protogrid

Search / org.xaalis/mcp

Xaalis

R0· no sign-in

Wave and Orange Money payments in Senegal: payment links, refunds, subscriptions, agent payouts.

v0.1.0 · active · website · descriptor JSON · versions

An agent can connect right now, no human step.Remote endpoint, no authentication, reachable on the last probe.
Quality93strong
Trust81of 100
Uptime, 30 days91%
Latency p50189 ms

Connect

8 clients · secrets stay placeholders
{
  "mcpServers": {
    "xaalis": {
      "type": "http",
      "url": "https://mcp.xaalis.org/sandbox"
    }
  }
}
claude mcp add --transport http xaalis https://mcp.xaalis.org/sandbox
[mcp_servers.xaalis]
url = "https://mcp.xaalis.org/sandbox"
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "xaalis": {
      "type": "remote",
      "url": "https://mcp.xaalis.org/sandbox",
      "enabled": true
    }
  }
}
{
  "mcpServers": {
    "xaalis": {
      "type": "http",
      "url": "https://mcp.xaalis.org/sandbox"
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=xaalis&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vbWNwLnhhYWxpcy5vcmcvc2FuZGJveCJ9"
}
{
  "servers": {
    "xaalis": {
      "type": "http",
      "url": "https://mcp.xaalis.org/sandbox"
    }
  }
}
{
  "mcpServers": {
    "xaalis": {
      "httpUrl": "https://mcp.xaalis.org/sandbox"
    }
  }
}
extensions:
  "xaalis":
    enabled: true
    name: "xaalis"
    type: streamable_http
    uri: "https://mcp.xaalis.org/sandbox"
    timeout: 300

Quality 93 / 100strong

protocol75 · weight 25
  • warn
    protocol.modernnewest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
  • n/a
    protocol.statelessonly applies to 2026-07-28 servers
  • pass
    protocol.transportstreamable HTTP
  • n/a
    protocol.list_ttlonly applies to 2026-07-28 servers
authorization100 · weight 15
  • pass
    auth.prmProtected Resource Metadata (RFC 9728) published
  • pass
    auth.as_metadataauthorization server metadata reachable
  • pass
    auth.cimdClient ID Metadata Documents supported
  • n/a
    auth.secret_in_urlno templated URL
tool hygiene100 · weight 30
  • pass
    tools.descriptionsevery tool has a description
  • pass
    tools.description_lengthdescriptions are concise
  • pass
    tools.schemasevery tool has an object input schema
  • pass
    tools.annotations28 of 28 tools declare readOnlyHint or destructiveHint
  • pass
    tools.directory_hintsevery tool declares readOnlyHint, destructiveHint, idempotentHint and openWorldHint
  • pass
    tools.token_costabout 5,099 tokens to load every tool
  • pass
    tools.api_dumptools are not a one-to-one API dump
  • pass
    tools.hidden_textno hidden text in tool names, descriptions, schemas or annotations
stability100 · weight 15
  • pass
    stability.changesno tool changes in 30 days
  • pass
    stability.rug_pullno tool changed its meaning under the same name
  • pass
    stability.new_linksno tool change named a new site
dependenciesn/a · weight 15
  • n/a
    deps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI package

28 tools, about 5,099 tokens to load them all · tool set 2601fed5fce1 · checked 2026-11-14 06:30 UTC

Tool changes

No tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 81 / 100

no-repository
provenance55
liveness96
freshness100
hygiene80

+dns-namespace +website +reachable +uptime-91% +updated-12d-ago -no-repository

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Endpoints

remoteauthreachableuptime 30dp50protocollast ok
https://mcp.xaalis.org/mcp streamable-httpoauth2 AS: https://api.xaalis.org/dashboard/authno (2 failures)91%180 ms–2026-11-12
https://mcp.xaalis.org/sandbox streamable-httpnoneyes91%189 ms2025-11-252026-11-14

