agents.u.cash
OCI · GHCR.IO/UDOTCASH/AGENTS-U-CASH-MCP:0.7.1 · SCANNED SEP 20
Non-custodial HTTP-402 crypto payments for AI agents. 86-tool MCP server.
Available components
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security0
- Malware scan not yet available for this package.Unverified
- Known CVEs could not be checked: this artifact ships no SBOM, so there is no dependency list to read. Publishing one would let us assess it.Unverified
- Install-script risk not yet assessed.Unverified
- Dependency health could not be checked: this artifact ships no SBOM, so there is no dependency list to read. Publishing one would let us assess it.Unverified
Provenance & Transparency6
- Repository check failed: no source repository is declared. See how to fix → View diagnostics → Fail
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- License check failed: no license is declared. See how to fix → Fail
- Actively maintained (last published 18 days ago).Pass
- Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability79
- AI-judged instruction clarity (excellent).Pass
- Tool/resource definitions use about 5641 tokens (~67/item across 84 items; 84 tools + 0 resources), lean.Pass
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management63
- Stability observed for 19 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage74
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 22% of tool parameters carry a description.Partial
Tool Safety75
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- 0 of 11 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "uxc_delete_custom_token" implies "delete" and declares no destructiveHint at all, which the MCP spec reads as destructive by default. See how to fix → Fail
- An AI judge read all 84 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Unverified: 1 category
A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.
How do I install the agents.u.cash MCP server?
agents.u.cash runs locally as a container image, launched with docker run --rm -i ghcr.io/udotcash/agents-u-cash-mcp:0.7.1. Ready-made configuration for Claude, Cursor, VS Code, Codex and 3 more is on this page, copied from each client's own documentation.
oci · ghcr.io/udotcash/agents-u-cash-mcp:0.7.1
claude mcp add udotcash-agents-u-cash -- docker run --rm -i ghcr.io/udotcash/agents-u-cash-mcp:0.7.1
{
"mcpServers": {
"udotcash-agents-u-cash": {
"command": "docker",
"args": [
"run",
"--rm",
"-i",
"ghcr.io/udotcash/agents-u-cash-mcp:0.7.1"
]
}
}
} {
"servers": {
"udotcash-agents-u-cash": {
"command": "docker",
"args": [
"run",
"--rm",
"-i",
"ghcr.io/udotcash/agents-u-cash-mcp:0.7.1"
]
}
}
} codex mcp add udotcash-agents-u-cash -- docker run --rm -i ghcr.io/udotcash/agents-u-cash-mcp:0.7.1
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"udotcash-agents-u-cash": {
"type": "local",
"command": [
"docker",
"run",
"--rm",
"-i",
"ghcr.io/udotcash/agents-u-cash-mcp:0.7.1"
],
"enabled": true
}
}
} mcp_servers:
udotcash-agents-u-cash:
command: "docker"
args: ["run", "--rm", "-i", "ghcr.io/udotcash/agents-u-cash-mcp:0.7.1"] {
"McpServers": {
"udotcash-agents-u-cash": {
"Transport": "stdio",
"Command": "docker",
"Arguments": [
"run",
"--rm",
"-i",
"ghcr.io/udotcash/agents-u-cash-mcp:0.7.1"
]
}
}
} {
"mcpServers": {
"udotcash-agents-u-cash": {
"command": "docker",
"args": [
"run",
"--rm",
"-i",
"ghcr.io/udotcash/agents-u-cash-mcp:0.7.1"
]
}
}
} Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 20 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 60 to 63. That category is still filling its 30-day observation window: 18 days of observed history at the previous scan, 19 at this one. The score rises as the window fills, whether or not the server changes.
- 18 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 53 to 57. That category is still filling its 30-day observation window: 16 days of observed history at the previous scan, 17 at this one. The score rises as the window fills, whether or not the server changes.
- 16 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 47 to 50. That category is still filling its 30-day observation window: 14 days of observed history at the previous scan, 15 at this one. The score rises as the window fills, whether or not the server changes.
- 14 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 40 to 43. That category is still filling its 30-day observation window: 12 days of observed history at the previous scan, 13 at this one. The score rises as the window fills, whether or not the server changes.
- 12 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 33 to 37. That category is still filling its 30-day observation window: 10 days of observed history at the previous scan, 11 at this one. The score rises as the window fills, whether or not the server changes.
- 10 Sept 26 +4
- Stability: unverified → 0.30 ▲ functional
- 4 Sept 26 0
- Security disclosure: unverified → fail ▼ functional
- 3 Sept 26 0
- Security disclosure: fail → unverified ▼ functional
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 20 Sept 2026 · Analysed oci/ghcr.io/udotcash/agents-u-cash-mcp:0.7.1
Provenance No attestation
The registry publishes no build provenance for this version, so there is nothing to verify.
| Result | No attestation |
|---|---|
| Ecosystem | oci |
| Reason | No attestation published |
Background: How many MCP packages publish verified provenance →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
uxc_list_payment_requests ~26
List your one-off payment requests (the only transactions with an expiry set).
