Realmint

io.github.realmint-io由 GitHub 帳號 realmint-io 發布v1.0.0更新於 Oct 27, 2026

Agent-native scoring, search and routing for tokenized real-world assets across multi-chain.

已驗證Streamable HTTP可網頁執行金融資料與分析商業與電商

概覽

AI 產生的概覽

面向代幣化現實世界資產的遠端 MCP 伺服器:目錄檢索、風險評分、行情資料,以及需 OAuth 授權的 USDC 買入、賣出與提領工具。

可以做什麼
  • 列出並檢視代幣化現實世界資產、其標的工具、完整結構、法律條款與中繼資料變更歷史
  • 依背書、可執行性、控制權、退出、流動性與社群六個面向為資產評分
  • 讀取行情快照、現貨價格、24 小時漲跌、成交量、市值與時間序列價格歷史
  • 查詢資產可路由的場所與鏈,以及各場所評分與政策標記
  • 檢視已登入錢包、智慧帳戶與餘額,並取得 USDC 入金說明
  • 透過委託錢包買入、賣出與提領 USDC,或取得 x402 入金挑戰以進行無金鑰的代理買入
適用情境
適合比較與審查黃金、公債或代幣化股票等代幣化資產,追蹤發行方條款變更,或在報價前確認某資產是否可交易。也適用於需要以程式化方式入金並買入 RWA 的代理。
執行需求
遠端 streamable HTTP 端點,無需安裝或本機執行環境。目錄類工具無需驗證即可使用。交易類工具需要 OAuth 登入並在提供方的委託頁面完成一次性錢包委託;x402 路徑需要代理自有的 EVM 金鑰並在用戶端簽章。來自未預先允許來源的請求會被拒絕。
安裝前請注意
交易類工具會動用真實資金:買入、賣出與提領被標記為破壞性操作,透過長期委託在伺服器端簽章並受單筆上限限制,因此撤銷委託與中斷連線是兩件不同的事。x402 流程需在用戶端簽署 EIP-3009 授權,並核實 payTo 位址確實由自己的金鑰衍生。x-api-key 標頭用於上游限流識別。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 Realmint,將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Web executable,透過 Streamable HTTP。 遠端服務在工作區中設定後即可從網頁執行環境執行。

交給代理程式安裝

把這段提示詞貼上到 Claude Code、Codex、Cursor 等代理程式,或 SourceWeft 對話中。代理程式會讀取該伺服器的安裝指南,先向你展示發布者、端點和登入方式,經你同意後再把它新增到你的客戶端。金鑰不會寫進任何命令。

閱讀 https://sourceweft.com/mcp/io.github.realmint-io%2Fmcp/install.md,並按其中說明把這個 MCP 伺服器接入我的客戶端。修改任何設定之前,先告訴我它的發布者、端點和登入方式,等我確認。不要把 API 金鑰寫進命令或我會提交的檔案;問我金鑰應從哪裡取得。

檢視代理程式所依據的安裝指南

其他 MCP 客戶端

把它新增到你客戶端的 mcpServers 設定中。

{
  "mcpServers": {
    "realmint": {
      "type": "http",
      "url": "https://mcp.realmint.io/mcp"
    }
  }
}

README

Realmint MCP

Agent-native access to the Realmint catalog of tokenized real-world assets (RWAs): scoring, market data, route support, price history, and a keyless x402 buy on-ramp — exposed as native tools over the Model Context Protocol.

