Back to Browse

Agent Trust Oracle MCP Server

Developer ToolsUse Caution4.2MCP RegistryLocal
Free

Server data from the Official MCP Registry

ERC-8004 agent trust scores via x402: free preview + paid USDC-on-Base signed scores (5 chains)

About

ERC-8004 agent trust scores via x402: free preview + paid USDC-on-Base signed scores (5 chains)

Security Report

4.2
Use Caution4.2High Risk

This MCP server provides read-only access to ERC-8004 agent trust scores via an x402 payment API. The code is well-structured with proper authentication (x402 payment scheme), cryptographic signing of responses, and clear separation of free vs. paid endpoints. However, there are notable security concerns: the use of subprocess.run with curl for RPC calls (rather than a proper HTTP library), environment variable handling that could expose credentials, and reliance on external free RPC nodes without robust error handling. The MCP server itself appears clean, but the underlying indexer and API have patterns that warrant attention from users. Supply chain analysis found 11 known vulnerabilities in dependencies (0 critical, 9 high severity). Package verification found 1 issue.

6 files analyzed · 20 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

File System Write

Writes or modifies files on your machine. Check that this is expected for the tool.

Shell Command Execution

Runs commands on your machine. Be cautious — only use if you trust this plugin.

process_spawn

Check that this permission is expected for this type of plugin.

What You'll Need

Set these up before or after installing:

Optional. Base wallet private key (0x...) for a low-balance hot wallet with a little USDC. Required only for the paid tool; the free get_trust_preview works without it. Never use your main wallet.Required

Environment variable: EVM_PRIVATE_KEY

Optional. Override the trust API base URL. Defaults to https://trust.nsgoods.org.Optional

Environment variable: RESOURCE_SERVER_URL

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-nikoble1926-agent-trust-mcp": {
      "env": {
        "EVM_PRIVATE_KEY": "your-evm-private-key-here",
        "RESOURCE_SERVER_URL": "your-resource-server-url-here"
      },
      "args": [
        "-y",
        "@nikosble1926/agent-trust-mcp"
      ],
      "command": "npx"
    }
  }
}

Reviews

No reviews yet

Be the first to review this server!

Agent Trust Oracle MCP Server - ERC-8004 agent trust scores via x402: free preview + paid | MCP Marketplace