Skip to content

Wever Pay Open Exchange Public Beta

by weverpay.com · remote · no sign-in to list tools · v1.1.1 · published by com.weverpay

Open Base Sepolia testnet exchange for autonomous buyer and seller agents, with signed receipts.

Deletes · 4Final · 6Changes · 17
CompareRegistry entry

50 tools: 4 can delete or cancel things, 6 do something that can't be undone, 17 change things and 23 only read.

Scanned Oct 21, 2026

14 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http public-testnet-alpha https://wever-pay-agent-mesh-phase5-staging.quiet-salad-e96e.workers.dev/mcp

Findings

Matches of fixed checks, with the text they matched.

3 warn11 info
Show 8 more findings

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

50 tools

Deletes or cancels 4Claude Code: deny
  • refund_paymentRefund a sale from the participant's owned seller wallet through existing fee-reversal rules.No findings

    Why it is in this group

    • The name "refund_payment" says "refund": a word that usually means money moves, which cannot be taken back.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Refund a sale from the participant's owned seller wallet through existing fee-reversal rules.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • openWorldHint: true
  • request_withdrawalTransfer available test-USDC out of an owned wallet only to its verified EVM-bound address.No findings

    Why it is in this group

    • The name "request_withdrawal" says "request": a word for a change.
    • The name "request_withdrawal" also says "withdrawal": a word that usually means money moves, which cannot be taken back.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Transfer available test-USDC out of an owned wallet only to its verified EVM-bound address.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • openWorldHint: true
  • revoke_owner_mandateApply an owner-signed mandate revocation.No findings

    Why it is in this group

    • The name "revoke_owner_mandate" says "revoke": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Apply an owner-signed mandate revocation.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • openWorldHint: false
  • revoke_participant_credentialRevoke the authenticated agent's active participant credential without operator intervention.2 findings

    Why it is in this group

    • The name "revoke_participant_credential" says "revoke": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).

    Findings

    • Info

      The title mentions "Credential".

      Matched text

      title: "Revoke Participant Credential"

      What this check looks for
    • Info

      The description mentions "credential".

      Matched text

      description: "...uthenticated agent's active participant credential without operator intervention. Revocati..."

      What this check looks for
    Description, as the server wrote it
    Revoke the authenticated agent's active participant credential without operator intervention. Revocation is idempotent and cannot affect another agent's credential.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • openWorldHint: true
Can't be undone 6Claude Code: ask
  • fulfill_commerce_purchaseFulfill one paid dynamic purchase exactly once with a seller-signed Ed25519 artifact.No findings

    Why it is in this group

    • The name "fulfill_commerce_purchase" says "purchase": a word that usually means money moves, which cannot be taken back.
    Description, as the server wrote it
    Fulfill one paid dynamic purchase exactly once with a seller-signed Ed25519 artifact. The output schema is validated, seller proceeds and the existing fee are settled, and a network-signed economic receipt is issued.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • openWorldHint: false
  • purchase_commerce_servicePurchase a dynamically admitted service with an owned wallet through the existing direct-payment and ledger authority.No findings

    Why it is in this group

    • The name "purchase_commerce_service" says "purchase": a word that usually means money moves, which cannot be taken back.
    Description, as the server wrote it
    Purchase a dynamically admitted service with an owned wallet through the existing direct-payment and ledger authority. Exact replay returns the same purchase and payment.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • openWorldHint: false
  • recover_authorized_purchaseResume an owned uncertain purchase through the existing durable recovery path.No findings

    Why it is in this group

    • The name "recover_authorized_purchase" says "purchase": a word that usually means money moves, which cannot be taken back.
    Description, as the server wrote it
    Resume an owned uncertain purchase through the existing durable recovery path.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • openWorldHint: true
  • recover_commerce_purchaseResume an uncertain buyer authorization with the same purchase identity and economic idempotency key, without creating a second charge.No findings

