# com.buyukesim/mcp No-logs VPN, real UK +44 number eSIMs and travel-data eSIMs, bought with crypto. No KYC, no account. - **Type:** MCP server - **Trust:** 60/100 (B), scored on the content rubric - **Verification:** community-indexed — nobody has claimed this listing - **Version:** 1.1.0 - **Author:** com.buyukesim - **License:** Unknown - **Endpoints:** streamable-http https://buyukesim.com/mcp - **Source:** https://buyukesim.com - **Endpoint health:** reachable (last checked 2026-09-11T21:18:54.188Z, 4 samples) — uptime is not a security property and is not part of the trust score - **Compatible clients:** claude-code, cursor, copilot, chatgpt, gemini (basis: transport) ## Trust 60/100 (B), scored on the content rubric - Publisher verified: no - Install scripts: nothing suspicious found - Prompt-injection scan: clean - Obfuscation scan: clean - Evidence age: 1 day ## Security scan - **Status:** clean - **Scanned:** 2026-09-11T21:18:54.188Z - **Version scanned:** live - **CVEs:** no coverage — this entry has no package coordinates to query OSV against, so "no known CVEs" is NOT asserted for it. ## Tools 19 declared. Observed from a live `tools/list` probe. - `search_esim_plans` — Search BuyUKeSIM travel/data eSIM plans for a country. Returns plan name, data amount, validity days, USD price, and package code. Pass a 2-letter ISO country c - `list_covered_countries` — List the countries/regions BuyUKeSIM travel eSIM data plans currently cover, with how many plans each has (2-letter ISO codes). - `get_uk_number_info` — Get details of the BuyUKeSIM UK Number (+44) eSIM: a real UK mobile line for unlimited incoming SMS and calls (app and service verification codes, WhatsApp, Tel - `list_vpn_plans` — List the BuyUKeSIM VPN access plans (7/15/30/90/180/365 days, USD price) and the server countries currently available, with protocols (WireGuard, OpenVPN, VLESS - `get_payment_and_delivery_times` — How long a crypto payment actually takes at BuyUKeSIM and what happens after it confirms. Returns measured confirmation times per coin (median, worst case, shar - `get_esim_exit_countries` — Where a BuyUKeSIM travel data eSIM reaches the public internet, per destination. A travel eSIM roams, so the data session is usually tunnelled to the sponsoring - `list_reviews` — Read real customer reviews of BuyUKeSIM, newest first, with the overall rating and how many there are. Reviews are published unmoderated: nothing approves one b - `check_uk_coverage` — Check whether the UK +44 number has been reported working in a country, from buyers who told us after using it there. Pass a 2-letter ISO country code. Returns - `get_bundle_info` — Describe the UK Number + Travel eSIM bundle: both products in ONE crypto checkout, delivered as TWO QR codes and opened with one order code. Use it when someone - `get_vpn_config` — Fetch a VPN client configuration for one server on a VPN order. Needs the order_id and its short lookup/magic code (both returned by purchase_vpn), a protocol ( - `check_order_status` — Look up the status of a BuyUKeSIM order using its short lookup/magic code (the code the customer received). Returns only the order status - no personal data, no - `create_wallet` — Create a new BuyUKeSIM agent wallet - a prepaid, no-KYC balance an AI agent funds with crypto and spends on eSIMs. Returns an api_key (ak_live_...) and a wallet - `check_balance` — Check the balance of the agent wallet (pass the ak_live_ api key from create_wallet). Returns available USD balance. - `create_deposit` — Top up the agent wallet with crypto (pass the ak_live_ api key from create_wallet). Returns a crypto payment address and amount; the balance is credited automat - `list_transactions` — List the most recent transactions (deposits and purchases) on the agent wallet. Pass the ak_live_ api key from create_wallet. - `purchase_esim` — Buy a travel/data eSIM using the agent wallet balance (pass the ak_live_ api key from create_wallet). Deducts the plan price from the balance and returns the eS - `purchase_uk_number` — Buy a UK +44 Number eSIM (a real UK mobile line for incoming verification SMS and calls) using the agent wallet balance. Deducts about $25 and delivers a QR fro - `purchase_vpn` — Buy VPN access using the agent wallet balance. Deducts the plan price and returns the username, password and expiry instantly. plan is one of 7d, 15d, 30d, 90d, - `get_one_time_code` — One-Time Codes are PAUSED and cannot be bought; this only works for orders placed before the pause. Poll a purchased One-Time Code order for its SMS code. Retur ## Install **Verdict: review** — Installable, but 2 things to check first: No CVE coverage: this entry has no npm/PyPI coordinates to query OSV against, so "no known vulnerabilities" is not a claim that can be made about it. **Cautions** (coverage gaps and advisories — never blocking) - No CVE coverage: this entry has no npm/PyPI coordinates to query OSV against, so "no known vulnerabilities" is not a claim that can be made about it. - No publisher has proved control of this listing; it is indexed, not vouched for. **Config** (claude-code): ```json "{\n \"mcpServers\": {\n \"mcp\": {\n \"type\": \"http\",\n \"url\": \"https://buyukesim.com/mcp\"\n }\n }\n}" ``` ## Blast radius Contained to moderate — no credential declaration found, from the publisher, the upstream registry, or the README. Known so far: runs on someone else's infrastructure; read-only tool surface. - Floor 9, ceiling 27 (tier: unknown) - `unknown` means the floor and ceiling land in different bands — not measured enough to name one. It does not mean low. - This is impact, not likelihood. A high radius is not a defect: a filesystem server is supposed to write files. It is never part of the trust score. ## Machine-readable views of this entry - Signed JSON: https://forgeregistry.com/api/v1/packages/com.buyukesim%2Fmcp - Install plan: https://forgeregistry.com/api/v1/packages/com.buyukesim%2Fmcp/install-plan - Alternatives: https://forgeregistry.com/api/v1/alternatives/com.buyukesim%2Fmcp - HTML page: https://forgeregistry.com/registry/com.buyukesim%2Fmcp - MCP: POST https://forgeregistry.com/api/mcp → `forge_get_package` / `forge_install_plan` ## About this document Generated by Forge (https://forgeregistry.com) — a compact rendering of the same record served, signed, at the JSON URL above. Trust and scan facts are the registry's own measurements; anything Forge did not measure is named as unmeasured rather than omitted.