io.github.xenarch-ai/xenarch-mcp
NPM · @XENARCH/AGENT-MCP
Xenarch — x402 MCP server for AI agent payments. Non-custodial, USDC on Base L2.
Available components
Last scanned (20 hours ago)
Scores higher than 69% of npm servers
Category Crypto and Web3
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security80
- No malware found by supply-chain analysis.Pass
- CVE check failed: a known high-severity CVE affects zod 3.25.76, a direct dependency. A fixed version is available. View diagnostics → Fail
- No install/post-install scripts declared.Pass
- Dependency health was assessed across the 400 of 526 dependencies we could resolve, so this covers what we could see, not the whole tree. View diagnostics → Partial
Provenance & Transparency45
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 119 days ago).Pass
- Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability87
- 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
- AI-judged instruction clarity (excellent).Pass
- Tool/resource definitions use about 7663 tokens (~73/item across 104 items; 103 tools + 1 resources), lean.Pass
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
- No destabilizing schema changes in the last 30 days.Pass
Tool Coverage99
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 97% of tool parameters carry a description.Partial
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- All 14 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.Pass
- An AI judge read all 104 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 31 Oct 26 +1
- Stability: 0.97 → pass security
- 30 Oct 26 −1
- CVE-2026-118664 affects this package: high ▼ security
- Stability: pass → 0.97 functional
- 24 Oct 26 −2
- CVE-2023-54404 affects this package: high ▼ security
- Known CVEs: CVE check failed: a known high-severity CVE affects zod 3.25.76, a direct dependency. A fixed version is available. security
- Stability: 0.97 → pass security
- 23 Oct 26 0
- Stability: pass → 0.97 functional
- 19 Oct 26 0
- CVE-2026-45822 affects this package: high ▼ security
- 18 Oct 26 0
- CVE-2026-45822 no longer affects this package ▲ security
- 17 Oct 26 0
- Stability: 0.97 → pass security
- 16 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 93 to 97. That category is still filling its 30-day observation window: 28 days of observed history at the previous scan, 29 at this one. The score rises as the window fills, whether or not the server changes.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 4 Nov 2026 · Analysed npm/@xenarch/agent-mcp@1.3.1
Provenance No attestation
The registry publishes no build provenance for this version, so there is nothing to verify.
| Result | No attestation |
|---|---|
| Ecosystem | npm |
Background: How many MCP packages publish verified provenance →
Vulnerabilities 6 findings
| ID | CVE | Severity | Vector | Fix available |
|---|---|---|---|---|
| GHSA-qr28-fpjm-wq7f | CVE-2026-118664 | high | yes | |
| GHSA-vcc3-ghjq-m6fr | CVE-2026-45822 | medium | yes | |
| GHSA-w5hq-g745-h8pq | CVE-2026-41907 | high | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N | yes |
| GHSA-58qx-3vcg-4xpx | CVE-2026-45736 | medium | CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N | yes |
| GHSA-96hv-2xvq-fx4p | CVE-2026-48779 | high | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | yes |
| GHSA-mrhx-c7xc-m3w5 | CVE-2023-54404 | high | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | yes |
Background: What a vulnerability scan can and cannot prove →
Dependencies 400 packages
| Packages resolved | 400 |
|---|---|
| Deprecated | 13 |
| Stale | 102 |
| No linked repository | 2 |
| Tree resolution | Partial |
The dependency tree was only partially resolved, so these counts may be incomplete.
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
xenarch_add_site ~100
Create a site (issues its site token; domain optional — the integration backfills it). Needs a verified account email. Requires confirm: true.
| Name | Type | Req | Description |
|---|---|---|---|
| confirm | boolean | – | Required true to create the site. |
| domain | string | – | Site domain, e.g. example.com. Optional — the integration backfills it. |
| integration_type | string | yes | How the site integrates: wp | joomla | cf | sdk | cli | custom. |
No output schema declared.
No examples provided.
xenarch_agent_add_scope_rule ~122
Add an allow/deny scope rule. A 'deny' rule tightens (free); an 'allow' rule loosens and requires confirm: true.
| Name | Type | Req | Description |
|---|---|---|---|
| confirm | boolean | – | Required true for an 'allow' rule (loosens scope). |
| label | string | – | Optional human label for the rule. |
| mode | string | yes | 'deny' blocks (tightens); 'allow' permits (loosens — needs confirm). |
| pattern | string | yes | URL/domain glob the rule matches, e.g. 'api.example.com/*'. |
No output schema declared.
