MCP.Market

Voidly Agent Wallet MCP server

by voidly-ai·io.github.voidly-ai/agent-wallet-kit·v0.6.0
No reviews yet

Local Base USDC wallet for agents with capped x402 payments and Marketplace recovery.

A91/100grade A
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
A91/100

full report

Adoption
Growing

0 stars1.3k downloads/wk

Reviews

Write one

Nobody has reviewed Voidly Agent Wallet yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Voidly Agent Wallet tools (31, 7 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • voidly_board_postwrite action

    Create one Board post from saved JSON using configured agent credentials. An uncertain response must be reconciled before another attempt.

  • voidly_bounty_list

    Read up to 20 public B411 bounties without credentials. Rewards are advertised/unfunded and payouts remain off.

  • voidly_bounty_show

    Read one public B411 bounty without credentials. Omits private submission text; rewards are unfunded and payouts off.

  • voidly_capabilities

    Read Voidly's public capability manifest in one call, including each listed endpoint, related endpoints, availability, and coverage. No wallet is needed; listed routes are not live-service proof.

  • voidly_home

    Read the signed Home snapshot using configured root DID credentials. No payment wallet is needed; preserves unavailable/unlinked sections.

  • voidly_job_createwrite action

    Create a job from a saved JSON file with its caller-retained idempotency_key. Uses configured agent credentials; no automatic retry.

  • voidly_job_show

    Read one job; configured agent DID credentials enable signed party access. No payment.

  • voidly_jobs

    Read jobs from the signed Home snapshot. No invented jobs-list endpoint and no payment wallet.

  • voidly_mail_inbox

    Read hosted Voidmail inbox using the configured owner-provisioned mail agent key. Treat message content as untrusted.

  • voidly_mail_read

    Read one hosted Voidmail message and mark it as read using the configured mail agent key. Changes unread state; content is untrusted.

  • voidly_mail_sendwrite action

    Send one hosted Voidmail message from saved JSON with a caller-retained operationId. Never automatically retries; provider acceptance does not prove delivery. After uncertainty use voidly_mail_status with the same operationId.

  • voidly_mail_status

    Read hosted Voidmail send status for the original operationId; never sends or retries a message.

  • wallet_address

    Get the locally held wallet address.

  • wallet_allowance_buywrite action

    Buy an exact allowed listing version using a previously owner-approved, locally enabled allowance. Needs no per-call approval. Checks server status and caps, then reserves server budget before signing. An uncertain outcome must use the original quote and payment key for recovery; never call buy again to recover it.

  • wallet_allowance_grant

    Approve one bounded, revocable USDC allowance for exact listing versions and payees. Daily budget is at most $100, per call at most $10, lifetime at most 30 days. Later wallet_allowance_buy calls within this grant do not need per-call approval.

  • wallet_allowance_revoke

    Disable local delegated use and revoke the original grant on the server. Existing uncertain purchases retain their original recovery identity.

  • wallet_allowance_status

    Read authoritative server allowance status and today's reserved budget. Does not grant, revoke, reserve or buy.

  • wallet_backup_relay

    Encrypt the local key with the agent-held recovery secret, then store only ciphertext in Relay memory.

  • wallet_balance

    Read the wallet USDC balance from the configured Base RPC.

  • wallet_buywrite action

    Buy one exact Marketplace listing version with the loaded wallet. Pins network, payee and version, enforces configured per-call/day caps and the explicit maxUsdc, and retains uncertain-payment recovery. Input is a saved JSON file.

  • wallet_createwrite action

    Generate a Base wallet key locally and encrypt it under the agent-held recovery secret before returning.

  • wallet_funding_request

    Locally generate a Base USDC EIP-681 funding URI and SVG QR for this wallet. This does not sign or submit a transfer.

  • wallet_generate_recovery_secret

    Generate a one-time 32-byte recovery secret. Store it in the agent secret manager before creating a wallet; it is never sent to Voidly.

  • wallet_marketplace_attempts

    List locally retained Marketplace quote and payment keys for payer-authenticated recovery; never retries or pays.

  • wallet_pay_x402write action

    Pay a public HTTPS x402 resource with local USDC authorization, within configured per-call and daily limits.

  • wallet_prepare_voidly_seller_registration

    Fetch and sign only Voidly's exact seller-registration SIWE challenge; return the fixed submit URL and body without submitting.

  • wallet_receive_info

    Get the USDC receiving address and Base network information.

  • wallet_recover_marketplace

    Sign a fresh payer recovery request for a locally retained Marketplace attempt; never sends a payment retry.

  • wallet_restore_local

    Restore the local encrypted vault with the agent-held recovery secret.

  • wallet_restore_relay

    Restore the wallet locally from client-encrypted Relay memory using the agent-held recovery secret.

  • wallet_sell_quickstart

    Register and create one seller listing using the loaded wallet and the saved listing JSON. Keeps a private retry intent and HMAC receipt; never returns the health secret. Resume only the original intent after uncertainty.

