Skip to main content
Glama

PARANOID MCP

Ask AI models in private from Claude Code, Cursor or any MCP client. Every question carries a fresh zero-knowledge proof made on your own computer, so the PARANOID gateway can check that it was paid for without learning who asked or tying it to any other question.

PARANOID runs open models such as DeepSeek, Kimi, Qwen and GLM, including uncensored ones. Questions are bought once with USDC on Solana, and agents can buy them on their own with x402. The Solana program and the circuit behind every proof are open at paranoiddotred/paranoid, and that source builds to the exact bytes deployed on mainnet.

Install

It is one file with no dependencies and needs Node.js 20 or newer.

mkdir -p ~/paranoid && curl -o ~/paranoid/connect.mjs https://paranoid.red/connect.mjs

Claude Code

claude mcp add paranoid -e PARANOID_PAYER=$HOME/agent-wallet.json -- node $HOME/paranoid/connect.mjs mcp

Cursor (~/.cursor/mcp.json)

{
  "mcpServers": {
    "paranoid": {
      "command": "node",
      "args": ["/Users/you/paranoid/connect.mjs", "mcp"],
      "env": { "PARANOID_PAYER": "/Users/you/agent-wallet.json" }
    }
  }
}

PARANOID_PAYER points at a Solana keypair file (the JSON the Solana CLI writes) whose wallet holds USDC. It is needed only to buy questions. If you already have questions on paranoid.red, run node connect.mjs once and paste the connector code from the Keys tab instead.

Related MCP server: omnicall-mcp

Tools

Tool

What it does

ask

Asks a model a question with a fresh key and returns the answer. Takes question, and model and system if you want them.

models

Lists the models and how many questions one message to each costs.

balance

Says how many questions are left and the last day they can be used.

buy

Buys a new membership with x402 from the wallet in PARANOID_PAYER.

Questions cost 0.002 USDC each, 250 at least, plus a 0.30 USDC setup fee when an agent buys with x402. The gateway pays the Solana network fees.

How it stays private

When you buy questions, your computer makes a secret and sends only a commitment to it, which goes into a member list on Solana. For each question, the connector proves in zero knowledge that it holds the secret of some member with questions left, and marks one numbered question as spent with a nullifier that names no member. The gateway verifies the proof and forwards the question to the model, but it never learns which member asked, and two questions cannot be tied together. Spending the same numbered question twice reveals the secret, and anyone can then slash that membership.

The design follows zkAPI by Vitalik Buterin and Davide Crapis, from the Ethereum Foundation and the Open Anonymity Project. PARANOID brings it to Solana.

Other ways to run it

The same file serves the OpenAI API on your computer for any app that speaks it.

node connect.mjs                 # serves http://127.0.0.1:4141/v1, any API key works
PARANOID_PAYER=wallet.json node connect.mjs buy 500

Full documentation is at paranoid.red/docs/agents and paranoid.red/docs/connector.

Files it downloads

On its first question the connector downloads the prover and the circuit from paranoid.red and keeps them in ~/.paranoid/zk. Their SHA-256 hashes are written inside connect.mjs, and it refuses to run anything that does not match.

License

MIT

Available Tools

4 tools
askA

Ask one of PARANOID's AI models a question in private. The question goes with a fresh zero-knowledge key made on this computer, so the gateway cannot tell who asked or tie it to any other question. Spends the model's price in questions (see the models tool).

NameRequiredDescriptionDefault
modelNoA model id from the models tool. Leave it out for the default model.
systemNoOptional instructions for the model.
questionYesThe question, as you would type it into a chat.

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the disclosure burden and does well: it explains the privacy model (fresh zero-knowledge key, gateway cannot identify the asker) and the cost behavior (spends the model's price in questions). It omits error behavior, rate limits, and return details, but adds substantial behavioral context beyond the schema.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three short sentences, front-loaded with the action and followed by the two decision-relevant traits: privacy and cost. Every sentence adds useful information without waste.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Covers the key considerations for this paid private query tool: privacy guarantees, question spending, and where to find model IDs. Since there is no output schema, it could explicitly state that the model's answer is returned or describe insufficient-balance behavior, but overall it is complete enough for correct invocation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3. The description reinforces that model IDs come from the models tool, but it does not add syntax or meaning beyond what the schema already provides for question, model, or system.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource: 'Ask one of PARANOID's AI models a question,' with the additional qualifier 'in private.' This clearly distinguishes it from sibling tools like models, balance, and buy, which are listing/pricing/purchasing operations.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The primary use case is clear: ask a model a question privately. It also points to the models tool for model IDs/pricing, giving useful context. However, it does not explicitly name the buy or balance alternatives or state when not to use this tool, so it falls short of a 5.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

balanceA

How many questions this membership has left and the last day they can be used.