    Why it is in this group

    • The name "recover_commerce_purchase" says "purchase": a word that usually means money moves, which cannot be taken back.
    Description, as the server wrote it
    Resume an uncertain buyer authorization with the same purchase identity and economic idempotency key, without creating a second charge.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • openWorldHint: false
  • request_paymentCreate a bounded test-USDC request payable by one named participant agent.No findings

    Why it is in this group

    • The name "request_payment" says "request": a word for a change.
    • The name "request_payment" also says "payment": a word that usually means money moves, which cannot be taken back.
    Description, as the server wrote it
    Create a bounded test-USDC request payable by one named participant agent.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • openWorldHint: false
  • send_paymentTransfer bounded available test-USDC from any participant-owned wallet, including legitimately available seller proceeds, using the existing payment engine.No findings

    Why it is in this group

    • The name "send_payment" says "send": a word for sending, and what is sent cannot be taken back.
    Description, as the server wrote it
    Transfer bounded available test-USDC from any participant-owned wallet, including legitimately available seller proceeds, using the existing payment engine.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • openWorldHint: false
Changes things 17Claude Code: ask
  • claim_external_depositClaim a completed external Base Sepolia USDC transfer for an owned wallet.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Claim a completed external Base Sepolia USDC transfer for an owned wallet. The exchange derives and verifies the bound EVM source, exact asset transfer, amount, recipient, and unique transaction before canonical ledger credit.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • openWorldHint: true
  • complete_participant_registrationProve Ed25519 key control, create or replay the canonical exchange account, and activate one scoped credential generation.3 findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    Findings

    • Info

      The description mentions "credential".

      Matched text

      description: "...change account, and activate one scoped credential generation."

      What this check looks for
    • Info

      The input schema at properties.completion.properties.requestedScopes.items.enum[17] mentions "credential".

      Matched text

      inputSchema.properties.completion.properties.requestedScopes.items.enum[17]: "credential:revoke"

      What this check looks for
    • Info

      The input schema at properties.completion.properties.requestedScopes.allOf[1].contains.const mentions "credential".

      Matched text

      inputSchema.properties.completion.properties.requestedScopes.allOf[1].contains.const: "credential:revoke"

      What this check looks for
    Description, as the server wrote it
    Prove Ed25519 key control, create or replay the canonical exchange account, and activate one scoped credential generation.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • openWorldHint: true
  • create_walletCreate or bind a permitted BUYER or SELLER wallet for the authenticated agent after EVM ownership proof.No findings

    Why it is in this group

    • The name "create_wallet" says "create": a word for a change.
    Description, as the server wrote it
    Create or bind a permitted BUYER or SELLER wallet for the authenticated agent after EVM ownership proof. Published limits apply per verified identity, never globally.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • openWorldHint: true
  • discover_assurance_servicesDiscover signed-offer commerce assurance services.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Discover signed-offer commerce assurance services.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • execute_authorized_purchaseExecute a signed agent purchase automatically within a standing mandate.No findings

    Why it is in this group

    • The name "execute_authorized_purchase" says "execute": a word for a change.
    Description, as the server wrote it
    Execute a signed agent purchase automatically within a standing mandate.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • openWorldHint: true
  • generate_client_configurationGenerate a credential-free MCP or A2A connection configuration for a supported agent client.2 findings

    Why it is in this group

    • The name "generate_client_configuration" says "generate": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Info

      The description mentions "credential".

      Matched text

      description: "Generate a credential-free MCP or A2A connection configuratio..."

      What this check looks for
    • Warn

      The server marks "generate_client_configuration" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"openWorldHint":false}; The name "generate_client_configuration" says "generate": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Generate a credential-free MCP or A2A connection configuration for a supported agent client.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • inspect_commerce_serviceInspect one existing commerce directory service.1 finding

    Why it is in this group

    • The name "inspect_commerce_service" says "inspect": a word for reading.
    • The server marks it as not read-only (readOnlyHint: false).

    Findings

    • Warn

      The server marks "inspect_commerce_service" as not read-only (readOnlyHint: false), and its words say it reads.

      Matched text

      annotations: {"readOnlyHint":false,"destructiveHint":false,"openWorldHint":false}; The name "inspect_commerce_service" says "inspect": a word for reading.

      What this check looks for
    Description, as the server wrote it
    Inspect one existing commerce directory service.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • openWorldHint: false
  • issue_signed_offerIssue an official x402 signed offer with Payment Identifier support.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Issue an official x402 signed offer with Payment Identifier support.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • openWorldHint: true
  • register_commerce_serviceAutomatically admit a versioned service into the existing commerce directory and Commerce Index after bounded JSON Schema draft 2020-12, examples, price, endpoint, content hash, se…1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    Findings

    • Info

      The input schema at properties.service.properties.resourceLocation.description mentions "credentials".

      Matched text

      inputSchema.properties.service.properties.resourceLocation.description: "...lic default-port HTTPS endpoint without credentials, fragment, private literal host, or loc..."

      What this check looks for
    Description, as the server wrote it
    Automatically admit a versioned service into the existing commerce directory and Commerce Index after bounded JSON Schema draft 2020-12, examples, price, endpoint, content hash, seller, payout, and fulfillment-key validation. No seller approval is required.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • openWorldHint: true
  • register_owner_mandateRegister a reusable owner-signed mandate for autonomous agent execution.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Register a reusable owner-signed mandate for autonomous agent execution.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • openWorldHint: true
  • report_compatibilityRecord a bounded client compatibility result as external-unclassified unless separately verified as organic.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Record a bounded client compatibility result as external-unclassified unless separately verified as organic.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • openWorldHint: true
  • request_commerce_refundCreate a durable buyer refund request for a paid dynamic purchase.No findings

    Why it is in this group

    • The name "request_commerce_refund" says "request": a word for a change.
    Description, as the server wrote it
    Create a durable buyer refund request for a paid dynamic purchase. The seller resolves it through the existing seller-authorized refund_payment tool and fee-reversal ledger rules.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • openWorldHint: false
  • request_participant_challengeRequest a five-minute server-signed Ed25519 challenge for any schema-valid agent.external.2 findings

    Why it is in this group

    • The name "request_participant_challenge" says "request": a word for a change.

    Findings

    • Info

      The input schema at properties.registrationRequest.properties.requestedScopes.items.enum[17] mentions "credential".

      Matched text

      inputSchema.properties.registrationRequest.properties.requestedScopes.items.enum[17]: "credential:revoke"

      What this check looks for
    • Info

      The input schema at properties.registrationRequest.properties.requestedScopes.allOf[1].contains.const mentions "credential".

      Matched text

      inputSchema.properties.registrationRequest.properties.requestedScopes.allOf[1].contains.const: "credential:revoke"

      What this check looks for
    Description, as the server wrote it
    Request a five-minute server-signed Ed25519 challenge for any schema-valid agent.external. registration through automated cryptographic challenge-response.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • openWorldHint: true
  • request_testnet_fundingRequest an automated bounded Base Sepolia test-USDC grant for an owned BUYER wallet when treasury and per-identity policy allow.No findings

    Why it is in this group

    • The name "request_testnet_funding" says "request": a word for a change.
    Description, as the server wrote it
    Request an automated bounded Base Sepolia test-USDC grant for an owned BUYER wallet when treasury and per-identity policy allow. Funding is optional and an unavailable grant does not block enrollment, external funding, or receiving value.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • openWorldHint: true
  • search_commerce_servicesSearch the existing commerce directory with bounded filters.1 finding

    Why it is in this group

    • The name "search_commerce_services" says "search": a word for reading.
    • The server marks it as not read-only (readOnlyHint: false).

    Findings

    • Warn

      The server marks "search_commerce_services" as not read-only (readOnlyHint: false), and its words say it reads.

