Mcp Server — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Mcp Server (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Last updated: March 26, 2026
The first rewards and loyalty MCP server. Enables AI agents to discover and interact with the NCTR Alliance rewards program — bounties, earning rates, tier progression, promotions, and Impact Engine communities.
When someone asks an AI assistant about NCTR, the assistant can call this server to get real, structured data instead of guessing. The server exposes 6 tools:
| Tool | What It Does |
|---|---|
search_bounties | Search and filter all 19 available bounties by category, amount, keyword, or repeatability |
get_earning_rates | Get earning multipliers by Crescendo tier, with optional bounty calculations |
check_tier_requirements | Check tier thresholds, perks, and progress toward the next tier |
get_active_promotions | Get current limited-time offers and launch bonuses |
get_onboarding_link | Generate a join link with optional referral code |
get_impact_engines | Discover NCTR's 6 passion-based communities |
Add this to your MCP client configuration (Claude Desktop, Cursor, etc.):
{
"mcpServers": {
"nctr-alliance": {
"url": "https://yhwcaodofmbusjurawhp.supabase.co/functions/v1/mcp/rpc"
}
}
}claude mcp add nctr-alliance -t http https://yhwcaodofmbusjurawhp.supabase.co/functions/v1/mcp/rpcgit clone https://github.com/Hoya25/mcp-server.git
cd mcp-server
supabase start
supabase functions serve --no-verify-jwt mcpServer runs at: http://localhost:54321/functions/v1/mcp/rpc
Once connected, you can ask your AI assistant things like:
Every bounty in NCTR uses 360LOCK — tokens are locked for exactly 360 days. They're committed, not spent. After the lock period, the NCTR is fully yours.
| Category | Examples |
|---|---|
| Entry | Sign-up (625), Early Adopter Bonus (1,250), Profile Completion (375) |
| Revenue | First Purchase (2,500), Shop & Earn (250 uncapped), Quarterly Spend (5,000) |
| Merch | Collection (5,000), Repeat (500) |
| Referral | Friend sign-ups (625), friend purchases (2,500), milestone bonuses |
| Engagement | Social shares (500), monthly activity (250), community contributions (2,000) |
| Tier | NCTR Required | Multiplier |
|---|---|---|
| Bronze | 0 | 1.0x |
| Silver | 1,000 | 1.2x |
| Gold | 5,000 | 1.5x |
| Platinum | 25,000 | 1.8x |
| Diamond | 100,000 | 2.0x |
NCTR includes 6 passion-based communities called Impact Engines:
| Endpoint | Method | Description |
|---|---|---|
/ | GET | Server info and tool list |
/health | GET | Health check |
/rpc | POST | MCP protocol endpoint (Streamable HTTP) |
# Health check
curl https://yhwcaodofmbusjurawhp.supabase.co/functions/v1/mcp/health
# Search all bounties
curl -X POST https://yhwcaodofmbusjurawhp.supabase.co/functions/v1/mcp/rpc \
-H "Content-Type: application/json" \
-H "Accept: application/json, text/event-stream" \
-d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"search_bounties","arguments":{}}}'This server runs on Supabase Edge Functions using the official MCP TypeScript SDK (@modelcontextprotocol/[email protected]).
supabase link --project-ref yhwcaodofmbusjurawhp
supabase functions deploy --no-verify-jwt mcpMIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.