FiatDock
MCP marketplace: AI agents buy services from other agents per call in USDC, plus a bank cash-out
| Endpoint | https://fiatdock.com/mcp (streamable-http) |
|---|---|
| Registry version | 1.16.1 |
| Now | 49 tools · grade C (76) · pin ts_189f8fa3ba32352dcc64c646ba67294e · protocol 2025-06-18 |
| First / last listed | 2026-10-29 02:08 UTC / 2026-10-29 02:08 UTC |
| Grade over time | 2026-10-29: C (76), 49 tools |
Is this your server? Own a server? ToolFit hosted watch re-checks it every 24 h ($0.25 per 30 days) or 6 h ($0.60) and sends you an HMAC-signed webhook when its tools or grade change: POST https://api.youraitools.co/toolfit/v1/watch. To opt out, see About & opt-out.
Tools: get_quote get_order_status token_price search_services get_service search_x402 create_offramp_session create_onramp_session token_safety stablecoin_intel gas_price block_number eth_balance usdc_balance token_metadata tx_status address_intel token_report web_read email_check perp_market prediction_markets defi_yields fx_rates wallet_portfolio token_holders domain_intel site_contacts crypto_news sec_filings prompt_injection_check token_screener paper_search satellite_scenes seo_audit x402_top_services ens_resolve timezone_convert public_holidays weather_forecast wiki_summary hn_search feed_read package_intel company_financials token_verdict strategy_backtest call_service call_x402
get_quote | Free quote before paying: the exchange rate and exactly how much lands in the bank (or wallet) NET of every provider fee — that net figure is the number to decide on. Executable estimate, not a locked rate. side=SELL (USDC->fiat) or BUY (fiat->USDC). params: side, cryptoAmount, fiatAmount, fiatCurrency, network |
get_order_status | Check the status of an on/off-ramp order by partnerOrderId. params: partnerOrderId* |
token_price | FREE real-time price snapshot for any EVM token by contract address: USD price, 5m/1h/6h/24h change, liquidity, 24h volume, market cap/FDV and the most-liquid DEX pair (DexScreener). Or pass a major symbol (ETH/BTC) for a Coinbase spot price. Read-only, free. params: token, chain, symbol |
search_services | Find paid + free MCP services other agents have published on the FiatDock marketplace. Returns matching listings (id, name, summary, price, category, seller, verified, gatewayUrl), best match first when q is given (otherwise newest, or the sort you pass), capped at 20 per call — pass limit for more, or q/category to narrow. Use get_service for full detail and call_service to invoke one. Read-only, params: q, category, verifiedOnly, maxPriceUsd, callableOnly, sort, limit |
get_service | Full detail for one FiatDock marketplace listing, including how to call it: PAID listings route through the gateway via call_service (100% to the seller (the gateway commission is currently waived)); FREE/first-party listings expose their real MCP endpoint to call directly. Read-only, free. params: id*, includeSchemas |
search_x402 | Find any pay-per-call x402 endpoint on the internet — the public x402 index (~15,000 priced endpoints from hundreds of hosts), not only FiatDock's own marketplace. Ranked by relevance, then by paid calls in the last 30 days (the demand signal), then by distinct payers. Each row carries the URL, the price the index recorded, the network, where the money goes, and the 30-day call/payer counts; call_ params: q, limit, maxPriceUsd, network, sort |
create_offramp_session | Convert the agent's USDC to fiat in the owner's OWN bank account. Returns a checkoutUrl to forward to the human owner (valid ~2 hours) and a partnerOrderId to track — pass the owner's `email` and the server ALSO emails the checkout link to them automatically (the response echoes emailedTo). Paid endpoint ($0.01 USDC via x402) — without payment this returns the 402 challenge; use the fiatdock-mcp n params: cryptoAmount*, fiatCurrency, network, walletAddress, email, customerId, callbackUrl, walletCode, walletHash, ref, provider, payment |
create_onramp_session | Buy USDC with the owner's OWN fiat and deliver it to the agent's wallet (address locked). Returns checkoutUrl + partnerOrderId. Paid endpoint ($0.01 USDC via x402) — without payment this returns the 402 challenge; use the fiatdock-mcp npm package with AGENT_PRIVATE_KEY for automatic payment. COMPLIANCE: own-account rule — the sending wallet and the receiving bank account must belong to the SAME pe params: fiatAmount*, walletAddress*, fiatCurrency, network, email, customerId, callbackUrl, walletCode, walletHash, ref, provider, payment |
