What can IMBA Agent Spend do?

It exposes 19 tools: get_spend_policy, get_deposit_address, get_balance, list_cards, list_card_products, list_gift_offers, list_esim_plans, create_card, topup_card, purchase_gift, purchase_esim, get_card_details.

Is IMBA Agent Spend safe and reliable?

Trust score 74/100 (grade B), based on live reachability, verified publisher, maintenance, adoption, transparency and tool quality. See our methodology.

Servers / Crypto & Web3

IMBA Agent Spend

com.imbawallet/agent

IMBA spend MCP: USDT TRC-20 deposit and catalog buy with your key. No withdraw.

Compare Website ↗Source ↗

Yes, your AI can use this right now.Answered a live MCP handshake in 1068 ms with no sign-in needed and exposes 19 tools.

Connect it

Settings → Connectors → Add custom connector
URL: https://imbawallet.com/mcp/spend

Settings → Apps & Connectors → Advanced → Developer mode
Create connector with URL: https://imbawallet.com/mcp/spend

{
  "mcpServers": {
    "agent": {
      "url": "https://imbawallet.com/mcp/spend",
      "headers": {
        "X-IMBA-Agent-Client-Id": "<YOUR_X_IMBA_AGENT_CLIENT_ID>",
        "X-IMBA-Agent-Private-Key": "<YOUR_X_IMBA_AGENT_PRIVATE_KEY>"
      }
    }
  }
}

claude mcp add --transport http agent https://imbawallet.com/mcp/spend --header "X-IMBA-Agent-Client-Id: <value>" --header "X-IMBA-Agent-Private-Key: <value>"

{
  "servers": {
    "agent": {
      "type": "http",
      "url": "https://imbawallet.com/mcp/spend",
      "headers": {
        "X-IMBA-Agent-Client-Id": "<YOUR_X_IMBA_AGENT_CLIENT_ID>",
        "X-IMBA-Agent-Private-Key": "<YOUR_X_IMBA_AGENT_PRIVATE_KEY>"
      }
    }
  }
}

{
  "mcpServers": {
    "agent": {
      "command": "npx",
      "args": [
        "-y",
        "@imba_wallet/agent-mcp@0.1.4"
      ],
      "env": {
        "IMBA_AGENT_CLIENT_ID": "<value>",
        "IMBA_AGENT_PRIVATE_KEY": "<value>"
      }
    }
  }
}

claude mcp add agent -- npx -y @imba_wallet/agent-mcp@0.1.4

19 tools, verified live

Pulled straight from the server with tools/list on 2026-10-17.

get_spend_policyread-only

Forbidden rails and tier rules. Allowed catalog: Visa prepaid, travel eSIM, gift cards, paid KYT address screen. Read-only.

get_deposit_address

POST /api/deposit_address blockchain=tron. Address is issued for the authenticated agent only. Always re-fetch before send. Do not cache. USDT TRC-20 only. 24h unfunded hold.

get_balanceread-only

GET /api/balance. USDT is the spendable catalog currency.

list_cardsread-only

POST /api/cards for the authenticated agent. No client_id argument.

list_card_productsread-only

POST /api/card_products. Use id as imba_product_id for create_card (Visa prepaid). Space catalog calls ~1s apart.

list_gift_offersread-only

POST /api/offers. Live gift catalog (~20k positions / ~2k unique: Apple, Google Play, Steam, games, travel, retail). Optional query string. Then purchase_gift with offer_id + ext_id. Space catalog calls ~1s apart. Do not assume a SKU.

list_esim_plansread-only

POST /api/esim/plans. Travel/data eSIM. esim_provider=yesim. Optional country ISO2. Use plan id with purchase_esim. Space catalog calls ~1s apart (agent catalog_gap).

create_cardcan modify

Issue a Visa/MasterCard prepaid from this agent 2401 USDT so the agent can pay merchants that require a card (airlines, hotels, SaaS, datacenter/GPU clouds). POST /api/pin/create_card. ext_id required. imba_product_id is core.card_product.id. Never payment_source=stars. Never pass client_id. IMBA does not create the booking.

topup_cardcan modify

POST /api/pin/topup_card from this agent 2401 USDT. card_id must belong to the same agent (SQL owner guard). ext_id required. Never Stars.

