@furlpay/cli

MCP@Ashutosh0x
v0.2.2UnknownMITUpdated 3mo agonpmGitHub

FurlPay CLI — stablecoin payments, investing, travel booking, yield and webhook tooling from your terminal. MCP server included.

Works in
ClaudeCursorCopilotGemini

Inferred from the transports this listing declares (stdio). A client not listed here hasn’t been ruled out — it just isn’t something Forge can confirm.

@Ashutosh0x
Identity-verified publisher GitHub@Ashutosh0x
Verified Aug 11, 2026
244Downloads/wk
3mo agoLast update
Package
AuthorUnknown
LicenseMIT
Version0.2.2
Sourcenpm+mcp-registry
Trust Status
A
80/100Trusted
✓Listed in Forge index+10/10
✓Publisher identity verified+20/20
—Ed25519 publish signature+0/5
→ Included automatically when the publisher runs `forge publish`
—Domain verification+0/5
→ Publisher: host /.well-known/forge.json on the package homepage with { "publisher": "<github-login>" }
—npm Trusted Publishing (Sigstore)+0/5
→ Publish from GitHub Actions with --provenance so the attestation binds this package to this repo
—npm maintainer match+0/5
→ Publisher: add the verified GitHub login to the npm package's maintainers (npm owner add <login>)
✓CVE scan · clean+30/30
✓Static analysis · clean+20/20
Paste into Claude Code, Cursor, or any AI assistant to fix all gaps
StatusIdentity verified
Publisher@Ashutosh0x
SignatureUnsigned
Domain—
Provenance—
Dependencies✓ 0 resolved · none vulnerable
Tool surface18 tools · none privileged
Security scan✓ Cleanv0.2.2 · 1mo agoHow well does this scan work?
EvalsNone
IndexedJul 9, 2026

Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.

Tools

18 tools · none privileged
Statically extracted from the published packagev0.2.2 · 1mo ago

Read out of the source npm actually ships, at scan time. The package was never executed. Tools registered dynamically at runtime, or hidden inside bundled or minified code, can be missed — so this is a floor on the tool surface, not a complete census of it.

get_balanceGet the user's stablecoin balances across all chains (USDC, EURC, ETH …) with USD values.

Get the user's stablecoin balances across all chains (USDC, EURC, ETH …) with USD values.

No input schema was published for this tool.

get_net_worthUnified net worth: crypto + fiat + equities breakdown and recent transactions.

Unified net worth: crypto + fiat + equities breakdown and recent transactions.

No input schema was published for this tool.

send_stablecoinSend a gas-sponsored stablecoin transfer to an address. Amounts >= $5000 require an MFA code.

Send a gas-sponsored stablecoin transfer to an address. Amounts >= $5000 require an MFA code.

No input schema was published for this tool.

swap_tokensQuote and optionally execute a token swap (Li.Fi routing), including cross-chain.

Quote and optionally execute a token swap (Li.Fi routing), including cross-chain.

No input schema was published for this tool.

list_transactionsList recent transactions, optionally filtered by category (transfer, swap, invest, yield, card).

List recent transactions, optionally filtered by category (transfer, swap, invest, yield, card).

No input schema was published for this tool.

get_portfolioStock/ETF portfolio: holdings, dividends and performance (marked to live quotes).

Stock/ETF portfolio: holdings, dividends and performance (marked to live quotes).

No input schema was published for this tool.

get_quoteFull asset detail for a stock/ETF/crypto symbol: live quote, key stats, AI digest, current position.

Full asset detail for a stock/ETF/crypto symbol: live quote, key stats, AI digest, current position.

No input schema was published for this tool.

place_orderPlace a fractional stock/ETF order (Alpaca-style). Use notional (USD) or qty (shares), not both.

Place a fractional stock/ETF order (Alpaca-style). Use notional (USD) or qty (shares), not both.

No input schema was published for this tool.

market_moversTop gaining and losing assets plus major index levels (public data).

Top gaining and losing assets plus major index levels (public data).

No input schema was published for this tool.

search_travelSearch hotels/stays or flights, payable in stablecoins.

Search hotels/stays or flights, payable in stablecoins.

No input schema was published for this tool.

book_travelBook a stay (settles in USDC via x402 with cashback). Returns the trip record.

Book a stay (settles in USDC via x402 with cashback). Returns the trip record.

No input schema was published for this tool.

list_tripsList the user's travel bookings grouped by upcoming/past/cancelled.

List the user's travel bookings grouped by upcoming/past/cancelled.

No input schema was published for this tool.

earn_overviewFurlPay Earn: live vault APYs, the user's yield positions and idle USDC.

FurlPay Earn: live vault APYs, the user's yield positions and idle USDC.

No input schema was published for this tool.

earn_depositDeposit idle USDC into a Morpho yield vault (or get the unsigned tx bundle in live mode).

Deposit idle USDC into a Morpho yield vault (or get the unsigned tx bundle in live mode).

No input schema was published for this tool.

earn_withdrawWithdraw USDC from a FurlPay Earn position.

Withdraw USDC from a FurlPay Earn position.

No input schema was published for this tool.

list_cardsList the user's virtual/physical Visa cards with limits and freeze state.

List the user's virtual/physical Visa cards with limits and freeze state.

No input schema was published for this tool.

set_card_controlsFreeze/unfreeze a card or update its spending limits in real time.

Freeze/unfreeze a card or update its spending limits in real time.

No input schema was published for this tool.

chain_statusHealth and block height of every chain FurlPay settles on (public).

Health and block height of every chain FurlPay settles on (public).

No input schema was published for this tool.

18 of 18 tools published a description.

Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.

About

FurlPay CLI — stablecoin payments, investing, travel booking, yield and webhook tooling from your terminal. MCP server included.

Keywords
furlpaystablecoinpaymentsusdcclimcpwebhooksinvesting
Alternatives
Comparing tool surfaces…

Dependency tree

What one Forge scan resolved from npm metadata on 2026-08-28 — observed resolution, not a publisher declaration.

0 packages resolved · 0 direct · none carrying advisories Resolution stops at depth 4 and 60 packages.

This package declares no runtime dependencies.

Topics

Related in payments & commerce