Name: 402lounge
Author: 402lounge

402lounge MCP

Receipts, invoices and a payTo register for AI agents that pay with x402 (USDC on Base).

Tool-list grade A Remote · Streamable HTTP Optional API key 55 tools v0.5.1

No reviews yet by 402lounge The publisher’s own endpoint — this marketplace is not in the path

96/100

tool-list score

tools declared

remote

at its publisher

—

calls last 7d

What it does

Receipts, invoices and a payTo register for AI agents that pay with x402 (USDC on Base).

Quickstart

# 1 — add it to Claude Code
claude mcp add --scope user --transport http 402lounge-mcp https://mcp.402lounge.com/mcp

# 2 — ask your agent for something these tools do
#   lounge.requirements, lounge.terms, lounge.signup and 52 more

402lounge costs nothing on mcprush: there is no plan to choose here, no cap to set and nothing mcprush can bill you for.

Publishernot claimed

402lounge1 server

1 category

All 1 server

Collected from a public index. Nobody has claimed this account, so nothing here was written by its author — claim it if it is yours.

Installation

Where are you running it?

Every route below installs the same thing and ends at the same approval screen. Nothing here runs on your machine and nothing runs on ours: this server answers at its publisher’s own address, and what you install is the connection straight to it.

Claude Codedeclared by this listing

This is a public server: it answers at its publisher’s own address and this marketplace is not in the path. Claude Code registers it in one command; --scope user makes it available in every project. The transport below is http, as the publisher's own manifest declares it.

claude mcp add --scope user --transport http 402lounge-mcp https://mcp.402lounge.com/mcp

Reconnect, or start a new session, and the tools appear in the model’s tool list.

Free on mcprush, and it answers at its publisher’s own address: this marketplace is not in the path, so there is no key of ours to hold and no card to add — some of its tools take a key of its publisher’s own, and the rest work without.

What it asks of you

Nothing is required, but it can take Authorization header (Optional. People need none: the client signs them in with OAuth when a tool needs the account. Agents may send the lg_... session token from lounge.signup. Free tools such as register.lookup work without it.) if you want to set it. Its publisher says some of its tools need it, and the rest work without.

What it writes

One config entry pointing straight at the publisher’s own address — this marketplace is not in the path, and nothing from this listing executes on your machine.

What you approve

55 tools, with what each one reads, writes and reaches shown before you agree — the same list on every route above. Read the tool surface.

Tool surface

What the model actually sees. Descriptions are diffed on every release — see version history.

Only tools that write or reach the network

Rules, prices, the current terms and the exact sentences you will sign. Free, no account.

No parameter schema on file.

Versions, hashes and links of the terms and the privacy notice. With accept: true you confirm a new version: first call returns a challenge, second call with proof {message, signature} records it.

Parameter	Type	Required	Notes
accept	boolean	no	—
proof	object	no	An EIP-4361 message you got from a challenge, signed by your wallet
session_token	string	no	A lounge session token (lg_...) if you have one
client	string	no	Your client name, e.g. "claude-code 2.1"

Free. Your account is a company from the first call, named after you until company.update adds the legal data. With invite_code you join an existing company instead. Proves your wallet with a signature: first call returns a challenge, second call with proof {message, signature} creates the account. Wallets that cannot sign pay 0.001 USDC over HTTP instead (pay_instead in the answer), once payments

Parameter	Type	Required	Notes
name	string	yes	Your name as an agent, unique inside your company, e.g. "Research"
invite_code	string	no	From company.invite, to join that company
email	string	no	Optional: where documents and notices of your new company go. Ignored with invite_code.
address	string	no	Your wallet address, so the challenge comes back as a finished message
provider	string	no	awal, cdp, viem, other
accept	object	yes	—
proof	object	no	An EIP-4361 message you got from a challenge, signed by your wallet
session_token	string	no	A lounge session token (lg_...) if you have one
client	string	no	Your client name, e.g. "claude-code 2.1"

Who you are (agent and role), your company with its agents, people and level, its wallets, your apps, terms state and pending notices.

Parameter	Type	Required	Notes
proof	object	no	An EIP-4361 message you got from a challenge, signed by your wallet
session_token	string	no	A lounge session token (lg_...) if you have one
client	string	no	Your client name, e.g. "claude-code 2.1"

Your name inside the company, 1 to 40 characters, unique in the company. Company data lives in company.update.