No examples provided.
xenarch_agent_create_key ~66
Issue a new xa_live_ API key (plaintext returned once). Issues a live spending credential — requires confirm: true.
| Name | Type | Req | Description |
|---|---|---|---|
| confirm | boolean | – | Required true: issues a live xa_live_ spending credential. |
| label | string | – | Optional label for the new key. |
No output schema declared.
No examples provided.
xenarch_agent_get_caps ~34
Read the agent's spending caps (per-transaction, daily, monthly) and remaining headroom. Read-only.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
xenarch_agent_get_receipts ~99
List the agent's payment receipts with filters (period, status, source, domain) and pagination. Read-only.
| Name | Type | Req | Description |
|---|---|---|---|
| domain | string | – | Filter by domain. |
| page | integer | – | Page number. |
| per_page | integer | – | Rows per page (max 100). |
| period | string | – | Time window. |
| source | string | – | Filter by source channel. |
| status | string | – | Filter by status. |
No output schema declared.
No examples provided.
xenarch_agent_get_scope ~35
Read the agent's scope: default posture (allow/deny) and the allow/deny rule list. Read-only.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
xenarch_agent_list_keys ~38
List the agent's xa_live_ API keys (id, label, last-used, revoked state). Never returns plaintext. Read-only.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
xenarch_agent_login ~84
Sign in to the agent control plane using your browser wallet — no CLI needed. First call returns a link; open it, sign in with your wallet on the dashboard, and approve. Call this tool again to finish — the 7-day session is then used by every other xenarch_agent_* tool. Use this when a control-plane tool reports you're not signed in.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
xenarch_agent_pause ~33
Kill switch: pause the agent so all of its payments are blocked immediately. Tightening, so no confirm needed.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
xenarch_agent_remove_scope_rule ~81
Remove a scope rule by id (full UUID or unambiguous prefix). Removing a DENY rule loosens scope and requires confirm: true.
| Name | Type | Req | Description |
|---|---|---|---|
| confirm | boolean | – | Required true when removing a DENY rule (loosens scope). |
| id | string | yes | Scope rule id (full UUID or unambiguous prefix from get_scope). |
No output schema declared.
No examples provided.
xenarch_agent_reset_day_cap ~64
Reset today's daily-spend counter back to the full daily cap (recovery from accidental mid-day exhaustion). Restores full spending headroom — requires confirm: true.
| Name | Type | Req | Description |
|---|---|---|---|
| confirm | boolean | – | Required true: restores the agent's full daily spend headroom. |
No output schema declared.
No examples provided.
xenarch_agent_resume ~50
Lift the pause so the agent can spend again (subject to caps + scope). Requires confirm: true.
| Name | Type | Req | Description |
|---|---|---|---|
| confirm | boolean | – | Required true: resuming re-enables the agent's spending. |
No output schema declared.
No examples provided.
xenarch_agent_revoke_key ~63
Permanently revoke an API key by id (full UUID or prefix). Requires confirm: true.
| Name | Type | Req | Description |
|---|---|---|---|
| confirm | boolean | – | Required true: permanently disables the key. |
| key_id | string | yes | Key id (full UUID or unambiguous prefix). |
No output schema declared.
No examples provided.
xenarch_agent_rotate_key ~76
Rotate an API key by id (full UUID or prefix) — invalidates the old secret, returns a new one once. Requires confirm: true.
| Name | Type | Req | Description |
|---|---|---|---|
| confirm | boolean | – | Required true: invalidates the key's current secret. |
| key_id | string | yes | Key id (full UUID or unambiguous prefix). |
No output schema declared.
No examples provided.
xenarch_agent_set_caps ~159
Set spending caps. Pass per_tx/daily/monthly in USD ('none' disables an axis); omit an axis to leave it unchanged. RAISING or REMOVING a cap requires confirm: true (returns needs_confirmation otherwise). Tightening is free.
| Name | Type | Req | Description |
|---|---|---|---|
| confirm | boolean | – | Required true to RAISE or REMOVE a cap (a loosening change). |
| daily | string | – | Daily cap in USD, or 'none' to disable. Omit to leave unchanged. |
| monthly | string | – | Monthly cap in USD, or 'none' to disable. Omit to leave unchanged. |
| per_tx | string | – | Per-transaction cap in USD, or 'none' to disable. Omit to leave unchanged. |
No output schema declared.
