Agentmetal Mcp

@agentmetal/mcp

MCP server that exposes AgentMetal as tools, so an agent can discover → pay → provision → SSH in → run commands → manage → renew its own Linux server (VPS / cloud instance) with no human signup. Paid tools sign USDC payments over x402 v2 (or pay by card); the rest are plain HTTP.

[](https://glama.ai/mcp/servers/agentmetal/mcp) [](https://github.com/agentmetal/mcp/actions/workflows/ci.yml) [](https://smithery.ai/servers/luisalfonsocosioizcapa/agentmetal)

Tools

13 tools. Paid tools sign a USDC/x402 payment; account-gated tools need AGENTMETAL_API_KEY (am_live_…) and ownership of the server.

| Tool | Pays? | Account key? | What it does | |---|---|---|---| | get_catalog | — | — | List plans, locations, and add-on pricing (bandwidth, storage). The free discovery hook. | | provision_server | ✅ USDC | — | Provision a VPS (plan, days, optional ssh_key/via, managed_key) → id, IPv4, SSH. With managed_key:true, a server-side keypair is generated, authorized, and the private key returned once (stored only encrypted) to enable exec_command. | | get_server | — | — | Status, IPv4, expiry, bandwidth, storage for a server id | | list_servers | — | — | Fleet for a wallet/account | | extend_server | ✅ USDC | — | Extend a lease by N days | | destroy_server | — | ✅ | Destroy now | | reboot_server | — | ✅ | Soft-reboot an owned server | | server_logs | — | ✅ | Hypervisor-level diagnostics without logging in: status, recent provider actions, a VNC console URL, and live CPU/disk/net metrics (no text boot log exists provider-side) | | exec_command | — | ✅ | Run a shell command as root over SSH → exitcode/stdout/stderr. Requires a server provisioned with managed_key:true. Bounded: 1–120 s timeout, 256 KB output cap. | | get_firewall | — | — | Read a box's edge-firewall rules. Callable from the box itself (source-IP identity) or with an account key. | | manage_firewall | — | — | Open/close inbound ports on a box's edge firewall (protocol/port/sourceips). From the box itself or with an account key; SSH-lockout guarded. | | claim_account | — | — | Email a one-time claim code (via AWS SES) | | verify_claim | — | — | Redeem the code for an account API key. Link a wallet by also passing wallet + wallet_signature. |

Add-ons (currently API endpoints, not yet separate MCP tools): extra storage ($0.01/GB/day, attached block volume) via POST /v1/servers/{id}/storage and extra bandwidth ($2/TB beyond the 20 TB included) via POST /v1/servers/{id}/bandwidth.

Configuration (env)

| Var | Default | Purpose | |---|---|---| | AGENTMETAL_BASE_URL | https://api.agentmetal.dev | API base URL | | WALLET_PRIVATE_KEY | — | 0x… EVM key used to pay 402s. Omit and paid tools fail with a clear message. | | AGENTMETAL_NETWORK | eip155:8453 | CAIP-2 network (Base mainnet) | | AGENTMETAL_MAX_USDC | 50 | Per-request spend cap, in USDC | | AGENTMETAL_API_KEY | — | am_live_… account key, required for destroy_server / reboot_server / server_logs / exec_command |

Use with Claude Code

// .mcp.json (or claude mcp add)
{
  "mcpServers": {
    "agentmetal": {
      "command": "node",
      "args": ["packages/mcp/src/index.ts"],
      "env": {
        "WALLET_PRIVATE_KEY": "0x…",
        "AGENTMETAL_MAX_USDC": "50"
      }
    }
  }
}

The wallet must hold USDC on Base. The spend cap (AGENTMETAL_MAX_USDC) bounds what any single tool call can pay; a 402 above the cap is refused before signing.

> Status: client + server are unit-tested and the stdio handshake is verified. > Live USDC settlement needs a funded wallet + an x402 facilitator that supports the > exact / eip155:8453 kind.

Source & license

This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.

• Author: agentmetal
• Source: agentmetal/mcp
• License: MIT
• Homepage: https://agentmetal.dev

Install and usage instructions live in the source repository linked above.