SpendGate MCP Server

Install SpendGate MCP server

claude mcp add --transport http spendgate https://spendgate.toolweather.workers.dev/mcp

{
  "mcpServers": {
    "spendgate": {
      "url": "https://spendgate.toolweather.workers.dev/mcp"
    }
  }
}

{
  "mcpServers": {
    "spendgate": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-remote",
        "https://spendgate.toolweather.workers.dev/mcp"
      ]
    }
  }
}

{
  "servers": {
    "spendgate": {
      "type": "http",
      "url": "https://spendgate.toolweather.workers.dev/mcp"
    }
  }
}

{
  "mcpServers": {
    "spendgate": {
      "serverUrl": "https://spendgate.toolweather.workers.dev/mcp"
    }
  }
}

Context tax

Connecting this server adds ~2,336 tokens of tool definitions to every model turn (moderate, 4 tools). Measured 2026-10-19 via its hosted endpoint; o200k tokenizer, worst case for clients that load all tools up front. How we measure

Input prices as of 2026-10-06. Excludes your own prompt and output.

Tools (4)

• score_spend1,085 tok

  Score one planned payment before it is sent: a crypto transfer, gift card, subscription, or paid API or merchant. Do not use it for a pure read, or for a status_check under $1 you will not pay; that still burns a free score and approves unless a budget you pass is exceeded. Each call uses one free score (anonymous 100/UTC day, sg_live_ key 1,000 from get_api_key). Past that cap the call is HTTP 402 and costs 0.001 USDC on Base via x402. It does not pay the merchant. A domain, https URL, or 0x payee that is not on the local known-host list is checked with PayCheck. Trusted counts as a known mer

• set_wallet_allowlist406 tok

  Store the 0x wallets this sg_live_ key is allowed to spend from. Call it when an operator names those wallets, once, not on every spend, and not to approve a payment. score_spend still has to run before any transfer. A block or ask_human from score_spend means do not broadcast. Pass allowed_wallets. This replaces the stored list for that key in one write. An empty array stores an allowlist that authorizes no wallet, so a later score with from_wallet and no call-level list returns block, reason unauthorized_wallet. allowed_wallets is required. At most 32 addresses. A published developer test ac

• get_api_key283 tok

  Mint one free sg_live_ key so later score_spend and get_quota calls use 1,000 scores per UTC day instead of the anonymous 100. Call once per agent when you will score often and have no stored key. Do not call every turn, do not mint again if you already stored the secret, and do not call just to read remaining scores (use get_quota). Returns the secret once as api_key, plus key_id, key_prefix, label, tier free, daily_limit, created_at, and note. Only a hash is stored, so the secret cannot be shown again. Keys do not expire and there is no revoke tool; a lost key stays valid, and an unknown or

• get_quota251 tok

  Read today's free-score balance. Prefer this over score_spend when you are not judging a specific payment, including before a batch or after a 402: it does not consume a score, returns no verdict, and is never billed. Do not use it to approve or block a spend. Pass api_key for that sg_live_ key (tier free, 1,000/UTC day); omit it for this client's anonymous bucket (tier anonymous, 100/UTC day). An unrecognized or non-sg_live_ key returns invalid_api_key and does not fall back. Returns subject (anonymous|api_key|bundle), key_id, key_prefix, tier (anonymous|free|bundle), daily_limit, used_today,

Security signals

97/100 — no known issues found as of 2026-10-19, from the checks below. This is not a guarantee of safety; review what a server can do before connecting it.

Scan it yourself before installing with vectra-guard, the open-source agent security CLI. Scoring rules

Freshness

Active — last maintenance signal 2d ago. The newest of the signals below sets the band.

1. Last commit (default branch)

   2026-10-16 · 2d ago · GitHub

2. Latest release

   2026-10-15 · 3d ago · GitHub · v1.0.2

3. Package published

   no data · npm/PyPI

4. Registry entry updated

   2026-10-15 · 3d ago · official registry · v1.0.0