Skip to content

Fermat

by ai.phase.xyz · remote · no sign-in to list tools · v0.3.0 · published by xyz.phase.ai

OpenAI-compatible LLM gateway: pay per request with an API key, signed receipt for each call.

Deletes · 1Changes · 3
CompareRegistry entry

7 tools: 1 can delete or cancel things, 3 change things and 3 only read.

Scanned Oct 22, 2026

No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http gateway https://mcp.fermat.ai.phase.xyz/mcp --header 'Authorization: <your-authorization>'

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

7 tools

Deletes or cancels 1Claude Code: deny
  • sessionSaved chat sessions on the Phase AI gateway: create one (returns an id and a shareable /s/<id> link), read its thread, list the wallet's sessions (wallet mode only: signed with the…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Saved chat sessions on the Phase AI gateway: create one (returns an id and a shareable /s/<id> link), read its thread, list the wallet's sessions (wallet mode only: signed with the wallet key, no transaction), or delete one. Pass the id as `session` to chat and the gateway carries the context between turns and visits.

    Annotations the server declares

    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: false
    • readOnlyHint: false
    • title: Saved chat sessions
Changes things 3Claude Code: ask
  • chatRun a chat completion on the Phase AI gateway, paid from the Phase API key or the wallet this server uses (free models cost nothing).No findings

    Why it is in this group

    • The description's first verb is "run": a word for a change.
    Description, as the server wrote it
    Run a chat completion on the Phase AI gateway, paid from the Phase API key or the wallet this server uses (free models cost nothing). Returns the answer, actual price, task id for the receipt and usage.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
    • readOnlyHint: false
    • title: Chat with a model (spends credit)
  • embedCompute embeddings on the Phase AI gateway (paid from the Phase API key or the wallet).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Compute embeddings on the Phase AI gateway (paid from the Phase API key or the wallet).

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
    • readOnlyHint: false
    • title: Compute embeddings (spends credit)
  • keyBalance, daily cap and spend of the Phase API key this server pays with (key mode).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Balance, daily cap and spend of the Phase API key this server pays with (key mode).

    Annotations the server declares

    • idempotentHint: false
    • openWorldHint: false
    • readOnlyHint: true
    • title: Balance and limits of the key
Only reads 3Claude Code: allow
  • list_modelsList models of the Phase AI gateway with prices (USD per 1M tokens, fee per call) and layer (flagship | open | class | free).No findings

    Why it is in this group

    • The name "list_models" says "list": a word for reading.
    Description, as the server wrote it
    List models of the Phase AI gateway with prices (USD per 1M tokens, fee per call) and layer (flagship | open | class | free).

    Annotations the server declares

    • idempotentHint: false
    • openWorldHint: false
    • readOnlyHint: true
    • title: List models and prices
  • quoteGet the price ceiling for a chat request without paying (the gateway's 402 quote).No findings

    Why it is in this group

    • The description's first verb is "get": a word for reading.
    Description, as the server wrote it
    Get the price ceiling for a chat request without paying (the gateway's 402 quote).

    Annotations the server declares

    • idempotentHint: false
    • openWorldHint: false
    • readOnlyHint: true
    • title: Price ceiling of a request
  • receiptFetch the public receipt of a paid request by task id (model, provider, tokens, price, settlement tx, request/response hashes, signatures) and its Merkle proof once the weekly epoc…No findings

    Why it is in this group

    • The description's first verb is "fetch": a word for reading.
    Description, as the server wrote it
    Fetch the public receipt of a paid request by task id (model, provider, tokens, price, settlement tx, request/response hashes, signatures) and its Merkle proof once the weekly epoch is closed.

    Annotations the server declares

    • idempotentHint: false
    • openWorldHint: false
    • readOnlyHint: true
    • title: Read a public receipt

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.3.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http gateway https://mcp.fermat.ai.phase.xyz/mcp --header 'Authorization: <your-authorization>'

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__gateway__list_models",
      "mcp__gateway__quote",
      "mcp__gateway__receipt"
    ],
    "ask": [
      "mcp__gateway__chat",
      "mcp__gateway__embed",
      "mcp__gateway__key"
    ],
    "deny": [
      "mcp__gateway__session"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as gateway. Review it before you use it.