XRPL-Utilities

io.github.XRPL-Utilities/mcpXRPL-Utilitiesstreamable-httpv0.2.233Scanned 59 minutes ago

XRPL data tools for AI agents: wallet classifier, signals, RWA tracker, ETF flows. Pay via x402.

64 tools: 1 do something that can't be undone, 55 change things and 8 only read.

Reads private data · 0
Reads text others write · 0
Can send data out · 1
9 findings

Anlyon alternative

56 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

64 tools

Can't be undone 1Sends, pays, publishes or merges: once done, it cannot be taken back.Claude Code: ask

xrpl_pulse_stream_purchasePaid (tiered: 1h ~$0.50 / 6h ~$2.50 / 24h ~$7.50).No findings
Why it is in this group
- The name "xrpl_pulse_stream_purchase" says "purchase": a word that usually means money moves, which cannot be taken back.
Description, as the server wrote it
Paid (tiered: 1h ~$0.50 / 6h ~$2.50 / 24h ~$7.50). Buy a time-boxed WebSocket subscription to live Pulse events. Returns a stream_token JWT and ws_url. Server-side filtering by source, signal, and min USD is bound into the token at purchase.

Changes things 55Creates or changes something that can be changed back.Claude Code: ask

xrpl_desk_briefingPaid ($0.01 USD).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Paid ($0.01 USD). Composite desk briefing: market posture, headline narrative, positioning (top accumulator/distributor + reversals), RLUSD health (velocity + growth + peg), supply pressure (escrow + relock), RWA market, whale activity, and alerts. One call replaces 6-8 separate tool calls.
xrpl_flows_correlationPaid ($0.01 USD).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Paid ($0.01 USD). Daily ETF AUM vs XRPL exchange-flow delta across the tracked XRP-exposure funds (US spot, US indirect-basket, and European spot tiers) with 7-day rolling Pearson correlation. Correlation only, not causation.
xrpl_flows_cross_border_flowPaid ($0.01 USD).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Paid ($0.01 USD). XRPL cross-border settlement flow: country-pair aggregates (inbound/outbound/net USD), top corridors, and coverage block. Institutional/exchange wallets only.
xrpl_flows_etf_candidatesPaid ($0.01 USD).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Paid ($0.01 USD). XRP fund filings and candidates found in the SEC ticker index that are not yet tracked, with review status.
xrpl_flows_etf_flow_summaryPaid ($0.01 USD).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Paid ($0.01 USD). Daily ETF flow summary: per-ticker AUM with day-over-day delta, growth rate, and aggregate XRP supply share.
xrpl_flows_launch_impactPaid ($0.01 USD).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Paid ($0.01 USD). Per-ETF launch-window analysis: [L-30, L+30] exchange-flow delta and DEX volume around each tracked XRP-exposure ETF launch date.
xrpl_flows_scanPaid ($0.10 USD).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Paid ($0.10 USD). Per-ETF deep dive for any tracked XRP-exposure ETF across three tiers: US spot (XRP/XRPC/XRPZ/GXRP/TOXR/XRPR), US indirect-basket (BITW/GDLC/EZPZ/NCIQ/TTOP/TXBC, XRP-attributable slice only), and European spot (AXRP.SW/WXRP.DE/GXRP.DE). Returns metadata, latest AUM reading, daily history, and on-chain exchange-flow delta.
xrpl_fund_flow_reportPaid ($0.10 USD).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Paid ($0.10 USD). Bundle: are XRP funds growing, and does the ledger agree, in one call and one payment. Fund assets and their change per fund, price moves included (XR-Flows), XRP held by funds, net XRP flow on and off exchanges over the same days, whether the two point the same way, and the rolling correlation (a measurement, not a causal claim). Returns summary, key_numbers and sections; each section says ok, stale or unreadable.
xrpl_ledger_schemaFree.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Free. XR-Ledger response schema: request fields, every statement field and its meaning, and the payment rails the paid statement accepts.
xrpl_ledger_statementPaid ($0.10 USD, RLUSD or XRP on XRPL, or USDC on Base).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Paid ($0.10 USD, RLUSD or XRP on XRPL, or USDC on Base). Account statement for 1-10 XRPL addresses rolled into one: monthly periods with XRP in/out/net, fees, activity categories, per-token net change (exact decimal strings), top counterparties and plain-English statement lines.
