Skip to content

DPX — Settlement & Intelligence for AI Agents

by untitledfinancial · remote · local (npm) · no sign-in to list tools · v2.6.0 · published by GitHub user untitledfinancial

Compliance-gated stablecoin settlement + x402 macro/ESG/climate intelligence for agents. 115 tools.

Deletes · 7Final · 13Changes · 71

116 tools: 7 can delete or cancel things, 13 do something that can't be undone, 71 change things and 25 only read.

Scanned Oct 21, 2026

15 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http dpx https://mcp.untitledfinancial.com/mcp

Findings

Matches of fixed checks, with the text they matched.

11 warn4 info
  • The server marks "stability.corridor" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The input addresses people (input.to): what it sends cannot be taken back.

    What this check looks for
  • The server marks "stability.settlement_window" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The input carries an amount (input.amount) and a currency, so it moves money.

    What this check looks for
  • The server marks "stability.stablecoin_route" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The input addresses people (input.to): what it sends cannot be taken back.

    What this check looks for
  • The server marks "fx.rate" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The input addresses people (input.to): what it sends cannot be taken back.

    What this check looks for
  • The server marks "fx.cost_certainty" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false}; The input addresses people (input.to): what it sends cannot be taken back.

    What this check looks for
  • The server marks "fees.schedule" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "fees.schedule" says "schedule": a word for a change.

    What this check looks for
Show 9 more findings
  • Warnroute

    The server marks "route" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The input addresses people (input.to): what it sends cannot be taken back.

    What this check looks for
  • The server marks "flow_check" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The input addresses people (input.to): what it sends cannot be taken back.

    What this check looks for
  • The server marks "ramp.compliance_screen" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The input carries an amount (input.amount) and a currency, so it moves money.

    What this check looks for
  • The server marks "intelligence.48h_call" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "intelligence.48h_call" says "call": a word for a change.

    What this check looks for
  • The server marks "policy.check" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The input addresses people (input.recipient): what it sends cannot be taken back.

    What this check looks for
  • The input schema at properties.publicKey.description mentions "credential".

    Matched text

    inputSchema.properties.publicKey.description: "Optional public key for credential signature verification."

    What this check looks for
  • The description mentions "credential".

    Matched text

    description: "...d DPX agent and receive a signed 1-hour credential. Returns KYA level, effective spend cap..."

    What this check looks for
  • The description mentions "credentials".

    Matched text

    description: "...yment step. Call this instead of typing credentials into a UI. Describe what you see on scr..."

    What this check looks for
  • The description mentions "credentials".

    Matched text

    description: "...reakdown. The client's own Kyriba OAuth credentials are used — DPX never holds credentials...."

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

116 tools

Deletes or cancels 7Claude Code: deny
  • computer_use.payComplete a payment that Claude's computer use session has identified on screen — a checkout form, wire transfer UI, invoice approval, or vendor portal payment step.1 finding

    Why it is in this group

    • The name "computer_use.pay" says "pay": a word that usually means money moves, which cannot be taken back.
    • The server marks it destructive (destructiveHint: true).

    Findings

    • Info

      The description mentions "credentials".

      Matched text

      description: "...yment step. Call this instead of typing credentials into a UI. Describe what you see on scr..."

      What this check looks for
    Description, as the server wrote it
    Complete a payment that Claude's computer use session has identified on screen — a checkout form, wire transfer UI, invoice approval, or vendor portal payment step. Call this instead of typing credentials into a UI. Describe what you see on screen, provide the amount and recipient, and DPX runs the full oracle gate → compliance screen → settlement flow. Returns a receipt. Use whenever computer use encounters a payment that would otherwise require human re-entry or approval.

    Annotations the server declares

    • title: Computer-Use Payment
    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: true
  • intelligence.subscription.deleteCancel an intelligence subscription by ID.No findings

    Why it is in this group

    • The name "intelligence.subscription.delete" says "delete": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Cancel an intelligence subscription by ID. Stops future webhook alerts for that subscription. The alert log is retained for audit purposes.

    Annotations the server declares

    • title: Delete Intelligence Subscription
    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: false
  • mercury.ach_authorizeScreen an ACH payment through the DPX compliance oracle before execution.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Screen an ACH payment through the DPX compliance oracle before execution. Runs FATF R16, GENIUS Act, MiCA, and AML checks against the recipient. Returns APPROVED / FLAGGED / BLOCKED with full compliance reasoning. Use this tool BEFORE every ACH payment via mercury.send. ACH is hard to reverse — compliance pre-screening prevents blocked transactions and BSA/AML exposure. Workflow: 1. mercury.ach_authorize (screen only, autoExecute:false) → review decision 2. If APPROVED → set autoExecute:true to send, or call mercury.send directly 3. If FLAGGED → manual review required before proceeding 4. If BLOCKED → do not proceed

    Annotations the server declares

    • title: Mercury ACH Authorization
    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: true
  • mercury.sendInitiate a Mercury bank payment from a connected account.No findings

    Why it is in this group

    • The name "mercury.send" says "send": a word for sending, and what is sent cannot be taken back.
    • The input carries an amount (input.amount) and a currency, so it moves money.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Initiate a Mercury bank payment from a connected account. Supports all Mercury payment rails: ACH (0–1 days), Wire (0–1 days), Real-Time Payment / RTP (instant), International Wire (1–3 days), and Check (7–10 days). For International Wire — the primary DPX cross-border use case — provide SWIFT/BIC code and beneficiary bank details. DPX oracle conditions and FX corridor risk should be checked via oracle.stability and market.fx before executing. Can optionally tag the payment for automatic DPX on-chain routing — when dpxRoute:true is set, the payment memo includes the DPX executor wallet address and the Mercury webhook picks it up for USDC settlement on Base mainnet. Use sandbox:true (default) for dry-run testing. Set sandbox:false only when ready to move real funds. Typical cross-border flow: 1. market.fx → check FX corridor risk for the destination currency 2. mercury.accounts → get source accountId 3. mercury.send (sandbox:true) → confirm payment parameters 4. settlement.quote → get DPX fee quote for the USDC leg 5. mercury.send (sandbox:false) → execute (requires explicit user confirmation) 6. mercury.transactions → verify payment posted

    Annotations the server declares

    • title: Mercury Send Payment
    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: true
  • ramp.settleExecute a DPX stablecoin settlement funded by a Ramp Agent Card — combines card creation and settlement in one call.No findings

    Why it is in this group

    • The description's first verb is "execute": a word for a change.
    • The input carries an amount (input.amount) and a currency, so it moves money.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Execute a DPX stablecoin settlement funded by a Ramp Agent Card — combines card creation and settlement in one call. Ramp handles the fiat conversion leg; DPX settles USDC or EURC on Base mainnet in ~30 seconds. Returns pacs.002 confirmation + SFDR PAI indicators. No crypto wallet pre-funding required. Requires Ramp account connected via ramp.connect.

    Annotations the server declares

    • title: Ramp Settlement
    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: true
  • settlement.executeExecute a DPX cross-border settlement.No findings

    Why it is in this group

    • The name "settlement.execute" says "execute": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Execute a DPX cross-border settlement. The Settlement Agent checks oracle conditions, reasons with Claude AI, and executes on-chain (or returns sandbox result if sandbox=true). Returns settlement ID, status (executed/held/sandbox/failed), tx hash, net amount, fees, oracle conditions, and AI reasoning. Default: sandbox=true — set sandbox=false only for live execution.

    Annotations the server declares

    • title: Execute Settlement
    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: true
  • settlement.nlExecute a payment from a plain-English instruction.No findings

    Why it is in this group

    • The description's first verb is "execute": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Execute a payment from a plain-English instruction. DPX's AI synthesis layer parses the instruction, runs the full oracle gate → compliance screen → settlement flow autonomously, and returns a receipt. Use this when the agent has a natural-language payment task rather than structured parameters. Examples: 'Pay Acme GmbH $25,000 for invoice #42', 'Send $10k to 0x... for vendor services', 'Settle the outstanding balance with Nova Trade SA'. Sandbox mode by default.

    Annotations the server declares

    • title: Natural Language Settlement
    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: true
Can't be undone 13Claude Code: ask
  • flow_checkSingle pre-flight call before settling.1 finding

    Why it is in this group

    • The input addresses people (input.to): what it sends cannot be taken back.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "flow_check" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The input addresses people (input.to): what it sends cannot be taken back.

      What this check looks for
    Description, as the server wrote it
    Single pre-flight call before settling. Runs oracle check, compliance screen, and stablecoin routing in parallel and returns a unified go/no-go decision. Replaces the 3-step oracle → screen → route loop. Returns: decision (PROCEED/HOLD/BLOCKED), recommended token, estimated net received, oracle score, compliance verdict, and a ready-to-use settleBody.

    Annotations the server declares

    • title: Flow Compliance Check
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • fx.cost_certaintyAll-in settlement cost quote for cross-border payments.1 finding

    Why it is in this group

    • The input addresses people (input.to): what it sends cannot be taken back.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "fx.cost_certainty" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false}; The input addresses people (input.to): what it sends cannot be taken back.

      What this check looks for
    Description, as the server wrote it
    All-in settlement cost quote for cross-border payments. CFO-grade output: exact amount received in target currency after rail fees, 48h FX cost variance expressed in dollars, corridor stability overlay, and optimal execution window. Answers "if I send $X today, what does my counterparty receive net of everything, and how certain is that number?" Requires x402 micropayment.

    Annotations the server declares

    • title: FX Cost Certainty
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • fx.rateLive mid-market FX rate for any currency pair.1 finding

    Why it is in this group

    • The input addresses people (input.to): what it sends cannot be taken back.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "fx.rate" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The input addresses people (input.to): what it sends cannot be taken back.

      What this check looks for
    Description, as the server wrote it
    Live mid-market FX rate for any currency pair. Returns mid rate, bid/ask spread, daily volatility %, regulatory flags for the corridor, and data freshness. Sourced from central bank rates (open.er-api.com, updated hourly, no API key required). Free.

    Annotations the server declares

    • title: FX Rate
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • invoice.createCreate an agent-to-agent invoice.No findings

    Why it is in this group

    • The name "invoice.create" says "create": a word for a change.
    • The input carries an amount (input.amount) and a currency, so it moves money.
    Description, as the server wrote it
    Create an agent-to-agent invoice. Agent A calls this to request payment from Agent B. Returns an invoiceId and payUrl — Agent B calls invoice.pay with the invoiceId to settle. Invoice expires after ttlSeconds (default 24h).

    Annotations the server declares

    • title: Create Invoice
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • invoice.payPay an agent-to-agent invoice by ID.No findings

    Why it is in this group

    • The name "invoice.pay" says "pay": a word that usually means money moves, which cannot be taken back.
    Description, as the server wrote it
    Pay an agent-to-agent invoice by ID. Retrieves the invoice, runs settlement via POST /settle, and marks the invoice PAID on success. In sandbox mode returns a simulated receipt; in live mode returns execution parameters for on-chain completion.