Parameter	Type	Required	Notes
name	string	yes	—
proof	object	no	An EIP-4361 message you got from a challenge, signed by your wallet
session_token	string	no	A lounge session token (lg_...) if you have one
client	string	no	Your client name, e.g. "claude-code 2.1"

The new wallet proves itself: first call returns a challenge for it, second call with wallet_proof {message, signature} adds it. It belongs to your company and you operate it. How many follows the plan: Free 1, Books 5 per agent and 15 in all, Books for teams without limit.

Parameter	Type	Required	Notes
address	string	yes	—
provider	string	no	—
wallet_proof	object	no	—
proof	object	no	An EIP-4361 message you got from a challenge, signed by your wallet
session_token	string	no	A lounge session token (lg_...) if you have one
client	string	no	Your client name, e.g. "claude-code 2.1"

Your own wallets (admins: any wallet of the company). Not the one you sign in with, and never your last one. Sessions made with that wallet end. Its receipts stay.

Parameter	Type	Required	Notes
address	string	yes	—
proof	object	no	An EIP-4361 message you got from a challenge, signed by your wallet
session_token	string	no	A lounge session token (lg_...) if you have one
client	string	no	Your client name, e.g. "claude-code 2.1"

The wallet you sign in with. It has to be assigned to you.

Parameter	Type	Required	Notes
address	string	yes	—
proof	object	no	An EIP-4361 message you got from a challenge, signed by your wallet
session_token	string	no	A lounge session token (lg_...) if you have one
client	string	no	Your client name, e.g. "claude-code 2.1"

All wallets of your company, each with the agent that operates it. mine: true lists only yours.

Parameter	Type	Required	Notes
mine	boolean	no	—
proof	object	no	An EIP-4361 message you got from a challenge, signed by your wallet
session_token	string	no	A lounge session token (lg_...) if you have one
client	string	no	Your client name, e.g. "claude-code 2.1"

create: a new lg_ token (needs a signature or an existing token). list and revoke manage them.

Parameter	Type	Required	Notes
action	string	yes	—
session_id	string	no	—
proof	object	no	An EIP-4361 message you got from a challenge, signed by your wallet
session_token	string	no	A lounge session token (lg_...) if you have one
client	string	no	Your client name, e.g. "claude-code 2.1"

Which clients this agent has used. deactivate ends their sessions, activate turns them back on, disconnect forgets them.

Parameter	Type	Required	Notes
action	string	no	—
app_client	string	no	—
proof	object	no	An EIP-4361 message you got from a challenge, signed by your wallet
session_token	string	no	A lounge session token (lg_...) if you have one
client	string	no	Your client name, e.g. "claude-code 2.1"

Terms changes, moderation decisions, deletion and security notes, for you and for your company. ack marks one as read.

Parameter	Type	Required	Notes
action	string	no	—
id	integer	no	—
all	boolean	no	—
proof	object	no	An EIP-4361 message you got from a challenge, signed by your wallet
session_token	string	no	A lounge session token (lg_...) if you have one
client	string	no	Your client name, e.g. "claude-code 2.1"

A one-time browser link (10 minutes) into your company's dashboard, signed in as you, for the human behind you.

Parameter	Type	Required	Notes
proof	object	no	An EIP-4361 message you got from a challenge, signed by your wallet
session_token	string	no	A lounge session token (lg_...) if you have one
client	string	no	Your client name, e.g. "claude-code 2.1"

Everything 402lounge keeps about you as an agent off chain, as JSON. The company's books come from receipts.list and invoices.list.

Parameter	Type	Required	Notes
proof	object	no	An EIP-4361 message you got from a challenge, signed by your wallet
session_token	string	no	A lounge session token (lg_...) if you have one
client	string	no	Your client name, e.g. "claude-code 2.1"

Schedules your deletion as an agent in 7 days. cancel: true keeps you. Your wallets and receipts stay with the company. Needs a fresh signature with the delete statement (first call returns the challenge).

Parameter	Type	Required	Notes
confirm	boolean	yes	—
cancel	boolean	no	—
proof	object	no	An EIP-4361 message you got from a challenge, signed by your wallet
session_token	string	no	A lounge session token (lg_...) if you have one
client	string	no	Your client name, e.g. "claude-code 2.1"

Call this after every x402 payment: the transaction hash from the PAYMENT-RESPONSE header plus the URL you paid. 402lounge matches it with the transfer on Base and writes a receipt with the seller from the register, the catalogue description and a provisional EUR value. Free.

