← Back to search

@delegare/mcp-tools

delegare Scanned 11d ago

MCP tool registration for Delegare agent payment delegation

npm ↗
B
75.2 / 100

Versions

0.4.3latest
May 29, 2026
0.4.2
May 28, 2026
0.4.1
May 8, 2026
0.4.0
Apr 19, 2026
0.2.2
Apr 9, 2026
+ show 3 moreshow less
0.2.1
Apr 8, 2026
0.2.0
Apr 8, 2026
0.1.0
Mar 25, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 6

setup_spending_mandate
annotations: verified low

Initiate the one-time browser setup flow so the user can connect their payment method and set spending limits. Returns a URL the user must visit. Returns sessionToken for polling.

readOnlyHint false openWorldHint true idempotentHint false destructiveHint false
poll_setup_session
annotations: verified low

Check whether the user has completed the payment setup flow. Call this after presenting the setup URL. Returns the intentMandate once complete — store it in agent context for future payments.

readOnlyHint true openWorldHint true idempotentHint true destructiveHint false
check_mandate_balance
annotations: verified low

Check remaining monthly budget and masked payment methods for a spending mandate. Never returns card numbers or wallet seeds — only masked summaries.

readOnlyHint true openWorldHint true idempotentHint true destructiveHint false
authorize_agent_payment
annotations: verified low

Execute a payment through the Delegare vault using AP2. The agent presents its Intent Mandate (SD-JWT-VC). Spending limits are enforced server-side. IMPORTANT: amountCents is in US cents — divide by 100 for the dollar amount (e.g. amountCents=50 means $0.50, NOT 50 dollars or 50 USDC).

readOnlyHint false openWorldHint true idempotentHint false destructiveHint false
delegare_fetch
annotations: verified low

Fetch a URL. If the resource requires payment via x402, this tool will automatically use the provided spending mandate to authorize the payment and retrieve the data. Supports both GET and POST.

readOnlyHint false openWorldHint true idempotentHint false destructiveHint false
revoke_mandate
annotations: verified low

Immediately revoke a spending mandate. After revocation, no further charges can be made with this intentMandate. The user can create a new mandate at any time.

readOnlyHint false openWorldHint true idempotentHint true destructiveHint true

Permissions 3

network medium
Server uses network capabilities via: fetch(), httpx
filesystem low
Server uses filesystem capabilities via: os
env_vars low
Server uses env_vars capabilities via: os.environ, process.env

