Skavio USDC Payment Verification & Proof MCP
REMOTE · GETSKAVIO.COM
18 tools: USDC verification, matching, evidence PDFs, DNS/TLS and authenticated company processing.
Available components
Last scanned (3 hours ago)
Scores higher than 53% of remote servers
Reachable. Last reached 5 Nov 2026.
Category Finance and Payments
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security63
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- Authorisation not fully verified: no authorisation is required to call this server, and 1 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe. See how to fix → View diagnostics → Unverified
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- The HSTS (Strict-Transport-Security) header is present. View diagnostics → Pass
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability65
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 3362 tokens (~186/item across 18 items; 18 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management23
- Stability observed for 7 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Tool Safety88
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- 1 of 2 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "usdc_transfer_evidence_pdf" implies "transfer" and declares readOnlyHint instead, contradicting what its own name says it does. See how to fix → Partial
- An AI judge read all 19 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 3 Nov 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 13 to 17. That category is still filling its 30-day observation window: 4 days of observed history at the previous scan, 5 at this one. The score rises as the window fills, whether or not the server changes.
- 1 Nov 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 7 to 10. That category is still filling its 30-day observation window: 2 days of observed history at the previous scan, 3 at this one. The score rises as the window fills, whether or not the server changes.
- 30 Oct 26 +1
- Stability: unverified → 0.03 ▲ functional
- 29 Oct 26 64
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 5 Nov 2026 · Probed https://getskavio.com/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=getskavio.com | CN=YE2,O=Let's Encrypt,C=US | 25 Oct 2026 | 23 Jan 2027 | ECDSA 256 | ECDSA-SHA384 | 546f8b2ec17460dbb9d9694b99e6763f681 |
| SANs: *.getskavio.com, getskavio.com | ||||||
| CN=YE2,O=Let's Encrypt,C=US (CA) | CN=Root YE,O=ISRG,C=US | 3 Sept 2025 | 2 Sept 2028 | ECDSA 384 | ECDSA-SHA384 | 4df3b15dd6c0784c507cd37b58e6f115 |
| CN=Root YE,O=ISRG,C=US (CA) | CN=ISRG Root X2,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | ECDSA-SHA384 | 872165fc34b6e5fba8add5b3705fb53a |
| CN=ISRG Root X2,O=Internet Security Research Group,C=US (CA) | CN=ISRG Root X1,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | SHA256-RSA | 6c8f1dc727c7117f7baf853ac980f9cd |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of getskavio.com. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| com. | present | 19718 | 13 | Verified |
| getskavio.com. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
| Header | Value |
|---|---|
| strict-transport-security | max-age=31536000 |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://getskavio.com/mcp | Verified | 200 | |
| http (plaintext) | http://getskavio.com/mcp | HTTPS enforced | 308 | https://getskavio.com/mcp |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
audio_transcribe Audio transcribe ~228
Transcribe a bounded source audio or video file supplied as base64 to text. Use for spoken media; not for OCR, invoice parsing, or PDF content conversion. This is a separately authenticated company Agent Tools relay; requires a valid Bearer API key, an enabled backend operation and an accepted payment mode. x402 returns a workload-specific quote and prepaid consumes shared company credits. Retry with the SAME idempotency_key and inputs to recover, not a new job. Admission is not delivery: poll skavio_agent_job_status, retrieve through skavio_agent_job_result, and verify SHA256. No anonymous execution.
| Name | Type | Req | Description |
|---|---|---|---|
| arguments | object | yes | Tool-specific structured input object. Supply the required named fields described by its JSON Schema; source bytes must respect encoded size limits. Never include wallet private keys, passwords or AP… |
| idempotency_key | string | yes | Stable job key; retry exactly the same inputs and payment mode with this key to recover safely. |
| payment_mode | string | – | x402 returns a workload-specific quote; prepaid spends your existing shared company credits. No anonymous execution. |
No output schema declared.
