Back to Browse

Pulse Verity MCP Server

Developer ToolsModerate6.2MCP RegistryLocal
Free

Server data from the Official MCP Registry

Read-only access to signed, verifiable crypto index prices from the Pulse Verity Index

About

Read-only access to signed, verifiable crypto index prices from the Pulse Verity Index

Security Report

6.2
Moderate6.2Moderate Risk

This is a well-designed read-only MCP server for accessing signed crypto index prices. Authentication is properly implemented via environment variable, permissions are appropriately scoped to read-only API calls, and the code demonstrates strong security practices including cryptographic verification, proper error handling, and intentional API pinning. Minor code quality observations do not materially affect the security posture. Supply chain analysis found 2 known vulnerabilities in dependencies (0 critical, 2 high severity). Package verification found 1 issue.

6 files analyzed · 7 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

What You'll Need

Set these up before or after installing:

Pulse Verity Index developer API key from thepulse.markets/developersRequired

Environment variable: PULSE_API_KEY

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-pulsebet-pulse-verity": {
      "env": {
        "PULSE_API_KEY": "your-pulse-api-key-here"
      },
      "args": [
        "-y",
        "pulse-verity"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

Pulse Verity Index

pulse-verity connects an AI agent to the Pulse Verity Index: signed, verifiable crypto index prices through the Model Context Protocol (MCP).

It exposes exactly three read-only tools:

ToolPurpose
get_index_price(symbol)Return the current signed index value.
get_settlement_print(symbol, at)Return the recorded signed print nearest a moment.
verify_print(print)Verify a print locally with ECDSA and the published public key.

There are no write tools. This package contains no Pulse platform engine code. It only calls the public Pulse Verity Index API. The developer supplies their own API key through PULSE_API_KEY.

Install

Create a developer API key at thepulse.markets/developers, then add the server to your MCP client:

claude mcp add pulse-verity \
  --env PULSE_API_KEY=pidx_your_key_here \
  -- npx -y pulse-verity

For any stdio MCP client:

{
  "mcpServers": {
    "pulse-verity": {
      "command": "npx",
      "args": ["-y", "pulse-verity"],
      "env": { "PULSE_API_KEY": "pidx_your_key_here" }
    }
  }
}

Security boundary

  • Read-only MCP tools only.
  • API origin pinned to the public Pulse Verity Index API.
  • Developer key read from local configuration and sent only to that API.
  • Print verification happens locally using ECDSA P-256/SHA-256.
  • No wallet, account, platform-engine, venue-level, or private repository code.

See SECURITY.md for reporting instructions.

Verify locally

npm ci
npm test

The test suite builds the package, checks signed-print verification and negative cases, and runs the Pulse WORDS vocabulary gate over every emittable string.

Alternate install names

The following functional redirect packages install and run this same server: pulse-verity-index, pulseverityindex, pulseverity, pulse-index, and pulseindex. They are deprecated in npm metadata so new integrations converge on the canonical pulse-verity name.

License

MIT

Reviews

No reviews yet

Be the first to review this server!