Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, email [email protected] and we’ll put it right.

MERX - TRON Resource Exchange

NPM · MERX-MCP · 2 COMPONENTS · SCANNED AUG 3

TRON energy exchange for AI agents. 54 tools, 30 prompts, 21 resources. A2A + ACP.

+15 this week 68 Trust /100
Trust breakdown (6 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score →

Supply Chain Security91
  • No malware found by supply-chain analysis.Pass
  • CVE check failed: a known high-severity CVE affects ws 8.17.1, reached via tronweb > ethers > ws. A fixed version is available. View diagnostics → Fail
  • No install/post-install scripts declared.Pass
  • 7 of 53 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency45
Schema Quality & AI Usability82
  • 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
  • AI-judged instruction clarity (good).Pass
  • Tool/resource definitions use about 3537 tokens (~52/item across 68 items; 54 tools + 14 resources), lean.Pass
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management27
  • Stability observed for 8 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 100% of tool parameters carry a description.Pass
Capabilities20
  • Spec-recency check failed: implements MCP spec 2024-11-05; the latest is 2026-07-28. See how to fix → Fail
Install

Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.

npm · merx-mcp

# add to Claude Code
claude mcp add exchange-merx-mcp -- npx -y merx-mcp
# add to Codex CLI
codex mcp add exchange-merx-mcp -- npx -y merx-mcp
// opencode.json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "exchange-merx-mcp": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "merx-mcp"
      ],
      "enabled": true
    }
  }
}
# add to OpenClaw
openclaw mcp add exchange-merx-mcp --command npx --arg -y --arg merx-mcp
# ~/.hermes/config.yaml
mcp_servers:
  exchange-merx-mcp:
    command: "npx"
    args: ["-y", "merx-mcp"]
// mcp.json
{
  "mcpServers": {
    "exchange-merx-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "merx-mcp"
      ]
    }
  }
}
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 3 Aug 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 23 to 27. That category is still filling its 30-day observation window: 7 days of observed history at the previous scan, 8 at this one. The score rises as the window fills, whether or not the server changes.

  • 2 Aug 26 +62
    • CVE-2026-48779 affects this package: high security
    • CVE-2026-45736 affects this package: high security
    • Provenance: unverified → fail security
    • Known CVEs: unverified → fail security
    • Malware scan: unverified → pass security
    • Install scripts: unverified → pass security
    • MCP protocol: unverified → fail functional
    • Schema quality: unverified → good functional
    • Maintenance: unverified → pass functional
    • License: unverified → pass functional
    • Dependency health: unverified → 0.95 functional
    • Schema quality: unverified → 100 functional
    • Stability: unverified → 0.23 functional
    • Tool coverage: unverified → 100 functional
    • Licence: MIT functional
  • 1 Aug 26 −21
    • Schema quality: 100 → unverified functional
    • Tool coverage: 100 → unverified functional
  • 31 Jul 26 +17
    • We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
  • 30 Jul 26 −15
    • Malware scan: pass → unverified security
    • Dependency health: unverified → partial functional
  • 28 Jul 26 −29
    • Tool coverage: 100 → unverified functional
    • Schema quality: 100 → unverified functional
  • 27 Jul 26 53

    First indexed and scored.

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 3 Aug 2026 · Analysed npm/[email protected]

Provenance none

Ecosystem: npm · Outcome: none

Vulnerabilities 2 findings
ID CVE Severity Vector Fix available
GHSA-58qx-3vcg-4xpx CVE-2026-45736 medium CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N yes
GHSA-96hv-2xvq-fx4p CVE-2026-48779 high CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H yes
Dependencies 53 packages

53 packages in the resolved dependency tree · 7 stale.

MCP tools — 54 exposed · ~3,321 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.

Tool Tokens
analyze_prices ~36

Market price analysis with trends and recommendations. No auth required.

NameTypeReqDescription
resourcestringFilter by resource type. Omit for all.

No output schema declared.

No examples provided.

approve_trc20 ~73

Approve TRC-20 spending allowance. Signs and broadcasts on-chain. Requires TRON_PRIVATE_KEY.

NameTypeReqDescription
amountstringyesAllowance amount (human-readable, or "unlimited").
spenderstringyesSpender TRON address.
tokenstringyesToken symbol or contract address.

No output schema declared.

No examples provided.

calculate_savings ~55

Calculate savings from renting energy vs burning TRX. No authentication required.