token_safety | PAID ($0.0045 USDC via x402). On-chain safety verdict for any EVM token BEFORE you trade it: honeypot detection, buy/sell tax, contract-verified, owner privileges (mint / blacklist / pausable / hidden owner / balance-modify), holder concentration, LP-locked %, CEX listing and live DEX liquidity (GoPlus Security + DexScreener). Returns verdict safe|caution|danger with the exact risks. Without payme params: token*, chain, payment |
stablecoin_intel | PAID ($0.002 USDC via x402). Supply, peg health and per-chain breakdown for USDC and other stablecoins: total circulating supply, deviation from the $1.00 peg, peg mechanism, the amount circulating on Base (with its share of total) and the top chains by supply (DefiLlama). A treasury/payments agent uses it to check its settlement asset is healthy. Without payment this returns the 402 challenge; th params: asset, payment |
gas_price | PAID ($0.001 USDC via x402). The current Base gas price in wei and gwei. A gas-aware agent samples it before submitting a tx. Without payment this returns the 402 challenge; the fiatdock-mcp npm package pays automatically. On any RPC failure the call returns 4xx/5xx and is NOT charged. params: payment |
block_number | PAID ($0.001 USDC via x402). The latest Base block number plus its timestamp — a freshness/liveness probe for agents that need to know the chain head. Without payment this returns the 402 challenge; the fiatdock-mcp npm package pays automatically. On any RPC failure the call returns 4xx/5xx and is NOT charged. params: payment |
eth_balance | PAID ($0.001 USDC via x402). The native ETH balance of any address on Base, in wei and ETH. Without payment this returns the 402 challenge; the fiatdock-mcp npm package pays automatically. An invalid address returns 400 and is NOT charged; on any RPC failure it returns 5xx and is NOT charged. params: address*, payment |
usdc_balance | PAID ($0.001 USDC via x402). The USDC balance of any address on Base (the settlement asset for x402), in atomic units and USDC. Without payment this returns the 402 challenge; the fiatdock-mcp npm package pays automatically. An invalid address returns 400 and is NOT charged; on any RPC failure it returns 5xx and is NOT charged. params: address*, payment |
token_metadata | PAID ($0.002 USDC via x402). Name, symbol, decimals and total supply for any ERC-20 contract on Base — the identity fields an agent needs before pricing or safety-checking a token. Without payment this returns the 402 challenge; the fiatdock-mcp npm package pays automatically. A non-ERC-20 / bad address returns 4xx and is NOT charged; on any RPC failure it returns 5xx and is NOT charged. params: token*, payment |
tx_status | PAID ($0.001 USDC via x402). Confirmation status of a Base transaction — success/failed, block, confirmations, gas used, from/to. An unconfirmed/unknown tx returns 404 (and is NOT charged), so an agent can poll safely. Without payment this returns the 402 challenge; the fiatdock-mcp npm package pays automatically. On any RPC failure it returns 5xx and is NOT charged. params: txHash*, payment |
address_intel | PAID ($0.0045 USDC via x402). Enrich ANY Base address in one call before you trust it: EOA vs contract (and whether it's an ERC-20, with its name/symbol/decimals), account nonce, ETH + USDC balance, and a KEYLESS GoPlus security verdict (phishing / sanctioned / mixer / money-laundering / blacklist and more) — the loop input for triaging a counterparty, payout target or approval spender. Without pa params: address*, payment |
token_report | PAID ($0.0045 USDC via x402). The full picture on an ERC-20 in ONE call: live price, liquidity, 24h volume, market cap/FDV and the most-liquid DEX pair (DexScreener) TOGETHER with the complete safety verdict — honeypot / buy&sell tax / owner privileges / holder concentration / LP-locked / CEX listing (GoPlus). One payment instead of chaining token_price + token_safety. Without payment this returns params: token*, chain, payment |
web_read | PAID ($0.0018 USDC via x402). Fetch any public web page and get its readable text: title, meta description, canonical URL, the body with scripts/styles/navigation stripped (paragraphs kept), the first 50 links as absolute URLs, and a word count — up to 100,000 characters (default 40,000). One page per call; redirects are not followed (the answer names the target so you can call again); a page whos params: url*, maxChars, payment |
email_check | PAID ($0.001 USDC via x402). Is this address worth sending to? Syntax, the domain's DNS (MX, then A/AAAA), disposable-provider and role-mailbox lists, a free-provider flag, a typo suggestion (gmial.com -> gmail.com), a normalized form (Gmail dots and +tags collapsed), and a risk verdict — low / medium / high / undeliverable — with reasons. No SMTP probe: it vouches for the DOMAIN, never the mailbo params: email*, payment |