Parameter	Type	Required	Notes
tx_hash	string	yes	The settlement transaction, 0x plus 64 hex characters
resource_url	string	no	The URL you paid for (the 402 resource)
amount	string	no	What you paid, in USDC, e.g. "0.002"
description	string	no	What you bought, in your words. The seller's catalogue wins when it knows the URL.
pay_to	string	no	The payTo address from the payment requirements
network	string	no	—
payment_response		no	The raw PAYMENT-RESPONSE header, if you still have it
proof	object	no	An EIP-4361 message you got from a challenge, signed by your wallet
session_token	string	no	A lounge session token (lg_...) if you have one
client	string	no	Your client name, e.g. "claude-code 2.1"

Receipts of your company for one month (default: the current month, Europe/Berlin), newest first, each with the agent that paid. Totals per seller and per agent, and the reports still waiting for the chain. mine: true, agent_id or wallet narrow it.

Parameter	Type	Required	Notes
month	string	no	Like 2026-10
status	string	no	Only receipts with this seller status
limit	integer	no	—
before	integer	no	Page: the smallest receipt id of the previous page
mine	boolean	no	Only the receipts of wallets you operated
agent_id	string	no	Only one agent of the company
wallet	string	no	Only one paying wallet
proof	object	no	An EIP-4361 message you got from a challenge, signed by your wallet
session_token	string	no	A lounge session token (lg_...) if you have one
client	string	no	Your client name, e.g. "claude-code 2.1"

A single receipt of your company by id or transaction hash.

Parameter	Type	Required	Notes
id	string	yes	Receipt id or 0x transaction hash
proof	object	no	An EIP-4361 message you got from a challenge, signed by your wallet
session_token	string	no	A lounge session token (lg_...) if you have one
client	string	no	Your client name, e.g. "claude-code 2.1"

Wallet in, seller out: the listing that owns a payTo address, its verification level, its paid endpoints and the last health check. Free, no account. Call it before you pay someone new.

Parameter	Type	Required	Notes
address	string	yes	A payTo address on Base

Legal data, VAT status, tier and level, what is missing for the next tier, its agents with this month's spending, its people and your role.

Parameter	Type	Required	Notes
proof	object	no	An EIP-4361 message you got from a challenge, signed by your wallet
session_token	string	no	A lounge session token (lg_...) if you have one
client	string	no	Your client name, e.g. "claude-code 2.1"

Admins only. Your account starts as a company named after you. A company is ready for invoices (tier invoice_ready) once it has name, legal_form (or sole_proprietor), owner_name for a sole proprietor, address_line1, postal_code, city, country, a confirmed email and its VAT status with the number: in the EU a VAT id VIES confirms (checked at once), or the tax_number for small businesses and VAT-exe

Parameter	Type	Required	Notes
name	string	no	Legal name of the company, without the legal form
legal_form	string	no	GmbH, UG, AG, e.K., Inc., ...
address_line1	string	no	—
address_line2	string	no	—
postal_code	string	no	—
city	string	no	—
address_state	string	no	State or province, written after the city in the USA, Canada and Australia (TX, ON, NSW)
owner_name	string	no	A sole proprietorship (Einzelunternehmen, e.K., sole trader ...): the first and last name of the owner. It stands on every document, never in the register or on a listing. Empty removes it
sole_proprietor	boolean	no	True for one person without a legal form of its own where the country has none to choose. Then owner_name is required
country	string	no	ISO 3166 two-letter code, e.g. DE
language	string/null	no	Language of documents and mails: en, de, fr, it, es, nl, pt, sv, da, fi or nb. Null takes the language of the country
vat_id	string	no	VAT id in the format of its country, like DE123456789 or ATU12345678 (GET /v1/countries). EU numbers are checked against VIES
tax_number	string	no	—
vat_status		no	How the company stands with VAT: vat_id, tax_number (registered, VAT id still to come), small_business (§ 19 UStG) exempt (only VAT-exempt sales) or not_registered (no VAT registration, the USA or ano
skr	string	no	Chart of accounts for exports. OWN takes own_accounts
own_accounts		no	With skr OWN: the expense, clearing and USDC holding accounts of your chart, 4 to 8 digits
currency	string	no	The currency amounts are shown in, next to USDC: EUR (default, the currency of the documents), USD, or any currency with an ECB reference rate
fx_method	string	no	How USDC becomes EUR on documents. Today only ecb_daily (ECB reference rate of the payment day)
email	string	no	Where documents and notices go. A code confirms it
proof	object	no	An EIP-4361 message you got from a challenge, signed by your wallet

Asks VIES again and updates the tier. Admins, owners and finance.

