Assay: settlement verification

io.fomoxPublished by fomox.ioOfficial publisherv1.0.0Updated Oct 24, 2026

Verify crypto payments really settled and how much arrived. 20 chains. Read only, no API key.

VerifiedStreamable HTTPWeb executableFinanceSecurity & Monitoring

Overview

AI-generated overview

A remote MCP server that lets an assistant verify whether a crypto payment actually settled and how much was really delivered, across 20 chains.

What you can do
Verify incoming crypto payments, comparing delivered amount against the claimed amount and flagging mismatches before crediting anyone. List supported chains with their required confirmation depth and verification limits. List known failure modes where a payment looks successful but is worth less than claimed. Evaluate a proposed spend against external spending limits and get a signed allow or deny. Practise on adversarial sandbox cases and score whether a credit decision was correct.
When to use it
Useful when an assistant handles or reviews incoming crypto payments and needs to confirm real settlement before crediting a user, or when writing and reviewing code that credits accounts for incoming crypto.
Requirements
A remote endpoint at fomox.io over streamable HTTP. No API key or authentication is declared, and no environment variables or headers are needed.
Before you install
The server deals with crypto payment verification and spend policy, so decisions based on its output can affect real funds; verify results before crediting or transferring. It is described as read-only, but evaluate_spend_policy returns allow or deny decisions that gate transfers, so treat those as advisory. Sandbox cases are practice only and involve no money.

Installation

In SourceWeft

  1. Open Assay: settlement verification in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.fomox%2Fassay/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "assay-settlement-verification": {
      "type": "http",
      "url": "https://fomox.io/api/assay/mcp"
    }
  }
}

Tools

6

verify_payment

Check whether a crypto payment really settled and how much was ACTUALLY delivered, which is often not the amount the transaction claims. Use this before crediting anyone for an incoming payment. Returns `delivered` (what truly moved), `claimed` (what the transaction says), `mismatch` (true when they disagree), and `warnings` naming the specific trap with a remedy. `ok` is true ONLY when the payment is final and meets everything you asserted in `expect`; anything uncertain returns ok:false, so it is safe to gate a credit on `ok`. Chains: xrp, hedera, algorand, solana, ethereum, base, arbitrum, optimism, polygon, bnb, avalanche, linea, scroll, zksync, blast, mantle, celo, gnosis, bitcoin, litecoin. Pass `expect` whenever you can. Without it this reports what happened; with it, it tells you whether to pay. Read only: this never moves funds and never holds keys.

ParametersrefrequiredchainexpectrpcUrl

list_chains

List every chain this service can verify, with the confirmation depth each needs before a payment is treated as final, and how deeply it can be verified. Call this if you are unsure whether a chain is supported or what to pass as `chain`.

Takes no parameters.

list_failure_modes

List every known way a blockchain payment can appear successful while being worth less than it claims, or nothing at all. Each entry explains what the chain does, what it costs you when you get it wrong, and the one-line fix. Useful when writing or reviewing code that credits users for incoming crypto payments. Every chain has its own dialect but they are all the same few lies, and the mitigation is always the same: never trust the stated amount, reconstruct what actually moved.

Parametersfamily

evaluate_spend_policy

Check a proposed payment against spending limits that live OUTSIDE your context, where no instruction in a prompt, a message or a web page can change them. Returns a signed allow or deny with reasons. Use this before executing any transfer on behalf of a user. It enforces velocity caps, per-action ceilings, recipient allowlists and asset allowlists. Because the rules are held server side and signed, an attacker who takes over your reasoning still cannot raise your limits. IMPORTANT: this is ADVISORY. Assay holds no keys and cannot stop a transaction. Verify the signature and enforce the decision wherever you sign. Create a policy first with the /v1/policy endpoint.

ParametersactionrequiredcommitpolicyIdrequiredpolicySecretrequired

run_sandbox_case

Practise on a payment designed to deceive you, with no money at risk. Returns a verification result shaped exactly like a real one for one of 19 adversarial cases. Decide whether you would credit it, then call check_sandbox_answer to find out whether you were right and what the mistake would have cost. Use this to test any agent or integration that handles incoming crypto payments BEFORE it handles real money.

ParameterscaseId

check_sandbox_answer

Score your decision on a sandbox case. Tell it whether you would have credited the payment and for how much, and it replies with whether that was correct and, if not, exactly what the error would have cost you in real units. This is the fastest way to find out whether your payment handling is actually safe.

ParametersamountcaseIdrequiredcreditrequired

Version history

1
  1. v1.0.0LatestSep 26, 2026

Score

83% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts

    Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.

  • LicenseNot applicable

    A hosted service is used under its provider's terms, so no license is expected here. This check is left out of the percentage.