Koskamo

GhostKey MCP

Remote MCP server for compliant pay-per-use agent capabilities with x402 execution, allowing agents to discover paid APIs and inspect payment requirements through a settlement gate.

Endpoint and access

No sign-in to connect and list tools. Individual tools may still need a vendor account, credentials, or permissions; check the documented prerequisites.

GhostKey MCP logo, by Script Master LabsVendor evidenceStreamable HTTPNo sign-inEndpoint checked 2026-11-01Operated by Script Master Labs
MCP endpoint (Streamable HTTP)
https://ghostkey-mcp.onrender.com/mcp
Vendor documentation

What you can do with it

  • Discover x402 paid APIs
  • Inspect fresh payment requirements
  • Settle payments via x402 v2

Source and maintenance

Vendor evidenceRegistry 1.2.0
mcp-registry: com.scriptmasterlabs/ghostkey@1.2.0Source repositoryProject website
Maintenance checked

Protocol and capabilities

Server
ghostkey 0.3.1
MCP protocol
2025-06-18
Tools
10 advertised
Resources
Not advertised
Resource templates
Not advertised
Prompts
Not advertised
Server-advertised capabilities
{
  "tools": {
    "listChanged": true
  }
}

Tools

10 advertised

ghostkey_status
Advertised by the server during the last successful anonymous check.
Advertised read-onlyOpen-world

Report GhostKey server status and check whether configured ScriptMasterLabs authorities are reachable. Unknown stays unknown; no health result is fabricated.

ghostkey_status input schema
{
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "properties": {}
}
ghostkey_status annotations
{
  "title": "GhostKey Status",
  "readOnlyHint": true,
  "openWorldHint": true,
  "idempotentHint": true,
  "destructiveHint": false
}
ghostkey_catalog
Advertised by the server during the last successful anonymous check.
Advertised read-onlyOpen-world

List the capabilities actually exposed by this GhostKey MCP server and identify staged families without pretending they are callable.

ghostkey_catalog input schema
{
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "properties": {}
}
ghostkey_catalog annotations
{
  "title": "GhostKey Catalog",
  "readOnlyHint": true,
  "openWorldHint": true,
  "idempotentHint": true,
  "destructiveHint": false
}
ghostkey_quote
Advertised by the server during the last successful anonymous check.
Advertised read-onlyOpen-world

Explain how to obtain authoritative pricing for a GhostKey/SML paid capability. Pricing and settlement destination come from the fresh live HTTP 402 challenge, never a copied wallet or stale fixed price.

ghostkey_quote input schema
{
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "properties": {
    "capability": {
      "type": "string",
      "minLength": 1
    }
  },
  "additionalProperties": false
}
ghostkey_quote annotations
{
  "title": "GhostKey Quote",
  "readOnlyHint": true,
  "openWorldHint": true,
  "idempotentHint": true,
  "destructiveHint": false
}
ghostkey_policy
Advertised by the server during the last successful anonymous check.
Advertised read-onlyOpen-world

Return GhostKey's operating, payment, upstream-rights, browser-session, and trusted-device policy for autonomous agents.

ghostkey_policy input schema
{
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "properties": {}
}
ghostkey_policy annotations
{
  "title": "GhostKey Policy",
  "readOnlyHint": true,
  "openWorldHint": true,
  "idempotentHint": true,
  "destructiveHint": false
}
ghostkey_device_pairing_create
Advertised by the server during the last successful anonymous check.
Open-world

Create a one-time trusted-device enrollment capability. Requires GhostKey persistent trusted-device storage to be configured. The browser generates its own non-exportable P-256 private key; only the public key is uploaded.

ghostkey_device_pairing_create input schema
{
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "properties": {
    "label": {
      "type": "string",
      "maxLength": 80,
      "minLength": 1
    }
  },
  "additionalProperties": false
}
ghostkey_device_pairing_create annotations
{
  "title": "GhostKey Device Pairing Create",
  "readOnlyHint": false,
  "openWorldHint": true,
  "idempotentHint": false,
  "destructiveHint": false
}
ghostkey_device_pairing_status
Advertised by the server during the last successful anonymous check.
Advertised read-onlyOpen-world

