Blue Cap Machine Commerce

by soundiq.io · remote · no sign-in to list tools · v1.1.0 · published by io.soundiq

Deterministic MCP utilities, validation, evidence verification, and x402 commerce on Base.

Changes · 7

Compare Registry entry

7 tools: 7 change things.

Scanned Oct 21, 2026

Deletes or cancels0Claude Code: deny
Can't be undone0Claude Code: ask
Changes things7Claude Code: ask: see these tools
Only reads0Claude Code: allow

4 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http bluecap-evidence-verify https://machine.soundiq.io/mcp

Findings

Matches of fixed checks, with the text they matched.

4 warn

Warnschema_validate
The server marks "schema_validate" as not read-only (readOnlyHint: false), and its words say it reads.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "schema_validate" says "validate": a word for reading.
What this check looks for
Warnevidence_verify_mpp
The server marks "evidence_verify_mpp" as not read-only (readOnlyHint: false), and its words say it reads.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "return": a word for reading.
What this check looks for
Warnschema_validate_mpp
The server marks "schema_validate_mpp" as not read-only (readOnlyHint: false), and its words say it reads.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "schema_validate_mpp" says "validate": a word for reading.
What this check looks for
Warnhash_compute_mpp
The server marks "hash_compute_mpp" as not read-only (readOnlyHint: false), and its words say it reads.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "return": a word for reading.
What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

7 tools

Changes things 7Creates or changes something that can be changed back.Claude Code: ask

agent_walletProvision a free Blue Cap machine wallet (Base Mainnet, USDC).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Provision a free Blue Cap machine wallet (Base Mainnet, USDC).
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
evidence_verifyVerify supplied structured evidence and return a machine-readable verification result.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Verify supplied structured evidence and return a machine-readable verification result.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
evidence_verify_mppReturn a Stripe MPP payment link for this Blue Cap capability.1 finding
Why it is in this group
- The description's first verb is "return": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
Findings
- Warn
  The server marks "evidence_verify_mpp" as not read-only (readOnlyHint: false), and its words say it reads.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "return": a word for reading.
  What this check looks for
Description, as the server wrote it
Return a Stripe MPP payment link for this Blue Cap capability. POST the same arguments to paymentLink to receive the HTTP 402 challenge and complete payment.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
hash_computeCompute a SHA-256 digest for customer-supplied UTF-8 or base64-decoded bytes through a stable machine endpoint.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Compute a SHA-256 digest for customer-supplied UTF-8 or base64-decoded bytes through a stable machine endpoint. Returns the reproducible digest through a receipted external execution.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
hash_compute_mppReturn a Stripe MPP payment link for this Blue Cap capability.1 finding
Why it is in this group
- The description's first verb is "return": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
Findings
- Warn
  The server marks "hash_compute_mpp" as not read-only (readOnlyHint: false), and its words say it reads.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "return": a word for reading.
  What this check looks for
Description, as the server wrote it
Return a Stripe MPP payment link for this Blue Cap capability. POST the same arguments to paymentLink to receive the HTTP 402 challenge and complete payment.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
schema_validateValidate supplied structured data against a customer-supplied JSON Schema Draft 2020-12 supported subset.1 finding
Why it is in this group
- The name "schema_validate" says "validate": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
Findings
- Warn
  The server marks "schema_validate" as not read-only (readOnlyHint: false), and its words say it reads.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "schema_validate" says "validate": a word for reading.
  What this check looks for
Description, as the server wrote it
Validate supplied structured data against a customer-supplied JSON Schema Draft 2020-12 supported subset. Returns a deterministic machine-readable validity result and bounded errors through a receipted external execution.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
schema_validate_mppReturn a Stripe MPP payment link for this Blue Cap capability.1 finding
Why it is in this group
- The name "schema_validate_mpp" says "validate": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
Findings
- Warn
  The server marks "schema_validate_mpp" as not read-only (readOnlyHint: false), and its words say it reads.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "schema_validate_mpp" says "validate": a word for reading.
  What this check looks for
Description, as the server wrote it
Return a Stripe MPP payment link for this Blue Cap capability. POST the same arguments to paymentLink to receive the HTTP 402 challenge and complete payment.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.1.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http bluecap-evidence-verify https://machine.soundiq.io/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [],
    "ask": [
      "mcp__bluecap-evidence-verify__evidence_verify",
      "mcp__bluecap-evidence-verify__agent_wallet",
      "mcp__bluecap-evidence-verify__schema_validate",
      "mcp__bluecap-evidence-verify__hash_compute",
      "mcp__bluecap-evidence-verify__evidence_verify_mpp",
      "mcp__bluecap-evidence-verify__schema_validate_mpp",
      "mcp__bluecap-evidence-verify__hash_compute_mpp"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as bluecap-evidence-verify. Review it before you use it.

Keep track

Get told when this server's tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.soundiq/bluecap-evidence-verify/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Anlyon alternative

7 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Compare with other servers for the same product.

Source: MCP Registry. Synced Oct 21, 2026, 18:52 UTC.

For agents: Markdown · JSON · report this listing