NameTypeReqDescription
operationstringOperation type. Default: trc20_transfer.
transaction_countnumberNumber of transactions. Default: 1.

No output schema declared.

No examples provided.

call_contract ~99

Execute a state-changing smart contract function. Estimates resources, buys via Merx if needed. Requires TRON_PRIVATE_KEY and TRON_ADDRESS.

NameTypeReqDescription
call_value_trxstringTRX to send with call (optional).
contract_addressstringyesContract TRON address.
function_selectorstringyesFunction signature, e.g. "stake(uint256)".
parameterstringABI-encoded parameter hex (optional).

No output schema declared.

No examples provided.

check_address_resources ~42

Check energy, bandwidth, and TRX balance for any TRON address. No auth required.

NameTypeReqDescription
addressstringyesTRON address (starts with T).

No output schema declared.

No examples provided.

compare_providers ~39

Side-by-side provider comparison with prices and availability. No auth required.

NameTypeReqDescription
resourcestringFilter by resource type. Omit for all.

No output schema declared.

No examples provided.

compile_policy ~161

Convert a natural language energy management policy into MERX automation. Creates standing orders and monitors based on your instructions. Examples: - "Keep 500k energy on my wallet, buy when price is below 55 SUN, max 200 TRX/week" - "Buy energy every day at 6 AM UTC, 1 million units, for 24 hours" - "Alert me when my energy drops below 100k" Returns a preview of what will be created. Set apply=true to execute.

NameTypeReqDescription
addressstringTRON address this policy applies to (optional)
applybooleanSet to true to create the standing orders. Default false (preview only).
instructionstringyesNatural language description of the desired automation policy

No output schema declared.

No examples provided.

convert_address ~50

Convert TRON address between base58 (T...) and hex (41...) formats. No auth required.

NameTypeReqDescription
addressstringyesTRON address in base58 (T...) or hex (41...).

No output schema declared.

No examples provided.

create_account ~54

Create a new Merx account, generate an API key, and get deposit info. No auth needed.

NameTypeReqDescription
emailstringyesEmail address for the account
passwordstringyesPassword (min 8 characters)

No output schema declared.

No examples provided.

create_monitor ~103

Create a persistent monitor (delegation expiry, balance, price alert). Auth required.

NameTypeReqDescription
monitor_typestringyesType of monitor to create.
notifyobjectyesNotification config: { webhook, telegram_chat_id }.
paramsobjectyesMonitor params: { alert_before_sec, auto_renew, resource_type, max_price_sun, duration_sec }.
target_addressstringTRON address to monitor (for delegation_expiry).

No output schema declared.

No examples provided.

create_order ~130

Buy energy or bandwidth on Merx. Routed to cheapest provider. Auth required.

NameTypeReqDescription
amountnumberyesAmount of resource units (min 65000 for ENERGY, 300 for BANDWIDTH).
duration_secnumberyesRental duration in seconds (e.g. 300, 3600, 86400, 2592000).
max_price_sunnumberOptional max price in SUN/unit. Order fails if no provider is cheaper.
resource_typestringyesResource type to purchase.
target_addressstringyesTRON address to receive delegated resources.

No output schema declared.

No examples provided.

create_paid_order ~73

Create a zero-registration order via x402 pay-per-use. Requires TRON_PRIVATE_KEY.

NameTypeReqDescription
amountnumberyesAmount of resource units
duration_secnumberyesDuration in seconds
resource_typestringyesResource type
target_addressstringyesTRON address to receive resources

No output schema declared.

No examples provided.

create_standing_order ~148

Create a server-side standing order with trigger-based automation. Auth required.

NameTypeReqDescription
action_paramsobjectyesAction parameters: { resource_type, amount, duration_sec, target_address }.
action_typestringyesAction to perform when triggered.
budget_trxstringyesMaximum budget in TRX (converted to SUN internally).
expires_atstringISO 8601 expiration date (optional).
max_executionsnumberyesMaximum number of times this order can execute.
trigger_paramsobjectyesTrigger parameters: { resource, threshold_sun } or { cron }.
trigger_typestringyesCondition that triggers the order.

No output schema declared.

No examples provided.

deposit_trx ~44

Deposit TRX to your Merx account. Requires MERX_API_KEY + TRON_PRIVATE_KEY.

NameTypeReqDescription
amount_trxstringyesAmount of TRX to deposit

No output schema declared.

No examples provided.

enable_auto_deposit ~73

Configure automatic top-up when balance drops below a threshold. Session-only.