NameRequiredDescriptionDefault

No parameters

TDQS

A3.7/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full behavioral burden. It discloses that the result is membership-scoped and time-limited, but does not explicitly state that the operation is read-only, requires authentication, consumes no questions, or describes the response format.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

A single, efficient sentence that front-loads the key returned information. There is no wasted wording.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a zero-parameter query with no output schema and no annotations, the description sufficiently explains the return values: remaining questions and expiration date. Minor gap is lack of explicit authentication or current-membership context.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool has zero parameters, so there is no parameter semantics to explain. Baseline score of 4 is appropriate for a no-parameter tool.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

Clearly states the resource and returned information: remaining question count and last usable day for this membership. It is specific enough to distinguish from siblings like ask, buy, and models, though it lacks an explicit verb such as 'returns'.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Usage is implied: check remaining question quota and expiration, likely before calling ask or buy. However, it does not explicitly say when to use this tool versus alternatives or mention prerequisites.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

buyA

Buy a new membership with an x402 payment in USDC on Solana from the wallet in PARANOID_PAYER: 0.002 USDC a question plus a 0.30 USDC setup fee, 250 questions at least. A membership already here is kept in a file beside the new one.

NameRequiredDescriptionDefault
questionsYesHow many questions to buy.

TDQS

A4.3/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full load and does well: it discloses the paying wallet (PARANOID_PAYER), exact pricing (0.002 USDC per question + 0.30 setup), the 250-question floor, and the side effect that an existing membership is retained beside the new one. It omits failure/irreversibility behavior for a real-money payment and never says what a successful call returns.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

One dense sentence covering purpose, cost, minimum and side effect, with the action front-loaded. Phrasing is slightly run-on and the wallet/file details interleave, but nothing is padding.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a one-parameter payment tool with no annotations and no output schema, the description covers cost, chain, wallet, minimum and persistence of prior membership - enough to invoke correctly. Remaining gaps are payment failure handling and return payload, which is what keeps it from a 5.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% and the single parameter is documented, so the baseline is 3; the description earns an extra point by tying 'questions' to a per-question price and a hard minimum, letting the agent compute total cost (e.g. 250 questions = 0.80 USDC) before calling.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource (buy a membership) plus the payment rail (x402 USDC on Solana) and the wallet used, which is unambiguous against siblings ask/models/balance. An agent knows exactly what the tool does without opening the schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Implies the usage context clearly - you buy a membership when you need a question quota - and the note that an existing membership is preserved gives the agent a reason it may still be safe to call. It never names an alternative or an explicit when-not condition, which keeps it below a 5.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

modelsA

List PARANOID's models and how many questions one message to each costs.

NameRequiredDescriptionDefault

No parameters

TDQS

A3.7/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full burden, but the tool takes zero parameters and is an obvious read-only listing. The one genuinely useful behavioral disclosure is that cost is expressed per single message/question sent to each model. It does not state auth or quota requirements, pagination, or ordering of results.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

A single front-loaded sentence with the verb first and no filler. Every clause carries information: what is listed and what extra attribute accompanies each item.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple no-parameter, no-output-schema listing tool, the description covers both the collection returned and the key per-item attribute (cost). Only minor gaps remain, such as the shape of the returned list or whether identifiers from it feed into 'ask'.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool has zero parameters, so there is no parameter semantics to explain; the baseline for a no-param tool applies. Nothing in the description contradicts or muddies the empty schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb ('List') and resource ('models') and adds the distinctive payload detail: the per-message question cost for each model. This is unmistakably different from the siblings ask/balance/buy, though it never explicitly names or rules out an alternative.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no explicit when-to-use or when-not-to-use guidance. The mention of per-message cost implies the tool is a lookup to consult before choosing a model for 'ask', but the agent must infer that workflow rather than being told.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 4 tool updatesv1.1.0
    • First observedask
    • First observedbalance
    • First observedbuy
    • First observedmodels

TDQS

A4/5.0

Scored across 4 tools

Disambiguation5/5

Each tool targets a clearly distinct action: asking a question, listing models/prices, checking remaining questions, and purchasing a membership. There is no overlap between querying, metering, and payment, so an agent can select confidently.

Naming Consistency4/5

All names are single lowercase words (ask, models, balance, buy), which is a clean and predictable convention. The set mixes verbs (ask, buy) with nouns (models, balance), a minor deviation but still instantly readable.

Tool Count5/5

Four tools is a tight, well-scoped surface for a prepaid private-query service: query, discover pricing, check quota, top up. Each tool earns its place with no filler.

Completeness3/5

The core lifecycle (buy → check balance → ask, with models for pricing) is covered, but the buy tool mentions keeping an existing membership 'beside the new one' while no tool lists or selects among multiple memberships, leaving a real dead end. There is also no usage/history or refund path.

Maintenance

ActivityMaintained
ResponsivenessNo issues

Related MCP Connectors

Related MCP Servers

  • A
    license
    A
    quality
    D
    maintenance
    Description: Pay-per-request access to Claude and GPT models via Solana USDC using a Phantom wallet address. No accounts, no API keys — wallet-native authentication.
    4
    10 npm
    MIT
  • F
    license
    Not graded
    quality
    C
    maintenance
    Keyless, pay-per-call AI gateway: 248 LLMs plus image/video/voice/music generation and live crypto, DeFi, markets, web-search and research tools through one MCP server. Pay per call in USDC via x402 on Base/Solana — no API key, no signup, free tier.
    -
  • A
    license
    A
    quality
    F
    maintenance
    Enables MCP clients to access all endpoints of an x402 gateway by paying real-time microtransactions (USDC on Base) per API call, with automatic tool discovery and spend guardrails.
    23
    26 npm
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    Connects Claude Desktop, Cursor, or any MCP-compatible client to 36+ frontier LLMs with automatic per-token payments in USDC on Solana.
    5
    6 npm
    MIT