xrpl_permissioned_venue_reportPaid ($0.10 USD).1 finding
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Findings
- Info
  The description mentions "credentials".
  Matched text
  description: "...r profile (name, jurisdiction, domains, credentials outstanding, 24h permissioned offers, A..."
  What this check looks for
Description, as the server wrote it
Paid ($0.10 USD). Bundle: who runs an XRPL permissioned domain (XLS-80) and is it active, in one call and one payment. XR-Trust operator profile (name, jurisdiction, domains, credentials outstanding, 24h permissioned offers, AMM events and traders), attribution and the latest domain activity. Give operator or domain_id. Unknown operator or domain returns 404 and is not charged. Running a domain is not a compliance certification.
xrpl_pulse_cex_attributionPaid ($0.01 USD).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Paid ($0.01 USD). CEX attribution walker findings: backward-walked payment chains ending at named exchanges. Hop count, total USD, anchor and terminal labels; specific addresses not exposed.
xrpl_pulse_entity_positioningPaid ($0.01 USD).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Paid ($0.01 USD). Per-entity (exchange, treasury, MM) accumulation vs distribution scoring from labeled whale events with daily breakdown. net_usd is the objective balance delta (inflow minus outflow); net_direction is holder-centric and role-aware (accumulation = XRP leaving the liquid market, i.e. exchange withdrawals or a treasury/MM pulling XRP in).
xrpl_pulse_escrow_calendarPaid ($0.01 USD).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Paid ($0.01 USD). Forward-looking Ripple XRP escrow release calendar with monthly unlock schedule, relock history, and net release rate.
xrpl_pulse_events_by_addressPaid ($0.10 USD).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Paid ($0.10 USD). Pulse events referencing a specific XRPL address (whale, sentinel signal, news, permissioned-domain). Complements xrpl_sentinel_scan with event history.
xrpl_pulse_exchange_flow_deltaPaid ($0.01 USD).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Paid ($0.01 USD). Per-UTC-day series of net XRPL exchange flow: inbound, outbound, net, and settlement volume. Same series used in XR-Flows ETF correlation.
xrpl_pulse_exchange_net_flowPaid ($0.01 USD).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Paid ($0.01 USD). Per-exchange directional net flow from labeled whale events. Inflow/outflow/net per named exchange with trend and market positioning flag. Holder-centric sign: net_flow_usd = outflow minus inflow, so positive = XRP leaving the exchange (off-exchange accumulation), negative = XRP arriving (distribution).
xrpl_pulse_moex_xrp_indexPaid ($0.01 USD).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Paid ($0.01 USD). Moscow Exchange XRP index: latest value and daily history.
xrpl_pulse_network_statsFree.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Free. XRPL network summary: funded addresses, trustline count, offer count, 24h active addresses, and snapshot freshness.
xrpl_pulse_recent_choreographiesPaid ($0.01 USD).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Paid ($0.01 USD). Recent coordinated institutional move patterns on XRPL: groups of linked payments that happen together.
xrpl_pulse_recent_eventsPaid ($0.10 USD).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Paid ($0.10 USD). Most-recent XRPL signal events newest-first. Mixes news, whale activity, permissioned-domain lifecycle, Sentinel signals, and RWA issuer flows. Filterable by kind, time range, and min whale USD.
xrpl_pulse_ripple_counterpartiesPaid ($0.01 USD).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Paid ($0.01 USD). Anonymized Ripple-counterparty auto-discovery and relay-burst detector findings. Score-tier and funding-source distributions; specific wallet addresses not exposed.
xrpl_pulse_ripple_counterparty_graphPaid ($0.01 USD).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Paid ($0.01 USD). Two-hop graph built from the Ripple counterparty queue: nodes and edges for wallets Ripple's operational wallets pay and where that XRP goes next.
xrpl_pulse_ripple_topologyPaid ($0.01 USD).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Paid ($0.01 USD). Ripple ecosystem topology map: Source (treasury/issuer/escrow wallets), Pipeline (curated middle layer by role), and Exits (named CEX hot wallets).
