Marketplace

io.github.vdappdev2Published by GitHub account vdappdev2v0.1.7Updated Oct 24, 2026

MCP server for Verus on-chain marketplace — create, browse, accept, and close offers

VerifiedSTDIODesktop onlyFinanceBusiness & Commerce

Overview

AI-generated overview

A local MCP server for the Verus blockchain marketplace that lets an assistant create, browse, accept and close on-chain offers and trades.

What you can do
Create on-chain marketplace offers for currencies, IDs or trades through the Verus daemon RPC interface, with a chain parameter required on every call (for example VRSC or vrsctest). Browse existing offers and inspect their terms before acting on them. Accept or close offers, which are write operations that move funds or assets on chain. Operate alongside the other VerusIDX servers, which share a chain registry written by the foundation chain server.
When to use it
Use it when you already run a Verus daemon and want an AI assistant to work with the on-chain marketplace: listing offers, reviewing them, or accepting and closing trades. It is not useful without a local Verus node and the foundation chain server installed first.
Requirements
Runs locally over stdio as the npm package @verusidx/marketplace-mcp, fetched on demand with npx, so Node.js 18 or newer is needed. A running Verus daemon with its own .conf credentials is required, and the foundation chain server must be installed first because it discovers daemons and writes the chain registry the other servers read. Every tool call needs an explicit chain name.
Before you install
Accepting or closing offers writes to the blockchain and can move real funds; the README warns that giving an agent wallet access has real consequences. Spending limits apply to this server, defaulting to 10 VRSC per transaction, and can be adjusted in spending-limits.json. Read-only mode can be enabled with VERUSIDX_READ_ONLY so write tools are not registered at all. Write operations are logged to append-only audit files unless disabled.

Installation

In SourceWeft

  1. Open Marketplace in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

VerusIDX MCP Servers

[npm] [npm] [npm] [npm] [npm] [npm] [npm] [License: MIT]

7 MCP servers giving AI agents direct, local access to the Verus blockchain — 49 tools, zero cloud dependencies. No API keys. No accounts. No intermediary between the agent and the chain.

Works with Claude Code, Cursor, and any MCP-compatible client.

What Can an Agent Do?

  • Identity — create, update, revoke, and recover VerusIDs (protocol-level blockchain identities with on-chain data storage)
  • Data — store, retrieve, and decrypt on-chain data; sign and verify with SHA-256, Blake2b, Keccak-256, or Merkle Mountain Range proofs; share decryption access via viewing keys
  • Send & convert — move currency, convert through fractional baskets, cross-chain transfers via PBaaS bridges
  • Create currencies — define tokens, fractional reserve baskets, centralized currencies, ERC-20 mapped tokens
  • Trade — on-chain atomic swaps for currency-for-currency, currency-for-ID, or ID-for-ID
  • Privacy — shielded transactions via Sapling zero-knowledge proofs

Quick Start

Prerequisites: a running Verus daemon and Node.js 18+.

Add the foundation server to your MCP client config:

json
{  "mcpServers": {    "verusidx-chain": {      "command": "npx",      "args": ["-y", "@verusidx/chain-mcp"]    }  }}

Then tell your AI to call refresh_chains — it discovers your local daemons automatically. That's it.

No separate install step — npx fetches and runs the package on demand. Add more servers as you need them (see below).

Servers

PackageToolsPurpose
@verusidx/chain-mcp11Foundation — chain discovery, daemon management, health checks, currency lookup, raw transactions, RPC help
@verusidx/identity-mcp11Create, manage, and query VerusIDs
@verusidx/send-mcp8Send, convert, and transfer currency; check balances and conversions
@verusidx/data-mcp7Retrieve, decrypt, sign, and verify on-chain data; manage viewing keys
@verusidx/address-mcp6Generate, validate, and list transparent and shielded addresses
@verusidx/marketplace-mcp5On-chain offers and trades
@verusidx/definecurrency-mcp1Define and launch new currencies

chain-mcp is the foundation. It discovers running daemons and writes a registry file that all other servers read. Install it first. Every tool requires a chain parameter (e.g., "VRSC", "vrsctest") — there is no default chain.

Adding More Servers

Each server is independent — add or remove without affecting the others:

json
{  "mcpServers": {    "verusidx-chain": {      "command": "npx",      "args": ["-y", "@verusidx/chain-mcp"]    },    "verusidx-identity": {      "command": "npx",      "args": ["-y", "@verusidx/identity-mcp"]    },    "verusidx-send": {      "command": "npx",      "args": ["-y", "@verusidx/send-mcp"]    },    "verusidx-data": {      "command": "npx",      "args": ["-y", "@verusidx/data-mcp"]    }  }}

Same pattern for @verusidx/address-mcp, @verusidx/marketplace-mcp, and @verusidx/definecurrency-mcp. See each package's README for details.