    Annotations the server declares

    • title: Pay Invoice
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • policy.checkCheck a proposed payment against the agent's active policy before executing it.1 finding

    Why it is in this group

    • The input addresses people (input.recipient): what it sends cannot be taken back.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "policy.check" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The input addresses people (input.recipient): what it sends cannot be taken back.

      What this check looks for
    Description, as the server wrote it
    Check a proposed payment against the agent's active policy before executing it. Returns ALLOW, HOLD, or BLOCK with a reason. Run this before every settlement call. ALLOW = proceed. HOLD = route to human review queue. BLOCK = halt, do not proceed.

    Annotations the server declares

    • title: Check Policy
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • ramp.agent_cardCreate a scoped Ramp Agent Card — a single-use virtual card with a merchant and amount cap, expires after first authorization or 12 hours.No findings

    Why it is in this group

    • The description's first verb is "create": a word for a change.
    • The input carries an amount (input.amount) and a currency, so it moves money.
    Description, as the server wrote it
    Create a scoped Ramp Agent Card — a single-use virtual card with a merchant and amount cap, expires after first authorization or 12 hours. Used to fund the fiat leg of a DPX settlement without pre-funding a crypto wallet. Returns a task ID; poll ramp.agent_card_status to get PAN/CVV once ready. Requires cards:read_agentic scope (granted via ramp.connect).

    Annotations the server declares

    • title: Ramp Agent Card
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • ramp.compliance_screenCompliance pre-screen for Ramp accounting agent payments — run before issuing an Agent Card to eliminate unnecessary human approval queues.1 finding

    Why it is in this group

    • The input carries an amount (input.amount) and a currency, so it moves money.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "ramp.compliance_screen" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The input carries an amount (input.amount) and a currency, so it moves money.

      What this check looks for
    Description, as the server wrote it
    Compliance pre-screen for Ramp accounting agent payments — run before issuing an Agent Card to eliminate unnecessary human approval queues. Performs 5 checks in parallel: (1) FATF country risk on source and destination country, (2) amount threshold flags (CTR-equivalent at $10K, large-payment at $100K), (3) OpenSanctions global sanctions screen by counterparty name, (4) OpenSanctions PEP screen for individual counterparties or payroll, (5) GLEIF UBO chain with sanctions at each beneficial ownership node (if LEI provided). Returns APPROVED / FLAGGED / BLOCKED with a humanRequired boolean — true only for FLAGGED cases. APPROVED: issue card automatically, no human needed. BLOCKED: halt, do not proceed, do not notify counterparty. FLAGGED: route to compliance queue. Removes human-in-the-loop for the ~95% of payments that are clean.

    Annotations the server declares

    • title: Ramp Compliance Screen
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • receipt.createRecord a tamper-evident signed receipt for an agent financial action.No findings

    Why it is in this group

    • The name "receipt.create" says "create": a word for a change.
    • The input addresses people (input.recipient): what it sends cannot be taken back.
    Description, as the server wrote it
    Record a tamper-evident signed receipt for an agent financial action. Call immediately after every successful settlement. Returns a receipt ID and HMAC-SHA256 signature over the canonical receipt JSON — cryptographic proof the record has not been altered. Receipts are queryable by session or agent for audit.

    Annotations the server declares

    • title: Create Receipt
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • routeMulti-stablecoin settlement routing.1 finding

    Why it is in this group

    • The input addresses people (input.to): what it sends cannot be taken back.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "route" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The input addresses people (input.to): what it sends cannot be taken back.

      What this check looks for
    Description, as the server wrote it
    Multi-stablecoin settlement routing. Given amount, source currency (from), and destination currency (to), returns all three stablecoin options (USDC, EURC, USDT) ranked by settlement efficiency. EURC is recommended for EUR destinations — eliminates cross-currency conversion. Returns settleBody ready to POST to /settle for the top-ranked option.

    Annotations the server declares

    • title: Route Payment
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • stability.corridorCorridor-specific settlement stability score (0–100) for any currency pair.1 finding

    Why it is in this group

    • The input addresses people (input.to): what it sends cannot be taken back.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "stability.corridor" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The input addresses people (input.to): what it sends cannot be taken back.

      What this check looks for
    Description, as the server wrote it
    Corridor-specific settlement stability score (0–100) for any currency pair. Combines the live global Stability Oracle score with corridor-specific risk adjustments covering 28 currency pairs: regulatory flags (BCB/IOF for BRL, PBoC capital rules for CNH, BCRA controls for ARS, etc.), FX liquidity score based on active trading sessions at current UTC time, cascade penalty from live macro signals, and weekend/off-hours penalty. Returns SETTLE_NOW / DELAY_24H / DELAY_48H recommendation with rationale. Distinct from oracle.stability (which is global) and market.fx (which is spot-rate focused) — this answers "is this specific corridor safe to settle through right now?"

    Annotations the server declares

    • title: Stability Corridor
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • stability.settlement_windowOptimal settlement execution window analysis for a specific cross-border payment over the next 72 hours.1 finding

    Why it is in this group

    • The input carries an amount (input.amount) and a currency, so it moves money.
    • The input addresses people (input.to): what it sends cannot be taken back.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "stability.settlement_window" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The input carries an amount (input.amount) and a currency, so it moves money.

      What this check looks for
    Description, as the server wrote it
    Optimal settlement execution window analysis for a specific cross-border payment over the next 72 hours. Generates 18 × 4-hour time slots and scores each by composite risk: corridor stability, FX session liquidity, cascade level decay/growth based on macro outlook, weekend/off-hours penalty, and counterparty ESG tier (if LEI provided). Returns a ranked window schedule with OPTIMAL / GOOD / ACCEPTABLE / AVOID classification per slot, a best-window recommendation, and large-amount splitting guidance for settlements ≥ $5M. Use this before scheduling large cross-border settlements to minimize execution risk.

    Annotations the server declares

    • title: Settlement Window
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • stability.stablecoin_routeMulti-stablecoin settlement routing — given a source and destination currency pair, recommends the optimal stablecoin path based on corridor liquidity, regulatory fit, gas economic…1 finding

    Why it is in this group

    • The input addresses people (input.to): what it sends cannot be taken back.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "stability.stablecoin_route" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The input addresses people (input.to): what it sends cannot be taken back.

      What this check looks for
    Description, as the server wrote it
    Multi-stablecoin settlement routing — given a source and destination currency pair, recommends the optimal stablecoin path based on corridor liquidity, regulatory fit, gas economics, and DPX native support. Returns a ranked list of stablecoins (USDC, EURC, BRLA, MXNC, NGNC, AEDX, PYUSD, USDT, and others) with regulatory flags, MiCA/GENIUS Act compliance status, liquidity tier, and warnings. Identifies blocked routes (e.g. USDT for EU under MiCA, BRLA before BCB Resolution 561 deadline). Use before settlement to avoid regulatory penalties and ensure optimal execution path.

    Annotations the server declares

    • title: Stablecoin Route
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
Changes things 71Claude Code: ask
  • agent.kya_registerKYA — Know Your Agent.1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    Findings

    • Info

      The input schema at properties.publicKey.description mentions "credential".

      Matched text

      inputSchema.properties.publicKey.description: "Optional public key for credential signature verification."

      What this check looks for
    Description, as the server wrote it
    KYA — Know Your Agent. Three-tier registration model — compliance burden scales with settlement risk, no documents ever required. ANONYMOUS: agent name only, $1K/day cap, instant. REGISTERED: add ownerEntity + ownerEmail (self-attested, no verification), $25K/day cap, instant. VERIFIED: add ownerLei (active GLEIF LEI) — DPX calls the public GLEIF API, confirms ACTIVE status, and grants VERIFIED instantly. No documents, no manual review; LEI issuers (LOUs) have already done identity verification and DPX inherits it. VERIFIED agents get institutional caps (governed by mandate), FATF R.16 attestation on every settlement, and full AP2 mandate support. Legal basis: FATF R.16 originator = owner entity (not the agent); MiCA Art. 45/72 accepts LEI; GENIUS Act satisfied by entity attestation.

    Annotations the server declares

    • title: Register Agent (KYA)
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • agent.kya_verifyVerify a registered DPX agent and receive a signed 1-hour credential.1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Info

      The description mentions "credential".

      Matched text

      description: "...d DPX agent and receive a signed 1-hour credential. Returns KYA level, effective spend cap..."

      What this check looks for
    Description, as the server wrote it
    Verify a registered DPX agent and receive a signed 1-hour credential. Returns KYA level, effective spend caps (tier or mandate), owner verification status, mandate active status, and FATF R.16 compliance attestation. Attach credential.signature as X-Agent-Credential header and agentId as X-Agent-Id header on DPX /settle requests — enables mandate enforcement, per-agent audit trail, and FATF attestation. Credential expires in 1 hour; call again to refresh before expiry.

    Annotations the server declares

    • title: Verify Agent (KYA)
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • agent.mandate_createCreate or update an AP2-compatible spend mandate for a REGISTERED or VERIFIED DPX agent.No findings

    Why it is in this group

    • The name "agent.mandate_create" says "create": a word for a change.
    Description, as the server wrote it
    Create or update an AP2-compatible spend mandate for a REGISTERED or VERIFIED DPX agent. Sets per-agent settlement constraints: max notional per settlement, daily cap, optional counterparty whitelist (LEIs or wallets), allowed currency pairs, ESG floor, and expiry. ANONYMOUS agents cannot hold mandates — register with ownerEntity + ownerEmail first. REGISTERED agents have mandate caps clamped to their tier limit ($25K). VERIFIED agents (GLEIF LEI confirmed) set their own caps with no platform ceiling. Mandate is AP2-formatted for interoperability with Google Agent Payments Protocol.

    Annotations the server declares

    • title: Create Spend Mandate
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • batch_settleSubmit multiple settlements in a single call.No findings

    Why it is in this group

    • The description's first verb is "submit": a word for a change.
    Description, as the server wrote it
    Submit multiple settlements in a single call. Runs all settlements concurrently — one failure does not block others. Returns a summary (total/succeeded/failed) and per-item results mirroring what POST /settle would return. Maximum 50 per batch.

    Annotations the server declares

    • title: Batch Settlement
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • card.positionsPlan treasury settlement for a crypto card program.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Plan treasury settlement for a crypto card program. Accepts net positions per corridor (e.g. USD-BRL: $2.3M, USD-EUR: €450K) and returns an optimal settlement plan — which corridors to settle now vs. hold, which stablecoin to use per corridor, and estimated all-in fee. No settlement is executed. Call this before card.settle to review the plan. Free.