The MCP surface is key-safe by design. The catalog is read-only. Two trading paths move funds only under your own authorization and never see a raw key:

  • x402 keyless buy — an autonomous agent with its own EVM key signs an EIP-3009 authorization client-side to fund + buy (realmint_x402_buy_challenge).
  • Sign-in + delegated trade — a human/connector signs in via OAuth and delegates their Privy embedded wallet once; Realmint then signs buy/sell/withdraw server-side under a per-trade spending cap. Privy holds the wallet; no key touches Realmint.
Endpointhttps://mcp.realmint.io/mcp
TransportStreamable HTTP
AuthMixed (lazy): catalog is open; trade tools trigger OAuth on first use
Tools8 catalog (read-only) + 6 trade (OAuth-gated)
Discovery card/.well-known/mcp/server-card.json
StatusLive since May 2026

What you can ask it

CapabilityExample prompt
Score risk & rights"Score Tether Gold and tell me if it's safe for our DAO treasury"
Search the catalog"Find tokenized treasuries on Ethereum with no freeze capability"
Track issuer changes"Has anything in my watchlist changed control parameters this month?"
Map routable venues"Where can I acquire 100k of OUSG, ranked by liquidity?"
Pull market & price data"Show me PAXG's spot price, 24h volume, and 6-month chart"
Fund & buy, agent-native"Fund my wallet with 25 USDC over x402 and buy 5 of TSLAx"

Add it to your client

Claude.ai (custom remote connector)

  1. Settings → Connectors → Add custom connector
  2. Server URL: https://mcp.realmint.io/mcp
  3. Auth: none to connect — the catalog works immediately. The first time you call a trade tool, Claude runs the OAuth sign-in (Realmint → Privy) and you delegate your wallet once.
  4. Save and start asking the example prompts above.

Claude Desktop

Edit ~/Library/Application Support/Claude/claude_desktop_config.json:

json
{  "mcpServers": {    "realmint": {      "transport": {        "type": "streamable-http",        "url": "https://mcp.realmint.io/mcp"      }    }  }}

Restart Claude Desktop.

Cursor / Cline / Continue / any MCP client

Configure a remote MCP server with:

  • URL: https://mcp.realmint.io/mcp
  • Transport: streamable-http
  • Auth: none to connect; trade tools trigger OAuth on first use

Programmatic

bash
curl -X POST https://mcp.realmint.io/mcp \  -H 'Content-Type: application/json' \  -H 'Accept: application/json, text/event-stream' \  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

Unauthenticated you see the 8 catalog tools (all readOnlyHint=true). After OAuth sign-in, the 6 trade tools appear too (destructiveHint=true).


Catalog tools (read-only, no auth)

ToolPurpose
realmint_list_assetsEnumerate the full catalog with schemas
realmint_list_marketSpot price, 24h change, volume, market cap, history
realmint_get_assetFull schema for one asset (by lowercased ticker)
realmint_get_asset_historyVersioned metadata change history
realmint_get_scoreSix-dimension Risk & Rights Score + composite
realmint_get_route_supportRoutable venues + per-venue scores
realmint_get_price_historyTime-series prices (5m/1h/1d auto-cascading)
realmint_x402_buy_challengex402 funding challenge — the keyless, agent-native USDC on-ramp to buy an asset (returns the 402; the agent signs client-side)

Trade tools (sign in via OAuth)

Calling one of these when signed out returns a 401 that triggers the OAuth flow (Realmint's Ory Hydra, federated to Privy login). You sign in and delegate your wallet once (app.realmint.io/mcp/delegate); Realmint then signs each trade server-side via that delegation, under a per-trade spending cap — no key touches the MCP, no per-trade browser step.

ToolPurpose
realmint_whoamiConfirm the signed-in identity (Privy DID)
realmint_my_walletYour wallets, smart account, and balances
realmint_depositWhere to send USDC to add buying power
realmint_buyBuy an RWA (your smart account must already hold USDC)
realmint_sellSell an RWA back to USDC on Injective
realmint_withdrawWithdraw USDC from your smart account to any address

The complete tool catalog with descriptions, inputs, and titles is published in the discovery card.

