mcpbeat Sign in
answering

CrossingKey MCP is answering right now. Last checked 6 min ago. It exposes 28 tools. Last commit 26 Oct 2026.

Agent-native MCP for governed commerce, x402 payments, paid capabilities, and verifiable receipts.

Uptime history 49 days of history · worst day 0%
49 days agonow
24.2%
Uptime 24h
22 of 91 checks
28
Tools
read from the server
634 ms
Response time
average over 24h
0
Stars
last commit 26 Oct 2026

What changed 202

Every tool that appeared, vanished or quietly changed what it asks for. Recorded since 16 September 2026. No other catalogue keeps this.

26 Oct a tool changed version3 times that day
16 Oct 2 tools appeared mcp.launch_audit, x402.purchase_path_audit
16 Oct 2 tool descriptions were rewritten credits.options, xkey.validate
16 Oct a tool changed the parameters it asks for artifact.integrity_manifest
12 Oct a tool appeared provider.apply
12 Oct a tool disappeared provider.register
11 Oct a tool changed the parameters it asks for offers.list
10 Oct 5 tools appeared hash.encode, json.repair, pii.scan and 2 more
5 Oct a tool changed the parameters it asks for artifact.integrity_manifest
5 Oct a tool changed version
and 186 more, back to 16 September 2026

What the code does

We read the source, 2 h ago · tools taken from the live server · rules 995398eba69f

A tool parameter reaches a dangerous call

A value the model can set ends up inside a file or shell call. That is not a flaw by itself — for a terminal server it is the job — but it is where things go wrong when it is not.

A tool parameter reaches a dangerous call xkey.validate.raw_intake → server-runtime.mjs:195
  const result=spawnSync(XKEY_PYTHON,[XKEY_DIRECT_VALIDATOR],{
Capabilities

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

A line of code looks encrypted proof/recovery-witness-contract-test.mjs:18
console.log(JSON.stringify({status:'FRESH_EXECUTION',test_infrastructure:'TEST_ONLY',confirmed:confirmed.outcome,not_observed:EFFECT_NOT_OBSERVED,unknown:EFFECT_UNKNOWN,effect_count:adapter.count(operation),verdict:'PASS'}));
const e=path.resolve(new URL('.',import.meta.url).pathname,'evidence'); const write=(n,v)=>fs.writeFileSync(path.join(e,n),JSON.stringify(v,null,2)+'\n'); const now=new Date().toISOString();
Runs an external command server-runtime.mjs:156
  const result=spawnSync(

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

A tool parameter here reaches a dangerous call

That is not a flaw by itself — but it is where things go wrong when it is not the job. We re-read this code on every release. Watch it and you hear from us the day another one appears.

Three servers free · no card

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 6 min ago.

run in your terminal
claude mcp add crossingkey-mcp --transport http https://mcp.crossingkeyintelligence.com/mcp
Settings → Connectors → Add custom connector, then paste this address
https://mcp.crossingkeyintelligence.com/mcp
~/.codex/config.toml
[mcp_servers.crossingkey-mcp]
url = "https://mcp.crossingkeyintelligence.com/mcp"
.cursor/mcp.json
{
  "mcpServers": {
    "crossingkey-mcp": {
      "url": "https://mcp.crossingkeyintelligence.com/mcp"
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "crossingkey-mcp": {
      "type": "http",
      "url": "https://mcp.crossingkeyintelligence.com/mcp"
    }
  }
}