xrpl_pulse_rlusd_distributionPaid ($0.01 USD).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Paid ($0.01 USD). RLUSD mint-to-CEX distribution: where Ripple's freshly-minted RLUSD goes. Splits outgoing RLUSD from the distribution wallet into by_exchange (named venue), to_labeled_non_exchange (transit hops, consolidators, MMs), and unattributed, with to_exchange_pct + a mint_context block. Corrects reading a fresh RLUSD mint as XRP sell-pressure: RLUSD routed to an exchange is institutional stablecoin provisioning. Amounts are RLUSD face value (USD-pegged ~$1).
xrpl_pulse_rwa_summaryPaid ($0.01 USD).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Paid ($0.01 USD). Cross-issuer RWA rollup: obligations, net-circulating supply, trustline count, 24h mint/burn flow, and AMM pool exposure per tracked issuer.
xrpl_pulse_rwa_supply_historyPaid ($0.01 USD).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Paid ($0.01 USD). Daily supply change per tracked real-world-asset issuer on XRPL, in each token's own units.
xrpl_pulse_token_healthPaid ($0.01 USD).No findings
Why it is in this group
- The input takes a statement or command to run (input.code), which can change anything it can reach.
Description, as the server wrote it
Paid ($0.01 USD). Per-token health scores for top 200 XRPL tokens: sovereignty, distribution, liquidity, transparency, demand pipeline. Each dimension 0-10 with green/yellow/red. Filter by issuer wallet or currency code.
xrpl_pulse_top_destinationsPaid ($0.01 USD).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Paid ($0.01 USD). Wallets receiving XRP from several watched source wallets, ranked by how many distinct sources pay them.
xrpl_pulse_whale_censusPaid ($0.01 USD).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Paid ($0.01 USD). XRP whale census: every account holding 1M+ XRP, size bands, holder categories, the top 100 by balance and one history point per day. Refreshed every 6 hours; stale=true when the latest count is over a day old.
xrpl_pulse_whale_flow_24hPaid ($0.01 USD).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Paid ($0.01 USD). Trailing 24h whale Payment aggregate: total USD, tx count, top labels, per-currency breakdown. No specific addresses returned.
xrpl_pulse_whale_flow_historyPaid ($0.01 USD).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Paid ($0.01 USD). Daily whale and institutional USD flow history on XRPL, one row per UTC day.
xrpl_pulse_xls85_totalsPaid ($0.01 USD).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Paid ($0.01 USD). Token escrow (XLS-85) event counts: all time, last 7 days and last 24 hours, raw and with high-rate issuers removed, plus distinct issuers.
xrpl_pulse_xrpl_primitivesPaid ($0.01 USD).1 finding
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Findings
- Info
  The description mentions "Credential".
  Matched text
  description: "...XRPL object counts: PermissionedDomain, Credential, DID, Oracle, MPTokenIssuance, AMM, Esc..."
  What this check looks for
Description, as the server wrote it
Paid ($0.01 USD). Ledger-wide XRPL object counts: PermissionedDomain, Credential, DID, Oracle, MPTokenIssuance, AMM, Escrow, DepositPreauth, Check, PayChannel, NFTokenPage and more, plus canonical XRP supply (total, burned, escrowed, circulating) and AMM aggregates. This is the denominator for any XRPL adoption claim: counts are of ledger OBJECTS, not of distinct operators or issuers. Sampled once per UTC day, with day-over-day, 7d and 30d deltas and the full series.
xrpl_rwa_token_reportPaid ($0.15 USD).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Paid ($0.15 USD). Bundle: is a tokenized real-world asset on the XRP Ledger growing, and who holds it, in one call and one payment. Supply, holders (trustlines), 7 and 30-day growth and top-holder share from the XR-Pulse RWA tracker, 30 days of daily supply changes, tracked AMM pools, the issuer's XR-Trust permissioned-domain role and a 90-day XR-Ledger statement of the issuer wallet. Amounts are in the token's own unit. Returns summary, key_numbers and sections. An issuer that is not tracked returns 404 and is not charged.
