIT single-use virtual cards, PAN never in context.
Available components
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score →
Supply Chain Security87
- No malware found by supply-chain analysis.Pass
- Only part of the dependency tree could be resolved (98 of 102), so this covers what we could see, not the whole tree.Partial
- No install/post-install scripts declared.Pass
- Only part of the dependency tree could be resolved (98 of 102), so this covers what we could see, not the whole tree. View diagnostics → Partial
Provenance & Transparency45
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 4 days ago).Pass
- Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability84
- 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 1630 tokens (~116/item across 14 items; 13 tools + 1 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management23
- Stability check failed: the tool surface changed between 1.3.5 and 1.7.0: 0 tool removals, 1 breaking changes, 1 additions. See how to fix → Fail
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.
npm · z-zero-mcp-server
claude mcp add dempty-glitch-z-zero-mcp -- npx -y z-zero-mcp-server
codex mcp add dempty-glitch-z-zero-mcp -- npx -y z-zero-mcp-server
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"dempty-glitch-z-zero-mcp": {
"type": "local",
"command": [
"npx",
"-y",
"z-zero-mcp-server"
],
"enabled": true
}
}
} openclaw mcp add dempty-glitch-z-zero-mcp --command npx --arg -y --arg z-zero-mcp-server
mcp_servers:
dempty-glitch-z-zero-mcp:
command: "npx"
args: ["-y", "z-zero-mcp-server"] {
"mcpServers": {
"dempty-glitch-z-zero-mcp": {
"command": "npx",
"args": [
"-y",
"z-zero-mcp-server"
]
}
}
} Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 2 Aug 26 +65
- Provenance: unverified → fail ▼ security
- Stability: unverified → fail ▼ security
- Known CVEs: unverified → partial ▲ security
- Install scripts: unverified → pass ▲ security
- Malware scan: unverified → pass ▲ security
- Schema quality: pass → fail ▼ functional
- MCP protocol: unverified → pass ▲ functional
- Maintenance: unverified → pass ▲ functional
- Dependency health: unverified → partial ▲ functional
- License: unverified → pass ▲ functional
- Schema quality: unverified → excellent ▲ functional
- Tool coverage: unverified → 100 ▲ functional
- Schema quality: unverified → 100 ▲ functional
- Licence: MIT functional
- 31 Jul 26 −1
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 30 Jul 26 0
- Security disclosure: unverified → fail ▼ functional
- Package version: 1.6.1 → 1.7.0 functional
- 29 Jul 26 0
- Security disclosure: fail → unverified ▼ functional
- Package version: 1.6.0 → 1.6.1 functional
- 28 Jul 26 −47
- Malware scan: pass → unverified ▼ security
- Schema quality: 100 → unverified ▼ functional
- Tool coverage: 100 → unverified ▼ functional
- Package version: 1.3.5 → 1.6.0 functional
- 27 Jul 26 53
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 3 Aug 2026 · Analysed npm/[email protected]
Provenance none
Ecosystem: npm · Outcome: none
Dependencies 98 packages
98 packages in the resolved dependency tree · 96 deprecated · 30 stale.
The dependency tree was only partially resolved, so these counts may be incomplete.
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.
auto_pay_checkout ~108
⚠️ MANDATORY: Read mcp://resources/sop first. Only use on PAYMENT pages where final total is visible. Auto-detects Web3 or Fiat and completes payment. For physical goods (Shopify, Etsy), get_merchant_hints first.
| Name | Type | Req | Description |
|---|---|---|---|
| card_alias | string | yes | Card alias to charge for JIT Fiat fallback, e.g. 'Card_01'. |
| checkout_url | string | yes | Full URL of the checkout/payment page to analyze and pay. |
No output schema declared.
No examples provided.
cancel_payment_token ~70
Cancel unused token and refund instantly. Use when user cancels the purchase or to free up a card slot.
| Name | Type | Req | Description |
|---|---|---|---|
| reason | string | yes | Reason for cancellation, e.g. 'Price mismatch: checkout shows $20 but token is $15' |
| token | string | yes | The payment token to cancel |
No output schema declared.
No examples provided.
check_balance ~51
Check spendable USD balance for a card alias. For active token limits, use list_cards instead.
| Name | Type | Req | Description |
|---|---|---|---|
| card_alias | string | yes | The alias of the card to check, e.g. 'Card_01' |
No output schema declared.
No examples provided.
execute_payment ~260
Execute a payment with a one-time token: Z-Zero opens a headless browser, injects the card (you NEVER see the PAN), clicks Pay, then watches for a REAL confirmation before reporting success. Returns a `status`: `confirmed` (order placed → token burned, receipt_id may hold a real order #), `declined` (merchant rejected → token kept for refund), `unconfirmed` (submitted but no confirmation seen → do NOT retry blindly, verify first), `not_submitted` (no Pay button → supply a submit_selector hint), or `no_fields`. ALWAYS pass actual_amount so overcharges are blocked and underspend refunded.
| Name | Type | Req | Description |
|---|---|---|---|
| actual_amount | number | — | STRONGLY RECOMMENDED. The final total shown on the checkout page (incl. shipping + tax). Enables the overcharge block and the underspend refund — omit only if it is genuinely unreadable. |
| checkout_url | string | yes | The full URL of the checkout/payment page |
| hints | object | — | Optional hints from get_merchant_hints — selectors and pre-steps to guide Playwright. Use when default selectors fail or for complex multi-step checkouts. |
| token | string | yes | The temporary payment token from request_payment_token |
No output schema declared.