Buying with realmint_x402_buy_challenge

The on-ramp is agent-native and keyless — an agent buys with only an EVM key, the same two signatures a human gives, all client-side:

  1. Call realmint_x402_buy_challenge with your owner_eoa, the amount_usdc, and the asset_id you intend to buy. It returns an HTTP 402 with x402 payment requirements (accepts[0]): payTo is your Base smart account derived from owner_eoa, maxAmountRequired the USDC atomic amount, asset the Base USDC contract, extra the EIP-712 domain.
  2. Verify payTo derives from your own owner_eoa, then sign an EIP-3009 transferWithAuthorization over that domain, base64-encode the x402 PaymentPayload, and re-POST it to /v1/route/x402-buy in the X-PAYMENT header. On settlement the USDC bridges custody-free to your Injective smart account.
  3. Buy any RWA from that balance via POST /v1/route/intent (signing the route as usual). The asset rests in your own smart account — send it elsewhere whenever you want, exactly like a human user.

See the x402 agent-buy guide for the full walkthrough.

The Risk & Rights Score

realmint_get_score returns a 0–100 composite plus six per-dimension scores:

  • backing — proof of reserves, audit cadence, backing mechanism.
  • enforceability — governing law, issuer verification, legal documents.
  • control — issuer power risk: freeze, mint, burn, blacklist, upgrade.
  • exit — redemption, transferability, KYC/whitelist, settlement, holding periods.
  • liquidity — market data, venue count, evidence docs.
  • social — recency-weighted Twitter activity; unverified handles penalized.

Suggested decision thresholds:

  • composite ≥ 75 → typical case, proceed.
  • 55 ≤ composite < 75 → elevated friction (gates, missing audits); review the asset's flags before acting.
  • composite < 55 → high risk; abort or require explicit user override.

Tokens with a non-null metadata.lifecycle (migrated, discontinued, abandoned) are score-capped at 49 by policy.


Troubleshooting

HTTP 403 — "Invalid Origin header" The server enforces Origin-header validation as required by the Anthropic Connectors Directory. claude.ai, chatgpt.com, mcp.realmint.io, app.realmint.io, and realmint.io are pre-allowed. If you operate from a different origin and need it added, email us at the address below.

Tool returns an empty list The Realmint catalog is curated — at any given time it indexes ~30 assets. Run realmint_list_assets to see the current set before asking about a specific ticker.

Asset ID format Asset IDs are lowercased tickers — xaut, not XAUT; paxg, not PAXG.

metadata.lifecycle is non-null The token has been migrated, discontinued, or abandoned. Trading is disallowed and the score is capped at 49. The lifecycle field tells you why and points to the replacement (if any).

Price history returns coarser buckets than asked The server cascades to coarser buckets (5m → 1h → 1d) when the requested bucket is empty for that asset. Look at effective_granularity in the response for what was actually returned.


Security & privacy

  • Key-safe. The catalog is read-only. Trading moves funds only under your own authorization and never exposes a raw key: x402 buys are signed client-side (EIP-3009), and the OAuth trade tools sign server-side via your Privy delegation under a per-trade spending cap — Privy holds the embedded wallet; no key touches Realmint.
  • No PII collected by the MCP server. The x-api-key header is used for upstream rate-limit identification; trade-tool identity comes from the OAuth (Hydra) token.
  • HTTPS termination via Traefik.
  • Origin / Host validation enabled at the FastMCP layer (DNS rebinding protection).
  • Privacy policy: https://realmint.io/privacy
  • Terms of service: https://realmint.io/terms

Versioning & changelog

This connector is versioned alongside the Realmint platform. Substantive changes to tool surfaces or output shapes will be announced in this README and reflected in the discovery card (serverInfo.version).


Contact & support


The MCP server source lives in a private repository; the hosted endpoint at https://mcp.realmint.io/mcp is the supported public interface.

來源:README.md,提交 0c4f152

工具

16

realmint_my_wallet

My Realmint wallet & balances

Show your Realmint wallet (EVM + Solana), smart account, and balances. **Requires sign-in.** Read-only; moves no funds.

