Search / io.github.michu5696/agora402
agora402
R0· no sign-inEscrow protection for agent payments on Base — USDC held in smart contract until job completion.
v0.5.3 · active · descriptor JSON · versions
Search / io.github.michu5696/agora402
R0· no sign-inEscrow protection for agent payments on Base — USDC held in smart contract until job completion.
v0.5.3 · active · descriptor JSON · versions
{
"mcpServers": {
"agora402": {
"type": "http",
"url": "https://agora402.fly.dev/mcp"
}
}
}claude mcp add --transport http agora402 https://agora402.fly.dev/mcp[mcp_servers.agora402]
url = "https://agora402.fly.dev/mcp"
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"agora402": {
"type": "remote",
"url": "https://agora402.fly.dev/mcp",
"enabled": true
}
}
}{
"mcpServers": {
"agora402": {
"type": "http",
"url": "https://agora402.fly.dev/mcp"
}
},
"deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=agora402&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vYWdvcmE0MDIuZmx5LmRldi9tY3AifQ%3D%3D"
}{
"servers": {
"agora402": {
"type": "http",
"url": "https://agora402.fly.dev/mcp"
}
}
}{
"mcpServers": {
"agora402": {
"httpUrl": "https://agora402.fly.dev/mcp"
}
}
}extensions:
"agora402":
enabled: true
name: "agora402"
type: streamable_http
uri: "https://agora402.fly.dev/mcp"
timeout: 300
protocol.modernnewest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28protocol.statelessonly applies to 2026-07-28 serversprotocol.transportstreamable HTTPprotocol.list_ttlonly applies to 2026-07-28 serversauth.prm, auth.as_metadata, auth.cimdno remote uses OAuthauth.secret_in_urlno templated URLtools.descriptionsevery tool has a descriptiontools.description_lengthdescriptions are concisetools.schemasevery tool has an object input schematools.annotationsno tool declares readOnlyHint or destructiveHint, so clients cannot tell safe calls from risky onestools.directory_hintsno tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: echo (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); add (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); server_time (readOnlyHint, destructiveHint, idempotentHint, openWorldHint)tools.token_costabout 154 tokens to load every tooltools.api_dumptools are not a one-to-one API dumpstability.changes24 tool changes in 30 daysstability.rug_pullno tool changed its meaning under the same namedeps.known_vulnsno known advisory in 111 resolved packagesdeps.mcp_sdk_version@modelcontextprotocol/sdk 1.30.1 has 1 known advisory (GHSA-6qxp-vccf-f47h); update @modelcontextprotocol/sdk to 1.31.0 or laterdeps.resolvable[email protected] resolved: 111 packagesserver_timeaddedReturns the current server time (ISO 8601, UTC).
addaddedAdds two numbers and returns the sum.
echoaddedEchoes the provided text back to the caller.
addremovedAdds two numbers and returns the sum.
server_timeremovedReturns the current server time (ISO 8601, UTC).
echoremovedEchoes the provided text back to the caller.
server_timeaddedReturns the current server time (ISO 8601, UTC).
addaddedAdds two numbers and returns the sum.
echoaddedEchoes the provided text back to the caller.
echoremovedEchoes the provided text back to the caller.
Showing the latest 10. Full history: list_changes · trend: quality JSON.
Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.
+reachable +uptime-99% -stale-230d -no-repository
Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.
[email protected] npm110 dependencies, resolved · MCP SDK @modelcontextprotocol/sdk 1.30.1 · advisories checked 2026-10-19
| advisory | severity | package | fixed in |
|---|---|---|---|
| GHSA-6qxp-vccf-f47hMCP TypeScript SDK: OAuth client could send credentials to an authorization server chosen by the MCP server | high | @modelcontextprotocol/[email protected]MCP SDK, direct | fixed in 1.31.0 |
Dependency graphs from deps.dev; advisories from OSV.dev, including the GitHub Advisory Database and the PyPI Advisory Database; all CC BY 4.0. The graph is what a clean install of this version resolves today; nothing was installed or run. How it is checked.
| remote | auth | reachable | uptime 30d | p50 | protocol | last ok |
|---|---|---|---|---|---|---|
https://agora402.fly.dev/mcp streamable-http | none | yes | 99% | 288 ms | 2025-11-25 | 2026-10-20 |
| package | registry | version | runtime | secrets |
|---|---|---|---|---|
agora402 | npm | 0.5.3 | – |
add | Adds two numbers and returns the sum. |
echo | Echoes the provided text back to the caller. |
server_time | Returns the current server time (ISO 8601, UTC). |
Schemas: list_tools.
{
"name": "io.github.michu5696/agora402",
"$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
"remotes": [
{
"url": "https://agora402.fly.dev/mcp",
"type": "streamable-http"
}
],
"version": "0.5.3",
"packages": [
{
"version": "0.5.3",
"transport": {
"type": "stdio"
},
"identifier": "agora402",
"registryType": "npm"
}
],
"description": "Escrow protection for agent payments on Base — USDC held in smart contract until job completion."
}