# io.github.MPP32/mpp32-mcp-server (npm · mpp32-mcp-server)

Payment layer for AI agents. One MCP, five protocols, thousands of paid APIs your agent can call.

- Trust score: 66/100 (medium)
- Change this week: +23
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-03

## Components

- npm · `mpp32-mcp-server`: 66/100 (this document), [markdown](https://verifymcp.io/servers/mpp32-mpp32-mcp-server/mpp32-mcp-server.md), [page](https://verifymcp.io/servers/mpp32-mpp32-mcp-server/mpp32-mcp-server)

## Channel facts

- Registry: `npm`
- Package: `mpp32-mcp-server`
- Version: `1.1.2`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-03.

- **Supply Chain Security**: 87/100
  - No malware found by supply-chain analysis.
  - Only part of the dependency tree could be resolved (95 of 99), so this covers what we could see, not the whole tree.
  - No install/post-install scripts declared.
  - Only part of the dependency tree could be resolved (95 of 99), so this covers what we could see, not the whole tree.
- **Provenance & Transparency**: 45/100
  - Source repository is publicly reachable at the declared URL.
  - Provenance check failed: no build-provenance attestation is published.
  - Clear OSI-approved license (MIT).
  - Actively maintained (last published 19 days ago).
  - Disclosure check failed: no security disclosure policy was found in the source repository.
- **Schema Quality & AI Usability**: 60/100
  - AI-judged instruction clarity (good).
  - Context-footprint check failed: tool/resource definitions use about 658 tokens (~219/item across 3 items; 3 tools + 0 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 27/100
  - Stability observed for 8 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### Claude

```bash
claude mcp add mpp32-mpp32-mcp-server -- npx -y mpp32-mcp-server
```

### Codex

```bash
codex mcp add mpp32-mpp32-mcp-server -- npx -y mpp32-mcp-server
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "mpp32-mpp32-mcp-server": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "mpp32-mcp-server"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add mpp32-mpp32-mcp-server --command npx --arg -y --arg mpp32-mcp-server
```

### Hermes

```yaml
mcp_servers:
  mpp32-mpp32-mcp-server:
    command: "npx"
    args: ["-y", "mpp32-mcp-server"]
```

### Other

```json
{
  "mcpServers": {
    "mpp32-mpp32-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "mpp32-mcp-server"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-03 (score 66, +46)

- [security regression] Provenance: unverified → fail
- [security improvement] Install scripts: unverified → pass
- [security improvement] Known CVEs: unverified → partial
- [functional regression] Security disclosure: unverified → fail
- [functional improvement] License: unverified → pass
- [functional improvement] Dependency health: unverified → partial
- [functional improvement] Maintenance: unverified → pass
- [functional improvement] Stability: unverified → 0.27
- [functional improvement] MCP protocol: unverified → pass
- [functional improvement] Schema quality: unverified → good
- [functional improvement] Tool coverage: unverified → 100
- [functional] Licence: MIT

### 2026-08-02 (score 20, +15)

- [security improvement] Malware scan: unverified → pass
- [functional regression] Security disclosure: fail → unverified

### 2026-08-01 (score 5, −20)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-31 (score 25, −18)

- [security regression] Malware scan: pass → unverified

### 2026-07-27 (score 43)

First indexed and scored.

## MCP tools (3)

### `list_mpp32_services` (~251 tokens)

Browse the MPP32 federated catalog of machine-payable APIs and data services. Includes native MPP32 services (callable end-to-end through this MCP), the x402 Bazaar (USDC on Solana), curated free APIs (DexScreener, Jupiter, CoinGecko health, httpbin, etc.), and the public MCP Registry (npx-installable servers; listing-only). Each result indicates whether it is callable through `call_mpp32_endpoint` or listing-only. Use the `category`, `q`, or `source` filters to narrow down.

Input parameters:

- `category` (string): Filter by category slug (e.g. 'ai-inference', 'token-scanner', 'price-oracle', 'web-search', 'defi-analytics').
- `limit` (integer): Max results (default 100, max 500).
- `q` (string): Free-text search across name, description, tags, and category.
- `source` (string): Filter by catalog source. 'native' = callable end-to-end; 'curated'/'free' = often callable; 'x402-bazaar'/'mcp-registry' = mostly listing-only.

### `call_mpp32_endpoint` (~205 tokens)

Call any HTTP-callable service in the MPP32 federated catalog. Free services return immediately. Paid services return a 402 challenge that this tool will sign and retry automatically when a payment key (MPP32_SOLANA_PRIVATE_KEY for x402/USDC, MPP32_PRIVATE_KEY for Tempo/pathUSD) is configured. Set MPP32_AGENT_KEY for dashboard tracking. Use `list_mpp32_services` first to find a slug. Listing-only entries (npx-installable MCP servers, x402 Bazaar non-mirrored items) cannot be called through this tool — install them directly per the catalog instructions.

Input parameters:

- `body`: JSON body (object or stringified) for POST/PUT/DELETE.
- `method` (string): HTTP method.
- `query` (object): URL query parameters as key-value pairs.
- `slug` (string, required): Service slug from `list_mpp32_services` (e.g. 'mpp32-intelligence').

### `get_solana_token_intelligence` (~202 tokens)

Get real-time Solana token intelligence from the MPP32 Intelligence Oracle. Returns alpha score (0-100), rug risk assessment, whale activity, smart money signals, 24h pump probability, projected ROI ranges, and aggregated DexScreener/Jupiter/CoinGecko market data. Costs $0.008 per query, paid automatically via x402 (USDC on Solana) or Tempo (pathUSD on Eth L2). M32 token holders receive up to 40% discount once their wallet is signature-verified. Set MPP32_AGENT_KEY in config to attribute calls to your dashboard.

Input parameters:

- `token` (string, required): Solana token mint address or ticker symbol (e.g. SOL, BONK, JUP, M32, or full base58 address).
- `walletAddress` (string): Optional Solana wallet address. Used for M32-holder discount preview; discount only applies after SIWS wallet-signature verification.

## Diagnostics

Captured diagnostic sections: Provenance, Dependencies. The full working is on the page: https://verifymcp.io/servers/mpp32-mpp32-mcp-server/mpp32-mcp-server#diagnostics

## Score history

- 2026-08-03: 66
- 2026-08-02: 20
- 2026-08-01: 5
- 2026-07-31: 25
- 2026-07-30: 43
- 2026-07-28: 43
- 2026-07-27: 43

## Links

- npm package: https://www.npmjs.com/package/mpp32-mcp-server
- Socket report: https://socket.dev/npm/package/mpp32-mcp-server
- Repository: https://github.com/MPP32/MPP32
- Website: https://mpp32.org/
- Changelog RSS feed: https://verifymcp.io/servers/mpp32-mpp32-mcp-server/mpp32-mcp-server/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/mpp32-mpp32-mcp-server/mpp32-mcp-server/changelog.json
- HTML version of this page: https://verifymcp.io/servers/mpp32-mpp32-mcp-server/mpp32-mcp-server