Safety

Giving an AI agent access to a wallet has real consequences. These servers are designed with that in mind.

FeatureHow it works
Read-only modeSet VERUSIDX_READ_ONLY=true per-server — write tools aren't just disabled, they're not registered. The AI can't see or attempt them.
Spending limitsPer-currency caps in spending-limits.json, enforced before the RPC call reaches the daemon. Default: 10 VRSC per transaction.
Audit loggingEvery write operation logged to date-stamped, append-only JSONL files with 0600 permissions.
No new attack surfaceCredentials read from the daemon's own .conf file. No cloud storage. No env vars with passwords.
Minimal dependenciesShared library has zero runtime deps. MCP servers depend on exactly 2 packages: @modelcontextprotocol/sdk and zod.

Architecture

AI Client (Claude Code, Cursor, etc.)    |    |  stdio (local process, no network)    vverusidx MCP servers (7 servers, 49 tools)    |    |  JSON-RPC over localhost    vverusd (your local Verus daemon)
  • Shared library (@verusidx/shared) — registry reader, RPC client with credential caching, error normalization, audit logging, spending limits, read-only guard. Zero runtime dependencies.
  • Chain registry — chains.json written atomically by chain-mcp, read by all other servers via stat()-based cache invalidation.
  • Each server runs as a separate process via stdio transport. No shared memory between servers.

Configuration

Environment variables you can set (optional):

VariableApplies toDescription
VERUSIDX_READ_ONLYAll serverstrue to disable write tools. Set per-server for fine-grained control.
VERUSIDX_AUDIT_LOGAll serversfalse to disable audit logging (default: enabled)
VERUSIDX_AUDIT_DIRAll serversCustom audit log directory
VERUSIDX_SPENDING_LIMITS_PATHAll serversCustom path to spending-limits.json
VERUSIDX_DATA_DIRchain-mcpOverride the chain data directory for discovery
VERUSIDX_EXTRA_CHAINSchain-mcpAdd remote daemons. Format: name:host:port:user:pass, comma-separated
VERUSIDX_BIN_PATHchain-mcpDirectory containing the verusd binary (if not on PATH)

Spending Limits

Servers that send funds (send-mcp, marketplace-mcp) enforce per-currency spending limits. A default spending-limits.json is created automatically on first run:

json
{  "VRSC": 10}

This caps any single sendcurrency call at 10 VRSC. To adjust limits, edit the file at:

  • macOS: ~/Library/Application Support/verusidx-mcp/spending-limits.json
  • Linux: ~/.config/verusidx-mcp/spending-limits.json
  • Windows: %APPDATA%\verusidx-mcp\spending-limits.json

Add entries for any currency: { "VRSC": 100, "Bridge.vETH": 0.5 }. Currency names are case-insensitive.

Development

bash
# Prerequisites: Node.js >= 18, pnpmpnpm installpnpm -r build              # build all packagespnpm -r test               # test all packages
# Build a specific server and its dependenciespnpm --filter @verusidx/chain-mcp... build

Project Structure

verusidx-mcp/├── packages/│   ├── shared/          # @verusidx/shared — internal library│   ├── chain/           # @verusidx/chain-mcp — foundation server│   ├── identity/        # @verusidx/identity-mcp│   ├── send/            # @verusidx/send-mcp│   ├── data/            # @verusidx/data-mcp│   ├── definecurrency/  # @verusidx/definecurrency-mcp│   ├── marketplace/     # @verusidx/marketplace-mcp│   └── address/         # @verusidx/address-mcp└── tool-specs/          # Agent-facing tool description specs

Supply Chain Security

  • Zero runtime dependencies in the shared library (Node built-ins + built-in fetch)
  • MCP servers depend only on @modelcontextprotocol/sdk and zod
  • onlyBuiltDependencies: [] blocks dependency install scripts
  • All credentials read from daemon .conf files — never stored by the MCP servers

About Verus

Verus is an open-source, fair-launch blockchain — no ICO, no premine, no VC funding. Running since 2018 with hybrid PoW/PoS consensus and a CPU-mineable hash algorithm (VerusHash 2.2).

There are no smart contracts. Identity, data storage, DeFi conversions, atomic swaps, privacy (Sapling zk-proofs), and cross-chain bridges (PBaaS) are all consensus-level protocol features. For AI agents that need to transact reliably, protocol-level guarantees beat contract-level ones.

License

MIT

Source: README.md at commit 239375b

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

1
  1. v0.1.7LatestSep 16, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts