# MACH Base (remote · api.mach.gallery)

17 Base data tools for agents over Streamable HTTP MCP. Pay per call in USDC via x402; no API key.

- Trust score: 77/100 (medium)
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-09-25

## Components

- remote · `api.mach.gallery`: 77/100 (this document), [markdown](https://verifymcp.io/servers/thealiphant-mach-base/api.md), [page](https://verifymcp.io/servers/thealiphant-mach-base/api)

## Channel facts

- Endpoint: `https://api.mach.gallery/mcp`
- Transports: `streamable-http`
- Auth: `none`
- Version: `1.0.2`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-09-25.

- **Endpoint Security**: 83/100
  - The endpoint's TLS certificate is valid, in date, and uses a strong key.
  - No authorisation is required to call this server. Every tool declares its destructiveHint and none is destructive, so open access doesn't expose one.
  - HTTPS is enforced; there's no plaintext access path.
  - The HSTS (Strict-Transport-Security) header is present.
  - DNSSEC is configured correctly; the domain's records validate against the full chain to the root.
- **Transport & Reachability**: 100/100
  - Verified streamable-http transport via a live MCP handshake.
- **Schema Quality & AI Usability**: 82/100
  - AI-judged instruction clarity (excellent).
  - Tool/resource definitions use about 1157 tokens (~68/item across 17 items; 17 tools + 0 resources), lean.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 10/100
  - Stability observed for 3 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 99/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 96% of tool parameters carry a description.
- **Tool Safety**: 100/100
  - No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.
  - We read all 17 captured tool definition(s), and no name or description among them implies an irreversible operation.
  - An AI judge read all 17 captured unit(s) of tool text and found none that tries to manipulate the model reading it.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### How do I install the MACH Base MCP server?

MACH Base is a hosted endpoint at https://api.mach.gallery/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

### Claude

```bash
claude mcp add --transport http thealiphant-mach-base 'https://api.mach.gallery/mcp'
```

### Cursor

```json
{
  "mcpServers": {
    "thealiphant-mach-base": {
      "url": "https://api.mach.gallery/mcp"
    }
  }
}
```

### VS Code

```json
{
  "servers": {
    "thealiphant-mach-base": {
      "type": "http",
      "url": "https://api.mach.gallery/mcp"
    }
  }
}
```

### Codex

```toml
[mcp_servers.thealiphant-mach-base]
url = "https://api.mach.gallery/mcp"
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "thealiphant-mach-base": {
      "type": "remote",
      "url": "https://api.mach.gallery/mcp",
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add thealiphant-mach-base --url 'https://api.mach.gallery/mcp' --transport streamable-http
```

### Hermes

```yaml
mcp_servers:
  thealiphant-mach-base:
    url: "https://api.mach.gallery/mcp"
```

### Netclaw

```json
{
  "McpServers": {
    "thealiphant-mach-base": {
      "Transport": "http",
      "Url": "https://api.mach.gallery/mcp"
    }
  }
}
```

### Vellum

```bash
assistant mcp add thealiphant-mach-base -t streamable-http -u 'https://api.mach.gallery/mcp'
```

### Other

```json
{
  "mcpServers": {
    "thealiphant-mach-base": {
      "type": "http",
      "url": "https://api.mach.gallery/mcp"
    }
  }
}
```

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-09-25 (score 77, 0)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-09-24 (score 77, +1)

No change was recorded against any check on this day. Stability & Change Management went from 3 to 7. That category is still filling its 30-day observation window: 1 days of observed history at the previous scan, 2 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-09-23 (score 76, +15)

