Skip to content

eu.vokko/vokko

by vokko.eu · remote · no sign-in to list tools · v0.1.9 · published by eu.vokko

Multi-protocol capability index: lookup, live refresh, pay-preflight, endpoint health.

Final · 1Changes · 8

13 tools: 1 do something that can't be undone, 8 change things and 4 only read.

Scanned Oct 21, 2026

No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http vokko https://www.vokko.eu/api/v1/mcp

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

13 tools

Can't be undone 1Claude Code: ask
  • pay_preflightCan an agent pay at this host?No findings

    Why it is in this group

    • The name "pay_preflight" says "pay": a word that usually means money moves, which cannot be taken back.
    Description, as the server wrote it
    Can an agent pay at this host? Rails, endpoint, price, freshness. Unpaid calls return HTTP 402 at $0.001 USDC. Same resource URL as the REST route.
Changes things 8Claude Code: ask
  • endpoint_healthIs this paid API up, and what does it charge right now?No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Is this paid API up, and what does it charge right now? Unpaid calls return HTTP 402 at $0.001 USDC. Same resource URL as the REST route.
  • participation_checkCached participation status and evidence.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Cached participation status and evidence. Not a legal finding.
  • payto_checkDoes this payTo address belong to the domain?No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Does this payTo address belong to the domain? Evidence, not a guarantee. Unpaid calls return HTTP 402 at $0.002 USDC. Same resource URL as the REST route.
  • refresh_hostPaid live re-probe named by lookup_host refresh.rest.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Paid live re-probe named by lookup_host refresh.rest. Unpaid calls return HTTP 402 with x402Version and accepts. Price matches refresh.priceUsd ($0.02 USDC on Base by default). Vokko never pays the target.
  • refresh_host_protocolPaid live probe of one protocol.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Paid live probe of one protocol. Args domain, protocol (ucp, mcp, a2a, x402, and the other detector ids). Unpaid calls return HTTP 402 at $0.005 USDC on Base. Full-host refresh_host stays $0.02.
  • refresh_hosts_batchPaid live re-probe of up to 10 hosts.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Paid live re-probe of up to 10 hosts. Args domains (string array) and mode "full". Unpaid calls return one HTTP 402. Price is $0.01 + $0.002 × N USDC on Base.
  • seller_trustObservational x402 seller trust score for a payTo and network.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Observational x402 seller trust score for a payTo and network. Unpaid calls return HTTP 402 at $0.001 USDC. Same resource URL as the REST route.
  • verify_receiptDid this USDC transfer settle to the expected address and amount?No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Did this USDC transfer settle to the expected address and amount? Unpaid calls return HTTP 402 at $0.001 USDC. Same resource URL as the REST route.
Only reads 4Claude Code: allow
  • find_payableAlphabetical hosts whose index row includes x402.No findings

    Why it is in this group

    • The name "find_payable" says "find": a word for reading.
    Description, as the server wrote it
    Alphabetical hosts whose index row includes x402. Evidence only. Not a rank and not a payable proof.
  • find_providerCheapest live x402 providers for a task.No findings

    Why it is in this group

    • The name "find_provider" says "find": a word for reading.
    Description, as the server wrote it
    Cheapest live x402 providers for a task. Placement is never sold. Unpaid calls return HTTP 402 at $0.005 USDC. Same resource URL as the REST route.
  • list_changesNewest-first drift.No findings

    Why it is in this group

    • The name "list_changes" says "list": a word for reading.
    Description, as the server wrote it
    Newest-first drift. Anonymous: last 5 summaries. Subscriber for that origin: full history.
  • lookup_hostCached host report.No findings

    Why it is in this group

    • The name "lookup_host" says "lookup": a word for reading.
    Description, as the server wrote it
    Cached host report. Free. Does not 402. Body includes cache.presenceStale, cache.callabilityStale, and refresh (payable live re-probe: priceUsd, network, rest.url, mcp.tool refresh_host). Does not re-probe.

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.1.9. Values in angle brackets are yours to fill in.

claude mcp add --transport http vokko https://www.vokko.eu/api/v1/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__vokko__lookup_host",
      "mcp__vokko__list_changes",
      "mcp__vokko__find_payable",
      "mcp__vokko__find_provider"
    ],
    "ask": [
      "mcp__vokko__refresh_host",
      "mcp__vokko__participation_check",
      "mcp__vokko__refresh_host_protocol",
      "mcp__vokko__refresh_hosts_batch",
      "mcp__vokko__pay_preflight",
      "mcp__vokko__endpoint_health",
      "mcp__vokko__payto_check",
      "mcp__vokko__verify_receipt",
      "mcp__vokko__seller_trust"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as vokko. Review it before you use it.