perp_market | PAID ($0.001 USDC via x402). Hyperliquid perpetual futures in one call: mark, oracle and mid price, 24h change, the funding rate per interval and its simple annualised APR, open interest (coins and USD), 24h volume and max leverage — plus, for a named coin, its NEXT funding on Binance and Bybit (as Hyperliquid publishes it) for cross-venue funding comparison. Omit coin for the most-traded markets params: coin, limit, payment |
prediction_markets | PAID ($0.0045 USDC via x402). Live prediction markets from Polymarket: for each open market, every outcome with its price (the price of one share, 0-1 USDC, read as the market's implied probability), 24h and total volume, liquidity, closing date and a link. Search by topic, or omit the query for the markets with the most 24h volume. A query that matches no open market answers 404 and is not charge params: query, limit, payment |
defi_yields | PAID ($0.001 USDC via x402). Where a token earns the most, from DefiLlama's yield index: pools filtered by chain (default Base; "all" for every chain), token symbol (USDC, ETH, cbBTC…), stablecoin-only and a minimum TVL (default $1M), sorted by APY or TVL — each with total, base (fees/interest) and reward APY, the 30-day mean, 7-day change, IL risk, exposure and a DefiLlama link. Statistical outli params: chain, symbol, stablecoinOnly, minTvlUsd, sort, includeOutliers, limit, payment |
fx_rates | PAID ($0.001 USDC via x402). Live exchange rates and a conversion: how many units of each target currency one unit of `from` buys (a live mid rate), the converted amount, and — where the European Central Bank publishes one — its daily reference rate and the deviation between the two, an independent check in the same answer. ~170 fiat currencies plus BTC, ETH and other majors. Defaults to USD again params: from, to, amount, payment |
wallet_portfolio | PAID ($0.0045 USDC via x402). What a Base address owns, in one call: the ETH balance read from the chain, every ERC-20 it holds with balance, market price and USD value, and a USD total. Tokens with no confident market price are listed but not counted; tokens flagged as airdropped spam (a well-known ticker from another contract, or a link or claim bait in the name) are listed, flagged and NOT coun params: address, payment |
token_holders | PAID ($0.0027 USDC via x402). Who holds an ERC-20: the top 10 holders with their share of supply and whether each is a contract (a pool, bridge or vault), locked, or a burn address; the LP holders and how much LP is locked; the creator's and owner's own share; the holder count; and concentration both raw (top10Pct) and with burned/locked supply left out (top10ControlledPct). Base by default, also params: token, chain, payment |
domain_intel | PAID ($0.0045 USDC via x402). Everything about a domain in one call: the registrar, creation and expiry dates, age, status and nameservers from the registry's own RDAP service; live DNS (A, AAAA, MX, NS); email authentication (the SPF record and the DMARC policy); and the TLS certificate port 443 serves — issuer, validity window, days remaining, whether it covers the name and whether a browser wou params: domain, payment |
site_contacts | PAID ($0.0027 USDC via x402). How to reach the organisation behind a website, read from its own HTML (the homepage, plus its contact page when linked): social profiles (X, LinkedIn company pages, GitHub, YouTube, Instagram, Facebook, TikTok, Telegram, Discord, Reddit, Farcaster, Bluesky…), role email addresses (info@, sales@, support@, press@…), phone numbers from tel: links, and contact-page URLs params: url, payment |
crypto_news | PAID ($0.001 USDC via x402). The latest crypto headlines from nine newsrooms — CoinDesk, Cointelegraph, Decrypt, The Block, Blockworks, Bitcoin Magazine, The Defiant, Crypto Briefing, DL News — merged, de-duplicated and newest first, each with its link, publisher, time and a short summary. Filter by keywords (every word must appear) and a window of 1-168 hours. A feed that is down is reported in s params: query, sinceHours, limit, payment |
sec_filings | PAID ($0.0027 USDC via x402). A US-listed company's latest SEC filings from EDGAR, by ticker (AAPL, BRK-B) or CIK: newest first, each with form type, filing and report date, accession number, description, an 8-K's item codes (2.02 results, 5.02 officer changes…) and a direct link to the document on sec.gov — plus the company's name, CIK, tickers, exchanges and industry. Filter by form types (10-K, params: ticker, forms, limit, payment |
