# XRPName (npm · @xrpname/xrpname-mcp)

XRPL domains for AI agents — availability, pricing, profiles, portfolio, and register links.

- Trust score: 64/100 (medium)
- Change this week: +39
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-03

## Components

- remote · `xrpdomains.xyz`: 67/100, [markdown](https://verifymcp.io/servers/xrpdomains-xrpname-mcp-server/xrpdomains.md), [page](https://verifymcp.io/servers/xrpdomains-xrpname-mcp-server/xrpdomains)
- npm · `@xrpname/xrpname-mcp`: 64/100 (this document), [markdown](https://verifymcp.io/servers/xrpdomains-xrpname-mcp-server/xrpname-xrpname-mcp.md), [page](https://verifymcp.io/servers/xrpdomains-xrpname-mcp-server/xrpname-xrpname-mcp)

## Channel facts

- Registry: `npm`
- Package: `@xrpname/xrpname-mcp`
- Version: `0.1.1`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-03.

- **Supply Chain Security**: 71/100
  - No malware found by supply-chain analysis.
  - CVE check failed: a known high-severity CVE affects fastify 4.29.1, a direct dependency. A fixed version is available.
  - No install/post-install scripts declared.
  - Only part of the dependency tree could be resolved (165 of 169), so this covers what we could see, not the whole tree.
- **Provenance & Transparency**: 45/100
  - Source repository is publicly reachable at the declared URL.
  - Provenance check failed: no build-provenance attestation is published.
  - Clear OSI-approved license (MIT).
  - Actively maintained (last published 17 days ago).
  - Disclosure check failed: no security disclosure policy was found in the source repository.
- **Schema Quality & AI Usability**: 75/100
  - AI-judged instruction clarity (excellent).
  - Context-footprint check failed: tool/resource definitions use about 1194 tokens (~132/item across 9 items; 9 tools + 0 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 27/100
  - Stability observed for 8 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### Claude

```bash
claude mcp add xrpdomains-xrpname-mcp-server -- npx -y @xrpname/xrpname-mcp
```

### Codex

```bash
codex mcp add xrpdomains-xrpname-mcp-server -- npx -y @xrpname/xrpname-mcp
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "xrpdomains-xrpname-mcp-server": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@xrpname/xrpname-mcp"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add xrpdomains-xrpname-mcp-server --command npx --arg -y --arg @xrpname/xrpname-mcp
```

### Hermes

```yaml
mcp_servers:
  xrpdomains-xrpname-mcp-server:
    command: "npx"
    args: ["-y", "@xrpname/xrpname-mcp"]
```

