xportalx
REMOTE · FFLPDLJIURUQDNEWVWKK.SUPABASE.CO
AI agent gateway with web fetching, data extraction, crypto pricing, and x402 payments
Available components
Last scanned (22 hours ago)
Scores higher than 66% of remote servers
Reachable. Last reached 4 Nov 2026.
Category Crypto and Web3
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security63
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- Authorisation not fully verified: no authorisation is required to call this server, and 29 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe. See how to fix → View diagnostics → Unverified
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- The HSTS (Strict-Transport-Security) header is present. View diagnostics → Pass
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability75
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 3254 tokens (~112/item across 29 items; 29 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
- No destabilizing schema changes in the last 30 days.Pass
Tool Coverage99
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 98% of tool parameters carry a description.Partial
Tool Safety75
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- 0 of 4 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "swap" implies "execute" and declares no destructiveHint at all, which the MCP spec reads as destructive by default. See how to fix → Fail
- An AI judge read all 29 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities20
- Spec-recency check failed: implements MCP spec 2024-11-05; the latest is 2026-07-28. See how to fix → Fail
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 28 Sept 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 25 Sept 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 26 Aug 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 25 Aug 26 0
- Stability: 0.97 → pass security
- 11 Aug 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 31 Jul 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 30 Jul 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 27 Jul 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 4 Nov 2026 · Probed https://fflpdljiuruqdnewvwkk.supabase.co/functions/v1/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=supabase.co | CN=WE1,O=Google Trust Services,C=US | 24 Oct 2026 | 22 Jan 2027 | ECDSA 256 | ECDSA-SHA256 | d2b50611cd88e9c50e4e2231f4d3f059 |
| SANs: supabase.co, *.supabase.co | ||||||
| CN=WE1,O=Google Trust Services,C=US (CA) | CN=GTS Root R4,O=Google Trust Services LLC,C=US | 13 Dec 2023 | 20 Feb 2029 | ECDSA 256 | ECDSA-SHA384 | 7ff31977972c224a76155d13b6d685e3 |
| CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) | CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE | 15 Nov 2023 | 28 Jan 2028 | ECDSA 384 | SHA256-RSA | 7fe530bf331343bedd821610493d8a1b |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of fflpdljiuruqdnewvwkk.supabase.co. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| co. | present | 7786 | 8 | Verified |
| supabase.co. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
| Header | Value |
|---|---|
| strict-transport-security | max-age=31536000; includeSubDomains; preload |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://fflpdljiuruqdnewvwkk.supabase.co/functions/v1/mcp | Verified | 200 | |
| http (plaintext) | http://fflpdljiuruqdnewvwkk.supabase.co/functions/v1/mcp | HTTPS enforced | 301 | https://fflpdljiuruqdnewvwkk.supabase.co/functions/v1/mcp |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
coinbase_facilitator ~90
x402 payment facilitation - get payment info, verify transactions, check rates. FREE
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | Facilitator action |
| expectedAmount | string | – | Expected amount (for verify) |
| expectedRecipient | string | – | Expected recipient (for verify) |
| token | string | – | Token address (for verify) |
| txHash | string | – | Transaction hash (for verify) |
No output schema declared.
No examples provided.
coinbase_price ~57
Get cryptocurrency prices and exchange rates from Coinbase. FREE - no payment required.
| Name | Type | Req | Description |
|---|---|---|---|
| currency | string | – | Fiat currency (e.g., 'USD') |
| symbol | string | yes | Crypto symbol (e.g., 'BTC', 'ETH') |
No output schema declared.
No examples provided.
crawl ~76
Crawl a website starting from a URL, following links up to specified depth. Cost: 0.01 USDC
| Name | Type | Req | Description |
|---|---|---|---|
| maxDepth | number | – | Maximum link depth (default: 2) |
| maxPages | number | – | Maximum pages to crawl (default: 10) |
| url | string | yes | The starting URL to crawl |
No output schema declared.
