# io.github.veenrek/mapleai-mcp (npm · mapleai-mcp)

Pay-per-request GPT chat, embeddings, agents and prepaid keys with local x402 USDC signing

- Trust score: 62/100 (medium)
- Change this week: +26
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-10-22

## Components

- npm · `mapleai-mcp`: 62/100 (this document), [markdown](https://verifymcp.io/servers/veenrek-mapleai-mcp/mapleai-mcp.md), [page](https://verifymcp.io/servers/veenrek-mapleai-mcp/mapleai-mcp)

## Channel facts

- Registry: `npm`
- Package: `mapleai-mcp`
- Version: `0.3.1`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-10-22.

- **Supply Chain Security**: 99/100
  - No malware found by supply-chain analysis.
  - No known CVEs affecting this package version or its production dependencies.
  - No install/post-install scripts declared.
  - 31 of 232 dependencies flagged as unhealthy.
- **Provenance & Transparency**: 32/100
  - Source repository is publicly reachable at the declared URL.
  - Provenance check failed: no build-provenance attestation is published.
  - License check failed: the license (UNLICENSED) isn't a recognized OSI-approved license.
  - Actively maintained (last published 16 days ago).
  - Disclosure check failed: no security disclosure policy was found in the source repository.
- **Schema Quality & AI Usability**: 54/100
  - AI-judged instruction clarity (fair).
  - Context-footprint check failed: tool/resource definitions use about 1059 tokens (~132/item across 8 items; 8 tools + 0 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 17/100
  - Stability observed for 5 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 67/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 0% of tool parameters carry a description.
- **Tool Safety**: 75/100
  - No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.
  - 0 of 1 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "agent_execute" implies "execute" and declares no destructiveHint at all, which the MCP spec reads as destructive by default.
  - An AI judge read all 8 captured unit(s) of tool text and found none that tries to manipulate the model reading it.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### How do I install the io.github.veenrek/mapleai-mcp server?

io.github.veenrek/mapleai-mcp runs locally as an npm package, launched with npx -y mapleai-mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

### Claude

```bash
claude mcp add veenrek-mapleai-mcp -- npx -y mapleai-mcp
```

### Cursor

```json
{
  "mcpServers": {
    "veenrek-mapleai-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "mapleai-mcp"
      ]
    }
  }
}
```

### VS Code

```json
{
  "servers": {
    "veenrek-mapleai-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "mapleai-mcp"
      ]
    }
  }
}
```

### Codex

```bash
codex mcp add veenrek-mapleai-mcp -- npx -y mapleai-mcp
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "veenrek-mapleai-mcp": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "mapleai-mcp"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add veenrek-mapleai-mcp --command npx --arg -y --arg mapleai-mcp
```

### Hermes

```yaml
mcp_servers:
  veenrek-mapleai-mcp:
    command: "npx"
    args: ["-y", "mapleai-mcp"]
```

### Netclaw

```json
{
  "McpServers": {
    "veenrek-mapleai-mcp": {
      "Transport": "stdio",
      "Command": "npx",
      "Arguments": [
        "-y",
        "mapleai-mcp"
      ]
    }
  }
}
```

