# FirstKey

> FirstKey MCP: agent wallets, free cycles faucet, and one-command site deploys on ICP.

- name: io.github.FirstKeyHQ/firstkey-mcp
- version: 0.1.0
- connection class: unknown (unknown)
- trust: 69/100 flags: unreachable
- quality: 79/100 (good)
- owner: not claimed
- descriptor: https://api.protogrid.dev/v1/servers/io.github.FirstKeyHQ%2Ffirstkey-mcp
- tools: https://api.protogrid.dev/v1/servers/io.github.FirstKeyHQ%2Ffirstkey-mcp/tools

**Not classified yet.** The remote endpoints have not been probed successfully, or the listing has nothing to connect to.

## Connection (mcpServers)

```json
{
  "mcpServers": {
    "firstkey-mcp": {
      "type": "http",
      "url": "https://mcp.firstkey.io/mcp"
    }
  }
}
```


## Trust

- hygiene: 100
- liveness: 7
- freshness: 100
- provenance: 90
- drivers: +repository +namespace-matches-repo +website -unreachable(3 failures) +updated-25d-ago
- Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed.

## Quality 79/100 (good)

### protocol: 75 (weight 25)

- warn `protocol.modern`: newest supported version is 2025-06-18; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
- n/a `protocol.stateless`: only applies to 2026-07-28 servers
- pass `protocol.transport`: streamable HTTP
- n/a `protocol.list_ttl`: only applies to 2026-07-28 servers

### authorization: n/a (weight 15)

- n/a `auth.prm`, `auth.as_metadata`, `auth.cimd`: no remote uses OAuth
- n/a `auth.secret_in_url`: no templated URL

### tool hygiene: 71 (weight 30)

- pass `tools.descriptions`: every tool has a description
- pass `tools.description_length`: descriptions are concise
- pass `tools.schemas`: every tool has an object input schema
- fail `tools.annotations`: no tool declares readOnlyHint or destructiveHint, so clients cannot tell safe calls from risky ones
- fail `tools.directory_hints`: no tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: claim_faucet_grant (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); get_fuel_link (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); create_wallet (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); …
- pass `tools.token_cost`: about 1,333 tokens to load every tool
- pass `tools.api_dump`: tools are not a one-to-one API dump

### stability: 100 (weight 15)

- pass `stability.changes`: 2 tool changes in 30 days
- pass `stability.rug_pull`: no tool changed its meaning under the same name

### dependencies: n/a (weight 15)

- n/a `deps.known_vulns`, `deps.mcp_sdk_version`, `deps.resolvable`: no npm or PyPI package

- tools: 8, about 1,333 tokens to load them all
- tool set hash: e2853d508850fa6b81c5e021a6070183
- tools last changed: 2026-09-29T01:00:11.895Z
- badge: [![protogrid quality](https://protogrid.dev/badge/io.github.FirstKeyHQ/firstkey-mcp.svg)](https://protogrid.dev/servers/io.github.FirstKeyHQ/firstkey-mcp)
- Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed.

### Tool changes

- 2026-09-29 `get_swap_route` added
  - Route a swap intent across ICPSwap: prices the direct pool and every two-hop path through ICP, ckUSDC, ckUSDT, ckBTC, and ckETH live on-chain, chains each leg's quoted output into the next leg's input, and returns the best route leg-by-leg. Read-only — no tokens move. Use this instead of get_swap_quote when a direct pool may be thin or missing.
- 2026-09-25 `get_swap_quote` added
  - Get a live, read-only swap quote on ICPSwap (the deepest on-chain DEX on ICP): how much receive_token you would get for pay_amount of pay_token. No tokens move — this prices the intent; execution happens in the agent's own wallet/canister. Tokens can be symbols (ICP, ckUSDC, ckUSDT, ckBTC, ckETH) or ledger principals.

Full history: https://api.protogrid.dev/v1/servers/io.github.FirstKeyHQ%2Ffirstkey-mcp/changes

## Remotes

- https://mcp.firstkey.io/mcp (streamable-http, auth none, reachable false, uptime30d 0.9325843)

## Packages

_none_

## Tools (8)

- `check_cycles`: Read an ICP principal's cycles balance on the cycles ledger.
- `claim_faucet_grant`: Claim the one-time free 1T cycles grant from the FirstKey faucet for an agent principal. One claim per principal, ever. The grant lands on the cycles ledger and funds the agent's first canister deploy.
- `create_wallet`: Generate a fresh Ed25519 wallet for an AI agent: returns the ICP principal and the PKCS#8 PEM private key. The private key is returned exactly once over this call and is never stored anywhere. No signup, no on-chain registration — the keypair IS the wallet.
- `deploy_site`: Deploy a static website for an agent: creates a canister on the Internet Computer, installs the FirstKey static host, uploads every file, and returns the live https URL. The agent is added as a controller of its site canister. One free deploy per agent principal, funded from the FirstKey deploy pool; files must fit in one call (total under ~1.4 MB decoded) — use deploy_upload_chunk for larger files.
- `deploy_upload_chunk`: Upload one chunk of a large file to an already-deployed agent site (for files that don't fit in a single deploy_site call). Chunks are appended in order; set is_last on the final chunk to publish the file.
- `get_fuel_link`: Get the FirstKey Fuel payment link for a principal: a human pays by card (Stripe) and cycles land in the agent's wallet — the sovereign refuel path when the free faucet grant or deploy pool is exhausted.
- `get_swap_quote`: Get a live, read-only swap quote on ICPSwap (the deepest on-chain DEX on ICP): how much receive_token you would get for pay_amount of pay_token. No tokens move — this prices the intent; execution happens in the agent's own wallet/canister. Tokens can be symbols (ICP, ckUSDC, ckUSDT, ckBTC, ckETH) or ledger principals.
- `get_swap_route`: Route a swap intent across ICPSwap: prices the direct pool and every two-hop path through ICP, ckUSDC, ckUSDT, ckBTC, and ckETH live on-chain, chains each leg's quoted output into the next leg's input, and returns the best route leg-by-leg. Read-only — no tokens move. Use this instead of get_swap_quote when a direct pool may be thin or missing.