Loading…
Connect AI assistants to the Singularity Layer marketplace for discovering listings, managing assets, and processing x402 payments.
Do not connect
A critical issue was found. Do not connect this server as-is.
Scanned 28 days ago Due for re-check
A server can change after it's graded. Re-run the automated scan to refresh this report.
This grade is deterministic and reproducible: the same server surface always yields the same grade under a given algorithm version. It is a real automated assessment computed by the MCPGrade engine from what the probe actually observed — not a fabricated or opinion score. It is not a manual human pentest, so it can miss context-specific risks.
Every signal below was measured directly by the automated probe. The grade is derived only from evidence like this — nothing is assumed.
The singularity-mcp MCP server exposes 44 tools, focused primarily on communication capabilities. Its published description reads: "Connect AI assistants to the Singularity Layer marketplace for discovering listings, managing assets, and processing x402 payments". It communicates over Streamable HTTP using the 2026-07-28 protocol revision, and does not require authorization to connect. MCPGrade currently rates singularity-mcp F — a critical issue was found and the server should not be connected as-is. Its most notable findings include "Tool input schema requests a secret" and "Tool input schema requests a secret". This report is a deterministic, reproducible automated assessment: the same observed surface always yields the same grade under a given algorithm version, and it is refreshed as new scans arrive and free to read — but it is not a substitute for a manual human security review. Always re-check singularity-mcp's advertised tools, transport security, and authorization posture before connecting an autonomous agent or sharing sensitive context with it.
Add singularity-mcp to an MCP client using the endpoint below. Review the grade and findings above before granting an autonomous agent access.
MCP endpoint
https://mcp.x402layer.cc/mcpStreamable HTTP transport. This is the MCP endpoint, not a website — paste it into your MCP client server list rather than a browser.
Captured passively during the read-only scan. Click any value to find servers that match it.
The tools this server advertises via tools/list — names, purposes, and the parameters each accepts, exactly as enumerated read-only.
Agent Vault storage usage and plan for the wallet behind a compute API key: bytes used/reserved, free vs pro plan, caps, and Vault Pro pricing.
List the agents registered in Agent Vault for this wallet (OpenClaw, Hermes, pods, and custom --path lineages).
List completed Agent Vault snapshots (encrypted backups) for this wallet, optionally filtered to one agent. Use this to check WHEN an agent was last backed up.
Permanently delete one Agent Vault snapshot and free its storage. Irreversible — confirm with the user before calling.
Sorted worst-first. Each finding shows its severity, what it means, its OWASP MCP Top-10 mapping, and a recommended fix — the check id links to the exact methodology row that produced it.
tool: list_my_endpoints
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "accessToken"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: list_my_campaigns
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "accessToken"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: create_campaign
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "accessToken"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: update_campaign
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "accessToken"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: update_endpoint
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "accessToken"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: list_my_products
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "accessToken"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: update_product
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "accessToken"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: get_endpoint_details
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "accessToken"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: get_endpoint_stats
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "accessToken"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: set_webhook
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "accessToken"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: remove_webhook
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "accessToken"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: delete_endpoint
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "accessToken"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: request_endpoint_creation_payment
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "accessToken"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: create_endpoint_with_payment
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "accessToken"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: request_endpoint_topup_payment
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "accessToken"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: topup_endpoint_with_payment
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "accessToken"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: prepare_agent_registration
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
,"properties":{"sessionToken":{"type":"string","description":"Wallet sessionRecommendationRemove side-channel parameters; constrain tool inputs.
tool: prepare_agent_registration
A tool description tries to alter the model’s use of another tool.
t and then call finalize_agent_registration.RecommendationDescriptions must describe only their own tool.
tool: submit_agent_feedback
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
parameter "endpoint"RecommendationRemove side-channel parameters; constrain tool inputs.
tool: submit_agent_feedback
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "apiKey"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
The server accepts tool enumeration (and likely invocation) with no authentication.
RecommendationRequire OAuth 2.1 authorization for any server exposing non-public tools.
tool: vault_delete_snapshot
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "vault_delete_snapshot"RecommendationScope tools to the minimum needed.
tool: vault_subscribe_pro
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "vault_subscribe_pro"RecommendationScope tools to the minimum needed.
tool: vault_how_to_backup
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "vault_how_to_backup"RecommendationScope tools to the minimum needed.
tool: create_campaign
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "create_campaign"RecommendationScope tools to the minimum needed.
tool: update_campaign
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "update_campaign"RecommendationScope tools to the minimum needed.
tool: update_endpoint
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "update_endpoint"RecommendationScope tools to the minimum needed.
tool: update_product
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "update_product"RecommendationScope tools to the minimum needed.
tool: set_webhook
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "set_webhook"RecommendationScope tools to the minimum needed.
tool: remove_webhook
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "remove_webhook"RecommendationScope tools to the minimum needed.
tool: delete_endpoint
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "delete_endpoint"RecommendationScope tools to the minimum needed.
tool: request_endpoint_creation_payment
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "request_endpoint_creation_payment"RecommendationScope tools to the minimum needed.
tool: create_endpoint_with_payment
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "create_endpoint_with_payment"RecommendationScope tools to the minimum needed.
tool: request_endpoint_topup_payment
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "request_endpoint_topup_payment"RecommendationScope tools to the minimum needed.
tool: topup_endpoint_with_payment
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "topup_endpoint_with_payment"RecommendationScope tools to the minimum needed.
tool: request_agent_wallet_challenge
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "request_agent_wallet_challenge"RecommendationScope tools to the minimum needed.
tool: prepare_agent_registration
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "prepare_agent_registration"RecommendationScope tools to the minimum needed.
tool: prepare_agent_update
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "prepare_agent_update"RecommendationScope tools to the minimum needed.
tool: finalize_agent_update
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "finalize_agent_update"RecommendationScope tools to the minimum needed.