No examples provided.
get_deposit_addresses ~32
Get your Base deposit address to top up your wallet with USDC (or any supported stablecoin on Base).
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_merchant_hints ~87
Get merchant navigation flow for a domain or platform key (e.g. '_platform_etsy'). Returns pre_steps (how to navigate checkout) and platform notes. Call BEFORE starting checkout to understand the multi-step flow.
| Name | Type | Req | Description |
|---|---|---|---|
| domain | string | yes | The main domain of the checkout page, e.g. 'amazon.com' or 'shopify.com'. Strip 'www.' prefix. |
No output schema declared.
No examples provided.
list_cards ~24
List all available virtual card aliases and their balances. No sensitive data is returned.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
report_checkout_fail ~344
Report a checkout you could not complete. Pick the failure_class that best matches what you saw — this feeds Z-ZERO's self-healing loop (labeled failures become better merchant hints for the next run). If nothing fits, use 'unknown' and describe what happened in error_message.
| Name | Type | Req | Description |
|---|---|---|---|
| error_message | string | — | Brief description of what you saw, e.g. 'Card number field is inside a new iframe' or 'Page redirected to CAPTCHA'. NEVER include card numbers. |
| failure_class | string | yes | Fixed failure class: 'card_declined_issuer' (card rejected by bank), 'card_declined_bin_block' (merchant refuses prepaid/virtual cards), 'avs_mismatch' (billing address rejected), '3ds_required' (ext… |
| remediation_tried | string | — | What you already tried before giving up, e.g. 'retried with submit_selector from hints'. |
| step | string | — | Where it failed: 'navigate' (page load), 'pre_steps' (shipping/navigation steps), 'fill_form' (card fields), 'submit' (Pay button), 'confirm' (after submitting). |
| url | string | yes | The checkout/payment page URL where the purchase failed. |
No output schema declared.
No examples provided.
request_human_approval ~124
Pause and ask the user for approval before risky actions (price mismatch, large amount, unusual request).
| Name | Type | Req | Description |
|---|---|---|---|
| alternative_action | string | — | Alternative option if available |
| current_token | string | — | Current active token ID if any |
| recommended_action | string | yes | What the bot recommends doing, e.g. 'Cancel current $15 token and issue a new $20 token' |
| situation | string | yes | Clear description of what the bot found, e.g. 'Checkout shows $20 total (includes $3 tax) but current token is only $15' |
No output schema declared.
No examples provided.
request_payment_token ~311
Request a single-use JIT virtual card ($1–$100) locked to one amount + merchant. ⚠️ Read mcp://resources/sop first. Only call once the FINAL total is visible — for physical goods that is AFTER shipping is submitted (use get_merchant_hints to navigate there). For digital goods with the price already visible, prefer auto_pay_checkout instead. BEFORE requesting: look at the checkout page one more time and compare it against what the user actually asked for — same items, same quantity, same variant, same destination? If anything differs, do NOT request a token; fix the cart or check with the user first. A mismatch you catch here costs nothing; after this point it costs a card. If you pass `cart`, the server signs your declared intent and binds the card to it — the user gets cryptographic proof of what this card was authorized for.
| Name | Type | Req | Description |
|---|---|---|---|
| amount | number | yes | Amount in USD to authorize (min: $1, max: $100) |
| card_alias | string | yes | Which card to charge, e.g. 'Card_01' |
| cart | array | — | RECOMMENDED: the items you are buying, as the USER agreed to them. This becomes a signed intent bound to the card — proof of what was authorized. |
| merchant | string | yes | Name or URL of the merchant/service being purchased |
| ship_to | string | — | Shipping destination as a single string (only a hash is stored, never the raw address). |
No output schema declared.
No examples provided.
set_api_key ~68
Activate a new Passport Key instantly, no restart needed. Only call when user explicitly provides a key.
| Name | Type | Req | Description |
|---|---|---|---|
| api_key | string | yes | The new Passport Key to activate. Must start with 'zk_live_' or 'zk_test_'. Get from: https://z-zero.xyz/dashboard/agents |
No output schema declared.
No examples provided.
show_api_key_status ~24
Check if Passport Key is configured. Shows prefix only, for debugging.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
verify_receipt ~91
Verify a Z-Zero signed receipt by id. Returns the receipt (what was authorized vs what actually settled, and any diff) plus signature validity. Use this to PROVE to the user that a purchase really happened — never claim a purchase succeeded from memory when a receipt exists.
| Name | Type | Req | Description |
|---|---|---|---|
| receipt_id | string | yes | The receipt_id returned by execute_payment / auto_pay_checkout (signed_receipt.receipt_id). |
No output schema declared.
No examples provided.