MCP MeasureMCP Measure

index observed

IMBA Agent Spend

IMBA spend MCP: USDT TRC-20 deposit and catalog buy with your key. No withdraw.

Should I use this

Quality & Safety

A
Description quality
97%
Schema completeness
61%
Naming quality
92%
Poisoning risk
100%
Permission match
100%
Protocol compliance
100%

Findings (2)

  • LOWTool 'list_cards' description lacks action verbin list_cards
  • LOWTool 'topup_card' description lacks action verbin topup_card

Based on automated analysis of tool definitions and protocol compliance.

Context Cost

~2,690Tokens (tool definitions)
~634 BTypical response size
Significant attention impact (2.10% of 128k context)

This is the approximate number of tokens consumed each time the server's tools are loaded into a model's context. Higher counts reduce the attention available for other tasks.

Install

One-Click Install

Add this to your `claude_desktop_config.json` file:

{
  "mcpServers": {
    "agent": {
      "command": "npx",
      "args": [
        "@imba_wallet/agent-mcp"
      ]
    }
  }
}

Runnable packages

npm@imba_wallet/agent-mcp0.1.4stdio

Remote endpoints

https://imbawallet.com/mcp/spendstreamable-http

What it can do

Tool inventory

Tools (19)

🟢 Read-only🟡 Write🔴 Delete⚪ Unknown
🟢get_spend_policy

Forbidden rails and tier rules. Allowed catalog: Visa prepaid, travel eSIM, gift cards, paid KYT address screen. Read-only.

Input Schema

{
  "type": "object",
  "properties": {}
}
🟡get_deposit_address

POST /api/deposit_address blockchain=tron. Address is issued for the authenticated agent only. Always re-fetch before send. Do not cache. USDT TRC-20 only. 24h unfunded hold.

Input Schema

{
  "type": "object",
  "properties": {}
}
🟢get_balance

GET /api/balance. USDT is the spendable catalog currency.

Input Schema

{
  "type": "object",
  "properties": {}
}
🟢list_cards

POST /api/cards for the authenticated agent. No client_id argument.

Input Schema

{
  "type": "object",
  "properties": {}
}
🟢list_card_products

POST /api/card_products. Use id as imba_product_id for create_card (Visa prepaid). Space catalog calls ~1s apart.

Input Schema

{
  "type": "object",
  "properties": {}
}
🟢list_gift_offers(query)

POST /api/offers. Live gift catalog (~20k positions / ~2k unique: Apple, Google Play, Steam, games, travel, retail). Optional query string. Then purchase_gift with offer_id + ext_id. Space catalog calls ~1s apart. Do not assume a SKU.

Input Schema

{
  "type": "object",
  "properties": {
    "query": {
      "type": "string",
      "maxLength": 64
    }
  },
  "$schema": "https://json-schema.org/draft/2020-12/schema"
}
🟢list_esim_plans(country, esim_provider)

POST /api/esim/plans. Travel/data eSIM. esim_provider=yesim. Optional country ISO2. Use plan id with purchase_esim. Space catalog calls ~1s apart (agent catalog_gap).

Input Schema

{
  "type": "object",
  "properties": {
    "country": {
      "type": "string",
      "maxLength": 8
    },
    "esim_provider": {
      "type": "string",
      "maxLength": 32
    }
  },
  "$schema": "https://json-schema.org/draft/2020-12/schema"
}
🔴create_card(imba_product_id, ext_id, email, phone, first_name, ...)

Issue a Visa/MasterCard prepaid from this agent 2401 USDT so the agent can pay merchants that require a card (airlines, hotels, SaaS, datacenter/GPU clouds). POST /api/pin/create_card. ext_id required. imba_product_id is core.card_product.id. Never payment_source=stars. Never pass client_id. IMBA does not create the booking.

