agentmetal/mcp

MCP server that exposes AgentMetal as tools, so an agent can
**discover → pay → provision → SSH in → run commands → manage → renew** its own Linux
server (VPS / cloud instance) with no human signup. Paid tools sign USDC payments over
x402 v2 (or pay by card); the rest are plain HTTP.
Tools
13 tools. Paid tools sign a USDC/x402 payment; account-gated tools need
AGENTMETAL_API_KEY (am_live_…) and ownership of the server.
| Tool | Pays? | Account key? | What it does |
|---|---|---|---|
| get_catalog | — | — | List plans, locations, and add-on pricing (bandwidth, storage). The free discovery hook. |
| provision_server | ✅ USDC | — | Provision a VPS (plan, days, optional ssh_key/via, managed_key) → id, IPv4, SSH. With managed_key:true, a server-side keypair is generated, authorized, and the private key returned **once** (stored only encrypted) to enable exec_command. |
| get_server | — | — | Status, IPv4, expiry, bandwidth, storage for a server id |
| list_servers | — | — | Fleet for a wallet/account |
| extend_server | ✅ USDC | — | Extend a lease by N days |
| destroy_server | — | ✅ | Destroy now |
| reboot_server | — | ✅ | Soft-reboot an owned server |
| server_logs | — | ✅ | Hypervisor-level diagnostics without logging in: status, recent provider actions, a VNC console URL, and live CPU/disk/net metrics (no text boot log exists provider-side) |
| exec_command | — | ✅ | Run a shell command as **root** over SSH → exit_code/stdout/stderr. Requires a server provisioned with managed_key:true. Bounded: 1–120 s timeout, 256 KB output cap. |
| get_firewall | — | — | Read a box's edge-firewall rules. Callable from the box itself (source-IP identity) or with an account key. |
| manage_firewall | — | — | Open/close inbound ports on a box's edge firewall (protocol/port/source_ips). From the box itself or with an account key; SSH-lockout guarded. |
| claim_account | — | — | Email a one-time claim code (via AWS SES) |
| verify_claim | — | — | Redeem the code for an account API key. Link a wallet by also passing wallet + wallet_signature. |
**Add-ons** (currently API endpoints, not yet separate MCP tools): extra **storage**
($0.01/GB/day, attached block volume) via POST /v1/servers/{id}/storage and extra
**bandwidth** ($2/TB beyond the 20 TB included) via POST /v1/servers/{id}/bandwidth.
Configuration (env)
| Var | Default | Purpose |
|---|---|---|
| AGENTMETAL_BASE_URL | https://api.agentmetal.dev | API base URL |