No examples provided.
xenarch_agent_set_default_scope ~77
Set the default scope posture for unmatched URLs. 'deny' tightens (free); 'allow' loosens and requires confirm: true.
| Name | Type | Req | Description |
|---|---|---|---|
| confirm | boolean | – | Required true to switch the default to 'allow'. |
| mode | string | yes | Default posture for unmatched URLs. 'allow' loosens — needs confirm. |
No output schema declared.
No examples provided.
xenarch_agent_status ~55
Show the operator's agent profile (name, paused state) and spend summary for a period. Read-only. Needs a SIWE session from `xenarch agent login`.
| Name | Type | Req | Description |
|---|---|---|---|
| period | string | – | Spend-summary window. |
No output schema declared.
No examples provided.
xenarch_assign_link_group ~75
Move a pay-link into a group (or null to ungroup). Requires confirm: true.
| Name | Type | Req | Description |
|---|---|---|---|
| confirm | boolean | – | Required true to move the link. |
| group_id | string|null | yes | Target group id, or null to ungroup the link. |
| link_id | string | yes | The pay-link id. |
No output schema declared.
No examples provided.
xenarch_bot_activity ~60
Aggregated cross-site bot activity for the publisher (hits, sites seen, last seen per signature). Read-only.
| Name | Type | Req | Description |
|---|---|---|---|
| days | integer | – | Look-back window (default 30). |
| limit | integer | – | Max signatures (default 100). |
No output schema declared.
No examples provided.
xenarch_bot_catalog ~30
The full bot signature catalog (name, category, company). Public, no auth. Read-only.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
xenarch_cancel_subscriber ~61
Cancel a subscription (merchant-initiated; reminder-mode only, 409 otherwise). Permanent. Requires confirm: true.
| Name | Type | Req | Description |
|---|---|---|---|
| confirm | boolean | – | Required true: ends the subscription. |
| subscription_id | string | yes | The subscription id to cancel. |
No output schema declared.
No examples provided.
xenarch_check_gate ~120
Check if a URL or domain has an x402 payment gate. Returns gate status, accepted payment requirements (price, asset, network), and the seller wallet. Use this before paying to confirm pricing, when a URL returns HTTP 402 Payment Required, or when a user asks whether content is paywalled.
| Name | Type | Req | Description |
|---|---|---|---|
| url | string | yes | The URL or domain to check for an x402 payment gate. Accepts a full URL (https://example.com/article) or bare domain (example.com). Returns pricing in USD and payment requirements if gated. |
No output schema declared.
No examples provided.
xenarch_create_group ~58
Create a pay-link group. Requires confirm: true.
| Name | Type | Req | Description |
|---|---|---|---|
| accent_kind | string | – | Accent color kind (dashboard palette key). |
| confirm | boolean | – | Required true to create the group. |
| name | string | yes | Group name. |
No output schema declared.
No examples provided.
xenarch_create_invite ~88
Mint a co-owner join link (viewer / operator / full_co_owner). Anyone redeeming it joins your account. Requires confirm: true.
| Name | Type | Req | Description |
|---|---|---|---|
| confirm | boolean | – | Required true: mints a live join link for your account. |
| label | string | – | Nickname the joining wallet will get. |
| role | string | – | Role granted on join (server default if omitted). |
No output schema declared.
No examples provided.
xenarch_create_link ~232
Create a pay-link. VALIDATE-FIRST: call with mode:'validate' (default) to learn which fields are missing (each missing field includes a prompt to ask the user); once valid, call again with mode:'create' and confirm:true to sign + create. Signs with the agent's local key — the signer must equal the SIWE session wallet. Amount is USDC (max 1.00).
| Name | Type | Req | Description |
|---|---|---|---|
| amount | string | – | Amount in USDC, e.g. '0.99' (max 1.00), or 'open' |
| confirm | boolean | – | Required to actually sign + create in create mode |
| fields | object | – | Any additional create-body fields by name (see xenarch_create_link validate output / GET /v1/links/schema) |
| kind | string | – | Pay-link kind: invoice, subscription, donation, ticket, bounty, paywall, api_metering, checkout, quick_charge |
| mode | string | – | validate (default) returns missing fields; create signs + creates |
| product_name | string | – | Product / line label |
No output schema declared.
