io.github.cryptoduke01/gloam

Est-ce que io.github.cryptoduke01/gloam est sûr ?

Au dernier audit MCP Hub, le serveur MCP « io.github.cryptoduke01/gloam » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 8 outils

• gloam_connect_full_agent≈ 193 tokens

  Commands to install the local Gloam MCP server, which can sign and pay (shield, private pay, x402 and MPP, spending limits) with keys kept on your machine: Claude Code, Codex, Cursor, VS Code, Claude Desktop and any MCP client, plus the plugin marketplace cryptoduke01/gloam-plugins.

  Paramètres, retour & exemple (1)

  Paramètres

  • client · string · optionnel · claude-code | codex | cursor | vscode | claude-desktop | gemini | all
    Which app to show commands for.

  Exemple d'appel

  {"name": "gloam_connect_full_agent", "arguments": {"client": "claude-code"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• gloam_create_payment_request≈ 429 tokens

  Make a link that asks someone to pay your Gloam address privately. It opens Pay in the Gloam app with the address, amount, asset and note filled in; the payer checks and sends. The details ride after the # of the link, so the payer's browser never sends them to a server. Needs your public Gloam address (gloamr1.…), never a key.

  Paramètres, retour & exemple (6)

  Paramètres

  • to · string · requis
    Your Gloam address to be paid at, gloamr1.… (public; find it in the app under Receive).
  • name · string · optionnel
    Your name as the payer should see it (up to 40 characters).
  • note · string · optionnel
    A reference the payer sees, e.g. "Invoice 042" (up to 80 characters).
  • asset · string · optionnel
    Token symbol or address, e.g. USDG on Robinhood Chain, OUSD or PathUSD on Tempo. Default: the network's main stablecoin.
  • amount · string · optionnel
    Amount in whole units, e.g. "12.50". Leave out to let the payer choose.
  • network · string · optionnel · tempo | robinhood | robinhood-mainnet | tempo-mainnet
    Gloam network: "robinhood-mainnet" (Robinhood Chain mainnet, real money: USDG and GLOAM), "tempo-mainnet" (Tempo mainnet, real money: USDC.e, pathUSD, USDT0, OUSD), or a testnet with play money: "tempo" (Tempo Moderato) or "robinhood" (Robinhood Chain testnet).

  Exemple d'appel

  {"name": "gloam_create_payment_request", "arguments": {"to": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• gloam_info≈ 118 tokens

  What Gloam is, what this hosted server can do, and where to go to sign or spend. Call this first. This server only reads and plans: it never holds funds and never takes a private key, recovery phrase or note secret.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "gloam_info", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• gloam_mpp_how_to≈ 287 tokens

  How to pay or charge privately over MPP (the Machine Payments Protocol, HTTP 402) with the gloam method from @gloamtrade/mppx-gloam, with code. A charge settles as a private transfer in a Gloam vault: the chain sees no amount, asset, payer or payee.

  Paramètres, retour & exemple (2)

  Paramètres

  • role · string · optionnel · pay | charge | both
    "charge" to get paid for an API or tool, "pay" for an agent or app paying one, "both" for both.
  • network · string · optionnel · tempo | robinhood | robinhood-mainnet | tempo-mainnet
    Gloam network: "robinhood-mainnet" (Robinhood Chain mainnet, real money: USDG and GLOAM), "tempo-mainnet" (Tempo mainnet, real money: USDC.e, pathUSD, USDT0, OUSD), or a testnet with play money: "tempo" (Tempo Moderato) or "robinhood" (Robinhood Chain testnet).

  Exemple d'appel

  {"name": "gloam_mpp_how_to", "arguments": {"role": "pay", "network": "tempo"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• gloam_networks≈ 249 tokens

  The networks Gloam runs on, mainnets first, with each vault (pool) address, the assets you can deposit (on mainnet: USDC.e, pathUSD, USDT0 and OUSD on Tempo, USDG and GLOAM on Robinhood Chain; on testnet: OUSD and PathUSD on Tempo, USDG and ETH on Robinhood Chain), explorers, RPCs and the testnet faucets.

  Paramètres, retour & exemple (1)

  Paramètres

  • network · string · optionnel · tempo | robinhood | robinhood-mainnet | tempo-mainnet
    Gloam network: "robinhood-mainnet" (Robinhood Chain mainnet, real money: USDG and GLOAM), "tempo-mainnet" (Tempo mainnet, real money: USDC.e, pathUSD, USDT0, OUSD), or a testnet with play money: "tempo" (Tempo Moderato) or "robinhood" (Robinhood Chain testnet). Leave out for every network.

  Exemple d'appel

  {"name": "gloam_networks", "arguments": {"network": "tempo"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• gloam_plan_deposit≈ 284 tokens

  Plan a deposit into a private Gloam balance (a shield): the steps, what becomes public and what stays private, and the app link to do it. Does not sign or send anything; you sign in your own wallet in the app.

  Paramètres, retour & exemple (3)

  Paramètres

  • asset · string · optionnel
    Token symbol or address. Default: the network's main stablecoin (OUSD on Tempo, USDG on Robinhood Chain).
  • amount · string · optionnel
    Amount in whole units, e.g. "25".
  • network · string · optionnel · tempo | robinhood | robinhood-mainnet | tempo-mainnet
    Gloam network: "robinhood-mainnet" (Robinhood Chain mainnet, real money: USDG and GLOAM), "tempo-mainnet" (Tempo mainnet, real money: USDC.e, pathUSD, USDT0, OUSD), or a testnet with play money: "tempo" (Tempo Moderato) or "robinhood" (Robinhood Chain testnet).

  Exemple d'appel

  {"name": "gloam_plan_deposit", "arguments": {"asset": "texte", "amount": "texte", "network": "tempo"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• gloam_vault_stats≈ 218 tokens

  Public totals for each Gloam vault, read from the chain: what it holds, and counts of deposits, private transfers, cash outs and payment messages. Totals only, no wallets. Cached about a minute.

  Paramètres, retour & exemple (1)

  Paramètres

  • network · string · optionnel · tempo | robinhood | robinhood-mainnet | tempo-mainnet
    Gloam network: "robinhood-mainnet" (Robinhood Chain mainnet, real money: USDG and GLOAM), "tempo-mainnet" (Tempo mainnet, real money: USDC.e, pathUSD, USDT0, OUSD), or a testnet with play money: "tempo" (Tempo Moderato) or "robinhood" (Robinhood Chain testnet). Leave out for every network.

  Exemple d'appel

  {"name": "gloam_vault_stats", "arguments": {"network": "tempo"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• gloam_verify_proof≈ 270 tokens

  Check a Gloam proof someone shared with you: proof of funds (gloamfunds1:), proof of payment (gloampay1:), payroll total (gloamroll1:) or exact balance (gloambal1:). Runs the same checks as gloam.trade/verify on the server: the zero-knowledge proof, that it was made on Gloam's vault, who it is for, expiry, and the live vault state. A proof of payment shows a private payment was made, not who paid whom; a payroll total shows a run of payments the prover funded, not who was paid. The older gloamdisc1 balance disclosure is never verified: anyone can copy one from a public deposit. Proofs are meant to be shared; they hold no secrets.

  Paramètres, retour & exemple (1)

  Paramètres

  • proof · string · requis
    The full proof text, starting gloamfunds1:, gloampay1:, gloamroll1:, gloambal1: or gloamdisc1:.

  Exemple d'appel

  {"name": "gloam_verify_proof", "arguments": {"proof": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://www.gloam.trade/mcp