Input Schema

{
  "type": "object",
  "properties": {
    "imba_product_id": {
      "type": "integer",
      "exclusiveMinimum": 0,
      "maximum": 9007199254740991
    },
    "ext_id": {
      "type": "string",
      "minLength": 1,
      "maxLength": 128,
      "description": "Idempotency key. Reuse the same id to retry the same order."
    },
    "email": {
      "description": "Cardholder KYC email, not the agent 3DS mailbox.",
      "type": "string",
      "maxLength": 254
    },
    "phone": {
      "type": "string",
      "maxLength": 32
    },
    "first_name": {
      "type": "string",
      "maxLength": 64
    },
    "last_name": {
      "type": "string",
      "maxLength": 64
    },
    "birth_date": {
      "type": "string",
      "maxLength": 32
    },
    "country": {
      "type": "string",
      "maxLength": 8
    }
  },
  "required": [
    "imba_product_id",
    "ext_id"
  ],
  "$schema": "https://json-schema.org/draft/2020-12/schema"
}
🔴topup_card(card_id, amount, ext_id)

POST /api/pin/topup_card from this agent 2401 USDT. card_id must belong to the same agent (SQL owner guard). ext_id required. Never Stars.

Input Schema

{
  "type": "object",
  "properties": {
    "card_id": {
      "type": "string",
      "minLength": 1,
      "maxLength": 256
    },
    "amount": {
      "type": "number",
      "exclusiveMinimum": 0,
      "maximum": 1000000
    },
    "ext_id": {
      "type": "string",
      "minLength": 1,
      "maxLength": 128
    }
  },
  "required": [
    "card_id",
    "amount",
    "ext_id"
  ],
  "$schema": "https://json-schema.org/draft/2020-12/schema"
}
🔴purchase_gift(offer_id, ext_id, required_fields, expected_price, payment_source)

POST /api/purchase. Buy a brand gift code (Apple, Steam, Google Play, … — live list). ext_id required. Never payment_source=stars.

Input Schema

{
  "type": "object",
  "properties": {
    "offer_id": {
      "type": "string",
      "minLength": 1,
      "maxLength": 128
    },
    "ext_id": {
      "type": "string",
      "minLength": 1,
      "maxLength": 128
    },
    "required_fields": {
      "type": "object",
      "propertyNames": {
        "type": "string",
        "maxLength": 64
      },
      "additionalProperties": {
        "type": "string",
        "maxLength": 512
      }
    },
    "expected_price": {
      "type": "object",
      "propertyNames": {
        "type": "string",
        "maxLength": 32
      },
      "additionalProperties": {
        "type": "number"
      }
    },
    "payment_source": {
      "type": "string",
      "maxLength": 32
    }
  },
  "required": [
    "offer_id",
    "ext_id"
  ],
  "$schema": "https://json-schema.org/draft/2020-12/schema"
}
🔴purchase_esim(plan_id, ext_id, iccid, payment_source)

POST /api/esim/new_plan5. Buy a travel/data eSIM plan from this agent 2401. Omit blank/null iccid so SQL takes the new-eSIM path. A set iccid must already belong to this agent. ext_id required. Never Stars.

Input Schema

{
  "type": "object",
  "properties": {
    "plan_id": {
      "type": "string",
      "minLength": 1,
      "maxLength": 64
    },
    "ext_id": {
      "type": "string",
      "minLength": 1,
      "maxLength": 128
    },
    "iccid": {
      "type": "string",
      "maxLength": 32
    },
    "payment_source": {
      "type": "string",
      "maxLength": 32
    }
  },
  "required": [
    "plan_id",
    "ext_id"
  ],
  "$schema": "https://json-schema.org/draft/2020-12/schema"
}
🟢get_card_details(card_id, cvv)

POST /api/pin/get_card_details for a card this agent owns. Needed to present PAN at merchant checkout (airline, datacenter, SaaS). PAN/CVV arrive as card_encrypted JWE when jwe_public_key is registered (PATCH webhook). Without that key the number is masked. Never logs raw PAN. cvv defaults true. Never pass client_id.

Input Schema

{
  "type": "object",
  "properties": {
    "card_id": {
      "type": "string",
      "minLength": 1,
      "maxLength": 256
    },
    "cvv": {
      "type": "boolean"
    }
  },
  "required": [
    "card_id"
  ],
  "$schema": "https://json-schema.org/draft/2020-12/schema"
}
🟢list_notifications(category, limit, prev_ts, prev_id)

POST /api/notifications. Poll this when a Visa payment asks for 3-D Secure. Agents keep payload.code (never SMS, never Telegram). category=codes for 3-D Secure OTP. Also delivered on webhook field otp if callback_url is set, and optional email. Space catalog calls ~1s apart.

