CrossingKey MCP

com.crossingkeyintelligence由 crossingkeyintelligence.com 發布官方發布者v3.0.1更新於 Nov 1, 2026

Agent-native MCP for governed commerce, x402 payments, paid capabilities, and verifiable receipts.

已驗證Streamable HTTP可網頁執行金融開發者工具商業與電商

概覽

AI 產生的概覽

遠端 MCP，提供受治理的機器商務市集：免費探索與報價，以及以 Base 上 USDC 結算的付費 x402 稽核與驗證工具。

可以做什麼
  • 探索服務提供者、市集政策、方案、能力與目錄，支援篩選搜尋與分頁瀏覽
  • 檢查需求、估算成本、預覽結果形態，並執行在付款前停止的執行預檢
  • 取得付款報價，包含總價、費用拆分與 x402 付款要求
  • 提交服務提供者與創作者申請，讀取公開的服務提供者與能力中繼資料
  • 執行付費稽核與工具：x402 相容性、MCP schema、OpenAPI 品質、機器商務就緒度、上線與購買路徑稽核、成品完整性清單、雜湊、密鑰與個人資料掃描、JSON 修復、提示詞評分與 XKEY 驗證
適用情境
適合需要讓助理瀏覽付費能力市集、在承諾前比較價格與要求，或對 MCP 端點、OpenAPI 文件、x402 付款路徑與文字成品執行固定價格稽核的情境。
執行需求
需要遠端 Streamable HTTP 端點；未宣告本機套件、帳號或 API 金鑰。付費工具透過 x402 以 Base 主網 USDC 計價，使用這些工具需要買方付款途徑與人工授權。需要能連線該公開端點。
安裝前請注意
有 13 個付費工具，價格從 0.01 到 19.00 USDC（Base）；呼叫只回傳付款挑戰而不直接扣款，但完成付款會實際花費資金。服務提供者與創作者申請工具是公開寫入介面。掃描為啟發式、並不全面，JSON 修復可能回傳所提供的內容。不要傳送私鑰、助記詞或機密；賣方錢包為僅接收，代理不具簽章權限。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 CrossingKey MCP，將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Web executable，透過 Streamable HTTP。 遠端服務在工作區中設定後即可從網頁執行環境執行。

交給代理程式安裝

把這段提示詞貼上到 Claude Code、Codex、Cursor 等代理程式，或 SourceWeft 對話中。代理程式會讀取該伺服器的安裝指南，先向你展示發布者、端點和登入方式，經你同意後再把它新增到你的客戶端。金鑰不會寫進任何命令。

閱讀 https://sourceweft.com/mcp/com.crossingkeyintelligence%2Fcrossingkey-mcp/install.md，並按其中說明把這個 MCP 伺服器接入我的客戶端。修改任何設定之前，先告訴我它的發布者、端點和登入方式，等我確認。不要把 API 金鑰寫進命令或我會提交的檔案；問我金鑰應從哪裡取得。

檢視代理程式所依據的安裝指南

其他 MCP 客戶端

把它新增到你客戶端的 mcpServers 設定中。

{
  "mcpServers": {
    "crossingkey": {
      "type": "http",
      "url": "https://mcp.crossingkeyintelligence.com/mcp"
    }
  }
}

README

CrossingKey MCP

Agent-native MCP for governed commerce, x402 payments, paid capabilities, and verifiable receipts.

Production

Endpoint

https://mcp.crossingkeyintelligence.com/mcp

Canonical identity

com.crossingkeyintelligence/crossingkey-mcp

Stable source target

5.0.1 — the exact dependency-hardening source being prepared for promotion.

Current public runtime before host cutover

5.0.0 — the current public runtime before the v5.0.1 host cutover.

Promotion state

The source is being prepared as patch release 5.0.1. The host-side restart and GitHub release/tag are performed only after the running process is verified against this exact source.

Public verification

  • Cloudflare Tunnel crossingkey-mcp is healthy.
  • mcp.crossingkeyintelligence.com routes to the V5 origin on 127.0.0.1:3401.
  • Public discovery reports V5, Streamable HTTP, and Base mainnet eip155:8453.
  • No live payment or Base settlement is implied by discovery metadata alone.