- [security improvement] Authorization: unverified → partial
- [security] Tool “base_allowance” rewrote its description, which is the text the model reads
- [security] Tool “base_block” rewrote its description, which is the text the model reads
- [security] Tool “base_block_number” rewrote its description, which is the text the model reads
- [security] Tool “base_contract_code” rewrote its description, which is the text the model reads
- [security] Tool “base_contract_info” rewrote its description, which is the text the model reads
- [security] Tool “base_erc20_balance” rewrote its description, which is the text the model reads
- [security] Tool “base_erc20_transfers” rewrote its description, which is the text the model reads
- [security] Tool “base_eth_call” rewrote its description, which is the text the model reads
- [security] Tool “base_gas_price” rewrote its description, which is the text the model reads
- [security] Tool “base_logs” rewrote its description, which is the text the model reads
- [security] Tool “base_nonce” rewrote its description, which is the text the model reads
- [security] Tool “base_receipt” rewrote its description, which is the text the model reads
- [security] Tool “base_total_supply” rewrote its description, which is the text the model reads
- [security] Tool “base_transaction” rewrote its description, which is the text the model reads
- [security] Tool “base_wallet_balance” rewrote its description, which is the text the model reads
- [security] Tool “base_wallet_snapshot” rewrote its description, which is the text the model reads
- [functional regression] Schema quality: 46 → 68
- [functional improvement] Tool coverage: 0% → 96%
- [functional improvement] Stability: unverified → 0.03
- [functional] Schema quality: fair → excellent
- [functional] Destructive annotations: 0 → pass
- [functional] New tool “base_transaction_context”
- [cosmetic] “base_allowance” reworded the description of “owner”
- [cosmetic] “base_allowance” reworded the description of “spender”
- [cosmetic] “base_allowance” reworded the description of “token”
- [cosmetic] “base_block” reworded the description of “block”
- [cosmetic] “base_contract_code” reworded the description of “address”
- [cosmetic] “base_contract_info” reworded the description of “address”
- [cosmetic] “base_erc20_balance” reworded the description of “token”
- [cosmetic] “base_erc20_transfers” reworded the description of “from_address”
- [cosmetic] “base_erc20_transfers” reworded the description of “from_block”
- [cosmetic] “base_erc20_transfers” reworded the description of “to_address”
- [cosmetic] “base_erc20_transfers” reworded the description of “to_block”
- [cosmetic] “base_erc20_transfers” reworded the description of “token”
- [cosmetic] “base_eth_call” reworded the description of “block”
- [cosmetic] “base_eth_call” reworded the description of “data”
- [cosmetic] “base_eth_call” reworded the description of “to”
- [cosmetic] “base_logs” reworded the description of “address”
- [cosmetic] “base_logs” reworded the description of “from_block”
- [cosmetic] “base_logs” reworded the description of “to_block”
- [cosmetic] “base_logs” reworded the description of “topics”
- [cosmetic] “base_nonce” reworded the description of “address”
- [cosmetic] “base_receipt” reworded the description of “tx_hash”
- [cosmetic] “base_total_supply” reworded the description of “token”
- [cosmetic] “base_transaction” reworded the description of “tx_hash”
- [cosmetic] “base_wallet_balance” reworded the description of “address”
- [cosmetic] “base_wallet_snapshot” reworded the description of “address”
- [cosmetic] “base_wallet_snapshot” reworded the description of “tokens”

### 2026-09-22 (score 61)

First indexed and scored.

## MCP tools (17)

### `base_block_number` (~38 tokens)

Get the current Base mainnet block number (latest chain height) for an autonomous agent. Costs $0.005 USDC via x402.

### `base_gas_price` (~37 tokens)

Get the current gas price on Base mainnet in wei for transaction fee estimation. Costs $0.005 USDC via x402.

### `base_wallet_balance` (~57 tokens)

Check the native ETH balance of a wallet or address on Base mainnet. Costs $0.005 USDC via x402.

Input parameters:

- `address` (string, required): 20-byte 0x-prefixed EVM address on Base mainnet.

### `base_erc20_balance` (~68 tokens)

Check a USDC or other ERC-20 token balance for a wallet on Base mainnet. Costs $0.005 USDC via x402.

Input parameters:

- `address` (required)
- `token` (string, required): 20-byte 0x-prefixed EVM address on Base mainnet.

### `base_nonce` (~55 tokens)

Get the current transaction nonce for a Base wallet before broadcasting a transaction. Costs $0.005 USDC via x402.

Input parameters:

- `address` (string, required): 20-byte 0x-prefixed EVM address on Base mainnet.

### `base_contract_code` (~63 tokens)

Check whether an address is a smart contract or EOA on Base mainnet by reading deployed bytecode. Costs $0.005 USDC via x402.

Input parameters:

- `address` (string, required): 20-byte 0x-prefixed EVM address on Base mainnet.

### `base_allowance` (~87 tokens)

Check an ERC-20 token allowance on Base for an owner and spender. Costs $0.005 USDC via x402.

Input parameters:

- `owner` (string, required): ERC-20 token owner address on Base mainnet.
- `spender` (string, required): ERC-20 spender address whose allowance is being checked.
- `token` (string, required): ERC-20 or token contract address on Base mainnet.

### `base_receipt` (~55 tokens)

Check whether a Base transaction succeeded, get its receipt, and count current confirmations. Costs $0.005 USDC via x402.

Input parameters:

- `tx_hash` (string, required): 32-byte 0x-prefixed Base transaction hash.

### `base_logs` (~106 tokens)

Query smart-contract event logs on Base by contract address, topics and bounded block range. Costs $0.005 USDC via x402.