### Other

```json
{
  "mcpServers": {
    "xrpdomains-xrpname-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "@xrpname/xrpname-mcp"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-02 (score 64, +59)

- [security regression] Known CVEs: unverified → fail
- [security regression] Provenance: unverified → fail
- [security improvement] Install scripts: unverified → pass
- [security improvement] Malware scan: unverified → pass
- [security] Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window).
- [functional improvement] License: unverified → pass
- [functional improvement] Maintenance: unverified → pass
- [functional improvement] Stability: unverified → 0.23
- [functional improvement] Dependency health: unverified → partial
- [functional improvement] MCP protocol: unverified → pass
- [functional improvement] Tool coverage: unverified → 100
- [functional] Licence: MIT

### 2026-08-01 (score 5, −30)

- [security] Stability: Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.
- [functional regression] Capabilities: pass → unverified
- [functional regression] Tool coverage: 100 → unverified

### 2026-07-31 (score 35, +20)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-30 (score 15, −59)

- [security regression] Known CVEs: fail → unverified
- [security regression] Malware scan: pass → unverified
- [security improvement] CVE-2026-47219 no longer affects this package
- [security improvement] CVE-2026-6321 no longer affects this package
- [security improvement] CVE-2026-25223 no longer affects this package
- [security improvement] CVE-2026-6322 no longer affects this package
- [security improvement] CVE-2026-3635 no longer affects this package
- [security improvement] CVE-2026-25224 no longer affects this package
- [functional regression] Tool coverage: 100 → unverified
- [functional regression] Dependency health: partial → unverified

### 2026-07-28 (score 74, +49)

- [security regression] CVE-2026-3635 affects this package: high
- [security regression] CVE-2026-25224 affects this package: high
- [security regression] CVE-2026-25223 affects this package: high
- [security regression] CVE-2026-6321 affects this package: high
- [security regression] CVE-2026-47219 affects this package: high
- [security regression] CVE-2026-6322 affects this package: high
- [security regression] Provenance: unverified → fail
- [security regression] Known CVEs: unverified → fail
- [security improvement] Install scripts: unverified → pass
- [functional regression] Security disclosure: unverified → fail
- [functional improvement] Maintenance: unverified → pass
- [functional improvement] Tool coverage: unverified → 100
- [functional improvement] License: unverified → pass
- [functional] First check of Schema quality: fail
- [functional] First check of Tool coverage: 100
- [functional] First check of Schema quality: excellent
- [functional] First check of Schema quality: fail
- [functional] Licence: MIT

### 2026-07-27 (score 25)

First indexed and scored.

## MCP tools (9)

### `check_domains` (~155 tokens)

Check 1 to 25 XRPL domains for registration status and cost. Use for questions like "is <name>.xrp taken?", "how much does <name>.xrp cost?", "who owns <name>.xrp?", or to verify availability before registering. Accepts .xrp, .xrpl, .xrpfi, .rlusd TLDs (defaults to .xrp when omitted). Returns availability, pricing, owner address, profile metadata if registered, and a web URL for the user to register if available. Also returns invalid_domains for inputs that fail validation.

Input parameters:

- `domains` (array, required): List of domains to check. Each may include or omit the TLD; defaults to .xrp.

### `recommend_domain` (~154 tokens)

Get AI-recommended domain suggestions for a keyword or theme (e.g. "tom", "crypto", "defi"). Returns creative name + TLD combos with a category, each cross-checked for availability, priced, and given a register link. Use when a user asks "suggest names", "find me a domain about X", or "give me some .xrp ideas".

Input parameters:

- `limit` (integer): How many suggestions to return.
- `query` (string, required): Keyword or theme to base suggestions on, e.g. "tom" or "crypto".
- `tlds` (array): TLDs to include (without dots), e.g. ["xrp","xrpfi"]. Omit for all.

### `get_domain_profile` (~143 tokens)

Get the full public profile of a single XRPL domain — owner, NFT token ID, metadata, avatar, fullname, description, social handles, linked chain addresses, and optionally the on-chain ownership history (pass include_history=true). Use when the user asks "show me X.xrp", "what does X.xrp link to?", "who owns X.xrp?", or "show me the history of X.xrp". Returns null fields gracefully if no profile is set.

Input parameters:

- `domain` (string, required): Domain to look up, e.g. "alice.xrp"
- `include_history` (boolean): Include the on-chain ownership timeline (transfers, marketplace sales).

### `check_tx_status` (~70 tokens)

Check the validation status of an XRPL transaction by hash. Use after send_signed_tx to confirm whether the transaction was validated on-ledger. Returns status (pending, validated, failed, not_found) and engine result code.

Input parameters:

- `tx_hash` (string, required): 64-character hex XRPL transaction hash

### `check_order_status` (~106 tokens)

Check the backend order status for a domain you tried to register on xrpdomains.xyz. Returns whether payment landed, the offer was created, the mint completed, or it failed at a step. Use when a user asks "did my X.xrp registration go through?" or "what's the status of my order?". This is deeper than check_domains (which only shows availability).

Input parameters:

- `domain` (string, required): The domain whose order to check, e.g. "alice.xrp".

### `get_pending_offers` (~142 tokens)

Get all pending XRPL domain operations for a wallet — incoming offers (someone offered the wallet a domain), outgoing offers (the wallet listed a domain), and paid-but-not-yet-minted orders the user can still complete. Use when the user asks "do I have any pending transfers?", "what offers are waiting on me?", or before suggesting an accept/cancel/continue-mint action. Requires an XRPL r... address.

Input parameters:

- `address` (string, required): XRPL r... address of the wallet to query (e.g. "rPT1Sjq2YGrBMTttX4GZHjKu9dyfzbpAYe").

### `get_portfolio` (~178 tokens)

List all XRPL domains owned by a wallet address. Use when the user asks "what domains do I own?", "show me my domains", or wants to see another wallet's holdings. Returns each domain with its TLD, length, primary flag, subname flag, and quick-action URLs. (nftoken_id, image, and mint time are not included here — use get_domain_profile for one domain.) Requires an XRPL r... address.

Input parameters:

- `address` (string, required): XRPL r... address whose domains to list.
- `filter_tld` (string): Filter by TLD, e.g. ".xrp", ".xrpfi", ".rlusd", or "all".
- `limit` (integer): Max domains to return.
- `sort` (string): Sort order. "recent" keeps the backend order.

### `register_domain` (~133 tokens)

Get the link to register a .xrp / .xrpl / .xrpfi / .rlusd domain on xrpdomains.xyz. Registration is completed in the browser — the website handles the order and the user signs in their wallet there (the MCP does NOT build or broadcast the payment). Use when the user says "register X.xrpfi" or "buy X.xrp". Pass refcode if a referral applies.

Input parameters:

- `domain` (string, required): The domain to register, e.g. "coolname.xrpfi".
- `refcode` (string): Optional referral code to embed in the registration link.

### `set_primary_domain` (~113 tokens)

Get the link to set a domain as your wallet's primary (the name shown by default for your address). Setting primary is completed in the browser — the website handles it and your wallet signs there (the MCP does NOT build or broadcast the transaction). Use when the user says "make X.xrp my primary" or "set X.xrpfi as my main domain". The wallet must already own the domain.

Input parameters:

- `domain` (string, required): The domain to set as primary, e.g. "alice.xrp".

## Diagnostics

Captured diagnostic sections: Provenance, Vulnerabilities, Dependencies. The full working is on the page: https://verifymcp.io/servers/xrpdomains-xrpname-mcp-server/xrpname-xrpname-mcp#diagnostics

## Score history

- 2026-08-03: 64
- 2026-08-02: 64
- 2026-08-01: 5
- 2026-07-31: 35
- 2026-07-30: 15
- 2026-07-29: 74
- 2026-07-28: 74
- 2026-07-27: 25

## Links

- npm package: https://www.npmjs.com/package/@xrpname/xrpname-mcp
- Socket report: https://socket.dev/npm/package/@xrpname/xrpname-mcp
- Repository: https://github.com/XRPDomains/xrpname-mcp-server
- Website: https://xrpdomains.xyz/agent
- Changelog RSS feed: https://verifymcp.io/servers/xrpdomains-xrpname-mcp-server/xrpname-xrpname-mcp/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/xrpdomains-xrpname-mcp-server/xrpname-xrpname-mcp/changelog.json
- HTML version of this page: https://verifymcp.io/servers/xrpdomains-xrpname-mcp-server/xrpname-xrpname-mcp