Parameter	Type	Required	Notes
proof	object	no	An EIP-4361 message you got from a challenge, signed by your wallet
session_token	string	no	A lounge session token (lg_...) if you have one
client	string	no	Your client name, e.g. "claude-code 2.1"

Where documents and notices go. start sets the address and mails a 6-digit code, confirm checks it, remove clears it (only while the account has no company data). Admins only.

Parameter	Type	Required	Notes
action	string	yes	—
email	string	no	—
code	string	no	—
proof	object	no	An EIP-4361 message you got from a challenge, signed by your wallet
session_token	string	no	A lounge session token (lg_...) if you have one
client	string	no	Your client name, e.g. "claude-code 2.1"

Admins only. A code valid for seven days. A new agent signs up with lounge.signup {invite_code}, an agent with its own account calls company.join {code} and brings its wallets and receipts.

Parameter	Type	Required	Notes
proof	object	no	An EIP-4361 message you got from a challenge, signed by your wallet
session_token	string	no	A lounge session token (lg_...) if you have one
client	string	no	Your client name, e.g. "claude-code 2.1"

With an invite code. Works while your own account has no company data, no vouchers and no other agents: your wallets, receipts and reports move into that company and your own account goes away. You join as an agent, and an admin there can make you admin.

Parameter	Type	Required	Notes
code	string	yes	—
proof	object	no	An EIP-4361 message you got from a challenge, signed by your wallet
session_token	string	no	A lounge session token (lg_...) if you have one
client	string	no	Your client name, e.g. "claude-code 2.1"

Every agent with its role, its wallets and what it paid this month (receipts, USDC, EUR).

Parameter	Type	Required	Notes
proof	object	no	An EIP-4361 message you got from a challenge, signed by your wallet
session_token	string	no	A lounge session token (lg_...) if you have one
client	string	no	Your client name, e.g. "claude-code 2.1"

Admins change any agent, an agent may rename itself. role is admin or agent. The company always keeps an admin or an owner.

Parameter	Type	Required	Notes
agent_id	string	yes	—
name	string	no	—
role	string	no	—
proof	object	no	An EIP-4361 message you got from a challenge, signed by your wallet
session_token	string	no	A lounge session token (lg_...) if you have one
client	string	no	Your client name, e.g. "claude-code 2.1"

Admins only. Schedules the agent's deletion in 7 days. Its wallets stay with the company, unassigned, and its receipts stay in the books.

Parameter	Type	Required	Notes
agent_id	string	yes	—
proof	object	no	An EIP-4361 message you got from a challenge, signed by your wallet
session_token	string	no	A lounge session token (lg_...) if you have one
client	string	no	Your client name, e.g. "claude-code 2.1"

Admins only. agent_id null leaves the wallet unassigned. Receipts already written keep the agent that paid, new ones get the new agent. Sessions of the previous agent made with that wallet end.

Parameter	Type	Required	Notes
address	string	yes	—
agent_id		yes	—
proof	object	no	An EIP-4361 message you got from a challenge, signed by your wallet
session_token	string	no	A lounge session token (lg_...) if you have one
client	string	no	Your client name, e.g. "claude-code 2.1"

A name for the company's own lists, e.g. "Research budget". Agents may name their own wallets, admins any. label null clears it.

Parameter	Type	Required	Notes
address	string	yes	—
label		yes	—
proof	object	no	An EIP-4361 message you got from a challenge, signed by your wallet
session_token	string	no	A lounge session token (lg_...) if you have one
client	string	no	Your client name, e.g. "claude-code 2.1"

list shows them. invite adds a person by email with a role: owner (everything), finance (documents, VAT check, plan), adviser (reads and exports, changes nothing, for a tax adviser), viewer (reads). They sign in by email link. An address that is in another company already keeps its login and gets this company next to the others. role changes a role, remove takes someone out. Admins and owners only

Parameter	Type	Required	Notes
action	string	no	—
email	string	no	—
role	string	no	—
member_id	string	no	—
proof	object	no	An EIP-4361 message you got from a challenge, signed by your wallet
session_token	string	no	A lounge session token (lg_...) if you have one
client	string	no	Your client name, e.g. "claude-code 2.1"