Input parameters:

- `address` (string, required): Smart-contract address on Base mainnet.
- `from_block` (integer): First Base block to include in the log query.
- `to_block` (integer): Last Base block to include in the log query.
- `topics` (array): Up to four Ethereum log topics; null keeps a topic position as a wildcard.

### `base_eth_call` (~95 tokens)

Make a read-only smart-contract call on Base with eth_call without sending a transaction. Costs $0.005 USDC via x402.

Input parameters:

- `block`: Base block selector: block number or tag such as latest, safe, finalized, pending or earliest.
- `data` (string, required): 0x-prefixed ABI calldata for a read-only eth_call.
- `to` (string, required): Smart-contract address on Base mainnet.

### `base_transaction` (~59 tokens)

Get a full Base transaction by hash, including sender, recipient, value, calldata and live transaction details. Costs $0.008 USDC via x402.

Input parameters:

- `tx_hash` (string, required): 32-byte 0x-prefixed Base transaction hash.

### `base_block` (~58 tokens)

Get a Base block by number or tag with its header and transaction hashes. Costs $0.005 USDC via x402.

Input parameters:

- `block`: Base block selector: block number or tag such as latest, safe, finalized, pending or earliest.

### `base_transaction_context` (~63 tokens)

Use when an agent needs one-call Base transaction context to verify a payment, debug a failed transaction, or confirm settlement. Costs $0.008 USDC via x402.

Input parameters:

- `tx_hash` (string, required): 32-byte 0x-prefixed Base transaction hash.

### `base_wallet_snapshot` (~76 tokens)

Take a Base wallet snapshot in one call: native ETH plus up to 10 supplied ERC-20 token balances. Costs $0.005 USDC via x402.

Input parameters:

- `address` (string, required): Wallet or account address on Base mainnet.
- `tokens` (array): Up to ten token contract addresses whose balances should be included.

### `base_total_supply` (~56 tokens)

Get total supply for an ERC-20 token or ERC-721 NFT contract on Base. Costs $0.005 USDC via x402.

Input parameters:

- `token` (string, required): ERC-20 or token contract address on Base mainnet.

### `base_contract_info` (~55 tokens)

Inspect a Base smart contract and get token metadata, bytecode size and common interface detection in one call. Costs $0.005 USDC via x402.

Input parameters:

- `address` (string, required): Smart-contract address on Base mainnet.

### `base_erc20_transfers` (~129 tokens)

Find recent ERC-20 transfers on Base, optionally filtered to transfers from or to a specific wallet. Costs $0.005 USDC via x402.

Input parameters:

- `from_address` (string): Optional sender wallet to filter ERC-20 transfers.
- `from_block` (integer): First Base block to include in the transfer query.
- `to_address` (string): Optional recipient wallet to filter ERC-20 transfers.
- `to_block` (integer): Last Base block to include in the transfer query.
- `token` (string, required): ERC-20 or token contract address on Base mainnet.

## Diagnostics

Captured diagnostic sections: TLS, DNSSEC, Authorisation, Transports. The full working is on the page: https://verifymcp.io/servers/thealiphant-mach-base/api#diagnostics

## Score history

- 2026-09-25: 77
- 2026-09-24: 77
- 2026-09-23: 76
- 2026-09-22: 61

## Common questions

### What is the MACH Base MCP server?

MACH Base is an MCP server listed in the public MCP registry as io.github.TheAliphant/mach-base. 17 Base data tools for agents over Streamable HTTP MCP. Pay per call in USDC via x402; no API key. This page covers its hosted endpoint (https://api.mach.gallery/mcp).

### Is the MACH Base MCP server safe to use?

MACH Base scores 77 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

### What tools does the MACH Base MCP server expose?

MACH Base exposes 17 tools: base_block_number, base_gas_price, base_wallet_balance, base_erc20_balance, base_nonce, and 12 more. Their descriptions and schemas cost roughly 1,157 tokens of context every time the server is loaded.

### Does the MACH Base MCP server require authentication?

No. We connected to MACH Base without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.

### Is the MACH Base MCP server still maintained?

MACH Base is still listed as active in the MCP registry. We last reached this channel on 25 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

## Links

- Remote endpoint: https://api.mach.gallery/mcp
- Website: https://api.mach.gallery/docs/
- Changelog RSS feed: https://verifymcp.io/servers/thealiphant-mach-base/api.xml
- Changelog JSON feed: https://verifymcp.io/servers/thealiphant-mach-base/api.json
- HTML version of this page: https://verifymcp.io/servers/thealiphant-mach-base/api