Vino & Views

by oriondrayke · remote · no sign-in to list tools · v0.8.0 · published by GitHub user oriondrayke

Free reports, EVM/Solana token payment links and capped zero-fee EVM USDC escrow. Wallet signatures.

Final · 8Changes · 14

Compare Registry entry

23 tools: 8 do something that can't be undone, 14 change things and 1 only read.

Scanned Oct 21, 2026

Deletes or cancels0Claude Code: deny
Can't be undone8Claude Code: ask: see these tools
Changes things14Claude Code: ask: see these tools
Only reads1Claude Code: allow: see these tools

4 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http vino-and-views https://api.vinoandviews.online/mcp/

Findings

Matches of fixed checks, with the text they matched.

4 warn

Warnpayment_capabilities
The server marks "payment_capabilities" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "payment_capabilities" says "payment": a word that usually means money moves, which cannot be taken back.
What this check looks for
Warnpayment_request_status
The server marks "payment_request_status" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "payment_request_status" says "payment": a word that usually means money moves, which cannot be taken back.
What this check looks for
Warnprepare_payment
The server marks "prepare_payment" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "prepare_payment" says "payment": a word that usually means money moves, which cannot be taken back.
What this check looks for
Warnsolana_payment_capabilities
The server marks "solana_payment_capabilities" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "solana_payment_capabilities" says "payment": a word that usually means money moves, which cannot be taken back.
What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

23 tools

Can't be undone 8Sends, pays, publishes or merges: once done, it cannot be taken back.Claude Code: ask

create_payment_requestCreate a zero-service-fee allowlisted token request payable to the authenticated wallet.No findings
Why it is in this group
- The name "create_payment_request" says "create": a word for a change.
- The name "create_payment_request" also says "payment": a word that usually means money moves, which cannot be taken back.
Description, as the server wrote it
Create a zero-service-fee allowlisted token request payable to the authenticated wallet. Requires wallet-session Bearer token; reuse operation_id only for identical retries. No funds move. There is no escrow protection for direct payments.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
- readOnlyHint: false
cross_chain_transfer_stepInspect/prepare/reconcile an existing CCTP transfer.No findings
Why it is in this group
- The name "cross_chain_transfer_step" says "transfer": a word for a change that another call does not undo.
Description, as the server wrote it
Inspect/prepare/reconcile an existing CCTP transfer. No signing or broadcast. Steps: status, prepare-burn, burn (source hash), attestation, prepare-mint, mint (destination hash). Preserve the route ID and existing hashes; a source burn is never proof of destination delivery.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
- readOnlyHint: false
payment_capabilitiesSupported EVM chains, allowlisted USDC/USDT/EURC tokens and fees.1 finding
Why it is in this group
- The name "payment_capabilities" says "payment": a word that usually means money moves, which cannot be taken back.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
  The server marks "payment_capabilities" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "payment_capabilities" says "payment": a word that usually means money moves, which cannot be taken back.
  What this check looks for
Description, as the server wrote it
Supported EVM chains, allowlisted USDC/USDT/EURC tokens and fees. No transfer.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
- readOnlyHint: true
payment_request_statusRead payment request details and verified finalized receipt, if any.1 finding
Why it is in this group
- The name "payment_request_status" says "payment": a word that usually means money moves, which cannot be taken back.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
  The server marks "payment_request_status" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "payment_request_status" says "payment": a word that usually means money moves, which cannot be taken back.
  What this check looks for
Description, as the server wrote it
Read payment request details and verified finalized receipt, if any.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
- readOnlyHint: true
prepare_paymentPrepare an unsigned exact-amount allowlisted token transfer.1 finding
Why it is in this group
- The name "prepare_payment" says "payment": a word that usually means money moves, which cannot be taken back.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
  The server marks "prepare_payment" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "prepare_payment" says "payment": a word that usually means money moves, which cannot be taken back.
  What this check looks for
Description, as the server wrote it
Prepare an unsigned exact-amount allowlisted token transfer. Requires wallet-session Bearer token. Does not sign, broadcast or authorize spending. Obtain scoped payer authorization before signing. Never pay again after an uncertain result; reconcile its hash.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
- readOnlyHint: true
prepare_solana_paymentReturn an unsigned exact SPL-token transaction.No findings
Why it is in this group
- The name "prepare_solana_payment" says "payment": a word that usually means money moves, which cannot be taken back.
Description, as the server wrote it
Return an unsigned exact SPL-token transaction. Solana wallet session required. Never signs or broadcasts.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
- readOnlyHint: false
quote_usdc_cross_chain_transferQuote a capped CCTP Standard USDC route.No findings
Why it is in this group
- The name "quote_usdc_cross_chain_transfer" says "transfer": a word for a change that another call does not undo.
- The description says "cannot be reversed".
- The input addresses people (input.recipient): what it sends cannot be taken back.
Description, as the server wrote it
Quote a capped CCTP Standard USDC route. Requires wallet login and explicit recovery-policy acknowledgement. A successful burn cannot be reversed by Vino; finish the same destination mint. Customer pays gas on both chains. No signing or broadcast.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
- readOnlyHint: false
solana_payment_capabilitiesRead Solana mainnet assets, token program, fees and escrow deployment status.1 finding
Why it is in this group
- The name "solana_payment_capabilities" says "payment": a word that usually means money moves, which cannot be taken back.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
  The server marks "solana_payment_capabilities" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "solana_payment_capabilities" says "payment": a word that usually means money moves, which cannot be taken back.
  What this check looks for
Description, as the server wrote it
Read Solana mainnet assets, token program, fees and escrow deployment status.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
- readOnlyHint: true