    Annotations the server declares

    • title: Card Positions
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • card.settleExecute treasury settlement for a crypto card program.No findings

    Why it is in this group

    • The description's first verb is "execute": a word for a change.
    Description, as the server wrote it
    Execute treasury settlement for a crypto card program. Takes the same positions array as card.positions but executes all settlements via DPX batch — compliance-gated, oracle-priced, stablecoin-routed. Each position requires a recipientAddress. Use sandbox:true for testing. Returns per-corridor settlement results and a summary.

    Annotations the server declares

    • title: Card Settlement
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • compliance.aml_screenAML Screen with Behavioural Profiling — deep AML assessment combining sanctions matching (OFAC, EU, UN, OFSI), behavioural pattern analysis, transaction velocity signals, and count…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    AML Screen with Behavioural Profiling — deep AML assessment combining sanctions matching (OFAC, EU, UN, OFSI), behavioural pattern analysis, transaction velocity signals, and counterparty network risk. Returns CLEAR / REVIEW / BLOCK decision with confidence score, matched sanctions lists, behavioural anomaly flags, and a structured compliance narrative for audit. Use for high-value payments, onboarding, or any counterparty flagged by flow_check. Accepts wallet address or entity identifier. x402 paid, USDC on Base.

    Annotations the server declares

    • title: AML Screen
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • compliance.pep_screenScreen an individual by name against the OpenSanctions PEP (Politically Exposed Person) dataset.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Screen an individual by name against the OpenSanctions PEP (Politically Exposed Person) dataset. PEPs include heads of state, senior government officials, senior executives of state-owned enterprises, senior politicians, senior military officers, judicial officials, and their close associates and family members. Returns match confidence, position/role, nationality, related entities, and an overall risk level (HIGH / MEDIUM / LOW / NONE). HIGH or MEDIUM matches require Enhanced Due Diligence (EDD) per FATF Recommendations 12 and 13 before settlement. Optionally filter by country.

    Annotations the server declares

    • title: PEP Screening
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • compliance.sfdr_pai_reportSFDR Annex I PAI Report — generates the full Principal Adverse Impact statement for a portfolio of up to 50 entities (by LEI or wallet address).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    SFDR Annex I PAI Report — generates the full Principal Adverse Impact statement for a portfolio of up to 50 entities (by LEI or wallet address). Returns all 18 mandatory indicators plus 2 optional climate indicators in the SFDR Annex I table format. Required for SFDR Article 8 and Article 9 product annual disclosure. Accepts LEIs or company names (GLEIF-resolved). x402 paid, USDC on Base.

    Annotations the server declares

    • title: SFDR Annex I PAI Report
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • compliance.sfdr_screenSFDR Article 8/9 Compliance Screen — determines whether a financial product or counterparty meets the Sustainable Finance Disclosure Regulation classification thresholds.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    SFDR Article 8/9 Compliance Screen — determines whether a financial product or counterparty meets the Sustainable Finance Disclosure Regulation classification thresholds. Returns Article classification (6/8/9), Principal Adverse Impact indicator flags across 18 mandatory PAI metrics, ESG score alignment, and DNSH (Do No Significant Harm) assessment. Required for EU-regulated funds and any payment counterparty with SFDR disclosure obligations. Pass LEI or wallet address. x402 paid, USDC on Base.

    Annotations the server declares

    • title: SFDR Article 8/9 Screen
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • compliance.ubo_chainTrace the beneficial ownership chain for any legal entity up to 3 levels deep using GLEIF relationship records, then screen every node in the chain against the OpenSanctions consol…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Trace the beneficial ownership chain for any legal entity up to 3 levels deep using GLEIF relationship records, then screen every node in the chain against the OpenSanctions consolidated sanctions list (OFAC SDN, EU, UN, UK OFSI). Returns chain structure (SUBJECT → DIRECT_PARENT → ULTIMATE_PARENT), per-node sanctions status, LEI lapse flags, overall CLEAR / REVIEW_REQUIRED / BLOCKED verdict, and FATF R.16 beneficial ownership compliance attestation. Required for correspondent banking due diligence, FATF R.12/13 UBO identification, and MiCA Article 72 counterparty risk management.

    Annotations the server declares

    • title: UBO Chain Lookup
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • compliance.vendor_riskComposite Vendor Risk Score — combines compliance (65%) and ESG (35%) signals into a single vendor risk assessment.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Composite Vendor Risk Score — combines compliance (65%) and ESG (35%) signals into a single vendor risk assessment. Returns an overall risk tier (LOW / MEDIUM / HIGH / CRITICAL), component breakdown, sanctions status, PEP flags, ESG pillar scores, and a payment recommendation (PROCEED / PROCEED_WITH_MONITORING / HOLD / BLOCK). Designed for pre-payment vendor due diligence, treasury onboarding, and supplier risk review. Accepts LEI or wallet address. x402 paid, USDC on Base.

    Annotations the server declares

    • title: Vendor Risk Score
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • compliance.vop_verifyVerification of Payee — cryptographically verified payee check before a cross-border payment.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Verification of Payee — cryptographically verified payee check before a cross-border payment. Resolves a wallet address against GLEIF LEI registry, ESG Oracle, and on-chain activity to confirm the payee is who they claim to be. Returns a verification attestation, match confidence score, identity fields confirmed, and a signed verification receipt. Required for FATF R16 Travel Rule compliance and recommended for any payment over $3,000. $0.075 USDC per verification.

    Annotations the server declares

    • title: Verification of Payee
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • compute.routeRoute a task to the best available free AI model and run inference.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Route a task to the best available free AI model and run inference. DPX selects the model based on the task type (reasoning → DeepSeek R1, code → Llama 3.3 70B, multilingual → Qwen 2.5 72B, fast → Llama 3.1 8B), calls OpenRouter, and returns the completion. All models are free-tier — no token cost. Pay per call in USDC via x402. Use this when an agent needs to delegate a subtask to a language model without managing model selection or API keys.

    Annotations the server declares

    • title: Compute Routing
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • defi.research_papers13 structured institutional research papers on CBDCs, stablecoins, crypto regulation, and cross-border payments — from BIS, the Federal Reserve, ECB, FSB, IMF, G7, SWIFT, and R3 — …No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    13 structured institutional research papers on CBDCs, stablecoins, crypto regulation, and cross-border payments — from BIS, the Federal Reserve, ECB, FSB, IMF, G7, SWIFT, and R3 — each with a summary and key findings. These papers are free but otherwise scattered as individual PDFs with no query layer; this makes them queryable in one place. Optional keyword filter.

    Annotations the server declares

    • title: CBDC/Stablecoin Research Library
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • dpx.metricsLive performance metrics for the DPX settlement infrastructure — pulled directly from production telemetry.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Live performance metrics for the DPX settlement infrastructure — pulled directly from production telemetry. Returns request volumes, error rates, growth trends, per-service breakdown, and spike analysis across all active DPX workers. Free — designed for investor due diligence, analyst queries, and Standard Metrics / portfolio management integrations. No auth required.

    Annotations the server declares

    • title: DPX Metrics
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • esg.batchScreen up to 50 entities in a single call.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Screen up to 50 entities in a single call. Accepts LEIs or company names (GLEIF-resolved). Returns results ranked by composite ESG score descending — highest scoring counterparties first. Useful for portfolio-level compliance screening, supplier due diligence, and TMS pre-payment checks. Name resolution is slower than direct LEI input.

    Annotations the server declares

    • title: ESG Batch Score
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • esg.portfolioScore an entire counterparty portfolio in one call (up to 200 entities by LEI or name).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Score an entire counterparty portfolio in one call (up to 200 entities by LEI or name). Returns portfolio-level composite E/S/G scores, tier distribution, aggregate fee surcharge impact in basis points, worst offenders (bottom 10% by composite), top performers, MiCA Article 72 ongoing monitoring status, and SFDR PAI flags. The canonical pre-settlement compliance check for treasury systems and TMS integrations.

    Annotations the server declares

    • title: ESG Portfolio Score
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • esg.supply_chainSupply Chain ESG Screen — screens an entire supplier/counterparty supply chain for ESG risk exposure.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Supply Chain ESG Screen — screens an entire supplier/counterparty supply chain for ESG risk exposure. Accepts a focal entity (by LEI or wallet address) and traces upstream supply chain relationships via GLEIF. Returns per-tier ESG scores, highest-risk nodes, SFDR PAI exposure from supply chain, and a Scope 3 financed-emissions estimate. Useful for procurement teams, ESG-adjusted settlement pricing, and CSRD supply chain due diligence. x402 paid, USDC on Base.

    Annotations the server declares

    • title: Supply Chain ESG Screen
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • esg.watchRegister an entity for ongoing ESG monitoring.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Register an entity for ongoing ESG monitoring. DPX checks the score daily and fires a webhook when the composite score shifts by ≥ thresholdPoints. Satisfies MiCA Article 72 ongoing monitoring requirements. Returns a watchId for status checks and cancellation. Webhook payload includes previous/current score, delta, and tier change.

    Annotations the server declares

    • title: ESG Watch
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • fees.scheduleGet the complete DPX fee schedule: all components (core/FX/ESG/license), volume discount tiers (Standard / Growth / Institutional / Sovereign), ESG fee table by score, scenario exa…1 finding

    Why it is in this group

    • The name "fees.schedule" says "schedule": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "fees.schedule" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "fees.schedule" says "schedule": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Get the complete DPX fee schedule: all components (core/FX/ESG/license), volume discount tiers (Standard / Growth / Institutional / Sovereign), ESG fee table by score, scenario examples, and competitive benchmarks vs Stripe, Wise, SWIFT, and bank wire.

    Annotations the server declares

    • title: Fee Schedule
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • fees.verifyVerify that the off-chain fee quote matches what the on-chain DPXSettlementRouter contract will charge.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Verify that the off-chain fee quote matches what the on-chain DPXSettlementRouter contract will charge. Returns feesMatch (true/false). Call after get_quote and before settle to confirm fee integrity.

    Annotations the server declares

    • title: Verify Fees
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • forecast.calendarSeasonal climate event calendar with commodity impact.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Seasonal climate event calendar with commodity impact. Returns 12 critical annual windows (hurricane season, corn pollination, Brazil frost risk, Black Sea harvest, ENSO influence periods, etc.) sorted by urgency — active windows first, then by months until next occurrence. Each entry includes affected commodities, severity, and the agronomic basis.

    Annotations the server declares

    • title: Forecast Calendar
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • forecast.commodity_outlookClimate-driven price pressure outlook for a commodity.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Climate-driven price pressure outlook for a commodity. Returns BULLISH/BEARISH/NEUTRAL signal with 30/60/90-day horizons, confidence score, per-region stressor breakdown, and current FRED price reference. Covers 11 commodities: WHEAT, CORN, SOYB, COFFEE, COCOA, COTTON, SUGAR, WTI, NG, COPPER, LUMBER. Designed for institutional research teams evaluating commodity positions. Signals reflect supply constraint risk from climate — not a financial recommendation. Cache: 4h.