Where the tax adviser or the team ask for things, like a receipt that is missing or a purchase nobody described. list shows open ones (status: done or all for more), show one with its answers (request_id), ask writes one (title, body, optional month like 2026-10 and receipt_id), answer replies (request_id, body) and opens it again, done and reopen change its status, delete takes it back. A new req

Parameter	Type	Required	Notes
action	string	no	—
status	string	no	—
request_id	string	no	—
title	string	no	—
body	string	no	—
month	string	no	—
receipt_id	integer	no	—
proof	object	no	An EIP-4361 message you got from a challenge, signed by your wallet
session_token	string	no	A lounge session token (lg_...) if you have one
client	string	no	Your client name, e.g. "claude-code 2.1"

Monthly vouchers per seller (and later invoices), newest first. Optional month like 2026-10.

Parameter	Type	Required	Notes
month	string	no	—
limit	integer	no	—
proof	object	no	An EIP-4361 message you got from a challenge, signed by your wallet
session_token	string	no	A lounge session token (lg_...) if you have one
client	string	no	Your client name, e.g. "claude-code 2.1"

The full document as JSON, by id or number, with where its archived files lie and their sha256. The PDF is at /v1/invoices/{id}/pdf with your session token.

Parameter	Type	Required	Notes
id	string	yes	—
proof	object	no	An EIP-4361 message you got from a challenge, signed by your wallet
session_token	string	no	A lounge session token (lg_...) if you have one
client	string	no	Your client name, e.g. "claude-code 2.1"

Admins, owners and finance. Runs by itself every night for last month. Call it for an older finished month or after a cancellation. One document per seller: the monthly overview on Free, the voucher with the tax note on Books. Payments that arrive after a document get a supplement. Pairs with receipts that lack a EUR rate are skipped and listed. Needs the company data and a confirmed email (tier c

Parameter	Type	Required	Notes
month	string	no	Finished month, default: last month
proof	object	no	An EIP-4361 message you got from a challenge, signed by your wallet
session_token	string	no	A lounge session token (lg_...) if you have one
client	string	no	Your client name, e.g. "claude-code 2.1"

Drafts of the documents the month would get today, one per seller, with lines, totals and the tax case. Nothing is stored and there is no number. Default: the current month (Europe/Berlin). The PDF of a draft is at /v1/invoices/draft/pdf?month=&seller=.

Parameter	Type	Required	Notes
month	string	no	—
proof	object	no	An EIP-4361 message you got from a challenge, signed by your wallet
session_token	string	no	A lounge session token (lg_...) if you have one
client	string	no	Your client name, e.g. "claude-code 2.1"

Admins, owners and finance. Issues a cancellation for a document, with your reason. The original keeps its number and turns to cancelled. Its payments are open again, so invoices.issue for that month (or the nightly run for last month) puts them in a new document.

Parameter	Type	Required	Notes
id	string	yes	Id or number of the document
reason	string	yes	—
proof	object	no	An EIP-4361 message you got from a challenge, signed by your wallet
session_token	string	no	A lounge session token (lg_...) if you have one
client	string	no	Your client name, e.g. "claude-code 2.1"

Admin agents and the owner. Closes the company in 30 days: name confirms it with the company name. Until then everything can be read and the export works (GET /v1/company/export), calls that write are refused with company_closing. Then agents, people, sign-ins, sessions and wallets are removed. Receipts and issued documents stay locked until their retention period ends. cancel: true keeps the comp

Parameter	Type	Required	Notes
name	string	no	The company name, as confirmation
cancel	boolean	no	—
now	boolean	no	Close at once and delete everything
export_kept	boolean	no	With now: you downloaded the export and keep the records yourself
proof	object	no	An EIP-4361 message you got from a challenge, signed by your wallet
session_token	string	no	A lounge session token (lg_...) if you have one
client	string	no	Your client name, e.g. "claude-code 2.1"

Services that take x402 payments, with their level (0 listed, 1 wallet verified), what they offer (MCP, .well-known/x402, llms.txt) and a link. Search by name, description or host. filter: all, verified or mcp. sort: level, new or name. Free, no account.

Parameter	Type	Required	Notes
q	string	no	Words to look for, e.g. "on-chain data"
filter	string	no	—
sort	string	no	—
limit	integer	no	—
offset	integer	no	—

A listing with its wallets (network and level), what its calls cost, other networks it takes and its links. Company and location show from level 2 on. Free, no account.

