43
/ 100
18 days ago
glama

voulti-mcp

Accept crypto payments from AI agents: create an invoice in one call and get a hosted checkout link (USDC/USDT on Celo, Base, Arbitrum, Polygon, BSC). No API key, instant self-custody settlement.

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
🚨
Secret credentials may flow to a network call
1 flow detected: VOULTI_TELEGRAM_BOT_TOKEN. We can’t prove the destination matches the brand the credential belongs to.
🔐
You'll be asked for 8 credentials: ALCHEMY_API_KEY, BACKEND_PRIVATE_KEY, COINGECKO_APIKEY, PRIVATE_KEY, PRIVY_APP_SECRET, RESEND_APIKEY, SUPABASE_KEY, VOULTI_TELEGRAM_BOT_TOKEN
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// known CVEs in dependencies1 medium1 low

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

mediumturbo@2.5.0GHSA-hcf7-66rw-9f5r

Turbo: Login callback CSRF/session fixation

lowturbo@2.5.0GHSA-3qcw-2rhx-2726

Turbo: Unexpected local code execution during Yarn Berry detection

Depend on this server? Get alerted when its CVEs change.Watch this server free →
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
🔐 secretALCHEMY_API_KEY
configALLOWED_ORIGINS
configARBITRUM_ACCESS_MANAGER_ADDRESS
configARBITRUM_INVOICE_MANAGER_ADDRESS
configARBITRUM_PAYMENT_PROCESSOR_ADDRESS
configARBITRUM_PROXY_ADDRESS
configARBITRUM_RPC_URL
configARBITRUM_STORAGE_ADDRESS
🔐 secretBACKEND_PRIVATE_KEY
configBASE_ACCESS_MANAGER_ADDRESS
configBASE_INVOICE_MANAGER_ADDRESS
configBASE_PAYMENT_PROCESSOR_ADDRESS
configBASE_PROXY_ADDRESS
configBASE_RPC_URL
configBASE_STORAGE_ADDRESS
configBSC_ACCESS_MANAGER_ADDRESS
configBSC_INVOICE_MANAGER_ADDRESS
configBSC_PAYMENT_PROCESSOR_ADDRESS
configBSC_PROXY_ADDRESS
configBSC_RPC_URL
configBSC_STORAGE_ADDRESS
configCELO_ACCESS_MANAGER_ADDRESS
configCELO_INVOICE_MANAGER_ADDRESS
configCELO_PAYMENT_PROCESSOR_ADDRESS
configCELO_PROXY_ADDRESS
configCELO_RPC_URL
configCELO_STORAGE_ADDRESS
🔐 secretCOINGECKO_APIKEYRequires env vars: OPENEXCHANGERATE_APPID, , RESEND_APIKEY.
configCRON_STATUS_REPORT
configFRONTEND_URL
configHARDHAT_ACCESS_MANAGER_ADDRESS
configHARDHAT_INVOICE_MANAGER_ADDRESS
configHARDHAT_PAYMENT_PROCESSOR_ADDRESS
configHARDHAT_PROXY_ADDRESS
configHARDHAT_RPC_URL
configHARDHAT_STORAGE_ADDRESS
configHARDHAT_USDC_ADDRESS
configHARDHAT_USDT_ADDRESS
configHD_WALLET_MNEMONIC
configNEXT_PUBLIC_ARBITRUM_PROXY_ADDRESS
configNEXT_PUBLIC_BASE_PROXY_ADDRESS
configNEXT_PUBLIC_BSC_PROXY_ADDRESS
configNEXT_PUBLIC_CELO_PROXY_ADDRESS
configNEXT_PUBLIC_CHECKOUT_URL
configNEXT_PUBLIC_HARDHAT_PROXY_ADDRESS
configNEXT_PUBLIC_POLYGON_PROXY_ADDRESS
configNEXT_PUBLIC_PRIVY_APP_ID
configOPENEXCHANGERATE_APPIDRequires env vars: , COINGECKO_APIKEY, RESEND_APIKEY.
configPOLYGON_ACCESS_MANAGER_ADDRESS
configPOLYGON_INVOICE_MANAGER_ADDRESS
configPOLYGON_PAYMENT_PROCESSOR_ADDRESS
configPOLYGON_PROXY_ADDRESS
configPOLYGON_RPC_URL
configPOLYGON_STORAGE_ADDRESS
configPORT
🔐 secretPRIVATE_KEY
configPRIVY_APP_ID
🔐 secretPRIVY_APP_SECRET
🔐 secretRESEND_APIKEYRequires env vars: OPENEXCHANGERATE_APPID, COINGECKO_APIKEY, .
🔐 secretSUPABASE_KEY
configSUPABASE_URL
configSWEEP_MAX_RETRIES
configSWEEP_POLL_INTERVAL_MS
🔐 secretVOULTI_TELEGRAM_BOT_TOKEN
configVOULTI_TELEGRAM_CHAT_ID
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 1 concrete improvement we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/csacanam-voulti-o10c1f)](https://m8ven.ai/mcp/csacanam-voulti-o10c1f)
commit: 97f80f9e7b6f9cc8cd5f33232d91f1359f06fe13
code hash: ee3980ca2a104de77d720d208ea89e4f0c02014b5b552b2853690e031649cfee
verified: 7/13/2026, 9:55:11 AM
view raw JSON →