    Annotations the server declares

    • title: Commodity Outlook Forecast
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • forecast.heat_checkCommodity Heat Check — all 11 commodity symbols simultaneously scored RED / YELLOW / GREEN.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Commodity Heat Check — all 11 commodity symbols simultaneously scored RED / YELLOW / GREEN. Fast single-call scan of the full commodity universe: WHEAT, CORN, SOYB, COFFEE, COCOA, COTTON, SUGAR, WTI, NG, COPPER, LUMBER. Returns per-symbol climate stress signal, risk driver, and urgency label. Ideal for daily monitoring, dashboard widgets, and as a triage step before calling forecast.commodity_outlook for detail on flagged symbols. Free.

    Annotations the server declares

    • title: Commodity Heat Check
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • forecast.portfolio_stressClimate stress test for a multi-commodity portfolio.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Climate stress test for a multi-commodity portfolio. Pass up to 20 positions with weights (percentages or fractions — normalized internally). Returns aggregate portfolio climate score, which positions are most stressed, which could act as climate hedges, and a plain-language summary. Useful for commodity fund managers evaluating aggregate climate exposure before rebalancing.

    Annotations the server declares

    • title: Portfolio Stress Forecast
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • forecast.production_regionsAll ~40 global commodity production regions ranked by current climate risk score.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    All ~40 global commodity production regions ranked by current climate risk score. Each region shows which commodities it affects and its current climate risk level (HIGH/MODERATE/LOW). Use to identify which geographic zones are under active climate stress and which commodities are most exposed.

    Annotations the server declares

    • title: Production Regions Forecast
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • forecast.scenarioWhat-if climate scenario analysis.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    What-if climate scenario analysis. Apply a named scenario or custom stressor multipliers to any subset of commodities and see how signals shift. Built-in scenarios: la_nina_moderate, la_nina_severe, el_nino_moderate, gulf_hurricane_major, us_plains_drought_severe, black_sea_disruption, brazil_frost, chile_drought_copper, pacific_northwest_wildfire. Use to stress-test a commodity thesis before committing to a position.

    Annotations the server declares

    • title: Scenario Forecast
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • forecast.subscribeCommodity Alert Webhook — register a URL to receive push alerts when a commodity signal crosses a threshold.No findings

    Why it is in this group

    • The name "forecast.subscribe" says "subscribe": a word for a change.
    Description, as the server wrote it
    Commodity Alert Webhook — register a URL to receive push alerts when a commodity signal crosses a threshold. Supports alerts on signal changes (BULLISH → BEARISH), confidence drops below a floor, or climate stress score crossing a level. Returns a subscriptionId for management. Alerts fire within 30 minutes of a signal change. Useful for autonomous agents that need to react to commodity market shifts without polling. x402 paid (first month), USDC on Base.

    Annotations the server declares

    • title: Commodity Alert Subscription
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • forecast.tcfd_reportTCFD Physical Risk Report — generates a Task Force on Climate-related Financial Disclosures (TCFD) physical risk assessment for a commodity portfolio.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    TCFD Physical Risk Report — generates a Task Force on Climate-related Financial Disclosures (TCFD) physical risk assessment for a commodity portfolio. Maps climate signals from all 11 commodity markets to TCFD physical risk categories (acute and chronic), scores transition risk alignment, and produces a structured report suitable for investor disclosure. Pass portfolio as an array of {symbol, positionUsd}. x402 paid, USDC on Base.

    Annotations the server declares

    • title: TCFD Physical Risk Report
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • fx.corridorsAll 60+ currency corridors with current stability tier, daily volatility estimate, and regulatory flags.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    All 60+ currency corridors with current stability tier, daily volatility estimate, and regulatory flags. Sort is best-first (OPTIMAL → ADVERSE). Use to compare corridors before choosing a payment route — e.g. "which LATAM corridor is most stable for a $2M payment this week?" Filter by source currency with the from parameter. Free.

    Annotations the server declares

    • title: FX Corridors
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • integration.kyribaKyriba TMS Integration — DPX settlement bridge for Kyriba treasury management systems.1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    Findings

    • Info

      The description mentions "credentials".

      Matched text

      description: "...reakdown. The client's own Kyriba OAuth credentials are used — DPX never holds credentials...."

      What this check looks for
    Description, as the server wrote it
    Kyriba TMS Integration — DPX settlement bridge for Kyriba treasury management systems. Accepts a Kyriba-formatted payment instruction and executes it through the DPX settlement flow with oracle gating, compliance screening, and stablecoin routing. Returns a Kyriba-compatible confirmation response including settlement ID, execution status, and fee breakdown. The client's own Kyriba OAuth credentials are used — DPX never holds credentials. Useful for treasury teams running Kyriba who want DPX oracle intelligence and on-chain settlement without leaving their TMS workflow. Free (settlement x402 fee charged at execute step).

    Annotations the server declares

    • title: Kyriba TMS Integration
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • integration.travel_ruleFinCEN Travel Rule Compliance — generates and transmits Travel Rule records for cross-border payments over $3,000.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    FinCEN Travel Rule Compliance — generates and transmits Travel Rule records for cross-border payments over $3,000. Creates a FATF R16-compliant record with originator and beneficiary identity data, transaction details, and a cryptographic attestation. Returns a Travel Rule ID for the audit trail. Accepts the same settlement parameters as settlement.execute — use after oracle and compliance gates pass. Can also receive inbound Travel Rule records from counterparty VASPs. Free (included in settlement flow; standalone record creation available).

    Annotations the server declares

    • title: Travel Rule Compliance
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • integration.verifyInitiate a $0.01 USDC onboarding handshake for a new DPX integration.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Initiate a $0.01 USDC onboarding handshake for a new DPX integration. Returns the DPX treasury address and payment instructions. The client sends $0.01 USDC on Base mainnet to confirm their wallet is funded and settlement rails are clear. Call integration.status to poll for confirmation. Required for all new integrations before production settlements are enabled.

    Annotations the server declares

    • title: Verify Integration
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • intelligence.48h_call48-Hour Forward Macro Call — structured 48h forward view with the top 3 macro risks for the next 48 hours, per-corridor settlement guidance, and a recommended execution strategy fo…1 finding

    Why it is in this group

    • The name "intelligence.48h_call" says "call": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "intelligence.48h_call" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "intelligence.48h_call" says "call": a word for a change.

      What this check looks for
    Description, as the server wrote it
    48-Hour Forward Macro Call — structured 48h forward view with the top 3 macro risks for the next 48 hours, per-corridor settlement guidance, and a recommended execution strategy for large cross-border payments. Distinct from composite (which covers a 30/60/90d horizon) — this is the short-horizon tactical call for agents with imminent settlement decisions. Returns: topRisks (ranked by probability × impact), corridorAdvice (SETTLE_NOW / DELAY / AVOID per major pair), executionWindow (best 4h window in next 48h), settlementAdvice (structured go/no-go), and AI synthesis. $0.50 USDC. GET, no input required.

    Annotations the server declares

    • title: 48-Hour Forward Macro Call
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • intelligence.aftershockAftershock Intelligence — models the secondary waves that follow a primary cascade event.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Aftershock Intelligence — models the secondary waves that follow a primary cascade event. Takes a primary shock (origin node, event type, magnitude, elapsed hours) and returns three aftershock waves: Wave 1 (0–72h immediate secondary effects), Wave 2 (1–4 weeks policy response distortions), Wave 3 (1–6 months structural changes now permanently locked in). Identifies which nodes are rebounding, which face amplified pressure, and which are structurally altered. Companion to market.cascade — run cascade first, then aftershock to see the full picture. POST with origin, eventType, magnitude, elapsedHours.

    Annotations the server declares

    • title: Aftershock Intelligence
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • intelligence.butterflyButterfly Effect Cascade — POST variant of market.cascade.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Butterfly Effect Cascade — POST variant of market.cascade. Models how a shock originating at a specific node propagates through a 25-node network. Distinct from market.cascade (which takes a free-text event and models broad macro impact) — butterfly requires a specific origin node from the node taxonomy and returns a directed, time-ordered cascade chain optimised for agent decision loops. Use when you have a precise origin event and need to trace which downstream nodes are hit in what order. Input: originNode (required), magnitude 1–10, elapsed hours. $0.75 USDC. POST.

    Annotations the server declares

    • title: Butterfly Effect Cascade (POST)
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • intelligence.climateClimate Intelligence Suite — three climate endpoints bundled.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Climate Intelligence Suite — three climate endpoints bundled. (1) climate: 50-year precipitation shift across 10 agricultural zones — food inflation and migration pressure signals. (2) climate-pulse: near-real-time temperature anomaly and drought stress across 8 US regions, updated every 3h — use for commodity trading desks and ag-sector settlement exposure. (3) earth-systems: Earth Health Index (0–100) and proximity to 9 climate tipping points — long-horizon investors and TNFD-aligned portfolio stress. All three returned in one response. GET, no input required. $0.50 USDC (bundled rate). Data: NOAA, USDA, FRED. Cache: climate 6h, pulse 3h, earth-systems 24h.

    Annotations the server declares

    • title: Climate Intelligence Suite
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • intelligence.compositeComposite Intelligence Report — synthesizes all active intelligence signals into a single structured macro brief.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Composite Intelligence Report — synthesizes all active intelligence signals into a single structured macro brief. Calls all non-POST intelligence endpoints internally, weights their outputs by a live calibration model, and returns a ranked risk register, corridor-level settlement guidance, a 30/60/90-day outlook, and a full AI synthesis narrative. The highest-value single-call output in the intelligence API — use when a counterparty, treasury team, or agent needs a comprehensive cross-domain briefing rather than individual signals. Also available: synthesis (same output structured as a formatted executive report rather than machine-readable JSON). $1.00 USDC. GET, no input required.

    Annotations the server declares

    • title: Composite Intelligence Report
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • intelligence.contagionContagion Intelligence — simulates how a macro or financial shock spreads through 30 nodes across 6 domains (financial systems, real economies, commodity networks, policy anchors, …No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Contagion Intelligence — simulates how a macro or financial shock spreads through 30 nodes across 6 domains (financial systems, real economies, commodity networks, policy anchors, social systems, physical infrastructure) using an epidemiological R-value model. Returns system R trajectory, per-epoch spread map, superspreader nodes, containment forecast, and AI briefing. R < 1.0 = self-limiting; R ≥ 1.0 = expanding. Call /contagion/nodes first to discover valid origin IDs. POST with origin and magnitude.