Parameter	Type	Required	Notes
slug	string	yes	The listing slug, e.g. glassnode

Admin agents and owners. A wallet the listing names proves the service is your company's: first call returns a challenge for that wallet, second call with wallet_proof {message, signature} signed by it claims the listing. The wallet moves to level 1 and payments to it name the listing on receipts. A listing your company holds takes more wallets the same way.

Parameter	Type	Required	Notes
slug	string	yes	The listing slug, e.g. glassnode
address	string	yes	A payTo wallet of the listing
wallet_proof	object	no	—
proof	object	no	An EIP-4361 message you got from a challenge, signed by your wallet
session_token	string	no	A lounge session token (lg_...) if you have one
client	string	no	Your client name, e.g. "claude-code 2.1"

We call one paid URL once without paying, read its 402 answer and show the listing it would make: name, description, price, logo and the wallet you get paid on. Says so when the host or the wallet is listed already, then claim that listing instead.

Parameter	Type	Required	Notes
url	string	yes	One https URL that answers 402 Payment Required
proof	object	no	An EIP-4361 message you got from a challenge, signed by your wallet
session_token	string	no	A lounge session token (lg_...) if you have one
client	string	no	Your client name, e.g. "claude-code 2.1"

Admin agents and owners. Puts the service behind one paid URL into the directory on level 0, under your company: its payTo wallet on Base, the call and its price from the 402 answer. contact_email is only for us, never shown. Then prove the wallet with directory.claim for level 1.

Parameter	Type	Required	Notes
url	string	yes	—
contact_email	string	yes	—
proof	object	no	An EIP-4361 message you got from a challenge, signed by your wallet
session_token	string	no	A lounge session token (lg_...) if you have one
client	string	no	Your client name, e.g. "claude-code 2.1"

Your company's plan with its period and end, its limits (null means no limit), what it uses this month (transactions, agents, wallets), whether the one-time 20 % over the limit is used, whether the month is locked, the archive (keeps receipts and documents without a paid plan, archive) and what happens to them without either (retention).

Parameter	Type	Required	Notes
proof	object	no	An EIP-4361 message you got from a challenge, signed by your wallet
session_token	string	no	A lounge session token (lg_...) if you have one
client	string	no	Your client name, e.g. "claude-code 2.1"

Admin agents, the owner and finance. A checkout link at Polar for Books or Books for teams (plan + period), monthly or yearly (a year costs ten months), or for the archive (archive: month or year, €5 a month or €50 a year), which keeps receipts and documents of a company without a paid plan. Polar is the seller: it charges, handles VAT, issues the invoice and renews until cancelled. The invoices a

Parameter	Type	Required	Notes
plan	string	no	—
period	string	no	—
archive	string	no	The archive instead of a plan, monthly or yearly
proof	object	no	An EIP-4361 message you got from a challenge, signed by your wallet
session_token	string	no	A lounge session token (lg_...) if you have one
client	string	no	Your client name, e.g. "claude-code 2.1"

Admin agents, the owner and finance. A link to Polar's customer portal: payment method, invoices, change or cancel the plan.

Parameter	Type	Required	Notes
proof	object	no	An EIP-4361 message you got from a challenge, signed by your wallet
session_token	string	no	A lounge session token (lg_...) if you have one
client	string	no	Your client name, e.g. "claude-code 2.1"

Admin agents, the owner and finance. An offer to pay in USDC on Base: a plan (plan + period), the archive for a company without a paid plan (archive: month or year) or the seller check for level 2 (seller_check: your listing slug, one year). The price is net in EUR, with VAT for your company and the ECB rate of the day, and the amount in USDC is unique for 30 minutes. Pay it yourself with your x40

Parameter	Type	Required	Notes
plan	string	no	—
archive	string	no	The archive, monthly or yearly
seller_check	string	no	Slug of your listing, for the seller check
period	string	no	—
quote_id	string	no	Read an offer instead of asking for one
proof	object	no	An EIP-4361 message you got from a challenge, signed by your wallet
session_token	string	no	A lounge session token (lg_...) if you have one
client	string	no	Your client name, e.g. "claude-code 2.1"

The invoices 402lounge issued to your company for payments in USDC, newest first, each with a PDF link (add ?lang=de for German). With id: one invoice with its full content. Plans bought through Polar get their invoice from Polar.

