ATXPBLOCK
Give your AI agent a wallet, email, phone number, and instant access to paid MCP tools — web search, image/video/music gen, X search, SMS, voice calls, code execution, and more. Works with Gemini CLI, Claude, and any MCP client.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
Give your AI agent a wallet, email, phone number, and instant access to paid MCP tools — web search, image/video/music generation, X/Twitter search, SMS, voice calls, code execution, file storage, and more.
ATXP (Agent Transaction Protocol) lets AI agents pay for their own tools and services without managing API keys. Self-register in one command, pay per use. Works with any MCP client.
Install
Gemini CLI
gemini extensions install https://github.com/atxp-dev/atxp
After installing, start a new Gemini CLI session for the extension tools to load.
Claude Desktop / Cursor / Windsurf
Add to your MCP client config (e.g. claude_desktop_config.json):
{
"mcpServers": {
"atxp": {
"command": "npx",
"args": ["-y", "atxp@latest"]
}
}
}Any MCP Client
npx atxp@latest
ATXP runs as a standard MCP server over stdio. Point any MCP-compatible client at the command above.
Setup
Option 1: Agent self-registration (recommended)
No browser, no human login needed. Just ask your agent:
Register me on ATXP so I can use paid tools
The agent calls the atxp_register tool, which creates an account instantly with:
- 10 IOU tokens to start
- A unique email address
- An Ethereum wallet
- A connection string (saved automatically)
No settings to configure — the agent is ready to use all tools immediately.
Option 2: Use an existing ATXP account
If you already have an ATXP account from accounts.atxp.ai, set the ATXP_CONNECTION environment variable to your connection string, or pass it to the CLI:
ATXP_CONNECTION="https://accounts.atxp.ai?connection_token=&account_id=" npx atxp@latest
For Gemini CLI, enter the token and account ID when prompted during extension setup.
Available Tools
Core Tools (41 tools, always available)
f0baa591ae22OBSERVED · 2026-10-08Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add atxp --env ATXP_CONNECTION=${ATXP_CONNECTION} -- npx -y [email protected]Exposed tools (41)
33 read · 6 write · 2 destructive. Blast radius: 2 tools can delete or overwrite — an agent that can be talked into calling a tool can be talked into calling this one.
| Tool | Risk | Description |
|---|---|---|
atxp_agent_create | write | Create a new agent account under the logged-in human developer. Requires prior login. |
atxp_agent_list | read | List all agents created by the logged-in account. |
atxp_balance | read | Check ATXP account balance across all chains. Free to call. |
atxp_contacts_add | write | Add a new contact to the local contacts database. Free to call. |
atxp_contacts_edit | write | Update a contact |
atxp_contacts_list | read | List all contacts. Free to call. |
atxp_contacts_pull | read | Restore contacts from the ATXP server. Free to call. |
atxp_contacts_push | write | Back up local contacts to the ATXP server. Free to call. |
atxp_contacts_remove | destructive | Delete a contact by ID. Free to call. |
atxp_contacts_search | read | Search contacts by name, phone, or email. Case-insensitive. Free to call. |
atxp_contacts_show | read | Show full details for a contact by ID. Free to call. |
atxp_email_claim_username | read | Claim a human-readable email username (e.g., [email protected]). Costs $1.00. |
atxp_email_delete | destructive | Delete an email message by ID. Free to call. |
atxp_email_get_attachment | read | Download an email attachment by message ID and attachment index. Free to call. |
atxp_email_inbox | read | Check the agent |
atxp_email_read | read | Read a specific email message by ID. Free to call. |
atxp_email_release_username | read | Release your claimed email username. Free to call. |
atxp_email_reply | read | Reply to an email by message ID. Costs $0.01 per reply. |
atxp_email_search | read | Search emails by subject or sender. Free to call. |
atxp_email_send | write | Send an email from the agent |
atxp_fund | read | Show all funding options: crypto deposit addresses (USDC on Base, Solana) and a shareable Stripe payment link. Use --amount to request a specific payment link amount. Free to call. |
atxp_image | read | Generate an AI image from a text prompt. Returns an image URL. Paid per use. |
atxp_login | read | Authenticate with an ATXP connection string. Saves credentials to ~/.atxp/config. |
atxp_music | read | Generate AI music from a text prompt. Returns a music URL. Paid per use. |
atxp_phone_call | read | Make an AI-powered voice call. Costs $0.10 per call. |
atxp_phone_calls | read | Check call history. Free to call. |
atxp_phone_configure_voice | read | Configure the AI voice agent for inbound/outbound calls. Free to call. |
atxp_phone_get_attachment | read | Download an MMS attachment by message ID and index. Free to call. |
atxp_phone_read_call | read | Read a call transcript and summary by call ID. Free to call. |
atxp_phone_read_sms | read | Read a specific SMS message by ID. Free to call. |
atxp_phone_register | read | Register a phone number for SMS and voice calls. Costs $2.00. |
atxp_phone_release | read | Release your registered phone number. Free to call. |
atxp_phone_search | read | Search SMS messages and call history. Free to call. |
atxp_phone_send_sms | write | Send an SMS message. Costs $0.05. Optionally attach media for MMS. |
atxp_phone_sms | read | Check SMS inbox. Free to call. |
atxp_register | read | Self-register as a new ATXP agent. Creates an account instantly with a wallet, email, 10 IOU tokens, and a connection string. No human login needed. |
atxp_search | read | Real-time web search. Returns current results from the web. Paid per use. |
atxp_transactions | read | View recent transaction history. Free to call. |
atxp_video | read | Generate an AI video from a text prompt. Returns a video URL. Paid per use. |
atxp_whoami | read | Show account info: ID, type, email, wallet address, owner. |
atxp_x_search | read | Search X/Twitter for live posts and discussions. Paid per use. |
Trust audit
BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | FAIL |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | WARN |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (1 observation(s))
- Network
- none-observed
- Shell
- declared (4 observation(s))
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (7)
const makeValidate = new Function(`${names_1.default.self}`, `${names_1.default.scope}`, sourceCode);atxp_contacts_remove, atxp_email_delete
const decoded = JSON.parse(atob(base642));
atob(data);
const parsedHeader = JSON.parse(atob(header));
atob(val);
@modelcontextprotocol/sdk, zod, @types/node, esbuild, typescript
Gates applied: no_behavioural_pass.
f0baa591ae22full audit observations/trust-audit/mcp-server/atxp-dev__atxp.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-08 | f0baa591ae22 | BLOCK | D | 69 | first audit |
Questions
What is the ATXP MCP server?
Give your AI agent a wallet, email, phone number, and instant access to paid MCP tools — web search, image/video/music gen, X search, SMS, voice calls, code execution, and more. Works with Gemini CLI, Claude, and any MCP client.
What tools does ATXP expose?
41 in total: 33 read-only, 6 that write, and 2 that can delete or overwrite (atxp_contacts_remove, atxp_email_delete). Every one is listed on this page with its risk.
Is ATXP safe to connect to an agent?
No — not without reading the findings first. The audit graded it D (69/100) and found 1 critical or high issue in the source. Each one is listed on this page with the file and line it is on. Separately from the audit: 2 of its tools can destroy data, so scope the token you give it to what you actually need.
What credentials does ATXP need?
It reads ATXP_CONNECTION from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does ATXP run?
It speaks stdio, so it runs as a local process your client starts. It is published on npm as @atxp/gemini-cli-extension at 1.0.0.
How current is this page?
The grade is for one exact copy of the source (f0baa591ae22), read on 2026-10-08. The repository is watched and re-audited when it changes.