Obolus MCP server
io.github.inviti8/obolus·v0.2.3Disposable Algorand wallet for AI agents. Pay x402 resources in USDC, no human provisioning.
0 stars21 downloads/wk
Reviews
Write oneNobody has reviewed Obolus yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Obolus tools (3)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
wallet_funding_infowallet_statusx402_fetch
Public scan report
scanner v0.1.10 · 2026-10-29 · same rubric, same numbers if you re-run it
- Code scan30 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 58 days ago12/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
How Obolus compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 88/100
- higher than 75% of 48,243 servers
- Tools
- 3
- the typical server has 7
- Tools that change things
- 0%
- typical: 0%. Fewer write tools means less an agent can break
- Downloads a week
- 21
- more than 8% of 12,306 servers with a package
What its tools let an agent do: 3 read
Install Obolus in Claude Code, Cursor or VS Code
claude mcp add obolus -- uvx obolus
What the publisher says
From the Obolus repository's README, as published. We do not edit it. Read it on GitHub
<!-- mcp-name: io.github.inviti8/obolus -->
Obolus
<!-- The logo above is a placeholder. Replace assets/obolus-logo.svg; the only reference is the absolute URL above, which is absolute because PyPI does not resolve relative paths in a long description. -->
An MCP server that gives an AI agent a disposable Algorand wallet, so it can pay for x402 resources without a human provisioning anything.
The name is the coin paid to the ferryman for passage: small denomination, one purpose, spent and gone.
agent → x402_fetch(url) → 402 → sign → pay → bodyx402 has over a thousand listed resources and almost no buyers — a handful of wallets account for nearly all volume, and they are scripted loops rather than agents. The rail exists; nothing can reach it. Obolus is the buyer-side piece: account setup, opt-in, signing and sweeping handled invisibly, so an agent just spends.
Install
Claude Code — the plugin
/plugin marketplace add inviti8/Obolus
/plugin install obolus@heavymetaWires up the MCP server and adds /obolus:fund-wallet, which knows the bootstrap order and why it cannot be rearranged. Nothing to install first beyond uv — the server is launched with uvx obolus mcp.
Everything else
uv tool install obolusuv tool install rather than uvx for the CLI: uvx re-resolves on every invocation, measured at 200–400 ms over an installed console script. That is nothing once per session, which is all the MCP server costs — it is why the plugin above uses uvx — but it is the wrong trade for a command called in a loop. pipx install obolus works too.
Add it to Claude Code by hand
claude mcp add obolus -e OBOLUS_NETWORK=testnet -- obolus-mcpAdd it to any other MCP client
{
"mcpServers": {
"obolus": {
"command": "obolus-mcp",
"env": { "OBOLUS_NETWORK": "testnet" }
}
}
}It starts on testnet. Mainnet is never disabled — Obolus is meant to make real payments — but it is never what you get by forgetting to choose.
Fund it
A new vault holds nothing, and the order is forced by the chain:
obolus vault # says which of the three steps you are on
obolus vault qr # scannable codes for the two things you can sendStep 3 before step 2 fails. An Algorand account cannot receive an asset it has not opted into — the transfer is rejected outright, it does not sit pending. That is why the QR codes encode the asset id and not just the address, and why walletfundinginfo tells you which step you are on every time rather than only on error.
The QR codes carry no amount. You type that into your own wallet, where you see it before confirming.
Use it
Three tools, deliberately:
There is no tool for any particular merchant. Everything is reached through x402_fetch, because the moment a wallet grows first-class verbs for one seller it stops being a wallet.
What bounds a loss
The session balance, enforced by the chain. Payments come from a short-lived session account funded from your vault, never from the vault itself. A session cannot spend what it does not hold, and that is true regardless of what any code here does.
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Obolus: common questions
- Is Obolus MCP server safe?
- Yes, by our scan: it is graded A (88/100). Read the Obolus safety report
- How do I install Obolus?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Obolus need an API key?
- No secret keys are declared. It reads 2 settings from the environment.
- Is Obolus maintained?
- The last commit was 65 days ago (2026-09-01). The latest release is v0.2.3.
- How does Obolus compare with other MCP servers?
- safety score 88/100 (higher than 75% of 48,243 servers); tools 3 (the typical server has 7); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.