    Annotations the server declares

    • title: Contagion Network Intelligence
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • intelligence.esg_reportingESG Regulatory Reporting Suite — four SFDR/TNFD/EU Taxonomy endpoints bundled into one call.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    ESG Regulatory Reporting Suite — four SFDR/TNFD/EU Taxonomy endpoints bundled into one call. Returns everything needed for institutional ESG disclosure in a single response. (1) sfdr-dashboard: SFDR PAI indicators for a portfolio address — mandatory Principal Adverse Impact metrics under SFDR Article 7. (2) financed-emissions: PCAF-aligned financed emissions calculation — Scope 3 Category 15, required under CSRD and SFDR PAI 1. (3) taxonomy-alignment: EU Taxonomy alignment scoring — % of activities meeting Do No Significant Harm criteria across 6 environmental objectives. (4) tnfd-report: full TNFD LEAP report — nature-related risk and opportunity assessment across Locate, Evaluate, Assess, Prepare stages. $1.50 USDC (bundled, saves $1.00 vs individual calls). POST for portfolio address.

    Annotations the server declares

    • title: ESG Regulatory Reporting (SFDR/TNFD/EU Taxonomy)
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • intelligence.gender_riskGender Risk & Opportunity Intelligence — maps the structural relationship between GBV prevalence, legal discrimination, female labour force participation, and economic outcomes acr…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Gender Risk & Opportunity Intelligence — maps the structural relationship between GBV prevalence, legal discrimination, female labour force participation, and economic outcomes across 18 countries. Returns two independent scores: gbvRiskScore (0–100 suppression risk — high GBV → female LFPR suppression → GDP drag → fiscal stress → sovereign risk premium) and opportunityScore (0–100 reform upside — improving GBV indicators, closing LFPR gender gaps, and strengthening legal rights precede FDI inflows and consumer credit expansion). Five transmission mechanisms. Live FRED economic stress feedback. AI synthesis. Data: WHO GHO, World Bank WDI, FRED. 12h cache. No input required — GET.

    Annotations the server declares

    • title: Gender Risk Intelligence
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • intelligence.macro_stressMacro Stress & Instability Intelligence — two endpoints bundled into one tool call.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Macro Stress & Instability Intelligence — two endpoints bundled into one tool call. (1) Macro-stress: credit regime classification (EXPANSION / LATE_CYCLE / STRESS / CRISIS) derived from FRED yield curve, credit spreads, and money supply — provides a 2–6 week FX lead signal. (2) Instability: structural regime-level risk across US, China, Russia, and EU — not episodic events but foundational political-economic stability. Use this before large cross-border settlements or when macro conditions are a factor in a payment decision. GET, no input required. $0.25 USDC (bundled rate, covers both signals). Data: FRED. 1h cache.

    Annotations the server declares

    • title: Macro Stress & Instability
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • intelligence.nature_riskNature & Water Risk Intelligence — two TNFD-aligned endpoints bundled.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Nature & Water Risk Intelligence — two TNFD-aligned endpoints bundled. (1) water-risk: physical water stress across 6 regions with sector-level exposure for agriculture, semiconductors, and beverages — TNFD LEAP aligned, relevant to ESG screening and climate-adjusted settlement. (2) biodiversity: TNFD-aligned nature risk across 8 regions — IUCN Red List signals, sector dependency/impact matrix, SFDR PAI 7 biodiversity flag. Together they cover the nature-related financial disclosure requirements under TNFD and SFDR. GET, no input required. $0.35 USDC (bundled rate). Data: USGS, FAO, IUCN, World Bank. 12h cache.

    Annotations the server declares

    • title: Nature & Water Risk (TNFD)
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • intelligence.political_riskPolitical & Climate Transition Risk — two forward-looking structural risk endpoints bundled.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Political & Climate Transition Risk — two forward-looking structural risk endpoints bundled. (1) political-risk: regime stability, policy risk, and sanctions exposure across major economies — structured assessment of political disruption to cross-border payment corridors. (2) transition-risk: climate policy transition risk across industries and geographies — carbon price exposure, stranded asset risk, policy velocity, regulatory tightening signals. Critical for SFDR Article 8/9 compliance and climate-adjusted settlement pricing. GET, no input required. $0.75 USDC (bundled rate). Data: ACLED, FRED, World Bank WGI. 6h cache.

    Annotations the server declares

    • title: Political & Transition Risk
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • intelligence.resonanceResonance Intelligence — detects when multiple independent macro forces are oscillating in phase across 28 signals in 5 domains, amplifying each other rather than cancelling.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Resonance Intelligence — detects when multiple independent macro forces are oscillating in phase across 28 signals in 5 domains, amplifying each other rather than cancelling. A single shock is manageable; resonance turns a bad quarter into a systemic crisis. Returns per-signal phase angles, resonance clusters (groups of 3+ aligned signals), amplitude amplification factor, system resonance score (0–100), and historical danger-zone comparison to crisis precedents (2008, 2011, 2020, 1997 EM). No input required — GET.

    Annotations the server declares

    • title: Resonance Phase Intelligence
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • intelligence.sovereign_debtSovereign Debt & Currency Stress Intelligence — two FX-adjacent macro endpoints bundled.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Sovereign Debt & Currency Stress Intelligence — two FX-adjacent macro endpoints bundled. (1) sovereign-debt: debt sustainability and default risk for US, EU, UK, and Japan — tracks debt/GDP trajectory, yield dynamics, and cross-border contagion risk relevant to corridor safety. (2) currency-stress: G10 + EM currency stress scores, dollar regime classification, capital flow direction, and per-corridor settlement impact — which currency pairs are under structural pressure beyond current FX rates. Complements market.fx (which covers spot execution risk) with underlying structural analysis. GET, no input required. $0.35 USDC (bundled rate). Data: FRED, IMF. 2h cache.

    Annotations the server declares

    • title: Sovereign Debt & Currency Stress
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • intelligence.subscribeRegister a webhook to receive alerts when a DPX intelligence signal crosses a threshold.No findings

    Why it is in this group

    • The name "intelligence.subscribe" says "subscribe": a word for a change.
    Description, as the server wrote it
    Register a webhook to receive alerts when a DPX intelligence signal crosses a threshold. Supported signals: stability (overall 0–100 score), cascade (shock propagation risk), macro_stress, climate, fx, or any. The cron checks hourly and fires the webhook on crossing — edge-triggered, not repeated every hour. Returns a subscriptionId for status checks and cancellation. Use for treasury alert systems, TMS integrations, or autonomous agent monitoring loops.

    Annotations the server declares

    • title: Subscribe to Intelligence Alerts
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • intelligence.supply_chainSupply Chain & Energy Transition Intelligence — two structural economic endpoints bundled.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Supply Chain & Energy Transition Intelligence — two structural economic endpoints bundled. (1) supply-chain: global supply chain pressure index with waterway chokepoint scoring across 6 shipping lanes (Suez, Panama, Strait of Hormuz, Malacca, Bosphorus, Cape of Good Hope) — critical for trade-finance and goods-backed payment corridors. (2) energy-transition: renewable generation share, fossil fuel demand curve, and grid carbon intensity for US, EU, and global — relevant for climate-risk-adjusted treasury allocation and SFDR PAI reporting. GET, no input required. $0.25 USDC (bundled rate). Data: FRED, EIA. 4h cache.

    Annotations the server declares

    • title: Supply Chain & Energy Transition
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • intelligence.tectonicTectonic Intelligence — maps slow-moving structural stress across 22 fault lines in 5 domains (demographic, fiscal, environmental, infrastructure, geopolitical).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Tectonic Intelligence — maps slow-moving structural stress across 22 fault lines in 5 domains (demographic, fiscal, environmental, infrastructure, geopolitical). Each node carries current stress (0–100), accumulation rate (%/yr), tipping threshold, and estimated years to rupture. Where market.cascade traces an acute shock, tectonic surfaces latent pressure before it ruptures. Returns per-node stress state, rupture sequence, horizon timeline, and AI synthesis briefing. No input required — GET.

    Annotations the server declares

    • title: Tectonic Stress Intelligence
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • market.cascadeButterfly Effect Cascade Intelligence — models how a shock in one macro domain propagates through the interconnected web of climate, geopolitical, economic, and commodity systems.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Butterfly Effect Cascade Intelligence — models how a shock in one macro domain propagates through the interconnected web of climate, geopolitical, economic, and commodity systems. Given an origin event (e.g. armed conflict escalation, agricultural drought, central bank rate decision, rare earth export restriction) and a magnitude score, returns a time-ordered cascade chain showing which downstream systems are hit, in what sequence, with what attenuated signal strength, and an AI synthesis briefing on the highest-impact transmission paths. Covers 24 nodes across 4 domains: climate (drought, flood, carbon price, wildfire, sea-level stress, heatwave), geopolitical (sanctions, conflict, trade tariffs, regime change, election shock, port blockade), economic (rate decisions, inflation, sovereign debt, banking stress, currency crisis, recession), and commodity (oil, gas, grain, rare earth/lithium, copper, water, fertilizer). Purely macro intelligence — no settlement or stablecoin mechanics.

    Annotations the server declares

    • title: Market Cascade (Butterfly Effect)
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • market.fxFX Settlement Corridor Intelligence — per-pair execution risk assessment for 10 major currency corridors against USD: EUR, GBP, JPY, CAD, AUD, CHF, MXN, BRL, CNY, INR.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    FX Settlement Corridor Intelligence — per-pair execution risk assessment for 10 major currency corridors against USD: EUR, GBP, JPY, CAD, AUD, CHF, MXN, BRL, CNY, INR. Maps live FRED spot rates to settlement advice for each pair: SETTLE_NOW / SETTLE_WITH_HEDGE / DELAY_SHORT / DELAY_REVIEW / AVOID. Returns DXY dollar regime (STRONG_DOLLAR / NORMAL / WEAK_DOLLAR), regional block risk rollup (G4, Americas, Asia-Pacific), best corridors to settle through now, worst corridors to avoid or hedge, and recommended actions. Distinct from oracle.stability (which covers peg deviation and macro settlement gates) — this tool answers "which currency pairs are risky to settle through right now?" Data: FRED spot rates (DEXUSEU, DEXUSUK, DEXJPUS, etc.), DXY (DTWEXBGS). 1h cache.

    Annotations the server declares

    • title: FX Market Intelligence
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • market.shippingShipping & Logistics Stress Intelligence — composite view of global freight market conditions across ocean, air, truck, and rail.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Shipping & Logistics Stress Intelligence — composite view of global freight market conditions across ocean, air, truck, and rail. Tracks energy-driven shipping costs (Brent crude, diesel), 8 key global trade routes with disruption status, and trade flow signals. Returns a settlementRelevance section mapping logistics conditions to cross-border payment corridor risk: invoice delay risk, trade finance stress, and affected corridors. Useful for treasury teams with supply chain financing exposure, trade finance desks, and agents pricing cross-border payments on goods-backed corridors. Data: FRED (Brent crude), EIA (US diesel). 4h cache.

