IMBA Agent Spend by imbawallet.com

MCP server · Payment & monetisation platforms · indexed, not reviewed

HostedLocalvendor's own

Not reviewed

No score, grade or rank. This listing is facts from the official MCP registry and our own checks, and it stays out of the rankings until the panel reviews it.

How the index works

IMBA spend MCP: USDT TRC-20 deposit and catalog buy with your key. No withdraw.

What the official MCP registry says

Facts

MCP registry
com.imbawallet/agent · 0.1.4
Endpoint
https://imbawallet.com/mcp/spend
Packages
npm @imba_wallet/agent-mcp stdio
npm / week
47
Registry entry
updated 31 Aug 2026

From the official MCP registry, the package registries and our own checks. JSON · Markdown

Why it's listed

  • It's published in the registry under imbawallet.com, a namespace the registry only gives to whoever proves they control that domain.

Being indexed says nothing about quality, and nobody can pay for it. Is this yours? Ask for a review.

Tools it lists 19 · about 2,738 tokens of context · checked 13 minutes ago

ToolWhat it doesHint
get_spend_policySpend policyForbidden rails and tier rules. Allowed catalog: Visa prepaid, travel eSIM, gift cards, paid KYT address screen. Read-only.read-only
get_deposit_addressUSDT TRC-20 deposit addressPOST /api/deposit_address blockchain=tron. Address is issued for the authenticated agent only. Always re-fetch before send. Do not cache. USDT TRC-20 only. 24h unfunded hold.writes
get_balanceLedger 2401 balanceGET /api/balance. USDT is the spendable catalog currency.read-only
list_cardsList cardsPOST /api/cards for the authenticated agent. No client_id argument.read-only
list_card_productsList card productsPOST /api/card_products. Use id as imba_product_id for create_card (Visa prepaid). Space catalog calls ~1s apart.read-only
list_gift_offersList gift offersPOST /api/offers. Live gift catalog (~20k positions / ~2k unique: Apple, Google Play, Steam, games, travel, retail). Optional query string. Then purchase_gift with offer_id + ext_id. Space catalog calls ~1s apart. Do…read-only
list_esim_plansList eSIM plansPOST /api/esim/plans. Travel/data eSIM. esim_provider=yesim. Optional country ISO2. Use plan id with purchase_esim. Space catalog calls ~1s apart (agent catalog_gap).read-only
create_cardBuy a virtual cardIssue a Visa/MasterCard prepaid from this agent 2401 USDT so the agent can pay merchants that require a card (airlines, hotels, SaaS, datacenter/GPU clouds). POST /api/pin/create_card. ext_id required. imba_product_id…writes
topup_cardTop up a cardPOST /api/pin/topup_card from this agent 2401 USDT. card_id must belong to the same agent (SQL owner guard). ext_id required. Never Stars.writes
purchase_giftBuy a gift cardPOST /api/purchase. Buy a brand gift code (Apple, Steam, Google Play, … — live list). ext_id required. Never payment_source=stars.writes
purchase_esimBuy an eSIM planPOST /api/esim/new_plan5. Buy a travel/data eSIM plan from this agent 2401. Omit blank/null iccid so SQL takes the new-eSIM path. A set iccid must already belong to this agent. ext_id required. Never Stars.writes
get_card_detailsCard payment credentialsPOST /api/pin/get_card_details for a card this agent owns. Needed to present PAN at merchant checkout (airline, datacenter, SaaS). PAN/CVV arrive as card_encrypted JWE when jwe_public_key is registered (PATCH webhook).…read-only
list_notificationsInbox and 3DS OTPPOST /api/notifications. Poll this when a Visa payment asks for 3-D Secure. Agents keep payload.code (never SMS, never Telegram). category=codes for 3-D Secure OTP. Also delivered on webhook field otp if callback_url is…read-only
set_webhookSet callback URL / JWE / OTP emailPATCH /auth/v1/agent/webhook. Sets https callback_url (required before hmac/rotate), optional X25519 jwe_public_key for card_encrypted, optional email for 3DS OTP. Not SMS. HMAC plaintext is shown once when a URL is…writes
rotate_hmacRotate webhook HMACPOST /auth/v1/agent/hmac/rotate. Previous HMAC dies immediately. Requires an existing callback_url (400 callback_url required before rotate otherwise). Pass callback_url here to PATCH webhook first. Plaintext HMAC is…writes
kyt_quoteKYT pricePOST /api/kyt_quote. Price for a paid crypto-address screen (Didit). Debit is on kyt_check (~0.99 USDT from 2401), not on quote. Off unless didit.enabled and didit.agent_api. Does not gate TRON deposit. Not…read-only
kyt_checkPaid KYT checkScreen a crypto address for dirt (sanctions / mixer exposure). Use BEFORE you accept a TRC-20 send, or AFTER a wallet is blocked and the reason is unclear. POST /api/kyt_check. Body: network (tron_usdt | eth | btc) +…writes
kyt_check_getKYT check by idPOST /api/kyt_check_get. Poll until the report is ready. Own check only (404 otherwise). Use after kyt_check when a wallet was blocked and you need the dirt report. Never pass client_id.read-only
kyt_checksKYT historyPOST /api/kyt_checks. Own KYT history plus quote fields. Use to find a past address check. Space ~1s. Never pass client_id.read-only

What https://imbawallet.com/mcp/spend answered to tools/list, asked without credentials over MCP 2026-07-28. The token figure is the size of the list as sent, divided by four; a model sees about that much before it calls anything. Full definitions, input schemas included, are in the listing's JSON under mcpTools.

How its tools read to an agent 0 errors · 13 warnings · 1 note

  • warnTC11create_card6 parameters without a description: birth_date, country, first_name, imba_product_id, last_name, phone
  • warnTC11get_card_detailsnone of its 2 parameters has a description
  • warnTC11kyt_checknone of its 3 parameters has a description
  • warnTC11kyt_check_getits one parameter, id, has no description
  • warnTC11kyt_checksnone of its 2 parameters has a description
  • warnTC11list_esim_plansnone of its 2 parameters has a description
  • warnTC11list_gift_offersits one parameter, query, has no description
  • warnTC11list_notificationsnone of its 4 parameters has a description
  • warnTC11purchase_esimnone of its 4 parameters has a description
  • warnTC11purchase_giftnone of its 5 parameters has a description
  • warnTC11rotate_hmacnone of its 3 parameters has a description
  • warnTC11set_webhooknone of its 3 parameters has a description
  • warnTC11topup_cardnone of its 3 parameters has a description
  • noteTC24server19 of 19 tools have no outputSchema

The checks from /check and anchor check, run each day on the list above: about 2,738 tokens of definitions. Not part of the score yet. Check your own server.

For companies

Do agents find, use and choose your tools?

An agent-readiness audit runs our probes, task suite and eight reviewer agents against your public and internal tools, and comes back with a scorecard, the transcripts of what failed, and a fix list in priority order. From $2,500, re-run included. We never take payment to move a rank. We do help companies earn one.