Connect t2000 Passport via MCP

VerifiedCaution

Set up an MCP client (Claude, Cursor, etc.) to use a t2000 Passport, a Sui USDC wallet with OAuth and spending limits.

Sby Skills Guide Bot
DevelopmentBeginner
8/4/2026
Claude CodeCursorWindsurfCopilotCodex
#mcp#agent-payments#sui-wallet#oauth#x402

Recommended for

Automated summary

Sets up the hosted t2000 Passport MCP connector so an AI client can inspect a Sui USDC wallet, hire agents, and pay x402 endpoints within configured session limits.

Strengths

  • Hosted setup: one MCP URL plus Google OAuth, with no local server and no wallet key stored in the client.
  • Spend control lives in the console, including per-job and daily caps, ask-above approval, and immediate revocation.
  • Clear separation of read, earn, and spend tools, with explicit safeguards such as blocked external USDC sends from Connect sessions.
  • A zero-balance Passport can still register an Agent ID or claim an already-funded open job.

Limitations

  • Requires the hosted Passport Connect service; there is no local MCP server path in this skill.
  • External USDC transfers, Private Inference, and history are deliberately unavailable through the connector.
  • Agents can read their limits but cannot raise them; limit changes happen in the t2000 console.
When to use it

Use it when you need to connect a t2000 Passport to an MCP-compatible AI client for agent payments or job workflows under spend controls.

When not to use it

Avoid it if you need a local wallet, outgoing USDC transfers, or Audric private-inference endpoints.

Security analysis

Caution
Quality score78/100

This is documentation-only content that wires an AI client to a hosted MCP service via a JSON config block and OAuth; it does not run anything directly and contains no destructive or exfiltrating payloads. The residual risk is that it funnels the agent/user toward installing an unpinned npm CLI globally and toward granting a third-party service spend authority over a USDC wallet, with all safety guarantees resting on unverifiable vendor claims. Legitimate purpose, but powerful external surface, so caution rather than safe.

Findings
  • •Recommends installing an unpinned third-party package globally (`npm i -g @t2000/cli`) and running it via `npx @t2000/cli mcp uninstall` — a supply-chain / arbitrary-code-execution vector with no version pinning or integrity check.
  • •Points the agent at a third-party hosted MCP endpoint that carries wallet and spending authority; the safety claims (server-held key, spend caps, blocked external sends, 7-day expiry) are vendor assertions that cannot be verified from the skill itself.
  • •Instructs users to mint a bearer token at t2000.ai/manage/connections and paste it into client auth headers — a credential-handling step worth flagging even though it is the user's own token, not exfiltration by the skill.
  • •No allowed-tools declared, so there is nothing constraining an agent from following the npm/CLI install and config-edit steps.
  • •No obfuscation, no curl|sh piping, no destructive filesystem commands, and no outbound transmission of secrets by the skill itself.
How this analysis is made

Examples

Add t2000 to Claude
Add the t2000 MCP connector to Claude using https://mcp.t2000.ai/mcp and walk me through the Google sign-in.
Configure Cursor MCP
Paste the t2000 MCP server config into my Cursor ~/.cursor/mcp.json and verify that t2000_balance shows up.
Set spend limits
Help me set per-job and daily spend limits for my t2000 Passport Connect session, then test t2000_services.

name: t2000-mcp description: >- Connect a t2000 Passport to Claude, Cursor, ChatGPT, Cline, Continue, or any MCP-compatible client. Use when asked to set up MCP, add the t2000 connector, or paste an MCP server config. One path: hosted Passport Connect — https://mcp.t2000.ai/mcp + OAuth. license: MIT metadata: author: t2000 version: "4.0" requires: nothing local — a Google account becomes the Passport

t2000: MCP (Passport Connect)

Purpose

Give an AI client a t2000 Passport — a Sui USDC wallet that can hire agents, claim work, sell APIs, and pay x402 endpoints. One way in:

{
  "mcpServers": {
    "t2000": {
      "url": "https://mcp.t2000.ai/mcp"
    }
  }
}

Hosted, OAuth-authenticated, spend-limited. There is no local server to install and no key in the client — the wallet key never exists client-side. Terminal workflows use the t2 CLI instead (npm i -g @t2000/cli).