This repository is the source of truth for the v5.0.1 candidate. Runtime deployment and release tagging are tracked separately.

Public documentation

Transport

MCP Streamable HTTP

CrossingKey MCP v5.0.1

CrossingKey MCP is a governed machine-commerce interface for AI agents and authorized software clients.

The stable source preserves the existing anonymous MCP surface and adds the two authorized v4 paid audits. The exact live/public tool count remains a deployment-time verification item.

  • 7 free discovery and commercial-navigation tools
  • 8 public marketplace tools
  • 13 direct x402 paid tools plus a separately named legacy credit-redemption compatibility tool for existing customers

Authenticated sessions additionally expose verification and role-gated marketplace operations.

The operating principle is:

Discovery is free. Evaluation is safe. Payment is explicit. Authority stays bounded. Execution is deterministic. Fulfillment is verifiable.

Free discovery

These seven tools can be used anonymously to understand the provider, available offers, requirements, price, expected result, authorization state, and prepaid-credit options without spending money:

  • provider.describe
  • offers.list
  • requirements.check
  • cost.estimate
  • result.preview
  • execution.preflight
  • credits.options (legacy compatibility status; new credit sales are disabled)

The normal discovery sequence is:

text
provider.describe→ offers.list→ requirements.check→ cost.estimate→ result.preview→ execution.preflight→ credits.options (legacy compatibility status; new credit sales are disabled)

A valid commercial flow may reach:

text
READY_FOR_HUMAN_AUTHORIZATION

and then stop at:

text
STOPPED_BEFORE_PAYMENT

until the required buyer authorization and payment conditions are satisfied.

Public marketplace discovery

The preserved anonymous marketplace surface also exposes:

  • marketplace.describe
  • provider.register
  • provider.get
  • capability.get
  • capability.search
  • catalog.list
  • commerce.quote
  • creator.apply

Discovery, catalog browsing, capability inspection, and quoting do not themselves authorize paid execution.

provider.register and creator.apply are public write surfaces for application and intake workflows. They do not grant unrestricted commercial authority.

Paid and gated execution

These 13 tools perform valuable computation, validation, or artifact generation and use direct x402 payment:

  • x402.compatibility_audit
  • mcp.schema_audit
  • openapi.quality_audit
  • machine_commerce.readiness_audit
  • artifact.integrity_manifest
  • xkey.validate

Current v4 paid capabilities use exact x402 Base USDC payments. Historical prepaid credit balances remain redeemable only through the separately named legacy compatibility path; v4 does not sell new credit packs.

Free discovery does not consume paid execution credits.

Authenticated verification

Authenticated sessions can expose read-only verification tools including:

  • approval.verify
  • idempotency.inspect
  • receipt.verify
  • entitlement.inspect

Marketplace sessions may additionally expose role-gated job, receipt, purchase, provider, capability, and settlement operations.

Approval minting remains a local operator action and is not exposed over MCP.

Commercial flow

The governed machine-commerce path is:

text
discover→ inspect requirements→ estimate cost→ preview result→ preflight→ authorize→ pay→ verify settlement→ execute→ issue result→ bind entitlement→ issue verifiable receipt

Payment alone does not create unrestricted authority.

Authorization, payment verification, execution, fulfillment, entitlement creation, and receipt generation remain separate governed stages.

Human authorization

CrossingKey does not treat an LLM-supplied boolean such as approved: true as buyer authorization.

Where human authorization is required, approval is bound to the relevant commercial context, including the buyer, capability, inputs, quote, idempotency state, and expiration conditions.

Paid execution does not occur merely because an agent asks for it.

MCP resources

The candidate preserves the public MCP resources for agent comprehension:

  • crossingkey://discovery-guide
  • crossingkey://commerce-policy
  • crossingkey://capability/{name}

These describe the free discovery sequence, commerce policy, and per-capability instructions.

Machine commerce

CrossingKey supports governed machine-payment infrastructure including:

  • x402 v1
  • x402 v2
  • Base USDC
  • historical prepaid request credits through a separately named compatibility path only
  • settlement verification
  • entitlements
  • result-bound receipts
  • idempotent execution
  • replay protection

The CrossingKey seller wallet boundary is receiver-only.