Vantaj uptime monitoring via MCP — manage monitors, heartbeats, incidents, and status pages.
Unified gateway to Algeria's TKAWEN ecosystem: commerce, certification, and AI tools.
Provides access to the Cohereon Doctrine AI safety framework with governance components, tiered access, and agent onboarding.
Agentic rails for complex workflows with receipts, fees, and MCP tool access.
Structural TC39 spec lookup for ECMA-262 and ECMA-402 in AI agents, SHA-pinned and offline-first.
Structural TC39 spec lookup for ECMA-262 and ECMA-402 in AI agents, SHA-pinned and offline-first.
Change the wallet’s Agent Vault plan, charged from platform credits. pro = 10 GB + the last 10 snapshots of each agent ($3/month, $30/year); max = 50 GB + unlimited snapshots ($5/month, $50/year); fre
How to actually CREATE or RESTORE an encrypted backup. Encryption is zero-knowledge and must run on the machine where the agent lives — this returns the exact CLI/SDK steps.
Browse and search the Singularity Marketplace with various filters. Returns listings of endpoints, products, and agentic services.
Get detailed information about a specific marketplace listing by its slug.
Get featured marketplace listings (endpoints and products highlighted by the platform).
Get top-rated marketplace listings sorted by average rating.
Get details for a specific ERC-8004 or Solana-8004 agent by network and identifier.
List all available marketplace categories.
List all supported blockchain networks.
List all registered ERC-8004 and Solana-8004 agents.
List the endpoints accessible to the dashboard owner behind your MCP access token or endpoint API key. PATs are preferred for owner-wide inventory and require mcp:read or mcp:*.
List fundraiser campaigns owned by the dashboard user behind your MCP personal access token. Requires mcp:read or mcp:*.
Create a fundraiser campaign owned by the dashboard user behind your MCP personal access token. Requires mcp:campaigns:write or mcp:*.
Update allowlisted fundraiser campaign fields such as title, description, x handle, images, and links. Requires mcp:campaigns:write or mcp:*.
Update allowlisted endpoint fields such as metadata, pricing, listing flags, imagery, wallet, payment options, slug, and webhook settings. PATs are preferred and require mcp:endpoints:write or mcp:*.
List the products owned by the same dashboard user as your MCP access token or endpoint API key. PATs are preferred and require mcp:read or mcp:*.
Update allowlisted product fields including metadata, pricing, listing state, payment options, wallet, branding, and slug. PATs are preferred and require mcp:products:write or mcp:*.
Get full details for an endpoint you own, including credit balance, pricing config, and wallet address. PATs are preferred and require mcp:read or mcp:*.
Get usage analytics for an endpoint: total requests, monthly requests, revenue, and success rate. PATs or endpoint API keys improve accuracy. PATs require mcp:read or mcp:*.
Set or update the webhook URL for an endpoint. Returns a signing secret that must be saved. PATs are preferred and require mcp:endpoints:write or mcp:*.
Remove the webhook URL from an endpoint. PATs are preferred and require mcp:endpoints:write or mcp:*.
⚠️ DESTRUCTIVE: Permanently delete an endpoint. Cannot be undone. Only works for agent-created endpoints. PATs are preferred and require mcp:endpoints:write or mcp:*.
Return the x402 payment challenge needed to create a new agent endpoint. Requires a dashboard PAT with mcp:endpoints:write or mcp:*.
Create a new agent endpoint after you have obtained a valid X-Payment payload for the creation challenge. Requires a dashboard PAT with mcp:endpoints:write or mcp:*.
Return the x402 payment challenge needed to top up credits for an existing agent endpoint. Accepts either a dashboard PAT with mcp:endpoints:write or mcp:* or a legacy endpoint API key.
Complete an endpoint credit top-up after you have obtained a valid X-Payment payload. Accepts either a dashboard PAT with mcp:endpoints:write or mcp:* or a legacy endpoint API key.
Return the x402 payment challenge for purchasing a public product. This wraps the existing public /p/:id-or-slug flow and does not require owner credentials.
Complete a public product purchase after you have obtained a valid X-Payment payload for that product challenge.
Return the x402 payment challenge for purchasing a public credit pack from an endpoint that exposes /e/:slug?action=purchase.
Complete a public endpoint credit-pack purchase after you have obtained a valid X-Payment payload for the purchase challenge.
Get public ERC-8004 / Solana-8004 registry information, supported networks, worker routes, and wallet-first notes.
Create a wallet-auth challenge for ERC-8004 agent registration or management. The wallet owner must sign the returned message locally; MCP does not sign with the wallet.
Verify a wallet-signed auth challenge and receive a short-lived session token for agent registry flows.
List platform endpoints owned by the authenticated wallet or linked dashboard user that can be bound to ERC-8004 agents.
List ERC-8004 or Solana-8004 agents owned by the authenticated wallet or linked dashboard user.
Prepare a wallet-first ERC-8004 or Solana-8004 registration. The caller must later send the on-chain transaction from the same wallet and then call finalize_agent_registration.
Finalize a wallet-first agent registration after the on-chain transaction has been sent from the same wallet.
Prepare a wallet-first update for an existing ERC-8004 or Solana-8004 agent. If metadata changes require an on-chain URI update, the response describes that action.
Finalize a wallet-first update for an existing ERC-8004 or Solana-8004 agent after any required on-chain transaction has been sent from the same wallet.
Submit on-chain ERC-8004 or Solana-8004 reputation feedback through the worker feedback route. This requires the separate worker feedback API key, not a wallet session token.