No examples provided.
xenarch_create_merchant_key ~62
Issue a new xm_live_ merchant API key (plaintext returned once). Requires confirm: true.
| Name | Type | Req | Description |
|---|---|---|---|
| confirm | boolean | – | Required true: issues a live xm_live_ merchant credential. |
| label | string | – | Optional label for the new key. |
No output schema declared.
No examples provided.
xenarch_create_site_claim ~90
Mint a short-lived claim token so a plugin/worker/SDK can bootstrap its site token without copy-paste. Requires confirm: true.
| Name | Type | Req | Description |
|---|---|---|---|
| confirm | boolean | – | Required true: mints a claim token that can bootstrap a site token. |
| domain | string | yes | Domain the claim is for, e.g. example.com. |
| integration_type | string | yes | Integration doing the claim. |
No output schema declared.
No examples provided.
xenarch_delete_group ~54
Delete a pay-link group (member links become ungrouped). Requires confirm: true.
| Name | Type | Req | Description |
|---|---|---|---|
| confirm | boolean | – | Required true: deletes the group. |
| group_id | string | yes | The group id to delete. |
No output schema declared.
No examples provided.
xenarch_delete_site ~56
Permanently delete a site — its token stops working. Requires confirm: true.
| Name | Type | Req | Description |
|---|---|---|---|
| confirm | boolean | – | Required true: removes the site and stops its gating. |
| site_id | string | yes | The site id to delete. |
No output schema declared.
No examples provided.
xenarch_edit_link ~74
Replace a pay-link's metadata object (whole-state; null clears). Requires confirm: true.
| Name | Type | Req | Description |
|---|---|---|---|
| confirm | boolean | – | Required true: replaces the link's metadata. |
| link_id | string | yes | The pay-link id. |
| metadata | – | yes | Whole-state metadata object to store on the link; null clears it. |
No output schema declared.
No examples provided.
xenarch_export_orders ~48
Export orders as CSV text (same filters as list). Read-only.
| Name | Type | Req | Description |
|---|---|---|---|
| link_id | string | – | Filter to one pay-link. |
| status | string | – | Filter by order status. |
No output schema declared.
No examples provided.
xenarch_fire_permit_digest ~53
Dev/test: drop the throttle and immediately re-send the collectable digest email for your wallet. Requires confirm: true.
| Name | Type | Req | Description |
|---|---|---|---|
| confirm | boolean | – | Required true: sends a real email to the merchant. |
No output schema declared.
No examples provided.
xenarch_get_agent_webhook ~29
Read the agent's webhook config (URL, event types, enabled). Read-only.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
xenarch_get_agent_webhook_deliveries ~39
List the agent webhook's recent delivery attempts. Read-only.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | Rows (default 50). |
No output schema declared.
No examples provided.
xenarch_get_earnings_summary ~32
Earnings summary: today / this month / all-time (USD + payment counts). Read-only.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
xenarch_get_history ~132
List past USDC micropayments made by this wallet through Xenarch. Returns transaction hashes, URLs, domains, amounts in USD, timestamps, total spend, and payment count. Optionally filter by domain. Use this to audit spending, check if you already paid for a resource, or track agent expenditure.
| Name | Type | Req | Description |
|---|---|---|---|
| domain | string | – | Filter payment history by domain (e.g. 'example.com'). Omit to return all payments across all domains. |
| limit | integer | – | Maximum number of payment records to return (1-100, default 10). Use higher values to see full spending history. |
No output schema declared.
No examples provided.
xenarch_get_link ~41
Get one pay-link's detail (status, params, stats) by id. Read-only.
| Name | Type | Req | Description |
|---|---|---|---|
| link_id | string | yes | The pay-link id |
No output schema declared.
No examples provided.
xenarch_get_link_events ~93
List a pay-link's event stream (views, payments, webhook fires…) with type filter + cursor. Read-only.
| Name | Type | Req | Description |
|---|---|---|---|
| after | string | – | Cursor from the previous page. |
| limit | integer | – | Page size (default 50). |
| link_id | string | yes | The pay-link id. |
| types | string | – | Comma-separated event_type filter, e.g. 'paid,view'. |
No output schema declared.
No examples provided.
xenarch_get_link_webhook ~42
Read a pay-link's webhook config (URL, event types, enabled). Read-only.
| Name | Type | Req | Description |
|---|---|---|---|
| link_id | string | yes | The pay-link id. |
No output schema declared.
