Back to Browse

Cortexcloud MCP Server

Developer ToolsUse Caution3.5MCP RegistryLocalRemote
Free

Server data from the Official MCP Registry

Pay-per-call QUBO/Ising optimization for AI agents via x402 (USDC on Base). No API keys.

About

Pay-per-call QUBO/Ising optimization for AI agents via x402 (USDC on Base). No API keys.

Remote endpoints: streamable-http: https://api.cortexcloud.org/mcp

Security Report

3.5
Use Caution3.5High Risk

This MCP server implements a pay-per-call AI/data gateway using the x402 protocol with legitimate financial infrastructure. While the codebase is well-structured and permissions align with its purpose (network access for APIs, env vars for wallet keys), there are several security concerns: EVM private keys are passed via environment variables without explicit warnings about wallet compromise, API keys for multiple providers (Gemini, OpenRouter, xAI) are stored in config with minimal validation, error messages expose upstream provider details that could aid reconnaissance, and input validation is incomplete in some routes. The architecture is sound but implementation details warrant hardening. Supply chain analysis found 6 known vulnerabilities in dependencies (0 critical, 4 high severity).

8 files analyzed · 15 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

process_spawn

Check that this permission is expected for this type of plugin.

How to Install & Connect

Available as Local & Remote

This plugin can run on your machine or connect to a hosted endpoint. during install.

Documentation

View on GitHub

From the project's GitHub README.

@cortexcloud/mcp

MCP server for the CortexCloud API — pay-per-call AI generation, data and RPC endpoints through the x402 protocol. No API keys, no subscriptions; every tool call is billed in USDC on Base and settles to the operator's wallet.

Quick start (hosted)

No install required — point any MCP client at the public Streamable HTTP endpoint:

https://api.cortexcloud.org/mcp

Your MCP client handles the x402 payment handshake automatically; each call pays from the wallet your agent is authorized to spend.

Running it yourself

Streamable HTTP server (like the hosted one)

npm run build
EVM_PRIVATE_KEY=0x... node dist/http.js      # signs + pays calls; defaults to port 3200
# listening on http://localhost:3200/mcp
EnvDefaultMeaning
EVM_PRIVATE_KEYWallet that signs + pays each x402 call. Required.
PORT3200HTTP listen port
CORTEXCLOUD_URLhttps://api.cortexcloud.orgUpstream CortexCloud API base
CORTEXCLOUD_PAYTO"0x5a03…ea143"Wallet where call revenue settles

stdio (Claude Desktop / CLI)

{
  "mcpServers": {
    "cortexcloud": {
      "command": "npx",
      "args": ["-y", "@cortexcloud/mcp"],
      "env": { "EVM_PRIVATE_KEY": "0x..." }
    }
  }
}

Tools (22)

AIchat_completions responses embeddings models image_generation text_to_speech Search & newsweb_search search_contents news Market/dataprices coins_search crypto_history fx_list fx_price defi_yields defi_protocols Chainbase_balance base_token_balance eth_balance ethereum_rpc dex_search dex_pairs

Schema for every tool is exposed via MCP's tools/list — no docs drift, what a client sees is what runs.

How x402 works under the hood

Each call performs an x402 HTTP exchange against the CortexCloud API: request → payment challenge → signed TransferWithAuthorization → valid data. The SDK core handles the handshake; @x402/evm builds + signs the transfer; @x402/fetch drives the HTTP loop. Money in is trustless — cold settlement on-chain, no API-key storage, no subscriptions, no per-seat licensing.

License

MIT

Reviews

No reviews yet

Be the first to review this server!