# USDT Payment Verifier Stop delivering the wrong order to the wrong payer. | | | | --- | --- | | Version | 1.0.0 | | Price | 79 USD | | Licence | Single-seat | | Entry point | `server.py` | | Source | Reimplemented from scratch in English; TRC-20 and BEP-20 logic referenced from the local CLI without modifying it | ## What it does Read-only MCP server that confirms USDT payments on TRC-20 and BEP-20: correct recipient, exact amount, confirmed status, fresh timestamp. ## Tools | Tool | Description | | --- | --- | | `verify_payment` | Confirm recipient, amount, status and timestamp for one transaction. | | `recent_orders` | Summarise recent transactions for a wallet. | | `wallet_status` | Report wallet address, network and read-only posture. Never signs. | ## Network Allow-listed gateways only: `api.trongrid.io`, `tronscan.org`, `bsc-dataseed.binance.org`, `bsc-dataseed1.binance.org`. ## Security - Read-only: no file is written and no process is started. - Findings are redacted before they are returned. - Paths are confined to the root you pass. ## Requirements - Python 3.10 or above - No account, no API key, no telemetry ## Agent Skills | Skill | Purpose | | --- | --- | | `payment-verification-triage` | Confirm a USDT payment before delivering an order. | ## Tests ```bash python -m pytest -q # suite tests for this server ``` Every security claim above names a test that exists: - `test_ssrf_blocks_private_network` - `test_no_subprocess_spawn` - `test_read_only_policy_holds` ## Licence and exclusions - Single-seat licence unless a team licence is stated above. - No shell execution, no browser or account automation, no key custody. - The exclusion list is published in `security/EXCLUSIONS.md` in the team bundle so a reviewer can check it independently.