MCP.Market

Realmint MCP server

online · 100% uptime
by realmint-io·io.github.realmint-io/mcp·v1.0.0

Agent-native scoring, search and routing for tokenized real-world assets across multi-chain.

B76/100grade B
What users say
No reviews yet
Be the first
Safety scan
B76/100

full report

Adoption
New

0 stars

Reviews

Write one

Nobody has reviewed Realmint yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Realmint tools (16, 2 write)

write = sends, deletes, buys or posts
  • realmint_buywrite actionFree

    Buy `amount_usdc` of USDC worth of the RWA `asset_id` (e.g. 'paxg'). **Requires sign-in + a one-time wallet delegation** at app.realmint.io/mcp/delegate. Realmint signs server-side via your Privy delegation, capped per-trade — no key, no per-trade approval. Your smart account must already hold USDC (see realmint_deposit). Moves real funds.

  • realmint_depositFree

    Show where to send USDC to fund your buying power. **Requires sign-in.** Send USDC on Base to your EVM wallet; it funds your smart account for buys.

  • realmint_get_assetFree

    Get the full schema for a specific RWA by asset ID. Includes issuer details, control capabilities (freeze/mint/burn/blacklist), transferability restrictions, redemption mechanics, and legal documents. The asset ID is the lowercased ticker (e.g. "xaut", "paxg", "kau", "agri", "cgo"). Use `realmint_list_assets` to discover all available IDs — the catalog spans ~30 tokens across multiple chains and changes over time. Always read `metadata.lifecycle` from the response: a non-null lifecycle means the token is migrated/discontinued/abandoned and trading is disallowed (score is hard-capped at 49).

  • realmint_get_asset_historyFree

    Get the versioned metadata change history for an asset. Each entry records what changed (created, updated) and a full schema snapshot. Useful for detecting when an issuer changes terms or control parameters.

  • realmint_get_price_historyFree

    Time-series price history for an asset. Args: asset_id: Asset identifier days: Lookback in days (1-730, default 30) granularity: Optional explicit bucket — "5m" | "1h" | "1d". Omit to auto-pick (≤2d → 5m, ≤30d → 1h, else 1d). The server cascades to coarser buckets when the requested one is empty for this asset.

  • realmint_get_route_supportFree

    List the venues and chains that can route this asset, plus per-venue backing/liquidity/social scores and policy flags. Use this to check whether a trade is even feasible before quoting — `routing_enabled=false` or an empty venue list means the asset can be inspected but not traded via Realmint.

  • realmint_get_scoreFree

    Get the Risk & Rights Score for an asset across six dimensions: - backing (0-100): proof of reserves, audit cadence, backing mechanism - enforceability (0-100): governing law, issuer verification, legal documents - control (0-100): issuer power risk — freeze, mint, burn, blacklist, upgrade - exit (0-100): redemption, transferability, KYC/whitelist, settlement, holding periods - liquidity (0-100): market data, venue count, evidence docs - social (0-100): Twitter activity (recency-weighted; unverified handles are penalized below the worst observed tier) Also returns a weighted composite (0-100, higher is better). Weights and penalty tiers are versioned server-side — see `policy_version` in the response. Combine with the asset's `metadata.lifecycle` field (from `realmint_get_asset`) to detect dead/migrated tokens — those are score-capped at 49. Suggested thresholds for decision-making: - composite ≥ 75: typical case, proceed - 55 ≤ composite < 75: elevated friction (gates, missing audits, etc.); review the asset's flags before proceeding - composite < 55: high risk; abort or require explicit user override

  • realmint_list_assetsFree

    List all tokenized real-world assets (RWAs) indexed by Realmint. Returns the full schema for each asset including ownership, control, transferability, redemption terms, and legal metadata.

  • realmint_list_instrumentsFree

    List instruments — the real-world things tokens represent: an underlying at a specific denomination ("Silver · 1 oz") or a stock ("Apple"). Tokens sharing an instrument are interchangeable representations of the same thing. Each entry carries its member token ids, the recommended member (buyable > priced > score), and the floor price across members — use it to pick the best token for an instrument before quoting or buying.

