/ 100

18 days ago

glama

tradex

Item: tradex
Rating: 74
Author: M8ven

Enables agents to discover and pay for AI services per call via USDC on Solana, supporting marketplace search, listing details, on-chain reputation, wallet info, and paid calls.

→ benz16107/tradex · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

5 tools verified — handlers match their declared behaviour

4 read-only tools verified — handlers contain no write/delete/exec

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 6 credentials: BUYER_WALLET_SECRET, GEMINI_API_KEY, GOOGLE_API_KEY, MCP_AUTH_TOKEN, MCP_WALLET_SECRET, TREASURY_WALLET_SECRET

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configAPP_PORT

🔐 secretBUYER_WALLET_SECRET— The agent brings its own wallet () and points at whichever marketplace it

configDATABASE_URL

configFACILITATOR_URL

🔐 secretGEMINI_API_KEY

configGEMINI_MODEL

🔐 secretGOOGLE_API_KEY

🔐 secretMCP_AUTH_TOKEN— bearer-token gated: send Authorization: Bearer $. Without that, anyone who found

configMCP_MAX_PRICE_USDC— runs. Two hard caps sit in front of it — per call (default 0.10) and

configMCP_MAX_SPEND_USDC— for the process (default 1.00) — and it refuses rather than overspending. If

🔐 secretMCP_WALLET_SECRET

configNEXT_PUBLIC_APP_URL

configNEXT_PUBLIC_REPUTATION_PROGRAM_ID

configNEXT_PUBLIC_SOLANA_RPC_URL

configPAYMENT_DECIMALS

configPAYMENT_MINT

configPROVIDER_WALLET

configREPUTATION_PROGRAM_ID

configSOLANA_CLUSTER— devnet npm run setup

configSOLANA_RPC_URL

configTRADEX_URL— "": "http://localhost:3777",

🔐 secretTREASURY_WALLET_SECRET

configX402_MODE— fund the buyer at [faucet.circle.com](https://faucet.circle.com) and set =hosted. Nothing

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 4 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/benz16107-tradex-1y2lpi)](https://m8ven.ai/mcp/benz16107-tradex-1y2lpi)

commit: 9bbeecff02211350116a45198268e9b3cc9690a0

code hash: 55a4e256b24785677604e286874fc83e849e64cdfaebb8ac69b78e103e72e90e

verified: 7/13/2026, 9:55:40 AM

view raw JSON →