purchase_giftcan modify

POST /api/purchase. Buy a brand gift code (Apple, Steam, Google Play, â¦ â live list). ext_id required. Never payment_source=stars.

purchase_esimcan modify

POST /api/esim/new_plan5. Buy a travel/data eSIM plan from this agent 2401. Omit blank/null iccid so SQL takes the new-eSIM path. A set iccid must already belong to this agent. ext_id required. Never Stars.

get_card_detailsread-only

POST /api/pin/get_card_details for a card this agent owns. Needed to present PAN at merchant checkout (airline, datacenter, SaaS). PAN/CVV arrive as card_encrypted JWE when jwe_public_key is registered (PATCH webhook). Without that key the number is masked. Never logs raw PAN. cvv defaults true. Never pass client_id.

list_notificationsread-only

POST /api/notifications. Poll this when a Visa payment asks for 3-D Secure. Agents keep payload.code (never SMS, never Telegram). category=codes for 3-D Secure OTP. Also delivered on webhook field otp if callback_url is set, and optional email. Space catalog calls ~1s apart.

set_webhook

PATCH /auth/v1/agent/webhook. Sets https callback_url (required before hmac/rotate), optional X25519 jwe_public_key for card_encrypted, optional email for 3DS OTP. Not SMS. HMAC plaintext is shown once when a URL is first accepted.

rotate_hmaccan modify

POST /auth/v1/agent/hmac/rotate. Previous HMAC dies immediately. Requires an existing callback_url (400 callback_url required before rotate otherwise). Pass callback_url here to PATCH webhook first. Plaintext HMAC is returned once â store it; never a Wallet JWT.

kyt_quoteread-only

POST /api/kyt_quote. Price for a paid crypto-address screen (Didit). Debit is on kyt_check (~0.99 USDT from 2401), not on quote. Off unless didit.enabled and didit.agent_api. Does not gate TRON deposit. Not /api/client/kyt_* and not partner. Space ~1s.

kyt_checkcan modify

Screen a crypto address for dirt (sanctions / mixer exposure). Use BEFORE you accept a TRC-20 send, or AFTER a wallet is blocked and the reason is unclear. POST /api/kyt_check. Body: network (tron_usdt | eth | btc) + address. Debits ~0.99 USDT from 2401. Returns a report â does not gate deposit, does not ban or unblock. TON is not in this catalog. Never pass client_id. Space ~1s.

kyt_check_getread-only

POST /api/kyt_check_get. Poll until the report is ready. Own check only (404 otherwise). Use after kyt_check when a wallet was blocked and you need the dirt report. Never pass client_id.

kyt_checksread-only

POST /api/kyt_checks. Own KYT history plus quote fields. Use to find a past address check. Space ~1s. Never pass client_id.

Trust score

Grade B

Transparent, computed daily. How it works

Live reachability30/30

Verified publisher17/20

Maintenance12/15

Track record5/10

Adoption0/15

Transparency7/10

Tool quality10/10

Health

Last 2 checks · 100.0% up over 7 days

Status: Live
Auth: API key
Transport: stdio, streamable-http
Latency: 1068 ms
Protocol: 2025-06-18
Version: 0.1.4
Publisher: ✓ imbawallet.com
Category: Crypto & Web3
Stars: —
npm / week: —
License: —
Updated: 2026-08-31
Last check: 2026-10-17

Maintainer? Add the live badge

Free. Shows live status and grade in your README, updated every check.

[![Status on Can My AI Use](https://canmyaiuse.pages.dev/badge/com-imbawallet-agent.svg)](https://canmyaiuse.pages.dev/s/com-imbawallet-agent/)

HTML

<a href="https://canmyaiuse.pages.dev/s/com-imbawallet-agent/"><img src="https://canmyaiuse.pages.dev/badge/com-imbawallet-agent.svg" alt="Status on Can My AI Use" height="20"></a>

Alternatives in Crypto & Web3

Compare →

IMBA Agent Spend

Connect it

19 tools, verified live

Alternatives in Crypto & Web3

INInsumerA

CHChainstackA

TraderSpyA

WSwalletlink.socialA

three.ws pump.fun MCPA

DTDCL Trust Oracle — AI/LLM Output Audit (x402 MCP)A