xrpl_sentinel_scanPaid ($0.10 USD).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Paid ($0.10 USD). Classify an XRPL wallet by on-chain activity pattern. Returns activity_score (0-100), activity_level, confidence, behavioral signals, top counterparties, and AI reasoning.
xrpl_sentinel_scan_historyPaid ($0.10 USD).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Paid ($0.10 USD). Return up to 25 prior recorded scans for an address to read score trajectory over time.
xrpl_sentinel_verify_originFree.Can send data outNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
What it can reach
- outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.
Description, as the server wrote it
Free. Before paying an unfamiliar x402 seller, check whether the origin actually controls the XRPL account it advertises. Cross-checks the domain's .well-known/xrp-ledger.toml against each account's on-ledger Domain field (two-way - either half alone is one party's self-assertion), the XLS-40 DID and whether it carries a real verification key or is a placeholder, and whether every payTo in the served x402 catalog is one the domain itself declares. That last check is the one a swapped catalog fails, because an attacker cannot edit the toml without already owning the domain. Pass address= instead of url= to ask what an ACCOUNT's claimed identity rests on - the only way to test a brand asserted in MPT metadata, which nothing validates. Verdicts: verified / partial / unverified / unreadable / mismatch. An unfetchable document returns unreadable, never a negative finding. Verifies published identity bindings only; not an endorsement of the operator, product or solvency.
xrpl_telemetry_dex_pair_volumePaid ($0.01 USD).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Paid ($0.01 USD). Per-pair DEX volume on XRPL: 24h and 7d volume, fill counts, orderbook vs AMM source split, and annualized run rate.
xrpl_telemetry_exchange_flow_historyPaid ($0.01 USD).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Paid ($0.01 USD). Per-exchange daily XRP flow series on XRPL: inbound, outbound and net per venue per day.
xrpl_telemetry_liquidityPaid ($0.01 USD).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Paid ($0.01 USD). XRP supply and liquidity headline: circulating, escrowed, AMM-locked and exchange-held XRP, on-ledger liquidity, modeled exchange depth, Active Float, measured free float and execution slippage per pair.
xrpl_telemetry_settlement_seriesPaid ($0.01 USD).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Paid ($0.01 USD). Bucketed XRPL settlement volume time-series (daily / weekly / monthly) with USD totals, payment counts, XRP drops, and RLUSD value per bucket. Newest first, UTC-aligned. For charting or change-point detection.
xrpl_telemetry_settlement_totalsFree.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Free. XRPL settlement volume rollup: 24h/7d/30d USD volume across XRP and RLUSD, annualized run rate, and payment counts.
xrpl_trust_credential_issuersPaid ($0.10 USD).1 finding
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Findings
- Info
  The description mentions "credential".
  Matched text
  description: "Paid ($0.10 USD). All credential issuers across PermissionedDomains: add..."
  What this check looks for
Description, as the server wrote it
Paid ($0.10 USD). All credential issuers across PermissionedDomains: address, label, referencing domain count, and credential types issued. Use limit and offset to page; omit limit for every issuer.
xrpl_trust_jurisdictionsPaid ($0.01 USD).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Paid ($0.01 USD). Jurisdiction rollup across XRPL's permissioned stack: per-country operator and issuer counts with an unattributed bucket.
xrpl_trust_operator_attributionPaid ($0.01 USD).1 finding
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Findings
- Info
  The description mentions "credential".
  Matched text
  description: "...issionedDomain operator: parent funder, credential types, gated assets, plain-English summ..."
  What this check looks for
Description, as the server wrote it
Paid ($0.01 USD). Institutional attribution for one PermissionedDomain operator: parent funder, credential types, gated assets, plain-English summary, and confidence tier.
xrpl_trust_operator_drilldownPaid ($0.10 USD).1 finding
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Findings
- Info
  The description mentions "credentials".
  Matched text
  description: "...e PermissionedDomain operator: domains, credentials, jurisdiction, DID identity, institutio..."
  What this check looks for
Description, as the server wrote it
Paid ($0.10 USD). Deep dive on one PermissionedDomain operator: domains, credentials, jurisdiction, DID identity, institutional issuers, and lifecycle events.
xrpl_trust_permissioned_activityPaid ($0.01 USD).1 finding
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Findings
- Info
  The description mentions "credential".
  Matched text
  description: "...n ledger activity: XLS-70/80 domain and credential lifecycle, XLS-81 permissioned-DEX offe..."
  What this check looks for
Description, as the server wrote it
Paid ($0.01 USD). Newest-first feed of permissioned-domain ledger activity: XLS-70/80 domain and credential lifecycle, XLS-81 permissioned-DEX offers and AMM ops, and Payments made inside a domain. Consecutive same-account quote runs are collapsed into one row with a count, because a market maker replacing its own offers as the reference price moves is one behaviour, not hundreds of events - that churn is ~94% of raw permissioned-DEX volume and is normal market making, not an anomaly. Filter with category=lifecycle to see only domain and credential changes, which are the rare institutional signal. Carries a rollup of the whole window so the churn is visible as a proportion.
xrpl_trust_recent_eventsPaid ($0.01 USD).1 finding
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Findings
- Info
  The description mentions "credential".
  Matched text
  description: "...e event stream: domain creates/deletes, credential activity, permissioned offers and AMM e..."
  What this check looks for
Description, as the server wrote it
Paid ($0.01 USD). XLS-70/80/81 lifecycle event stream: domain creates/deletes, credential activity, permissioned offers and AMM events. Cursor-paginated.
xrpl_trust_usage_summaryPaid ($0.01 USD).1 finding
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Findings
- Info
  The description mentions "credential".
  Matched text
  description: "...ggregate: domain count, operator count, credential and market event totals over a configur..."
  What this check looks for
Description, as the server wrote it
Paid ($0.01 USD). Ecosystem-wide PermissionedDomain activity aggregate: domain count, operator count, credential and market event totals over a configurable window.
xrpl_vault_daily_flowFree sample.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Free sample. Cross-issuer daily RWA flow for the last 7 days at most: mint/burn event counts per day and the dollar-pegged net inflow. For up to 90 days with issuer wallets and candidates use xrpl_vault_daily_flow_history.
xrpl_vault_daily_flow_historyPaid ($0.01 USD).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Paid ($0.01 USD). Cross-issuer daily RWA flow for up to 90 days: mint/burn event counts per day, dollar-pegged net inflow, per-issuer series in native units, each tracked issuer's wallets and the auto-discovered issuer candidates.
xrpl_vault_scanPaid ($0.10 USD).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Paid ($0.10 USD). Per-issuer RWA deep dive: supply, mint/burn flow, AMM exposure, and daily history. Accepts wallet address, issuer label, or currency code.
xrpl_wallet_checkPaid ($0.25 USD).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Paid ($0.25 USD). Bundle: who an XRPL wallet is and what it has been doing, in one call and one payment. Combines the XR-Sentinel activity scan (with change since the previous scan and narrative), a domain check, XR-Pulse events for the address, a 90-day XR-Ledger statement and the wallet's XR-Trust permissioned-domain role. Returns summary, key_numbers and sections; each section says ok, stale or unreadable. Not charged if the main scan fails.
xrpl_xrp_market_briefingPaid ($0.05 USD).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Paid ($0.05 USD). Bundle: what is moving the XRP market today, in one call and one payment. Market posture and headline, whale count (1M+ XRP wallets) and its change, exchange net flow, entity positioning, Ripple escrow calendar, XRP fund holdings (XR-Flows) and on-ledger sell impact for $1M, $10M and $100M (XR-Telemetry). Returns summary, key_numbers and sections; each section says ok, stale or unreadable.