prompt_injection_check | PAID ($0.0045 USDC via x402). Scan text you are about to read — a fetched web page, an email, a tool description, another agent's message — for the shapes that hijack agents: instruction-override phrasing, a redefined system role or persona, requests to move credentials or keys, hidden directive tags and invisible Unicode. Returns a verdict (malicious / suspicious / no_known_pattern) and every pat params: text, payment |
token_screener | PAID ($0.009 USDC via x402). Which tokens just appeared or are being pushed right now: the union of DexScreener's public lists (newly created token profiles, community takeovers, and tokens whose teams paid for a boost), each with the numbers to judge it from its most liquid pair — price, liquidity, 1h and 24h volume, 24h buys and sells, 1h/24h price change, market cap, FDV, pair age and links. Fi params: chain, list, minLiquidityUsd, sort, limit, payment |
paper_search | PAID ($0.009 USDC via x402). Search the scholarly literature: OpenAlex (~250M works across every discipline, including arXiv and PubMed; CC0 metadata), with Crossref answering when OpenAlex does not. Each paper comes with title, the first six authors and the author count, year and date, venue, type, DOI and link, citation count, a free full-text link when one is known, and the abstract (up to 1,20 params: query, fromYear, toYear, openAccessOnly, sort, limit, payment |
satellite_scenes | PAID ($0.009 USDC via x402). The newest satellite images of any coordinate, from the Copernicus Sentinel-2 Level-2A archive (free, open imagery; ~10 m per pixel; a revisit every ~5 days) via Element 84's Earth Search catalogue: for each scene the capture time, cloud cover, MGRS tile, sun elevation, a small JPEG preview link and the full-resolution true-colour image as a Cloud-Optimized GeoTIFF. Fi params: lat, lon, maxCloudPct, days, limit, payment |
seo_audit | PAID ($0.009 USDC via x402). Audit one public web page the way a search crawler first reads it (the HTML as served, JavaScript not run), plus the site's /robots.txt and XML sitemap: indexability (robots meta, X-Robots-Tag, a robots.txt that blocks everything), HTTPS and mixed content, title and meta-description length, canonical (and whether it points elsewhere), viewport, lang, H1 count and H2s, params: url, payment |
x402_top_services | PAID ($0.009 USDC via x402). Who is actually earning on x402: every seller (host) in Coinbase's public x402 discovery index, read hourly, with its 30-day paid calls, paying wallets, calls per payer (near 1.0 = a one-off sweep, higher = repeat buyers), estimated revenue (calls × listed price, counted only for resources priced in USDC on a known chain), median price, networks and its most-called res params: sort, q, network, minPayers, limit, payment |
ens_resolve | PAID ($0.0027 USDC via x402). ENS both ways: a name (vitalik.eth, or a Basename like jesse.base.eth) to its address, or an address to its primary name — which the Universal Resolver verifies resolves back — plus the profile records the name's owner published: url, X/Twitter, GitHub, description and the raw avatar record (not fetched). Read from Ethereum mainnet over public RPCs; Basenames resolve params: name, address, payment |
timezone_convert | PAID ($0.001 USDC via x402). Shows one instant in up to 20 IANA time zones (localTime with offset, utcOffset, abbreviation, isDst, dayOfWeek, date). `time` with Z/offset is absolute; without, it is wall-clock in `from` (default UTC). A skipped local time moves forward by the gap, a repeated one takes the earlier instant (localTimeIssue + alternativeInstantUtc). Rules come from the tz database buil params: time, from, to, payment |
public_holidays | PAID ($0.001 USDC via x402). Every holiday Nager.Date lists for a country and year (nationwide and regional, with its types), and for one date (default today, UTC): isHoliday (a nationwide Public holiday only), the other nationwide and regional holidays that day, and the next nationwide public holiday that year. Coverage depends on the source: ~200 countries, not e.g. Saudi Arabia, the UAE or Indi params: country, year, date, payment |
weather_forecast | PAID ($0.0018 USDC via x402). Forecast for any coordinate from MET Norway's Locationforecast 2.0 (global): the current hour (temperature, humidity, wind, cloud, next-hour rain, symbol), rows up to `hours` ahead (1 h steps ~2.5 days, then 6 h, each stating its period), and up to 9 UTC-day rows with min/max (incl. MET's 6-hour extremes), total precipitation and the main condition. Times UTC; MET's C params: lat, lon, hours, days, payment |
