Back to Browse

Titan Frameworks MCP Server

Developer ToolsUse Caution4.2MCP RegistryLocalRemote
Free

Server data from the Official MCP Registry

Review and rewrite LangChain, LlamaIndex, Ollama, and XRPL code against current APIs.

About

Review and rewrite LangChain, LlamaIndex, Ollama, and XRPL code against current APIs.

Remote endpoints: streamable-http: https://titan-frameworks-production.up.railway.app/mcp

Security Report

4.2
Use Caution4.2High Risk

Titan Frameworks is a paid MCP server with x402 micropayment support and legitimate business logic for code review/rewrite tools. Core authentication and x402 payment verification are implemented, but there are moderate security concerns around environment variable handling, admin endpoint protection, and potential information disclosure in error responses. The server's permissions align with its stated purpose (network HTTP for crawling, file I/O for indexing), but credential management and logging practices need improvement. Supply chain analysis found 10 known vulnerabilities in dependencies (2 critical, 3 high severity).

6 files analyzed · 18 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

File System Write

Writes or modifies files on your machine. Check that this is expected for the tool.

How to Install & Connect

Available as Local & Remote

This plugin can run on your machine or connect to a hosted endpoint. during install.

Documentation

View on GitHub

From the project's GitHub README.

Titan Frameworks

Paid MCP that reviews and rewrites LangChain, LlamaIndex, Ollama, and XRPL code against current APIs — plus runnable examples, import lookup, and tx skeletons that never submit. Live docs are still included.

Live Streamable HTTP: https://titan-frameworks-production.up.railway.app/mcp
Paid with x402: $0.001 USDC on Base or 1000 drops XRP / 0.001 RLUSD on XRPL mainnet.

Agent discovery: llms.txt · Smithery smithery.yaml · MCP Registry server.json

Tools

ToolPurpose
review_framework_codeLint a snippet for dead APIs before it crashes. Returns hunks, does not execute
rewrite_framework_codeApply conservative catalog rewrites; leftover lists unsafe call sites
diagnose_framework_errorStack-trace → deprecated API → exact fix. Use only when you have an error
resolve_symbolPackage, install, import, and call shape for one API name
fetch_working_exampleComplete runnable file for a goal (agent, rag, payment, …)
fetch_latest_syntaxWorking snippets and migration notes for one topic. Use when writing a fragment
search_ai_framework_docsKeyword search over local Markdown. Use for concepts/symbols; not stack traces
draft_xrpl_intent_txTyped XRPL tx skeleton. Never submits or moves funds
list_supported_frameworksEnumerate framework ids, aliases, and catalog topics (free tools/call)
list_known_deprecationsFull deprecation catalog for one framework or all four

Prompts: migrate_framework_code, diagnose_stack_trace, start_from_example.

Pick one: source about to run → review_framework_code; need a patched file → rewrite_framework_code; stack trace → diagnose_framework_error; know the symbol → resolve_symbol; need a full file → fetch_working_example; topic fragment → fetch_latest_syntax; concept → search_ai_framework_docs; XRPL tx → draft_xrpl_intent_tx; which frameworks → list_supported_frameworks; all deprecations → list_known_deprecations.

Connect a client

{
  "mcpServers": {
    "titan-frameworks": {
      "url": "https://titan-frameworks-production.up.railway.app/mcp"
    }
  }
}

x402-capable clients send PAYMENT-SIGNATURE / X-PAYMENT after a 402. Local stdio (titan-frameworks / npm run dev) does not charge.

To pay production from Cursor, enable titan-frameworks-paid in MCP settings (runs scripts/cursor-x402-proxy.ts, signs Base USDC from EVM_PRIVATE_KEY in .env, cap X402_PROXY_MAX_CALLS default 25). Check the proxy with npx tsx scripts/cursor-x402-proxy.ts --check.

HTTP endpoints

PathNotes
GET /healthliveness + index stats
GET /llms.txtagent discovery
GET /toolstool list + live pricing
GET /.well-known/x402x402scan resource index
GET /.well-known/x402.jsonfull payment requirements + bazaar metadata
GET /.well-known/mcp/server-card.jsonSmithery static card
ALL /mcpStreamable HTTP MCP. Handshake/tools/list/list_supported_frameworks free; other tools/call paid

Run locally (stdio)

cd titan-frameworks
npm install
npm run dev

Project config is in .cursor/mcp.json. Seed docs ship in src/data/seed-fallback.json.

npm run index-docs

Production re-indexes automatically when the live index is older than 24 hours. /admin can still trigger a crawl immediately.

HTTP mode (Vercel / Railway)

npm run dev:http
# POST http://127.0.0.1:3333/mcp
npm run build
npm start

Railway uses railway.toml (npm run start). Vercel rewrites to api/index.ts.

x402 micropayments

Production billing is on. Unpaid tools/call on POST https://titan-frameworks-production.up.railway.app/mcp returns 402, except list_supported_frameworks which is free. initialize, ping, and tools/list are free so directories can health-check the connector.

RailPriceNetworkFacilitator
USDC$0.001Base (eip155:8453)PayAI
XRP1000 drops (0.001 XRP)XRPL mainnet (xrpl:0)T54
RLUSD0.001XRPL mainnet (xrpl:0)T54

A raw wallet transfer is not an x402 proof. Clients retry /mcp with PAYMENT-SIGNATURE / X-PAYMENT. Local stdio (npm run dev) does not charge.

To reproduce the gate locally: X402_ENABLED=true (mock) plus X402_USDC_LIVE=true / X402_XRPL_LIVE=true for live verify/settle.

Password-gated admin

Production dashboard: https://titan-frameworks-production.up.railway.app/admin

It is not a public stats page. Login is a password checked against ADMIN_SECRET_KEY. Unauthenticated /api/admin/* calls return 401. The old public /admin/api/stats route is gone (404).

Layout

src/app/           Next.js admin UI + /api/admin routes
src/components/    Admin dashboard React components
src/tools/         MCP tool handlers
src/mcp/tools.ts   tool registration (includes xrpl)
src/indexer/       xrpl.js crawl targets
src/services/      search, indexer, store, x402, earnings, discovery
src/data/          JSON index, syntax catalog, known errors, symbol map, examples, XRPL intents
src/types/         Zod schemas + TS types
scripts/           index-docs, x402-smoke
server.json        MCP Registry remote listing
smithery.yaml      Smithery remote listing
glama.json         Glama maintainer claim

Reviews

No reviews yet

Be the first to review this server!