FinCobra MCP
FinCobra MCP — 面向 Claude、Cursor 和 Codex 的加密货币结账
Model Context Protocol (MCP) 服务器,用于 FinCobra 加密货币结账和支付。可创建 BTC、USDT 和 USDC 的托管发票(结算资产来自仪表盘支付方式;金额为 USD)。适用于 Claude Code、Cursor 和 Codex。Watchlist 访问为只读。尚未发布到 npm — 请从 GitHub 安装。
fincobra-mcp 0.1.0 尚未发布到 npm。在发布之前,请从 GitHub 安装:
npx -y github:dexstandard/fincobra-mcp使用 npx -y github:dexstandard/fincobra-mcp#v0.1.0 固定到某个源码版本。需要 Node.js 20+。
Checkout:创建托管支付发票并读取其状态
Watchlist:只读来源列表和手动净资产明细
这不是支付平台,也不是 Watchlist 写入 API。
工具(v0)
Checkout
Tool | 功能 |
| 创建 USD 发票。返回 |
| 按 |
没有 list_invoices 工具。Checkout API 密钥无法列出发票。
发票金额为 USD。结算资产来自仪表盘支付方式:
网络 | 资产 |
Bitcoin (xpub) | BTC |
Ethereum mainnet | USDT, USDC |
Solana | USDT, USDC |
Arbitrum One | USDC |
Base | USDC |
Watchlist(只读)
Tool | 功能 |
| 手动录入的银行 / 现金 / 房产总额(USD)。 |
| 来自现有列表 API 的钱包、交易所和手动资产。 |
| 按 id 获取单个来源( |
Watchlist 没有公共 API 密钥。认证使用 Watchlist Web 应用所用的 Identity session cookie。
银行、现金和房产是手动录入的产品条目,并非实时银行或产权数据源。实时的加密 USD 余额在 Watchlist UI 中计算,不在列表 API 上。服务器不会凭空生成 cryptoUsd 总额。
Watchlist 工具不会添加钱包、编辑银行、更改账单或导出税务数据。
Related MCP server: Yolfi MCP Server
环境
变量 | 是否必需 | 说明 |
| 两个变量之一 | Checkout 仪表盘 API 密钥( |
| 否 | Checkout 源地址。默认为 |
| 两个变量之一 | Identity |
| 否 | Watchlist 源地址。默认为 |
可以配置 Checkout、Watchlist 或两者。未配置的模块对应的工具会返回配置错误。
开发环境源地址:https://dev.fincobra.com 和 https://watch.dev.fincobra.com。
Cursor
添加到 .cursor/mcp.json(项目)或 ~/.cursor/mcp.json(用户):
{
"mcpServers": {
"fincobra": {
"command": "npx",
"args": ["-y", "github:dexstandard/fincobra-mcp"],
"env": {
"FINCOBRA_CHECKOUT_API_KEY": "fc_live_...",
"FINCOBRA_CHECKOUT_BASE_URL": "https://fincobra.com",
"FINCOBRA_WATCHLIST_SESSION_TOKEN": "<session-cookie-value>",
"FINCOBRA_WATCHLIST_BASE_URL": "https://watch.fincobra.com"
}
}
}
}Claude Code
claude mcp add fincobra \
--env FINCOBRA_CHECKOUT_API_KEY=fc_live_... \
--env FINCOBRA_WATCHLIST_SESSION_TOKEN=<session-cookie-value> \
-- npx -y github:dexstandard/fincobra-mcp或者将相同的 mcpServers 对象添加到 .mcp.json / ~/.claude.json。
Codex
codex mcp add fincobra \
--env FINCOBRA_CHECKOUT_API_KEY=fc_live_... \
--env FINCOBRA_WATCHLIST_SESSION_TOKEN=<session-cookie-value> \
-- npx -y github:dexstandard/fincobra-mcp或者在 ~/.codex/config.toml 中:
[mcp_servers.fincobra]
command = "npx"
args = ["-y", "github:dexstandard/fincobra-mcp"]
[mcp_servers.fincobra.env]
FINCOBRA_CHECKOUT_API_KEY = "fc_live_..."