Available tools 28

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

provider
provider.apply
FREE public application intake. Always pending, never creates credentials or active capabilities.
provider.describe
FREE read-only provider and commerce policy discovery. Use this before selecting an offer or capability.
provider.get
FREE. Public active provider metadata. Pending applications require owner or administrator authorization.
capability
capability.get
FREE. Use name for legacy deterministic capability metadata or capabilityId for public marketplace metadata, rights and provenance.
capability.search
FREE MARKETPLACE FILTERED DISCOVERY ONLY. Search active public marketplace capabilities when one or more filters are known: text, category, provider, delivery type, or price. Metadata is free; purchased execution and deliverables are not. Do NOT use for unfiltered browsing; use catalog.list. Do NOT use for CrossingKey digital/service offers; use offers.list. For one exact capabilityId use capability.get.
mcp
mcp.launch_audit
PAID $9.00 USDC on Base via x402. Performs bounded live MCP discovery, health, transport, schema, and receiver-only checks against a public endpoint. No payment is attempted by the audit.
mcp.schema_audit
PAID $1.00 USDC on Base via x402. Scores supplied MCP tool schemas for discoverability, descriptions, and bounded input contracts. Calling this MCP tool does not spend funds; it returns the exact PAYMENT-REQUIRED challenge and canonical paid execution endpoint.
x402
x402.compatibility_audit
PAID $1.00 USDC on Base via x402. Audits an x402 endpoint for v1/v2 compatibility defects. Calling this MCP tool does not spend funds; it returns the exact PAYMENT-REQUIRED challenge and canonical paid execution endpoint.
x402.purchase_path_audit
PAID $19.00 USDC on Base via x402. Performs a bounded no-payment purchase-challenge audit for a selected capability, validating status, requirements, destination, amount, and receiver-only controls.
artifact
artifact.integrity_manifest
PAID $0.10 USDC on Base via x402. Creates deterministic SHA-256 entries and a root manifest hash for supplied text artifacts. Calling this MCP tool does not spend funds; it returns the exact PAYMENT-REQUIRED challenge and canonical paid execution endpoint.
catalog
catalog.list
FREE MARKETPLACE UNFILTERED DISCOVERY ONLY. Page through active public marketplace capabilities when no search filters are needed. Metadata is free; execution, entitlement, delivery, and purchased output remain gated. Do NOT use for filtered discovery; use capability.search. Do NOT use for CrossingKey digital/service offers; use offers.list. For one exact capabilityId use capability.get.
commerce
commerce.quote
FREE MARKETPLACE PAYMENT QUOTE ONLY. After selecting an active marketplace capabilityId, return authoritative gross price, CrossingKey fee, provider share, and x402 v1/v2 payment requirements. A quote grants no entitlement and performs no execution. Do NOT use for first-party paid capabilities; use cost.estimate (first-party x402 capabilities have fixed catalog prices and no quote stage). Do NOT use for generic price lookup; use cost.estimate. Paid marketplace execution requires capability.purchase with authorization and verified payment.
cost
cost.estimate
FREE read-only cost estimate. This tool never creates checkout, reserves funds, or contacts a facilitator.
creator
creator.apply
FREE WRITE. Private creator intake for assets needing a capability model. No ownership transfer and AI training defaults false.
credits
credits.options
FREE read-only legacy credit compatibility status. New prepaid-credit sales are disabled in v4; historical paid credits remain redeemable through a separate compatibility path.
execution
execution.preflight
FREE read-only execution preflight. Returns READY_FOR_HUMAN_AUTHORIZATION only; it never authorizes, purchases, settles, executes, or creates records.
hash
hash.encode
PAID $0.01 USDC on Base via x402. Computes a SHA-256 digest and UTF-8 byte count for supplied text. Calling this MCP tool returns a payment challenge and does not autonomously spend funds.
json
json.repair
PAID $0.01 USDC on Base via x402. Validates JSON and repairs a limited set of formatting errors. May return supplied content. Calling this MCP tool returns a payment challenge and does not autonomously spend funds.
machine
machine_commerce.readiness_audit
PAID $2.00 USDC on Base via x402. Checks machine-commerce discovery and health surfaces. Calling this MCP tool does not spend funds; it returns the exact PAYMENT-REQUIRED challenge and canonical paid execution endpoint.
marketplace
marketplace.describe
FREE, read-only marketplace overview. Use this first for marketplace-specific capability commerce, fee policy, creator rights, payment rails, and active catalog counts; use provider.describe for the broader CrossingKey provider and legacy offer surface.
offers
offers.list
FREE read-only public offer and capability discovery. This tool never starts payment or execution.
openapi
openapi.quality_audit
PAID $1.00 USDC on Base via x402. Evaluates structural quality and required fields in an OpenAPI document. Calling this MCP tool does not spend funds; it returns the exact PAYMENT-REQUIRED challenge and canonical paid execution endpoint.
pii
pii.scan
PAID $0.01 USDC on Base via x402. Detects selected personal-data patterns and returns classifications and positions, not matched values. Heuristic, not comprehensive. Calling this MCP tool returns a payment challenge and does not autonomously spend funds.
prompt
prompt.audit
PAID $0.01 USDC on Base via x402. Scores selected prompt structure signals using deterministic heuristics. Calling this MCP tool returns a payment challenge and does not autonomously spend funds.
requirements
requirements.check
FREE read-only requirements check. This tool never authorizes or starts payment or execution.
result
result.preview
FREE read-only result-shape preview. This tool never executes a capability or creates an entitlement or receipt.
secret
secret.scan
PAID $0.01 USDC on Base via x402. Detects selected credential patterns and returns classifications and positions, not matched values. Heuristic, not comprehensive. Calling this MCP tool returns a payment challenge and does not autonomously spend funds.
xkey
xkey.validate
PAID $0.10 USDC on Base via x402. Validates and normalizes one bounded XKEY intake payload. Calling this MCP tool returns the exact PAYMENT-REQUIRED challenge and does not spend funds.

