gage
by gage.cash · remote · local (npm) · no sign-in to list tools · v1.3.0 · published by cash.gage
Fixed-cost loans on Robinhood Chain: quotes, and each transaction unsigned for your own wallet.
15 tools: 1 can delete or cancel things, 13 change things and 1 only read.
Scanned Oct 21, 2026
- Deletes or cancels1Claude Code: deny: see these tools
- Can't be undone0Claude Code: ask
- Changes things13Claude Code: ask: see these tools
- Only reads1Claude Code: allow: see these tools
1 check matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http gage https://mcp.gage.cash/mcp?via=registryFindings
Matches of fixed checks, with the text they matched.
The server marks "gage_prepare_cancel" not destructive (destructiveHint: false), and its own name, description or input give the class "destructive".
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "gage_prepare_cancel" says "cancel": a word for removing or ending something.
Tools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
15 tools
Deletes or cancels 1Claude Code: deny
gage_prepare_cancelPrepare cancelling a loan still waiting for funding and taking its collateral back.1 finding
Why it is in this group
- The name "gage_prepare_cancel" says "cancel": a word for removing or ending something.
- The server marks it not destructive (destructiveHint: false), but an annotation never lowers a class.
Findings
- Warn
The server marks "gage_prepare_cancel" not destructive (destructiveHint: false), and its own name, description or input give the class "destructive".
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "gage_prepare_cancel" says "cancel": a word for removing or ending something.
Description, as the server wrote it Prepare cancelling a loan still waiting for funding and taking its collateral back. Returns the next unsigned transaction and a review link; never signs.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
Changes things 13Claude Code: ask
gage_assetsTokens gage takes as collateral now: each one's minimum pledge, its most per loan where one is set (maxPerLoan, null where there is none), whether leverage buys it and its Borrow l…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Tokens gage takes as collateral now: each one's minimum pledge, its most per loan where one is set (maxPerLoan, null where there is none), whether leverage buys it and its Borrow link on gage.cash; a row names the lend asset it is borrowed in, once there is more than USDG.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
gage_borrow_quoteThe largest loan the partner vaults fund now for at most maxCollateral of a token, or one exact loan (collateral and principal) priced as gage.cash prices it, in USDG or the lend a…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it The largest loan the partner vaults fund now for at most maxCollateral of a token, or one exact loan (collateral and principal) priced as gage.cash prices it, in USDG or the lend asset named, with a prepare object for gage_prepare_borrow.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
gage_capabilitiesChain, contracts, allowed loan terms, fees, the rules and any lend assets besides USDG.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Chain, contracts, allowed loan terms, fees, the rules and any lend assets besides USDG. Start here.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
gage_earn_vaultsThe partner vaults that lend: tokens, fees, size, free cash, share value and each one's link on gage.cash.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it The partner vaults that lend: tokens, fees, size, free cash, share value and each one's link on gage.cash.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
gage_loanOne loan: state, amounts, deadlines, what can be done with it now (here, or on gage.cash for an action this server does not serve), its standing instruction to roll by itself, and …No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it One loan: state, amounts, deadlines, what can be done with it now (here, or on gage.cash for an action this server does not serve), its standing instruction to roll by itself, and what closed it (a roll or a cash-out).
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
gage_portfolioA wallet's loans (each one's sGAGE to claim, raw, and whether it rolls by itself), Earn holdings and credits (USDG, and each lend asset's apart).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it A wallet's loans (each one's sGAGE to claim, raw, and whether it rolls by itself), Earn holdings and credits (USDG, and each lend asset's apart).
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
gage_prepare_borrowPrepare a loan: pledge a token, receive USDG (or the lend asset named by lendAsset), repay a fixed amount of it within the term.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Prepare a loan: pledge a token, receive USDG (or the lend asset named by lendAsset), repay a fixed amount of it within the term. Use the prepare object of gage_borrow_quote, without its action. Returns the next unsigned transaction and a review link; never signs.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
gage_prepare_collectPrepare collecting what is ready here: USDG and lend assets from loans, collateral back, vault earnings and the sGAGE of loans and partner vaults; a claim that would revert now is …No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Prepare collecting what is ready here: USDG and lend assets from loans, collateral back, vault earnings and the sGAGE of loans and partner vaults; a claim that would revert now is left out, and said. The first vault's credits and claims, earlier engines' lender recoveries, retired Earn strategies and the GAGE/sGAGE pool's rewards and Drip are collected on gage.cash. Returns the next unsigned transaction and a review link; never signs.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
gage_prepare_earn_depositPrepare a deposit into a partner vault (lending), in the asset the vault takes: USDG, or its lend asset.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Prepare a deposit into a partner vault (lending), in the asset the vault takes: USDG, or its lend asset. Returns the next unsigned transaction and a review link; never signs.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
gage_prepare_earn_redeemPrepare withdrawing from a partner vault, everything it can pay when shares is omitted.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Prepare withdrawing from a partner vault, everything it can pay when shares is omitted. Returns the next unsigned transaction and a review link; never signs.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
gage_prepare_feedbackPrepare rating gage (agent #8845 in ERC-8004) in its Reputation Registry: your own score from 0 to 100, once a wallet, public on chain.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Prepare rating gage (agent #8845 in ERC-8004) in its Reputation Registry: your own score from 0 to 100, once a wallet, public on chain. Optional: gage offers nothing for a rating. Returns the next unsigned transaction and a review link; never signs.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
gage_prepare_leveragePrepare a leveraged loop: the loan buys more of the pledged token in one transaction.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Prepare a leveraged loop: the loan buys more of the pledged token in one transaction. USDG only. Refused above maxCostBps. Returns the next unsigned transaction and a review link; never signs.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
gage_prepare_reclaimPrepare repaying a running loan in full, in the asset it is paid in, and taking the collateral back, before its term ends.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Prepare repaying a running loan in full, in the asset it is paid in, and taking the collateral back, before its term ends. Returns the next unsigned transaction and a review link; never signs.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
Only reads 1Claude Code: allow
gage_leverage_quotePreview a leveraged loop for a pledge and a multiple: amounts, cost and the most the purchase costs.No findings
Why it is in this group
- The description's first verb is "preview": a word for reading.
Description, as the server wrote it Preview a leveraged loop for a pledge and a multiple: amounts, cost and the most the purchase costs. Signs nothing.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 1.3.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http gage https://mcp.gage.cash/mcp?via=registryRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__gage__gage_leverage_quote"
],
"ask": [
"mcp__gage__gage_capabilities",
"mcp__gage__gage_assets",
"mcp__gage__gage_borrow_quote",
"mcp__gage__gage_loan",
"mcp__gage__gage_portfolio",
"mcp__gage__gage_earn_vaults",
"mcp__gage__gage_prepare_borrow",
"mcp__gage__gage_prepare_leverage",
"mcp__gage__gage_prepare_reclaim",
"mcp__gage__gage_prepare_earn_deposit",
"mcp__gage__gage_prepare_earn_redeem",
"mcp__gage__gage_prepare_collect",
"mcp__gage__gage_prepare_feedback"
],
"deny": [
"mcp__gage__gage_prepare_cancel"
]
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as gage. Review it before you use it.