Back to Browse

Toolfi MCP Server

Developer ToolsUse Caution3.2MCP RegistryLocalRemote
Free

Server data from the Official MCP Registry

Open API Marketplace for AI Agents. Crypto data tools with USDC payments on Base.

About

Open API Marketplace for AI Agents. Crypto data tools with USDC payments on Base.

Remote endpoints: streamable-http: https://web-ten-alpha-81.vercel.app/api/mcp

Security Report

3.2
Use Caution3.2High Risk

ToolFi is a DeFi tool marketplace with blockchain payment verification and multiple external API integrations. The codebase has reasonable auth patterns (x402 payment flow with on-chain verification) but exhibits several moderate security concerns: external API calls without request validation, potential sensitive data logging, missing input validation on some endpoints, and Redis credentials in environment variables without explicit secure storage guidance. The server's permissions are appropriate for its purpose (network APIs, blockchain RPC, env vars for credentials), but code quality issues and incomplete input sanitization prevent a higher score. Supply chain analysis found 5 known vulnerabilities in dependencies (0 critical, 4 high severity).

5 files analyzed · 17 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

File System Write

Writes or modifies files on your machine. Check that this is expected for the tool.

process_spawn

Check that this permission is expected for this type of plugin.

How to Install & Connect

Available as Local & Remote

This plugin can run on your machine or connect to a hosted endpoint. during install.

Documentation

View on GitHub

From the project's GitHub README.

ToolFi — API Marketplace for AI Agents

"The next unicorn is an API marketplace for agents... where the right API should be selected by Claude and connected automatically" — @auralix4

API marketplaces exist, but they're built for human developers. ToolFi is built for AI workflows — agents discover, select, and pay for APIs automatically, without human intervention.

🌐 Website · 📡 API · 📜 Contract · 🗺️ Roadmap

The Problem

AI agents need external data (prices, security checks, routes). Current solutions:

  • RapidAPI, etc. — Built for humans. Agents can't browse and click "Subscribe"
  • Hardcoded keys — Security risk, doesn't scale
  • Manual integration — Every new tool needs human setup

The Solution

ToolFi = APIs that agents can discover and use autonomously.

  1. Discovery — Agents find tools via .well-known/mcp.json, MCP registries, semantic search
  2. Selection — Rich descriptions help agents pick the right tool
  3. Payment — USDC on Base, no API keys, just pay and use
  4. Data — Structured responses optimized for LLM consumption

How It Works

Agent → GET /api/price?symbol=ETH
                ↓
Server → 402 Payment Required
         { toolId, price, paymentInstructions }
                ↓
Agent → USDC.approve() → Registry.payForCall(toolId)
                ↓
Agent → Retry with X-Payment-Tx header
                ↓
Server → Verify on-chain → Return data

Available Tools

ToolPriceWhat it does
Crypto Price Oracle0.001 USDCReal-time prices via DexScreener
Rug Pull Scanner0.003 USDCToken security via GoPlus
Bridge Router0.002 USDCCross-chain routes via Li.Fi
DeFi Yield Finder0.002 USDCBest yields via DefiLlama
Swap Router0.002 USDCDEX aggregation via Li.Fi
Trending Coins0.001 USDCWhat's hot via CoinGecko
Protocol TVL0.001 USDCDeFi TVL data via DefiLlama
Gas Tracker0.0005 USDCGas prices for EVM chains
Wallet Risk Scanner0.005 USDCAddress risk analysis
News Digest0.002 USDCCrypto news summary

Integration Options

Option 1: HTTP API (Any Agent)

# Pay on-chain, then call with payment proof
curl -H "X-Payment-Tx: 0x..." "https://toolfi.vercel.app/api/price?symbol=ETH"

Option 2: MCP Server (Claude Desktop)

cd mcp-server
uv venv && source .venv/bin/activate
uv pip install -e .

Add to Claude Desktop config:

{
  "mcpServers": {
    "toolfi": {
      "command": "/path/to/.venv/bin/python",
      "args": ["-m", "src.server"],
      "cwd": "/path/to/mcp-server"
    }
  }
}

Then ask Claude: "Check the security of token 0x... on Base"

For Tool Creators

Publish your API and earn USDC:

cast send $REGISTRY \
  "registerTool(string,string,string,uint256)" \
  "My Tool" "https://api.example.com" "Description" 10000 \
  --rpc-url https://sepolia.base.org --private-key $KEY

Price in 6 decimals: 10000 = $0.01/call

Withdraw earnings:

cast send $REGISTRY "withdraw()" --rpc-url https://sepolia.base.org

Contract

ChainBase Sepolia (84532)
USDC0x036CbD53842c5426634e7929541eC2318f3dCF7e
Registry0x3D6C600799C67b45061eCAbfD5bBF8ef57Dded88

Project Structure

toolfi/
├── api/           # Vercel serverless API
├── web/           # Next.js frontend
├── mcp-server/    # Python MCP server for Claude
├── src/           # Solidity contracts
├── skill/         # OpenClaw skill spec
└── script/        # Deployment scripts

Development

# Contracts
forge build
forge test -v

# API
cd api && npm install && npm start

# MCP Server
cd mcp-server && uv pip install -e . && python -m src.server

Roadmap

  • Core registry contract
  • Web API with 10 tools
  • MCP Server for Claude Desktop
  • Mainnet deployment
  • Creator dashboard
  • Agent SDK (Python/TypeScript)
  • Idempotency keys
  • Usage analytics

License

MIT

Reviews

No reviews yet

Be the first to review this server!