Scan Findings 75

info
Tool 'setup_spending_mandate' annotations are consistent annotation_checker · 80%
info
Tool 'poll_setup_session' annotations are consistent annotation_checker · 80%
info
Tool 'check_mandate_balance' annotations are consistent annotation_checker · 80%
info
Tool 'authorize_agent_payment' annotations are consistent annotation_checker · 80%
info
Tool 'delegare_fetch' annotations are consistent annotation_checker · 80%
info
Tool 'revoke_mandate' annotations are consistent annotation_checker · 80%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Suspicious package name: react-dom dependency_analyzer · 60%
medium
Vulnerable dependency: next@16.2.6 (GHSA-4633-3j49-mh5q) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.6 (GHSA-4c39-4ccg-62r3) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.6 (GHSA-68g3-v927-f742) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.6 (GHSA-6gpp-xcg3-4w24) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.6 (GHSA-89xv-2m56-2m9x) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.6 (GHSA-955p-x3mx-jcvp) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.6 (GHSA-m99w-x7hq-7vfj) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.6 (GHSA-p9j2-gv94-2wf4) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.6 (GHSA-q8wf-6r8g-63ch) dependency_analyzer · 95%
medium
Vulnerable dependency: express@4.19.2 (GHSA-qw6h-vgh9-j6wx) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.0.0 (GHSA-w48q-cv73-mx4w) dependency_analyzer · 95%
medium
Vulnerable dependency: esbuild@0.28.0 (GHSA-g7r4-m6w7-qqqr) dependency_analyzer · 95%
medium
Vulnerable dependency: httpx@0.27.0,<1.0.0 (GHSA-h8pj-cxx2-jfg2) dependency_analyzer · 95%
medium
Vulnerable dependency: httpx@0.27.0,<1.0.0 (PYSEC-2022-183) dependency_analyzer · 95%
medium
Vulnerable dependency: pydantic@2.7.0,<3.0.0 (GHSA-5jqp-qgf6-3pvh) dependency_analyzer · 95%
medium
Vulnerable dependency: pydantic@2.7.0,<3.0.0 (GHSA-mr82-8j83-vxmv) dependency_analyzer · 95%
medium
Vulnerable dependency: pydantic@2.7.0,<3.0.0 (PYSEC-2021-47) dependency_analyzer · 95%
medium
Vulnerable dependency: pydantic@2.7.0,<3.0.0 (PYSEC-2026-1812) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@0.3.0,<0.5.0 (GHSA-2g6r-c272-w58r) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@0.3.0,<0.5.0 (GHSA-6qv9-48xg-fc7f) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@0.3.0,<0.5.0 (GHSA-926x-3r5x-gfhw) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@0.3.0,<0.5.0 (GHSA-c67j-w6g6-q2cm) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@0.3.0,<0.5.0 (GHSA-h59x-p739-982c) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@0.3.0,<0.5.0 (GHSA-pjwx-r37v-7724) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@0.3.0,<0.5.0 (GHSA-q84m-rmw3-4382) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@0.3.0,<0.5.0 (GHSA-qh6h-p6c9-ff54) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@0.3.0,<0.5.0 (PYSEC-2024-45) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@0.3.0,<0.5.0 (PYSEC-2026-1518) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@0.3.0,<0.5.0 (PYSEC-2026-1519) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@0.3.0,<0.5.0 (PYSEC-2026-2193) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@0.3.0,<0.5.0 (PYSEC-2026-2562) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@0.3.0,<0.5.0 (PYSEC-2026-2563) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@0.3.0,<0.5.0 (PYSEC-2026-2564) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@0.3.0,<0.5.0 (PYSEC-2026-373) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0,<2.0.0 (GHSA-3qhf-m339-9g5v) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0,<2.0.0 (GHSA-9h52-p55h-vw2f) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0,<2.0.0 (GHSA-j975-95f5-7wqh) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0,<2.0.0 (GHSA-jpw9-pfvf-9f58) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0,<2.0.0 (GHSA-vj7q-gjh5-988w) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0,<2.0.0 (PYSEC-2026-1616) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0,<2.0.0 (PYSEC-2026-1617) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0,<2.0.0 (PYSEC-2026-1618) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0,<2.0.0 (PYSEC-2026-3482) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0,<2.0.0 (PYSEC-2026-3483) dependency_analyzer · 95%
medium
Buffer.from base64 in delegare-delegare-c0d7993/packages/x402/src/middleware.ts:301 entropy_analyzer · 75%
medium
Buffer.from base64 in delegare-delegare-c0d7993/packages/x402/src/middleware.ts:327 entropy_analyzer · 75%
medium
Buffer.from base64 in delegare-delegare-c0d7993/packages/x402/src/middleware.ts:392 entropy_analyzer · 75%
medium
Buffer.from base64 in delegare-delegare-c0d7993/packages/x402/src/middleware.ts:437 entropy_analyzer · 75%
medium
Buffer.from base64 in delegare-delegare-c0d7993/packages/sdk/src/client.ts:245 entropy_analyzer · 75%
medium
Buffer.from base64 in delegare-delegare-c0d7993/packages/mcp-tools/src/tools.ts:339 entropy_analyzer · 75%
info
package.json metadata manifest_parser · 100%
info
pyproject.toml metadata manifest_parser · 100%
info
Tool: setup_spending_mandate manifest_parser · 85%
info
Tool: poll_setup_session manifest_parser · 85%
info
Tool: check_mandate_balance manifest_parser · 85%
info
Tool: authorize_agent_payment manifest_parser · 85%
info
Tool: delegare_fetch manifest_parser · 85%
info
Tool: revoke_mandate manifest_parser · 85%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (19) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 90%
low
Permission: filesystem access detected permission_analyzer · 70%
low
Permission: env_vars access detected permission_analyzer · 90%
critical
Tool poisoning in 'poll_setup_session': Cross-tool sequencing directive poisoning · 85%
info
SBOM generated: 55 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%