Tools removed

Tools this server used to expose. Anything built against them stopped working on the day they went.

get_fulfillment_status
removed 18 Sep 2026
get_stripe_checkout_link
removed 18 Sep 2026
list_stripe_offers
removed 18 Sep 2026
check_requirements
removed 18 Sep 2026
crossingkey.describe
removed 18 Sep 2026
discover_provider
removed 18 Sep 2026
estimate_cost
removed 18 Sep 2026
execution_preflight
removed 18 Sep 2026
fulfillment.get
removed 18 Sep 2026
fulfillment.status
removed 18 Sep 2026
get_offer
removed 18 Sep 2026
get_request_credit_links
removed 18 Sep 2026
list_capabilities
removed 18 Sep 2026
list_offers
removed 18 Sep 2026
list_request_services
removed 18 Sep 2026
payment.verify_onchain
removed 18 Sep 2026
preview_result_schema
removed 18 Sep 2026
xkey_validate_intake
removed 18 Sep 2026
capabilities.list
removed 21 Sep 2026
capability.purchase
removed 21 Sep 2026
capability.quote
removed 21 Sep 2026
capability.register
removed 21 Sep 2026
capability.setStatus
removed 21 Sep 2026
health
removed 21 Sep 2026
job.status
removed 21 Sep 2026
provider.setStatus
removed 21 Sep 2026
receipt.get
removed 21 Sep 2026
services.list
removed 21 Sep 2026
settlement.getProviderBalance
removed 21 Sep 2026
settlement.listAllocations
removed 21 Sep 2026
settlement.markSettled
removed 21 Sep 2026
credit.options
removed 23 Sep 2026
entitlement.inspect
removed 23 Sep 2026
machine_capability.list
removed 23 Sep 2026
machine_capability.quote
removed 23 Sep 2026
offer.list
removed 23 Sep 2026
payment.methods
removed 23 Sep 2026
payment.verify
removed 23 Sep 2026
purchase.status
removed 23 Sep 2026
receipt.verify
removed 23 Sep 2026
requirement.check
removed 23 Sep 2026
service.list
removed 23 Sep 2026
system.health
removed 23 Sep 2026
capability.execute
removed 2 Oct 2026
provider.register
removed 12 Oct 2026

Endpoints

URLTransportStateLatencyChecked
https://mcp.crossingkeyintelligence.com/mcp streamable-http answering 562 ms 6 min ago

Alternatives to CrossingKey MCP

same job, measured the same way
Anyway Possible Paid Agent Utilities
by anyway-possible

Paid x402 tools for merchant intelligence, Base payment readiness, and verifiable web evidence.

9 tools answering
Clawpay
by up2itnow0822

Non-custodial x402 payment MCP server for AI agents. Wallets, payments, and commerce on 17 chains.

local only
Pyrimid Protocol
by pyrimid

Agent-commerce MCP server for x402/USDC payments and affiliate splits on Base.

7 tools answering
mcpweave
by mcpweave

Korea-native MCP gateway: Korean commerce, payments, messaging, gov & finance APIs for AI agents.

answering
Anyway Possible Agent Utilities
by anywaypossible

A free tool recommender plus eight x402 tools for payments, merchants, wallets, and web evidence.

9 tools answering
VouchSpec Agent Skill Evidence
by mordiaky

Read-only discovery for exact-commit Agent Skill validation, x402 payment, and signed receipts.

answering
Secant Agent Research Pack
by jnilrac

Paid MCP web research for agents: search, extraction, citations, and x402 payment discovery.

6 tools answering
Sati Grumpy
by fish-tacos

MCP commerce surface for refurbished datacenter hardware, with x402 agent-payment discovery.

5 tools answering

CrossingKey MCP — questions

Answers built from our own checks of this server.

What can CrossingKey MCP do?
It exposes 28 tools, read directly from the server on our last check. Among them: artifact.integrity_manifest, capability.get, capability.search, catalog.list, commerce.quote, cost.estimate and 22 more. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →
What is CrossingKey MCP mostly used for?
Its tools cluster around provider, capability and x402. That is what this server is built to work with — the grouping comes from the actual tool names, not from a category we assigned.
Is CrossingKey MCP working right now?
We send a real MCP handshake every 15 minutes. Over the last 24 hours 22 of 91 checks got a reply (24.2%), average response time 634 ms. The bar chart above shows every period we have measured.
Did CrossingKey MCP ever remove tools?
Yes. get_fulfillment_status, get_stripe_checkout_link, list_stripe_offers, check_requirements and 41 more are no longer exposed — we recorded the date each one disappeared. A tool vanishing usually means a breaking change for anything that depended on it.
How do I connect CrossingKey MCP?
Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.
Does CrossingKey MCP need an API key?
No. CrossingKey MCP completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 28 of them are readable on this page. This is what we observed, not what the docs claim.
How fast is CrossingKey MCP?
It answers our handshake in 634 ms on average, which is faster than 16% of all working MCP servers we measure. That is on the slow side — worth knowing if the tool sits inside an interactive loop. The comparison comes from our own checks across the whole registry, every 15 minutes.
Is CrossingKey MCP open source?
We cannot say either way: written in JavaScript, 0 stars on GitHub and 2 open issues, but we could not determine the licence, and without one the code is not open source by default.