IMBA Agent Spend

com.imbawallet由 imbawallet.com 发布官方发布者v0.1.4更新于 Oct 26, 2026

IMBA spend MCP: USDT TRC-20 deposit and catalog buy with your key. No withdraw.

已验证Streamable HTTP可网页运行金融安全与监控商业与电商

概览

AI 生成的概览

IMBA Agent Spend 让助手为代理充值 USDT TRC-20 余额，并用于购买预付卡、礼品码、eSIM 套餐和地址筛查。

可以做什么
  • 查询消费政策、充值地址和已认证代理的 USDT 余额
  • 列出预付卡产品、代理名下卡片、礼品卡商品和旅行 eSIM 套餐
  • 开卡与充值 Visa/MasterCard 预付卡，购买礼品码和 eSIM 套餐
  • 获取卡片详情，注册公钥后以加密 JWE 形式返回卡号与 CVV
  • 轮询通知获取 3-D Secure 验证码，设置回调地址或轮换 HMAC 密钥
  • 对加密地址进行 KYT 报价、检测并查看历史报告
适用场景
适用于代理需要向只接受银行卡的商户付款，或用 USDT 余额购买礼品码和旅行 eSIM 套餐的场景；也适合在接受 TRON、ETH 或 BTC 转账前对地址做制裁或混币筛查。
运行要求
可作为远程端点使用，也可通过 npm 包以 stdio 本地运行。需要代理 client_id 与 Ed25519 私钥，通过 IMBA_AGENT_CLIENT_ID 和 IMBA_AGENT_PRIVATE_KEY 环境变量，或 X-IMBA-Agent-Client-Id 与 X-IMBA-Agent-Private-Key 请求头提供。消费需已充值的 USDT TRC-20 地址；Webhook 与 HMAC 轮换需一个 HTTPS 回调地址。
安装前请注意
私钥即消费凭证，持有者可动用代理资金。开卡、充值、购买和 KYT 检测都会从代理余额扣除真实 USDT，KYT 检测约扣 0.99 USDT。卡片详情可能暴露卡号与 CVV。HMAC 明文仅显示一次，轮换后旧密钥立即失效。没有提现功能，充值地址应每次重新获取而非缓存。

安装

在 SourceWeft 中

  1. 打开 控制台中的 IMBA Agent Spend，将其添加到工作区。
  2. 连接 Custom headers 凭据。它们会被私密存储，绝不会在公开页面上展示。
  3. 为需要使用其工具的对话启用该服务。

Web executable，通过 Streamable HTTP。 远程服务在工作区中配置后即可从网页运行时运行。

交给智能体安装

把这段提示词粘贴到 Claude Code、Codex、Cursor 等智能体，或 SourceWeft 对话中。智能体会读取该服务器的安装指南，先向你展示发布者、端点和登录方式，经你同意后再把它添加到你的客户端。密钥不会写进任何命令。

阅读 https://sourceweft.com/mcp/com.imbawallet%2Fagent/install.md，并按其中说明把这个 MCP 服务器接入我的客户端。修改任何配置之前，先告诉我它的发布者、端点和登录方式，等我确认。不要把 API 密钥写进命令或我会提交的文件；问我密钥应从哪里获取。

查看智能体所依据的安装指南

其他 MCP 客户端

把它添加到你客户端的 mcpServers 配置中。

{
  "mcpServers": {
    "imba-agent-spend": {
      "type": "http",
      "url": "https://imbawallet.com/mcp/spend",
      "headers": {
        "X-IMBA-Agent-Client-Id": "<VALUE>",
        "X-IMBA-Agent-Private-Key": "<VALUE>"
      }
    }
  }
}

README

该仓库没有 README。

工具

19

get_spend_policy

Spend policy

Forbidden rails and tier rules. Allowed catalog: Visa prepaid, travel eSIM, gift cards, paid KYT address screen. Read-only.

无需输入参数。

get_deposit_address

USDT TRC-20 deposit address

POST /api/deposit_address blockchain=tron. Address is issued for the authenticated agent only. Always re-fetch before send. Do not cache. USDT TRC-20 only. 24h unfunded hold.

无需输入参数。

get_balance

Ledger 2401 balance

GET /api/balance. USDT is the spendable catalog currency.

无需输入参数。

list_cards

List cards

POST /api/cards for the authenticated agent. No client_id argument.

无需输入参数。

list_card_products

List card products

POST /api/card_products. Use id as imba_product_id for create_card (Visa prepaid). Space catalog calls ~1s apart.

无需输入参数。

list_gift_offers

List gift offers

POST /api/offers. Live gift catalog (~20k positions / ~2k unique: Apple, Google Play, Steam, games, travel, retail). Optional query string. Then purchase_gift with offer_id + ext_id. Space catalog calls ~1s apart. Do not assume a SKU.

输入参数query

list_esim_plans

List eSIM plans

POST /api/esim/plans. Travel/data eSIM. esim_provider=yesim. Optional country ISO2. Use plan id with purchase_esim. Space catalog calls ~1s apart (agent catalog_gap).