Only reads 8Looks things up and changes nothing.Show 8 read-only tools

xrpl_network_snapshotPaid ($0.10 USD).No findings
Why it is in this group
- The name "xrpl_network_snapshot" says "snapshot": a word for reading.
Description, as the server wrote it
Paid ($0.10 USD). Bundle: how big and how busy the XRP Ledger is, in one call and one payment. Funded accounts and daily active accounts and transactions with 7 and 30-day changes, ledger object counts, XRP supply (circulating, escrowed, burned), XRP and RLUSD payment volume (XR-Telemetry) and on-ledger sell impact. Returns summary, key_numbers and sections; each section says ok, stale or unreadable.
xrpl_telemetry_get_quotePaid flow step 1 ($0.10 USD total).No findings
Why it is in this group
- The name "xrpl_telemetry_get_quote" says "get": a word for reading.
Description, as the server wrote it
Paid flow step 1 ($0.10 USD total). Start async invoice flow: returns invoice_id, payTo address, deepLink, QR, and expiry. Pay via XRPL Payment, then poll get_status, then call get_results.
xrpl_telemetry_get_resultsPaid flow step 3 (no extra charge).No findings
Why it is in this group
- The name "xrpl_telemetry_get_results" says "get": a word for reading.
Description, as the server wrote it
Paid flow step 3 (no extra charge). Fetch full Telemetry snapshot payload once invoice is paid. Same shape as xrpl_telemetry_snapshot.
xrpl_telemetry_get_statusPaid flow step 2 (no extra charge).No findings
Why it is in this group
- The name "xrpl_telemetry_get_status" says "get": a word for reading.
Description, as the server wrote it
Paid flow step 2 (no extra charge). Poll invoice status from get_quote. Returns paid (bool), amount, ledger_index, and expiry.
xrpl_telemetry_snapshotPaid ($0.10 USD).No findings
Why it is in this group
- The name "xrpl_telemetry_snapshot" says "snapshot": a word for reading.
Description, as the server wrote it
Paid ($0.10 USD). One-shot XRPL macro snapshot: supply breakdown, liquidity flows, AMM state, derived Active Float model, and utility floor price. Pass sections to get only some blocks.
xrpl_trust_get_domainPaid ($0.10 USD).No findings
Why it is in this group
- The name "xrpl_trust_get_domain" says "get": a word for reading.
Description, as the server wrote it
Paid ($0.10 USD). Deep dive on one PermissionedDomain by 64-hex ID: lifecycle history, permissioned market activity (XLS-81), and DID/TOML identity.
xrpl_trust_list_domainsPaid ($0.10 USD).1 finding
Why it is in this group
- The name "xrpl_trust_list_domains" says "list": a word for reading.
Findings
- Info
  The description mentions "credentials".
  Matched text
  description: "...objects on mainnet with owner, accepted credentials, and institutional issuer counts. Pagin..."
  What this check looks for
Description, as the server wrote it
Paid ($0.10 USD). List all XRPL PermissionedDomain (XLS-80) objects on mainnet with owner, accepted credentials, and institutional issuer counts. Paginated.
xrpl_trust_list_operators_indexFree.No findings
Why it is in this group
- The name "xrpl_trust_list_operators_index" says "list": a word for reading.
Description, as the server wrote it
Free. Index of all PermissionedDomain operators: address, label, jurisdiction, status, domain count, issuer count. Paginated.

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged private-data or untrusted-input.