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
uxc_list_resources ~33
List the agent resources (newest first), each with its price, accepted assets, and whether it has settled.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
uxc_lookup_products ~50
Batch catalog lookup by ids. Public (no key); the merchant is resolved from a custom-domain baseUrl or a cloud token.
| Name | Type | Req | Description |
|---|---|---|---|
| cloud | string | – | – |
| ids | array | yes | – |
No output schema declared.
No examples provided.
uxc_redeem_ucash ~56
Convert fee-credit points into fee credit (an intra-account value move; the merchant MFA step-up gate is skipped for this headless API key). amount is the points to redeem.
| Name | Type | Req | Description |
|---|---|---|---|
| amount | number | yes | – |
No output schema declared.
No examples provided.
uxc_refund_transaction ~92
Refund a completed (C) or underpaid (X) transaction. ONLY works if the agent connected a refund-capable btc-node-refunds / eth-node-refunds / coinbase-refunds; sends real crypto back to the original sender for the exact on-chain amount. Returns the refund status; fails safely (refunds-not-enabled) when no custody is connected.
| Name | Type | Req | Description |
|---|---|---|---|
| transaction_id | integer | yes | – |
No output schema declared.
No examples provided.
uxc_resend_webhook ~40
Force a webhook re-delivery for one transaction (must be completed + have a webhook URL configured).
| Name | Type | Req | Description |
|---|---|---|---|
| transaction_id | integer | yes | – |
No output schema declared.
No examples provided.
uxc_revoke_sandbox_key ~45
Revoke a sandbox key by id (it 401s immediately; the row is kept for audit, never deleted).
| Name | Type | Req | Description |
|---|---|---|---|
| key_id | integer | yes | – |
No output schema declared.
No examples provided.
uxc_rotate_sandbox_key ~44
Rotate a sandbox key by id: a fresh raw key is returned ONCE; the old one 401s immediately.
| Name | Type | Req | Description |
|---|---|---|---|
| key_id | integer | yes | – |
No output schema declared.
No examples provided.
uxc_rotate_store_credential ~50
Rotate one store credential (api_key, webhook_secret, or cloud_token). The new value is returned ONCE.
| Name | Type | Req | Description |
|---|---|---|---|
| store_id | integer | yes | – |
| which | string | yes | – |
No output schema declared.
No examples provided.
uxc_rotate_subagent_key ~48
Rotate a subagent api_key (owner-only). The old key stops authenticating; the new sa_ key is returned ONCE.
| Name | Type | Req | Description |
|---|---|---|---|
| subagent_id | integer | yes | – |
No output schema declared.
No examples provided.
uxc_rotate_webhook_secret ~28
Rotate the HMAC webhook signing secret; returns {secret} (shown once).
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
uxc_search_catalog ~70
Search a merchant catalog (text query + price filters + pagination). The merchant is resolved from a custom-domain baseUrl or a cloud token. No API key.
| Name | Type | Req | Description |
|---|---|---|---|
| cloud | string | – | – |
| filters | string | – | – |
| pagination | string | – | – |
| query | string | – | – |
No output schema declared.
No examples provided.
uxc_set_custom_fields ~56
Replace the whole custom-field list; optionally set the form title. custom_fields is a list of {type, name|label+options, required}.
| Name | Type | Req | Description |
|---|---|---|---|
| custom_fields | array | yes | – |
| title | string | – | – |
No output schema declared.
No examples provided.
uxc_set_custom_token ~336
Add a custom token (ERC-20/TRC-20/SPL/TON Jetton/Robinhood-20) the agent accepts. type is one of erc-20, bep-20, base-20, polygon-20, arb-20, op-20, avax-20, trc-20, spl, ton-jetton, robinhood-20. After adding, set a receive address for it with uxc_set_wallet (asset = the code) so buyers can pay it. Custom tokens are auto-detected on-chain like the built-in coins.
| Name | Type | Req | Description |
|---|---|---|---|
| code | string | yes | 2-12 lowercase letters/digits; must not collide with a built-in coin |
| confirmations | integer | – | optional confirmations to settle (blank = the default) |
| contract_address | string | yes | the token contract (ERC-20 0x..., TRC-20 T..., SPL mint) |
| decimals | integer | yes | – |
| img | string | – | optional logo URL (https) |
| name | string | yes | – |
| rate | string | – | optional fixed USD rate |
| rate_url | string | – | optional live-rate source: an https URL returning a price JSON, or the coingecko:<id> scheme (e.g. coingecko:nvidia-xstock) resolved server-side via CoinGecko |
| type | string | yes | erc-20 | bep-20 | base-20 | polygon-20 | arb-20 | op-20 | avax-20 | trc-20 | spl | ton-jetton | robinhood-20 |
No output schema declared.