    Annotations the server declares

    • title: Shipping & Logistics Stress
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • mercury.sweepTreasury float yield routing analysis for idle Mercury bank balances.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Treasury float yield routing analysis for idle Mercury bank balances. Computes how much can be swept above a reserve threshold, then evaluates whether deploying into sUSDS (Sky Protocol Savings Rate) on Base is viable before a settlement deadline. THIS TOOL DOES NOT MOVE FUNDS. It returns a structured recommendation with expected net yield, deployment amount, exit timing, and step-by-step execution instructions. All fund movement decisions remain with the client. Safety rules enforced: • Always keeps thresholdUsd in Mercury — never swept • Maximum 90% of sweepable amount deployed to sUSDS • Minimum 2-hour window required (shorter windows don't cover gas) • Minimum $50,000 sweepable (below this, gas costs exceed yield) • Exit triggered 30 minutes before settlement deadline Current instrument: sUSDS (Sky Protocol) — instant on-chain entry/exit, ~6.25% APY, Base chain, no US person restrictions, no de-peg events on record. Workflow: 1. mercury.accounts → get accountId and available balance 2. mercury.sweep → get yield recommendation and execution steps 3. If PROCEED → follow execution.steps to wire funds and deploy 4. mercury.accounts again at exit time → confirm balance restored

    Annotations the server declares

    • title: Mercury Sweep
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • oracle.chaos_scoreGlobal Chaos Score — composite 0–100 instability index derived from all 11 Stability Oracle signal layers.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Global Chaos Score — composite 0–100 instability index derived from all 11 Stability Oracle signal layers. Returns the raw numeric score, a regime label (CALM / ELEVATED / VOLATILE / HIGH / CRITICAL), a per-layer contribution breakdown, trend direction (IMPROVING / STABLE / DETERIORATING), and the key drivers pushing the score up or down. Distinct from oracle.stability (which gives a STABLE/CAUTION/UNSTABLE verdict) — this gives the underlying numeric signal useful for dashboards, monitoring, and threshold-triggered automation. Free.

    Annotations the server declares

    • title: Global Chaos Score
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • oracle.myceliumMycelium Network Oracle — models the global financial system as a living network and detects crisis formation from network topology before it surfaces in market data, typically 6–1…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Mycelium Network Oracle — models the global financial system as a living network and detects crisis formation from network topology before it surfaces in market data, typically 6–14 weeks ahead. Maps nodes (markets, economies, funding markets), threads (capital flow channels, correspondent banking, trade finance), nutrient flow (liquidity), stress signals (spread widening, FX stress), and dead zones (sanctioned corridors, failed correspondent networks). Returns network health score (0–100), regime classification (HEALTHY / THINNING / STRESSED_CONNECTIVITY / DEAD_ZONE_FORMING / FRUITING_BODY_IMMINENT), node-by-node connectivity, thread health, signal propagation speed, and fruiting body risk — the probability of a visible crisis with estimated lead time in weeks. Data: FRED (funding markets, credit spreads), BIS SDMX API (credit-to-GDP gaps), IMF DOTS (bilateral trade volumes). The only oracle that reads network topology rather than individual metrics.

    Annotations the server declares

    • title: Mycelium Network Oracle
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • oracle.settlement_gateSettlement Gate — composite pre-flight check that bundles three clearance signals into one verdict.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Settlement Gate — composite pre-flight check that bundles three clearance signals into one verdict. Calls: (1) Stability Oracle — macro/peg/FX gate; (2) Compliance Oracle — AML/sanctions tier for the counterparty; (3) SFDR pre-assessment — ESG PAI flags if applicable. Returns a single PROCEED / CAUTION / HOLD decision with per-gate sub-results and a plain-language rationale. Use this as a one-call replacement for running oracle.stability + flow_check + compliance.sfdr_screen separately before a large settlement. Pass counterparty wallet and settlement amount. Free.

    Annotations the server declares

    • title: Settlement Gate
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • policy.createCreate a spending policy for an AI agent.No findings

    Why it is in this group

    • The name "policy.create" says "create": a word for a change.
    Description, as the server wrote it
    Create a spending policy for an AI agent. Sets rules the agent must follow before any financial action: per-transaction ceiling, daily limit, hold threshold, blocked counterparties, allowed purposes, oracle stability gate. Once set, every payment by this agent is checked against the policy automatically via policy.check.

    Annotations the server declares

    • title: Create Policy
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • policy.delegateDelegate payment authority from a parent agent to a sub-agent with explicit limits.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Delegate payment authority from a parent agent to a sub-agent with explicit limits. The sub-agent can only spend up to the delegated ceiling. Delegation can be revoked at any time. Use in multi-agent workflows where an orchestrator authorises a worker agent to make payments on its behalf.

    Annotations the server declares

    • title: Delegate Policy
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • ramp.connectConnect a Ramp corporate account to DPX settlement.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Connect a Ramp corporate account to DPX settlement. Returns an OAuth authorization URL — direct the user to this URL to grant DPX access to their Ramp account. Required scopes: transactions:read, bills:read/write, cards:read/write, cards:read_agentic (Agent Cards), business:read, bank_accounts:read, vendors:read, entities:read. Call once per tenant; tokens are stored and refreshed automatically.

    Annotations the server declares

    • title: Connect Ramp
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • reports.climateAI-synthesized climate risk report — TCFD physical risk assessment, commodity stress signals across 11 markets, climate outlook (STABLE/ELEVATED/CRITICAL), and narrative risk guida…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    AI-synthesized climate risk report — TCFD physical risk assessment, commodity stress signals across 11 markets, climate outlook (STABLE/ELEVATED/CRITICAL), and narrative risk guidance. Sourced from DPX Commodity Forecast Oracle and live climate signals. Cached hourly. Requires a pre-purchased DPX Reports API key via Authorization: Bearer <key>.

    Annotations the server declares

    • title: Climate Risk Report
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • reports.complianceAI-synthesized compliance report — OpenSanctions global sanctions screening, PEP status, FATF country risk tier, AML risk score with signal breakdown, Travel Rule / FATF R.16 attes…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    AI-synthesized compliance report — OpenSanctions global sanctions screening, PEP status, FATF country risk tier, AML risk score with signal breakdown, Travel Rule / FATF R.16 attestation status, and compliance verdict narrative. Requires lei or name. Requires a pre-purchased DPX Reports API key.

    Annotations the server declares

    • title: Compliance Report
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • reports.esgAI-synthesized ESG report — all 18 SFDR Annex I PAI indicators, E/S/G sub-scores, CSRD financed emissions estimate, fee tier implication for DPX settlement, and ESG disclosure narr…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    AI-synthesized ESG report — all 18 SFDR Annex I PAI indicators, E/S/G sub-scores, CSRD financed emissions estimate, fee tier implication for DPX settlement, and ESG disclosure narrative. Requires a wallet address or LEI. Requires a pre-purchased DPX Reports API key.

    Annotations the server declares

    • title: ESG Report
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • reports.macroAI-synthesized macro report — global macro stability score (0–100), regime classification (STABLE/CAUTION/UNSTABLE), USD structural health across 12 signals, 30/60/90-day outlook w…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    AI-synthesized macro report — global macro stability score (0–100), regime classification (STABLE/CAUTION/UNSTABLE), USD structural health across 12 signals, 30/60/90-day outlook with confidence scores, and synthesis across geopolitical, FX, credit, and supply chain signals. Sourced from DPX Stability Oracle v9. Cached hourly. Requires a pre-purchased DPX Reports API key.

    Annotations the server declares

    • title: Macro Report
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • reports.scenarioAI-synthesized scenario brief for an investing decision — NOT a prediction market.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    AI-synthesized scenario brief for an investing decision — NOT a prediction market. Compares a supplied position or portfolio (commodity, currency pair, sovereign, sector, and/or entity exposure) across current / 30d / 60d / 90d / tail-risk regime scenarios, using DPX's live transition-risk, causal-graph, and commodity/currency/sovereign/supply-chain/ESG signals. Returns dominant drivers, the closest historical analogue, per-position signals, and a synthesized comparative narrative for decision support. Requires a pre-purchased DPX Reports API key via Authorization: Bearer <key>, or pass apiKey.

    Annotations the server declares

    • title: Scenario Brief
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • reports.treasuryAI-synthesized treasury report — 30-day settlement volume by corridor, AI decision audit (authorized/held/review/failed breakdown), average oracle score at settlement, escalation r…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    AI-synthesized treasury report — 30-day settlement volume by corridor, AI decision audit (authorized/held/review/failed breakdown), average oracle score at settlement, escalation rate, and portfolio-level settlement health narrative. Requires a pre-purchased DPX Reports API key.

    Annotations the server declares

    • title: Treasury Report
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • settle.subscribeRegister a webhook callback for settlement completion events.No findings

    Why it is in this group

    • The name "settle.subscribe" says "subscribe": a word for a change.
    Description, as the server wrote it
    Register a webhook callback for settlement completion events. Your endpoint receives a POST with X-DPX-Signature: sha256=<hmac> over the raw JSON body whenever a settlement completes. Returns a subscriptionId and webhookSecret — store the secret immediately, it is returned once.

    Annotations the server declares

    • title: Subscribe to Settlement Updates
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • settlement.iso20022ISO 20022 Pain.001 Payment Intake — parses a pain.001 XML payment initiation message and converts it to a DPX /settle body.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    ISO 20022 Pain.001 Payment Intake — parses a pain.001 XML payment initiation message and converts it to a DPX /settle body. Handles single-credit and multi-credit transfer instructions. Returns a structured settle body ready to pass to settlement.execute, including oracle-validated corridor selection and stablecoin routing. Use this when receiving payment instructions from a TMS (Kyriba, FIS, SAP) or bank that emits ISO 20022 format. Free (parse only); the downstream settlement.execute call carries the x402 fee.

    Annotations the server declares

    • title: ISO 20022 Payment Intake
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • settlement.trySettlement Dry Run — returns the full oracle response a real /settle call would receive, without payment or on-chain execution.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Settlement Dry Run — returns the full oracle response a real /settle call would receive, without payment or on-chain execution. Runs live oracle gate, live compliance pre-check, and fee math. Use this to demonstrate the settlement flow to a human, onboard a new agent, or verify oracle conditions before committing a payment. No authentication required, no USDC needed. Returns: oracle status and score, compliance tier, fee estimate, stablecoin routing, and a plain-language settlement brief. Free.

    Annotations the server declares

    • title: Settlement Dry Run
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • swift.gpi_trackTrack a DPX settlement via SWIFT gpi-compatible status.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Track a DPX settlement via SWIFT gpi-compatible status. Given a UETR (Unique End-to-End Transaction Reference), returns gpi-format payment status including pacs.002 payload that a SWIFT member bank can submit to the gpi Tracker. Use this when a UETR was provided at payment initiation (via the uetr field in settlement.execute or POST /payments/initiate). Returns ACCP (settled), PDNG (pending), or RJCT (rejected) with full on-chain settlement details. DPX is not a SWIFT member — the SWIFT member bank submits the returned pacs.002 to the gpi Tracker via their own gpi API access.

