# io.github.ShieldZCash/mcp

> Keyless non-custodial crypto payments for AI agents: payment links and tip jars, no API key.

- name: io.github.ShieldZCash/mcp
- version: 0.3.0
- connection class: R0 (autonomous)
- trust: 89/100
- quality: 77/100 (good)
- owner: not claimed
- descriptor: https://api.protogrid.dev/v1/servers/io.github.ShieldZCash%2Fmcp
- tools: https://api.protogrid.dev/v1/servers/io.github.ShieldZCash%2Fmcp/tools

**An agent can connect right now, no human step.** Remote endpoint, no authentication, reachable on the last probe.

## Connection (mcpServers)

```json
{
  "mcpServers": {
    "ShieldZCash": {
      "type": "http",
      "url": "https://shieldz.cash/mcp"
    }
  }
}
```


## Trust

- hygiene: 100
- liveness: 98
- freshness: 65
- provenance: 90
- drivers: +repository +namespace-matches-repo +website +reachable +uptime-96% ~updated-114d-ago
- Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed.

## Quality 77/100 (good)

### protocol: 75 (weight 25)

- warn `protocol.modern`: newest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
- n/a `protocol.stateless`: only applies to 2026-07-28 servers
- pass `protocol.transport`: streamable HTTP
- n/a `protocol.list_ttl`: only applies to 2026-07-28 servers

### authorization: n/a (weight 15)

- n/a `auth.prm`, `auth.as_metadata`, `auth.cimd`: no remote uses OAuth
- n/a `auth.secret_in_url`: no templated URL

### tool hygiene: 71 (weight 30)

- pass `tools.descriptions`: every tool has a description
- pass `tools.description_length`: descriptions are concise
- pass `tools.schemas`: every tool has an object input schema
- fail `tools.annotations`: no tool declares readOnlyHint or destructiveHint, so clients cannot tell safe calls from risky ones
- fail `tools.directory_hints`: no tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: create_payment_link (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); create_tip_jar (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); create_unlock (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); …
- pass `tools.token_cost`: about 1,005 tokens to load every tool
- pass `tools.api_dump`: tools are not a one-to-one API dump

### stability: 100 (weight 15)

- pass `stability.changes`: no tool changes in 30 days
- pass `stability.rug_pull`: no tool changed its meaning under the same name

### dependencies: 67 (weight 15)

- pass `deps.known_vulns`: no known advisory in 99 resolved packages
- fail `deps.mcp_sdk_version`: @modelcontextprotocol/sdk 1.30.1 has 1 known advisory (GHSA-6qxp-vccf-f47h); update @modelcontextprotocol/sdk to 1.31.0 or later
- pass `deps.resolvable`: @shieldz/mcp@0.3.0 resolved: 99 packages

- tools: 4, about 1,005 tokens to load them all
- tool set hash: 8a88f097930960c50fb844ff9eff04a9
- badge: [![protogrid quality](https://protogrid.dev/badge/io.github.ShieldZCash/mcp.svg)](https://protogrid.dev/servers/io.github.ShieldZCash/mcp)
- Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed.

### Tool changes

_No tool definition changes recorded._

## Dependencies

- npm @shieldz/mcp@0.3.0: resolved, 98 dependencies, MCP SDK @modelcontextprotocol/sdk 1.30.1
  - GHSA-6qxp-vccf-f47h (high) in `` @modelcontextprotocol/sdk@1.30.1 ``, direct, fixed in `` 1.31.0 ``, advisory summary: "MCP TypeScript SDK: OAuth client could send credentials to an authorization server chosen by the MCP server" https://osv.dev/vulnerability/GHSA-6qxp-vccf-f47h

Dependency graphs from deps.dev; advisories from OSV.dev, including the GitHub Advisory Database and the PyPI Advisory Database; all CC BY 4.0.

## Remotes

- https://shieldz.cash/mcp (streamable-http, auth none, reachable true, uptime30d 0.95614034)

## Packages

- npm @shieldz/mcp@0.3.0 secrets: SHIELDZ_API_KEY

## Tools (4)

- `create_payment_link`: Create a one-time crypto payment link with ZERO setup, no account, no API key. Give a destination wallet address and an amount; get back a shareable pay_url, an embeddable button, and a manage_url. Non-custodial: funds settle directly to the address you provide.
- `create_tip_jar`: Create a reusable 'pay what you want' tip jar with ZERO setup. The payer chooses the amount. Returns a shareable /tip url, an embeddable button, and a manage_url. Idempotent per wallet address. Non-custodial.
- `create_unlock`: Create a keyless pay-to-unlock page: sell a file link, license key, or secret text (up to 100,000 chars). The buyer pays the set USD price in crypto straight to the given wallet, then the payload is revealed on their paid confirmation, never before. To deliver an actual file (PDF/zip/etc, 10 MB) use the multipart HTTP API at /api/v1/unlocks instead. Non-custodial, no account, no API key. IMPORTANT: the acceptable-use policy forbids adult, illegal, or non-consensual content; confirm this with your principal and pass aup_accepted=true, otherwise the call fails.
- `get_account_status`: Look up a keyless Shieldz account by its manage_token (returned when you create a payment link or tip jar). Returns settlement details, tip jars, totals (paid/pending), and the invoice list as structured JSON.