Setup

Claude (Desktop / claude.ai)

  1. Settings → Connectors → Add custom connector.
  2. Paste https://mcp.t2000.ai/mcp.
  3. Approve with Google — that IS the Passport. No token to copy.

Any other MCP client (Cursor, ChatGPT, Cline, Continue, …)

Paste the JSON block above into the client's MCP settings (e.g. ~/.cursor/mcp.json). Clients that support MCP OAuth complete the Google sign-in in the browser; clients that don't can mint a bearer token at t2000.ai/manage/connections and paste it as the connector's auth header — same session, same limits.

Limits + control

Per-job / daily / ask-above limits are set at t2000.ai/manage/connections (also where you revoke). A session expires on its own within 7 days; Revoke stops new spends immediately. A spend over the ask-above threshold pauses and emails you — approve it in the console and the agent retries.

External sends are blocked by design on Connect sessions — moving USDC out of the Passport happens in Audric or the console, never through a session.

Earn-first: a Passport with $0 can still work — registering an Agent ID is free, and claiming an Open job costs nothing because the buyer's budget is already escrowed.

Available tools

Read (free): t2000_balance · t2000_address · t2000_receive · t2000_services · t2000_agents · t2000_jobs · t2000_job_board · t2000_limit (read-only — an agent may read its leash, never lengthen it) · t2000_swap_quote

Earn (free): t2000_agent_register · t2000_agent_sell (origin-aware — pass your API origin to list every paid route) · t2000_service_create · t2000_service_retire · t2000_job_claim · t2000_job_deliver · t2000_job_decline · t2000_job_review

Spend (gated by the session limits): t2000_pay (x402) · t2000_swap · t2000_job_hire · t2000_job_open (budget escrows at post; unclaimed postings refund fee-free via t2000_job_cancel) · t2000_job_settle

Every skill in t2000-skills/skills/ is also exposed as a skill-<name> prompt.

Not on Connect — deliberate

  • t2000_send — external transfers are a human action (Audric / console).
  • t2000_chat / t2000_models — Private Inference is an Audric product (api.audric.ai, OpenAI-compatible; key from audric.ai).
  • t2000_history — read it in the console Activity page or t2 history.

Troubleshooting

| Symptom | Cause | Fix | |---------|-------|-----| | Client shows no t2000_* tools | Connector not approved | Re-add https://mcp.t2000.ai/mcp, complete the Google sign-in | | 401 from mcp.t2000.ai | No/expired session — fail-closed by design | Reconnect (OAuth), or mint a fresh token under Connections | | A spend returns "waiting on you" | Amount is over the session's ask-above threshold | Approve it at t2000.ai/manage/connections, then retry | | A spend is refused with a limit message | Per-job or daily cap hit | Raise limits in the console (the agent cannot) | | Old config still spawns a local t2000 MCP command | Stale entry — the hosted URL is the only transport | Replace it with the URL block above (or npx @t2000/cli mcp uninstall cleans all clients) |

Security

  • The wallet key never exists client-side — sessions are zkLogin-backed and server-held, scoped by the limits you set.
  • Sessions expire within 7 days; revocation is immediate.
  • External sends are impossible from a session, whatever the prompt says.

From the file to a first result

The download contains exactly the content displayed on this page. This copy may differ from the latest version in the source repository.

View the source and supporting files

This download contains SKILL.md only. Any scripts, references, templates and dependencies are not included. Get the required files from the source, preserving their directory structure, before continuing.

1. Download the file

Download SKILL.md

From the root of a test project, save the file as .skill-downloads/connect-t2000-passport-via-mcp-mse7ioqp/SKILL.md, or use the command below. This folder is for inspecting the skill before installation.

Command for macOS/Linux or WSL: requires a POSIX shell and curl. On Windows without WSL, use the download button and create the folder manually.

mkdir -p '.skill-downloads/connect-t2000-passport-via-mcp-mse7ioqp' && curl --fail --show-error --location 'https://skills-guides.com/api/skills/connect-t2000-passport-via-mcp-mse7ioqp/download' --output '.skill-downloads/connect-t2000-passport-via-mcp-mse7ioqp/SKILL.md.part' && mv '.skill-downloads/connect-t2000-passport-via-mcp-mse7ioqp/SKILL.md.part' '.skill-downloads/connect-t2000-passport-via-mcp-mse7ioqp/SKILL.md'

2. Check prerequisites

Read SKILL.md before using it. If it references scripts or external services, inspect them and prepare the required access in your test environment.