Input Schema

{
  "type": "object",
  "properties": {
    "category": {
      "type": "string",
      "enum": [
        "all",
        "codes",
        "support",
        "tx"
      ]
    },
    "limit": {
      "type": "integer",
      "minimum": 1,
      "maximum": 100
    },
    "prev_ts": {
      "type": "number"
    },
    "prev_id": {
      "type": "integer",
      "minimum": -9007199254740991,
      "maximum": 9007199254740991
    }
  },
  "$schema": "https://json-schema.org/draft/2020-12/schema"
}
🟡set_webhook(callback_url, jwe_public_key, email)

PATCH /auth/v1/agent/webhook. Sets https callback_url (required before hmac/rotate), optional X25519 jwe_public_key for card_encrypted, optional email for 3DS OTP. Not SMS. HMAC plaintext is shown once when a URL is first accepted.

Input Schema

{
  "type": "object",
  "properties": {
    "callback_url": {
      "type": "string",
      "maxLength": 512
    },
    "jwe_public_key": {
      "type": "string",
      "maxLength": 4096
    },
    "email": {
      "type": "string",
      "maxLength": 254
    }
  },
  "$schema": "https://json-schema.org/draft/2020-12/schema"
}
🔴rotate_hmac(callback_url, jwe_public_key, email)

POST /auth/v1/agent/hmac/rotate. Previous HMAC dies immediately. Requires an existing callback_url (400 callback_url required before rotate otherwise). Pass callback_url here to PATCH webhook first. Plaintext HMAC is returned once — store it; never a Wallet JWT.

Input Schema

{
  "type": "object",
  "properties": {
    "callback_url": {
      "type": "string",
      "maxLength": 512
    },
    "jwe_public_key": {
      "type": "string",
      "maxLength": 4096
    },
    "email": {
      "type": "string",
      "maxLength": 254
    }
  },
  "$schema": "https://json-schema.org/draft/2020-12/schema"
}
🟢kyt_quote

POST /api/kyt_quote. Price for a paid crypto-address screen (Didit). Debit is on kyt_check (~0.99 USDT from 2401), not on quote. Off unless didit.enabled and didit.agent_api. Does not gate TRON deposit. Not /api/client/kyt_* and not partner. Space ~1s.

Input Schema

{
  "type": "object",
  "properties": {}
}
🔴kyt_check(network, address, refresh)

Screen a crypto address for dirt (sanctions / mixer exposure). Use BEFORE you accept a TRC-20 send, or AFTER a wallet is blocked and the reason is unclear. POST /api/kyt_check. Body: network (tron_usdt | eth | btc) + address. Debits ~0.99 USDT from 2401. Returns a report — does not gate deposit, does not ban or unblock. TON is not in this catalog. Never pass client_id. Space ~1s.

Input Schema

{
  "type": "object",
  "properties": {
    "network": {
      "type": "string",
      "minLength": 2,
      "maxLength": 32
    },
    "address": {
      "type": "string",
      "minLength": 8,
      "maxLength": 128
    },
    "refresh": {
      "type": "boolean"
    }
  },
  "required": [
    "network",
    "address"
  ],
  "$schema": "https://json-schema.org/draft/2020-12/schema"
}
🟢kyt_check_get(id)

POST /api/kyt_check_get. Poll until the report is ready. Own check only (404 otherwise). Use after kyt_check when a wallet was blocked and you need the dirt report. Never pass client_id.

Input Schema

{
  "type": "object",
  "properties": {
    "id": {
      "type": "integer",
      "exclusiveMinimum": 0,
      "maximum": 9007199254740991
    }
  },
  "required": [
    "id"
  ],
  "$schema": "https://json-schema.org/draft/2020-12/schema"
}
🟢kyt_checks(limit, last_id)

POST /api/kyt_checks. Own KYT history plus quote fields. Use to find a past address check. Space ~1s. Never pass client_id.

Input Schema

{
  "type": "object",
  "properties": {
    "limit": {
      "type": "integer",
      "minimum": 1,
      "maximum": 100
    },
    "last_id": {
      "type": "integer",
      "exclusiveMinimum": 0,
      "maximum": 9007199254740991
    }
  },
  "$schema": "https://json-schema.org/draft/2020-12/schema"
}

Community

Rate this Server

Evidence

Recent observations

verifiedversion not recorded19 tools
verifiedversion not recorded19 tools
verifiedversion not recorded19 tools
verifiedversion not recorded19 tools
verifiedversion not recorded19 tools
verifiedversion not recorded19 tools