Skip to content

Realmint

by realmint-io · remote · no sign-in to list tools · v1.0.0 · published by GitHub user realmint-io

Agent-native scoring, search and routing for tokenized real-world assets across multi-chain.

Deletes · 3Changes · 1

16 tools: 3 can delete or cancel things, 1 change things and 12 only read.

Scanned Oct 21, 2026

No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http realmint-io https://mcp.realmint.io/mcp

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

16 tools

Deletes or cancels 3Claude Code: deny
  • realmint_buyBuy `amount_usdc` of USDC worth of the RWA `asset_id` (e.g.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Buy `amount_usdc` of USDC worth of the RWA `asset_id` (e.g. 'paxg'). **Requires sign-in + a one-time wallet delegation** at app.realmint.io/mcp/delegate. Realmint signs server-side via your Privy delegation, capped per-trade — no key, no per-trade approval. Your smart account must already hold USDC (see realmint_deposit). Moves real funds.

    Annotations the server declares

    • title: Buy a tokenized RWA
    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: true
  • realmint_sellSell `amount` of the RWA `asset_id` you hold, settling USDC back on Injective.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Sell `amount` of the RWA `asset_id` you hold, settling USDC back on Injective. **Requires sign-in + a one-time wallet delegation** at app.realmint.io/mcp/delegate. Realmint signs server-side via your Privy delegation — no key, no per-trade approval. Sells positions bought over MCP (held in your derived Realmint Wallet). Moves real funds.

    Annotations the server declares

    • title: Sell a tokenized RWA
    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: true
  • realmint_withdrawWithdraw `amount_usdc` USDC from your Realmint smart account to `recipient` (any address).No findings

    Why it is in this group

    • The name "realmint_withdraw" says "withdraw": a word that usually means money moves, which cannot be taken back.
    • The input addresses people (input.recipient): what it sends cannot be taken back.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Withdraw `amount_usdc` USDC from your Realmint smart account to `recipient` (any address). **Requires sign-in + a one-time wallet delegation** at app.realmint.io/mcp/delegate. Realmint signs server-side via your Privy delegation, capped per-transaction — no key, no per-withdraw approval. Native USDC on Injective. Moves real funds. `smart_account_address` (advanced/recovery, normally leave empty): sweep from a specific smart account you own that a factory rotation left behind. Only an SA CREATE2-owned by you is accepted.

    Annotations the server declares

    • title: Withdraw USDC from Realmint
    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: true
Changes things 1Claude Code: ask
  • realmint_logoutSign out note: Realmint keeps no signing session — server-side signing is your standing Privy **delegation**.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Sign out note: Realmint keeps no signing session — server-side signing is your standing Privy **delegation**. To fully revoke it, go to app.realmint.io/mcp/delegate. Disconnecting the connector ends this session.

    Annotations the server declares

    • title: Sign out of Realmint
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
Only reads 12Claude Code: allow
  • realmint_depositShow where to send USDC to fund your buying power.No findings

    Why it is in this group

    • The description's first verb is "show": a word for reading.
    Description, as the server wrote it
    Show where to send USDC to fund your buying power. **Requires sign-in.** Send USDC on Base to your EVM wallet; it funds your smart account for buys.

    Annotations the server declares

    • title: How to deposit into Realmint
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • realmint_get_assetGet the full schema for a specific RWA by asset ID.No findings

    Why it is in this group

    • The name "realmint_get_asset" says "get": a word for reading.
    Description, as the server wrote it
    Get the full schema for a specific RWA by asset ID. Includes issuer details, control capabilities (freeze/mint/burn/blacklist), transferability restrictions, redemption mechanics, and legal documents. The asset ID is the lowercased ticker (e.g. "xaut", "paxg", "kau", "agri", "cgo"). Use `realmint_list_assets` to discover all available IDs — the catalog spans ~30 tokens across multiple chains and changes over time. Always read `metadata.lifecycle` from the response: a non-null lifecycle means the token is migrated/discontinued/abandoned and trading is disallowed (score is hard-capped at 49).