No examples provided.
create_wallet ~130
Create a custodial wallet for an AI agent using Privy. Cost: 0.01 USDC. The owner wallet is automatically detected from your x402 payment - no need to provide it explicitly. The wallet can be used for automated transactions including swaps.
| Name | Type | Req | Description |
|---|---|---|---|
| label | string | – | Optional friendly name for this wallet (e.g., 'Trading Bot', 'Payment Agent') |
| owner_wallet | string | yes | Your signing wallet address (0x...) that will own this custodial wallet. Used as the lookup key for future operations. TIP: many clients can also pass just the address string as arguments. |
No output schema declared.
No examples provided.
dexscreener_token ~60
Get real-time token price and market data from DexScreener. FREE - no payment required.
| Name | Type | Req | Description |
|---|---|---|---|
| chain | string | – | Blockchain (e.g., 'base', 'ethereum') |
| tokenAddress | string | yes | The token contract address |
No output schema declared.
No examples provided.
erc8004_register ~136
Register your AI agent on-chain with ERC-8004 Trustless Agent Identity. Cost: 0.01 USDC. You receive an NFT representing your agent identity.
| Name | Type | Req | Description |
|---|---|---|---|
| agentDescription | string | yes | Description of what your agent does |
| agentEndpoints | array | – | Optional array of endpoints [{name, endpoint, version}] |
| agentName | string | yes | Name of your agent (e.g., 'MyAwesomeAgent') |
| paymentProof | string | – | Transaction hash of payment (required after initial 402 response) |
| recipientWallet | string | yes | Your wallet address (0x...) to receive the Agent NFT |
No output schema declared.
No examples provided.
extract ~76
Extract structured data from a web page using a JSON schema. AI-powered extraction. Cost: 0.01 USDC
| Name | Type | Req | Description |
|---|---|---|---|
| intent | string | – | Natural language description of what to extract |
| schema | string | yes | JSON schema string defining the data structure to extract |
| url | string | yes | The web page URL to extract from |
No output schema declared.
No examples provided.
failure_reason ~65
Understand why a job failed. FREE - lookup job failures or get failure code reference.
| Name | Type | Req | Description |
|---|---|---|---|
| failure_code | string | – | Any failure code to explain (e.g., 'RATE_LIMIT_429') |
| jobId | string | – | xportalx job ID to look up failure details |
No output schema declared.
No examples provided.
fetch_api ~79
Fetch structured JSON/XML data from any API endpoint. Best for REST APIs and data feeds. Cost: 0.01 USDC
| Name | Type | Req | Description |
|---|---|---|---|
| body | object | – | Optional request body for POST/PUT |
| headers | object | – | Optional HTTP headers |
| method | string | – | – |
| url | string | yes | The API endpoint URL to fetch |
No output schema declared.
No examples provided.
fetch_page ~52
Fetch raw HTML content from any web page. Best for static HTML scraping. Cost: 0.01 USDC
| Name | Type | Req | Description |
|---|---|---|---|
| method | string | – | – |
| url | string | yes | The web page URL to fetch |
No output schema declared.
No examples provided.
fetch_pdf ~50
Fetch and extract text content from PDF documents. Returns structured text with page numbers. Cost: 0.01 USDC
| Name | Type | Req | Description |
|---|---|---|---|
| url | string | yes | The URL of the PDF document to fetch and parse |
No output schema declared.
No examples provided.
fund_wallet ~125
Fund your custodial wallet with USDC. DYNAMIC PRICING: You pay (amount + 0.01 USDC fee). The owner wallet is auto-detected from your x402 payment. Example: To deposit 5 USDC, you pay 5.01 USDC and 5 USDC is transferred to your custodial wallet.
| Name | Type | Req | Description |
|---|---|---|---|
| amount | string | yes | Amount of USDC to deposit into your custodial wallet (e.g., '5' for 5 USDC). You will pay this amount plus a 0.01 USDC platform fee. |
No output schema declared.
