# com.luniumpay/lunium Verify a Brazilian PIX payment settled — no API key. Crypto↔PIX with Central Bank receipts. - **Type:** MCP server - **Trust:** 30/100 (D), scored on the content rubric - **Verification:** community-indexed — nobody has claimed this listing - **Version:** 1.0.0 - **Author:** com.luniumpay - **License:** Unknown - **Endpoints:** streamable-http https://api.luniumpay.com/mcp - **Source:** https://luniumpay.com - **Endpoint health:** reachable (last checked 2026-10-01T16:24:06.206Z, 5 samples) — uptime is not a security property and is not part of the trust score - **Compatible clients:** claude-code, cursor, copilot, chatgpt, gemini (basis: transport) ## Trust 30/100 (D), scored on the content rubric - Publisher verified: no - Install scripts: suspicious script found - Prompt-injection scan: findings present - Obfuscation scan: clean - Evidence age: 16 days ## Security scan - **Status:** warnings - **Scanned:** 2026-09-20T05:25:29.223Z - **Version scanned:** live - **CVEs:** no coverage — this entry has no package coordinates to query OSV against, so "no known CVEs" is NOT asserted for it. **Findings** - injection-shaped content (warning) in the `lunium_get_pix_charge` tool: Concealment directive aimed at the model ## Tools 14 declared. Observed from a live `tools/list` probe. - `lunium_create_sandbox_key` — Provisions a Lunium TEST api key for you, in one call, with no prior credentials, no human approval and no money involved. Use it when a Lunium tool told you er - `lunium_contact` — Hands a message to a human at Lunium and returns immediately. Use it ONLY when your user explicitly asked to talk to a person, or asked for something no tool an - `lunium_check_network_health` — Real-time operational state of the public Lunium services, measured by an internal probe every 5 minutes: overall state plus per-component state (api, pix_charg - `lunium_verify_pix_payment` — Confirms that a specific PIX payment actually settled in Brazil, using the Central Bank end-to-end identifier (E2E). Free and open: no API key, no Lunium accoun - `lunium_list_settlement_options` — Public catalog with explicit direction and pagination. direction=deposit is crypto-to-PIX (GET /catalog); direction=delivery is PIX/custody-to-crypto (GET /cash - `lunium_check_payer_limit` — Requires an API key. Returns how much a specific Brazilian taxpayer (CPF for a person, CNPJ for a company) can move through a PIX charge right now, in cents. Re - `lunium_get_crypto_sale` — Requires an API key. Returns the current state of a crypto sale and, once settled, the receipt: pix_e2e (Central Bank identifier), receipt_url (a page to show a - `lunium_get_pix_charge` — Requires an API key. Returns the state of a charge created with lunium_create_pix_charge. States: pending (unpaid), under_review (PIX received, settlement in tr - `lunium_quote_crypto_sale` — Requires an API key. Step 1 of 3 of selling crypto for reais. Prices a specific amount of a specific asset on a specific network against a specific PIX key, ret - `lunium_confirm_crypto_sale` — Requires an API key. Step 2 of 3, and the point of no return. Locks the quoted rate and returns deposit_address — the address the crypto must be sent to. Crypto - `lunium_create_pix_charge` — Requires an API key. Creates a PIX charge: returns a QR code and a copy-and-paste string any Brazilian payer can pay from their bank app. When it is paid, crypt - `lunium_plan_integration` — Start here to integrate Lunium. Returns the current API flow, runnable starter, sandbox limits and production checklist. No credentials or personal data needed. - `lunium_start_sandbox_demo` — Creates a test-only key and runs the selected complete synthetic journey: cashin (PIX to BTC), custody (PIX credit then USDC withdrawal on Base), payout (PIX cr - `lunium_get_sandbox_demo` — Continues the fixed test-only journey and reads its status. After a simulated custody credit it may create the planned synthetic withdrawal once, idempotently. ## Install **Verdict: do-not-install** — Do not install: 1 injection-shaped pattern found in this entry's own text — it may try to steer the model that loads it. **Blocking** - 1 injection-shaped pattern found in this entry's own text — it may try to steer the model that loads it. — tool:lunium_get_pix_charge: Concealment directive aimed at the model **Cautions** (coverage gaps and advisories — never blocking) - No CVE coverage: this entry has no npm/PyPI coordinates to query OSV against, so "no known vulnerabilities" is not a claim that can be made about it. - No publisher has proved control of this listing; it is indexed, not vouched for. **Client configuration withheld.** Client configs are withheld because this entry has a blocking finding. Show the warnings below to the person installing it. If they have seen the findings and still want to proceed, request the plan again with acknowledge_warnings=true. ## Blast radius Contained to moderate — no credential declaration found, from the publisher, the upstream registry, or the README. Known so far: runs on someone else's infrastructure; read-only tool surface. - Floor 9, ceiling 27 (tier: unknown) - `unknown` means the floor and ceiling land in different bands — not measured enough to name one. It does not mean low. - This is impact, not likelihood. A high radius is not a defect: a filesystem server is supposed to write files. It is never part of the trust score. ## Machine-readable views of this entry - Signed JSON: https://forgeregistry.com/api/v1/packages/com.luniumpay%2Flunium - Install plan: https://forgeregistry.com/api/v1/packages/com.luniumpay%2Flunium/install-plan - Alternatives: https://forgeregistry.com/api/v1/alternatives/com.luniumpay%2Flunium - HTML page: https://forgeregistry.com/registry/com.luniumpay%2Flunium - MCP: POST https://forgeregistry.com/api/mcp → `forge_get_package` / `forge_install_plan` ## About this document Generated by Forge (https://forgeregistry.com) — a compact rendering of the same record served, signed, at the JSON URL above. Trust and scan facts are the registry's own measurements; anything Forge did not measure is named as unmeasured rather than omitted.