l402-kit-mcp

MCP server for l402-kit — enables AI agents (Claude, Cursor, etc.) to autonomously pay Bitcoin Lightning-protected APIs. Tools: l402_fetch, l402_balance, l402_spending_report. Run with: npx l402-kit-mcp

→ ShinyDapps/l402-kit · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

🚨

Secret credentials may flow to a network call

3 flows detected: DASHBOARD_SECRET. We can’t prove the destination matches the brand the credential belongs to.

⚠️

Tests do not pass

Either the test suite is broken or the code regressed. Either way the published behaviour can’t be verified by the publisher’s own tests.

🔐

You'll be asked for 8 credentials: ALBY_TOKEN, ANTHROPIC_API_KEY, BLINK_API_KEY, DASHBOARD_SECRET, RESEND_API_KEY, SERPER_API_KEY, SUPABASE_ANON_KEY, SUPABASE_SERVICE_KEY

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configALBY_HUB_URL

🔐 secretALBY_TOKEN— wallet: buildWallet(process.env), // auto-detects BLINK_API_KEY or

🔐 secretANTHROPIC_API_KEY

🔐 secretBLINK_API_KEY— wallet: buildWallet(process.env), // auto-detects or ALBY_TOKEN

configBLINK_WALLET_ID— const provider = new BlinkProvider(process.env.BLINK_API_KEY!, process.env.!);

configBUDGET_SATS— Budget limit: {} sats per session. Never exceed this limit.

🔐 secretDASHBOARD_SECRET

configGITHUB_PAT

configINTEGRATION

configOWNER_PUBKEY

🔐 secretRESEND_API_KEY

🔐 secretSERPER_API_KEY

configSHINYDAPPS_API_URL

🔐 secretSUPABASE_ANON_KEY

🔐 secretSUPABASE_SERVICE_KEY

configSUPABASE_URL

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 5 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/shinydapps-l402-kit-ezgnmo)](https://m8ven.ai/mcp/shinydapps-l402-kit-ezgnmo)

commit: a9a216105e240a42b1cfae9147f491b2e5e9b0e1

code hash: 51110aeed7340c9f274bc2202f3b346341ab19e177c8b5ca64ed53101227ff3d

verified: 6/9/2026, 11:44:07 AM

view raw JSON →