QAmcp

Copied. Paste it into Claude Code, Cursor or Codex:Fetch and follow the instructions at https://qamcp.dev/setup.md to test my MCP server.

Your AI finds your server in your project, tests it with QAmcp, explains what's wrong in plain words, fixes it with your OK, and tests again. Read the instructions

SoonYour score can change any day. QAmcp Monitor tests your server every hour and emails you when it breaks.See what Monitor does →

Directory / GotSOL.app

GotSOL.app

Q: Is GotSOL.app MCP server safe?

QAmcp's test on 31 Oct 2026: None of the hidden-instruction wordings we know were found in its tool descriptions. 0 of its 13 tools are labeled read-only; the others may change or send things. Overall it scored 77/100 on 31 Oct 2026. A test can only see what the server shows from outside, not what it does with your data behind the scenes. Connect servers from makers you trust.

by gotsol.app · https://gotsol.app/api/mcp

USDC wallets, payment links and x402 payments on Solana for AI agents.

13 tools✓ no account neededPricing: on their site

See pricing →Visit website

77 /100

PASS · WITH NOTES

Partial: 8 of 11 checks · 31 Oct 2026

Is GotSOL.app MCP server safe?

None of the hidden-instruction wordings we know were found in its tool descriptions.
0 of its 13 tools are labeled read-only; the others may change or send things.
Overall it scored 77/100 on 31 Oct 2026.

A test can only see what the server shows from outside, not what it does with your data behind the scenes. Connect servers from makers you trust.

What it can do

13 tools, in the server's own words.

get_merchant_metadata

Get metadata for a merchant by their Solana public key (merchantPubkey).

list_merchant_metadata

List merchants with location data (heatmap) for the authenticated user.

get_profile

Get the profile for the authenticated API key: userId, emails, wallets (Solana and Ethereum), and all merchants (merchantPubkey, merchantName) tied to this acc…

get_merchant_goal

Get revenue goal and progress for a merchant.

list_products

List products for a merchant.

get_payment_history

Get payment history for a merchant.

create_wallet

Open a GotSOL.app Solana wallet for this agent.

create_payment_link

Create a GotSOL.app USDC payment link for the signed-in wallet.

list_payment_links

List GotSOL.app payment links for the signed-in wallet.

get_payment_link

Get one GotSOL.app payment link, including status.

get_usdc_balance

USDC balance of the signed-in GotSOL.app wallet.

prepare_transfer

Build an unsigned USDC transfer.

send_usdc

Send USDC from the GotSOL.app wallet for this API key.

Test results

Safe mode: only tools labeled read-only were run. How the test works

!
Ready for the newest MCP version
1 warning
- !Uses an older MCP version (2025-11-25). It works today, but it isn't on the July 2026 version (2026-07-28) yet.
note
!
Every tool is described
9 warnings
- !get_merchant_goal: Inputs with no description: merchantPubkey, merchantId
- !list_products: Inputs with no description: search
- !get_payment_history: Inputs with no description: page, limit
- !create_payment_link: Inputs with no description: bearerToken
- !list_payment_links: Inputs with no description: bearerToken
- !get_payment_link: Inputs with no description: check, bearerToken
- !get_usdc_balance: Inputs with no description: bearerToken
- !prepare_transfer: Inputs with no description: bearerToken
- and 1 more
note
!
Tools are labeled safe or dangerous
1 warning
- !13 of 13 tools have no safety label (read-only or dangerous): get_merchant_metadata, list_merchant_metadata, get_profile, get_merchant_goal, list_products, get_payment_history, create_wallet, create_payment_link, list_payment_links, get_pay
note
!
Follows MCP best practices (not scored yet)
2 tips (not scored)
- !13 tools not labeled read-only don't say whether running them twice is safe (idempotentHint): get_merchant_metadata, list_merchant_metadata, get_profile, get_merchant_goal, list_products, get_payment_history and 7 more
- !13 tools don't say whether they reach outside services like the web (openWorldHint): get_merchant_metadata, list_merchant_metadata, get_profile, get_merchant_goal, list_products, get_payment_history and 7 more
note
✓
ConnectsConnected in 702 ms
pass
✓
Lists its toolsFound 13 tools
pass
✓
No known hidden instructionsNone of the hidden-instruction wordings we know were found in tool descriptions. New wordings can get past this check.
pass
✓
Fast enough
All good
- ✓Connecting took 702 ms
- ✓Listing tools took 139 ms
pass
–
Tools work with good inputs
Not tested
- –get_merchant_metadata: Not run: no safety label (if you own this server, test again in owner mode)
- –list_merchant_metadata: Not run: no safety label (if you own this server, test again in owner mode)
- –get_profile: Not run: no safety label (if you own this server, test again in owner mode)
- –get_merchant_goal: Not run: no safety label (if you own this server, test again in owner mode)
- –list_products: Not run: no safety label (if you own this server, test again in owner mode)
- –get_payment_history: Not run: no safety label (if you own this server, test again in owner mode)
- –create_wallet: Not run: no safety label (if you own this server, test again in owner mode)
- –create_payment_link: Not run: no safety label (if you own this server, test again in owner mode)
- and 5 more
not tested
–
Bad inputs give a clean errorNot tested
not tested
–
Tools work togetherNo safe tool returned data to start a chain from, so chains were not tested (not counted either way)
not tested
–
No secrets leakedNo error messages to check
not tested

Test it yourself

Free and open source. Same checks, same score.

npx qamcp-cli https://gotsol.app/api/mcp

Show this score on GitHub

Free for every server in the directory. Paste this into your README: the badge shows the score from our latest test.

[![QAmcp score](https://qamcp.dev/s/app-gotsol-gotsol.svg)](https://qamcp.dev/s/app-gotsol-gotsol.html)

Score over time

31 Oct 202677

One test so far. New tests will show here.

Reviews

Coming soon: reviews from people who use GotSOL.app, signed in with GitHub, one per person. Reviews never change the score.

Is this your server? Get an alert the moment it breaks.

QAmcp Monitor (coming soon) tests it every hour and emails you when it goes down, the score drops, a tool changes or a secret leaks. You'll also be able to claim this page and get a verified owner mark. Founding price: $19/month for life for the first 50 teams.

Have a concern, or want it removed? Ask us and we'll take it off the list. How the directory works