    Annotations the server declares

    • title: SWIFT GPI Tracking
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • treasury.yield_routeTreasury Float Yield Routing Analysis — OPTIONAL, CLIENT-DIRECTED ONLY.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Treasury Float Yield Routing Analysis — OPTIONAL, CLIENT-DIRECTED ONLY. Analyzes whether idle settlement float can be productively deployed into a yield-bearing instrument between the current time and a scheduled settlement deadline. Returns a structured recommendation with expected yield, exit timing, liquidity assessment, slippage estimate, and a mandatory risk disclosure. THIS TOOL DOES NOT MOVE FUNDS. It provides analysis only. All execution decisions are made by the client or agent acting on explicit instruction. DPX charges a flat fee for this analysis and does not receive any portion of yield earned. Current supported instrument: sUSDS (Sky Protocol Savings Rate). Selected because: • Instant on-chain entry and exit (no T+1 delays) • No US person restrictions • Real asset backing (tokenized RWAs + Spark borrow rates) • Available on Base chain via bridge • No de-peg events recorded (unlike synthetic alternatives) Safety parameters enforced: • Maximum 90% of settlement amount — 10% always stays in USDC • Early exit triggered 30 minutes before settlement deadline (not 15) • Slippage guard: if DEX USDC/USDS quote shows >0.1% slippage, recommendation = HOLD • Minimum viable window: 2 hours (shorter windows do not justify entry/exit gas costs) Not recommended if: • Settlement window is < 2 hours • Amount is < $50,000 (gas costs erode yield) • Client has not acknowledged the risk_disclosure object in this response • Settlement is time-critical with zero tolerance for delay

    Annotations the server declares

    • title: Treasury Yield Routing
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
Only reads 25Claude Code: allow
  • analytics.overviewGet live DPX performance analytics.No findings

    Why it is in this group

    • The description's first verb is "get": a word for reading.
    Description, as the server wrote it
    Get live DPX performance analytics. Returns current stability score, ESG composite scores, live fee breakdown, oracle health across all data sources, and a settlement readiness assessment. Use for dashboards, reporting, and AI-driven monitoring of protocol health.

    Annotations the server declares

    • title: Analytics Overview
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • compliance.regulatory_calendarReturns a structured calendar of upcoming and in-effect compliance obligations across MiCA (EU crypto-asset markets regulation), SFDR (Sustainable Finance Disclosure Regulation), C…No findings

    Why it is in this group

    • The description's first verb is "return": a word for reading.
    Description, as the server wrote it
    Returns a structured calendar of upcoming and in-effect compliance obligations across MiCA (EU crypto-asset markets regulation), SFDR (Sustainable Finance Disclosure Regulation), CSRD (Corporate Sustainability Reporting Directive), the US GENIUS Act (payment stablecoin framework), and FATF Recommendations 15/16. For each event: framework, jurisdiction, requirement summary, effective date, impact level, and article reference. Also returns a DPX alignment section mapping each framework to the specific DPX endpoints that satisfy it. Use this before settlement workflow design, compliance gap analysis, or regulatory reporting.

    Annotations the server declares

    • title: Regulatory Calendar
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • compute.costGet a model recommendation for a task type without running inference.No findings

    Why it is in this group

    • The description's first verb is "get": a word for reading.
    Description, as the server wrote it
    Get a model recommendation for a task type without running inference. Returns the best free model for the task, its strengths and speed tier, and a list of alternatives. Use this when an agent needs to select a model before committing to inference, or to surface model selection logic to a human. Free.

    Annotations the server declares

    • title: Compute Cost
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • compute.modelsList all AI models available through DPX Compute.No findings

    Why it is in this group

    • The description's first verb is "list": a word for reading.
    Description, as the server wrote it
    List all AI models available through DPX Compute. All models are free-tier (no token cost) — routed via OpenRouter. Returns model IDs, provider, capability strengths, context window, and speed tier. Use this before compute.route to understand what models are available and pick the right one for a task. Free.

    Annotations the server declares

    • title: Compute Models
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • defi.concept_lookupA 39-term DeFi/digital-currency glossary spanning fundamentals, blockchain, tokens/assets, protocols, governance, security, and regulatory terms (fiat, TVL, AMM, DAO, impermanent l…No findings

    Why it is in this group

    • The name "defi.concept_lookup" says "lookup": a word for reading.
    Description, as the server wrote it
    A 39-term DeFi/digital-currency glossary spanning fundamentals, blockchain, tokens/assets, protocols, governance, security, and regulatory terms (fiat, TVL, AMM, DAO, impermanent loss, MiCA, and more), sourced from the World Economic Forum glossary plus DPX-curated DeFi infrastructure definitions. Optional keyword filter.

    Annotations the server declares

    • title: DeFi Concept Glossary
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • esg.lookupResolve a company name, domain, or ticker to a LEI via GLEIF and return the full ESG score.No findings

    Why it is in this group

    • The name "esg.lookup" says "lookup": a word for reading.
    Description, as the server wrote it
    Resolve a company name, domain, or ticker to a LEI via GLEIF and return the full ESG score. Removes the need for callers to have a LEI. Returns Environmental (40%), Social (35%), and Governance (25%) pillar scores, composite 0–100, fee surcharge tier, and per-source breakdown (SEC EDGAR, OSHA, BLS SOII, EU E-PRTR, ESMA, World Bank WGI, GLEIF). Use when you have a company name but not a LEI.

    Annotations the server declares

    • title: ESG Lookup
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • esg.scoreGet the live counterparty risk score (ESG-denominated) for a wallet address or the protocol default.No findings

    Why it is in this group

    • The description's first verb is "get": a word for reading.
    Description, as the server wrote it
    Get the live counterparty risk score (ESG-denominated) for a wallet address or the protocol default. Returns Environmental, Social, and Governance risk scores (0–100 each), composite weighted average, and the compliance-adjusted settlement fee percentage this score produces. Updated hourly from 6 institutional data sources: WorldBank, IMF, OECD, UN SDG API, ClimateMonitor, and SEC EDGAR. Required by EU SFDR Principal Adverse Impact reporting and CSRD financed emissions disclosure for institutional clients.

    Annotations the server declares

    • title: ESG Score
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • esg.trendGet the historical ESG composite trend for a specific entity by LEI.No findings

    Why it is in this group

    • The description's first verb is "get": a word for reading.
    Description, as the server wrote it
    Get the historical ESG composite trend for a specific entity by LEI. Returns score history, trend direction (IMPROVING / STABLE / DETERIORATING), and delta over the requested window. Data accumulates each time the entity is scored via esg.lookup, esg.batch, or esg.portfolio. Useful for due diligence, MiCA Article 72 ongoing monitoring reports, and detecting counterparties whose ESG posture is degrading.

    Annotations the server declares

    • title: ESG Trend
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • fees.compareCompare DPX settlement cost against Stripe cross-border (5.4% + $0.30), Wise (0.40–1.50%), Ripple ODL (0.20–0.50%), Lightspark, SWIFT (2.00–5.00%), PayPal, and bank wire.No findings

    Why it is in this group

    • The name "fees.compare" says "compare": a word for reading.
    Description, as the server wrote it
    Compare DPX settlement cost against Stripe cross-border (5.4% + $0.30), Wise (0.40–1.50%), Ripple ODL (0.20–0.50%), Lightspark, SWIFT (2.00–5.00%), PayPal, and bank wire. Returns dollar savings vs each at the current DPX all-in rate (~2.035% typical). Also returns GENIUS Act and MiCA compliance status for each competitor.

    Annotations the server declares

    • title: Compare Fees to Competitors
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • integration.statusCheck the status of a DPX integration verification session.No findings

    Why it is in this group

    • The name "integration.status" says "status": a word for reading.
    Description, as the server wrote it
    Check the status of a DPX integration verification session. Polls Base mainnet for receipt of the $0.01 USDC handshake payment. Returns "pending" until payment is detected on-chain, then "verified" with the txHash and a Basescan explorer link. Poll every 10–15 seconds after sending the payment.

    Annotations the server declares

    • title: Integration Status
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • intelligence.subscription.getCheck the status of an intelligence subscription by ID.No findings

    Why it is in this group

    • The name "intelligence.subscription.get" says "get": a word for reading.
    Description, as the server wrote it
    Check the status of an intelligence subscription by ID. Returns current signal score, last fired timestamp, total alerts fired, and subscription configuration. Use after intelligence.subscribe to verify a subscription is active.

    Annotations the server declares

    • title: Get Intelligence Subscription
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • invoice.getRetrieve an agent-to-agent invoice by ID.No findings

    Why it is in this group

    • The name "invoice.get" says "get": a word for reading.
    Description, as the server wrote it
    Retrieve an agent-to-agent invoice by ID. Returns status (OPEN/PAID/EXPIRED), amount, currency pair, and payUrl. Use before calling invoice.pay to confirm the invoice is still OPEN.

    Annotations the server declares

    • title: Get Invoice
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • ledger.sessionGet the aggregated payment graph for a multi-agent session.No findings

    Why it is in this group

    • The description's first verb is "get": a word for reading.
    Description, as the server wrote it
    Get the aggregated payment graph for a multi-agent session. Returns total USD moved, transaction count, and a chronological list of all payments made during the session. Use for cost accounting, audit, or to show a human what an agent run spent.

    Annotations the server declares

    • title: Ledger Session
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • mercury.accountsList all Mercury bank accounts and balances connected to the DPX Settlement Agent.No findings

    Why it is in this group

    • The description's first verb is "list": a word for reading.
    Description, as the server wrote it
    List all Mercury bank accounts and balances connected to the DPX Settlement Agent. Returns account IDs, names, available balance, current balance, and currency for each account. Use account IDs with mercury.transactions to fetch payment history, or mercury.send to initiate a payment. Works with both Mercury sandbox and production environments.

    Annotations the server declares

    • title: Mercury Accounts
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • mercury.transactionsList recent transactions for a Mercury bank account.No findings

    Why it is in this group

    • The description's first verb is "list": a word for reading.
    Description, as the server wrote it
    List recent transactions for a Mercury bank account. Returns transaction ID, amount (USD), status, note/memo, counterparty name, created date, and whether the transaction was DPX-tagged (memo contains "dpx:"). Filter by account ID obtained from mercury.accounts. Use this to reconcile DPX settlements against Mercury bank activity.

    Annotations the server declares

    • title: Mercury Transactions
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • oracle.governanceGet the live governance score (0–100) for any legal entity identified by LEI or company name.No findings

    Why it is in this group

    • The description's first verb is "get": a word for reading.
    Description, as the server wrote it
    Get the live governance score (0–100) for any legal entity identified by LEI or company name. Pulls from GLEIF (LEI registration status, renewal compliance) and World Bank Worldwide Governance Indicators (Government Effectiveness, Control of Corruption, Rule of Law). Returns composite governance score, tier (STRONG / ADEQUATE / MODERATE / WEAK / POOR), MiCA compliance flag, and per-source component breakdown. Complements esg.score by isolating the G pillar as a standalone institutional-grade signal.