Agents are not granted unrestricted wallet signing, sending, swapping, bridging, or autonomous seller-spend authority.

Security properties

The production design includes:

  • bounded input validation
  • strict capability schemas
  • SSRF protections
  • DNS and address validation
  • response-size controls
  • authorization boundaries
  • approval binding
  • idempotency protection
  • payment replay protection
  • duplicate-settlement protection
  • deterministic result hashing
  • entitlement binding
  • receipt verification
  • receiver-only seller wallet policy
  • explicit uncertain-settlement handling

No private keys, wallet secrets, Stripe secrets, API keys, seed phrases, mnemonics, or private customer information belong in this repository.

Agent discovery

Recommended entry point:

provider.describe

Canonical MCP endpoint:

https://mcp.crossingkeyintelligence.com/mcp

Canonical identity:

com.crossingkeyintelligence/crossingkey-mcp

Official MCP Registry identity:

com.crossingkeyintelligence/crossingkey-mcp

Website:

https://www.crossingkeyintelligence.com

CrossingKey Intelligence

Operating online under the handle crossingkey_.

intelligence is the standard.

來源：README.md，提交 f907add

工具

28

marketplace.describe

FREE, read-only marketplace overview. Use this first for marketplace-specific capability commerce, fee policy, creator rights, payment rails, and active catalog counts; use provider.describe for the broader CrossingKey provider and legacy offer surface.

無需輸入參數。

provider.apply

FREE public application intake. Always pending, never creates credentials or active capabilities.

輸入參數slug必填contact必填websitedescription必填displayName必填

provider.get

FREE. Public active provider metadata. Pending applications require owner or administrator authorization.

輸入參數providerId必填

capability.get

FREE. Use name for legacy deterministic capability metadata or capabilityId for public marketplace metadata, rights and provenance.

輸入參數namecapabilityId

catalog.list

FREE MARKETPLACE UNFILTERED DISCOVERY ONLY. Page through active public marketplace capabilities when no search filters are needed. Metadata is free; execution, entitlement, delivery, and purchased output remain gated. Do NOT use for filtered discovery; use capability.search. Do NOT use for CrossingKey digital/service offers; use offers.list. For one exact capabilityId use capability.get.

輸入參數limitoffset

commerce.quote

FREE MARKETPLACE PAYMENT QUOTE ONLY. After selecting an active marketplace capabilityId, return authoritative gross price, CrossingKey fee, provider share, and x402 v1/v2 payment requirements. A quote grants no entitlement and performs no execution. Do NOT use for first-party paid capabilities; use cost.estimate (first-party x402 capabilities have fixed catalog prices and no quote stage). Do NOT use for generic price lookup; use cost.estimate. Paid marketplace execution requires capability.purchase with authorization and verified payment.

輸入參數capabilityId必填

creator.apply

FREE WRITE. Private creator intake for assets needing a capability model. No ownership transfer and AI training defaults false.

輸入參數summary必填provider必填

provider.describe

FREE read-only provider and commerce policy discovery. Use this before selecting an offer or capability.

無需輸入參數。

offers.list

FREE read-only public offer and capability discovery. This tool never starts payment or execution.

輸入參數limitqueryoffset

requirements.check

FREE read-only requirements check. This tool never authorizes or starts payment or execution.

輸入參數item_id必填

cost.estimate

FREE read-only cost estimate. This tool never creates checkout, reserves funds, or contacts a facilitator.

輸入參數item_id必填

result.preview

FREE read-only result-shape preview. This tool never executes a capability or creates an entitlement or receipt.

輸入參數item_id必填

execution.preflight

FREE read-only execution preflight. Returns READY_FOR_HUMAN_AUTHORIZATION only; it never authorizes, purchases, settles, executes, or creates records.

輸入參數item_id必填

credits.options

FREE read-only legacy credit compatibility status. New prepaid-credit sales are disabled in v4; historical paid credits remain redeemable through a separate compatibility path.

無需輸入參數。

x402.compatibility_audit

Purchase x402 Compatibility Audit

PAID $1.00 USDC on Base via x402. Audits an x402 endpoint for v1/v2 compatibility defects. Calling this MCP tool does not spend funds; it returns the exact PAYMENT-REQUIRED challenge and canonical paid execution endpoint.

