IMBA Agent Spend
IMBA spend MCP: USDT TRC-20 deposit and catalog buy with your key.
Connector by imbawallet.com · Domain verified by the MCP Registry
Install
Works with Claude Code, VS Code, Codex, Cursor, Windsurf, Claude Desktop. Read the repository before you give any tool access to your data.
npx agentmarket install connector/imbawallet-com-agent
Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.
Remote endpoint
https://imbawallet.com/mcp/spendRemote (HTTP)
Get the weekly diff
The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.
About
Reviews
Write a reviewNo reviews yet. Installed it? Reviews come from verified installers only. How reviews work
Permissions
What this server can do and what it asks for, from its tool list and install config. Checked Oct 25, 2026.
- Tools
- 11 read · 2 write · 6 delete
- Secrets
- 2 (API keys, tokens or passwords)
- Install scripts
- Not scanned yet
- Runs as
- Node.js package
Tools by what they do 19
From the running server's own tool list (tools/list) on Oct 25, 2026.
Read 11 · Look things up without changing anything.
get_balanceget_card_detailsget_spend_policykyt_check_getkyt_checkskyt_quotelist_card_productslist_cardslist_esim_planslist_gift_offerslist_notifications
Write 2 · Create, change, send or run things.
get_deposit_addressset_webhook
Delete 6 · Delete, drop, revoke or wipe things.
create_cardkyt_checkpurchase_esimpurchase_giftrotate_hmactopup_card
Secrets and settings it asks for
Secrets: values you paste in that let it act as you.
IMBA_AGENT_PRIVATE_KEYX-IMBA-Agent-Private-Key
Other settings (environment variables or headers).
IMBA_AGENT_CLIENT_IDX-IMBA-Agent-Client-Id
Network hosts it talks to 1
imbawallet.com· found in remote endpoint, install command
Tools (19)
As the server listed them on Oct 25, 2026. Descriptions are the server’s own words; hidden characters are shown as [U+…].
create_cardBuy a virtual cardcan change or delete dataIssue a Visa/MasterCard prepaid from this agent 2401 USDT so the agent can pay merchants that require a card (airlines, hotels, SaaS, datacenter/GPU clouds). POST /api/pin/create_card. ext_id required. imba_product_id is core.card_product.id. Never payment_source=stars. Never pass client_id. IMBA does not create the booking.
get_balanceLedger 2401 balanceread-onlyGET /api/balance. USDT is the spendable catalog currency.
get_card_detailsCard payment credentialsread-onlyPOST /api/pin/get_card_details for a card this agent owns. Needed to present PAN at merchant checkout (airline, datacenter, SaaS). PAN/CVV arrive as card_encrypted JWE when jwe_public_key is registered (PATCH webhook). Without that key the number is masked. Never logs raw PAN. cvv defaults true. Never pass client_id.
get_deposit_addressUSDT TRC-20 deposit addressPOST /api/deposit_address blockchain=tron. Address is issued for the authenticated agent only. Always re-fetch before send. Do not cache. USDT TRC-20 only. 24h unfunded hold.
get_spend_policySpend policyread-onlyForbidden rails and tier rules. Allowed catalog: Visa prepaid, travel eSIM, gift cards, paid KYT address screen. Read-only.
kyt_checkPaid KYT checkcan change or delete dataScreen a crypto address for dirt (sanctions / mixer exposure). Use BEFORE you accept a TRC-20 send, or AFTER a wallet is blocked and the reason is unclear. POST /api/kyt_check. Body: network (tron_usdt | eth | btc) + address. Debits ~0.99 USDT from 2401. Returns a report — does not gate deposit, does not ban or unblock. TON is not in this catalog. Never pass client_id. Space ~1s.
kyt_check_getKYT check by idread-onlyPOST /api/kyt_check_get. Poll until the report is ready. Own check only (404 otherwise). Use after kyt_check when a wallet was blocked and you need the dirt report. Never pass client_id.
kyt_checksKYT historyread-onlyPOST /api/kyt_checks. Own KYT history plus quote fields. Use to find a past address check. Space ~1s. Never pass client_id.
kyt_quoteKYT priceread-onlyPOST /api/kyt_quote. Price for a paid crypto-address screen (Didit). Debit is on kyt_check (~0.99 USDT from 2401), not on quote. Off unless didit.enabled and didit.agent_api. Does not gate TRON deposit. Not /api/client/kyt_* and not partner. Space ~1s.
list_card_productsList card productsread-onlyPOST /api/card_products. Use id as imba_product_id for create_card (Visa prepaid). Space catalog calls ~1s apart.
list_cardsList cardsread-onlyPOST /api/cards for the authenticated agent. No client_id argument.
list_esim_plansList eSIM plansread-onlyPOST /api/esim/plans. Travel/data eSIM. esim_provider=yesim. Optional country ISO2. Use plan id with purchase_esim. Space catalog calls ~1s apart (agent catalog_gap).
list_gift_offersList gift offersread-onlyPOST /api/offers. Live gift catalog (~20k positions / ~2k unique: Apple, Google Play, Steam, games, travel, retail). Optional query string. Then purchase_gift with offer_id + ext_id. Space catalog calls ~1s apart. Do not assume a SKU.
list_notificationsInbox and 3DS OTPread-onlyPOST /api/notifications. Poll this when a Visa payment asks for 3-D Secure. Agents keep payload.code (never SMS, never Telegram). category=codes for 3-D Secure OTP. Also delivered on webhook field otp if callback_url is set, and optional email. Space catalog calls ~1s apart.
purchase_esimBuy an eSIM plancan change or delete dataPOST /api/esim/new_plan5. Buy a travel/data eSIM plan from this agent 2401. Omit blank/null iccid so SQL takes the new-eSIM path. A set iccid must already belong to this agent. ext_id required. Never Stars.
Show 4 more tools
purchase_giftBuy a gift cardcan change or delete dataPOST /api/purchase. Buy a brand gift code (Apple, Steam, Google Play, … — live list). ext_id required. Never payment_source=stars.
rotate_hmacRotate webhook HMACcan change or delete dataPOST /auth/v1/agent/hmac/rotate. Previous HMAC dies immediately. Requires an existing callback_url (400 callback_url required before rotate otherwise). Pass callback_url here to PATCH webhook first. Plaintext HMAC is returned once — store it; never a Wallet JWT.
set_webhookSet callback URL / JWE / OTP emailPATCH /auth/v1/agent/webhook. Sets https callback_url (required before hmac/rotate), optional X25519 jwe_public_key for card_encrypted, optional email for 3DS OTP. Not SMS. HMAC plaintext is shown once when a URL is first accepted.
topup_cardTop up a cardcan change or delete dataPOST /api/pin/topup_card from this agent 2401 USDT. card_id must belong to the same agent (SQL owner guard). ext_id required. Never Stars.
Signals
- Weekly downloads
- 36
- Last release
- Aug 31, 2026 (1 month ago)
- Last package publish
- Aug 27, 2026 (2 months ago)
- Repository
- Not found on GitHub (deleted or private)
From the package registry.
Details
- Registry name
com.imbawallet/agent- Version
- 0.1.4
- Auth
- API key
- Packages
- npm @imba_wallet/agent-mcp
- License
- MIT
- Repository
- github.com/IMBAwallet/IMBA_front
- First seen
- Oct 24, 2026
- Last checked
- Oct 24, 2026
- Source
- Official MCP Registry
More from imbawallet.com
Cite this page
IMBA Agent Spend MCP server. Agent Mart. https://agentmart.dev/connectors/imbawallet-com-agent (last updated 2026-10-24)