無需輸入參數。

realmint_deposit

How to deposit into Realmint

Show where to send USDC to fund your buying power. **Requires sign-in.** Send USDC on Base to your EVM wallet; it funds your smart account for buys.

無需輸入參數。

realmint_buy

Buy a tokenized RWA

Buy `amount_usdc` of USDC worth of the RWA `asset_id` (e.g. 'paxg'). **Requires sign-in + a one-time wallet delegation** at app.realmint.io/mcp/delegate. Realmint signs server-side via your Privy delegation, capped per-trade — no key, no per-trade approval. Your smart account must already hold USDC (see realmint_deposit). Moves real funds.

輸入參數asset_id必填amount_usdc必填

realmint_sell

Sell a tokenized RWA

Sell `amount` of the RWA `asset_id` you hold, settling USDC back on Injective. **Requires sign-in + a one-time wallet delegation** at app.realmint.io/mcp/delegate. Realmint signs server-side via your Privy delegation — no key, no per-trade approval. Sells positions bought over MCP (held in your derived Realmint Wallet). Moves real funds.

輸入參數amount必填asset_id必填

realmint_withdraw

Withdraw USDC from Realmint

Withdraw `amount_usdc` USDC from your Realmint smart account to `recipient` (any address). **Requires sign-in + a one-time wallet delegation** at app.realmint.io/mcp/delegate. Realmint signs server-side via your Privy delegation, capped per-transaction — no key, no per-withdraw approval. Native USDC on Injective. Moves real funds. `smart_account_address` (advanced/recovery, normally leave empty): sweep from a specific smart account you own that a factory rotation left behind. Only an SA CREATE2-owned by you is accepted.

輸入參數recipient必填amount_usdc必填smart_account_address

realmint_logout

Sign out of Realmint

Sign out note: Realmint keeps no signing session — server-side signing is your standing Privy **delegation**. To fully revoke it, go to app.realmint.io/mcp/delegate. Disconnecting the connector ends this session.

無需輸入參數。

realmint_list_assets

List RWA Assets

List all tokenized real-world assets (RWAs) indexed by Realmint. Returns the full schema for each asset including ownership, control, transferability, redemption terms, and legal metadata.

無需輸入參數。

realmint_list_instruments

List Instruments

List instruments — the real-world things tokens represent: an underlying at a specific denomination ("Silver · 1 oz") or a stock ("Apple"). Tokens sharing an instrument are interchangeable representations of the same thing. Each entry carries its member token ids, the recommended member (buyable > priced > score), and the floor price across members — use it to pick the best token for an instrument before quoting or buying.

無需輸入參數。

realmint_list_market

List RWA Market Snapshots

Market snapshots for indexed RWAs: spot price, 24h change, volume, market cap, venue count, and a short price history series. Combine with `realmint_get_score` to compare risk against liquidity. Args: ids: Optional comma-separated asset IDs to filter (e.g. "xaut,paxg"). Empty = all assets. Assets without fresh market data are omitted from the response.

輸入參數ids

realmint_get_asset

Get RWA Asset Details

Get the full schema for a specific RWA by asset ID. Includes issuer details, control capabilities (freeze/mint/burn/blacklist), transferability restrictions, redemption mechanics, and legal documents. The asset ID is the lowercased ticker (e.g. "xaut", "paxg", "kau", "agri", "cgo"). Use `realmint_list_assets` to discover all available IDs — the catalog spans ~30 tokens across multiple chains and changes over time. Always read `metadata.lifecycle` from the response: a non-null lifecycle means the token is migrated/discontinued/abandoned and trading is disallowed (score is hard-capped at 49).

輸入參數asset_id必填

realmint_get_asset_history

Get RWA Metadata History

Get the versioned metadata change history for an asset. Each entry records what changed (created, updated) and a full schema snapshot. Useful for detecting when an issuer changes terms or control parameters.

