IMBA Agent Spend

com.imbawallet由 imbawallet.com 發布官方發布者v0.1.4更新於 Oct 26, 2026

IMBA spend MCP: USDT TRC-20 deposit and catalog buy with your key. No withdraw.

已驗證Streamable HTTP可網頁執行金融安全與監控商業與電商

概覽

AI 產生的概覽

IMBA Agent Spend 讓助理為代理存入 USDT TRC-20 餘額，並用來購買預付卡、禮品碼、eSIM 方案與地址篩查。

可以做什麼
  • 查詢消費政策、入金地址與已驗證代理的 USDT 餘額
  • 列出預付卡產品、代理名下卡片、禮品卡商品與旅遊 eSIM 方案
  • 開卡與加值 Visa/MasterCard 預付卡，購買禮品碼與 eSIM 方案
  • 取得卡片詳情，註冊公鑰後以加密 JWE 形式回傳卡號與 CVV
  • 輪詢通知取得 3-D Secure 驗證碼，設定回呼網址或輪換 HMAC 金鑰
  • 對加密貨幣地址進行 KYT 報價、檢測並檢視歷史報告
適用情境
適合代理需要向只接受信用卡的商家付款，或以 USDT 餘額購買禮品碼與旅遊 eSIM 方案的情況；也適合在接受 TRON、ETH 或 BTC 轉帳前，對地址做制裁或混幣曝險篩查。
執行需求
可作為遠端端點使用，也可透過 npm 套件以 stdio 在本機執行。需要代理 client_id 與 Ed25519 私鑰，透過 IMBA_AGENT_CLIENT_ID 與 IMBA_AGENT_PRIVATE_KEY 環境變數，或 X-IMBA-Agent-Client-Id 與 X-IMBA-Agent-Private-Key 標頭提供。消費需已入金的 USDT TRC-20 地址；Webhook 與 HMAC 輪換需一個 HTTPS 回呼網址。
安裝前請注意
私鑰即消費憑證，持有者即可動用代理資金。開卡、加值、購買與 KYT 檢測都會從代理餘額扣除真實 USDT，KYT 檢測約扣 0.99 USDT。卡片詳情可能揭露卡號與 CVV。HMAC 明文僅顯示一次，輪換後舊金鑰立即失效。沒有提領功能，入金地址應每次重新取得而非快取。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 IMBA Agent Spend，將其新增到工作區。
  2. 連接 Custom headers 憑證。它們會被私密儲存，絕不會在公開頁面上展示。
  3. 為需要使用其工具的對話啟用該服務。

Web executable，透過 Streamable HTTP。 遠端服務在工作區中設定後即可從網頁執行環境執行。

交給代理程式安裝

把這段提示詞貼上到 Claude Code、Codex、Cursor 等代理程式，或 SourceWeft 對話中。代理程式會讀取該伺服器的安裝指南，先向你展示發布者、端點和登入方式，經你同意後再把它新增到你的客戶端。金鑰不會寫進任何命令。

閱讀 https://sourceweft.com/mcp/com.imbawallet%2Fagent/install.md，並按其中說明把這個 MCP 伺服器接入我的客戶端。修改任何設定之前，先告訴我它的發布者、端點和登入方式，等我確認。不要把 API 金鑰寫進命令或我會提交的檔案；問我金鑰應從哪裡取得。

檢視代理程式所依據的安裝指南

其他 MCP 客戶端

把它新增到你客戶端的 mcpServers 設定中。

{
  "mcpServers": {
    "imba-agent-spend": {
      "type": "http",
      "url": "https://imbawallet.com/mcp/spend",
      "headers": {
        "X-IMBA-Agent-Client-Id": "<VALUE>",
        "X-IMBA-Agent-Private-Key": "<VALUE>"
      }
    }
  }
}

README

該儲存庫沒有 README。

工具

19

get_spend_policy

Spend policy

Forbidden rails and tier rules. Allowed catalog: Visa prepaid, travel eSIM, gift cards, paid KYT address screen. Read-only.

無需輸入參數。

get_deposit_address

USDT TRC-20 deposit address

POST /api/deposit_address blockchain=tron. Address is issued for the authenticated agent only. Always re-fetch before send. Do not cache. USDT TRC-20 only. 24h unfunded hold.

無需輸入參數。

get_balance

Ledger 2401 balance

GET /api/balance. USDT is the spendable catalog currency.

無需輸入參數。

list_cards

List cards

POST /api/cards for the authenticated agent. No client_id argument.

無需輸入參數。

list_card_products

List card products

POST /api/card_products. Use id as imba_product_id for create_card (Visa prepaid). Space catalog calls ~1s apart.

無需輸入參數。

list_gift_offers

List gift offers

POST /api/offers. Live gift catalog (~20k positions / ~2k unique: Apple, Google Play, Steam, games, travel, retail). Optional query string. Then purchase_gift with offer_id + ext_id. Space catalog calls ~1s apart. Do not assume a SKU.

輸入參數query

list_esim_plans

List eSIM plans

POST /api/esim/plans. Travel/data eSIM. esim_provider=yesim. Optional country ISO2. Use plan id with purchase_esim. Space catalog calls ~1s apart (agent catalog_gap).

