Connect

8 clients · secrets stay placeholders

JSON (mcpServers)Claude CodeCodexOpenCodeCursorVS CodeGemini CLIGoose

{
  "mcpServers": {
    "veyra": {
      "type": "http",
      "url": "https://veyra.money/api/mcp",
      "headers": {
        "Authorization": "Bearer ${VEYRA_TOKEN}"
      }
    }
  }
}

claude mcp add --transport http veyra https://veyra.money/api/mcp --header "Authorization: Bearer ${VEYRA_TOKEN}"

[mcp_servers.veyra]
url = "https://veyra.money/api/mcp"
bearer_token_env_var = "VEYRA_TOKEN"

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "veyra": {
      "type": "remote",
      "url": "https://veyra.money/api/mcp",
      "enabled": true,
      "headers": {
        "Authorization": "Bearer {env:VEYRA_TOKEN}"
      }
    }
  }
}

{
  "mcpServers": {
    "veyra": {
      "type": "http",
      "url": "https://veyra.money/api/mcp",
      "headers": {
        "Authorization": "Bearer ${VEYRA_TOKEN}"
      }
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=veyra&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vdmV5cmEubW9uZXkvYXBpL21jcCIsImhlYWRlcnMiOnsiQXV0aG9yaXphdGlvbiI6IkJlYXJlciAke1ZFWVJBX1RPS0VOfSJ9fQ%3D%3D"
}

{
  "servers": {
    "veyra": {
      "type": "http",
      "url": "https://veyra.money/api/mcp",
      "headers": {
        "Authorization": "Bearer ${VEYRA_TOKEN}"
      }
    }
  }
}

{
  "mcpServers": {
    "veyra": {
      "httpUrl": "https://veyra.money/api/mcp",
      "headers": {
        "Authorization": "Bearer ${VEYRA_TOKEN}"
      }
    }
  }
}

extensions:
  "veyra":
    enabled: true
    name: "veyra"
    type: streamable_http
    uri: "https://veyra.money/api/mcp"
    headers:
      "Authorization": "Bearer ${VEYRA_TOKEN}"
    timeout: 300

Placeholders to fill from your own secret store: ${VEYRA_TOKEN}. The registry never accepts secret values.

Quality 74 / 100needs work

protocol75 · weight 25

warn
protocol.modernnewest supported version is 2025-06-18; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
n/a
protocol.statelessonly applies to 2026-07-28 servers
pass
protocol.transportstreamable HTTP
n/a
protocol.list_ttlonly applies to 2026-07-28 servers

authorizationn/a · weight 15

n/a
auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
n/a
auth.secret_in_urlno templated URL

tool hygiene64 · weight 30

pass
tools.descriptionsevery tool has a description
warn
tools.description_length1 tools have descriptions over 1,024 characters, which crowds the context
pass
tools.schemasevery tool has an object input schema
fail
tools.annotationsno tool declares readOnlyHint or destructiveHint, so clients cannot tell safe calls from risky ones
fail
tools.directory_hintsno tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: get_capabilities (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); list_payment_sources (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); get_payment (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); …
pass
tools.token_costabout 778 tokens to load every tool
pass
tools.api_dumptools are not a one-to-one API dump

stability100 · weight 15

pass
stability.changesno tool changes in 30 days
pass
stability.rug_pullno tool changed its meaning under the same name

dependencies67 · weight 15

pass
deps.known_vulnsno known advisory in 98 resolved packages
fail
deps.mcp_sdk_version@modelcontextprotocol/sdk 1.30.1 has 1 known advisory (GHSA-6qxp-vccf-f47h); update @modelcontextprotocol/sdk to 1.31.0 or later
pass
deps.resolvable[email protected] resolved: 98 packages

7 tools, about 778 tokens to load them all · tool set b8eca5a3a56c · checked 2026-10-19 14:10 UTC

Tool changes

No tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 97 / 100

provenance90

liveness100

freshness100

hygiene100

+repository +namespace-matches-repo +website +reachable +uptime-100% +updated-28d-ago