Parameter	Type	Required	Notes
id	string	no	—
proof	object	no	An EIP-4361 message you got from a challenge, signed by your wallet
session_token	string	no	A lounge session token (lg_...) if you have one
client	string	no	Your client name, e.g. "claude-code 2.1"

Your company as a seller: every listing with its level (0 listed, 1 wallet verified, 2 company verified, 3 invoicing), the company check and its steps, the seller profile (register entry, representative), the invoicing mandate and self-billing, and what is missing for the next level.

Parameter	Type	Required	Notes
proof	object	no	An EIP-4361 message you got from a challenge, signed by your wallet
session_token	string	no	A lounge session token (lg_...) if you have one
client	string	no	Your client name, e.g. "claude-code 2.1"

Admin agents and owners. What level 2 needs on top of the company data: the name of the person who acts for the company (representative_name, the role is optional). The commercial register court and number help the check but are optional, no_register: true where there is none. sole_proprietor: true when the company is one person, then show_name says whether the register may show the name.

Parameter	Type	Required	Notes
register_court		no	The court or office that keeps the register, where the country names one: Registergericht in Germany, Firmenbuchgericht in Austria. GET /v1/countries names it per country
register_number		no	The number in the register, as the register writes it (GET /v1/countries names the register per country)
no_register	boolean	no	—
representative_name		no	—
representative_role		no	e.g. Managing director
sole_proprietor	boolean	no	—
show_name	boolean	no	—
proof	object	no	An EIP-4361 message you got from a challenge, signed by your wallet
session_token	string	no	A lounge session token (lg_...) if you have one
client	string	no	Your client name, e.g. "claude-code 2.1"

Level 2 for a listing of your company on level 1: action start {listing} opens the check and returns its steps. The domain of the listing is proved by an email address at it: email {id, email} sends a code there, confirm_email {id, code} confirms it. Without a mailbox, add the DNS TXT record from the check instead (_402lounge.<host>, value 402lounge-verify=<token>). verify {id} runs the steps agai

Parameter	Type	Required	Notes
action	string	yes	—
listing	string	no	The listing slug, e.g. glassnode
id	string	no	—
email	string	no	email: an address at the domain of the listing
code	string	no	confirm_email: the six-digit code from the mail
proof	object	no	An EIP-4361 message you got from a challenge, signed by your wallet
session_token	string	no	A lounge session token (lg_...) if you have one
client	string	no	Your client name, e.g. "claude-code 2.1"

Admin agents and owners. get shows the mandate text (link, version, sha256) and whether it is signed. sign: first call returns a challenge, sign it with your wallet and call again with agreement_proof {message, signature}. Then, with a listing on level 2 and Books, buyers on level 3 get monthly invoices in your name (§ 14 (2) UStG), issued by 402lounge. revoke ends it at the end of the month.

Parameter	Type	Required	Notes
action	string	yes	—
agreement_proof	object	no	—
confirm	boolean	no	—
proof	object	no	An EIP-4361 message you got from a challenge, signed by your wallet
session_token	string	no	A lounge session token (lg_...) if you have one
client	string	no	Your client name, e.g. "claude-code 2.1"

Admin agents and owners. Without a mandate, a company on level 2 can agree that its buyers on level 3 issue credit notes (Gutschriften) for what they paid, on any plan. get, sign (challenge, then agreement_proof), revoke (at the end of the month).

Parameter	Type	Required	Notes
action	string	yes	—
agreement_proof	object	no	—
confirm	boolean	no	—
proof	object	no	An EIP-4361 message you got from a challenge, signed by your wallet
session_token	string	no	A lounge session token (lg_...) if you have one
client	string	no	Your client name, e.g. "claude-code 2.1"

Invoices 402lounge issued in your name (L-2610-10427-01), credit notes your buyers issued to you (G-...) and their cancellations, newest first, each with its e-invoice. With id the whole document. PDF and XML: GET /v1/seller/invoices/{id}/pdf and /xml.

Parameter	Type	Required	Notes
id	string	no	—
month	string	no	—
limit	integer	no	—
proof	object	no	An EIP-4361 message you got from a challenge, signed by your wallet
session_token	string	no	A lounge session token (lg_...) if you have one
client	string	no	Your client name, e.g. "claude-code 2.1"

Admin agents, the owner and finance. Cancels an invoice in your name or a credit note you received, with a reason: a cancellation in your number range follows, the original stays. The payments are open again and the next monthly run issues them anew.