NameTypeReqDescription
deposit_amount_trxstringyesAmount of TRX per deposit
max_daily_depositsnumberMax deposits per day (default 5)
threshold_trxstringyesBalance threshold in TRX

No output schema declared.

No examples provided.

ensure_resources ~92

Declarative resource provisioning. Checks current resources on target address and purchases only what is missing. Auth required.

NameTypeReqDescription
bandwidth_minimumnumberMinimum bandwidth the address should have.
duration_secnumberRental duration in seconds (default: 3600).
energy_minimumnumberMinimum energy the address should have.
target_addressstringyesTRON address to provision resources for.

No output schema declared.

No examples provided.

estimate_contract_call ~93

Estimate energy and bandwidth cost for a smart contract call. Compares rental vs burn cost. No auth required.

NameTypeReqDescription
caller_addressstringCaller TRON address for simulation (optional).
contract_addressstringyesContract TRON address.
function_selectorstringyesFunction signature, e.g. "transfer(address,uint256)".
parameterstringABI-encoded parameter hex (optional).

No output schema declared.

No examples provided.

estimate_transaction_cost ~126

Estimate energy and bandwidth cost for a TRON transaction. Compares rental vs burn cost. No auth required.

NameTypeReqDescription
amountstringToken amount (as string).
contract_addressstringContract address (custom).
from_addressstringSender TRON address.
function_selectorstringFunction selector (custom).
operationstringyesTransaction type.
parameterstringABI-encoded parameter (custom).
to_addressstringRecipient TRON address.
token_addressstringTRC20 contract address.

No output schema declared.

No examples provided.

execute_intent ~92

Execute a multi-step operation (transfer, swap, buy resources, etc). Validates and simulates all steps with resource cost estimates. Auth required.

NameTypeReqDescription
dry_runbooleanIf true, simulate only without executing (default: false).
resource_strategystringResource acquisition strategy (default: batch_cheapest).
stepsarrayyesArray of { action, params } steps to execute.

No output schema declared.

No examples provided.

execute_swap ~87

Execute a token swap on SunSwap V2. Requires TRON_PRIVATE_KEY.

NameTypeReqDescription
amountstringyesAmount of source token to swap
from_tokenstringyesSource token symbol (TRX, USDT, USDC, etc.)
slippagenumberSlippage tolerance in percent (default 1)
to_tokenstringyesDestination token symbol

No output schema declared.

No examples provided.

explain_concept ~54

Explain a TRON or Merx concept. No authentication required.

NameTypeReqDescription
topicstringyesTopic: energy, bandwidth, staking, delegation, sun_units, burn_vs_rent, merx_routing, provider_types

No output schema declared.

No examples provided.

get_account_info ~43

Full on-chain account state: TRX balance, energy, bandwidth, creation date. No auth required.

NameTypeReqDescription
addressstringyesTRON address (T...).

No output schema declared.

No examples provided.

get_balance ~29

Get your Merx account balance (TRX, USDT, locked). Requires MERX_API_KEY.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

get_best_price ~45

Find the cheapest provider for a given resource and amount. No auth required.

NameTypeReqDescription
amountnumberAmount of resource units needed.
resourcestringyesResource type.

No output schema declared.

No examples provided.

get_block ~40

Get TRON block info by number (or latest if omitted). No auth required.

NameTypeReqDescription
block_numbernumberBlock number. Omit for latest.

No output schema declared.

No examples provided.

get_chain_parameters ~33

Get TRON network parameters (energy fee, bandwidth cost, etc.) with Merx price comparison. No auth required.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

get_deposit_info ~25

Get your Merx deposit address and memo. Requires MERX_API_KEY.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

get_order ~31

Get order details and fill status by ID. Auth required.

NameTypeReqDescription
order_idstringyesThe order UUID.

No output schema declared.

No examples provided.

get_price_history ~54

Historical price snapshots. No auth required.

NameTypeReqDescription
periodstringTime period (default: 24h).
providerstringFilter by provider name.
resourcestringFilter by resource type.

No output schema declared.

No examples provided.

get_prices ~52

Get current energy and bandwidth prices from all Merx providers. No auth required.

NameTypeReqDescription
durationnumberFilter by duration in seconds.
resourcestringFilter by resource type. Omit for all.

No output schema declared.

No examples provided.

get_swap_quote ~87

Get a real swap quote from SunSwap V2. No auth required.