FINCOBRA_WATCHLIST_SESSION_TOKEN = "<session-cookie-value>"本地运行
npm install
FINCOBRA_CHECKOUT_API_KEY=fc_live_... \
FINCOBRA_WATCHLIST_SESSION_TOKEN=... \
npm start该进程通过 stdio 使用 MCP 通信。不要将应用日志写入 stdout。
冒烟测试
FINCOBRA_CHECKOUT_API_KEY=fc_live_... \
FINCOBRA_WATCHLIST_SESSION_TOKEN=... \
npm run smoke单元测试模拟 API,不需要凭据:
npm test认证
模块 | 凭据 | Header / cookie |
Checkout | 仪表盘 API 密钥( |
|
Watchlist | Identity 会话 cookie( |
|
从已登录的浏览器中复制 Watchlist 的 session cookie(DevTools → Application → Cookies)。将密钥和会话令牌保存在 MCP 服务器环境中,而不是聊天中。
API
Checkout:
POST /api/checkout/invoicesGET /api/checkout/invoices/:id认证:
X-Api-Key
Watchlist:
GET /api/watchlist/walletsGET /api/watchlist/exchangesGET /api/watchlist/manual-assetsGET /api/watchlist/fx-rates认证:
Cookie: session=...
将付款人引导至 paymentUrl。将 confirmed 和 paid_out_of_band 视为已支付。除非你接受未确认的加密货币付款,否则将 payment_detected 视为待处理。
许可证
Available Tools
5 toolscreate_invoiceCreate Checkout invoiceA
Create a FinCobra Checkout invoice in USD and return the hosted payment URL. Payment methods (Bitcoin, Ethereum USDT/USDC, Solana USDT/USDC, Arbitrum One USDC, Base USDC) are those enabled in the merchant dashboard.
| Name | Required | Description | Default |
|---|---|---|---|
| amountUsd | Yes | Invoice amount in USD. Minimum 0.01. Settlement coins and chains come from the merchant Checkout payment methods, not this field. | |
| description | No | Product or service description shown on the invoice. | |
| customerEmail | No | Customer email for reconciliation. | |
| merchantReference | No | Your order or internal reference. |
Output Schema
| Name | Required | Description |
|---|---|---|
| id | Yes | |
| status | Yes | |
| amountUsd | Yes | |
| paymentUrl | Yes | |
| productName | Yes | |
| paymentCoverage | Yes | |
| merchantReference | Yes | |
| receivedAmountUsd | Yes | |
| confirmedAmountUsd | Yes | |
| remainingAmountUsd | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description discloses the core side effect (creates an invoice), the return value (hosted payment URL), and an important behavioral constraint (payment methods come from the merchant dashboard, not from parameters). This adds meaningful context beyond the annotations, which only indicate readOnly, idempotent, and destructive hints are all false.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences with no filler. The primary action and return value are front-loaded, and the payment-method caveat is included compactly.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a create operation with a 100%-covered schema, an output schema, and non-destructive annotations, the description and schema together give an agent everything needed to invoke the tool correctly. The key operational fact—that payment methods come from the merchant dashboard—is explicitly stated.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema already documents every parameter, including the minimum amount and field purposes. The description adds no new parameter-level meaning beyond stating that the invoice is in USD and that payment methods are dashboard-controlled.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb and resource: 'Create a FinCobra Checkout invoice in USD' and clearly names the return value ('hosted payment URL'). This distinguishes it from sibling tools like get_invoice and list_sources, which are retrieval operations.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description clearly implies this tool is for creating checkout invoices and explains that payment methods are controlled by the merchant dashboard rather than caller input. It does not explicitly say 'use this instead of get_invoice', but the creation-versus-read distinction makes the intended use clear.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_invoiceGet Checkout invoiceARead-onlyIdempotent
Look up a known FinCobra Checkout invoice by id. Returns status, hosted payment URL, and amounts.