### Vellum

```bash
assistant mcp add veenrek-mapleai-mcp -t stdio -c npx -a -y mapleai-mcp
```

### Other

```json
{
  "mcpServers": {
    "veenrek-mapleai-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "mapleai-mcp"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-10-21 (score 62, +1)

No change was recorded against any check on this day. Stability & Change Management went from 10 to 13. That category is still filling its 30-day observation window: 3 days of observed history at the previous scan, 4 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-10-19 (score 61, +1)

No change was recorded against any check on this day. Stability & Change Management went from 3 to 7. That category is still filling its 30-day observation window: 1 days of observed history at the previous scan, 2 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-10-17 (score 60, +24)

- [security improvement] Injection markers: unverified → pass
- [security] First check of Judged manipulation: pass
- [functional improvement] Tool coverage: unverified → 100
- [functional improvement] Stability: unverified → 0.00
- [functional improvement] MCP protocol: unverified → pass
- [functional] First check of Tool coverage: 0
- [functional] First check of Schema quality: fail
- [functional] First check of Schema quality: fair
- [functional] First check of Schema quality: fail
- [functional] First check of Destructive annotations: 0

### 2026-10-13 (score 36, 0)

- [functional regression] Security disclosure: unverified → fail

### 2026-10-12 (score 36, +19)

- [security improvement] Malware scan: unverified → pass
- [security improvement] Known CVEs: partial → pass
- [security] Stability: Stability not yet verified: this package could not be installed in a clean environment, so we have no schema to compare.
- [security] Tool safety: Tool safety not yet verified: this package could not be installed in a clean environment, so we have no tool text to scan.
- [functional regression] Security disclosure: fail → unverified
- [functional] Schema quality: Schema quality not yet verified: this package could not be installed in a clean environment, so we have no schema to assess.
- [functional] Capabilities: Protocol version not yet verified: this package could not be installed in a clean environment, so we never saw its MCP handshake.
- [functional] Tool coverage: Tool coverage not yet verified: this package could not be installed in a clean environment, so we have no tool definitions to assess.
- [functional] Dependency health: partial → 0.94

### 2026-10-06 (score 17)

First indexed and scored.

## MCP tools (8)

### `list_models` (~29 tokens)

List MapleAI models and prices on a supported network. Free call.

Input parameters:

- `network` (string)

### `embed_text` (~106 tokens)

Free 2048-dim embeddings via NVIDIA nemotron-3-embed-1b. No payment. Send one string or up to 128 strings; use input_type "query" for questions and "passage" for documents. encoding_format "float" (default) returns number arrays, "base64" returns compact base64 vectors.

Input parameters:

- `encoding_format` (string)
- `input` (required)
- `input_type` (string)
- `network` (string)

### `chat_completion` (~67 tokens)

Call a MapleAI model with local x402 USDC payment. Maximum spend per call is MCP_MAX_PAYMENT_USDC (default 0.10).

Input parameters:

- `max_tokens` (integer)
- `messages` (array, required)
- `model` (string, required)
- `network` (string)

### `jev_decide` (~77 tokens)

Paid Jev structured decision (jev-latest): evaluate named questions against a state. About $0.001 per short call via x402 USDC. Each question needs type (noul, choice or score) and instructions.

Input parameters:

- `network` (string)
- `questions` (object, required)
- `state` (string, required)

### `agent_execute` (~248 tokens)

Paid autonomous agent execution: give a natural-language task, a multi-step agent reasons and calls tools (calculator, fetch_url, web_search via the keyless Exa index, data_analysis; on deployments with a sandbox executor also code_exec — python/javascript/typescript, $0.002 per call, max 3 per task). Engines: agents/oss-20b (cheap — $0.002 base + $0.0005/step) and agents/gpt-6-sol (premium — $0.004 base + $0.004/step). Charged at the max_steps ceiling plus allowed-tool fees; the worst case (20 steps + 3 code_exec, ~$0.09) still fits the default MCP_MAX_PAYMENT_USDC=0.10. With stream=true the reply contains the live SSE step transcript; the agent.execution object always includes the full step trace, sources, usage and charged_ceiling_usd.

