Underground Cultural District

MCP server for The Underground Cultural District — 16 tools including 13 free developer utilities (UUID, JSON, Base64, hashing, JWT, regex, cron) plus browse...

This package largely does what it says (utilities + a marketplace), but pay attention to these risks before installing or using it: 1) agent-mesh relays and agent-identity imply your agent messages and stored identity may travel through or be stored on external servers — ask the author where data is routed and whether messages are encrypted or retained; 2) the buy/verify flows contact remote APIs (substratesymposium.com / underground.substratesymposium.com) — do not submit private keys, secrets, or sensitive JWTs to these tools unless you trust the service and understand retention; 3) installation via npx/npm executes third-party code — review the package source (or run it in a sandbox) and confirm the repository/homepage before running; 4) note small inconsistencies in bundled files (a comment references Stripe in one file while SKILL.md references x402), so request clarification from the maintainers about payment handling and verification. If you need this skill, consider inspecting src/index.js fully or running it in an isolated environment and asking the maintainer how agent-mesh messages and agent-identity data are stored and protected.

Type: OpenClaw Skill Name: underground-cultural-district Version: 4.5.0 The skill bundle implements an MCP server for the 'Underground Cultural District,' a digital marketplace and agent service ecosystem. It provides 21 tools, including 13 standard developer utilities (e.g., UUID generation, hashing, JSON formatting) and 8 specialized tools for browsing, searching, and purchasing digital products using the x402 protocol (USDC on Base/Solana). It also includes 'Agent Services' for persistent identity storage and agent-to-agent messaging via the 'substratesymposium.com' API. The code is well-structured, lacks obfuscation, and its network activities are consistent with the stated purpose of providing a marketplace and communication relay for AI agents. No evidence of data exfiltration, malicious execution, or prompt injection was found.