# flario Flare for agents: FTSO prices with locally verified Merkle proofs, FDC, FAssets, x402 pay. - **Type:** MCP server - **Trust:** 60/100 (B), scored on the package rubric - **Verification:** community-indexed — nobody has claimed this listing - **Version:** 1.6.0 - **Author:** io.github.dziuba0x - **License:** Unknown - **npm:** flario - **Source:** https://github.com/dziuba0x/flario - **Compatible clients:** claude-code, cursor, copilot, gemini (basis: transport) ## Trust 60/100 (B), scored on the package rubric - Publisher verified: no - Install scripts: nothing suspicious found - Prompt-injection scan: not run - Obfuscation scan: not run - Evidence age: 5 days ## Security scan - **Status:** clean - **Scanned:** 2026-09-30T00:23:54.748Z - **Version scanned:** 1.6.0 - **CVEs:** none found by OSV at scan time ## Tools 24 declared. Statically extracted from the shipped source — a floor on the surface, not a census. - `get_flr_balance` — Get native FLR balance and wrapped WFLR (WNat) balance for an EVM address on Flare mainnet or Coston2 testnet. - `get_flr_stake_info` — One-call Flare portfolio for an address: native FLR + wrapped WFLR, FTSO vote power and delegation, claimable protocol rewards (by source), and FlareDrops. All - `get_ftso_feed` — Get the latest FTSO price feed (value, decimals, timestamp) for a feed by name (e.g. "FLR/USD") or raw bytes21 feed id. - `get_ftso_feeds_all` — Get the latest FTSO price for all known feeds on the given network. - `get_ftso_providers` — Get the list of active FTSO data providers (name, address, vote power, fee, reward rate) for the given network. - `get_ftso_anchor_feed` — Get a proof-carrying FTSO Scaling anchor feed: the price plus a Merkle proof verified LOCALLY against the on-chain Relay root (FTSO Scaling protocol 100). Trust - `get_ftso_history` — Get recent FTSO Scaling anchor-feed history for a feed (by name or bytes21 id) from the public Flare Data Availability layer — no external indexer needed. Each - `get_fassets_status` — Get FAssets status (total minted, active agent count) for FXRP, FBTC or FDOGE on the given network, via the on-chain AssetManager with a flaremetrics.io fallbac - `get_fdc_proof_status` — Get the FDC (protocol id 200) Merkle root and finalization status for a voting round from the Flare Relay contract. - `get_smart_account_info` — Resolve between XRPL accounts and Flare Smart Accounts via the on-chain MasterAccountController. Forward: give an XRPL account (r...) to get its deterministic F - `fdc_request_attestation` — Submit an FDC attestation request (Payment, AddressValidity or EVMTransaction). Prepares the request via a Flare-hosted verifier, queries the request fee, and — - `fdc_get_attestation_proof` — Retrieve an FDC attestation proof from the Data Availability layer for a finalized voting round and verify the Merkle proof locally against the on-chain Relay r - `fassets_agent_status` — List FAssets agents (FXRP first) with collateral ratios, minting capacity (free lots), minted/reserved amounts and liquidation status, sorted by vault collatera - `fassets_system_state` — Global FAssets system state for an asset: total minted, agent count, lot size, minting cap/pause, aggregated vault+pool collateral, and the redemption queue (ti - `fassets_agent_details` — Human-facing details of a FAssets agent (name, description, icon/logo URL, terms-of-use URL, whitelist status) from the AgentOwnerRegistry. Accepts an agent vau - `fassets_liquidation_scanner` — PREMIUM (x402): FAssets agents ranked by liquidation risk, joined with live FTSOv2 prices — per agent: CR headroom, the underlying price at which liquidation st - `fdc_bulk_proof_bundle` — PREMIUM (x402): batch retrieval of up to 20 FDC attestation proofs with local Merkle verification of each against the on-chain Relay root. Free when the operato - `songbird_fcc_registry` — Scan the live FlareContractRegistry (Songbird by default) for Flare Confidential Compute contracts (PMW, TEE, compute extensions). Reports FCC deployment status - `fdc_web2json_request` — Turn any public web API into a fact a smart contract can verify. Prepares an FDC Web2Json attestation request (URL + jq filter + ABI signature) through a Flare- - `fdc_verify_web2json` — Verify a Web2Json attestation AND bind it to the source you expected. Checks the Merkle proof locally against the on-chain Relay root, confirms the attested URL - `fdc_verify_settlement` — Prove an x402 settlement via Flare's enshrined FDC (trust-minimized, not the facilitator's word). Given a settlement tx hash it prepares an EVMTransaction attes - `fcc_deployment_status` - `evidence_bundle` — Package several proof-carrying facts into one portable bundle that someone else can verify without trusting you. Takes FTSO Scaling anchor feeds and finalized F - `evidence_verify` — Verify an evidence bundle from scratch. Rebuilds every leaf from its own body, folds it through its proof, and compares against Relay.merkleRoots(protocol, roun ## Install **Verdict: review** — Installable, but 1 thing to check first: No publisher has proved control of this listing; it is indexed, not vouched for. **Cautions** (coverage gaps and advisories — never blocking) - No publisher has proved control of this listing; it is indexed, not vouched for. **Config** (claude-code): ```json "{\n \"mcpServers\": {\n \"flario\": {\n \"command\": \"npx\",\n \"args\": [\n \"-y\",\n \"flario\"\n ],\n \"env\": {\n \"FLARE_PRIVATE_KEY\": \"\"\n }\n }\n }\n}" ``` **Credentials it will ask for** (names only — Forge never holds a value): - `FLARE_PRIVATE_KEY` — Flare Private Key (optional) Placeholders only. Forge never holds, brokers, or transmits a credential value — replace each in your own config file. Do not send a value back to Forge; no Forge endpoint accepts one. - This entry needs 1 credential (0 required). The generated config carries placeholders, so it will fail in the editor rather than at runtime if they are left unset. ## Blast radius Moderate blast radius — holds an api key; runs on your machine. - Floor 23, ceiling 23 (tier: moderate) - This is impact, not likelihood. A high radius is not a defect: a filesystem server is supposed to write files. It is never part of the trust score. ## Machine-readable views of this entry - Signed JSON: https://forgeregistry.com/api/v1/packages/flario - Install plan: https://forgeregistry.com/api/v1/packages/flario/install-plan - Alternatives: https://forgeregistry.com/api/v1/alternatives/flario - HTML page: https://forgeregistry.com/registry/flario - MCP: POST https://forgeregistry.com/api/mcp → `forge_get_package` / `forge_install_plan` ## About this document Generated by Forge (https://forgeregistry.com) — a compact rendering of the same record served, signed, at the JSON URL above. Trust and scan facts are the registry's own measurements; anything Forge did not measure is named as unmeasured rather than omitted.