CRA AGENT MCP server
io.github.giupy997/cra-agent·v0.0.11·1 starsLets an agent pay for x402 APIs in USDC on Arc, under a spending policy it cannot change.
1 stars1.5k downloads/wk
Reviews
Write oneNobody has reviewed CRA AGENT yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
CRA AGENT tools (14, 3 write)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
arc_balanceUSDC in the wallet and in the Circle Gateway balance used for nanopayments, on the configured Arc network.
arc_depositMoves USDC from the wallet into the Circle Gateway balance so nanopayments can be signed. On-chain transaction (needs a little USDC for gas on Arc).
arc_job_createwrite actionFor work that is too large or too slow for a per-call payment. Creates a job with a provider (seller) and an evaluator; the provider then sets the budget, you fund it with arc_job_fund, the provider submits, the evaluator completes or rejects. Costs gas in USDC.
arc_job_decideAs the job's evaluator: complete releases the escrow to the provider, reject returns it to the client. The reason is stored on-chain as a hash.
arc_job_fundMoves the job's budget (set by the provider) from the agent wallet into the escrow contract. The spending policy is applied to the budget as one payment, with the provider as counterparty. Recorded in the ledger on the escrow rail.
arc_job_statusClient, provider, evaluator, budget, expiry and state (Open, Funded, Submitted, Completed, Rejected, Expired).
arc_job_submitwrite actionAs the job's provider: submits the keccak256 hash of the deliverable and moves the job to Submitted.
arc_ledgerThe last N payment attempts by this agent with amount, seller, status, latency and transaction, plus today's spend.
arc_paywrite actionFetches the URL. If the server answers 402, CRA AGENT checks the spending policy, verifies the seller, signs a gas-free nanopayment through Circle Gateway (or a standard x402 payment), retries the request and records the outcome in the ledger. Returns the response body plus a receipt. Policy rejections are returned as errors with the rule that fired.
arc_policyThe limits this rail enforces for the agent. Read-only: limits are set by the operator in the environment, not by the model.
arc_proofGateway settles in batches, so the transfer to the seller reaches the chain after the response. This matches settled payments in the ledger to the on-chain USDC transfer that carried them and stores the transaction hash.
arc_quoteAsk what a URL costs without paying. Returns price in USDC, seller address, network, whether the seller batches via Circle Gateway, the rail that would be used, the policy decision and the seller's ERC-8004 identity. Returns null if the resource is free.
arc_searcharc_verify_receiptVerifies a receipt another agent hands over: recovers who signed it, checks it is the agent named inside, and redoes the arithmetic to confirm the payment fitted the limits it states. It proves the agent's key issued the statement and that nothing was altered; it does not prove the payment settled, which is what the settlement id is for. Needs no payment and spends nothing.
Public scan report
scanner v0.1.10 · 2026-10-03 · same rubric, same numbers if you re-run it
- Code scan11 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 2 days ago15/15
- Maintainer identityregistry namespace matches repository owner6/10
How CRA AGENT compares
Against every graded AI and agents MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 89/100
- higher than 83% of 4,460 AI and agents servers
- Tools
- 14
- the typical AI and agents server has 6
- Tools that change things
- 21%
- typical: 0%. Fewer write tools means less an agent can break
- GitHub stars
- 1
- more than 50% of 2,711 AI and agents servers
- Downloads a week
- 1,519
- more than 95% of 1,538 AI and agents servers with a package
What its tools let an agent do: 11 read · 3 change
Release history: 6 versions in the registry since 2026-09-19, latest 2026-09-23, typically one every 1 day.
Install CRA AGENT in Claude Code, Cursor or VS Code
Runs npx -y @cra-agent/mcp on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add cra-agent -- npx -y @cra-agent/mcp
What the publisher says
From the CRA AGENT repository's README, as published. We do not edit it. Read it on GitHub
CRA AGENT
Payments for AI agents on Arc, Circle's USDC-native L1. One tool call and an agent can buy an API call for a fraction of a cent: the rail reads the x402 price, applies a spending policy the model cannot change, verifies the seller, pays gas-free through Circle Gateway, and writes the receipt to a ledger.
TypeScript monorepo, npm workspaces, Node 22. Site: cra-agent.tech.
Status: the buyer agent, the seller middleware and the MCP server are built and exercised end to end on Arc testnet. See docs/arc-verification.md for every value verified against docs.arc.io.
Packages
Setup
nvm use # Node 22
npm install
cp .env.example .env # then set DATABASE_URL and ARC_RPC_URLS
npm test
npm run db:migrate
npm run collector
npm run web:build && npm run api # http://localhost:8791Local Postgres (Homebrew, keg-only):
LC_ALL=en_US.UTF-8 /opt/homebrew/opt/postgresql@17/bin/pg_ctl -D /opt/homebrew/var/postgresql@17 -l /opt/homebrew/var/postgresql@17/server.log startThe agent
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
CRA AGENT: common questions
- Is CRA AGENT MCP server safe?
- Yes, by our scan: it is graded A (89/100). Read the CRA AGENT safety report
- How do I install CRA AGENT?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does CRA AGENT need an API key?
- No secret keys are declared. It reads 5 settings from the environment.
- Is CRA AGENT maintained?
- The last commit was 34 days ago (2026-10-01). The latest release is v0.0.11.
- What can I use instead of CRA AGENT?
- Servers from other publishers that do the same job: Power BI Authoring MCP Server (Local), Agoragentic Agent OS MCP server and Ausca MCP server.
- How does CRA AGENT compare with other AI and agents MCP servers?
- safety score 89/100 (higher than 83% of 4,460 AI and agents servers); tools 14 (the typical AI and agents server has 6); tools that change things 21% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.
Alternatives to CRA AGENT
Same job from other publishers: the closest match first, then the best rated.
- Power BI Authoring MCP Server (Local)The Power BI Authoring MCP server lets an AI agent create and change Power BI semantic models.not reviewedEstablishedA
Agoragentic Agent OS MCPTriptych OS (Agent OS) MCP for governed routing, receipts, and USDC settlement on Base.not reviewedEstablishedB- AuscaPay-per-call APIs and MCP services for agents, no accounts or keys, with verifiable receipts.not reviewedEstablishedA