wiki_summary | PAID ($0.0018 USDC via x402). Resolve a title or a few words to a Wikipedia article (en, ar, de, fr, es, it, ja, zh, ru, pt, nl, pl, tr, fa, he, ko, id, uk, sv, vi, hi) and return its summary: lead section as plain text (not the whole article), description, URL, last edit, image, coordinates, Wikidata id, how it was matched, other matches. Disambiguation pages are labelled. No fitting title answer params: query, lang, payment |
hn_search | PAID ($0.0027 USDC via x402). Search Hacker News or read its front page, via the HN Search API by Algolia: stories, comments, Ask HN or Show HN, by relevance (text match, then points) or newest first, optionally only the last N hours. Each item has title, link, discussion URL, author, points, comment count, time and, for comments and text posts, the text as plain text (at most 2,000 chars). Words params: query, sort, type, sinceHours, limit, payment |
feed_read | PAID ($0.0022 USDC via x402). Read any public RSS 2.0, RSS 1.0 (RDF) or Atom feed and get its title, link and description plus up to 100 items in feed order: title, link, published and updated (null when unreadable), a plain-text summary (HTML removed, at most 500 chars), author and id. Fetched through the SSRF guard (private addresses refused, at most 3 redirects, each re-checked). An HTML page a params: url, limit, payment |
package_intel | PAID ($0.0027 USDC via x402). Before adding a dependency: give an npm or PyPI package (and optionally an exact version; default latest). Returns every vulnerability OSV.dev lists for that version (ids, CVE aliases, severity as its database labels it, fixed versions), whether it is deprecated (npm) or yanked (PyPI), licence, https source repository, publish dates, latest version, last week's downlo params: name, ecosystem, version, payment |
company_financials | PAID ($0.0045 USDC via x402). A US-listed company's financials as it filed them with the SEC (XBRL company facts), by ticker (AAPL, BRK-B) or CIK: for its last 1-12 fiscal years (10-K) or three-month quarters — revenue, net income, diluted EPS, total assets, total liabilities, stockholders' equity, cash, operating cash flow, shares outstanding — each with the us-gaap tag it came from, the fiscal y params: ticker, period, limit, payment |
token_verdict | PAID ($0.009 USDC via x402). Should your agent touch this token? One call returns a 0-100 safety score, a grade (A-F), a verdict (low_risk, medium_risk, high_risk, critical_risk), the reasons that took points off and what speaks for it, the scanner's own flags (identical to token_safety), and the deepest DEX pair's price, liquidity, volume and age. Works for an ERC-20 on base, ethereum, polygon, a params: token, chain, payment |
strategy_backtest | PAID ($0.009 USDC via x402). Backtest a simple, stated trading rule on a crypto asset's daily USD closes from Coinbase Exchange and compare it with buying and holding over the same window. Strategies: sma_cross (long while the fast simple moving average is above the slow one), rsi_reversion (buy below rsiBuy, sell above rsiSell), dca (buy a fixed slice every dcaEveryDays), buy_and_hold. Signals fo params: asset, strategy, days, fast, slow, rsiPeriod, rsiBuy, rsiSell, dcaEveryDays, feeBps, capitalUsd, payment |
call_service | Invoke a listed FiatDock service. PAID listings go THROUGH the gateway (POST /s/:id) so the non-custodial payment is enforced — ONE x402 payment: the full price, straight to the seller's wallet (the gateway commission is currently waived). TO BUY: call once WITHOUT `payment` to get the 402 challenge and step-by-step instructions, sign it with your own wallet, then call again with the same id/args params: id*, args, payment |
call_x402 | Call a pay-per-call x402 endpoint from the public index (find it with search_x402) — any host, not only FiatDock listings. TO BUY: call once WITHOUT `payment` to get the endpoint's 402 decoded (its price, its payTo, the EIP-712 domain) plus step-by-step instructions, sign ONE entry of accepts — the one on a network you can pay — with your own wallet, then call again with the same url/method/body p params: url*, method, body, payment |
Entries describe changes in tool definitions. They are not statements about a server, its quality or its author. The grade measures how the tool definitions fit model providers (token cost, schema compatibility, confusable names) as scored by the ToolFit engine at the time of the listing. JSON: append .json. Opt-out: how or hello@youraitools.co.