Reads private data0: Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write0: Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
Can send data out1: Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.; xrpl_sentinel_verify_origin

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

9 info

Infoxrpl_pulse_xrpl_primitives
The description mentions "Credential".
Matched text
description: "...XRPL object counts: PermissionedDomain, Credential, DID, Oracle, MPTokenIssuance, AMM, Esc..."
What this check looks for
Infoxrpl_permissioned_venue_report
The description mentions "credentials".
Matched text
description: "...r profile (name, jurisdiction, domains, credentials outstanding, 24h permissioned offers, A..."
What this check looks for
Infoxrpl_trust_list_domains
The description mentions "credentials".
Matched text
description: "...objects on mainnet with owner, accepted credentials, and institutional issuer counts. Pagin..."
What this check looks for
Infoxrpl_trust_credential_issuers
The description mentions "credential".
Matched text
description: "Paid ($0.10 USD). All credential issuers across PermissionedDomains: add..."
What this check looks for
Infoxrpl_trust_recent_events
The description mentions "credential".
Matched text
description: "...e event stream: domain creates/deletes, credential activity, permissioned offers and AMM e..."
What this check looks for
Infoxrpl_trust_operator_drilldown
The description mentions "credentials".
Matched text
description: "...e PermissionedDomain operator: domains, credentials, jurisdiction, DID identity, institutio..."
What this check looks for

Show 3 more findings

Infoxrpl_trust_operator_attribution
The description mentions "credential".
Matched text
description: "...issionedDomain operator: parent funder, credential types, gated assets, plain-English summ..."
What this check looks for
Infoxrpl_trust_usage_summary
The description mentions "credential".
Matched text
description: "...ggregate: domain count, operator count, credential and market event totals over a configur..."
What this check looks for
Infoxrpl_trust_permissioned_activity
The description mentions "credential".
Matched text
description: "...n ledger activity: XLS-70/80 domain and credential lifecycle, XLS-81 permissioned-DEX offe..."
What this check looks for

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 0.2.233. Values in angle brackets are yours to fill in.