NameTypeReqDescription
amountstringyesAmount of source token to swap
from_tokenstringyesSource token symbol (TRX, USDT, USDC, etc.)
slippagenumberSlippage tolerance in percent (default 1)
to_tokenstringyesDestination token symbol

No output schema declared.

No examples provided.

get_token_info ~42

Get TRC-20 token metadata: name, symbol, decimals, total supply. No auth required.

NameTypeReqDescription
tokenstringyesToken symbol or contract address.

No output schema declared.

No examples provided.

get_token_price ~46

Get token price via SunSwap quote + CoinGecko USD rate. No auth required.

NameTypeReqDescription
tokenstringyesToken symbol (USDT, USDC, SUN, etc.)

No output schema declared.

No examples provided.

get_transaction ~34

Look up a transaction by ID on TRON. No auth required.

NameTypeReqDescription
tx_idstringyesTransaction ID (hash).

No output schema declared.

No examples provided.

get_transaction_history ~40

Get your Merx account transaction history. Requires MERX_API_KEY.

NameTypeReqDescription
periodstringTime period to query. Default: 30D.

No output schema declared.

No examples provided.

get_trc20_balance ~70

Get TRC-20 token balance for an address. Supports symbol (USDT, USDC) or contract address. No auth required.

NameTypeReqDescription
addressstringyesTRON address to query.
tokenstringyesToken symbol (USDT, USDC) or contract address.

No output schema declared.

No examples provided.

get_trx_balance ~37

Quick TRX balance for a TRON address. No auth required.

NameTypeReqDescription
addressstringyesTRON address (T...).

No output schema declared.

No examples provided.

get_trx_price ~38

Get current TRX price from CoinGecko. No auth required.

NameTypeReqDescription
currencystringFiat currency code (default: usd).

No output schema declared.

No examples provided.

list_monitors ~31

List all monitors with optional status filter. Auth required.

NameTypeReqDescription
statusstringFilter by monitor status.

No output schema declared.

No examples provided.

list_orders ~48

List recent orders with optional status filter. Auth required.

NameTypeReqDescription
limitnumberMax number of orders to return (default: 20).
statusstringFilter by order status.

No output schema declared.

No examples provided.

list_providers ~26

List all Merx providers with types, durations, and availability. No authentication required.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

list_standing_orders ~32

List all standing orders with optional status filter. Auth required.

NameTypeReqDescription
statusstringFilter by status.

No output schema declared.

No examples provided.

login ~40

Log in to an existing Merx account. No MERX_API_KEY needed.

NameTypeReqDescription
emailstringyesEmail address
passwordstringyesPassword

No output schema declared.

No examples provided.

pay_invoice ~33

Pay an x402 invoice by sending TRX and verifying payment.

NameTypeReqDescription
invoice_idstringyesInvoice ID to pay

No output schema declared.

No examples provided.

read_contract ~73

Call a view/pure function on a TRON smart contract. No auth or private key required.

NameTypeReqDescription
contract_addressstringyesContract TRON address.
function_selectorstringyesFunction signature, e.g. "balanceOf(address)".
parameterstringABI-encoded parameter hex (optional).

No output schema declared.

No examples provided.

search_transaction_history ~62

Get on-chain transaction history for a TRON address. No auth required.

NameTypeReqDescription
addressstringyesTRON address.
limitnumberMax results (default: 20).
typestringTransaction type filter (default: all).

No output schema declared.

No examples provided.

set_api_key ~60

Set your Merx API key for this session. Unlocks all authenticated tools (trading, balance, orders). Use this if you already have an API key.

NameTypeReqDescription
api_keystringyesYour Merx API key (starts with sk_live_)

No output schema declared.

No examples provided.

set_private_key ~77

Set your TRON private key for this session. Address is derived automatically. Enables write tools: transfer_trx, transfer_trc20, approve_trc20, execute_swap, deposit_trx. Key stays local - never sent to Merx servers.

NameTypeReqDescription
private_keystringyesYour TRON private key (64 hex characters)

No output schema declared.

No examples provided.

simulate ~56

Simulate a multi-step operation without executing. Returns resource estimates and costs.

NameTypeReqDescription
resource_strategystringResource acquisition strategy (default: batch_cheapest).
stepsarrayyesArray of { action, params } steps to simulate.

No output schema declared.

No examples provided.

suggest_duration ~48

Recommend a rental duration based on your use case. No authentication required.

NameTypeReqDescription
transaction_countnumberExpected number of transactions (optional).
use_casestringyesYour intended use case.

No output schema declared.

No examples provided.