    Annotations the server declares

    • title: Get RWA Asset Details
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • realmint_get_asset_historyGet the versioned metadata change history for an asset.No findings

    Why it is in this group

    • The name "realmint_get_asset_history" says "get": a word for reading.
    Description, as the server wrote it
    Get the versioned metadata change history for an asset. Each entry records what changed (created, updated) and a full schema snapshot. Useful for detecting when an issuer changes terms or control parameters.

    Annotations the server declares

    • title: Get RWA Metadata History
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • realmint_get_price_historyTime-series price history for an asset.No findings

    Why it is in this group

    • The name "realmint_get_price_history" says "get": a word for reading.
    Description, as the server wrote it
    Time-series price history for an asset. Args: asset_id: Asset identifier days: Lookback in days (1-730, default 30) granularity: Optional explicit bucket — "5m" | "1h" | "1d". Omit to auto-pick (≤2d → 5m, ≤30d → 1h, else 1d). The server cascades to coarser buckets when the requested one is empty for this asset.

    Annotations the server declares

    • title: Get RWA Price History
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • realmint_get_route_supportList the venues and chains that can route this asset, plus per-venue backing/liquidity/social scores and policy flags.No findings

    Why it is in this group

    • The name "realmint_get_route_support" says "get": a word for reading.
    Description, as the server wrote it
    List the venues and chains that can route this asset, plus per-venue backing/liquidity/social scores and policy flags. Use this to check whether a trade is even feasible before quoting — `routing_enabled=false` or an empty venue list means the asset can be inspected but not traded via Realmint.

    Annotations the server declares

    • title: Get RWA Route Support
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • realmint_get_scoreGet the Risk & Rights Score for an asset across six dimensions: - backing (0-100): proof of reserves, audit cadence, backing mechanism - enforceability (0-100): governing law, issu…No findings

    Why it is in this group

    • The name "realmint_get_score" says "get": a word for reading.
    Description, as the server wrote it
    Get the Risk & Rights Score for an asset across six dimensions: - backing (0-100): proof of reserves, audit cadence, backing mechanism - enforceability (0-100): governing law, issuer verification, legal documents - control (0-100): issuer power risk — freeze, mint, burn, blacklist, upgrade - exit (0-100): redemption, transferability, KYC/whitelist, settlement, holding periods - liquidity (0-100): market data, venue count, evidence docs - social (0-100): Twitter activity (recency-weighted; unverified handles are penalized below the worst observed tier) Also returns a weighted composite (0-100, higher is better). Weights and penalty tiers are versioned server-side — see `policy_version` in the response. Combine with the asset's `metadata.lifecycle` field (from `realmint_get_asset`) to detect dead/migrated tokens — those are score-capped at 49. Suggested thresholds for decision-making: - composite ≥ 75: typical case, proceed - 55 ≤ composite < 75: elevated friction (gates, missing audits, etc.); review the asset's flags before proceeding - composite < 55: high risk; abort or require explicit user override

    Annotations the server declares

    • title: Get RWA Risk & Rights Score
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • realmint_list_assetsList all tokenized real-world assets (RWAs) indexed by Realmint.No findings

    Why it is in this group

    • The name "realmint_list_assets" says "list": a word for reading.
    Description, as the server wrote it
    List all tokenized real-world assets (RWAs) indexed by Realmint. Returns the full schema for each asset including ownership, control, transferability, redemption terms, and legal metadata.

    Annotations the server declares

    • title: List RWA Assets
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • realmint_list_instrumentsList instruments — the real-world things tokens represent: an underlying at a specific denomination ("Silver · 1 oz") or a stock ("Apple").No findings

    Why it is in this group

    • The name "realmint_list_instruments" says "list": a word for reading.
    Description, as the server wrote it
    List instruments — the real-world things tokens represent: an underlying at a specific denomination ("Silver · 1 oz") or a stock ("Apple"). Tokens sharing an instrument are interchangeable representations of the same thing. Each entry carries its member token ids, the recommended member (buyable > priced > score), and the floor price across members — use it to pick the best token for an instrument before quoting or buying.

