protogrid

Search / io.github.ShieldZCash/mcp

ShieldZCash

R0· no sign-in

Keyless non-custodial crypto payments for AI agents: payment links and tip jars, no API key.

v0.3.0 · active · repository · website · descriptor JSON · versions

An agent can connect right now, no human step.Remote endpoint, no authentication, reachable on the last probe.
Quality77good
Trust89of 100
Uptime, 30 days96%
Latency p50625 ms

Connect

8 clients · secrets stay placeholders
{
  "mcpServers": {
    "ShieldZCash": {
      "type": "http",
      "url": "https://shieldz.cash/mcp"
    }
  }
}
claude mcp add --transport http ShieldZCash https://shieldz.cash/mcp
[mcp_servers.ShieldZCash]
url = "https://shieldz.cash/mcp"
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "ShieldZCash": {
      "type": "remote",
      "url": "https://shieldz.cash/mcp",
      "enabled": true
    }
  }
}
{
  "mcpServers": {
    "ShieldZCash": {
      "type": "http",
      "url": "https://shieldz.cash/mcp"
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=ShieldZCash&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vc2hpZWxkei5jYXNoL21jcCJ9"
}
{
  "servers": {
    "ShieldZCash": {
      "type": "http",
      "url": "https://shieldz.cash/mcp"
    }
  }
}
{
  "mcpServers": {
    "ShieldZCash": {
      "httpUrl": "https://shieldz.cash/mcp"
    }
  }
}
extensions:
  "ShieldZCash":
    enabled: true
    name: "ShieldZCash"
    type: streamable_http
    uri: "https://shieldz.cash/mcp"
    timeout: 300

Quality 77 / 100good

protocol75 · weight 25
  • warn
    protocol.modernnewest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
  • n/a
    protocol.statelessonly applies to 2026-07-28 servers
  • pass
    protocol.transportstreamable HTTP
  • n/a
    protocol.list_ttlonly applies to 2026-07-28 servers
authorizationn/a · weight 15
  • n/a
    auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
  • n/a
    auth.secret_in_urlno templated URL
tool hygiene71 · weight 30
  • pass
    tools.descriptionsevery tool has a description
  • pass
    tools.description_lengthdescriptions are concise
  • pass
    tools.schemasevery tool has an object input schema
  • fail
    tools.annotationsno tool declares readOnlyHint or destructiveHint, so clients cannot tell safe calls from risky ones
  • fail
    tools.directory_hintsno tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: create_payment_link (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); create_tip_jar (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); create_unlock (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); …
  • pass
    tools.token_costabout 1,005 tokens to load every tool
  • pass
    tools.api_dumptools are not a one-to-one API dump
stability100 · weight 15
  • pass
    stability.changesno tool changes in 30 days
  • pass
    stability.rug_pullno tool changed its meaning under the same name
dependencies67 · weight 15
  • pass
    deps.known_vulnsno known advisory in 99 resolved packages
  • fail
    deps.mcp_sdk_version@modelcontextprotocol/sdk 1.30.1 has 1 known advisory (GHSA-6qxp-vccf-f47h); update @modelcontextprotocol/sdk to 1.31.0 or later
  • pass
    deps.resolvable@shieldz/[email protected] resolved: 99 packages

4 tools, about 1,005 tokens to load them all · tool set 8a88f0979309 · checked 2026-10-20 09:31 UTC

Tool changes

No tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 89 / 100

provenance90
liveness98
freshness65
hygiene100

+repository +namespace-matches-repo +website +reachable +uptime-96% ~updated-114d-ago

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Dependencies

@shieldz/[email protected] npm98 dependencies, resolved · MCP SDK @modelcontextprotocol/sdk 1.30.1 · advisories checked 2026-10-19

advisoryseveritypackagefixed in
GHSA-6qxp-vccf-f47hMCP TypeScript SDK: OAuth client could send credentials to an authorization server chosen by the MCP serverhigh@modelcontextprotocol/[email protected]MCP SDK, directfixed in 1.31.0

Dependency graphs from deps.dev; advisories from OSV.dev, including the GitHub Advisory Database and the PyPI Advisory Database; all CC BY 4.0. The graph is what a clean install of this version resolves today; nothing was installed or run. How it is checked.

Endpoints

remoteauthreachableuptime 30dp50protocollast ok
https://shieldz.cash/mcp streamable-httpnoneyes96%625 ms2025-11-252026-10-20
packageregistryversionruntimesecrets
@shieldz/mcpnpm0.3.0–SHIELDZ_API_KEY

Tools (4)

create_payment_linkCreate a one-time crypto payment link with ZERO setup, no account, no API key. Give a destination wallet address and an amount; get back a shareable pay_url, an embeddable button, and a manage_url. Non-custodial: funds settle directly to the address you provide.
create_tip_jarCreate a reusable 'pay what you want' tip jar with ZERO setup. The payer chooses the amount. Returns a shareable /tip url, an embeddable button, and a manage_url. Idempotent per wallet address. Non-custodial.
create_unlockCreate a keyless pay-to-unlock page: sell a file link, license key, or secret text (up to 100,000 chars). The buyer pays the set USD price in crypto straight to the given wallet, then the payload is revealed on their paid confirmation, never before. To deliver an actual file (PDF/zip/etc, 10 MB) use the multipart HTTP API at /api/v1/unlocks instead. Non-custodial, no account, no API key. IMPORTANT: the acceptable-use policy forbids adult, illegal, or non-consensual content; confirm this with your principal and pass aup_accepted=true, otherwise the call fails.
get_account_statusLook up a keyless Shieldz account by its manage_token (returned when you create a payment link or tip jar). Returns settlement details, tip jars, totals (paid/pending), and the invoice list as structured JSON.

Schemas: list_tools.

Similar MCP servers

Official server.json
{
  "name": "io.github.ShieldZCash/mcp",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-09-29/server.schema.json",
  "remotes": [
    {
      "url": "https://shieldz.cash/mcp",
      "type": "streamable-http"
    }
  ],
  "version": "0.3.0",
  "packages": [
    {
      "version": "0.3.0",
      "transport": {
        "type": "stdio"
      },
      "identifier": "@shieldz/mcp",
      "registryType": "npm",
      "registryBaseUrl": "https://registry.npmjs.org",
      "environmentVariables": [
        {
          "name": "SHIELDZ_API_KEY",
          "isSecret": true,
          "description": "Optional. Set a sk_live_/sk_test_ key to additionally enable full invoice management tools. Omit for keyless mode."
        }
      ]
    }
  ],
  "repository": {
    "url": "https://github.com/ShieldZCash/shieldz-mcp",
    "source": "github"
  },
  "websiteUrl": "https://shieldz.cash/agents",
  "description": "Keyless non-custodial crypto payments for AI agents: payment links and tip jars, no API key."
}