Skip to content

Popdot AI

by popdot.ai · remote · local (npm) · no sign-in to list tools · v2.0.0 · published by ai.popdot

Rent verified subdomains by the hour, day, or month. Free 24h trials, x402 USDC on Base.

Changes · 5
CompareRegistry entry

7 tools: 5 change things and 2 only read.

Scanned Oct 21, 2026

1 check matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http popdot https://popdot.ai/api/mcp

Findings

Matches of fixed checks, with the text they matched.

1 info
  • Inforent_domain

    The description mentions "Credential".

    Matched text

    description: "...ive the live rental plus a Web Identity Credential. Request an x402 payment challenge to r..."

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

7 tools

Changes things 5Claude Code: ask
  • answer_trial_canaryAnswer the short safety questions for a trial opened by try_domain, then go live.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Answer the short safety questions for a trial opened by try_domain, then go live. Pass the trialHandle and your answers; on a clean pass this provisions a live 24-hour subdomain and returns a one-time claim token you can redeem for your own agent identity.

    Annotations the server declares

    • readOnlyHint: false
    • openWorldHint: true
  • check_availabilityCheck whether a specific subdomain is available on a given domain.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Check whether a specific subdomain is available on a given domain. Returns true if the subdomain can be rented. Tip: the subdomain and domain read as one phrase, so pick a single lowercase label that is funny or fits the domain's theme (for example iamyour.slopmommy.com or analien.lostmyluggage.com). A delightful combination is the point of a Popdot AI address.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • rent_domainRent a subdomain, paying per-transaction with USDC on Base (x402).1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    Findings

    • Info

      The description mentions "Credential".

      Matched text

      description: "...ive the live rental plus a Web Identity Credential. Request an x402 payment challenge to r..."

      What this check looks for
    Description, as the server wrote it
    Rent a subdomain, paying per-transaction with USDC on Base (x402). No funded account or stored balance: each rental is a single on-chain payment. Requires agent authentication. Two phases: call once with intentMandateId, domainId, subdomain, duration, and the payerAddress + payerProof for the wallet you will pay from, to get the exact x402 payment challenge; pay it on Base; then call again with paymentId, txHash, and fromAddress to settle and receive the live rental plus a Web Identity Credential. Request an x402 payment challenge to rent a subdomain. Durations PT1H, PT4H, P1D, P7D, P30D. Returns the exact USDC amount and recipient on Base.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • try_domainLaunch a memorable public URL for something you built.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Launch a memorable public URL for something you built. Free for 24 hours, no signup and no wallet required. Tell it your goal and an https target to point the address at; it opens a trial, asks a short safety question or two, and on a clean pass returns a live subdomain plus a one-time claim token you can redeem for your own agent identity. Use it to demo a deployment with a real address before a paid rental. One trial per agent. Expires in 24 hours.

    Annotations the server declares

    • readOnlyHint: false
    • openWorldHint: true
  • upgrade_trialTurn a free trial into your own paid, persistent address in one call, no human required.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Turn a free trial into your own paid, persistent address in one call, no human required. Claim the agent identity your trial created (a Nascent Sigil, its sigilId came back when the trial went live) by proving you hold your Ed25519 key: send the one-time claimToken, the sigilId, your publicKey, a Unix timestamp and a signature by your key over popdot-claim/1\n{timestamp}\n{sigilId}\n{sha256 hex of claimToken}\n{publicKey}. The claim token works until 30 days after the trial ends. If you supply a wallet, this also returns the exact USDC-on-Base (x402) challenge to keep the trial's exact URL live on a paid rental. No wallet yet? You still get your identity; fund a USDC wallet on Base later and pay it yourself.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
Only reads 2Claude Code: allow
  • get_price_quoteGet a price quote for renting a specific domain for a given duration.No findings

    Why it is in this group

    • The name "get_price_quote" says "get": a word for reading.
    Description, as the server wrote it
    Get a price quote for renting a specific domain for a given duration. Returns the computed rental cost, tier info, and pricing breakdown.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • search_domainsSearch domains available for rent on Popdot AI.No findings

    Why it is in this group

    • The name "search_domains" says "search": a word for reading.
    Description, as the server wrote it
    Search domains available for rent on Popdot AI. Use this when an agent needs a web address: a verifiable web identity, a temporary deployment address, or a persistent web presence. Returns domains with pricing, tier, and availability. No auth required.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 2.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http popdot https://popdot.ai/api/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__popdot__search_domains",
      "mcp__popdot__get_price_quote"
    ],
    "ask": [
      "mcp__popdot__try_domain",
      "mcp__popdot__answer_trial_canary",
      "mcp__popdot__check_availability",
      "mcp__popdot__rent_domain",
      "mcp__popdot__upgrade_trial"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as popdot. Review it before you use it.