Skip to main content
Glama
axhadzbel-ui

KushBitx MCP agent

by axhadzbel-ui
OverviewSchemaSourceRelated ServersDiscussionsAdmin
JavaScript
Local

KushBitx MCP agent

MCP-compatible agent driving the published @kushbitx/sdk@0.1.0 — submitted against kushBitxHQ/kushbitx-sdk#1.

Keyless and reproducible: the full run needs no LLM key, no wallet, no payment. An MCP client drives an MCP server (McpServer + InMemoryTransport from @modelcontextprotocol/sdk) through listTools + callTool: free token preview → advisory SpendGuard evaluation → unsigned x402 challenge discovery → summary.

What it does

MCP tool

SDK method

Notes

kushbitx_preview_token

previewToken

Free market preview. Not a security verdict. Retries one transient HTTP 503.

kushbitx_evaluate_spend

evaluateSpend

Advisory policy evaluation only. executionAuthorized reported as returned.

kushbitx_get_payment_challenge

getPaymentChallenge

Stops at HTTP 402. Never signs or pays.

SpendGuard does not execute or block transactions. Enforcement belongs to the signing or execution layer. No tool requests, stores, or sends a private key. submitPaidCheck, recovery, and policy mutation are not exposed.

Related MCP server: biz.nibiashara/shelves

Setup

Node 22+.

git clone <this-repo>
cd kushbitx-mcp-agent
npm install   # pulls @kushbitx/sdk@0.1.0 from the public registry

Run the agent (keyless, free path only)

npm start

Writes sanitized evidence to evidence/run-output.txt.

Expected console tail:

preview      : PASS
spendguard   : decision=... executionAuthorized=false
x402 challenge: service=token-risk path=/api/token-risk x402Version=2
No private key was requested, read, or stored. No payment was signed.

Run the MCP server standalone (any MCP host)

npm run server

stdio transport — attach from Claude Desktop, MCP Inspector, or any MCP-compatible client; the server exposes exactly the three tools above.

Tests (no key required)

npm test

Covers: exactly three tools with no signing surface, input validation, preview 503-retry + genuine-500 failure, SpendGuard advisory / executionAuthorized: false, x402 402 handling, MCP listTools/callTool round-trip, and the full agent loop on a fake client.

Sample output

See evidence/run-output.txt — sanitized live run. Secrets, keys, signatures, wallet addresses under test, and personal data are stripped.

Acceptance map

Requirement

Where

Public repo with working integration

this repository

npm install @kushbitx/sdk

package.json (0.1.0 pinned)

Actual agent runtime, not a manual script

src/agent.mjs — MCP client drives MCP server tools over an MCP transport

Free token preview

kushbitx_preview_token

One SpendGuard evaluation

kushbitx_evaluate_spend

Unsigned x402 challenge

kushbitx_get_payment_challenge

Reproducible setup

this README

Sanitized sample output

evidence/run-output.txt

Automated tests

npm test

Security

  • No keys in the repo (.gitignore covers .env, *.pem).

    • Base payout address sent privately after acceptance, never posted publicly.

      • Demo recipient 0x0d68…12f22 is the public KushBitx example payTo, not a user wallet.

      • Apache-2.0.

This server cannot be deployed

One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

Maintenance

ActivityMaintained
ResponsivenessNo issues

Resources

Related MCP Connectors

Related MCP Servers

  • OceanAlt AML

    OceanAlt
    A
    license
    Not graded
    quality
    C
    maintenance
    Crypto compliance tools for AI-agent payments: screen any address for sanctions, frozen-stablecoin and hacker/mixer exposure across 8+ chains, trace fund taint, and get an allow/review/decline decision before settlement. Free keyless address checks; deeper endpoints are x402-payable.
    134 npm
    MIT

  • x402 Preflight

    chico10117
    F
    license
    Not graded
    quality
    B
    maintenance
    Enables autonomous agents to inspect and audit unfamiliar x402 endpoints before spending USDC, using bounded read-only probes to surface payment challenges, pricing, network, receiver, and operational signals without signing or spending funds.
    -