输入参数countryesim_provider

create_card

Buy a virtual card

Issue a Visa/MasterCard prepaid from this agent 2401 USDT so the agent can pay merchants that require a card (airlines, hotels, SaaS, datacenter/GPU clouds). POST /api/pin/create_card. ext_id required. imba_product_id is core.card_product.id. Never payment_source=stars. Never pass client_id. IMBA does not create the booking.

输入参数emailphoneext_id必填countrylast_namebirth_datefirst_nameimba_product_id必填

topup_card

Top up a card

POST /api/pin/topup_card from this agent 2401 USDT. card_id must belong to the same agent (SQL owner guard). ext_id required. Never Stars.

输入参数amount必填ext_id必填card_id必填

purchase_gift

Buy a gift card

POST /api/purchase. Buy a brand gift code (Apple, Steam, Google Play, … — live list). ext_id required. Never payment_source=stars.

输入参数ext_id必填offer_id必填expected_pricepayment_sourcerequired_fields

purchase_esim

Buy an eSIM plan

POST /api/esim/new_plan5. Buy a travel/data eSIM plan from this agent 2401. Omit blank/null iccid so SQL takes the new-eSIM path. A set iccid must already belong to this agent. ext_id required. Never Stars.

输入参数iccidext_id必填plan_id必填payment_source

get_card_details

Card payment credentials

POST /api/pin/get_card_details for a card this agent owns. Needed to present PAN at merchant checkout (airline, datacenter, SaaS). PAN/CVV arrive as card_encrypted JWE when jwe_public_key is registered (PATCH webhook). Without that key the number is masked. Never logs raw PAN. cvv defaults true. Never pass client_id.

输入参数cvvcard_id必填

list_notifications

Inbox and 3DS OTP

POST /api/notifications. Poll this when a Visa payment asks for 3-D Secure. Agents keep payload.code (never SMS, never Telegram). category=codes for 3-D Secure OTP. Also delivered on webhook field otp if callback_url is set, and optional email. Space catalog calls ~1s apart.

输入参数limitprev_idprev_tscategory

set_webhook

Set callback URL / JWE / OTP email

PATCH /auth/v1/agent/webhook. Sets https callback_url (required before hmac/rotate), optional X25519 jwe_public_key for card_encrypted, optional email for 3DS OTP. Not SMS. HMAC plaintext is shown once when a URL is first accepted.

输入参数emailcallback_urljwe_public_key

rotate_hmac

Rotate webhook HMAC

POST /auth/v1/agent/hmac/rotate. Previous HMAC dies immediately. Requires an existing callback_url (400 callback_url required before rotate otherwise). Pass callback_url here to PATCH webhook first. Plaintext HMAC is returned once — store it; never a Wallet JWT.

输入参数emailcallback_urljwe_public_key

kyt_quote

KYT price

POST /api/kyt_quote. Price for a paid crypto-address screen (Didit). Debit is on kyt_check (~0.99 USDT from 2401), not on quote. Off unless didit.enabled and didit.agent_api. Does not gate TRON deposit. Not /api/client/kyt_* and not partner. Space ~1s.

无需输入参数。

kyt_check

Paid KYT check

Screen a crypto address for dirt (sanctions / mixer exposure). Use BEFORE you accept a TRC-20 send, or AFTER a wallet is blocked and the reason is unclear. POST /api/kyt_check. Body: network (tron_usdt | eth | btc) + address. Debits ~0.99 USDT from 2401. Returns a report — does not gate deposit, does not ban or unblock. TON is not in this catalog. Never pass client_id. Space ~1s.

输入参数address必填network必填refresh

kyt_check_get

KYT check by id

POST /api/kyt_check_get. Poll until the report is ready. Own check only (404 otherwise). Use after kyt_check when a wallet was blocked and you need the dirt report. Never pass client_id.

输入参数id必填

kyt_checks

KYT history

POST /api/kyt_checks. Own KYT history plus quote fields. Use to find a past address check. Space ~1s. Never pass client_id.

输入参数limitlast_id

版本历史

1
  1. v0.1.4最新Sep 16, 2026

评分

已满足适用检查项的 75%

该评分衡量此收录条目的完整程度，依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价，也不表示服务器安全或当前可用：可连通性是带日期的检查结果，评分也不包含安装量或用户评价。

  • 近 30 天内可连通必需25 分
  • 已声明认证方式必需10 分
  • 已列出工具必需15 分
  • 描述必需15 分
  • 图标10 分
  • 文档15 分

    请声明包含 README 的 GitHub 仓库，或在 OAuth 受保护资源元数据中提供 resource_documentation。

  • 许可证10 分

    请在仓库或注册中心条目中声明许可证。

其他 Imbawallet 集成

IMBA Agent Docs

com.imbawallet官方发布者

IMBA Agent API 的只读文档服务器，为助手提供规范事实、用例手册、等级政策与公开文档链接。

Streamable HTTP可网页运行
金融6 个工具Oct 28, 2026