      Matched text

      annotations: {"readOnlyHint":false,"destructiveHint":false,"openWorldHint":false}; The name "search_commerce_services" says "search": a word for reading.

      What this check looks for
    Description, as the server wrote it
    Search the existing commerce directory with bounded filters.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • openWorldHint: false
  • verify_economic_receiptVerify the network Ed25519 signature and digest of an authorized canonical dynamic-commerce or completed-withdrawal receipt.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Verify the network Ed25519 signature and digest of an authorized canonical dynamic-commerce or completed-withdrawal receipt.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • verify_portable_bundleIndependently verify an x402 and Wever assurance artifact bundle.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Independently verify an x402 and Wever assurance artifact bundle.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
Only reads 23Claude Code: allow
  • discover_commerce_indexRead the signed receipt-backed Wever Commerce Index manifest.No findings

    Why it is in this group

    • The description's first verb is "read": a word for reading.
    Description, as the server wrote it
    Read the signed receipt-backed Wever Commerce Index manifest.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_balanceRead available and pending test-USDC for one owned wallet.No findings

    Why it is in this group

    • The name "get_balance" says "get": a word for reading.
    Description, as the server wrote it
    Read available and pending test-USDC for one owned wallet.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_commerce_purchase_statusRead an authorized buyer or seller view of one dynamic purchase, fulfillment state, signed receipt, and next recovery action.No findings

    Why it is in this group

    • The name "get_commerce_purchase_status" says "get": a word for reading.
    Description, as the server wrote it
    Read an authorized buyer or seller view of one dynamic purchase, fulfillment state, signed receipt, and next recovery action.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_commerce_receiptRead an existing canonical commerce receipt involving an owned buyer or seller wallet.No findings

    Why it is in this group

    • The name "get_commerce_receipt" says "get": a word for reading.
    Description, as the server wrote it
    Read an existing canonical commerce receipt involving an owned buyer or seller wallet.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_connection_bundleRetrieve the universal signed Wever Pay connection bundle.No findings

    Why it is in this group

    • The name "get_connection_bundle" says "get": a word for reading.
    Description, as the server wrote it
    Retrieve the universal signed Wever Pay connection bundle.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_connection_healthRead sanitized distribution, connection, and organic-use status.No findings

    Why it is in this group

    • The name "get_connection_health" says "get": a word for reading.
    Description, as the server wrote it
    Read sanitized distribution, connection, and organic-use status.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_discovery_manifestRead the signed manifest connecting Wever Pay identities, endpoints, protocols, payment networks, and verification instructions.No findings

    Why it is in this group

    • The name "get_discovery_manifest" says "get": a word for reading.
    Description, as the server wrote it
    Read the signed manifest connecting Wever Pay identities, endpoints, protocols, payment networks, and verification instructions.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_economic_historyRead portable verified economic history for an agent.No findings

    Why it is in this group

    • The name "get_economic_history" says "get": a word for reading.
    Description, as the server wrote it
    Read portable verified economic history for an agent.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_external_funding_instructionsRead the exact Base Sepolia test-USDC transfer and claim instructions for an owned wallet.No findings

    Why it is in this group

    • The name "get_external_funding_instructions" says "get": a word for reading.
    Description, as the server wrote it
    Read the exact Base Sepolia test-USDC transfer and claim instructions for an owned wallet. This does not move or credit value.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_network_metricsRead public-safe discovery, commerce, verification, recovery, and availability metrics.No findings

    Why it is in this group

    • The name "get_network_metrics" says "get": a word for reading.
    Description, as the server wrote it
    Read public-safe discovery, commerce, verification, recovery, and availability metrics.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_participant_accountInspect the authenticated participant's canonical exchange account.No findings

    Why it is in this group

    • The name "get_participant_account" says "get": a word for reading.
    Description, as the server wrote it
    Inspect the authenticated participant's canonical exchange account.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_participant_registration_requirementsRead the active isolated Base Sepolia participant contract, canonical exchange registration authority, lifecycle state, activation prerequisites, policy, credentials, wallets, fund…1 finding

    Why it is in this group

    • The name "get_participant_registration_requirements" says "get": a word for reading.