No examples provided.
fund_wallet_eth ~138
Fund your custodial wallet with ETH for gas. DYNAMIC PRICING: You pay the USDC equivalent of (ETH amount + 0.01 USDC fee). The owner wallet is auto-detected from your x402 payment. Example: To deposit 0.001 ETH, you pay ~$3.50 USDC (ETH value) + 0.01 USDC fee.
| Name | Type | Req | Description |
|---|---|---|---|
| amount | string | yes | Amount of ETH to deposit into your custodial wallet (e.g., '0.001' for 0.001 ETH). You will pay the USDC equivalent plus a 0.01 USDC platform fee. |
No output schema declared.
No examples provided.
get_wallet_balance ~59
Check the balance of your custodial wallet. FREE - no payment required. Returns ETH and USDC balances on Base network.
| Name | Type | Req | Description |
|---|---|---|---|
| owner_wallet | string | yes | Your signing wallet address (0x...) to look up the linked custodial wallet balance. |
No output schema declared.
No examples provided.
markdown_convert ~45
Convert a web page to clean Markdown format. Great for LLM consumption. Cost: 0.01 USDC
| Name | Type | Req | Description |
|---|---|---|---|
| url | string | yes | The web page URL to convert |
No output schema declared.
No examples provided.
mcp_pricing ~27
Get pricing information for all MCP tools. FREE - returns cost breakdown for each tool.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
nansen_smart_money_holdings ~178
Screen tokens with Smart Money activity using Nansen Token Screener. Supports natural language like 'what are whales buying on base?' or 'trending tokens on solana'. Cost: 0.01 USDC
| Name | Type | Req | Description |
|---|---|---|---|
| chain | string | – | Single chain (alternative to chains array) |
| chains | array | – | Chains to query (e.g., ['ethereum', 'base', 'solana', 'arbitrum']) |
| input | string | – | Natural language query (e.g., 'what are whales buying on base?', 'trending tokens this week') |
| limit | number | – | Number of results (default: 20, max: 100) |
| query | string | – | Natural language query (alternative) |
| sortBy | string | – | Sort field |
| sortDir | string | – | Sort direction |
No output schema declared.
No examples provided.
nansen_smart_money_netflows ~202
Track net capital flows from Smart Money wallets. Supports natural language like 'are whales accumulating ETH?' or 'smart money flows for PEPE last 7 days'. Cost: 0.01 USDC
| Name | Type | Req | Description |
|---|---|---|---|
| chain | string | – | Single chain (alternative to chains array) |
| chains | array | – | Chains to query (e.g., ['ethereum', 'base', 'solana']) |
| input | string | – | Natural language query (e.g., 'are smart money accumulating ETH?', 'whale flows last week') |
| limit | number | – | Number of results (default: 20) |
| query | string | – | Natural language query (alternative) |
| timeframe | string | – | Timeframe for netflow data |
| tokenAddress | string | – | Filter by specific token address OR symbol (e.g., 'PEPE', 'VIRTUAL', '0x...') |
| token_address | string | – | Filter by token address (alternative) |
No output schema declared.
No examples provided.
nansen_token_god_mode ~177
Full token analytics with Nansen TGM. Supports natural language like 'analyze VIRTUAL token' or 'who holds the most PEPE?'. Auto-resolves token symbols to addresses. Cost: 0.01 USDC
| Name | Type | Req | Description |
|---|---|---|---|
| chain | string | – | Blockchain (e.g., 'ethereum', 'base', 'solana', 'arbitrum') |
| input | string | – | Natural language query (e.g., 'analyze VIRTUAL token', 'show me PEPE holders') |
| query | string | – | Natural language query (alternative) |
| timeframe | string | – | Timeframe for flow data |
| tokenAddress | string | – | Token contract address OR symbol (e.g., 'VIRTUAL', 'PEPE', '0x...') |
| token_address | string | – | Token contract address (alternative) |
No output schema declared.
