Connect

8 clients · secrets stay placeholders

JSON (mcpServers)Claude CodeCodexOpenCodeCursorVS CodeGemini CLIGoose

{
  "mcpServers": {
    "xrpname-mcp-server": {
      "type": "http",
      "url": "https://xrpdomains.xyz/mcp"
    }
  }
}

claude mcp add --transport http xrpname-mcp-server https://xrpdomains.xyz/mcp

[mcp_servers.xrpname-mcp-server]
url = "https://xrpdomains.xyz/mcp"

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "xrpname-mcp-server": {
      "type": "remote",
      "url": "https://xrpdomains.xyz/mcp",
      "enabled": true
    }
  }
}

{
  "mcpServers": {
    "xrpname-mcp-server": {
      "type": "http",
      "url": "https://xrpdomains.xyz/mcp"
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=xrpname-mcp-server&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8veHJwZG9tYWlucy54eXovbWNwIn0%3D"
}

{
  "servers": {
    "xrpname-mcp-server": {
      "type": "http",
      "url": "https://xrpdomains.xyz/mcp"
    }
  }
}

{
  "mcpServers": {
    "xrpname-mcp-server": {
      "httpUrl": "https://xrpdomains.xyz/mcp"
    }
  }
}

extensions:
  "xrpname-mcp-server":
    enabled: true
    name: "xrpname-mcp-server"
    type: streamable_http
    uri: "https://xrpdomains.xyz/mcp"
    timeout: 300

Quality 71 / 100needs work

protocol75 · weight 25

warn
protocol.modernnewest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
n/a
protocol.statelessonly applies to 2026-07-28 servers
pass
protocol.transportstreamable HTTP
n/a
protocol.list_ttlonly applies to 2026-07-28 servers

authorizationn/a · weight 15

n/a
auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
n/a
auth.secret_in_urlno templated URL

tool hygiene86 · weight 30

pass
tools.descriptionsevery tool has a description
pass
tools.description_lengthdescriptions are concise
pass
tools.schemasevery tool has an object input schema
pass
tools.annotations10 of 10 tools declare readOnlyHint or destructiveHint
fail
tools.directory_hintsno tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: recommend_domain (destructiveHint); resolve_address (destructiveHint); set_primary_domain (destructiveHint); …
pass
tools.token_costabout 2,086 tokens to load every tool
pass
tools.api_dumptools are not a one-to-one API dump

stability75 · weight 15

warn
stability.changes10 tool changes in 30 days
pass
stability.rug_pullno tool changed its meaning under the same name

dependencies33 · weight 15

fail
deps.known_vulns6 advisories to act on (malicious, or rated high or critical with a fix available): GHSA-667r-xxjv-c9mm in [email protected] (direct, fixed in 5.12.2), GHSA-9q9j-q6p8-xq58 in [email protected] (direct, fixed in 5.12.2), GHSA-hwr6-493r-vm6h in [email protected] (direct, fixed in 5.12.2), ...; 4 more of lower severity or without a fix
fail
deps.mcp_sdk_version@modelcontextprotocol/sdk 1.30.1 has 1 known advisory (GHSA-6qxp-vccf-f47h); update @modelcontextprotocol/sdk to 1.31.0 or later
pass
deps.resolvable@xrpname/[email protected] resolved: 169 packages

10 tools, about 2,086 tokens to load them all · tool set b324fbef5260 · tools last changed 2026-10-16 · checked 2026-10-20 18:38 UTC

Tool changes

2026-10-16set_primary_domainchangedannotations
2026-10-16register_domainchangedannotations
2026-10-16resolve_addresschangedannotations
2026-10-16get_portfoliochangedannotations
2026-10-16get_pending_offerschangedannotations
2026-10-16check_order_statuschangedannotations
2026-10-16check_tx_statuschangedannotations
2026-10-16get_domain_profilechangedannotations
2026-10-16recommend_domainchangedannotations
2026-10-16check_domainschangedannotations

Full history: list_changes · trend: quality JSON.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 89 / 100

provenance90

liveness98

freshness65

hygiene100

+repository +namespace-matches-repo +website +reachable +uptime-94% ~updated-99d-ago

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Dependencies

@xrpname/[email protected] npm168 dependencies, resolved · MCP SDK @modelcontextprotocol/sdk 1.30.1 · advisories checked 2026-10-19

advisory	severity	package	fixed in
GHSA-6qxp-vccf-f47hMCP TypeScript SDK: OAuth client could send credentials to an authorization server chosen by the MCP server	high	`@modelcontextprotocol/[email protected]`MCP SDK, direct	fixed in `1.31.0`
GHSA-667r-xxjv-c9mmfastify vulnerable to request body replacement via an async validation result collision	high	`[email protected]`direct	fixed in `5.12.2`
GHSA-9q9j-q6p8-xq58fastify vulnerable to header validation bypass via incomplete schema case normalization	high	`[email protected]`direct	fixed in `5.12.2`
GHSA-hwr6-493r-vm6hfastify vulnerable to request validation bypass via skipped boolean false schemas	high	`[email protected]`direct	fixed in `5.12.2`
GHSA-jx2c-rxcm-jvmqFastify's Content-Type header tab character allows body validation bypass	high	`[email protected]`direct	fixed in `5.7.2`
GHSA-p68q-wchp-6fh7fastify vulnerable to authentication bypass via malformed URLs reaching encapsulated not-found handlers	high	`[email protected]`direct	fixed in `5.12.2`
GHSA-c96f-x56v-gq3hfind-my-way: DDoS with HTTP2	high	`[email protected]`indirect	fixed in `9.7.0`
GHSA-444r-cwp2-x5xffastify: request.protocol and request.host Spoofable via X-Forwarded-Proto/Host from Untrusted Connections	moderate	`[email protected]`direct	fixed in `5.8.3`
GHSA-4mh8-r7rc-xpvcfastify vulnerable to Denial of Service via unhandled exception on HTTP/2 trailer responses	moderate	`[email protected]`direct	fixed in `5.12.5`
GHSA-w2qp-rph6-63g4fastify vulnerable to schema validation bypass via root primitive coercion mismatch	moderate	`[email protected]`direct	fixed in `5.12.1`

1 more advisories in the dependencies endpoint.