Resolve a one-time trusted-device pairing after the browser has enrolled. Requires the original pairing ID and pairing code and is available only until that pairing capability expires.

ghostkey_device_pairing_status input schema
{
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "pairing_id",
    "pairing_code"
  ],
  "properties": {
    "pairing_id": {
      "type": "string",
      "format": "uuid"
    },
    "pairing_code": {
      "type": "string",
      "maxLength": 200,
      "minLength": 20
    }
  },
  "additionalProperties": false
}
ghostkey_device_pairing_status annotations
{
  "title": "GhostKey Device Pairing Status",
  "readOnlyHint": true,
  "openWorldHint": true,
  "idempotentHint": true,
  "destructiveHint": false
}
ghostkey_session_create
Advertised by the server during the last successful anonymous check.
Open-world

PAID tool ($0.10 USDC via x402 v2, Base). Create a short-lived, origin-scoped browser delegation session. Send the x402 PAYMENT-SIGNATURE header on the /mcp request; without payment the call returns the live x402 challenge (HTTP 402, amount 100000 = $0.10 USDC, network eip155:8453). Actions inside a minted session are unmetered. Optionally target a previously enrolled trusted device using its private 256-bit routing capability so its extension can claim the session automatically. The user still handles login/CAPTCHA and any new browser-origin permission themselves.

ghostkey_session_create input schema
{
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "allowed_origins"
  ],
  "properties": {
    "ttl_seconds": {
      "type": "integer",
      "maximum": 3600,
      "minimum": 60
    },
    "allowed_origins": {
      "type": "array",
      "items": {
        "type": "string",
        "format": "uri"
      },
      "maxItems": 12,
      "minItems": 1
    },
    "trusted_device_id": {
      "type": "string",
      "pattern": "^[A-Za-z0-9_-]{43}$"
    }
  },
  "additionalProperties": false
}
ghostkey_session_create annotations
{
  "title": "GhostKey Session Create",
  "readOnlyHint": false,
  "openWorldHint": true,
  "idempotentHint": false,
  "destructiveHint": false
}
ghostkey_session_status
Advertised by the server during the last successful anonymous check.
Advertised read-onlyOpen-world

Check whether a scoped GhostKey browser session is alive and whether its user-controlled browser bridge has a fresh heartbeat.

ghostkey_session_status input schema
{
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "session_id",
    "agent_token"
  ],
  "properties": {
    "session_id": {
      "type": "string",
      "format": "uuid"
    },
    "agent_token": {
      "type": "string",
      "minLength": 20
    }
  },
  "additionalProperties": false
}
ghostkey_session_status annotations
{
  "title": "GhostKey Session Status",
  "readOnlyHint": true,
  "openWorldHint": true,
  "idempotentHint": true,
  "destructiveHint": false
}
ghostkey_session_action
Advertised by the server during the last successful anonymous check.
Advertised destructiveOpen-world

Relay one authorized browser action into the user's already-authenticated browser. Actions: navigate, inspect, click, input, select, read, wait. Password/hidden fields and off-allowlist navigation are denied. API and bridge documentation: https://ghostkey-mcp.onrender.com/session-bridge/README.txt.

ghostkey_session_action input schema
{
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "session_id",
    "agent_token",
    "action"
  ],
  "properties": {
    "url": {
      "type": "string",
      "format": "uri"
    },
    "text": {
      "type": "string",
      "maxLength": 4000
    },
    "action": {
      "enum": [
        "navigate",
        "inspect",
        "click",
        "input",
        "select",
        "read",
        "wait"
      ],
      "type": "string"
    },
    "selector": {
      "type": "string",
      "maxLength": 500,
      "minLength": 1
    },
    "attribute": {
      "type": "string",
      "maxLength": 100
    },
    "session_id": {
      "type": "string",
      "format": "uuid"
    },
    "timeout_ms": {
      "type": "integer",
      "maximum": 30000,
      "minimum": 1000
    },
    "agent_token": {
      "type": "string",
      "minLength": 20
    }
  },
  "additionalProperties": false
}
ghostkey_session_action annotations
{
  "title": "GhostKey Session Action",
  "readOnlyHint": false,
  "openWorldHint": true,
  "idempotentHint": false,
  "destructiveHint": true
}
ghostkey_session_revoke
Advertised by the server during the last successful anonymous check.
Advertised destructiveOpen-world