No examples provided.
document_ocr Document ocr ~238
Apply optical character recognition to a scanned document supplied as base64 and return searchable extracted text. Use when the document lacks a usable text layer; use pdf_to_text for selectable PDF text and invoice_extract for invoice fields. This is a separately authenticated company Agent Tools relay; requires a valid Bearer API key, an enabled backend operation and an accepted payment mode. x402 returns a workload-specific quote and prepaid consumes shared company credits. Retry with the SAME idempotency_key and inputs to recover, not a new job. Admission is not delivery: poll skavio_agent_job_status, retrieve through skavio_agent_job_result, and verify SHA256. No anonymous execution.
| Name | Type | Req | Description |
|---|---|---|---|
| arguments | object | yes | Tool-specific structured input object. Supply the required named fields described by its JSON Schema; source bytes must respect encoded size limits. Never include wallet private keys, passwords or AP… |
| idempotency_key | string | yes | Stable job key; retry exactly the same inputs and payment mode with this key to recover safely. |
| payment_mode | string | – | x402 returns a workload-specific quote; prepaid spends your existing shared company credits. No anonymous execution. |
No output schema declared.
No examples provided.
domain_dns_tls_audit Public domain DNS and TLS audit ~152
Audit the public DNS records and TLS certificate of ONE public hostname, using bounded DNS resolution and a TLS handshake to port 443. Use for a basic hostname/certificate check; do not use for web content fetching (web_fetch), page extraction (web_extract), vulnerability scanning, port scanning or private IP networks. Input is a hostname such as example.com, not a URL. Returns TLS validity, resolved public IPs, TLS version and certificate expiry where available; no HTTP request. Costs 0.05 native USDC via x402 v2 on Base or Solana MCP.
| Name | Type | Req | Description |
|---|---|---|---|
| domain | string | yes | Public DNS hostname, for example example.com; no URL, IP, credentials or private host. |
No output schema declared.
No examples provided.
invoice_extract Invoice extract ~237
Extract structured invoice fields from one uploaded document, with source page count verified and a per-page cost quote. Use for invoice metadata, not generic OCR (document_ocr) or plain selectable text (pdf_to_text). This is a separately authenticated company Agent Tools relay; requires a valid Bearer API key, an enabled backend operation and an accepted payment mode. x402 returns a workload-specific quote and prepaid consumes shared company credits. Retry with the SAME idempotency_key and inputs to recover, not a new job. Admission is not delivery: poll skavio_agent_job_status, retrieve through skavio_agent_job_result, and verify SHA256. No anonymous execution.
| Name | Type | Req | Description |
|---|---|---|---|
| arguments | object | yes | Tool-specific structured input object. Supply the required named fields described by its JSON Schema; source bytes must respect encoded size limits. Never include wallet private keys, passwords or AP… |
| idempotency_key | string | yes | Stable job key; retry exactly the same inputs and payment mode with this key to recover safely. |
| payment_mode | string | – | x402 returns a workload-specific quote; prepaid spends your existing shared company credits. No anonymous execution. |
No output schema declared.
No examples provided.
match_native_usdc_payment Match exact USDC recipient and amount ~237
Confirm an exact native Circle USDC recipient and six-decimal transfer amount for a completed transaction on a supported EVM chain or Solana, with chain-specific finality checks. Use when reconciling a payment with an expected wallet and amount; for inspecting a transfer without expected values choose verify_native_usdc; for a PDF choose usdc_transfer_evidence_pdf. Requires tx_hash, recipient and amount, does not send funds or create an invoice. Costs 0.03 USDC via x402 v2; paid MCP wallets can pay native USDC on Base or Solana.
| Name | Type | Req | Description |
|---|---|---|---|
| amount | string | yes | Positive exact USDC decimal string, at most six decimal places. Never a floating point number. |
| network | string | – | Blockchain inspected; the separate API payment always settles native USDC on Base. |
| recipient | string | yes | Expected recipient: EVM 0x address or Solana owner wallet, not a token account. |
| tx_hash | string | yes | Public transaction to inspect: 0x plus 64 hex characters for EVM; base58 64-byte Solana signature. Must match network. |
No output schema declared.