Dependency graphs from deps.dev; advisories from OSV.dev, including the GitHub Advisory Database and the PyPI Advisory Database; all CC BY 4.0. The graph is what a clean install of this version resolves today; nothing was installed or run. How it is checked.

Endpoints

remote	auth	reachable	uptime 30d	p50	protocol	last ok
`https://xrpdomains.xyz/mcp` streamable-http	none	yes	94%	733 ms	2025-11-25	2026-10-20

package	registry	version	runtime	secrets
`@xrpname/xrpname-mcp`	npm	0.1.1	–

Tools (10)

`check_domains`read-only	Check 1 to 25 XRPL domains for registration status and cost. Use for questions like "is <name>.xrp taken?", "how much does <name>.xrp cost?", "who owns <name>.xrp?", or to verify availability before registering. Accepts .xrp, .xrpl, .xrpfi, .rlusd TLDs (defaults to .xrp when omitted). Returns availability, price in XRP and RLUSD, owner address, profile metadata if registered, and a web URL for the user to register if available. Also returns invalid_domains for inputs that fail validation.
`check_order_status`read-only	Check the backend order status for a domain you tried to register on xrpdomains.xyz. Returns whether payment landed, the offer was created, the mint completed, or it failed at a step. Use when a user asks "did my X.xrp registration go through?" or "what's the status of my order?". This is deeper than check_domains (which only shows availability).
`check_tx_status`read-only	Check the validation status of an XRPL transaction by hash. Use after send_signed_tx to confirm whether the transaction was validated on-ledger. Returns status (pending, validated, failed, not_found) and engine result code.
`get_domain_profile`read-only	Get the full public profile of a single XRPL domain — owner, NFT token ID, metadata, avatar, fullname, description, social handles, linked chain addresses, and optionally the on-chain ownership history (pass include_history=true). Use when the user asks "show me X.xrp", "what does X.xrp link to?", "who owns X.xrp?", or "show me the history of X.xrp". Returns null fields gracefully if no profile is set.
`get_pending_offers`read-only	Get all pending XRPL domain operations for a wallet — incoming offers (someone offered the wallet a domain), outgoing offers (the wallet listed a domain), and paid-but-not-yet-minted orders the user can still complete. Use when the user asks "do I have any pending transfers?", "what offers are waiting on me?", or before suggesting an accept/cancel/continue-mint action. Requires an XRPL r... address.
`get_portfolio`read-only	List all XRPL domains owned by a wallet address. Use when the user asks "what domains do I own?", "show me my domains", or wants to see another wallet's holdings. Returns each domain with its TLD, length, primary flag, subname flag, and quick-action URLs. (nftoken_id, image, and mint time are not included here — use get_domain_profile for one domain.) Requires an XRPL r... address.
`recommend_domain`read-only	Get AI-recommended domain suggestions for a keyword or theme (e.g. "tom", "crypto", "defi"). Returns creative name + TLD combos with a category, each cross-checked for availability, priced, and given a register link. Use when a user asks "suggest names", "find me a domain about X", or "give me some .xrp ideas".
`register_domain`read-only	Get the link to register a .xrp / .xrpl / .xrpfi / .rlusd domain on xrpdomains.xyz. Registration is completed in the browser — the website handles the order and the user signs in their wallet there (the MCP does NOT build or broadcast the payment). Use when the user says "register X.xrpfi" or "buy X.xrp". Pass refcode if a referral applies.
`resolve_address`read-only	Reverse resolution: given an XRPL address, return its primary XRPName (if set) and the full list of names owned by the wallet. Use when the user says "who owns [address]?", "look up this wallet", or "what names does [address] have?", or when chained with get_domain_profile to explore a wallet. Returns found:false if the address owns no XRPName.
`set_primary_domain`read-only	Get the link to set a domain as your wallet's primary (the name shown by default for your address). Setting primary is completed in the browser — the website handles it and your wallet signs there (the MCP does NOT build or broadcast the transaction). Use when the user says "make X.xrp my primary" or "set X.xrpfi as my main domain". The wallet must already own the domain.

Schemas: list_tools.

Similar MCP servers

Official server.json

{
  "name": "io.github.XRPDomains/xrpname-mcp-server",
  "title": "XRPName",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "remotes": [
    {
      "url": "https://xrpdomains.xyz/mcp",
      "type": "streamable-http"
    }
  ],
  "version": "0.1.1",
  "packages": [
    {
      "version": "0.1.1",
      "transport": {
        "type": "stdio"
      },
      "identifier": "@xrpname/xrpname-mcp",
      "registryType": "npm",
      "registryBaseUrl": "https://registry.npmjs.org"
    }
  ],
  "repository": {
    "url": "https://github.com/XRPDomains/xrpname-mcp-server",
    "source": "github"
  },
  "websiteUrl": "https://xrpdomains.xyz/agent",
  "description": "XRPL domains for AI agents — availability, pricing, profiles, portfolio, and register links."
}