No examples provided.
uxc_set_discount_codes ~41
Replace the whole discount-code list. Pass discount_codes as a list of {code, checkout_ids, amount}.
| Name | Type | Req | Description |
|---|---|---|---|
| discount_codes | array | yes | – |
No output schema declared.
No examples provided.
uxc_set_integrations ~62
Store (PUT) third-party integration credentials. Pass an object keyed by integration name, e.g. {discord:{token}, telegram:{bot_token, chat_id}}. Overwrites the named integrations.
| Name | Type | Req | Description |
|---|---|---|---|
| integrations | object | yes | keyed by integration name |
No output schema declared.
No examples provided.
uxc_set_resource_cap ~145
Set (or clear, when amount/window_hours are absent) a per-caller spend cap on a resource. A payer whose settled spend in the window reaches amount is refused new authorization. amount is in the resource currency; window_hours is the rolling window; by is "wallet" (default, enforced at verify/settle) or "ip" (enforced at the door before charge, across all rails).
| Name | Type | Req | Description |
|---|---|---|---|
| amount | number | – | omit/0 to clear the cap |
| by | string | – | wallet (default) | ip |
| res_id | string | yes | – |
| window_hours | integer | – | rolling window (e.g. 24) |
No output schema declared.
No examples provided.
uxc_set_settings ~91
Partially update the agent safe settings. Pass any subset of {confirmations:{default?, coins:{<code>:n}?}, webhook:{url?, rotate_secret?}, currency?, payment:{accept_underpayments?, redirect?}, notifications:{email?}, branding:{brand_name?, logo_url?, logo_url_dark?, color_1?, color_2?, color_3?}}. Only sent fields change.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
uxc_set_stripe ~136
Connect the agent own Stripe account so it can accept card payments (the redirect rail). Pass the Stripe secret key, a one-time product id, and the webhook signing secret. The key + product are verified against Stripe before saving. Non-custodial - card payments settle direct to the agent own Stripe account.
| Name | Type | Req | Description |
|---|---|---|---|
| product_id | string | yes | prod_... |
| publishable_key | string | – | optional pk_live_... or pk_test_... |
| secret_key | string | yes | sk_live_... or sk_test_... |
| webhook_secret | string | yes | whsec_... (from registering the webhook endpoint) |
No output schema declared.
No examples provided.
uxc_set_wallet ~92
Set the agent own receive address for one asset. This is where buyer funds land (non-custodial - the platform never holds them). asset is a code like btc, eth, sol, trx, usdt. address accepts comma-separated for the Address List (3+ addresses for a coin -> exact-amount unique-address payments).
| Name | Type | Req | Description |
|---|---|---|---|
| address | string | yes | – |
| asset | string | yes | – |
No output schema declared.
No examples provided.
uxc_set_wallet_active ~59
Enable/disable a coin without losing its address (the on/off toggle). active=true enables, false pauses the coin (it is not removed; re-enable with true).
| Name | Type | Req | Description |
|---|---|---|---|
| active | boolean | yes | – |
| asset | string | yes | – |
No output schema declared.
No examples provided.
uxc_set_webhook ~82
Set the settlement webhook URL. Auto-generates the HMAC signing secret on first set; the response returns {url, secret} (secret shown ONCE - store it to verify X-Webhook-Signature). Use uxc_rotate_webhook_secret to rotate, uxc_get_webhook to read it masked.
| Name | Type | Req | Description |
|---|---|---|---|
| webhook_url | string | yes | – |
No output schema declared.
No examples provided.
uxc_signup ~86
Register a new agent account (wallet-first: returns an api_key immediately, no email loop). Pass a real email + a strong password; optional primary_wallet. No auth needed - this mints the key you would then set as UXC_API_KEY.
| Name | Type | Req | Description |
|---|---|---|---|
| string | yes | – | |
| password | string | yes | – |
| primary_wallet | string | – | optional first receive wallet |
No output schema declared.
No examples provided.
uxc_simulate_payment ~81
SANDBOX ONLY: advance a test payment simulated confirmations (a resource created with test:true and test_confirmations > 1). No key needed - the public challengeId authorizes it, like uxc_verify_payment. Settles once the threshold is reached.
| Name | Type | Req | Description |
|---|---|---|---|
| challengeId | string | yes | – |
| confirmations | integer | – | default 1 |
No output schema declared.
No examples provided.
uxc_submit_hash ~64
Attach an on-chain transaction hash to one of the agent transactions (e.g. a manual/off-chain-recorded payment). Replay-guarded: rejects a hash already linked to a different transaction.
| Name | Type | Req | Description |
|---|---|---|---|
| hash | string | yes | – |
| transaction_id | integer | yes | – |
No output schema declared.
