Back to Browse

Route Verdict MCP Server

Developer ToolsUse Caution4.6MCP RegistryLocal
Free

Server data from the Official MCP Registry

MCP server for RouteVerdict — x402 endpoint trust checks ($0.05 USDC on Base)

About

MCP server for RouteVerdict — x402 endpoint trust checks ($0.05 USDC on Base)

Security Report

4.6
Use Caution4.6High Risk

This is a legitimate x402 payment client for the RouteVerdict service. Its permissions (outbound HTTP, reading the signing key from env or a key file, and local EIP-712 signing) match its stated purpose, and it includes a per-call spend guard and never pays without an operator-supplied signer. The main concern is that the client does not pin the payment asset or payTo address, so a compromised or spoofed challenge could direct signed authorizations elsewhere, though each call is capped at $0.05. Supply chain analysis found 5 known vulnerabilities in dependencies (0 critical, 5 high severity). Package verification found 1 issue.

9 files analyzed · 11 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

crypto_sign

Check that this permission is expected for this type of plugin.

What You'll Need

Set these up before or after installing:

EVM private key (0x...) of a wallet holding USDC on Base. Used locally to sign the x402 EIP-3009 authorization. For paid calls.Required

Environment variable: AGENT_PRIVATE_KEY

Path to a file containing that key (alternative to AGENT_PRIVATE_KEY).Optional

Environment variable: AGENT_KEY_FILE

Service base URL override (default: production).Optional

Environment variable: ROUTE_VERDICT_URL

Spend guard per call in USDC micro-units (default 50000 = $0.05, the known price). The client refuses to sign anything priced above it.Optional

Environment variable: ROUTE_VERDICT_MAX_AMOUNT_UNITS

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-quincygb-route-verdict-mcp": {
      "env": {
        "AGENT_KEY_FILE": "your-agent-key-file-here",
        "AGENT_PRIVATE_KEY": "your-agent-private-key-here",
        "ROUTE_VERDICT_URL": "your-route-verdict-url-here",
        "ROUTE_VERDICT_MAX_AMOUNT_UNITS": "your-route-verdict-max-amount-units-here"
      },
      "args": [
        "route-verdict-mcp"
      ],
      "command": "uvx"
    }
  }
}

Reviews

No reviews yet

Be the first to review this server!