C-

npm:mcp-server-insumer

Item: npm:mcp-server-insumer
Rating: 72
Author: wmcp.sh

https://www.npmjs.com/package/mcp-server-insumer

72/100 · MCP Trust Grade · checked 3h ago · MCP 1.10.4

What it offers — 27 tools · Database

insumer_jwks

Get the JWKS (JSON Web Key Set) containing InsumerAPI

insumer_setup

Generate a free InsumerAPI key instantly. No credit card required. Returns an API key (insr_live_...) with 10 verification credits and 100 calls/day.

insumer_attest

Create on-chain verification (attestation). Verify 1-10 conditions (token balances, NFT ownership, EAS attestations, Farcaster identity, supply/amount

insumer_compliance_templates

List available compliance templates for EAS attestation verification. Templates provide pre-configured schema IDs, attester addresses, and decoder con

insumer_wallet_trust

Generate a structured, ECDSA-signed wallet trust fact profile. Send an EVM wallet address and get 44 base checks across 25 chains in 5 dimensions: sta

insumer_batch_wallet_trust

Generate wallet trust fact profiles for up to 10 wallets in a single request. Shared block fetches make this 5-8x faster than sequential calls. Each w

insumer_verify

Create signed discount code (INSR-XXXXX, 30-min expiry) for a wallet at a merchant. Returns tier and discount percentage — never raw balance amounts.

insumer_list_merchants

Browse merchants in the public directory. Filter by accepted token, verification status. Returns company name, website, tokens accepted, and discount

insumer_get_merchant

Get full public merchant profile including token tiers, NFT collections, discount mode, and verification status.

insumer_list_tokens

List all registered tokens and NFT collections in the Insumer registry. Filter by chain, symbol, or asset type.

insumer_check_discount

Calculate discount for a wallet at a merchant. Checks on-chain balances and returns tier and discount percentage per token — never raw balance amounts

insumer_credits

Check verification credit balance, tier (free/pro/enterprise), and daily rate limit for the current API key.

insumer_buy_key

Buy a new API key with USDC, USDT, BTC, or USDT-TRC20 (no auth required). Agent-friendly: no email needed. Send USDC/USDT to EVM wallet 0xAd982CB19aCC

insumer_buy_credits

Buy verification credits with USDC, USDT, BTC, or USDT-TRC20. Volume discounts: $5–$99 = $0.04/call (25 credits/$1), $100–$499 = $0.03 (33/$1, 25% off

insumer_confirm_payment

Confirm stablecoin payment for a discount code. After calling insumer_verify, confirm that the USDC/USDT payment was made on-chain. The server verifie

insumer_create_merchant

Create a new merchant. Receives 100 free verification credits. The API key that creates the merchant owns it. Max 10 merchants per API key.

insumer_merchant_status

Get full private merchant details: credits, token configs, NFT collections, directory status, verification status, payment settings. Owner only.

insumer_configure_tokens

Configure merchant token discount tiers. Set own token and/or partner tokens. Max 8 tokens total. Owner only.

+9 more tools

Spec / packaging20%100

✓ depends on an MCP SDK
✓ declares a bin entry (runnable server)
✓ 27 tool(s) detected in source

Security (OWASP MCP)30%25

⚠ references sensitive file paths / env secrets
scanned 1 source file

Maintenance / popularity20%100

published within 90 days
59 published versions

Tool hygiene15%70

no TypeScript types
2 runtime deps

Transparency / provenance15%90

✓ public repository linked
✓ MIT license
573 weekly downloads

Findings

WARNMCP08 References sensitive file paths / environment secrets.

INFO Static analysis of npm package mcp-server-insumer@1.10.4 (stdio server — no remote endpoint). Reliability/behavioral signals require running it; not measured.

Grade another server

We re-grade npm:mcp-server-insumer on a schedule and alert your Slack/webhook the moment its tools change or its grade drops — rug-pull insurance for the connection.

Share this report card

A 1200×630 card with the grade + audit — drop it in a post, Slack, or your repo.

MCP Trust report card — npm:mcp-server-insumer grade C-

Share on X Open card image

https://wmcp.sh/mcp/grade/npm%3Amcp-server-insumer

Embed this grade

A live badge — it re-verifies itself and shows current stability. Static scorecards can't. Paste it in your README or site to show users you're independently audited.

Markdown (for your README)

[![MCP Trust Grade C-](https://wmcp.sh/mcp/grade/npm%3Amcp-server-insumer/badge.svg)](https://wmcp.sh/mcp/grade/npm%3Amcp-server-insumer)

HTML

<a href="https://wmcp.sh/mcp/grade/npm%3Amcp-server-insumer"><img src="https://wmcp.sh/mcp/grade/npm%3Amcp-server-insumer/badge.svg" alt="MCP Trust Grade C- · wmcp.sh"></a>

Agents: check this before connecting

Add the wmcp.sh trust oracle as an MCP server and call grade_mcp_server / check_mcp_drift in your agent's pre-connection gate:

https://wmcp.sh/mcp/trust

How this grade is computed. An open, independent rubric — Spec conformance (20%), Security mapped to the OWASP MCP Top 10 (30%), Reliability (20%), Tool hygiene (15%), Transparency (15%) — run by connecting to the server and inspecting its real MCP surface. The grade is free and identical whether or not the operator pays. v1 uses static + spec signals from a single connection; continuous uptime, real latency, and annotation-truthing (declared readOnly vs observed behavior) layer on via the wmcp.sh proxy.