Skavio USDC Payment Verification & Proof MCP

by skavio.eu · remote · no sign-in to list tools · v1.1.3 · published by eu.skavio

18 MCP tools: Base + Solana USDC x402 verification, PDF evidence, DNS/TLS, and company AgentTools.

Final · 3Changes · 12

Compare Registry entry

18 tools: 3 do something that can't be undone, 12 change things and 3 only read.

Scanned Oct 21, 2026

Deletes or cancels0Claude Code: deny
Can't be undone3Claude Code: ask: see these tools
Changes things12Claude Code: ask: see these tools
Only reads3Claude Code: allow: see these tools

6 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http paid-micro-apis https://www.skavio.eu/mcp

Findings

Matches of fixed checks, with the text they matched.

5 warn1 info

Warnmatch_native_usdc_payment
The server marks "match_native_usdc_payment" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "match_native_usdc_payment" says "payment": a word that usually means money moves, which cannot be taken back.
What this check looks for
Warnusdc_transfer_evidence_pdf
The server marks "usdc_transfer_evidence_pdf" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "usdc_transfer_evidence_pdf" says "transfer": a word for a change that another call does not undo.
What this check looks for
Warnweb_fetch
The server marks "web_fetch" as not read-only (readOnlyHint: false), and its words say it reads.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "web_fetch" says "fetch": a word for reading.
What this check looks for
Warnweb_extract
The server marks "web_extract" as not read-only (readOnlyHint: false), and its words say it reads.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The description's first verb is "fetch": a word for reading.
What this check looks for
Warnweb_monitor
The server marks "web_monitor" as not read-only (readOnlyHint: false), and its words say it reads.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The description's first verb is "fetch": a word for reading.
What this check looks for
Infodomain_dns_tls_audit
The input schema at properties.domain.description mentions "credentials".
Matched text
inputSchema.properties.domain.description: "...e, for example example.com; no URL, IP, credentials or private host."
What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

18 tools

Can't be undone 3Sends, pays, publishes or merges: once done, it cannot be taken back.Claude Code: ask

match_native_usdc_paymentMatch EXACT final native USDC transfer by public recipient and six-decimal amount on any supported chain; includes strict finality.1 finding
Why it is in this group
- The name "match_native_usdc_payment" says "payment": a word that usually means money moves, which cannot be taken back.
- The input addresses people (input.recipient): what it sends cannot be taken back.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
  The server marks "match_native_usdc_payment" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "match_native_usdc_payment" says "payment": a word that usually means money moves, which cannot be taken back.
  What this check looks for
Description, as the server wrote it
Match EXACT final native USDC transfer by public recipient and six-decimal amount on any supported chain; includes strict finality. $0.03 USDC on Base via x402.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
pdf_mergeMerge two to five PDFs into one document.No findings
Why it is in this group
- The name "pdf_merge" says "merge": a word for a change that another call does not undo.
Description, as the server wrote it
Merge two to five PDFs into one document. Separate authenticated processing relay: requires your Agent Tools Bearer API key and an available catalog operation. Default x402 returns a workload quote; prepaid spends shared company credits. Use the same idempotency_key and inputs on retries. An admitted job is not delivered; poll skavio_agent_job_status then skavio_agent_job_result and verify SHA256. No execution when backend admission is disabled.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
usdc_transfer_evidence_pdfReturn base64-encoded PDF containing public blockchain evidence for a native Circle USDC transfer.1 finding
Why it is in this group
- The name "usdc_transfer_evidence_pdf" says "transfer": a word for a change that another call does not undo.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
  The server marks "usdc_transfer_evidence_pdf" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "usdc_transfer_evidence_pdf" says "transfer": a word for a change that another call does not undo.
  What this check looks for
Description, as the server wrote it
Return base64-encoded PDF containing public blockchain evidence for a native Circle USDC transfer. NOT an invoice. $0.05 USDC on Base via x402.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true