No examples provided.
nansen_wallet_profiler ~165
Comprehensive wallet analysis. Supports natural language like 'profile vitalik.eth' or 'what labels does 0x... have?'. Returns balances, Nansen labels, and transactions. Cost: 0.01 USDC
| Name | Type | Req | Description |
|---|---|---|---|
| address | string | – | Wallet address (0x...) or ENS name to analyze |
| chain | string | – | Single chain (alternative) |
| chains | array | – | Chains to query for balances/transactions |
| includeTransactions | boolean | – | Include recent transactions (default: true) |
| input | string | – | Natural language query (e.g., 'profile this wallet 0x...', 'analyze vitalik.eth') |
| query | string | – | Natural language query (alternative) |
| wallet | string | – | Wallet address (alternative) |
No output schema declared.
No examples provided.
send_tokens ~128
Send USDC from your custodial wallet to ANY wallet address. Cost: 0.01 USDC. The sender (your custodial wallet) is auto-detected from your x402 payment. Use this to pay other agents, transfer to exchanges, or send to any address.
| Name | Type | Req | Description |
|---|---|---|---|
| amount | string | yes | Amount of USDC to send (e.g., '5' for 5 USDC). Must have sufficient balance in your custodial wallet. |
| to_address | string | yes | Destination wallet address (0x...) to send USDC to. Can be any valid EVM address. |
No output schema declared.
No examples provided.
solve_captcha ~121
Solve captchas on protected pages and extract content. Uses 2Captcha to bypass reCAPTCHA/hCaptcha, then Claude AI selects the best tool to retrieve content. Cost: 0.01 USDC
| Name | Type | Req | Description |
|---|---|---|---|
| captchaType | string | – | Type of captcha to solve |
| intent | string | – | What you want to extract from the page after solving captcha |
| siteKey | string | – | Site key for reCAPTCHA/hCaptcha (optional - auto-detected if not provided) |
| url | string | yes | The captcha-protected URL to access |
No output schema declared.
No examples provided.
swap ~505
Execute a token swap on Base via 0x DEX Aggregator. AI-ENHANCED: Accepts natural language like 'swap 10 USDC for VIRTUAL'. THREE MODES: (1) PRIVY MODE (RECOMMENDED): Provide owner_wallet - uses your secure Privy custodial wallet (create one first with create_wallet tool). (2) PRIVATE KEY MODE: Provide privateKey - server signs with your key (less secure). (3) BRIDGE MODE: Provide takerAddress only - returns a URL where you sign with browser wallet. Cost: 0.10 USDC
| Name | Type | Req | Description |
|---|---|---|---|
| buyToken | string | – | Token symbol (USDC, WETH, VIRTUAL, DEGEN, cbBTC, DAI, AERO, BRETT) OR token address (0x...) |
| owner_wallet | string | – | RECOMMENDED: Your wallet address (0x...) that owns a Privy custodial wallet. The swap will be executed securely through your Privy wallet. Create one first using the create_wallet tool. |
| privateKey | string | – | LEGACY: Private key (0x... hex) to sign and broadcast transactions server-side. Consider using owner_wallet with Privy instead for better security. |
| request | string | – | Natural language swap request (e.g., 'swap 10 USDC for VIRTUAL', 'buy 100 DEGEN with USDC'). AI will extract the parameters automatically. |
| sellAmount | string | – | Amount to sell. Use human-readable (e.g., '1.5' for 1.5 tokens) or atomic units (e.g., '1000000' for 1 USDC). Human-readable is auto-detected. |
| sellToken | string | – | Token symbol (USDC, WETH, VIRTUAL, DEGEN, cbBTC, DAI, AERO, BRETT) OR token address (0x...) |
| slippageBps | string | – | Slippage in basis points (e.g., '50' = 0.50%). Takes precedence over slippagePercentage. |
| slippagePercentage | string | – | Slippage tolerance in percent (e.g., '0.5' for 0.5%). Default: 0.5 |
| takerAddress | string | – | User's wallet address (0x...). When provided WITHOUT owner_wallet or privateKey, returns a secure web bridge URL where user can sign transactions with their browser wallet. |
No output schema declared.
