MCP.Market

Obolus MCP server

by inviti8·io.github.inviti8/obolus·v0.2.3

Disposable Algorand wallet for AI agents. Pay x402 resources in USDC, no human provisioning.

A88/100grade A
What users say
No reviews yet
Be the first
Safety scan
A88/100

full report

Adoption
New

0 stars21 downloads/wk

Reviews

Write one

Nobody has reviewed Obolus yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Obolus tools (3)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • wallet_funding_info
  • wallet_status
  • x402_fetch

Public scan report

scanner v0.1.10 · 2026-10-29 · same rubric, same numbers if you re-run it

no findings
  • Code scan30 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 58 days ago12/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 88/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Obolus compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
88/100
higher than 75% of 48,243 servers
Tools
3
the typical server has 7
Tools that change things
0%
typical: 0%. Fewer write tools means less an agent can break
Downloads a week
21
more than 8% of 12,306 servers with a package

What its tools let an agent do: 3 read

Install Obolus in Claude Code, Cursor or VS Code

claude mcp add obolus -- uvx obolus
Add to Cursor

What the publisher says

From the Obolus repository's README, as published. We do not edit it. Read it on GitHub

<!-- mcp-name: io.github.inviti8/obolus -->

Obolus

<!-- The logo above is a placeholder. Replace assets/obolus-logo.svg; the only reference is the absolute URL above, which is absolute because PyPI does not resolve relative paths in a long description. -->

An MCP server that gives an AI agent a disposable Algorand wallet, so it can pay for x402 resources without a human provisioning anything.

The name is the coin paid to the ferryman for passage: small denomination, one purpose, spent and gone.

agent → x402_fetch(url) → 402 → sign → pay → body

x402 has over a thousand listed resources and almost no buyers — a handful of wallets account for nearly all volume, and they are scripted loops rather than agents. The rail exists; nothing can reach it. Obolus is the buyer-side piece: account setup, opt-in, signing and sweeping handled invisibly, so an agent just spends.

Install

Claude Code — the plugin

/plugin marketplace add inviti8/Obolus
/plugin install obolus@heavymeta

Wires up the MCP server and adds /obolus:fund-wallet, which knows the bootstrap order and why it cannot be rearranged. Nothing to install first beyond uv — the server is launched with uvx obolus mcp.

Everything else

uv tool install obolus

uv tool install rather than uvx for the CLI: uvx re-resolves on every invocation, measured at 200–400 ms over an installed console script. That is nothing once per session, which is all the MCP server costs — it is why the plugin above uses uvx — but it is the wrong trade for a command called in a loop. pipx install obolus works too.

Add it to Claude Code by hand

claude mcp add obolus -e OBOLUS_NETWORK=testnet -- obolus-mcp

Add it to any other MCP client

{
  "mcpServers": {
    "obolus": {
      "command": "obolus-mcp",
      "env": { "OBOLUS_NETWORK": "testnet" }
    }
  }
}

It starts on testnet. Mainnet is never disabled — Obolus is meant to make real payments — but it is never what you get by forgetting to choose.

Fund it

A new vault holds nothing, and the order is forced by the chain:

obolus vault          # says which of the three steps you are on
obolus vault qr       # scannable codes for the two things you can send

Step 3 before step 2 fails. An Algorand account cannot receive an asset it has not opted into — the transfer is rejected outright, it does not sit pending. That is why the QR codes encode the asset id and not just the address, and why walletfundinginfo tells you which step you are on every time rather than only on error.

The QR codes carry no amount. You type that into your own wallet, where you see it before confirming.

Use it

Three tools, deliberately:

There is no tool for any particular merchant. Everything is reached through x402_fetch, because the moment a wallet grows first-class verbs for one seller it stops being a wallet.

What bounds a loss

The session balance, enforced by the chain. Payments come from a short-lived session account funded from your vault, never from the vault itself. A session cannot spend what it does not hold, and that is true regardless of what any code here does.

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Obolus: common questions

Is Obolus MCP server safe?
Yes, by our scan: it is graded A (88/100). Read the Obolus safety report
How do I install Obolus?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Obolus need an API key?
No secret keys are declared. It reads 2 settings from the environment.
Is Obolus maintained?
The last commit was 65 days ago (2026-09-01). The latest release is v0.2.3.
How does Obolus compare with other MCP servers?
safety score 88/100 (higher than 75% of 48,243 servers); tools 3 (the typical server has 7); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.