claude mcp add --transport http xrpl-utilities https://mcp.xrpl-utilities.io/mcp

claude mcp add --transport http xrpl-utilities https://mcp.xrpl-utilities.io/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__xrpl-utilities__xrpl_network_snapshot",
      "mcp__xrpl-utilities__xrpl_telemetry_snapshot",
      "mcp__xrpl-utilities__xrpl_telemetry_get_quote",
      "mcp__xrpl-utilities__xrpl_telemetry_get_status",
      "mcp__xrpl-utilities__xrpl_telemetry_get_results",
      "mcp__xrpl-utilities__xrpl_trust_list_domains",
      "mcp__xrpl-utilities__xrpl_trust_get_domain",
      "mcp__xrpl-utilities__xrpl_trust_list_operators_index"
    ],
    "ask": [
      "mcp__xrpl-utilities__xrpl_sentinel_scan",
      "mcp__xrpl-utilities__xrpl_sentinel_scan_history",
      "mcp__xrpl-utilities__xrpl_sentinel_verify_origin",
      "mcp__xrpl-utilities__xrpl_pulse_recent_events",
      "mcp__xrpl-utilities__xrpl_pulse_events_by_address",
      "mcp__xrpl-utilities__xrpl_pulse_stream_purchase",
      "mcp__xrpl-utilities__xrpl_pulse_ripple_counterparties",
      "mcp__xrpl-utilities__xrpl_pulse_ripple_topology",
      "mcp__xrpl-utilities__xrpl_pulse_cex_attribution",
      "mcp__xrpl-utilities__xrpl_pulse_network_stats",
      "mcp__xrpl-utilities__xrpl_pulse_xrpl_primitives",
      "mcp__xrpl-utilities__xrpl_pulse_whale_flow_24h",
      "mcp__xrpl-utilities__xrpl_pulse_exchange_flow_delta",
      "mcp__xrpl-utilities__xrpl_pulse_rwa_summary",
      "mcp__xrpl-utilities__xrpl_pulse_exchange_net_flow",
      "mcp__xrpl-utilities__xrpl_pulse_escrow_calendar",
      "mcp__xrpl-utilities__xrpl_pulse_entity_positioning",
      "mcp__xrpl-utilities__xrpl_pulse_rlusd_distribution",
      "mcp__xrpl-utilities__xrpl_desk_briefing",
      "mcp__xrpl-utilities__xrpl_wallet_check",
      "mcp__xrpl-utilities__xrpl_xrp_market_briefing",
      "mcp__xrpl-utilities__xrpl_rwa_token_report",
      "mcp__xrpl-utilities__xrpl_fund_flow_report",
      "mcp__xrpl-utilities__xrpl_permissioned_venue_report",
      "mcp__xrpl-utilities__xrpl_pulse_token_health",
      "mcp__xrpl-utilities__xrpl_pulse_whale_census",
      "mcp__xrpl-utilities__xrpl_pulse_whale_flow_history",
      "mcp__xrpl-utilities__xrpl_pulse_rwa_supply_history",
      "mcp__xrpl-utilities__xrpl_pulse_xls85_totals",
      "mcp__xrpl-utilities__xrpl_pulse_ripple_counterparty_graph",
      "mcp__xrpl-utilities__xrpl_pulse_recent_choreographies",
      "mcp__xrpl-utilities__xrpl_pulse_top_destinations",
      "mcp__xrpl-utilities__xrpl_pulse_moex_xrp_index",
      "mcp__xrpl-utilities__xrpl_telemetry_settlement_totals",
      "mcp__xrpl-utilities__xrpl_telemetry_settlement_series",
      "mcp__xrpl-utilities__xrpl_telemetry_dex_pair_volume",
      "mcp__xrpl-utilities__xrpl_telemetry_liquidity",
      "mcp__xrpl-utilities__xrpl_telemetry_exchange_flow_history",
      "mcp__xrpl-utilities__xrpl_trust_credential_issuers",
      "mcp__xrpl-utilities__xrpl_trust_recent_events",
      "mcp__xrpl-utilities__xrpl_trust_operator_drilldown",
      "mcp__xrpl-utilities__xrpl_trust_operator_attribution",
      "mcp__xrpl-utilities__xrpl_trust_usage_summary",
      "mcp__xrpl-utilities__xrpl_trust_jurisdictions",
      "mcp__xrpl-utilities__xrpl_trust_permissioned_activity",
      "mcp__xrpl-utilities__xrpl_vault_scan",
      "mcp__xrpl-utilities__xrpl_vault_daily_flow",
      "mcp__xrpl-utilities__xrpl_vault_daily_flow_history",
      "mcp__xrpl-utilities__xrpl_flows_scan",
      "mcp__xrpl-utilities__xrpl_flows_correlation",
      "mcp__xrpl-utilities__xrpl_flows_cross_border_flow",
      "mcp__xrpl-utilities__xrpl_flows_launch_impact",
      "mcp__xrpl-utilities__xrpl_flows_etf_flow_summary",
      "mcp__xrpl-utilities__xrpl_flows_etf_candidates",
      "mcp__xrpl-utilities__xrpl_ledger_statement",
      "mcp__xrpl-utilities__xrpl_ledger_schema"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as xrpl-utilities. Review it before you use it.

Capability tags behind 1 rule

mcp__xrpl-utilities__xrpl_sentinel_verify_origin outbound

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/io.github.XRPL-Utilities/mcp/verify?hash=10ce16a98dfba2b00ecbdb1c0ba0fb9304d9d68c344a90ba4f77ffa1c7471000" | jq -e '.changed == false'

Pinned hash 10ce16a98dfb, from Nov 2, 2026, 23:18 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.github.XRPL-Utilities/mcp/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

[![anlyon.dev](https://anlyon.dev/badge/io.github.XRPL-Utilities/mcp.svg)](https://anlyon.dev/servers/io.github.XRPL-Utilities/mcp)

Source: MCP Registry · repository. Synced Nov 2, 2026, 23:17 UTC.