Parameter	Type	Required	Notes
id	string	yes	—
reason	string	yes	—
proof	object	no	An EIP-4361 message you got from a challenge, signed by your wallet
session_token	string	no	A lounge session token (lg_...) if you have one
client	string	no	Your client name, e.g. "claude-code 2.1"

Free

$0 forever

Every tool — any call limit is its publisher’s, not ours
No card, and mcprush charges nothing for it
Runs at its publisher’s own address — this marketplace is not in the path
Nothing to cap, because mcprush bills nothing

Nothing here is billable: mcprush charges nothing to install 402lounge or to call it, at any volume.

ATool-list grade · score 96 / 100

Release 0.5.1 · scanned 8 Nov 2026

Graded from the tools this server lists, not from its source code.

Two independent axes, because powerful and malicious are different questions. The grade is threat only. The capability level is blast radius, and it is never a penalty on the grade — it is priced as one subtract-only term in the score, where you can see it.

Threat score100

Client score96

Findings0 threat · 0 capability

Capabilityminimal

Coveragemanifest

Verificationnot in this report

Surface digestb4a7191960998223434b8e011fba0338ccf9b9f521a512ad4187721ee770b389

Score vectorthreat 100 → client 96

Term	Level	What it prices	Points
capability-exposure	minimal	capability blast radius (minimal) — client exposure if the model is manipulated	−0
coverage-honesty	manifest	inspection depth (manifest) — how much of the target the scan could see	−4

score = clamp(round(threatScore − E_cap − E_ver − E_cov), 0, 100). No model, no opinion, no network call at scoring time: the same methodology version against the same bytes always produces this number, and every line above is a field of the report rather than a summary of it.

What the scan could actually read

A grade is only as meaningful as its coverage, so the scanner publishes its own depth before it publishes its result.

The scan read each tool’s name, description, input schema and annotations exactly as the server listed them the last time it answered us; no code was reviewed. We ask the server again about once a month, and a list that changed is graded again.

Tool surfaceread

Implementation sourcenot available

Package metadatanot available

Live transportnot available

The implementation source was not read — this reflects the declared tool metadata only.

Capability — what it could do if the model were manipulated

Tags derived from each tool’s schema and the implementation, not from what the tool calls itself. minimal is the level these add up to.

Tool	Capability tags	Why the tag was assigned
lounge.requirements	no tags
lounge.terms	no tags
lounge.signup	no tags
lounge.me	no tags
lounge.agent.update	no tags
lounge.wallet.add	no tags
lounge.wallet.remove	no tags
lounge.wallet.primary	no tags
lounge.wallet.list	no tags
lounge.session	no tags
lounge.apps	no tags
lounge.notices	no tags
lounge.dashboard.link	no tags
lounge.account.export	no tags
lounge.account.delete	no tags
receipts.record	no tags
receipts.list	no tags
receipts.get	no tags
register.lookup	no tags
company.get	no tags
company.update	no tags
company.vat_check	no tags
company.email	no tags
company.invite	no tags
company.join	no tags
company.agents	no tags
company.agent.update	no tags
company.agent.remove	no tags
company.wallet.assign	no tags
company.wallet.label	no tags
company.members	no tags
company.requests	no tags
invoices.list	no tags
invoices.get	no tags
invoices.issue	no tags
invoices.draft	no tags
invoices.cancel	no tags
company.close	no tags
directory.search	no tags
directory.get	no tags
directory.claim	no tags
directory.preview	no tags
directory.submit	no tags
billing.get	no tags
billing.checkout	no tags
billing.portal	no tags
billing.quote	no tags
billing.invoices	no tags
seller.get	no tags
seller.profile	no tags
seller.check	no tags
seller.mandate	no tags
seller.self_billing	no tags
seller.invoices	no tags
seller.invoices.cancel	no tags

Toxic-flow graph

The lethal trifecta, checked as a graph rather than as a checklist: untrusted input, a sensitive source and an external sink have to meet before there is a path worth worrying about.

The public result for this release does not print the flow graph, so there is nothing to show here. That is not the same as "no paths were found": what the scan did read is above, under coverage.

Supply chain and provenance

Integrityfirst-seen

Surface digestb4a7191960998223

Scanned2026-11-08

This is the first scan of this surface here, so there is nothing yet to compare it against.

Every result on this tab comes from one deterministic pass over the published package — offline, rule by rule, and auditable line by line above. Same methodology version, same bytes, same score.