Back to Browse

Cortexcloud MCP Server

Developer ToolsUse Caution2.0MCP RegistryLocalRemote
Free

Server data from the Official MCP Registry

Pay-per-call on-chain data for AI agents: token, wallet, risk, whale, NFT, tx. No API keys.

About

Pay-per-call on-chain data for AI agents: token, wallet, risk, whale, NFT, tx. No API keys.

Remote endpoints: streamable-http: https://api.cortexcloud.org/mcp

Security Report

2.0
Use Caution2.0Critical Risk

The stdio bridge in src/index.ts is a thin, transparent forwarder to the hosted CortexCloud endpoint with no evident malicious behavior. The bundled local x402 proxy has serious problems: it listens with wildcard CORS and no authentication, so any web page or local network client can trigger payments from its wallet, and it auto-pays any upstream 402 challenge with no spending cap (maxValue is defined but never enforced). Its private key is stored in plaintext on disk, and the package also ships debug and test scripts that log payment details. Supply chain analysis found 8 known vulnerabilities in dependencies (0 critical, 4 high severity).

13 files analyzed · 15 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

network_listen

Check that this permission is expected for this type of plugin.

env_vars

Check that this permission is expected for this type of plugin.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

File System Write

Writes or modifies files on your machine. Check that this is expected for the tool.

How to Install & Connect

Available as Local & Remote

This plugin can run on your machine or connect to a hosted endpoint. during install.

Documentation

View on GitHub

From the project's GitHub README.

@cortexcloud.org/mcp

MCP server for CortexCloud — pay-per-call on-chain data and intelligence for AI agents. Token, wallet, risk, whale, balance, NFT, transaction and cross-chain reads, settled in USDC on Base over x402. No API keys, no subscriptions, no signup.

Two ways to connect

1. Remote (recommended). The hosted server speaks Streamable HTTP and is always current:

{
  "mcpServers": {
    "cortexcloud": {
      "type": "http",
      "url": "https://api.cortexcloud.org/mcp"
    }
  }
}

2. stdio bridge. This package, for clients that can only launch a local process:

{
  "mcpServers": {
    "cortexcloud": {
      "command": "npx",
      "args": ["-y", "@cortexcloud.org/mcp"]
    }
  }
}

The bridge is a transport adapter, not a second implementation: it forwards tools/list and tools/call to the hosted server, so tools, schemas and prices can never drift from the API.

Tools

17 tools, served from the live registry:

  • Paid (15) — cortex_token_intel ($0.030), cortex_cross_chain_compare ($0.040), cortex_whale_alerts ($0.030), cortex_token_risk ($0.020), cortex_wallet_intel ($0.006), and the $0.004 data routes: cortex_token_price, cortex_token_balances, cortex_nft_ownership, cortex_tx_history, cortex_gas_oracle, cortex_block, plus the batch tools cortex_aggregate_balances, cortex_aggregate_nfts, cortex_aggregate_prices, cortex_aggregate_tx_history (up to 20 items per call).
  • Free (2) — cortex_capabilities (every route, chain and price) and cortex_prices (the price table).

The authoritative list is always GET https://api.cortexcloud.org/v1/capabilities, or cortex_capabilities over MCP.

How payment works

A paid tool call without payment returns the x402 challenge inside the tool result: price, payee, asset, network, and the endpoint to call. Nothing is charged and no wallet is needed to read it.

To settle, the caller signs an EIP-3009 USDC authorization and replays the request with the payment-signature header. Over MCP the server relays that header to the API unchanged; it holds no funds and never signs. Over stdio, forward an existing signature with:

CORTEXCLOUD_PAYMENT_SIGNATURE=<base64 header> npx -y @cortexcloud.org/mcp

For a complete paid flow from code, use the REST reference client — 402 -> sign -> 200 in one file:

https://api.cortexcloud.org/examples/paid_client.py

Env

VariableDefaultMeaning
CORTEXCLOUD_BASEhttps://api.cortexcloud.orgAPI base; the bridge connects to <base>/mcp
CORTEXCLOUD_PAYMENT_SIGNATURE—Optional x402 payment header forwarded on every call

Verified behaviour

  • initialize advertises protocol 2025-06-18; the upstream server reports version 0.5.0.
  • tools/list returns 17 tools.
  • cortex_capabilities returns the live catalog with no payment.
  • cortex_token_price without payment returns the 402 challenge, not an error.

Links

MIT licensed.

Reviews

No reviews yet

Be the first to review this server!