No examples provided.
pdf_merge Pdf merge ~237
Combine two to five uploaded base64-encoded PDF documents into one output document, preserving the supplied order. Use to concatenate files; use pdf_split to select pages from one PDF or pdf_to_text to extract text. This is a separately authenticated company Agent Tools relay; requires a valid Bearer API key, an enabled backend operation and an accepted payment mode. x402 returns a workload-specific quote and prepaid consumes shared company credits. Retry with the SAME idempotency_key and inputs to recover, not a new job. Admission is not delivery: poll skavio_agent_job_status, retrieve through skavio_agent_job_result, and verify SHA256. No anonymous execution.
| Name | Type | Req | Description |
|---|---|---|---|
| arguments | object | yes | Tool-specific structured input object. Supply the required named fields described by its JSON Schema; source bytes must respect encoded size limits. Never include wallet private keys, passwords or AP… |
| idempotency_key | string | yes | Stable job key; retry exactly the same inputs and payment mode with this key to recover safely. |
| payment_mode | string | – | x402 returns a workload-specific quote; prepaid spends your existing shared company credits. No anonymous execution. |
No output schema declared.
No examples provided.
pdf_split Pdf split ~235
Select one-based page numbers from an uploaded PDF and return a new document containing those pages. Use to extract pages; use pdf_merge to concatenate two to five whole PDFs or pdf_to_text for reading text. This is a separately authenticated company Agent Tools relay; requires a valid Bearer API key, an enabled backend operation and an accepted payment mode. x402 returns a workload-specific quote and prepaid consumes shared company credits. Retry with the SAME idempotency_key and inputs to recover, not a new job. Admission is not delivery: poll skavio_agent_job_status, retrieve through skavio_agent_job_result, and verify SHA256. No anonymous execution.
| Name | Type | Req | Description |
|---|---|---|---|
| arguments | object | yes | Tool-specific structured input object. Supply the required named fields described by its JSON Schema; source bytes must respect encoded size limits. Never include wallet private keys, passwords or AP… |
| idempotency_key | string | yes | Stable job key; retry exactly the same inputs and payment mode with this key to recover safely. |
| payment_mode | string | – | x402 returns a workload-specific quote; prepaid spends your existing shared company credits. No anonymous execution. |
No output schema declared.
No examples provided.
pdf_to_text Pdf to text ~231
Extract embedded selectable text from a PDF supplied as base64. Use for text-layer PDFs; use document_ocr when pages are scanned images, and invoice_extract for structured invoice fields. This is a separately authenticated company Agent Tools relay; requires a valid Bearer API key, an enabled backend operation and an accepted payment mode. x402 returns a workload-specific quote and prepaid consumes shared company credits. Retry with the SAME idempotency_key and inputs to recover, not a new job. Admission is not delivery: poll skavio_agent_job_status, retrieve through skavio_agent_job_result, and verify SHA256. No anonymous execution.
| Name | Type | Req | Description |
|---|---|---|---|
| arguments | object | yes | Tool-specific structured input object. Supply the required named fields described by its JSON Schema; source bytes must respect encoded size limits. Never include wallet private keys, passwords or AP… |
| idempotency_key | string | yes | Stable job key; retry exactly the same inputs and payment mode with this key to recover safely. |
| payment_mode | string | – | x402 returns a workload-specific quote; prepaid spends your existing shared company credits. No anonymous execution. |
No output schema declared.
No examples provided.
skavio_agent_job_result Agent job result ~103
Download your owned completed processing result as base64 with SHA256; no new payment. Input result_id must come from your completed owned manifest. Returns data_base64, sha256 and delivered=true, or an explicit error; independently verify the checksum.
| Name | Type | Req | Description |
|---|---|---|---|
| idempotency_key | string | yes | Your original processing job key; same authenticated company only. |
| result_id | string | yes | A result_id from the owned completed job status manifest. Verify returned SHA256. |
No output schema declared.