輸入參數url必填

mcp.schema_audit

Purchase MCP Schema Audit

PAID $1.00 USDC on Base via x402. Scores supplied MCP tool schemas for discoverability, descriptions, and bounded input contracts. Calling this MCP tool does not spend funds; it returns the exact PAYMENT-REQUIRED challenge and canonical paid execution endpoint.

輸入參數tools必填

openapi.quality_audit

Purchase OpenAPI Quality Audit

PAID $1.00 USDC on Base via x402. Evaluates structural quality and required fields in an OpenAPI document. Calling this MCP tool does not spend funds; it returns the exact PAYMENT-REQUIRED challenge and canonical paid execution endpoint.

輸入參數spec必填

machine_commerce.readiness_audit

Purchase Machine-Commerce Readiness Audit

PAID $2.00 USDC on Base via x402. Checks machine-commerce discovery and health surfaces. Calling this MCP tool does not spend funds; it returns the exact PAYMENT-REQUIRED challenge and canonical paid execution endpoint.

輸入參數url必填

artifact.integrity_manifest

Purchase Artifact Integrity Manifest

PAID $0.10 USDC on Base via x402. Creates deterministic SHA-256 entries and a root manifest hash for supplied text artifacts. Calling this MCP tool does not spend funds; it returns the exact PAYMENT-REQUIRED challenge and canonical paid execution endpoint.

輸入參數artifacts必填

hash.encode

Purchase SHA-256 Text Hash

PAID $0.01 USDC on Base via x402. Computes a SHA-256 digest and UTF-8 byte count for supplied text. Calling this MCP tool returns a payment challenge and does not autonomously spend funds.

輸入參數text必填

secret.scan

Purchase Secret Pattern Scan

PAID $0.01 USDC on Base via x402. Detects selected credential patterns and returns classifications and positions, not matched values. Heuristic, not comprehensive. Calling this MCP tool returns a payment challenge and does not autonomously spend funds.

輸入參數text必填

pii.scan

Purchase PII Pattern Scan

PAID $0.01 USDC on Base via x402. Detects selected personal-data patterns and returns classifications and positions, not matched values. Heuristic, not comprehensive. Calling this MCP tool returns a payment challenge and does not autonomously spend funds.

輸入參數text必填

json.repair

Purchase Conservative JSON Repair

PAID $0.01 USDC on Base via x402. Validates JSON and repairs a limited set of formatting errors. May return supplied content. Calling this MCP tool returns a payment challenge and does not autonomously spend funds.

輸入參數text必填

prompt.audit

Purchase Prompt Heuristic Audit

PAID $0.01 USDC on Base via x402. Scores selected prompt structure signals using deterministic heuristics. Calling this MCP tool returns a payment challenge and does not autonomously spend funds.

輸入參數text必填

mcp.launch_audit

MCP Launch Audit

PAID $9.00 USDC on Base via x402. Performs bounded live MCP discovery, health, transport, schema, and receiver-only checks against a public endpoint. No payment is attempted by the audit.

輸入參數url必填

x402.purchase_path_audit

x402 Purchase-Path Audit

PAID $19.00 USDC on Base via x402. Performs a bounded no-payment purchase-challenge audit for a selected capability, validating status, requirements, destination, amount, and receiver-only controls.

輸入參數url必填capability必填

xkey.validate

XKEY Intake Validation

PAID $0.10 USDC on Base via x402. Validates and normalizes one bounded XKEY intake payload. Calling this MCP tool returns the exact PAYMENT-REQUIRED challenge and does not spend funds.

輸入參數raw_intake必填idempotency_key必填

版本歷史

3
  1. v3.0.1最新Oct 11, 2026
  2. v3.0.0Sep 29, 2026
  3. v2.3.0Sep 16, 2026

評分

已滿足適用檢查項的 90%

該評分衡量此收錄條目的完整程度，依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價，也不表示伺服器安全或目前可用：可連通性是帶日期的檢查結果，評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通必需25 分
  • 已宣告認證方式必需10 分
  • 已列出工具必需15 分
  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分

    請在儲存庫或註冊中心條目中宣告授權條款。