io.github.kwizzlesurp10-ctrl/x402-mcp

Est-ce que io.github.kwizzlesurp10-ctrl/x402-mcp est sûr ?

Au dernier audit MCP Hub, le serveur MCP « io.github.kwizzlesurp10-ctrl/x402-mcp » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 20 outils

• a2a.resolve_card≈ 267 tokens

  Discover and inspect an external Agent-to-Agent (A2A) node by domain or URL. Fetches .well-known/agent-card.json, validates protocol compatibility, checks for a2a-x402 and AP2 payment extensions, and extracts callable skills with pricing.

  Paramètres, retour & exemple (2)

  Paramètres

  • target · string · requis
    Host domain or full URL of the agent (e.g. 'agent.example.com' or 'https://agent.example.com/.well-known/agent-card.json')
  • agent_id · string · optionnel
    Optional calling agent identifier for quota tracking.

  Exemple d'appel

  {"name": "a2a.resolve_card", "arguments": {"target": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"result": "texte"}}

• city.check≈ 310 tokens

  Paid US city property compliance check (MCP seller x402). Unpaid calls return PaymentRequired with accepts; pay via _meta['x402/payment']. Prefer city.sample first. Price: $0.01 per call (x402, USDC on Base/Solana/Arbitrum).

  Paramètres, retour & exemple (5)

  Paramètres

  • address · string · requis
    Street address to check. Example: '1700 Penn Ave N' or '1 Centre St'.
  • agent_id · string · optionnel
    Optional agent identity for quota accounting.
  • city_code · string · requis
    City code from city.list. Example: 'mn'.
  • max_price_usdc · number · optionnel
    Optional USDC spend ceiling. Example: 0.05.
  • preferred_network · string · optionnel
    Preferred CAIP-2 network. Example: 'eip155:8453'.

  Exemple d'appel

  {"name": "city.check", "arguments": {"address": "texte", "city_code": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• city.list≈ 183 tokens

  List US City Open-Data Compliance Network cities with paid_url, sample_url, and price. Call first, then city.sample, then city.check for the paid address lookup.

  Paramètres, retour & exemple (1)

  Paramètres

  • agent_id · string · optionnel
    Optional agent identity for quota accounting.

  Exemple d'appel

  {"name": "city.list", "arguments": {"agent_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"result": "texte"}}

• city.sample≈ 228 tokens

  Get a free fixed-address property compliance sample for one US city code. Use before city.check to validate city_code and response shape without paying.

  Paramètres, retour & exemple (2)

  Paramètres

  • agent_id · string · optionnel
    Optional agent identity for quota accounting.
  • city_code · string · requis
    City code from city.list. Examples: 'mn', 'sea', 'nyc', 'chi'.

  Exemple d'appel

  {"name": "city.sample", "arguments": {"city_code": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"result": "texte"}}

• commerce.activate_pro≈ 320 tokens

  Verify a Pro-tier x402 payment and unlock Pro quota limits for the agent. MCP-native: call without payment to receive x402 requirements in the tool result, then retry with _meta['x402/payment'] (@x402/mcp client). Legacy: pass PAYMENT-SIGNATURE + PAYMENT-REQUIRED after commerce.pro_requirements.

  Paramètres, retour & exemple (3)

  Paramètres

  • agent_id · string · optionnel
    Agent identity to grant Pro quota. Must match the requirements call.
  • payment_required · string · optionnel
    Legacy PAYMENT-REQUIRED from commerce.pro_requirements. Ignored when using MCP _meta payment.
  • payment_signature · string · optionnel
    Legacy HTTP-style PAYMENT-SIGNATURE. Omit for MCP x402/payment transport.

  Exemple d'appel

  {"name": "commerce.activate_pro", "arguments": {"agent_id": "texte", "payment_required": "texte", "payment_signature": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"result": "texte"}}

• commerce.credits_requirements≈ 237 tokens

  Build x402 payment requirements to buy a pack of per-use MCP tool credits. Next: pay those terms, then commerce.purchase_credits with the signature.