  • realmint_list_marketFree

    Market snapshots for indexed RWAs: spot price, 24h change, volume, market cap, venue count, and a short price history series. Combine with `realmint_get_score` to compare risk against liquidity. Args: ids: Optional comma-separated asset IDs to filter (e.g. "xaut,paxg"). Empty = all assets. Assets without fresh market data are omitted from the response.

  • realmint_logoutFree

    Sign out note: Realmint keeps no signing session — server-side signing is your standing Privy **delegation**. To fully revoke it, go to app.realmint.io/mcp/delegate. Disconnecting the connector ends this session.

  • realmint_my_walletFree

    Show your Realmint wallet (EVM + Solana), smart account, and balances. **Requires sign-in.** Read-only; moves no funds.

  • realmint_sellFree

    Sell `amount` of the RWA `asset_id` you hold, settling USDC back on Injective. **Requires sign-in + a one-time wallet delegation** at app.realmint.io/mcp/delegate. Realmint signs server-side via your Privy delegation — no key, no per-trade approval. Sells positions bought over MCP (held in your derived Realmint Wallet). Moves real funds.

  • realmint_whoamiFree

    Return the signed-in user's identity. This tool **requires authentication** — calling it triggers the Realmint sign-in (OAuth) if you're not signed in. Use it to confirm who you're acting as. Read-only; moves no funds.

  • realmint_withdrawFree

    Withdraw `amount_usdc` USDC from your Realmint smart account to `recipient` (any address). **Requires sign-in + a one-time wallet delegation** at app.realmint.io/mcp/delegate. Realmint signs server-side via your Privy delegation, capped per-transaction — no key, no per-withdraw approval. Native USDC on Injective. Moves real funds. `smart_account_address` (advanced/recovery, normally leave empty): sweep from a specific smart account you own that a factory rotation left behind. Only an SA CREATE2-owned by you is accepted.

  • realmint_x402_buy_challengewrite actionFree

    Get the x402 payment requirements to fund yourself in USDC so you can buy RWAs — the agent-native on-ramp. This returns the 402 challenge only; it moves no funds. To complete funding (two signatures total, the same a human gives), the agent then, ENTIRELY CLIENT-SIDE: 1. Reads `accepts[0]` from the returned body: `payTo` is YOUR Base smart account (derived from `owner_eoa`), `maxAmountRequired` the USDC atomic amount, `asset` the Base USDC contract, `extra` the EIP-712 domain. 2. Signs an EIP-3009 `transferWithAuthorization(from=owner_eoa, to=payTo, value=maxAmountRequired, ...)` over that domain, base64-encodes the x402 PaymentPayload, and re-POSTs to `/v1/route/x402-buy` with it in the `X-PAYMENT` header. On settlement the USDC bridges custody-free to your Injective smart account. 3. Buys any RWA from that Injective balance via `POST /v1/route/intent` (signing the route as usual). The asset rests in your smart account; `send` it elsewhere if you want — exactly like a human user. Always verify `payTo` derives from your own `owner_eoa` before signing. Args: owner_eoa: Your EVM EOA — the payment signer and smart-account owner. amount_usdc: USDC to fund yourself with (human units, e.g. 25.0). asset_id: Optional RWA you intend to buy, recorded for context.

Public scan report

scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it

1 high
  • –Code scanremote-only server, no package to scann/a
  • Live reliabilityremote reachable in 330ms20/20
  • Tool poisoning16 tool descriptions checked15/15
  • Auth qualityopen endpoint exposes 2 write-action tools with no auth3/15
  • Maintenancelast push 87 days ago12/15
  • Maintainer identityregistry namespace matches repository owner7/10

Findings (1)

  • highWrite-action tools reachable without authenticationauth.open-write
Overall 76/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Realmint compares

Against every graded AI and agents MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
76/100
higher than 48% of 4,460 AI and agents servers
Tools
16
the typical AI and agents server has 6
Tools that change things
13%
typical: 0%. Fewer write tools means less an agent can break
Uptime
100%
of our recent checks; the typical remote AI and agents server answers 100%
Response time
502 ms
faster than 27% of 2,331 AI and agents servers