Changes things 12Creates or changes something that can be changed back.Claude Code: ask

audio_transcribeTranscribe bounded audio or video to text.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Transcribe bounded audio or video to text. Separate authenticated processing relay: requires your Agent Tools Bearer API key and an available catalog operation. Default x402 returns a workload quote; prepaid spends shared company credits. Use the same idempotency_key and inputs on retries. An admitted job is not delivered; poll skavio_agent_job_status then skavio_agent_job_result and verify SHA256. No execution when backend admission is disabled.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
document_ocrOCR a scanned document into searchable text.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
OCR a scanned document into searchable text. Separate authenticated processing relay: requires your Agent Tools Bearer API key and an available catalog operation. Default x402 returns a workload quote; prepaid spends shared company credits. Use the same idempotency_key and inputs on retries. An admitted job is not delivered; poll skavio_agent_job_status then skavio_agent_job_result and verify SHA256. No execution when backend admission is disabled.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
domain_dns_tls_auditBounded DNS and TLS certificate audit for a single PUBLIC business hostname.1 finding
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Findings
- Info
  The input schema at properties.domain.description mentions "credentials".
  Matched text
  inputSchema.properties.domain.description: "...e, for example example.com; no URL, IP, credentials or private host."
  What this check looks for
Description, as the server wrote it
Bounded DNS and TLS certificate audit for a single PUBLIC business hostname. Checks public IPs, TLS validity, TLS version and days until certificate expiry. No page scraping, no user-provided URLs, no private IP probing. $0.05 USDC on Base via x402. Input example: example.com. Performs bounded public DNS resolution and one pinned TLS handshake on port 443, no HTTP request. Reports tls_valid, public IPs and certificate details; not a vulnerability scan or trust certification.
invoice_extractExtract structured invoice fields from one document, priced per page with the extraction call included.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Extract structured invoice fields from one document, priced per page with the extraction call included. Separate authenticated processing relay: requires your Agent Tools Bearer API key and an available catalog operation. Default x402 returns a workload quote; prepaid spends shared company credits. Use the same idempotency_key and inputs on retries. An admitted job is not delivered; poll skavio_agent_job_status then skavio_agent_job_result and verify SHA256. No execution when backend admission is disabled.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
pdf_splitSplit a PDF into a selected set of pages.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Split a PDF into a selected set of pages. Separate authenticated processing relay: requires your Agent Tools Bearer API key and an available catalog operation. Default x402 returns a workload quote; prepaid spends shared company credits. Use the same idempotency_key and inputs on retries. An admitted job is not delivered; poll skavio_agent_job_status then skavio_agent_job_result and verify SHA256. No execution when backend admission is disabled.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
pdf_to_textExtract selectable text from a PDF using the audited Skavio engine.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Extract selectable text from a PDF using the audited Skavio engine. Separate authenticated processing relay: requires your Agent Tools Bearer API key and an available catalog operation. Default x402 returns a workload quote; prepaid spends shared company credits. Use the same idempotency_key and inputs on retries. An admitted job is not delivered; poll skavio_agent_job_status then skavio_agent_job_result and verify SHA256. No execution when backend admission is disabled.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
skavio_agent_job_resultDownload your owned completed processing result as base64 with SHA256; no new payment.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Download your owned completed processing result as base64 with SHA256; no new payment. Input result_id must come from your completed owned manifest. Returns data_base64, sha256 and delivered=true, or an explicit error; independently verify the checksum.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
skavio_catalogFree discovery of Skavio paid MCP tools, prices, and networks.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Free discovery of Skavio paid MCP tools, prices, and networks. No access to customer data. Returns four paid prices in USDC, inspection networks, separate processing authentication and activation limits. No call submits a job or spends funds.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
verify_native_usdcVerify a completed native Circle USDC transfer on Base, Polygon, Arbitrum, Optimism, Ethereum, Avalanche or Solana.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Verify a completed native Circle USDC transfer on Base, Polygon, Arbitrum, Optimism, Ethereum, Avalanche or Solana. $0.02 USDC on Base via x402.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
web_extractFetch a public HTTPS page and return only its visible text.1 finding
Why it is in this group
- The description's first verb is "fetch": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
Findings
- Warn
  The server marks "web_extract" as not read-only (readOnlyHint: false), and its words say it reads.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The description's first verb is "fetch": a word for reading.
  What this check looks for
Description, as the server wrote it
Fetch a public HTTPS page and return only its visible text. Separate authenticated processing relay: requires your Agent Tools Bearer API key and an available catalog operation. Default x402 returns a workload quote; prepaid spends shared company credits. Use the same idempotency_key and inputs on retries. An admitted job is not delivered; poll skavio_agent_job_status then skavio_agent_job_result and verify SHA256. No execution when backend admission is disabled.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
web_fetchFetch a public HTTPS document as text, respecting robots.txt and size limits.1 finding
Why it is in this group
- The name "web_fetch" says "fetch": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
Findings
- Warn
  The server marks "web_fetch" as not read-only (readOnlyHint: false), and its words say it reads.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "web_fetch" says "fetch": a word for reading.
  What this check looks for
Description, as the server wrote it
Fetch a public HTTPS document as text, respecting robots.txt and size limits. Separate authenticated processing relay: requires your Agent Tools Bearer API key and an available catalog operation. Default x402 returns a workload quote; prepaid spends shared company credits. Use the same idempotency_key and inputs on retries. An admitted job is not delivered; poll skavio_agent_job_status then skavio_agent_job_result and verify SHA256. No execution when backend admission is disabled.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
web_monitorFetch a public HTTPS page and report its content hash, with an optional change comparison.1 finding
Why it is in this group
- The description's first verb is "fetch": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
Findings
- Warn
  The server marks "web_monitor" as not read-only (readOnlyHint: false), and its words say it reads.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The description's first verb is "fetch": a word for reading.
  What this check looks for
Description, as the server wrote it
Fetch a public HTTPS page and report its content hash, with an optional change comparison. Separate authenticated processing relay: requires your Agent Tools Bearer API key and an available catalog operation. Default x402 returns a workload quote; prepaid spends shared company credits. Use the same idempotency_key and inputs on retries. An admitted job is not delivered; poll skavio_agent_job_status then skavio_agent_job_result and verify SHA256. No execution when backend admission is disabled.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true