No examples provided.
uxc_test_store_webhook ~32
Send a test webhook to a store and report the response.
| Name | Type | Req | Description |
|---|---|---|---|
| store_id | integer | yes | – |
No output schema declared.
No examples provided.
uxc_top_up ~48
Create a credit top-up checkout ($1 min) that adds platform fee-credit and activates the account on confirmation. Returns the hosted checkout URL to pay at.
| Name | Type | Req | Description |
|---|---|---|---|
| amount | number | yes | – |
No output schema declared.
No examples provided.
uxc_update_lander ~90
Update a lander (tpl/theme/hero_*/cta_label/domain/title/price/currency/version), OR an offer status (offer_id + status: new/viewed/accepted/rejected/spam).
| Name | Type | Req | Description |
|---|---|---|---|
| lander_id | integer | – | – |
| offer_id | integer | – | – |
| status | string | – | – |
| theme | string | – | – |
| tpl | string | – | – |
No output schema declared.
No examples provided.
uxc_update_shop_product ~52
Update a shop product (partial fields) by checkout_id.
| Name | Type | Req | Description |
|---|---|---|---|
| checkout_id | integer | yes | – |
| currency | string | – | – |
| price | number | – | – |
| title | string | – | – |
No output schema declared.
No examples provided.
uxc_update_store ~44
Partially update a store label and/or webhook URL.
| Name | Type | Req | Description |
|---|---|---|---|
| label | string | – | – |
| store_id | integer | yes | – |
| webhook_url | string | – | – |
No output schema declared.
No examples provided.
uxc_update_subagent ~96
Update a subagent role/permissions/store_scope/status/display_name (owner-only). status is active or suspended (suspending stops the key authenticating).
| Name | Type | Req | Description |
|---|---|---|---|
| display_name | string | – | – |
| permissions | array | – | – |
| role | string | – | – |
| role_name | string | – | – |
| status | string | – | – |
| store_scope | array | – | – |
| subagent_id | integer | yes | – |
No output schema declared.
No examples provided.
uxc_verify_payment ~108
BUYER-SIDE. After paying a resource (from uxc_view_door) on-chain from your own wallet, submit the transaction hash to settle it. Pass the challengeId from the accepts[] entry you paid and the on-chain transaction hash. Returns settled (confirmed) or pending (awaiting confirmations). No seller key needed - the challengeId identifies the resource, and settlement is gated by on-chain confirmation.
| Name | Type | Req | Description |
|---|---|---|---|
| challengeId | string | yes | – |
| hash | string | yes | – |
No output schema declared.
No examples provided.
uxc_verify_webhook_signature ~172
Verify an incoming settlement webhook HMAC signature (constant time). Pure local check - no network. Mirrors the server scheme: HMAC-SHA256 of "<t>.<raw_body>" keyed with the webhook secret, from the X-Webhook-Signature header "t=<unix>,v1=<hex>". Pass the EXACT raw body (do not re-encode). Returns {valid:bool, age_seconds?:int}. Deduplicate by event_id separately.
| Name | Type | Req | Description |
|---|---|---|---|
| raw_body | string | yes | the raw request body bytes you received |
| secret | string | yes | the webhook signing secret |
| signature_header | string | yes | the X-Webhook-Signature header value (t=...,v1=...) |
| tolerance | integer | – | replay window in seconds; 0 skips the freshness check |
No output schema declared.
No examples provided.
uxc_view_door ~95
Fetch the public 402 payment door for a resource (what a buyer sees at https://agents.u.cash/r/{res_id}): the price + the multi-coin accepts[] (each asset, the agent receive address, and the exact amount to pay). No auth needed. Use this as a BUYER to see what to pay, then uxc_verify_payment after paying.
| Name | Type | Req | Description |
|---|---|---|---|
| res_id | string | yes | – |
No output schema declared.
No examples provided.
What is the agents.u.cash MCP server?
agents.u.cash is an MCP server listed in the public MCP registry as io.github.UdotCASH/agents-u-cash. Non-custodial HTTP-402 crypto payments for AI agents. 86-tool MCP server. This page covers its container image (ghcr.io/udotcash/agents-u-cash-mcp:0.7.1).
Is the agents.u.cash MCP server safe to use?
agents.u.cash scores 39 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the agents.u.cash MCP server expose?
agents.u.cash exposes 84 tools: uxc_get_agent, uxc_set_webhook, uxc_get_webhook, uxc_rotate_webhook_secret, uxc_verify_webhook_signature, and 79 more. Their descriptions and schemas cost roughly 5,641 tokens of context every time the server is loaded.
Is the agents.u.cash MCP server still maintained?
agents.u.cash is still listed as active in the MCP registry. We last reached this channel on 20 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.