No examples provided.
verify_agent ~65
Verify a wallet signature (EIP-191) to authenticate an agent. FREE - no payment required.
| Name | Type | Req | Description |
|---|---|---|---|
| message | string | yes | The message that was signed |
| signature | string | yes | The signature to verify |
| wallet_address | string | yes | The wallet address that signed |
No output schema declared.
No examples provided.
withdraw_wallet ~77
Withdraw USDC from your custodial wallet to your owner wallet. Cost: 0.01 USDC. The owner wallet is auto-detected from your x402 payment.
| Name | Type | Req | Description |
|---|---|---|---|
| amount | string | yes | Amount of USDC to withdraw from custodial wallet (e.g., '5' for 5 USDC). Must have sufficient balance. |
No output schema declared.
No examples provided.
x402_proxy ~115
Access x402-protected APIs with automatic payment. Dynamic pricing: 0.01 USDC fee + target cost. Supports USDC on Base.
| Name | Type | Req | Description |
|---|---|---|---|
| paymentProof | string | – | Transaction hash of USDC payment (required after initial 402 response) |
| targetBody | object | – | Request body for POST/PUT requests |
| targetHeaders | object | – | Additional headers to send to target |
| targetMethod | string | – | HTTP method |
| targetUrl | string | yes | The x402-protected URL to access |
No output schema declared.
No examples provided.
x402_proxy_price ~50
Get dynamic pricing for x402 proxy requests. FREE - returns total cost (proxy fee + target cost).
| Name | Type | Req | Description |
|---|---|---|---|
| targetUrl | string | yes | The x402-protected target URL to probe for pricing |
No output schema declared.
No examples provided.
x402_send ~123
Send USDC directly to ANY wallet address via x402 payment. Just provide to_address and amount - the flow auto-completes: 1) Pay 0.01 USDC platform fee 2) Pay the amount directly to destination. Tokens go from you to recipient. Perfect for paying agents, tipping, or sending to any address.
| Name | Type | Req | Description |
|---|---|---|---|
| amount | string | yes | Amount of USDC to send (e.g., '5' for 5 USDC). |
| to_address | string | yes | Destination wallet address (0x...) to receive the USDC. |
No output schema declared.
No examples provided.
zora_wallet ~83
Get comprehensive Zora NFT wallet data: NFTs minted, NFTs owned, creator profile, total mints/collections, and estimated earnings. FREE - no payment required.
| Name | Type | Req | Description |
|---|---|---|---|
| address | string | yes | Wallet address (EOA or contract) to look up |
| chain | string | – | Chain to query (e.g., 'zora', 'base', 'ethereum') |
No output schema declared.
No examples provided.
How do I install the xportalx MCP server?
xportalx is a hosted endpoint at https://fflpdljiuruqdnewvwkk.supabase.co/functions/v1/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · fflpdljiuruqdnewvwkk.supabase.co
claude mcp add --transport http virgen101-xportalx 'https://fflpdljiuruqdnewvwkk.supabase.co/functions/v1/mcp'
What is the xportalx MCP server?
xportalx is an MCP server listed in the public MCP registry as io.github.virgen101/xportalx. AI agent gateway with web fetching, data extraction, crypto pricing, and x402 payments. This page covers its hosted endpoint (https://fflpdljiuruqdnewvwkk.supabase.co/functions/v1/mcp).
Is the xportalx MCP server safe to use?
xportalx scores 76 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the xportalx MCP server expose?
xportalx exposes 29 tools: fetch_api, fetch_page, fetch_pdf, extract, crawl, and 24 more. Their descriptions and schemas cost roughly 3,254 tokens of context every time the server is loaded.
Does the xportalx MCP server require authentication?
No. We connected to xportalx without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the xportalx MCP server still maintained?
xportalx is still listed as active in the MCP registry. We last reached this channel on 4 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.