    Annotations the server declares

    • title: Oracle Governance
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • oracle.railsGet live health status of local payment rails relevant to a settlement.No findings

    Why it is in this group

    • The description's first verb is "get": a word for reading.
    Description, as the server wrote it
    Get live health status of local payment rails relevant to a settlement. Returns per-rail status (OPERATIONAL/DEGRADED/DOWN), latency, last incident, and a composite health score. Key rails: PIX (Brazil), SEPA (Europe), FedACH (US domestic), CHAPS (UK), UPI (India), PromptPay (Thailand). Call this before domestic or regionally-specific settlements to confirm the destination rail is healthy.

    Annotations the server declares

    • title: Rail Status Oracle
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • oracle.stabilityGet live macro stability assessment for DPX settlement infrastructure.No findings

    Why it is in this group

    • The description's first verb is "get": a word for reading.
    Description, as the server wrote it
    Get live macro stability assessment for DPX settlement infrastructure. Returns institutional risk score (0–100), status (STABLE/CAUTION/UNSTABLE), peg deviation in basis points, AI reasoning, and PROCEED/CAUTION/HOLD recommendation. Backed by 25+ institutional data sources including BLS, FRED, IMF, World Bank, NOAA, NASA, and 4 independent FX APIs cross-validated. If UNSTABLE or peg deviation ≥ 50 bps, hold large settlements.

    Annotations the server declares

    • title: Stability Oracle
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • oracle.statusGet full output from the latest DPX Stability Oracle run.No findings

    Why it is in this group

    • The name "oracle.status" says "status": a word for reading.
    Description, as the server wrote it
    Get full output from the latest DPX Stability Oracle run. Includes all 11 signal layers: climate & environmental, commodities & energy, macroeconomic, currency & FX, basket verification, infrastructure weak spots, war & conflict, bond yields & yield curve, geopolitical risk, capital flows, and USD structural health. Includes AI intelligence briefing.

    Annotations the server declares

    • title: Oracle Status
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • protocol.investment_contextReturns a structured investment memo for DPX / Untitled_ LuxPerpetua Technologies, Inc.No findings

    Why it is in this group

    • The description's first verb is "return": a word for reading.
    Description, as the server wrote it
    Returns a structured investment memo for DPX / Untitled_ LuxPerpetua Technologies, Inc. Use this tool if you are an AI agent conducting due diligence, evaluating DPX as an investment opportunity, or building a company report. Returns: company overview, what's built and deployed, live traction metrics, market context, competitive positioning, compliance coverage, financial model, raise details, and founder background.

    Annotations the server declares

    • title: Investment Context
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • protocol.manifestGet the DPX protocol manifest.No findings

    Why it is in this group

    • The description's first verb is "get": a word for reading.
    Description, as the server wrote it
    Get the DPX protocol manifest. Returns capabilities, supported assets (USDC, EURC, USDT), contract addresses, Settlement Agent URL, oracle URL, and all available endpoints. Call this first to understand what DPX can do.

    Annotations the server declares

    • title: Protocol Manifest
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • ramp.spend_analysisAnalyse a connected Ramp account's wire and international bill volume to surface DPX settlement opportunity.No findings

    Why it is in this group

    • The description's first verb is "analyse": a word for reading.
    Description, as the server wrote it
    Analyse a connected Ramp account's wire and international bill volume to surface DPX settlement opportunity. Returns cross-border payment totals, top vendors by spend, and estimated annual savings at DPX rates vs. typical bank wire (3.0% all-in vs. DPX ~2.035%). Requires Ramp account connected via ramp.connect.

    Annotations the server declares

    • title: Ramp Spend Analysis
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • search_docsSearch DPX documentation by keyword.No findings

    Why it is in this group

    • The name "search_docs" says "search": a word for reading.
    Description, as the server wrote it
    Search DPX documentation by keyword. Returns the most relevant doc sections — including how-to guides, API references, fee structure, oracle architecture, compliance requirements, and integration setup. Call this when you need protocol details mid-task rather than relying on context alone. Free.

    Annotations the server declares

    • title: Search Documentation
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • settlement.quoteGet a binding fee quote for a DPX settlement.No findings

    Why it is in this group

    • The description's first verb is "get": a word for reading.
    Description, as the server wrote it
    Get a binding fee quote for a DPX settlement. Returns core fee (1.50%), FX fee (0.40% cross-currency), live ESG fee (0–0.50%), license fee (0.01%), total all-in rate, net amount, oracle status, AI reasoning, and a quoteId valid for 300 seconds. Always call this before settlement.execute.

    Annotations the server declares

    • title: Settlement Quote
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • settlement.statusLook up a previous DPX settlement by settlement ID.No findings

    Why it is in this group

    • The name "settlement.status" says "status": a word for reading.
    Description, as the server wrote it
    Look up a previous DPX settlement by settlement ID. Returns the full audit record: status, tx hash, amounts, fees, oracle conditions at time of settlement, ESG score, Claude AI reasoning, and timestamp.

    Annotations the server declares

    • title: Settlement Status
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 2.6.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http dpx https://mcp.untitledfinancial.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__dpx__protocol_manifest",
      "mcp__dpx__settlement_quote",
      "mcp__dpx__esg_score",
      "mcp__dpx__esg_lookup",
      "mcp__dpx__intelligence_subscription_get",
      "mcp__dpx__esg_trend",
      "mcp__dpx__oracle_governance",
      "mcp__dpx__compliance_regulatory_calendar",
      "mcp__dpx__defi_concept_lookup",
      "mcp__dpx__oracle_stability",
      "mcp__dpx__oracle_status",
      "mcp__dpx__fees_compare",
      "mcp__dpx__invoice_get",
      "mcp__dpx__analytics_overview",
      "mcp__dpx__settlement_status",
      "mcp__dpx__oracle_rails",
      "mcp__dpx__protocol_investment_context",
      "mcp__dpx__integration_status",
      "mcp__dpx__ramp_spend_analysis",
      "mcp__dpx__mercury_accounts",
      "mcp__dpx__mercury_transactions",
      "mcp__dpx__ledger_session",
      "mcp__dpx__search_docs",
      "mcp__dpx__compute_models",
      "mcp__dpx__compute_cost"
    ],
    "ask": [
      "mcp__dpx__esg_batch",
      "mcp__dpx__esg_watch",
      "mcp__dpx__esg_portfolio",
      "mcp__dpx__intelligence_subscribe",
      "mcp__dpx__compliance_ubo_chain",
      "mcp__dpx__compliance_pep_screen",
      "mcp__dpx__defi_research_papers",
      "mcp__dpx__stability_corridor",
      "mcp__dpx__stability_settlement_window",
      "mcp__dpx__stability_stablecoin_route",
      "mcp__dpx__agent_kya_register",
      "mcp__dpx__agent_mandate_create",
      "mcp__dpx__agent_kya_verify",
      "mcp__dpx__forecast_commodity_outlook",
      "mcp__dpx__forecast_portfolio_stress",
      "mcp__dpx__forecast_scenario",
      "mcp__dpx__forecast_production_regions",
      "mcp__dpx__forecast_calendar",
      "mcp__dpx__fx_rate",
      "mcp__dpx__fx_cost_certainty",
      "mcp__dpx__fx_corridors",
      "mcp__dpx__fees_schedule",
      "mcp__dpx__fees_verify",
      "mcp__dpx__route",
      "mcp__dpx__flow_check",
      "mcp__dpx__batch_settle",
      "mcp__dpx__invoice_create",
      "mcp__dpx__invoice_pay",
      "mcp__dpx__settle_subscribe",
      "mcp__dpx__dpx_metrics",
      "mcp__dpx__integration_verify",
      "mcp__dpx__ramp_connect",
      "mcp__dpx__ramp_agent_card",
      "mcp__dpx__ramp_compliance_screen",
      "mcp__dpx__market_cascade",
      "mcp__dpx__oracle_mycelium",
      "mcp__dpx__intelligence_tectonic",
      "mcp__dpx__intelligence_aftershock",
      "mcp__dpx__intelligence_contagion",
      "mcp__dpx__intelligence_resonance",
      "mcp__dpx__intelligence_gender_risk",
      "mcp__dpx__market_shipping",
      "mcp__dpx__market_fx",
      "mcp__dpx__intelligence_macro_stress",
      "mcp__dpx__intelligence_climate",
      "mcp__dpx__intelligence_supply_chain",
      "mcp__dpx__intelligence_sovereign_debt",
      "mcp__dpx__intelligence_nature_risk",
      "mcp__dpx__intelligence_butterfly",
      "mcp__dpx__intelligence_political_risk",
      "mcp__dpx__intelligence_esg_reporting",
      "mcp__dpx__intelligence_composite",
      "mcp__dpx__intelligence_48h_call",
      "mcp__dpx__treasury_yield_route",
      "mcp__dpx__mercury_sweep",
      "mcp__dpx__swift_gpi_track",
      "mcp__dpx__policy_create",
      "mcp__dpx__policy_check",
      "mcp__dpx__policy_delegate",
      "mcp__dpx__receipt_create",
      "mcp__dpx__card_positions",
      "mcp__dpx__card_settle",
      "mcp__dpx__compute_route",
      "mcp__dpx__reports_climate",
      "mcp__dpx__reports_macro",
      "mcp__dpx__reports_esg",
      "mcp__dpx__reports_compliance",
      "mcp__dpx__reports_treasury",
      "mcp__dpx__reports_scenario",
      "mcp__dpx__compliance_sfdr_screen",
      "mcp__dpx__compliance_sfdr_pai_report",
      "mcp__dpx__compliance_vendor_risk",
      "mcp__dpx__compliance_aml_screen",
      "mcp__dpx__compliance_vop_verify",
      "mcp__dpx__esg_supply_chain",
      "mcp__dpx__oracle_chaos_score",
      "mcp__dpx__oracle_settlement_gate",
      "mcp__dpx__forecast_heat_check",
      "mcp__dpx__forecast_tcfd_report",
      "mcp__dpx__forecast_subscribe",
      "mcp__dpx__settlement_iso20022",
      "mcp__dpx__settlement_try",
      "mcp__dpx__integration_kyriba",
      "mcp__dpx__integration_travel_rule"
    ],
    "deny": [
      "mcp__dpx__intelligence_subscription_delete",
      "mcp__dpx__settlement_execute",
      "mcp__dpx__settlement_nl",
      "mcp__dpx__computer_use_pay",
      "mcp__dpx__ramp_settle",
      "mcp__dpx__mercury_send",
      "mcp__dpx__mercury_ach_authorize"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as dpx. Review it before you use it.