Immediately revoke a GhostKey browser delegation session and cancel queued work.

ghostkey_session_revoke input schema
{
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "session_id",
    "agent_token"
  ],
  "properties": {
    "session_id": {
      "type": "string",
      "format": "uuid"
    },
    "agent_token": {
      "type": "string",
      "minLength": 20
    }
  },
  "additionalProperties": false
}
ghostkey_session_revoke annotations
{
  "title": "GhostKey Session Revoke",
  "readOnlyHint": false,
  "openWorldHint": true,
  "idempotentHint": false,
  "destructiveHint": true
}

Prompts

Not advertised

No prompt definitions available.

Resources

Not advertised

No resource definitions available.

30-day availability

Aggregated from read-only remote checks; this is not a tool-execution or security guarantee.

Successful checks
1 of 1 (100%)
Average latency
428 ms
95th percentile latency
428 ms

Maintenance history

Public check and source-refresh events. Editorial and ownership records remain private.

  • · probe · passed · 428 ms · metadata changed · 10 tool(s)

Connect from your client

Each snippet registers the same endpoint; pick the client you use.

This server is operated by the named third party. Listing and endpoint checks are not an endorsement or a security audit. Review the operator's permissions, terms, and data handling before connecting. How listings are checked and corrected.

Claude Code

Run this once in a terminal. It registers the remote server. Use --scope project to write .mcp.json for the repo.
Claude Code configuration
claude mcp add --transport http ghostkey-mcp https://ghostkey-mcp.onrender.com/mcp

Codex

Run this once. Codex stores MCP servers in ~/.codex/config.toml (or .codex/config.toml in a trusted project).
Codex configuration
codex mcp add ghostkey-mcp --url https://ghostkey-mcp.onrender.com/mcp

Cursor

Merge this server into .cursor/mcp.json in your project, then enable ghostkey-mcp in your MCP settings.
Cursor configuration
{
  "mcpServers": {
    "ghostkey-mcp": {
      "url": "https://ghostkey-mcp.onrender.com/mcp"
    }
  }
}

Cline

Merge this into cline_mcp_settings.json (Cline → MCP Servers → Configure).
Cline configuration
{
  "mcpServers": {
    "ghostkey-mcp": {
      "type": "streamableHttp",
      "url": "https://ghostkey-mcp.onrender.com/mcp",
      "disabled": false
    }
  }
}

VS Code

Merge this server into .vscode/mcp.json. Use MCP: List Servers to start ghostkey-mcp and inspect its tools.
VS Code configuration
{
  "servers": {
    "ghostkey-mcp": {
      "type": "http",
      "url": "https://ghostkey-mcp.onrender.com/mcp"
    }
  }
}

Gemini CLI

Run this once. It writes .gemini/settings.json in the current project; pass --scope user for ~/.gemini/settings.json.
Gemini CLI configuration
gemini mcp add --transport http ghostkey-mcp https://ghostkey-mcp.onrender.com/mcp

Claude Desktop

Merge this into claude_desktop_config.json (macOS: ~/Library/Application Support/Claude/, Windows: %APPDATA%\Claude\), then restart Claude Desktop.
Claude Desktop configuration
{
  "mcpServers": {
    "ghostkey-mcp": {
      "url": "https://ghostkey-mcp.onrender.com/mcp"
    }
  }
}

Windsurf

Merge this into ~/.codeium/windsurf/mcp_config.json, then refresh MCP in Cascade. Windsurf remote servers use serverUrl, not url.
Windsurf configuration
{
  "mcpServers": {
    "ghostkey-mcp": {
      "serverUrl": "https://ghostkey-mcp.onrender.com/mcp"
    }
  }
}

Let your agent find its tools

Find servers like GhostKey MCP from your agent. Add Koskamo once to search the index for endpoints, access requirements, and client setup. Public discovery needs no key.

Connect Koskamo Explore workflows
See all 4,297

Do you run GhostKey MCP?

Prove ownership with a DNS record, a well-known file, or your Official MCP Registry entry, and your edits publish immediately. Proofs are re-checked weekly; admins can still hide or remove a listing.

Claim this listing