Changes things 14Creates or changes something that can be changed back.Claude Code: ask

agent_budget_guardFree.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Free. Deterministic read-only spend policy verdict for amount, destination, and approval ceiling. Caller supplies policy; unknown targets require review.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
- readOnlyHint: true
allowance_risk_checkFree.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Free. Live ERC-20 allowance, owner balance and spender-code check at one block; flags effectively unlimited approvals.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
- readOnlyHint: true
capabilitiesFree current prices, coverage and schemas.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Free current prices, coverage and schemas.
claim_worth_itFree.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Free. Confirmed claim amount, gas, net value, safety flags and action verdict. Includes free hashed evidence-receipt.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
- readOnlyHint: true
collectible_quoteFree.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Free. TRUE collectible amount per curve/escrow via unsigned simulated sweep; raw RPC overstates reality.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
- readOnlyHint: true
create_solana_payment_requestCreate a Solana USDC/EURC request.No findings
Why it is in this group
- The name "create_solana_payment_request" says "create": a word for a change.
Description, as the server wrote it
Create a Solana USDC/EURC request. Requires a Solana wallet-session Bearer token; no funds move.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
- readOnlyHint: false
dependency_reportFree.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Free. Compare a live primary x402 quote with your saved baseline; detect price, network, asset, recipient and HTTP status changes. No payments sent; no uptime-history claim.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
- readOnlyHint: true
launch_economicsFree.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Free. Pons token-specific on-chain pool fee, creator share, initial buy, current deployer holdings and estimated launch-cost break-even volume.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
- readOnlyHint: true
launchpad_fee_auditFree.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Free. One-wallet scan across supported launchpads for unswept or unclaimed creator fees.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
- readOnlyHint: true
prepare_donationOptional support for Vino & Views.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Optional support for Vino & Views. Prepare an unpaid NOWPayments donation checkout or a payment address/amount/network. Supply amount_usd, a UUID request_id reused for identical retries, and optional pay_currency. Creates no credits and sends no funds. Use only within your operator's authorized donation budget; all service tools remain free.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
- readOnlyHint: false
prepare_escrow_actionSimulate a case action and return an unsigned wallet transaction.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Simulate a case action and return an unsigned wallet transaction. Never broadcasts. Actions: accept, cancelUnaccepted, submit, approve, dispute, addEvidence, resolve, propose, acceptProposal, timeout. Scope each eventual wallet signature to the exact returned chain, contract, calldata and value.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
- readOnlyHint: true
prepare_x402_donationPrepare an optional Base USDC x402 donation directly to Wallet EB.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Prepare an optional Base USDC x402 donation directly to Wallet EB. No transfer occurs here. Your x402 wallet signs and sends the HTTP payment within your operator-authorized budget. All services remain free.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
tx_preflightFree.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Free. Unsigned EVM eth_call and gas estimate at a measured block; flags approvals and delegated target code. Never signs or broadcasts.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
- readOnlyHint: true
x402_health_checkFree.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Free. DNS-pinned public HTTPS probe of an x402 endpoint's 402 quote, price, network and recipient; no payment sent.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
- readOnlyHint: true

Only reads 1Looks things up and changes nothing.Claude Code: allow

escrow_caseRead a private registered-network case with a wallet-session Bearer token.No findings
Why it is in this group
- The description's first verb is "read": a word for reading.
Description, as the server wrote it
Read a private registered-network case with a wallet-session Bearer token. Set contract for historical cases. No signing.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
- readOnlyHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.8.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http vino-and-views https://api.vinoandviews.online/mcp/

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__vino-and-views__escrow_case"
    ],
    "ask": [
      "mcp__vino-and-views__capabilities",
      "mcp__vino-and-views__payment_capabilities",
      "mcp__vino-and-views__prepare_escrow_action",
      "mcp__vino-and-views__create_payment_request",
      "mcp__vino-and-views__payment_request_status",
      "mcp__vino-and-views__prepare_payment",
      "mcp__vino-and-views__solana_payment_capabilities",
      "mcp__vino-and-views__create_solana_payment_request",
      "mcp__vino-and-views__prepare_solana_payment",
      "mcp__vino-and-views__quote_usdc_cross_chain_transfer",
      "mcp__vino-and-views__cross_chain_transfer_step",
      "mcp__vino-and-views__claim_worth_it",
      "mcp__vino-and-views__collectible_quote",
      "mcp__vino-and-views__launchpad_fee_audit",
      "mcp__vino-and-views__agent_budget_guard",
      "mcp__vino-and-views__allowance_risk_check",
      "mcp__vino-and-views__tx_preflight",
      "mcp__vino-and-views__x402_health_check",
      "mcp__vino-and-views__dependency_report",
      "mcp__vino-and-views__launch_economics",
      "mcp__vino-and-views__prepare_donation",
      "mcp__vino-and-views__prepare_x402_donation"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as vino-and-views. Review it before you use it.

Keep track

Get told when this server's tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.github.oriondrayke/vino-and-views/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Anlyon alternative

22 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Compare with other servers for the same product.

Source: MCP Registry. Synced Oct 21, 2026, 18:43 UTC.

For agents: Markdown · JSON · report this listing