What its tools let an agent do: 14 read · 2 change

Install Realmint in Claude Code, Cursor or VS Code

claude mcp add --transport http mcp https://mcp.realmint.io/mcp
Add to Cursor

What the publisher says

From the Realmint repository's README, as published. We do not edit it. Read it on GitHub

Realmint MCP

Agent-native access to the Realmint catalog of tokenized real-world assets (RWAs): scoring, market data, route support, price history, and a keyless x402 buy on-ramp — exposed as native tools over the Model Context Protocol.

The MCP surface is key-safe by design. The catalog is read-only. Two trading paths move funds only under your own authorization and never see a raw key:

authorization client-side to fund + buy (realmintx402buy_challenge).

  • x402 keyless buy — an autonomous agent with its own EVM key signs an EIP-3009

their Privy embedded wallet once; Realmint then signs buy/sell/withdraw server-side under a per-trade spending cap. Privy holds the wallet; no key touches Realmint.

  • Sign-in + delegated trade — a human/connector signs in via OAuth and delegates

What you can ask it

Add it to your client

Claude.ai (custom remote connector)

call a trade tool, Claude runs the OAuth sign-in (Realmint → Privy) and you delegate your wallet once.

  1. Settings → Connectors → Add custom connector
  2. Server URL: https://mcp.realmint.io/mcp
  3. Auth: none to connect — the catalog works immediately. The first time you
  1. Save and start asking the example prompts above.

Claude Desktop

Edit ~/Library/Application Support/Claude/claudedesktopconfig.json:

{
  "mcpServers": {
    "realmint": {
      "transport": {
        "type": "streamable-http",
        "url": "https://mcp.realmint.io/mcp"
      }
    }
  }
}

Restart Claude Desktop.

Cursor / Cline / Continue / any MCP client

Configure a remote MCP server with:

  • URL: https://mcp.realmint.io/mcp
  • Transport: streamable-http
  • Auth: none to connect; trade tools trigger OAuth on first use

Programmatic

curl -X POST https://mcp.realmint.io/mcp \
  -H 'Content-Type: application/json' \
  -H 'Accept: application/json, text/event-stream' \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

Unauthenticated you see the 8 catalog tools (all readOnlyHint=true). After OAuth sign-in, the 6 trade tools appear too (destructiveHint=true).

Catalog tools (read-only, no auth)

Trade tools (sign in via OAuth)

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Realmint: common questions

Is Realmint MCP server safe?
Mostly: it is graded B (76/100). Read the Realmint safety report
How do I install Realmint?
It runs remotely at mcp.realmint.io. Add it to Claude Code, Cursor, VS Code or Claude Desktop with the snippets above, or call it through the mcp.market gateway without installing anything.
Does Realmint need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Realmint maintained?
The last commit was 125 days ago (2026-07-02). The latest release is v1.0.0.
Is Realmint up?
100% of our last 28 checks got an answer. We check remote servers about four times a day.
What can I use instead of Realmint?
Servers from other publishers that do the same job: Agent-Native Assets MCP server, Claude Prompts MCP server and LLM Sandbox MCP server.
How does Realmint compare with other AI and agents MCP servers?
safety score 76/100 (higher than 48% of 4,460 AI and agents servers); tools 16 (the typical AI and agents server has 6); tools that change things 13% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to Realmint

Same job from other publishers: the closest match first, then the best rated.

  • Agent-Native Assets
    Digital asset manager - upload, organize, search, and generate on-brand images and videos
    A
  • Claude Prompts
    Reusable prompt templates, multi-step workflow chains, and quality gates for any MCP client.
    A
  • LLM Sandbox
    Securely run LLM-generated code in isolated containers across 7 languages and 3 container backends.
    A
  • PaperBanana
    Generate academic diagrams and statistical plots from text using multi-agent AI.
    A
  • Ts Core
    Agent-native TypeScript framework for building MCP servers.
    A