Lumi Trades: x402 seller checks and test-buys

lumi-trades-mcp

MCP server (stdio) for [Lumi Trades](https://lumitrades.io): Lumi Check, a free signed allow/warn/block check before your agent pays an x402 seller, backed by Lumi's own paid test-buys on XRPL, Base and Stellar: x402 seller trust you can verify. Works with Claude Desktop, Cursor, Claude Code, Cline, Windsurf and any other MCP client. Paid tools pay per call via x402 with your own wallet: USDC on Base (gasless) or XRP / RLUSD / USDC on the XRP Ledger (the API also accepts USDC on Stellar; this package pays only on Base or the XRP Ledger). No API key, no account: each paid tool call is one small payment, signed locally on your machine.

Automated observations by Lumi, not a rating, endorsement or guarantee.

Changed in 0.9.9: this package is now only about checking x402 sellers. Tools for API routes retired on Oct 25, 2026 were removed;

those routes answer 410 Gone and are never charged. Use lumi_check / /v1/check to check a seller before paying.

zod is now required at the patched range (GHSA-mrhx-c7xc-m3w5) for every dependency.

No install needed to browse: the same tools are also served remotely at https://api.lumitrades.io/mcp (Streamable HTTP), for clients that take a remote MCP server URL. A remote connector has no wallet, so its paid tools return the price and how to pay; use this package when you want paid tools to pay automatically from your own wallet.

Tools

General (free)

Lumi Trades seller checks (x402)

How to pay, in order of preference: 1. USDC on Base (gasless, EVM_PRIVATE_KEY), 2. the XRP Ledger (XRPL_SEED): RLUSD or USDC at the same USD price, or XRP at the live XRP/USD rate (quoted per call, rounded up to 0.0001 XRP). Prices are read live from each 402 quote; the table is for orientation. You only pay when you get an answer: the API checks your input before quoting (4xx, nothing charged) and answers 503 "Not charged." when it cannot answer, so a payment is never settled without an answer.

Install

Requires Node 20+. Published on npm as lumi-trades-mcp and in the official MCP Registry as io.github.cypher-osiris/lumi-trades-mcp.

npx -y lumi-trades-mcp

Claude Desktop / Cursor / any MCP client (mcpServers JSON)

{

"mcpServers": { "lumi-trades": { "command": "npx", "args": ["-y", "lumi-trades-mcp"], "env": { "EVM_PRIVATE_KEY": "0x...your Base agent wallet key (holds USDC, no ETH needed)...", "LUMI_MAX_USD_PER_CALL": "0.30", "LUMI_SESSION_BUDGET": "1" } } } }

Paying on the XRP Ledger instead: set "XRPL_SEED": "sEd..." (and optionally "LUMI_PAY_ASSET": "RLUSD" or "USDC", default XRP) in place of EVM_PRIVATE_KEY.

From a clone instead: "command": "node", "args": ["/absolute/path/to/lumi-api/mcp/src/index.js"] (after npm install in mcp/). Claude Code: claude mcp add lumi-trades -e EVM_PRIVATE_KEY=0x... -- npx -y lumi-trades-mcp (or -e XRPL_SEED=sEd...).

Without a wallet the free tools work and paid tools return the price quote instead of paying.

Lumi Check from your own code (x402 / MCP hooks)

import { lumiCheckHooks } from "lumi-trades-mcp/src/check.js";

const { lumi, x402Hook, mcpHook } = await lumiCheckHooks(); // options: { failMode: "open"|"closed", timeoutMs, publicKeys }

x402Client.onBeforePaymentCreation(x402Hook); // @x402 core: returns { abort: true, reason } on "block" mcpClient.onPaymentRequired(mcpHook); // @x402/mcp: returns { abort: true } on "block" (checked by payTo) const v = await lumi.check({ url, payTo, amountUsd: 0.01 }); // { decision, reasons, score, link, verified }

Defaults: fail-open (a timeout or an unverifiable answer gives warn, payment goes ahead) and a 2.5 s timeout. Set failMode: "closed" to block instead. Paying Lumi never changes any seller's score, tier, ranking or badge. The adapters come from lumi-check on npm (Apache-2.0); scoring and verification stay on Lumi's servers.

What the kit shares: nothing until the user says yes. The lumi-scan CLI asks once, after the first check ("Share your results to help improve Lumi's public trust list? [Y/n]"). The MCP server cannot ask, so here sharing stays off and one hint is written to stderr; turn it on with LUMI_CHECK_TELEMETRY=on or lumi-scan telemetry on. Tier 1 is only an anonymous delivery outcome after a paid call: seller host, delivered yes/no, a coarse status class and a random one-time token. No wallet, amount, tx hash, query string or stable ID. Sharing never changes any score. Tier 2 (off by default) sends full signed receipts. Each receipt shares the payment's chain and transaction ID (no amount or wallet field); a transaction ID is public on-chain and can be linked to the paying wallet. Contributors get a public badge only, nothing of monetary value. See the kit README.

Configuration (environment)

Safety: before signing, the server checks network, scheme, asset, payee, per-call cap and session budget. Anything off and it does not sign. Every paid result carries the on-chain transaction hash.

Tests

npm test                         # spend-cap / payee / settings unit tests + a mocked Base USDC payment through @x402/fetch

node scripts-e2e-testnet.mjs # testnet only: real x402 payments through MCP against a local testnet API (see the file header)

License

MIT