Input parameters:

- `context` (string)
- `max_steps` (integer)
- `model` (string)
- `network` (string)
- `stream` (boolean)
- `task` (string, required)
- `tools` (array)

### `buy_prepaid_tap` (~287 tokens)

Paid one-shot: buys a prepaid MapleAI API key with local x402 USDC. With no arguments it buys the smallest pack of the cheapest model currently on sale (about $0.008). Optional model (one of openai/gpt-5.6-sol, openai/gpt-5.6-terra, openai/gpt-6-luna, openai/gpt-6-sol, when on sale) and tokens (100000..1000000 in steps of 100000) pick a bigger pack: price = tokens x model input rate per million + settlement fee, so 1M tokens of openai/gpt-6-sol is about $1.40 and the largest pack (1M of openai/gpt-5.6-sol) about $2.80. Purchases are capped by MCP_MAX_PREPAID_USDC (default 3.00, covers the largest pack) — not by MCP_MAX_PAYMENT_USDC. The key is an OpenAI-compatible Bearer credential at https://mapleai.shop/v1 — spend it there or with the prepaid_chat tool right here; the network gateways also accept it same-origin under /prepaid/v1/*. Store the returned code — it is the only credential.

Input parameters:

- `model` (string)
- `network` (string)
- `tokens` (integer)

### `prepaid_status` (~92 tokens)

Free: check a prepaid MapleAI key (valid flag, reason, tokens total/used/reserved/remaining). Send the oms_buy_ key bought via buy_prepaid_tap or the website. Keys are global — the check runs same-origin on the selected network (and identically at https://mapleai.shop/v1/prepaid/status).

Input parameters:

- `code` (string, required)
- `network` (string)

### `prepaid_chat` (~153 tokens)

Chat completions paid from a prepaid key instead of x402: no wallet, no per-call payment — token spend is bounded by the key budget. Send the oms_buy_ code from buy_prepaid_tap (or the website) plus model and messages. The key is bound to one model; a wrong model is answered 403 with the key's allowedModels. Runs same-origin on the selected network at /prepaid/v1/chat/completions (and identically at https://mapleai.shop/v1/chat/completions).

Input parameters:

- `code` (string, required)
- `max_tokens` (integer)
- `messages` (array, required)
- `model` (string, required)
- `network` (string)

## Diagnostics

Captured diagnostic sections: Provenance, Dependencies. The full working is on the page: https://verifymcp.io/servers/veenrek-mapleai-mcp/mapleai-mcp#diagnostics

## Score history

- 2026-10-22: 62
- 2026-10-21: 62
- 2026-10-20: 61
- 2026-10-19: 61
- 2026-10-18: 60
- 2026-10-17: 60
- 2026-10-16: 36
- 2026-10-15: 36
- 2026-10-14: 36
- 2026-10-13: 36
- 2026-10-12: 36
- 2026-10-06: 17

## Common questions

### What is the io.github.veenrek/mapleai-mcp server?

io.github.veenrek/mapleai-mcp is listed in the public MCP registry as io.github.veenrek/mapleai-mcp. Pay-per-request GPT chat, embeddings, agents and prepaid keys with local x402 USDC signing. This page covers its npm package (mapleai-mcp).

### Is the io.github.veenrek/mapleai-mcp server safe to use?

io.github.veenrek/mapleai-mcp scores 62 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 22 October 2026. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

### What tools does the io.github.veenrek/mapleai-mcp server expose?

io.github.veenrek/mapleai-mcp exposes 8 tools: list_models, embed_text, chat_completion, jev_decide, agent_execute, and 3 more. Their descriptions and schemas cost roughly 1,059 tokens of context every time the server is loaded.

### Is the io.github.veenrek/mapleai-mcp server still maintained?

io.github.veenrek/mapleai-mcp is still listed as active in the MCP registry. We last reached this channel on 22 October 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

### What licence is the io.github.veenrek/mapleai-mcp server under?

io.github.veenrek/mapleai-mcp declares the UNLICENSED licence, which is not on the OSI-approved list. Read the terms before using it at work, and note this covers the source only, not the cost of any service it calls.

## Links

- npm package: https://www.npmjs.com/package/mapleai-mcp
- Socket report: https://socket.dev/npm/package/mapleai-mcp
- Repository: https://github.com/veenrek/mapleai-gateway
- Changelog RSS feed: https://verifymcp.io/servers/veenrek-mapleai-mcp/mapleai-mcp.xml
- Changelog JSON feed: https://verifymcp.io/servers/veenrek-mapleai-mcp/mapleai-mcp.json
- HTML version of this page: https://verifymcp.io/servers/veenrek-mapleai-mcp/mapleai-mcp