mcp

Our take

Flagged: the npm package logged ~3,069 downloads in its very first week of existence (published June 27, 2026; repo created July 1) against one star, zero watchers, zero forks, and a single contributor — a pattern consistent with download inflation rather than organic adoption, compounded by 22 npm versions churned out in eight days. The pitch is an agent payment firewall: a request_payment tool that validates money-moving actions against a signed mandate and returns short-lived Ed25519 grants, plus an assess_action tool that fetches signed trust verdicts from the hosted api.fidacy.com engine (paid API key for full use). But the linked repo contains no buildable server at all — no top-level package.json or src/, just marketing assets, SKILL.md files, and a spec — despite README dev instructions implying otherwise; the actual @fidacy/mcp code ships only as an npm artifact. The mandate-gated-payments idea is genuinely interesting, but a security product whose source is not where the registry says it is and whose popularity signals do not withstand inspection has not earned trust; treat both the numbers and the 'verifiable' branding as unproven.

reviewed by hand · 2026-07-05

Something wrong or dead here? Report it

Verification record

last verified

32 days ago

github stars

1

last commit

2 mo ago

archived

no

license

Apache-2.0

npm

@fidacy/mcp

downloads / wk

845

latest version

0.18.4

in registry since

2026-07-21

github.com/lucaslubi/fidacy-mcp