← MCP Security Catalog

Cinderwright 1.3.0

npm · cinderwright-mcp-server · latest release

Verified with no proven findings
Security result
14
Observed tools
30
Version rating
Change risk

Independent inventory

Observed 2026-08-22T07:10:22.591Z using mcpSecurity-inventory. Protocol 2025-06-18.

ToolCategoryRisk
agent_checkCheck if an agent wallet is registered and authorized for a specific service category. Free - service providers use this before accepting payment.
Input schema
{
  "type": "object",
  "properties": {
    "wallet": {
      "type": "string",
      "description": "Agent wallet address (0x...)"
    },
    "category": {
      "type": "string",
      "description": "Service category to check (optional)"
    },
    "amount": {
      "type": "number",
      "description": "Transaction amount to check against spending limits (optional)"
    }
  },
  "required": [
    "wallet"
  ]
}
compareCompare agent payment services side by side with quality grades. Costs $0.02 from proxy balance if CW_KEY is set.
Input schema
{
  "type": "object",
  "properties": {
    "capability": {
      "type": "string",
      "description": "Service capability to compare (e.g. weather, translate, llm)"
    },
    "sort_by": {
      "type": "string",
      "enum": [
        "quality",
        "price",
        "speed"
      ],
      "description": "Sort order (default: quality)"
    }
  },
  "required": [
    "capability"
  ]
}
discoverSearch for agent payment services by keyword across 2,811+ x402, MPP, and Lightning services. Free to search. If CW_KEY is set, results include proxy_hint with ready-to-use proxy_call commands.
Input schema
{
  "type": "object",
  "properties": {
    "query": {
      "type": "string",
      "description": "Search keyword (e.g. weather, translate, bitcoin price, sentiment)"
    },
    "protocol": {
      "type": "string",
      "enum": [
        "x402",
        "mpp",
        "l402"
      ],
      "description": "Filter by protocol (optional)"
    },
    "max_price": {
      "type": "number",
      "description": "Maximum price filter in USD (optional)"
    }
  },
  "required": [
    "query"
  ]
}
findIntent-based discovery. Describe what you need and get the best service recommendation. Costs $0.02 from proxy balance if CW_KEY is set, otherwise returns payment instructions.
Input schema
{
  "type": "object",
  "properties": {
    "intent": {
      "type": "string",
      "description": "What you need in plain English (e.g. \"cheap weather API for Tokyo under $0.02\")"
    }
  },
  "required": [
    "intent"
  ]
}
pricesGet market pricing intelligence. Average, median, min, and max prices across the ecosystem with category breakdowns.
Input schema
{
  "type": "object",
  "properties": {}
}
protocolsGet cross-protocol breakdown: x402 (Coinbase/USDC) vs MPP (Stripe/Tempo) vs L402 (Bitcoin Lightning). Shows service count and description for each protocol.
Input schema
{
  "type": "object",
  "properties": {}
}
proxy_balanceCheck your Cinderwright proxy account balance, recent calls, and spending history. Requires CW_KEY env var.
Input schema
{
  "type": "object",
  "properties": {}
}
proxy_callCall any indexed x402 service directly by URL. Cinderwright handles the payment and returns the result. Good when you already know the service URL from discover. Requires CW_KEY env var.
Input schema
{
  "type": "object",
  "properties": {
    "url": {
      "type": "string",
      "description": "Full URL of the x402 service endpoint (e.g. https://api.example.com/weather?city=Tokyo)"
    },
    "method": {
      "type": "string",
      "enum": [
        "GET",
        "POST"
      ],
      "description": "HTTP method (default: GET)"
    },
    "body": {
      "type": "object",
      "description": "Request body for POST requests (optional)"
    },
    "max_cost_usd": {
      "type": "number",
      "description": "Maximum cost you'll pay in USD (default: no limit)"
    }
  },
  "required": [
    "url"
  ]
}
proxy_doDescribe a task in plain English and Cinderwright finds the right service, pays for it, and returns the result. No x402 knowledge needed. Examples: "get the Bitcoin price", "weather in Tokyo", "translate hello to Japanese", "summarize this text: ...". Costs the service price + 10% markup from your proxy balance. Requires CW_KEY env var.
Input schema
{
  "type": "object",
  "properties": {
    "task": {
      "type": "string",
      "description": "What you need in plain English (e.g. \"current Bitcoin price\", \"weather in London\", \"translate hello world to Spanish\")"
    },
    "max_cost_usd": {
      "type": "number",
      "description": "Maximum cost you'll pay in USD (default: 0.10)"
    },
    "context": {
      "type": "string",
      "description": "Optional extra context for the task (e.g. text to translate or summarize)"
    }
  },
  "required": [
    "task"
  ]
}
proxy_setupCreate a Cinderwright proxy account to call any indexed service without handling x402 payments yourself. Returns your API key and deposit instructions. Deposit USDC on Base to fund your account.
Input schema
{
  "type": "object",
  "properties": {
    "wallet": {
      "type": "string",
      "description": "Your Base wallet address (0x...) - deposits from this address auto-credit your balance"
    }
  },
  "required": [
    "wallet"
  ]
}
qualityGet service quality grades. Cinderwright tests services weekly and grades them A-F on reachability, payment compliance, and response time.
Input schema
{
  "type": "object",
  "properties": {}
}
statsGet ecosystem statistics for the agent payments economy. Returns total services indexed across x402, MPP, and Lightning protocols.
Input schema
{
  "type": "object",
  "properties": {}
}
submitSubmit your x402, MPP, or Lightning service for free indexing. Crawled and health-checked daily.
Input schema
{
  "type": "object",
  "properties": {
    "url": {
      "type": "string",
      "description": "Your service URL (e.g. https://your-api.com)"
    },
    "name": {
      "type": "string",
      "description": "Service name"
    },
    "description": {
      "type": "string",
      "description": "What your service does"
    }
  },
  "required": [
    "url"
  ]
}
trendsGet what agents and developers are searching for in the discovery hub.
Input schema
{
  "type": "object",
  "properties": {}
}

Resources 0

Resource templates 0

Prompts 0

Changes from previous version

No completed comparison is available.

RiskChangeSubject
No material changes recorded.

Confirmed vulnerabilities

SeverityFindingAdvisory
No confirmed vulnerability is published for this version.

Provenance

Artifact SHA-256: 9637d72c96fb7f9bc1e6ac5f8ef090e3fe33d3d6fd0eca500fc543774502aa63

Scanner: mcp-proof-engine 0.1.0.

Let’s talk about MCP security.

Share your details and our security team will contact you.