No examples provided.
skavio_agent_job_status Agent job status ~72
Read your owned processing job and result manifest; no new payment. Input is your original idempotency key. Returns state, reservation, availability and any owned result IDs; only available results may be downloaded.
| Name | Type | Req | Description |
|---|---|---|---|
| idempotency_key | string | yes | Your original processing job key; same authenticated company only. |
No output schema declared.
No examples provided.
skavio_agent_wallet Agent wallet ~53
Read your authoritative shared credit wallet; no new payment. Returns balance_credits, available_credits, reserved_credits and USD display strings with ledger_source. It does not fund, reserve, move or spend credits.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
skavio_catalog Catalog ~56
Free discovery of Skavio paid MCP tools, prices, and networks. No access to customer data. Returns four paid prices in USDC, inspection networks, separate processing authentication and activation limits. No call submits a job or spends funds.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
skavio_launch_status Launch status ~45
Free production availability status, including explicitly disabled processing functions. No execution or charge. Returns activation and owner-funded historical payment journal evidence separately from approved pricing and unverified realized profitability.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
usdc_transfer_evidence_pdf USDC blockchain transfer evidence PDF ~175
Generate a bounded base64-encoded PDF containing publicly verifiable native Circle USDC transaction evidence for an existing on-chain transfer. Use when a customer or accountant needs a downloadable blockchain proof, not when you need a machine-readable exact recipient and amount check (use match_native_usdc_payment) or a simple transaction lookup (use verify_native_usdc). The PDF is not an invoice, tax receipt or authorization. No custody or transfers. Costs 0.05 USDC via x402 v2 on Base or Solana MCP.
| Name | Type | Req | Description |
|---|---|---|---|
| network | string | – | Blockchain inspected; the separate API payment always settles native USDC on Base. |
| tx_hash | string | yes | Public transaction to inspect: 0x plus 64 hex characters for EVM; base58 64-byte Solana signature. Must match network. |
No output schema declared.
No examples provided.
verify_native_usdc Verify native USDC transaction ~187
Inspect a completed native Circle USDC transfer by transaction hash on a supported chain (Base, Polygon, Arbitrum, Optimism, Ethereum, Avalanche or Solana). Use for transaction evidence; use match_native_usdc_payment to require an exact recipient and six-decimal amount, or usdc_transfer_evidence_pdf to obtain a PDF. This call does not initiate transfers or establish payment to a particular invoice. Costs 0.02 USDC via x402 v2; the paid MCP accepts Base or Solana USDC subject to wallet approval. Public-chain RPC finality and availability vary.
| Name | Type | Req | Description |
|---|---|---|---|
| network | string | – | Blockchain inspected; the separate API payment always settles native USDC on Base. |
| tx_hash | string | yes | Public transaction to inspect: 0x plus 64 hex characters for EVM; base58 64-byte Solana signature. Must match network. |
No output schema declared.
No examples provided.
web_extract Web extract ~232
Extract human-visible text from one public HTTPS page under robots and size limits. Use for readable page text, not raw document fetching (web_fetch) or SHA256 change detection (web_monitor). This is a separately authenticated company Agent Tools relay; requires a valid Bearer API key, an enabled backend operation and an accepted payment mode. x402 returns a workload-specific quote and prepaid consumes shared company credits. Retry with the SAME idempotency_key and inputs to recover, not a new job. Admission is not delivery: poll skavio_agent_job_status, retrieve through skavio_agent_job_result, and verify SHA256. No anonymous execution.
| Name | Type | Req | Description |
|---|---|---|---|
| arguments | object | yes | Tool-specific structured input object. Supply the required named fields described by its JSON Schema; source bytes must respect encoded size limits. Never include wallet private keys, passwords or AP… |
| idempotency_key | string | yes | Stable job key; retry exactly the same inputs and payment mode with this key to recover safely. |
| payment_mode | string | – | x402 returns a workload-specific quote; prepaid spends your existing shared company credits. No anonymous execution. |
No output schema declared.