    Annotations the server declares

    • title: List Instruments
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • realmint_list_marketMarket snapshots for indexed RWAs: spot price, 24h change, volume, market cap, venue count, and a short price history series.No findings

    Why it is in this group

    • The name "realmint_list_market" says "list": a word for reading.
    Description, as the server wrote it
    Market snapshots for indexed RWAs: spot price, 24h change, volume, market cap, venue count, and a short price history series. Combine with `realmint_get_score` to compare risk against liquidity. Args: ids: Optional comma-separated asset IDs to filter (e.g. "xaut,paxg"). Empty = all assets. Assets without fresh market data are omitted from the response.

    Annotations the server declares

    • title: List RWA Market Snapshots
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • realmint_my_walletShow your Realmint wallet (EVM + Solana), smart account, and balances.No findings

    Why it is in this group

    • The description's first verb is "show": a word for reading.
    Description, as the server wrote it
    Show your Realmint wallet (EVM + Solana), smart account, and balances. **Requires sign-in.** Read-only; moves no funds.

    Annotations the server declares

    • title: My Realmint wallet & balances
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • realmint_whoamiReturn the signed-in user's identity.No findings

    Why it is in this group

    • The name "realmint_whoami" says "whoami": a word for reading.
    Description, as the server wrote it
    Return the signed-in user's identity. This tool **requires authentication** — calling it triggers the Realmint sign-in (OAuth) if you're not signed in. Use it to confirm who you're acting as. Read-only; moves no funds.

    Annotations the server declares

    • title: Who am I (signed-in user)
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • realmint_x402_buy_challengeGet the x402 payment requirements to fund yourself in USDC so you can buy RWAs — the agent-native on-ramp.No findings

    Why it is in this group

    • The description's first verb is "get": a word for reading.
    Description, as the server wrote it
    Get the x402 payment requirements to fund yourself in USDC so you can buy RWAs — the agent-native on-ramp. This returns the 402 challenge only; it moves no funds. To complete funding (two signatures total, the same a human gives), the agent then, ENTIRELY CLIENT-SIDE: 1. Reads `accepts[0]` from the returned body: `payTo` is YOUR Base smart account (derived from `owner_eoa`), `maxAmountRequired` the USDC atomic amount, `asset` the Base USDC contract, `extra` the EIP-712 domain. 2. Signs an EIP-3009 `transferWithAuthorization(from=owner_eoa, to=payTo, value=maxAmountRequired, ...)` over that domain, base64-encodes the x402 PaymentPayload, and re-POSTs to `/v1/route/x402-buy` with it in the `X-PAYMENT` header. On settlement the USDC bridges custody-free to your Injective smart account. 3. Buys any RWA from that Injective balance via `POST /v1/route/intent` (signing the route as usual). The asset rests in your smart account; `send` it elsewhere if you want — exactly like a human user. Always verify `payTo` derives from your own `owner_eoa` before signing. Args: owner_eoa: Your EVM EOA — the payment signer and smart-account owner. amount_usdc: USDC to fund yourself with (human units, e.g. 25.0). asset_id: Optional RWA you intend to buy, recorded for context.

    Annotations the server declares

    • title: Get x402 Funding Challenge
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http realmint-io https://mcp.realmint.io/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__realmint-io__realmint_my_wallet",
      "mcp__realmint-io__realmint_deposit",
      "mcp__realmint-io__realmint_list_assets",
      "mcp__realmint-io__realmint_list_instruments",
      "mcp__realmint-io__realmint_list_market",
      "mcp__realmint-io__realmint_get_asset",
      "mcp__realmint-io__realmint_get_asset_history",
      "mcp__realmint-io__realmint_get_score",
      "mcp__realmint-io__realmint_get_route_support",
      "mcp__realmint-io__realmint_get_price_history",
      "mcp__realmint-io__realmint_x402_buy_challenge",
      "mcp__realmint-io__realmint_whoami"
    ],
    "ask": [
      "mcp__realmint-io__realmint_logout"
    ],
    "deny": [
      "mcp__realmint-io__realmint_buy",
      "mcp__realmint-io__realmint_sell",
      "mcp__realmint-io__realmint_withdraw"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as realmint-io. Review it before you use it.