XRPName

NPM · @XRPNAME/XRPNAME-MCP · 2 COMPONENTS · SCANNED AUG 3

XRPL domains for AI agents — availability, pricing, profiles, portfolio, and register links.

Available components

remote · xrpdomains.xyz 67 npm · @xrpname/xrpname-mcp 64

+39 this week 64 64 Trust /100

Trust breakdown (6 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score →

Supply Chain Security71

No malware found by supply-chain analysis.Pass
CVE check failed: a known high-severity CVE affects fastify 4.29.1, a direct dependency. A fixed version is available. View diagnostics → Fail
No install/post-install scripts declared.Pass
Only part of the dependency tree could be resolved (165 of 169), so this covers what we could see, not the whole tree. View diagnostics → Partial

Provenance & Transparency45

Source repository is publicly reachable at the declared URL. View diagnostics → Pass
Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
Clear OSI-approved license (MIT).Pass
Actively maintained (last published 17 days ago).Pass
Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail

Schema Quality & AI Usability75

AI-judged instruction clarity (excellent).Pass
Context-footprint check failed: tool/resource definitions use about 1194 tokens (~132/item across 9 items; 9 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
Usage-examples check failed: none of the tools include examples. See how to fix → Fail

Stability & Change Management27

Stability observed for 8 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial

Tool Coverage100

100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
100% of tool parameters carry a description.Pass

Capabilities100

Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass

Install

Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.

npm · @xrpname/xrpname-mcp

Claude Codex opencode OpenClaw Hermes Other

# add to Claude Code

claude mcp add xrpdomains-xrpname-mcp-server -- npx -y @xrpname/xrpname-mcp

# add to Codex CLI

codex mcp add xrpdomains-xrpname-mcp-server -- npx -y @xrpname/xrpname-mcp

// opencode.json

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "xrpdomains-xrpname-mcp-server": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@xrpname/xrpname-mcp"
      ],
      "enabled": true
    }
  }
}

# add to OpenClaw

openclaw mcp add xrpdomains-xrpname-mcp-server --command npx --arg -y --arg @xrpname/xrpname-mcp

# ~/.hermes/config.yaml

mcp_servers:
  xrpdomains-xrpname-mcp-server:
    command: "npx"
    args: ["-y", "@xrpname/xrpname-mcp"]

// mcp.json

{
  "mcpServers": {
    "xrpdomains-xrpname-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "@xrpname/xrpname-mcp"
      ]
    }
  }
}

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

2 Aug 26 +59
- Known CVEs: unverified → fail ▼ security
- Provenance: unverified → fail ▼ security
- Install scripts: unverified → pass ▲ security
- Malware scan: unverified → pass ▲ security
- Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window). security
- License: unverified → pass ▲ functional
- Maintenance: unverified → pass ▲ functional
- Stability: unverified → 0.23 ▲ functional
- Dependency health: unverified → partial ▲ functional
- MCP protocol: unverified → pass ▲ functional
- Tool coverage: unverified → 100 ▲ functional
- Licence: MIT functional
1 Aug 26 −30
- Stability: Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet. security
- Capabilities: pass → unverified ▼ functional
- Tool coverage: 100 → unverified ▼ functional
31 Jul 26 +20
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
30 Jul 26 −59
- Known CVEs: fail → unverified ▼ security
- Malware scan: pass → unverified ▼ security
- CVE-2026-47219 no longer affects this package ▲ security
- CVE-2026-6321 no longer affects this package ▲ security
- CVE-2026-25223 no longer affects this package ▲ security
- CVE-2026-6322 no longer affects this package ▲ security
- CVE-2026-3635 no longer affects this package ▲ security
- CVE-2026-25224 no longer affects this package ▲ security
- Tool coverage: 100 → unverified ▼ functional
- Dependency health: partial → unverified ▼ functional
28 Jul 26 +49
- CVE-2026-3635 affects this package: high ▼ security
- CVE-2026-25224 affects this package: high ▼ security
- CVE-2026-25223 affects this package: high ▼ security
- CVE-2026-6321 affects this package: high ▼ security
- CVE-2026-47219 affects this package: high ▼ security
- CVE-2026-6322 affects this package: high ▼ security
- Provenance: unverified → fail ▼ security
- Known CVEs: unverified → fail ▼ security
- Install scripts: unverified → pass ▲ security
- Security disclosure: unverified → fail ▼ functional
- Maintenance: unverified → pass ▲ functional
- Tool coverage: unverified → 100 ▲ functional
- License: unverified → pass ▲ functional
- First check of Schema quality: fail functional
- First check of Tool coverage: 100 functional
- First check of Schema quality: excellent functional
- First check of Schema quality: fail functional
- Licence: MIT functional
27 Jul 26 25

First indexed and scored.

Show 2 earlier entries Hide earlier entries

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 3 Aug 2026 · Analysed npm/@xrpname/[email protected]

Provenance none

Ecosystem: npm · Outcome: none

Vulnerabilities 6 findings

ID	CVE	Severity	Vector	Fix available
GHSA-q3j6-qgpj-74h6	CVE-2026-6321	high	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N	yes
GHSA-v39h-62p7-jpjc	CVE-2026-6322	high	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N	yes
GHSA-444r-cwp2-x5xf	CVE-2026-3635	medium	CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N	yes
GHSA-jx2c-rxcm-jvmq	CVE-2026-25223	high	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N	yes
GHSA-mrq3-vjjr-p77c	CVE-2026-25224	low	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L	yes
GHSA-c96f-x56v-gq3h	CVE-2026-47219	high	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	yes

Dependencies 165 packages

165 packages in the resolved dependency tree · 159 deprecated · 45 stale.