No examples provided.
web_fetch Web fetch ~235
Retrieve content from a public HTTPS document under robots.txt, SSRF and byte limits. Use for a source fetch; choose web_extract when only human-visible text is needed and web_monitor for content change hashes. This is a separately authenticated company Agent Tools relay; requires a valid Bearer API key, an enabled backend operation and an accepted payment mode. x402 returns a workload-specific quote and prepaid consumes shared company credits. Retry with the SAME idempotency_key and inputs to recover, not a new job. Admission is not delivery: poll skavio_agent_job_status, retrieve through skavio_agent_job_result, and verify SHA256. No anonymous execution.
| Name | Type | Req | Description |
|---|---|---|---|
| arguments | object | yes | Tool-specific structured input object. Supply the required named fields described by its JSON Schema; source bytes must respect encoded size limits. Never include wallet private keys, passwords or AP… |
| idempotency_key | string | yes | Stable job key; retry exactly the same inputs and payment mode with this key to recover safely. |
| payment_mode | string | – | x402 returns a workload-specific quote; prepaid spends your existing shared company credits. No anonymous execution. |
No output schema declared.
No examples provided.
web_monitor Web monitor ~234
Measure a public HTTPS page's content hash, optionally comparing the previous SHA256 supplied by the caller. Use for detecting changes; choose web_fetch to retrieve the document or web_extract for just visible text. This is a separately authenticated company Agent Tools relay; requires a valid Bearer API key, an enabled backend operation and an accepted payment mode. x402 returns a workload-specific quote and prepaid consumes shared company credits. Retry with the SAME idempotency_key and inputs to recover, not a new job. Admission is not delivery: poll skavio_agent_job_status, retrieve through skavio_agent_job_result, and verify SHA256. No anonymous execution.
| Name | Type | Req | Description |
|---|---|---|---|
| arguments | object | yes | Tool-specific structured input object. Supply the required named fields described by its JSON Schema; source bytes must respect encoded size limits. Never include wallet private keys, passwords or AP… |
| idempotency_key | string | yes | Stable job key; retry exactly the same inputs and payment mode with this key to recover safely. |
| payment_mode | string | – | x402 returns a workload-specific quote; prepaid spends your existing shared company credits. No anonymous execution. |
No output schema declared.
No examples provided.
How do I install the Skavio USDC Payment Verification & Proof MCP server?
Skavio USDC Payment Verification & Proof MCP is a hosted endpoint at https://getskavio.com/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · getskavio.com
claude mcp add --transport http eu-skavio-paid-micro-apis 'https://getskavio.com/mcp'
What is the Skavio USDC Payment Verification & Proof MCP server?
Skavio USDC Payment Verification & Proof MCP is listed in the public MCP registry as eu.skavio/paid-micro-apis. 18 tools: USDC verification, matching, evidence PDFs, DNS/TLS and authenticated company processing. This page covers its hosted endpoint (https://getskavio.com/mcp).
Is the Skavio USDC Payment Verification & Proof MCP server safe to use?
Skavio USDC Payment Verification & Proof MCP scores 67 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the Skavio USDC Payment Verification & Proof MCP server expose?
Skavio USDC Payment Verification & Proof MCP exposes 18 tools: skavio_launch_status, skavio_catalog, verify_native_usdc, match_native_usdc_payment, usdc_transfer_evidence_pdf, and 13 more. Their descriptions and schemas cost roughly 3,187 tokens of context every time the server is loaded.
Does the Skavio USDC Payment Verification & Proof MCP server require authentication?
No. We connected to Skavio USDC Payment Verification & Proof MCP without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the Skavio USDC Payment Verification & Proof MCP server still maintained?
Skavio USDC Payment Verification & Proof MCP is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.