C

npm:@clicks-protocol/mcp-server

https://www.npmjs.com/package/@clicks-protocol/mcp-server
75/100 · MCP Trust Grade · checked 12d ago · MCP 0.3.2

Is the npm:@clicks-protocol/mcp-server MCP server safe to use?

Independent trust grade C (75/100). References sensitive file paths / environment secrets. wmcp.sh continuously watches npm:@clicks-protocol/mcp-server for tool drift and rug-pulls. The grade is free and identical whether or not the operator pays.

What it offers — 11 tools · Finance & Crypto

clicks_get_agent_info

Inspect an agent settlement account. Returns registration status, operator, deposited USDC, settlement split, and wallet balance.

clicks_simulate_split

Preview how an incoming USDC revenue event will be split between liquid operations and routed treasury capital.

clicks_get_yield_info

Inspect the treasury routing layer. Returns active yield route, Aave and Morpho rates, total routed balance, deposits, and protocol fees.

clicks_get_referral_stats

Inspect explicit referral attribution for an agent. Returns direct referrals, claimable rewards, referral chain, and team bonus.

clicks_quick_start

Execute initial settlement setup in one command. Registers agent, approves USDC, and routes the first payment. Referral attribution remains a separate

clicks_register_referral

Register referral attribution as an explicit separate step. Requires an agent-signed approval and an authorized caller.

clicks_receive_payment

Route an incoming USDC revenue event through Clicks settlement policy. Splits liquidity and treasury routing according to the agent configuration.

clicks_withdraw_yield

Withdraw routed treasury capital and any earned yield back to the agent wallet. No lockups.

clicks_register_agent

Register an AI agent for Clicks settlement routing. Required before the first routed payment.

clicks_set_yield_pct

Set the treasury routing percentage for future settlement events. Controls how much stays liquid vs routes to yield.

clicks_explain

Explain Clicks Protocol to another agent or developer. Returns a concise self-contained summary with integration instructions and links. Use when anot

Spec / packaging20%100
Security (OWASP MCP)30%25
Maintenance / popularity20%100
Tool hygiene15%95
Transparency / provenance15%90

Findings

WARNMCP08 References sensitive file paths / environment secrets.
INFO Static analysis of npm package @clicks-protocol/mcp-server@0.3.2 (stdio server — no remote endpoint). Reliability/behavioral signals require running it; not measured.
Grade another server

We re-grade npm:@clicks-protocol/mcp-server on a schedule and alert your Slack/webhook the moment its tools change or its grade drops — rug-pull insurance for the connection.

Share this report card

A 1200×630 card with the grade + audit — drop it in a post, Slack, or your repo.

MCP Trust report card — npm:@clicks-protocol/mcp-server grade C
Share on X Open card image

Embed this grade

A live badge — it re-verifies itself and shows current stability. Static scorecards can't. Paste it in your README or site to show users you're independently audited.

MCP Trust Grade C · wmcp.sh
[![MCP Trust Grade C](https://wmcp.sh/mcp/grade/npm%3A%40clicks-protocol%2Fmcp-server/badge.svg)](https://wmcp.sh/mcp/grade/npm%3A%40clicks-protocol%2Fmcp-server)
<a href="https://wmcp.sh/mcp/grade/npm%3A%40clicks-protocol%2Fmcp-server"><img src="https://wmcp.sh/mcp/grade/npm%3A%40clicks-protocol%2Fmcp-server/badge.svg" alt="MCP Trust Grade C · wmcp.sh"></a>

Agents: check this before connecting

Add the wmcp.sh trust oracle as an MCP server and call grade_mcp_server / check_mcp_drift in your agent's pre-connection gate:

https://wmcp.sh/mcp/trust
How this grade is computed. An open, independent rubric — Spec conformance (20%), Security mapped to the OWASP MCP Top 10 (30%), Reliability (20%), Tool hygiene (15%), Transparency (15%) — run by connecting to the server and inspecting its real MCP surface. The grade is free and identical whether or not the operator pays. v1 uses static + spec signals from a single connection; continuous uptime, real latency, and annotation-truthing (declared readOnly vs observed behavior) layer on via the wmcp.sh proxy.