MCP.Market

Toreador MCP server

by toreador.io·io.toreador/mcp-server·v0.2.6·1 stars
No reviews yet

Generate crypto QR codes (BTC, ETH, SOL, USDC, USDT, EURC) and manage payment sessions.

B75/100grade B
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
B75/100

full report

Adoption
New

1 stars46 downloads/wk

Reviews

Write one

Nobody has reviewed Toreador yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Toreador tools (5, 1 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • toreador_create_sessionwrite action

    Create a hosted payment session for ERC-20 stablecoins on EVM chains (USDC, USDT, EURC on Ethereum, Polygon or Base). Returns a session ID, a 6-character security code to display to the payer, and a URL to a Toreador-hosted payment page where the payer connects their wallet. Sessions expire 15 minutes after creation. PRO PLAN REQUIRED. For native tokens or Solana SPL, use toreador_generate_qr inst

  • toreador_generate_qr

    Generate a crypto QR code for a native token (BTC, ETH, SOL, POL) or a Solana SPL token (USDC on Solana). Returns the QR data URI (PNG base64) and the on-chain payment URI (BIP21, EIP-681, Solana Pay). FREE — no API key needed for these chains. For ERC-20 stablecoins on Ethereum/Polygon/Base (USDT, USDC, EURC), use toreador_create_session (Pro plan required).

  • toreador_get_payment_status

    Get the current status of an ERC-20 payment session by ID. Status values: pending, submitted, confirming, completed, expired, failed. Includes on-chain confirmation count and tx hash once submitted.

  • toreador_list_history

    List the 50 most recent QR code generations for the authenticated account. Returns a list of payment requests with token, chain, amount, recipient and timestamp.

  • toreador_list_sessions

    List the 50 most recent ERC-20 payment sessions for the authenticated account. Includes status, tx hash, confirmations and timestamps.

Public scan report

scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it

no findings
  • Code scan3 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 114 days ago8/15
  • Maintainer identitynamespace and repository owner differ4/10
Overall 75/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Toreador compares

Against every graded Finance MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
75/100
higher than 50% of 1,761 Finance servers
Tools
5
the typical Finance server has 8
Tools that change things
20%
typical: 0%. Fewer write tools means less an agent can break
GitHub stars
1
more than 65% of 946 Finance servers
Downloads a week
46
more than 43% of 421 Finance servers with a package

What its tools let an agent do: 4 read · 1 change

Install Toreador in Claude Code, Cursor or VS Code

Runs npx -y @toreador/mcp-server on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add mcp-server -- npx -y @toreador/mcp-server
Add to Cursor

What the publisher says

From the Toreador repository's README, as published. We do not edit it. Read it on GitHub

@toreador/mcp-server

Official Model Context Protocol server for Toreador. Lets Claude Desktop, Cursor, and any other MCP-capable assistant generate crypto QR codes and manage payment sessions on your behalf.

⚠️ Requires a Pro plan API key (tdr_...) from your Toreador

dashboard. The MCP server runs locally

and uses your key to call https://toreador.io/api/v1/public.

Tools exposed

Install in Claude Desktop

Edit Claude Desktop's config file:

  • macOS: ~/Library/Application Support/Claude/claudedesktopconfig.json
  • Windows: %APPDATA%/Claude/claudedesktopconfig.json
  • Linux: ~/.config/Claude/claudedesktopconfig.json

Add the toreador entry under mcpServers:

{
  "mcpServers": {
    "toreador": {
      "command": "npx",
      "args": ["-y", "@toreador/mcp-server"],
      "env": {
        "TOREADOR_API_KEY": "tdr_your_key_here"
      }
    }
  }
}

Restart Claude Desktop. You should see the 5 Toreador tools in the tools menu.

Install in Cursor

In Cursor settings → MCP → "Add new MCP server", paste:

{
  "command": "npx",
  "args": ["-y", "@toreador/mcp-server"],
  "env": { "TOREADOR_API_KEY": "tdr_..." }
}

Example prompts

Once installed, try these prompts in your MCP client:

  • "Generate a Bitcoin QR code for 0.001 BTC to bc1qxy2kgdygjrsqtzq2n0yrf2493p83kkfjhx0wlh."
  • "Create a USDC payment session for 50 USDC on Polygon to 0x742d35Cc6634C0532925a3b844Bc9e7595f2bD18."
  • "What's the status of session ses123?"*
  • "Show me my last 10 payment sessions."

The assistant will pick the right tool, call Toreador, and return the result — including the QR code data URI which most clients can render inline.

Configuration

Trust and safety

never leaves your computer except in outbound HTTPS calls to toreador.io.

  • Local only. The MCP server runs on your machine via stdio. Your API key

QR codes and read session state — they cannot move money.

  • Non-custodial. Toreador never holds funds. The MCP tools only generate

or read existing ones. There is no "delete" or "refund" tool.

  • Read or create, no destruction. Tools either generate new payment objects

Build from source

git clone https://github.com/Bentonabento/toreador-sdk.git
cd toreador-sdk/mcp
npm install
npm run build
TOREADOR_API_KEY=tdr_... node dist/index.js

The server will boot, print [toreador-mcp] ready (5 tools registered) to stderr, and wait for MCP requests on stdin.

License

MIT

Nothing above is checked by us. What we check is on the safety report.

Toreador: common questions

Is Toreador MCP server safe?
Mostly: it is graded B (75/100). Read the Toreador safety report
How do I install Toreador?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Toreador need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Toreador maintained?
The last commit was 151 days ago (2026-06-06). The latest release is v0.2.6.
What can I use instead of Toreador?
Servers from other publishers that do the same job: Coinbase Commerce MCP server, three.ws Agent Payments MCP server and Yolfi Payments MCP server.
How does Toreador compare with other Finance MCP servers?
safety score 75/100 (higher than 50% of 1,761 Finance servers); tools 5 (the typical Finance server has 8); tools that change things 20% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to Toreador

Same job from other publishers: the closest match first, then the best rated.

  • Coinbase Commerce
    MCP server for Coinbase Commerce — crypto merchant payments (BTC/ETH/USDC); settle crypto or fiat
    More from codespar →
    B
  • three.ws Agent Payments
    Governed x402 payment sessions: pay any endpoint with budget, allowlist & per-tx caps, no key.
    More from nirholas →
    B
  • Yolfi Payments MCP
    Let AI agents add Yolfi crypto checkout, paylinks, webhooks, and status checks.
    A
  • PayRam
    Install, configure, operate and integrate self-hosted PayRam crypto payment gateways.
    B
  • Blockrun
    Web search, deep research, prediction markets & crypto data for AI agents. Pay per call via x402.
    B