Tools (28)

xaalis_advance_subscriptionSandbox only: jump to the subscription's next billing event (next invoice, due date or end of grace) to test renewals without waiting.
xaalis_cancel_subscriptiondestructiveCancel now (voids the unpaid invoice if checkout hasn't started) or at the end of the current period.
xaalis_create_agent_walletSandbox: create a spending wallet for an AI agent, with a per-payout cap and the only phone numbers it may pay. Fund it, then issue its ak_test_ key. In production a human sets up agent wallets.
xaalis_create_paymentCreate a payment and get a hosted checkout_url to send to the customer (Wave or Orange Money). The payment is NOT paid until its status is 'succeeded' — check with xaalis_get_payment or a signed webhook, never the customer's redirect.
xaalis_create_payoutdestructiveSandbox only with a merchant key: send money from the merchant balance to a Wave or Orange Money number. In production, agents pay out only through an agent wallet key (ak_) with limits set by a human.
xaalis_create_subscriptionBill a customer every day/week/month/year. Invoice 0 is issued at once: send its hosted_invoice_url (in latest_invoice) to the customer. Set billing_cycles (2–24) for an instalment plan that ends by itself.
xaalis_disable_agent_walletdestructiveStop an agent wallet: its keys can no longer start payouts. Payouts already accepted finish normally. Safe to repeat.
xaalis_fund_agent_walletSandbox: move money from the merchant balance into an agent wallet. The wallet's balance is the agent's total spend limit.
xaalis_get_agent_walletread-onlyRead an agent wallet's policy and balance.
xaalis_get_balanceread-onlyThe merchant's available balance (withdrawable) and money reserved for payouts in flight, in XOF.
xaalis_get_invoiceread-onlyRead a subscription invoice: status, amount, due date, and hosted_invoice_url (the stable link to send the customer).
xaalis_get_paymentread-onlyRead a payment's current status, amount, fee and checkout link. 'succeeded' is the only proof the customer paid.
xaalis_get_payoutread-onlyRead a payout's status (pending, processing, succeeded, failed).
xaalis_get_subscriptionread-onlyRead a subscription: status, cycles paid, latest invoice.
xaalis_issue_agent_keySandbox: issue the ak_test_ key an agent uses to pay out from this wallet. The secret is shown ONCE — store it in a secret store or env var right away. Retrying with the same idempotency_key never shows it again.
xaalis_list_agent_walletsread-onlyList the merchant's agent wallets and their policies.
xaalis_list_invoicesread-onlyList invoices, optionally for one subscription or by status.
xaalis_list_paymentsread-onlyList payments, newest first, optionally filtered by status.
xaalis_list_payoutsread-onlyList the merchant's payouts, newest first, with their status and recipient.
xaalis_list_refundsread-onlyRead the refund of a payment, if any (a list of zero or one). Use it to check an uncertain refund instead of retrying.
xaalis_list_subscriptionsread-onlyList subscriptions, newest first, optionally by status.
xaalis_list_webhook_deliveriesread-onlyRecent webhooks Xaalis sent to the merchant's endpoint, with status, attempts and the last error — use it to debug a webhook integration.
xaalis_reclaim_agent_walletSandbox: move unreserved money from an agent wallet back to the merchant balance.
xaalis_refund_paymentdestructiveSend the FULL amount of a succeeded Wave payment back to the customer (no partial refunds). The merchant's available balance must cover it. One refund per payment; the same idempotency_key returns the same refund.
xaalis_sandbox_signupCreate a Xaalis SANDBOX merchant account and get its test secret key (sk_test_…) and webhook secret, with no human step. Sandbox only: no real money, simulated wallets. Going live later needs a human (KYC and approval). Store the returned secrets in environment variables, never in code.
xaalis_search_docsread-onlySearch the official Xaalis documentation (payments, webhooks, payouts, refunds, subscriptions, SDKs, errors, go-live). Use it before guessing how an endpoint behaves.
xaalis_simulate_paymentSandbox only: make a test payment succeed or fail as if the customer had paid (or declined) in their wallet. Triggers the same webhooks as a real payment.
xaalis_whoamiread-onlyStart here. Shows which Xaalis key is connected (none, merchant test/live, agent wallet), its mode, the account or wallet it belongs to, and which tools it unlocks.

Schemas: list_tools.

Similar MCP servers

Official server.json
{
  "name": "org.xaalis/mcp",
  "title": "Xaalis",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "remotes": [
    {
      "url": "https://mcp.xaalis.org/mcp",
      "type": "streamable-http",
      "headers": [
        {
          "name": "Authorization",
          "isSecret": true,
          "description": "Bearer <Xaalis key>, or sign in with OAuth (no header)"
        }
      ]
    },
    {
      "url": "https://mcp.xaalis.org/sandbox",
      "type": "streamable-http"
    }
  ],
  "version": "0.1.0",
  "websiteUrl": "https://docs.xaalis.org/guides/ai-agents/",
  "description": "Wave and Orange Money payments in Senegal: payment links, refunds, subscriptions, agent payouts."
}