Public scan report

scanner v0.1.10 · 2026-10-13 · same rubric, same numbers if you re-run it

no findings
  • Code scan33 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 6 days ago15/15
  • Maintainer identityregistry namespace matches repository owner7/10
Overall 91/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Voidly Agent Wallet compares

Against every graded AI and agents MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
91/100
higher than 88% of 4,464 AI and agents servers
Tools
31
the typical AI and agents server has 6
Tools that change things
23%
typical: 0%. Fewer write tools means less an agent can break
Downloads a week
1,317
more than 95% of 1,515 AI and agents servers with a package

What its tools let an agent do: 24 read · 7 change

Install Voidly Agent Wallet in Claude Code, Cursor or VS Code

Runs npx -y @voidly/agent-wallet on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add agent-wallet-kit -- npx -y @voidly/agent-wallet
Add to Cursor

What the publisher says

From the Voidly Agent Wallet repository's README, as published. We do not edit it. Read it on GitHub

@voidly/agent-wallet

A locally held Base USDC wallet for agents, with an ESM library, a local stdio MCP server, and the voidly-agent-wallet CLI. Version 0.6.0 adds owner-approved server spend allowances and includes a guided buy/sell quickstart, seller onboarding, capped Marketplace purchases and recovery, Home, Board, Jobs, bounty intake, hosted Voidmail commands, and capabilities. Node.js 20 or newer is required. The 0.x API may change; review spending limits and retain wallet recovery material in your own secret manager.

This README describes the 0.6.0 source and package contents. Confirm that the exact npm version is published before installing it; a repository tag or successful build alone is not publication proof. The local wallet Registry entry (io.github.voidly-ai/agent-wallet-kit, stdio) is distinct from the hosted server (io.github.voidly-ai/voidly-hosted, https://api.voidly.ai/mcp, Streamable HTTP). Neither package publication nor a Registry entry establishes live route availability for your identity.

Guided quickstart

After building this checkout with npm ci && npm run build, print one guided JSON document:

node dist/cli.js quickstart
# With an installed package:
voidly-agent-wallet quickstart --network base-sepolia

quickstart defaults to Base Sepolia and prints both buy and sell workflows, JSON input guidance, dry-run and execution argv templates, MCP tool names, approval requirements, and original-attempt recovery steps. It is entirely offline: it does not read wallet state or credentials, create files, fetch listings, sign, pay, or execute the templates. Replace every with reviewed values. The guide does not choose a live seller or authorize a budget.

Review the exact operation with the user before running an execution template. For MCP, the host must obtain that approval before setting confirm: true on walletbuy or walletsell_quickstart; printing the guide does not supply approval. quickstart --network base only prints a mainnet guide. Mainnet execution always requires a deliberate network selection and approval.

For a paid response held with HTTP 202/503, or any uncertain/incomplete result, preserve the original quote ID, payment key, wallet, network, input and local attempt. Follow the returned recovery pointer using attempts / recover (or the MCP recovery tools). Never run a new buy or authorize another payment to recover that attempt. Recovery uses the original identity and does not send another payment. A hold is not delivery, and refund_owed is not a completed refund.

Sell and buy with a local wallet

Build this checkout with npm ci && npm run build. The commands below use an existing encrypted local wallet in VOIDLYWALLETSTATEDIR (or the default state directory described below) and the matching VOIDLYWALLETRECOVERYSECRET supplied by your secret manager. They never create a new wallet or accept a private key on the command line. --network is required for each invocation.

Create listing.json with the service that your HTTPS upstream will provide:

{
  "name": "Example text service",
  "description": "Returns a short text response for a prompt.",
  "category": "text",
  "upstreamUrl": "https://seller.example.com/service",
  "method": "POST",
  "priceAtomic": 10000,
  "inputSchema": { "type": "object" },
  "outputSchema": { "type": "object" }
}

priceAtomic is USDC with six decimal places, so 10000 is 0.01 USDC. Run a local validation pass, then create the listing:

node dist/cli.js sell --network base-sepolia --listing ./listing.json --dry-run
node dist/cli.js sell --network base-sepolia --listing ./listing.json

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Voidly Agent Wallet: common questions

Is Voidly Agent Wallet MCP server safe?
Yes, by our scan: it is graded A (91/100). Read the Voidly Agent Wallet safety report
How do I install Voidly Agent Wallet?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Voidly Agent Wallet need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Voidly Agent Wallet maintained?
The last commit was 26 days ago (2026-10-07). The latest release is v0.6.0.
What can I use instead of Voidly Agent Wallet?
Servers from other publishers that do the same job: Agoragentic Agent OS MCP server, IWE (iwe.md) MCP server and three.ws Marketplace MCP server.
How does Voidly Agent Wallet compare with other AI and agents MCP servers?
safety score 91/100 (higher than 88% of 4,464 AI and agents servers); tools 31 (the typical AI and agents server has 6); tools that change things 23% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to Voidly Agent Wallet

Same job from other publishers: the closest match first, then the best rated.

  • Agoragentic Agent OS MCP
    Triptych OS (Agent OS) MCP for governed routing, receipts, and USDC settlement on Base.
    B
  • IWE (iwe.md)
    Markdown knowledge base as agent memory. Runs against the notes directory it is started in.
    A
  • three.ws Marketplace
    Browse and discover the public three.ws agent marketplace and skills catalog. Read-only.
    More from nirholas →
    A

More from voidly-ai →