ColdRead MCP
An independent, signed pre-payment trust report for x402 sellers. It performs read-only checks on endpoint validity, signed offers, ERC-8004 identity matching, and payer history on Base, returning an Ed25519-signed report without handling payments.
Endpoint and access
No sign-in to connect and list tools. Individual tools may still need a vendor account, credentials, or permissions; check the documented prerequisites.
https://coldread.something-agent.workers.dev/mcpWhat you can do with it
- Check x402 seller endpoint validity before payment
- Verify signed offer signatures and domain binding
- Match host ERC-8004 identity to payTo address
- Analyze payer mix and self-payment labels
Source and maintenance
- Maintenance checked
Protocol and capabilities
- Server
- coldread 0.1.6
- MCP protocol
- 2025-06-18
- Tools
- 3 advertised
- Resources
- Not advertised
- Resource templates
- Not advertised
- Prompts
- Not advertised
{
"tools": {
"listChanged": false
}
}Server-provided instructions
Untrusted server output shown for inspection. It is not Koskamo guidance and is excluded from knowledge search.
Tools
3 advertised
coldread_check — ColdRead check
Before paying an x402 seller: one signed, independent report combining a 402-challenge lint, signed-offer and signer-authorization checks, an ERC-8004 identity lookup and a labelled Base USDC payer summary over the last ~28 h. Read-only; never pays. Free.
{
"type": "object",
"required": [
"url"
],
"properties": {
"url": {
"type": "string",
"description": "The x402 endpoint URL"
},
"agent": {
"type": "object",
"required": [
"agent_id"
],
"properties": {
"agent_id": {
"type": "string"
},
"chain_id": {
"type": "integer"
}
},
"description": "Optional ERC-8004 agent to check against the host"
},
"method": {
"enum": [
"auto",
"GET",
"POST"
],
"type": "string",
"description": "Default auto (tries both)"
},
"pay_to": {
"type": "string",
"description": "Optional payTo you expect; a mismatch is a red flag"
}
}
}{
"readOnlyHint": true,
"openWorldHint": true
}coldread_get_report — Fetch a stored ColdRead report
Fetch a stored signed report by its sha256 digest (reports are kept 90 days).
{
"type": "object",
"required": [
"digest"
],
"properties": {
"digest": {
"type": "string"
}
}
}{
"readOnlyHint": true
}coldread_verify_report — Verify a ColdRead report
Check that a ColdRead report envelope is unmodified (JCS + sha256) and signed by a published ColdRead key. Pass the whole envelope {report, digest, signature}.
{
"type": "object",
"required": [
"envelope"
],
"properties": {
"envelope": {
"type": "object"
}
}
}{
"readOnlyHint": true
}Prompts
Not advertised
Resources
Not advertised
30-day availability
Aggregated from read-only remote checks; this is not a tool-execution or security guarantee.
- Successful checks
- 1 of 1 (100%)
- Average latency
- 244 ms
- 95th percentile latency
- 244 ms
Maintenance history
Public check and source-refresh events. Editorial and ownership records remain private.
- · probe · passed · 244 ms · metadata changed · 3 tool(s)
Connect from your client
Each snippet registers the same endpoint; pick the client you use.
Claude Code
claude mcp add --transport http coldread-mcp https://coldread.something-agent.workers.dev/mcpCodex
codex mcp add coldread-mcp --url https://coldread.something-agent.workers.dev/mcpCursor
{
"mcpServers": {
"coldread-mcp": {
"url": "https://coldread.something-agent.workers.dev/mcp"
}
}
}Cline
{
"mcpServers": {
"coldread-mcp": {
"type": "streamableHttp",
"url": "https://coldread.something-agent.workers.dev/mcp",
"disabled": false
}
}
}VS Code
{
"servers": {
"coldread-mcp": {
"type": "http",
"url": "https://coldread.something-agent.workers.dev/mcp"
}
}
}Gemini CLI
gemini mcp add --transport http coldread-mcp https://coldread.something-agent.workers.dev/mcpClaude Desktop
{
"mcpServers": {
"coldread-mcp": {
"url": "https://coldread.something-agent.workers.dev/mcp"
}
}
}Windsurf
{
"mcpServers": {
"coldread-mcp": {
"serverUrl": "https://coldread.something-agent.workers.dev/mcp"
}
}
}Let your agent find its tools
Find servers like ColdRead MCP from your agent. Add Koskamo once to search the index for endpoints, access requirements, and client setup. Public discovery needs no key.