輸入參數countryesim_provider

create_card

Buy a virtual card

Issue a Visa/MasterCard prepaid from this agent 2401 USDT so the agent can pay merchants that require a card (airlines, hotels, SaaS, datacenter/GPU clouds). POST /api/pin/create_card. ext_id required. imba_product_id is core.card_product.id. Never payment_source=stars. Never pass client_id. IMBA does not create the booking.

輸入參數emailphoneext_id必填countrylast_namebirth_datefirst_nameimba_product_id必填

topup_card

Top up a card

POST /api/pin/topup_card from this agent 2401 USDT. card_id must belong to the same agent (SQL owner guard). ext_id required. Never Stars.

輸入參數amount必填ext_id必填card_id必填

purchase_gift

Buy a gift card

POST /api/purchase. Buy a brand gift code (Apple, Steam, Google Play, … — live list). ext_id required. Never payment_source=stars.

輸入參數ext_id必填offer_id必填expected_pricepayment_sourcerequired_fields

purchase_esim

Buy an eSIM plan

POST /api/esim/new_plan5. Buy a travel/data eSIM plan from this agent 2401. Omit blank/null iccid so SQL takes the new-eSIM path. A set iccid must already belong to this agent. ext_id required. Never Stars.

輸入參數iccidext_id必填plan_id必填payment_source

get_card_details

Card payment credentials

POST /api/pin/get_card_details for a card this agent owns. Needed to present PAN at merchant checkout (airline, datacenter, SaaS). PAN/CVV arrive as card_encrypted JWE when jwe_public_key is registered (PATCH webhook). Without that key the number is masked. Never logs raw PAN. cvv defaults true. Never pass client_id.

輸入參數cvvcard_id必填

list_notifications

Inbox and 3DS OTP

POST /api/notifications. Poll this when a Visa payment asks for 3-D Secure. Agents keep payload.code (never SMS, never Telegram). category=codes for 3-D Secure OTP. Also delivered on webhook field otp if callback_url is set, and optional email. Space catalog calls ~1s apart.

輸入參數limitprev_idprev_tscategory

set_webhook

Set callback URL / JWE / OTP email

PATCH /auth/v1/agent/webhook. Sets https callback_url (required before hmac/rotate), optional X25519 jwe_public_key for card_encrypted, optional email for 3DS OTP. Not SMS. HMAC plaintext is shown once when a URL is first accepted.

輸入參數emailcallback_urljwe_public_key

rotate_hmac

Rotate webhook HMAC

POST /auth/v1/agent/hmac/rotate. Previous HMAC dies immediately. Requires an existing callback_url (400 callback_url required before rotate otherwise). Pass callback_url here to PATCH webhook first. Plaintext HMAC is returned once — store it; never a Wallet JWT.

輸入參數emailcallback_urljwe_public_key

kyt_quote

KYT price

POST /api/kyt_quote. Price for a paid crypto-address screen (Didit). Debit is on kyt_check (~0.99 USDT from 2401), not on quote. Off unless didit.enabled and didit.agent_api. Does not gate TRON deposit. Not /api/client/kyt_* and not partner. Space ~1s.

無需輸入參數。

kyt_check

Paid KYT check

Screen a crypto address for dirt (sanctions / mixer exposure). Use BEFORE you accept a TRC-20 send, or AFTER a wallet is blocked and the reason is unclear. POST /api/kyt_check. Body: network (tron_usdt | eth | btc) + address. Debits ~0.99 USDT from 2401. Returns a report — does not gate deposit, does not ban or unblock. TON is not in this catalog. Never pass client_id. Space ~1s.

輸入參數address必填network必填refresh

kyt_check_get

KYT check by id

POST /api/kyt_check_get. Poll until the report is ready. Own check only (404 otherwise). Use after kyt_check when a wallet was blocked and you need the dirt report. Never pass client_id.

輸入參數id必填

kyt_checks

KYT history

POST /api/kyt_checks. Own KYT history plus quote fields. Use to find a past address check. Space ~1s. Never pass client_id.

輸入參數limitlast_id

版本歷史

1
  1. v0.1.4最新Sep 16, 2026

評分

已滿足適用檢查項的 75%

該評分衡量此收錄條目的完整程度，依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價，也不表示伺服器安全或目前可用：可連通性是帶日期的檢查結果，評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通必需25 分
  • 已宣告認證方式必需10 分
  • 已列出工具必需15 分
  • 描述必需15 分
  • 圖示10 分
  • 文件15 分

    請宣告包含 README 的 GitHub 儲存庫，或在 OAuth 受保護資源後設資料中提供 resource_documentation。

  • 授權條款10 分

    請在儲存庫或註冊中心條目中宣告授權條款。

其他 Imbawallet 整合

IMBA Agent Docs

com.imbawallet官方發布者

IMBA Agent API 的唯讀文件伺服器，為助理提供標準事實、使用案例手冊、等級政策與公開文件連結。

Streamable HTTP可網頁執行
金融6 個工具Oct 28, 2026