    Findings

    • Info

      The description mentions "credentials".

      Matched text

      description: "...tate, activation prerequisites, policy, credentials, wallets, funding, service admission, c..."

      What this check looks for
    Description, as the server wrote it
    Read the active isolated Base Sepolia participant contract, canonical exchange registration authority, lifecycle state, activation prerequisites, policy, credentials, wallets, funding, service admission, commerce, receipts, withdrawal, and recovery rules.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_paymentRead a payment for which the participant owns the buyer or seller wallet.No findings

    Why it is in this group

    • The name "get_payment" says "get": a word for reading.
    Description, as the server wrote it
    Read a payment for which the participant owns the buyer or seller wallet.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_payment_requestRead a payment request owned by or explicitly addressed to the authenticated participant.No findings

    Why it is in this group

    • The name "get_payment_request" says "get": a word for reading.
    Description, as the server wrote it
    Read a payment request owned by or explicitly addressed to the authenticated participant.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_purchase_recovery_statusInspect durable recovery state for an owned Payment Identifier.No findings

    Why it is in this group

    • The name "get_purchase_recovery_status" says "get": a word for reading.
    Description, as the server wrote it
    Inspect durable recovery state for an owned Payment Identifier.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_sandbox_access_requirementsRead the testnet-only authentication, standing-mandate, and verification requirements without issuing credentials.1 finding

    Why it is in this group

    • The name "get_sandbox_access_requirements" says "get": a word for reading.

    Findings

    • Info

      The description mentions "credentials".

      Matched text

      description: "...rification requirements without issuing credentials."

      What this check looks for
    Description, as the server wrote it
    Read the testnet-only authentication, standing-mandate, and verification requirements without issuing credentials.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_testnet_funding_statusRead the authenticated participant's automated funding grant, canonical deposit, provider-transfer state, ledger projection, and machine-readable WAIT_FOR_RECONCILIATION, RETRY_SAM…No findings

    Why it is in this group

    • The name "get_testnet_funding_status" says "get": a word for reading.
    Description, as the server wrote it
    Read the authenticated participant's automated funding grant, canonical deposit, provider-transfer state, ledger projection, and machine-readable WAIT_FOR_RECONCILIATION, RETRY_SAME_REQUEST, USE_EXTERNAL_FUNDING, or RECOVERY_REQUIRED action without starting another transfer.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_verified_offerInspect one indexed service and its verified provenance.No findings

    Why it is in this group

    • The name "get_verified_offer" says "get": a word for reading.
    Description, as the server wrote it
    Inspect one indexed service and its verified provenance.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_verified_providerInspect one signed provider identity and its verified offers.No findings

    Why it is in this group

    • The name "get_verified_provider" says "get": a word for reading.
    Description, as the server wrote it
    Inspect one signed provider identity and its verified offers.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_walletRead one wallet owned by the authenticated participant.No findings

    Why it is in this group

    • The name "get_wallet" says "get": a word for reading.
    Description, as the server wrote it
    Read one wallet owned by the authenticated participant.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_withdrawal_statusRead one withdrawal and its canonical provider-transfer, ledger status, and machine-readable WAIT_FOR_RECONCILIATION, RETRY_SAME_REQUEST, or RECOVERY_REQUIRED action after proving …No findings

    Why it is in this group

    • The name "get_withdrawal_status" says "get": a word for reading.
    Description, as the server wrote it
    Read one withdrawal and its canonical provider-transfer, ledger status, and machine-readable WAIT_FOR_RECONCILIATION, RETRY_SAME_REQUEST, or RECOVERY_REQUIRED action after proving ownership of the source wallet.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • list_transactionsRead bounded ledger history for one owned wallet.No findings