No examples provided.
xenarch_get_link_webhook_deliveries ~58
List a pay-link's recent webhook delivery attempts (status, latency, errors). Read-only.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | Rows (default 50). |
| link_id | string | yes | The pay-link id. |
No output schema declared.
No examples provided.
xenarch_get_links_rollup ~37
Merchant pay-link KPIs: paid 24h/total, month-to-date revenue, views, conversion. Read-only.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
xenarch_get_links_summary ~48
Revenue / paid-count / link-count summary for a period (24h, 7d, 30d, all). Read-only.
| Name | Type | Req | Description |
|---|---|---|---|
| period | string | – | Summary window. |
No output schema declared.
No examples provided.
xenarch_get_merchant_profile ~35
Get the merchant profile (issuer identity, domain verification status). Read-only. Returns null if none is set yet.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
xenarch_get_publisher_gating ~31
Read the publisher-level gating defaults (category map + per-bot overrides). Read-only.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
xenarch_get_receipt ~48
Get one payment receipt by id (from xenarch_agent_get_receipts). Read-only.
| Name | Type | Req | Description |
|---|---|---|---|
| receipt_id | string | yes | The receipt id (from xenarch_agent_get_receipts). |
No output schema declared.
No examples provided.
xenarch_get_site ~39
Full site detail: gating config, pricing rules, token hash, integration. Read-only.
| Name | Type | Req | Description |
|---|---|---|---|
| site_id | string | yes | The site id. |
No output schema declared.
No examples provided.
xenarch_get_site_activity ~98
Site transaction feed (paid / blocked / withdrawals) with period + status filters, paginated. Read-only.
| Name | Type | Req | Description |
|---|---|---|---|
| page | integer | – | Page number (default 1). |
| per_page | integer | – | Rows per page (default 25). |
| period | string | – | Time window (default all). |
| site_id | string | yes | The site id. |
| status | string | – | Filter by transaction status (default all). |
No output schema declared.
No examples provided.
xenarch_get_site_categories ~35
Per-bot-category earnings breakdown for a site. Read-only.
| Name | Type | Req | Description |
|---|---|---|---|
| site_id | string | yes | The site id. |
No output schema declared.
No examples provided.
xenarch_get_site_stats ~58
Site earnings stats: gates, paid count, revenue, top pages, top agents. Read-only.
| Name | Type | Req | Description |
|---|---|---|---|
| site_id | string | yes | The site id. |
| wallet | string | – | Narrow revenue/paid to one payout wallet address. |
No output schema declared.
No examples provided.
xenarch_get_subscriber ~51
Get one subscriber's full detail (plan, cadence, renewal dates, payer, permit/metered state) by subscription id. Read-only.
| Name | Type | Req | Description |
|---|---|---|---|
| subscription_id | string | yes | The subscription id. |
No output schema declared.
No examples provided.
How do I install the io.github.xenarch-ai/xenarch-mcp server?
io.github.xenarch-ai/xenarch-mcp runs locally as an npm package, launched with npx -y @xenarch/agent-mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
npm · @xenarch/agent-mcp
claude mcp add xenarch-ai-xenarch-mcp -- npx -y @xenarch/agent-mcp
What is the io.github.xenarch-ai/xenarch-mcp server?
io.github.xenarch-ai/xenarch-mcp is listed in the public MCP registry as io.github.xenarch-ai/xenarch-mcp. Xenarch, x402 MCP server for AI agent payments. Non-custodial, USDC on Base L2. This page covers its npm package (@xenarch/agent-mcp).
Is the io.github.xenarch-ai/xenarch-mcp server safe to use?
io.github.xenarch-ai/xenarch-mcp scores 81 out of 100 on VerifyMCP. We recorded 6 known advisories against it as of 4 November 2026. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the io.github.xenarch-ai/xenarch-mcp server expose?
io.github.xenarch-ai/xenarch-mcp exposes 103 tools: xenarch_check_gate, xenarch_pay, xenarch_wallet_status, xenarch_get_history, xenarch_agent_login, and 98 more. Their descriptions and schemas cost roughly 7,640 tokens of context every time the server is loaded.
Is the io.github.xenarch-ai/xenarch-mcp server still maintained?
io.github.xenarch-ai/xenarch-mcp is still listed as active in the MCP registry. We last reached this channel on 4 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What licence is the io.github.xenarch-ai/xenarch-mcp server under?
io.github.xenarch-ai/xenarch-mcp declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.