The dependency tree was only partially resolved, so these counts may be incomplete.

MCP tools — 9 exposed · ~1,194 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.

Tool Tokens

check_domains ~155

Check 1 to 25 XRPL domains for registration status and cost. Use for questions like "is <name>.xrp taken?", "how much does <name>.xrp cost?", "who owns <name>.xrp?", or to verify availability before registering. Accepts .xrp, .xrpl, .xrpfi, .rlusd TLDs (defaults to .xrp when omitted). Returns availability, pricing, owner address, profile metadata if registered, and a web URL for the user to register if available. Also returns invalid_domains for inputs that fail validation.

Input Output Examples

Name	Type	Req	Description
domains	array	yes	List of domains to check. Each may include or omit the TLD; defaults to .xrp.

No output schema declared.

No examples provided.

check_order_status ~106

Check the backend order status for a domain you tried to register on xrpdomains.xyz. Returns whether payment landed, the offer was created, the mint completed, or it failed at a step. Use when a user asks "did my X.xrp registration go through?" or "what's the status of my order?". This is deeper than check_domains (which only shows availability).

Input Output Examples

Name	Type	Req	Description
domain	string	yes	The domain whose order to check, e.g. "alice.xrp".

No output schema declared.

No examples provided.

check_tx_status ~70

Check the validation status of an XRPL transaction by hash. Use after send_signed_tx to confirm whether the transaction was validated on-ledger. Returns status (pending, validated, failed, not_found) and engine result code.

Input Output Examples

Name	Type	Req	Description
tx_hash	string	yes	64-character hex XRPL transaction hash

No output schema declared.

No examples provided.

get_domain_profile ~143

Get the full public profile of a single XRPL domain — owner, NFT token ID, metadata, avatar, fullname, description, social handles, linked chain addresses, and optionally the on-chain ownership history (pass include_history=true). Use when the user asks "show me X.xrp", "what does X.xrp link to?", "who owns X.xrp?", or "show me the history of X.xrp". Returns null fields gracefully if no profile is set.

Input Output Examples

Name	Type	Req	Description
domain	string	yes	Domain to look up, e.g. "alice.xrp"
include_history	boolean	—	Include the on-chain ownership timeline (transfers, marketplace sales).

No output schema declared.

No examples provided.

get_pending_offers ~142

Get all pending XRPL domain operations for a wallet — incoming offers (someone offered the wallet a domain), outgoing offers (the wallet listed a domain), and paid-but-not-yet-minted orders the user can still complete. Use when the user asks "do I have any pending transfers?", "what offers are waiting on me?", or before suggesting an accept/cancel/continue-mint action. Requires an XRPL r... address.

Input Output Examples

Name	Type	Req	Description
address	string	yes	XRPL r... address of the wallet to query (e.g. "rPT1Sjq2YGrBMTttX4GZHjKu9dyfzbpAYe").

No output schema declared.

No examples provided.

get_portfolio ~178

List all XRPL domains owned by a wallet address. Use when the user asks "what domains do I own?", "show me my domains", or wants to see another wallet's holdings. Returns each domain with its TLD, length, primary flag, subname flag, and quick-action URLs. (nftoken_id, image, and mint time are not included here — use get_domain_profile for one domain.) Requires an XRPL r... address.

Input Output Examples

Name	Type	Req	Description
address	string	yes	XRPL r... address whose domains to list.
filter_tld	string	—	Filter by TLD, e.g. ".xrp", ".xrpfi", ".rlusd", or "all".
limit	integer	—	Max domains to return.
sort	string	—	Sort order. "recent" keeps the backend order.

No output schema declared.

No examples provided.

recommend_domain ~154

Get AI-recommended domain suggestions for a keyword or theme (e.g. "tom", "crypto", "defi"). Returns creative name + TLD combos with a category, each cross-checked for availability, priced, and given a register link. Use when a user asks "suggest names", "find me a domain about X", or "give me some .xrp ideas".

Input Output Examples

Name	Type	Req	Description
limit	integer	—	How many suggestions to return.
query	string	yes	Keyword or theme to base suggestions on, e.g. "tom" or "crypto".
tlds	array	—	TLDs to include (without dots), e.g. ["xrp","xrpfi"]. Omit for all.

No output schema declared.

No examples provided.

register_domain ~133

Get the link to register a .xrp / .xrpl / .xrpfi / .rlusd domain on xrpdomains.xyz. Registration is completed in the browser — the website handles the order and the user signs in their wallet there (the MCP does NOT build or broadcast the payment). Use when the user says "register X.xrpfi" or "buy X.xrp". Pass refcode if a referral applies.

Input Output Examples

Name	Type	Req	Description
domain	string	yes	The domain to register, e.g. "coolname.xrpfi".
refcode	string	—	Optional referral code to embed in the registration link.

No output schema declared.

No examples provided.

set_primary_domain ~113

Get the link to set a domain as your wallet's primary (the name shown by default for your address). Setting primary is completed in the browser — the website handles it and your wallet signs there (the MCP does NOT build or broadcast the transaction). Use when the user says "make X.xrp my primary" or "set X.xrpfi as my main domain". The wallet must already own the domain.

Input Output Examples

Name	Type	Req	Description
domain	string	yes	The domain to set as primary, e.g. "alice.xrp".

No output schema declared.

No examples provided.

On this page

Handy links

Scoring key

80+ high trust
60–79 medium
below 60 low

How we score

Score history · last 30 days

27 Jul 3 Aug

Day	Score
27 Jul	25
28 Jul	74
29 Jul	74
30 Jul	15
31 Jul	35
1 Aug	5
2 Aug	64
3 Aug	64