Provenance MCP server

provenance-mcp

Check the wash-traffic risk of Algorand x402 endpoints before your agent pays them.

📊 The x402 Trust Index — our free public data site: dated Bazaar Wash Report snapshots (Base) + reseller-signal audits for 38 API brands.

Leaderboards for machine-payable APIs rank by claimed volume, which is easy to inflate — self-dealing loops, fresh-wallet farms, metronomic bots. Provenance reads public on-chain payments and gives your agent a statistical estimate of whether an endpoint's revenue looks organic or manufactured, so it can decide before sending USDC. This server scores Algorand payees; the public data site's report covers Base. Scores are one operator's estimates — the methodology publishes the weights, the limits, and what has not been validated yet.

Tools

payTo address: risk level (low/medium/high/critical), 0–100 score, and the on-chain red flags (distinct-payer count, self-dealing payout loops, wallet ages, timing regularity, funding concentration).

• checkendpointrisk(address) — free quick verdict for any Algorand endpoint

• provenanceserviceinfo() — service + paid-tier info.

Deep forensics are x402-paid on the same API: /score $0.05 · /report $0.50 (full 8-signal grade + facilitator drift) · /diligence $5.00.

Install

Claude Code

claude mcp add provenance -- npx -y provenance-mcp

Claude Desktop / any MCP client (mcpServers config):

{
  "mcpServers": {
    "provenance": {
      "command": "npx",
      "args": ["-y", "provenance-mcp"]
    }
  }
}

Then ask your agent: “check the wash risk of Algorand endpoint \”.

How it works

The hosted Provenance engine indexes USDC (ASA 31566704) payments on Algorand mainnet, enriches payer wallets (age, first funder, asset diversity, rekey auth-addr), clusters them (union-find over funding + shared-key links), and runs 8 wash-detection signals. Scores are point-in-time snapshots, anchored on-chain for tamper-evidence. Methodology: signals, not accusations — a high score means the revenue pattern is consistent with self-dealing, not that the operator is guilty of anything.

• Env: PROVENANCEAPIURL to point at a different Provenance deployment.
• Free tier: 30 checks/hour/IP.

Guard your x402 client directly

Building an agent that pays over x402? provenance-guard wraps any x402-paying fetch and runs this same check automatically before any money moves — one line, zero dependencies:

import { createGuard } from "provenance-guard";
const guarded = createGuard().guardedFetch(fetchWithPayment);

MIT · Provenance — the trust layer for machine-payable endpoints.