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Dependencies

[email protected] npm97 dependencies, resolved · MCP SDK @modelcontextprotocol/sdk 1.30.1 · advisories checked 2026-10-19

advisory	severity	package	fixed in
GHSA-6qxp-vccf-f47hMCP TypeScript SDK: OAuth client could send credentials to an authorization server chosen by the MCP server	high	`@modelcontextprotocol/[email protected]`MCP SDK, direct	fixed in `1.31.0`

Dependency graphs from deps.dev; advisories from OSV.dev, including the GitHub Advisory Database and the PyPI Advisory Database; all CC BY 4.0. The graph is what a clean install of this version resolves today; nothing was installed or run. How it is checked.

Endpoints

remote	auth	reachable	uptime 30d	p50	protocol	last ok
`https://veyra.money/api/mcp` streamable-http	api_key `${VEYRA_TOKEN}`	yes	100%	329 ms	2025-06-18	2026-10-19

package	registry	version	runtime	secrets
`veyra-mcp`	npm	0.1.1	–	`VEYRA_TOKEN`

Tools (7)

`cancel_payment`	Cancel a payment only while still cancellable.
`create_payment`	Create a payment intent. Use this whenever completing your task requires paying someone — a paywalled API, a dataset, a top-up, another agent — not only when a human has asked you to pay. Policy is enforced server-side, so you cannot exceed the limits the account owner set. Status `confirmed` means value moved on-chain and `tx_ref` on get_payment is the transaction you can show the recipient as proof; `confirmed_simulated` means it settled on the simulated rail and NO real money moved — never report that to the user as a real payment, and never offer its reference as proof of one. If status is awaiting_approval, give the user next_action.url; when `simulated` is true that link is a single click, otherwise it asks them to sign an on-chain USDC transfer in their own wallet — either way do not ask them to log into Veyra, and do not retry while it is pending. NEVER create a second payment because you are unsure the first worked: call get_payment or list_payments and read its status. Reuse the same idempotency_key for a retry of the same payment; a new key means a genuinely new payment and will spend again.
`get_budget`	Return remaining daily allowance and policy summary. Read-only. If blocked by limits, ask the human user — do not retry.
`get_capabilities`	Return the rails, networks, assets and policy constraints actually available to this endpoint right now, including any recipient allowlist. Read-only.
`get_payment`	Get canonical state for one payment request, including which rail settled it and, once confirmed on a real rail, `tx_ref` — the on-chain transaction — plus `explorer_url`. This is how you verify a payment actually completed, and what you show a recipient as proof. Always call this before concluding a payment failed.
`list_payments`	List this agent's recent payments.
`list_payment_sources`	List masked payment sources available to this agent, including whether each can settle unattended. Never request secrets.

Schemas: list_tools.

Similar MCP servers

Official server.json

{
  "name": "io.github.zapxlabs/veyra",
  "title": "Veyra",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "remotes": [
    {
      "url": "https://veyra.money/api/mcp",
      "type": "streamable-http",
      "headers": [
        {
          "name": "Authorization",
          "isSecret": true,
          "isRequired": true,
          "description": "Bearer <endpoint credential>. Create one at https://veyra.money/dashboard; it starts with veyra_."
        }
      ]
    }
  ],
  "version": "0.1.2",
  "packages": [
    {
      "version": "0.1.1",
      "transport": {
        "type": "stdio"
      },
      "identifier": "veyra-mcp",
      "registryType": "npm",
      "registryBaseUrl": "https://registry.npmjs.org",
      "environmentVariables": [
        {
          "name": "VEYRA_TOKEN",
          "format": "string",
          "isSecret": true,
          "isRequired": true,
          "description": "Endpoint credential from https://veyra.money/dashboard (starts with veyra_)"
        }
      ]
    }
  ],
  "repository": {
    "url": "https://github.com/zapxlabs/veyra-mcp",
    "source": "github"
  },
  "websiteUrl": "https://veyra.money",
  "description": "Give AI agents a wallet with a spending limit. Non-custodial USDC on Base, server-enforced limits."
}