| Name | Required | Description | Default |
|---|---|---|---|
| invoiceId | Yes | Invoice id returned by create_invoice. |
Output Schema
| Name | Required | Description |
|---|---|---|
| id | Yes | |
| status | Yes | |
| amountUsd | Yes | |
| paymentUrl | Yes | |
| productName | Yes | |
| paymentCoverage | Yes | |
| merchantReference | Yes | |
| receivedAmountUsd | Yes | |
| confirmedAmountUsd | Yes | |
| remainingAmountUsd | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, idempotentHint=true, and destructiveHint=false, covering the safety profile. The description adds behavioral value by specifying the returned data (status, URL, amounts), which is not expressed in the annotations. No contradictions or undisclosed side effects are present.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single sentence that front-loads the core action ('Look up'), specifies the resource, and lists the key outputs. Every word earns its place, with no redundancy or filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
This is a simple single-parameter read operation, the annotations fully cover its side-effect profile, an output schema exists to describe return values, and the description states the essential return fields. Nothing material is missing for an agent to select and invoke the tool correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100% — the only parameter, invoiceId, is already documented with 'Invoice id returned by create_invoice.' The description adds no additional parameter meaning beyond saying lookup is by id, so the baseline of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('Look up') and a specific resource ('a known FinCobra Checkout invoice by id'), clearly distinguishing it from sibling tools like create_invoice or list_sources. It also states the key return contents (status, hosted payment URL, amounts), leaving no ambiguity about the tool's function.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The phrase 'a known invoice by id' makes it clear this tool is for retrieving an existing invoice, not for creating or listing. It implies the invoice id comes from a prior create_invoice call, which sets context. However, it does not explicitly name alternatives or exclusion conditions, so it stops short of full guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_net_worthGet Watchlist net worthARead-onlyIdempotent
Read Watchlist net worth from existing list APIs. Banks, cash, and property are manual entries. Live crypto USD balances are not on the list API and come back as null.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Output Schema
| Name | Required | Description |
|---|---|---|
| notes | Yes | |
| cashUsd | Yes | |
| banksUsd | Yes | |
| cryptoUsd | Yes | |
| propertyUsd | Yes | |
| sourceCounts | Yes | |
| manualTotalUsd | Yes | |
| unpricedManualAssetCount | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, idempotent, and non-destructive behavior. The description adds valuable context beyond those annotations by revealing that banks, cash, and property are manual entries and that live crypto USD balances are null on the list API. This prepares the agent for null values and the nature of the underlying data.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences with no filler. The first sentence front-loads the core purpose and data source, and the second provides essential caveats about manual entries and null crypto balances. Every sentence contributes useful information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no parameters, a read-only annotation set, and an output schema present, the description is complete for practical use. It explains the two most important behavioral caveats — manual entries and null crypto values — that an agent would need to interpret results correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
There are zero parameters, so the schema already fully covers input semantics. The description is not required to add parameter details, and it doesn't attempt to invent any — the baseline of 4 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb ('Read') and resource ('Watchlist net worth'), and clarifies that it aggregates from existing list APIs. This makes the tool's purpose immediately distinguishable from invoice and source siblings like get_invoice and list_sources.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies this is the tool to call when the agent needs a watchlist net worth figure, and it gives caveats about manual entries and crypto nulls. However, it does not explicitly state when to prefer this over alternatives such as list_sources, nor does it state when not to use it.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_sourceGet Watchlist sourceARead-onlyIdempotent
Look up one Watchlist source by the id returned from list_sources.