輸入參數asset_id必填

realmint_get_score

Get RWA Risk & Rights Score

Get the Risk & Rights Score for an asset across six dimensions: - backing (0-100): proof of reserves, audit cadence, backing mechanism - enforceability (0-100): governing law, issuer verification, legal documents - control (0-100): issuer power risk — freeze, mint, burn, blacklist, upgrade - exit (0-100): redemption, transferability, KYC/whitelist, settlement, holding periods - liquidity (0-100): market data, venue count, evidence docs - social (0-100): Twitter activity (recency-weighted; unverified handles are penalized below the worst observed tier) Also returns a weighted composite (0-100, higher is better). Weights and penalty tiers are versioned server-side — see `policy_version` in the response. Combine with the asset's `metadata.lifecycle` field (from `realmint_get_asset`) to detect dead/migrated tokens — those are score-capped at 49. Suggested thresholds for decision-making: - composite ≥ 75: typical case, proceed - 55 ≤ composite < 75: elevated friction (gates, missing audits, etc.); review the asset's flags before proceeding - composite < 55: high risk; abort or require explicit user override

輸入參數asset_id必填

realmint_get_route_support

Get RWA Route Support

List the venues and chains that can route this asset, plus per-venue backing/liquidity/social scores and policy flags. Use this to check whether a trade is even feasible before quoting — `routing_enabled=false` or an empty venue list means the asset can be inspected but not traded via Realmint.

輸入參數asset_id必填

realmint_get_price_history

Get RWA Price History

Time-series price history for an asset. Args: asset_id: Asset identifier days: Lookback in days (1-730, default 30) granularity: Optional explicit bucket — "5m" | "1h" | "1d". Omit to auto-pick (≤2d → 5m, ≤30d → 1h, else 1d). The server cascades to coarser buckets when the requested one is empty for this asset.

輸入參數daysasset_id必填granularity

realmint_x402_buy_challenge

Get x402 Funding Challenge

Get the x402 payment requirements to fund yourself in USDC so you can buy RWAs — the agent-native on-ramp. This returns the 402 challenge only; it moves no funds. To complete funding (two signatures total, the same a human gives), the agent then, ENTIRELY CLIENT-SIDE: 1. Reads `accepts[0]` from the returned body: `payTo` is YOUR Base smart account (derived from `owner_eoa`), `maxAmountRequired` the USDC atomic amount, `asset` the Base USDC contract, `extra` the EIP-712 domain. 2. Signs an EIP-3009 `transferWithAuthorization(from=owner_eoa, to=payTo, value=maxAmountRequired, ...)` over that domain, base64-encodes the x402 PaymentPayload, and re-POSTs to `/v1/route/x402-buy` with it in the `X-PAYMENT` header. On settlement the USDC bridges custody-free to your Injective smart account. 3. Buys any RWA from that Injective balance via `POST /v1/route/intent` (signing the route as usual). The asset rests in your smart account; `send` it elsewhere if you want — exactly like a human user. Always verify `payTo` derives from your own `owner_eoa` before signing. Args: owner_eoa: Your EVM EOA — the payment signer and smart-account owner. amount_usdc: USDC to fund yourself with (human units, e.g. 25.0). asset_id: Optional RWA you intend to buy, recorded for context.

輸入參數asset_idowner_eoa必填amount_usdc必填

realmint_whoami

Who am I (signed-in user)

Return the signed-in user's identity. This tool **requires authentication** — calling it triggers the Realmint sign-in (OAuth) if you're not signed in. Use it to confirm who you're acting as. Read-only; moves no funds.

無需輸入參數。

版本歷史

1
  1. v1.0.0最新Sep 16, 2026

評分

已滿足適用檢查項的 100%

該評分衡量此收錄條目的完整程度,依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價,也不表示伺服器安全或目前可用:可連通性是帶日期的檢查結果,評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通必需25 分
  • 已宣告認證方式必需10 分
  • 已列出工具必需15 分
  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分