    Why it is in this group

    • The name "list_transactions" says "list": a word for reading.
    Description, as the server wrote it
    Read bounded ledger history for one owned wallet.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • search_verified_offersFilter independently verified offers by policy and history.No findings

    Why it is in this group

    • The name "search_verified_offers" says "search": a word for reading.
    Description, as the server wrote it
    Filter independently verified offers by policy and history.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.1.1. Values in angle brackets are yours to fill in.

claude mcp add --transport http public-testnet-alpha https://wever-pay-agent-mesh-phase5-staging.quiet-salad-e96e.workers.dev/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__public-testnet-alpha__get_discovery_manifest",
      "mcp__public-testnet-alpha__get_network_metrics",
      "mcp__public-testnet-alpha__get_connection_bundle",
      "mcp__public-testnet-alpha__get_connection_health",
      "mcp__public-testnet-alpha__get_sandbox_access_requirements",
      "mcp__public-testnet-alpha__discover_commerce_index",
      "mcp__public-testnet-alpha__search_verified_offers",
      "mcp__public-testnet-alpha__get_verified_offer",
      "mcp__public-testnet-alpha__get_verified_provider",
      "mcp__public-testnet-alpha__get_purchase_recovery_status",
      "mcp__public-testnet-alpha__get_economic_history",
      "mcp__public-testnet-alpha__get_participant_registration_requirements",
      "mcp__public-testnet-alpha__get_participant_account",
      "mcp__public-testnet-alpha__get_wallet",
      "mcp__public-testnet-alpha__get_balance",
      "mcp__public-testnet-alpha__list_transactions",
      "mcp__public-testnet-alpha__get_external_funding_instructions",
      "mcp__public-testnet-alpha__get_testnet_funding_status",
      "mcp__public-testnet-alpha__get_payment_request",
      "mcp__public-testnet-alpha__get_payment",
      "mcp__public-testnet-alpha__get_commerce_purchase_status",
      "mcp__public-testnet-alpha__get_commerce_receipt",
      "mcp__public-testnet-alpha__get_withdrawal_status"
    ],
    "ask": [
      "mcp__public-testnet-alpha__generate_client_configuration",
      "mcp__public-testnet-alpha__report_compatibility",
      "mcp__public-testnet-alpha__discover_assurance_services",
      "mcp__public-testnet-alpha__register_owner_mandate",
      "mcp__public-testnet-alpha__issue_signed_offer",
      "mcp__public-testnet-alpha__execute_authorized_purchase",
      "mcp__public-testnet-alpha__recover_authorized_purchase",
      "mcp__public-testnet-alpha__verify_portable_bundle",
      "mcp__public-testnet-alpha__request_participant_challenge",
      "mcp__public-testnet-alpha__complete_participant_registration",
      "mcp__public-testnet-alpha__create_wallet",
      "mcp__public-testnet-alpha__claim_external_deposit",
      "mcp__public-testnet-alpha__request_testnet_funding",
      "mcp__public-testnet-alpha__request_payment",
      "mcp__public-testnet-alpha__send_payment",
      "mcp__public-testnet-alpha__register_commerce_service",
      "mcp__public-testnet-alpha__search_commerce_services",
      "mcp__public-testnet-alpha__inspect_commerce_service",
      "mcp__public-testnet-alpha__purchase_commerce_service",
      "mcp__public-testnet-alpha__fulfill_commerce_purchase",
      "mcp__public-testnet-alpha__recover_commerce_purchase",
      "mcp__public-testnet-alpha__request_commerce_refund",
      "mcp__public-testnet-alpha__verify_economic_receipt"
    ],
    "deny": [
      "mcp__public-testnet-alpha__revoke_owner_mandate",
      "mcp__public-testnet-alpha__revoke_participant_credential",
      "mcp__public-testnet-alpha__refund_payment",
      "mcp__public-testnet-alpha__request_withdrawal"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as public-testnet-alpha. Review it before you use it.