Only reads 3Looks things up and changes nothing.Claude Code: allow

skavio_agent_job_statusRead your owned processing job and result manifest; no new payment.No findings
Why it is in this group
- The name "skavio_agent_job_status" says "status": a word for reading.
Description, as the server wrote it
Read your owned processing job and result manifest; no new payment. Input is your original idempotency key. Returns state, reservation, availability and any owned result IDs; only available results may be downloaded.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
skavio_agent_walletRead your authoritative shared credit wallet; no new payment.No findings
Why it is in this group
- The description's first verb is "read": a word for reading.
Description, as the server wrote it
Read your authoritative shared credit wallet; no new payment. Returns balance_credits, available_credits, reserved_credits and USD display strings with ledger_source. It does not fund, reserve, move or spend credits.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
skavio_launch_statusFree production availability status, including explicitly disabled processing functions.No findings
Why it is in this group
- The name "skavio_launch_status" says "status": a word for reading.
Description, as the server wrote it
Free production availability status, including explicitly disabled processing functions. No execution or charge. Returns activation and owner-funded historical payment journal evidence separately from approved pricing and unverified realized profitability.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.1.3. Values in angle brackets are yours to fill in.

claude mcp add --transport http paid-micro-apis https://www.skavio.eu/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__paid-micro-apis__skavio_launch_status",
      "mcp__paid-micro-apis__skavio_agent_job_status",
      "mcp__paid-micro-apis__skavio_agent_wallet"
    ],
    "ask": [
      "mcp__paid-micro-apis__skavio_catalog",
      "mcp__paid-micro-apis__verify_native_usdc",
      "mcp__paid-micro-apis__match_native_usdc_payment",
      "mcp__paid-micro-apis__usdc_transfer_evidence_pdf",
      "mcp__paid-micro-apis__domain_dns_tls_audit",
      "mcp__paid-micro-apis__web_fetch",
      "mcp__paid-micro-apis__web_extract",
      "mcp__paid-micro-apis__web_monitor",
      "mcp__paid-micro-apis__pdf_to_text",
      "mcp__paid-micro-apis__document_ocr",
      "mcp__paid-micro-apis__invoice_extract",
      "mcp__paid-micro-apis__audio_transcribe",
      "mcp__paid-micro-apis__pdf_split",
      "mcp__paid-micro-apis__pdf_merge",
      "mcp__paid-micro-apis__skavio_agent_job_result"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as paid-micro-apis. Review it before you use it.

Keep track

Get told when this server's tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/eu.skavio/paid-micro-apis/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Anlyon alternative

15 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Compare with other servers for the same product.

Source: MCP Registry · repository. Synced Oct 21, 2026, 18:12 UTC.

For agents: Markdown · JSON · report this listing