| Name | Required | Description | Default |
|---|---|---|---|
| sourceId | Yes | Source id from list_sources, such as wallet:12, exchange:binance, or manual:3. |
Output Schema
| Name | Required | Description |
|---|---|---|
| id | Yes | |
| kind | Yes | |
| label | Yes | |
| value | Yes | |
| currency | Yes | |
| provider | Yes | |
| tokenPnl | Yes | |
| valueUsd | Yes | |
| blockchain | Yes | |
| accountType | Yes | |
| displayAddress | Yes | |
| mortgageBalance | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The annotations already declare readOnlyHint=true, idempotentHint=true, and destructiveHint=false, so the safety profile is covered. The description adds little behavioral context beyond the id provenance, and it does not contradict the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
One clean sentence with no filler or repeated schema content. The key constraint, that the id comes from list_sources, is front-loaded and immediately actionable.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With a single required parameter, full schema coverage, comprehensive annotations, and an output schema present, nothing essential for calling this tool correctly is missing. The description is fully adequate for the tool's low complexity.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema fully documents sourceId at 100% coverage, including examples like wallet:12, exchange:binance, and manual:3. The description merely restates the provenance relationship already present in the schema, so the baseline of 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description says 'Look up one Watchlist source by the id returned from list_sources.' This uses a specific verb, names the resource, and clearly indicates singular lookup behavior, distinguishing it from list_sources without needing to inspect schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It explicitly states that the id comes from list_sources, establishing a clear call sequence for the agent. It does not explicitly enumerate exclusions or alternatives, but the 'one ... by id' phrasing sufficiently implies the contrast with listing.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_sourcesList Watchlist sourcesARead-onlyIdempotent
List Watchlist wallets, exchanges, and manual bank/cash/property sources. Includes stored token PnL cost-basis rows when the API has them. Does not add wallets or edit assets.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Output Schema
| Name | Required | Description |
|---|---|---|
| sources | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, idempotentHint, and destructiveHint, covering the safety profile. The description adds useful behavioral nuance: the response conditionally includes stored token PnL cost-basis rows when the API has them, and the operation never mutates data. This complements the annotations without contradicting them.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two crisp sentences lead with the primary action, then add a conditional inclusion detail, then close with a scope boundary. There is no filler and every sentence contributes information an agent needs to invoke the tool correctly.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a zero-parameter, read-only listing tool with an output schema available, the description covers what is listed, the conditional PnL inclusion, and the non-mutating nature. Nothing essential is missing for an agent to decide on and execute this tool correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool accepts no parameters, so the input schema is already complete. Per the baseline for zero-parameter tools, there is nothing further the description needs to compensate for, and it introduces no parameter-related ambiguity.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('List') and a defined resource ('Watchlist wallets, exchanges, and manual bank/cash/property sources'), which immediately clarifies what is returned. The boundary clause 'Does not add wallets or edit assets' distinguishes the tool from mutation-focused siblings like create_invoice. This makes the tool's scope unmistakable.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description clearly establishes when to use the tool: to retrieve a read-only list of watchlist sources, including PnL cost-basis rows when available. It also states a when-not boundary: it does not add wallets or edit assets. However, it never names sibling alternatives such as get_source for a single source, so it stops short of full 5 guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
5 tool updates
v0.2.0- First observed
create_invoice - First observed
get_invoice - First observed
get_net_worth - First observed
get_source - First observed
list_sources
TDQS
Scored across 5 tools
All five tools have clearly distinct responsibilities: invoice lookup/creation are separate, and net-worth/source actions are separate. get_source and list_sources follow the standard item-vs-collection pattern. There is no meaningful overlap.
Names consistently follow a verb_noun pattern: get_invoice, create_invoice, list_sources, get_source, and get_net_worth. The convention is uniform and predictable across both subdomains.
Five tools is a compact, appropriate size for a server covering Checkout invoices and Watchlist reads. Each tool serves a distinct need without redundancy.
The invoice side covers create and lookup but not list, cancel, or update operations, and the Watchlist side is read-only with no way to add or edit sources. These are notable lifecycle gaps, though the core read and checkout workflows are present.
Maintenance
Related MCP Connectors
Manage Apollo invoices and customers with entity-scoped OAuth and optional read/write access.
Create and manage checkout pages, event ticketing, forms, customers, payments and subscriptions.
Non-custodial crypto payments: checkout sessions, invoices, webhooks and test payments. No KYC.
Read payment settings, orders and receipts, create payment links and API keys.
Related MCP Servers
FlicenseAqualityDmaintenanceEnables interaction with the Conekta payment API to manage orders, customers, subscriptions, and financial transactions. It provides a comprehensive suite of tools for core payment operations like processing refunds, creating checkouts, and monitoring account balances.322-- FlicenseNot gradedqualityAmaintenanceEnables AI coding agents to integrate stablecoin checkout, payment links, payment status checks, webhook verification, and webhook-based entitlement logic into applications.-
- FlicenseNot gradedqualityAmaintenanceEnables AI coding agents and MCP hosts to add stablecoin checkout, payment links, payment status checks, webhook verification, and webhook-based access logic to applications.-
- FlicenseNot gradedqualityAmaintenanceEnables AI coding agents to set up crypto checkout integration by registering workspaces, creating paylinks and public payment invoices, configuring webhook endpoints, verifying webhook signatures, and checking stablecoin payment status.-