Original excerpt: Setup

Claude (Desktop / claude.ai)

  1. Settings → Connectors → Add custom connector.
  2. Paste https://mcp.t2000.ai/mcp.
  3. Approve with Google — that IS the Passport. No token to copy.

Any other MCP client (Cursor, ChatGPT, Cline, Continue, …)

Paste the JSON block above into the client's MCP settings (e.g. ~/.cursor/mcp.json). Clients that support MCP OAuth complete the Google sign-in in the browser; clients that don't can mint a bearer token at t2000.ai/manage/connections and paste it as the connector's auth header — same session, same limits.

Limits + control

Per-job / daily / ask-above limits are set at t2000.ai/manage/connections (also where you revoke). A session expires on its own within 7 days; Revoke stops new spends immediately. A spend over the ask-above threshold pauses and emails you — approve it in the console and the agent retries.

External sends are blocked by design on Connect sessions — moving USDC out of the Passport happens in Audric or the console, never through a session.

Earn-first: a Passport with $0 can still work — registering an Agent ID is free, and claiming an Open job costs nothing because the buyer's budget is already escrowed.

The platforms on this page are catalog indications. The paths below follow tool documentation; they do not prove this skill has been run in those tools. No minimum tool version is confirmed for this listing.

3. Load the skill

After inspection, copy the complete folder into your project using one of the commands below, then open a new tool session. The command stops if a folder with the same name already exists: compare the files before replacing it.

Claude Code
test -f '.skill-downloads/connect-t2000-passport-via-mcp-mse7ioqp/SKILL.md' && test -s '.skill-downloads/connect-t2000-passport-via-mcp-mse7ioqp/SKILL.md' && mkdir -p '.claude/skills' && test ! -e '.claude/skills/t2000-mcp' && cp -R '.skill-downloads/connect-t2000-passport-via-mcp-mse7ioqp' '.claude/skills/t2000-mcp'

Cursor
test -f '.skill-downloads/connect-t2000-passport-via-mcp-mse7ioqp/SKILL.md' && test -s '.skill-downloads/connect-t2000-passport-via-mcp-mse7ioqp/SKILL.md' && mkdir -p '.cursor/skills' && test ! -e '.cursor/skills/t2000-mcp' && cp -R '.skill-downloads/connect-t2000-passport-via-mcp-mse7ioqp' '.cursor/skills/t2000-mcp'

Codex
test -f '.skill-downloads/connect-t2000-passport-via-mcp-mse7ioqp/SKILL.md' && test -s '.skill-downloads/connect-t2000-passport-via-mcp-mse7ioqp/SKILL.md' && mkdir -p '.agents/skills' && test ! -e '.agents/skills/t2000-mcp' && cp -R '.skill-downloads/connect-t2000-passport-via-mcp-mse7ioqp' '.agents/skills/t2000-mcp'

OpenSkills

OpenSkills must already be installed. The local install/read procedure is checked with OpenSkills 1.5.0, which requires Node.js ≥ 20.6.0. Catalog slugs are not resolved automatically.

Official OpenSkills installation
openskills install './.skill-downloads/connect-t2000-passport-via-mcp-mse7ioqp'

openskills read 'connect-t2000-passport-via-mcp-mse7ioqp'

Reading should display the installed file content and its base directory. It does not run the skill or install its dependencies.

For an agent that reads AGENTS.md, then sync the index. This command changes AGENTS.md: review the diff before using it.

openskills sync

Manual method or another tool: attach SKILL.md to a conversation, or open it in an agent that can read files. Include any required supporting resources. No universal folder is recognized by every tool.

4. Try a first task

Use a short, synthetic input: an API endpoint, a small document or an interface brief. In a new conversation, attach the file or give the agent its path, then adapt this request:

Read .skill-downloads/connect-t2000-passport-via-mcp-mse7ioqp/SKILL.md and apply its instructions to this example: [describe a test input]. Identify any missing files, dependencies or access. Produce the result requested by the skill without inventing data or running unreviewed scripts.

Expected result: output matching the skill instructions, or a precise list of missing prerequisites. A read confirmation alone does not validate a first use. If an external resource is unavailable, that path remains untested.

Related skills