eu. vokko/ vokko
by vokko.eu · remote · no sign-in to list tools · v0.1.9 · published by eu.vokko
Multi-protocol capability index: lookup, live refresh, pay-preflight, endpoint health.
13 tools: 1 do something that can't be undone, 8 change things and 4 only read.
Scanned Oct 21, 2026
- Deletes or cancels0Claude Code: deny
- Can't be undone1Claude Code: ask: see these tools
- Changes things8Claude Code: ask: see these tools
- Only reads4Claude Code: allow: see these tools
No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http vokko https://www.vokko.eu/api/v1/mcpTools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
13 tools
Can't be undone 1Claude Code: ask
pay_preflightCan an agent pay at this host?No findings
Why it is in this group
- The name "pay_preflight" says "pay": a word that usually means money moves, which cannot be taken back.
Description, as the server wrote it Can an agent pay at this host? Rails, endpoint, price, freshness. Unpaid calls return HTTP 402 at $0.001 USDC. Same resource URL as the REST route.
Changes things 8Claude Code: ask
endpoint_healthIs this paid API up, and what does it charge right now?No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Is this paid API up, and what does it charge right now? Unpaid calls return HTTP 402 at $0.001 USDC. Same resource URL as the REST route.
participation_checkCached participation status and evidence.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Cached participation status and evidence. Not a legal finding.
payto_checkDoes this payTo address belong to the domain?No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Does this payTo address belong to the domain? Evidence, not a guarantee. Unpaid calls return HTTP 402 at $0.002 USDC. Same resource URL as the REST route.
refresh_hostPaid live re-probe named by lookup_host refresh.rest.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Paid live re-probe named by lookup_host refresh.rest. Unpaid calls return HTTP 402 with x402Version and accepts. Price matches refresh.priceUsd ($0.02 USDC on Base by default). Vokko never pays the target.
refresh_host_protocolPaid live probe of one protocol.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Paid live probe of one protocol. Args domain, protocol (ucp, mcp, a2a, x402, and the other detector ids). Unpaid calls return HTTP 402 at $0.005 USDC on Base. Full-host refresh_host stays $0.02.
refresh_hosts_batchPaid live re-probe of up to 10 hosts.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Paid live re-probe of up to 10 hosts. Args domains (string array) and mode "full". Unpaid calls return one HTTP 402. Price is $0.01 + $0.002 × N USDC on Base.
seller_trustObservational x402 seller trust score for a payTo and network.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Observational x402 seller trust score for a payTo and network. Unpaid calls return HTTP 402 at $0.001 USDC. Same resource URL as the REST route.
verify_receiptDid this USDC transfer settle to the expected address and amount?No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Did this USDC transfer settle to the expected address and amount? Unpaid calls return HTTP 402 at $0.001 USDC. Same resource URL as the REST route.
Only reads 4Claude Code: allow
find_payableAlphabetical hosts whose index row includes x402.No findings
Why it is in this group
- The name "find_payable" says "find": a word for reading.
Description, as the server wrote it Alphabetical hosts whose index row includes x402. Evidence only. Not a rank and not a payable proof.
find_providerCheapest live x402 providers for a task.No findings
Why it is in this group
- The name "find_provider" says "find": a word for reading.
Description, as the server wrote it Cheapest live x402 providers for a task. Placement is never sold. Unpaid calls return HTTP 402 at $0.005 USDC. Same resource URL as the REST route.
list_changesNewest-first drift.No findings
Why it is in this group
- The name "list_changes" says "list": a word for reading.
Description, as the server wrote it Newest-first drift. Anonymous: last 5 summaries. Subscriber for that origin: full history.
lookup_hostCached host report.No findings
Why it is in this group
- The name "lookup_host" says "lookup": a word for reading.
Description, as the server wrote it Cached host report. Free. Does not 402. Body includes cache.presenceStale, cache.callabilityStale, and refresh (payable live re-probe: priceUsd, network, rest.url, mcp.tool refresh_host). Does not re-probe.
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 0.1.9. Values in angle brackets are yours to fill in.
claude mcp add --transport http vokko https://www.vokko.eu/api/v1/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__vokko__lookup_host",
"mcp__vokko__list_changes",
"mcp__vokko__find_payable",
"mcp__vokko__find_provider"
],
"ask": [
"mcp__vokko__refresh_host",
"mcp__vokko__participation_check",
"mcp__vokko__refresh_host_protocol",
"mcp__vokko__refresh_hosts_batch",
"mcp__vokko__pay_preflight",
"mcp__vokko__endpoint_health",
"mcp__vokko__payto_check",
"mcp__vokko__verify_receipt",
"mcp__vokko__seller_trust"
],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as vokko. Review it before you use it.