  Paramètres, retour & exemple (2)

  Paramètres

  • credits · integer · optionnel
    Credit pack size to buy. Example: 100. Omit to use the server default pack.
  • agent_id · string · optionnel
    Optional agent identity the credits will attach to.

  Exemple d'appel

  {"name": "commerce.credits_requirements", "arguments": {"credits": 1, "agent_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"result": "texte"}}

• commerce.pro_requirements≈ 191 tokens

  Build x402 payment requirements to purchase the Pro quota tier. Next: pay those terms, then commerce.activate_pro with the signature.

  Paramètres, retour & exemple (1)

  Paramètres

  • agent_id · string · optionnel
    Optional agent identity the Pro grant will attach to.

  Exemple d'appel

  {"name": "commerce.pro_requirements", "arguments": {"agent_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"result": "texte"}}

• commerce.purchase_credits≈ 328 tokens

  Verify an x402 payment and add per-use tool credits to the agent. MCP-native: call without payment for x402 requirements, then retry with _meta['x402/payment']. Legacy: PAYMENT-SIGNATURE + PAYMENT-REQUIRED after commerce.credits_requirements.

  Paramètres, retour & exemple (4)

  Paramètres

  • credits · integer · optionnel
    Credit pack size that was purchased. Must match the requirements call.
  • agent_id · string · optionnel
    Agent identity to credit.
  • payment_required · string · optionnel
    Legacy PAYMENT-REQUIRED from commerce.credits_requirements.
  • payment_signature · string · optionnel
    Legacy PAYMENT-SIGNATURE. Omit for MCP x402/payment transport.

  Exemple d'appel

  {"name": "commerce.purchase_credits", "arguments": {"credits": 1, "agent_id": "texte", "payment_required": "texte", "payment_signature": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"result": "texte"}}

• ops.metrics≈ 227 tokens

  Get host OS telemetry: CPU, memory, swap, disk, network, and an ok/warn/critical health verdict. Call to diagnose this MCP host; set include_processes=true for top memory processes.

  Paramètres, retour & exemple (2)

  Paramètres

  • agent_id · string · optionnel
    Optional agent identity for quota accounting.
  • include_processes · boolean · optionnel
    If true, include top processes by memory. Default false.

  Exemple d'appel

  {"name": "ops.metrics", "arguments": {"agent_id": "texte", "include_processes": true}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"result": "texte"}}

• pulse.base≈ 223 tokens

  Get live Base Network Pulse: base fee, EIP-1559 projection, utilization, USD settlement cost, verdict. Call before settling on Base when you need a settle-now vs hold recommendation.

  Paramètres, retour & exemple (2)

  Paramètres

  • depth · integer · optionnel
    Blocks to sample. Example: 12. Omit to use the server default.
  • agent_id · string · optionnel
    Optional agent identity for quota accounting.

  Exemple d'appel

  {"name": "pulse.base", "arguments": {"depth": 1, "agent_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"result": "texte"}}

• swarm.research≈ 320 tokens

  Run the swarm agency: compose a research product from free inputs and list it for resale. Pass allow_paid_inputs=true only when buying upstream x402 services is intended.

  Paramètres, retour & exemple (4)

  Paramètres

  • topic · string · requis
    Research topic to compose. Example: 'Base mainnet gas window'.
  • agent_id · string · optionnel
    Seller agent identity that will own the listing.
  • max_price_usdc · number · optionnel
    Optional USDC ceiling for any paid upstream inputs.
  • allow_paid_inputs · boolean · optionnel
    If true, buy upstream x402 services before composing. Default false (free inputs only, unsold inventory costs nothing).

  Exemple d'appel

  {"name": "swarm.research", "arguments": {"topic": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"result": "texte"}}

• swarm.revenue≈ 210 tokens

  Get swarm composite economics: spend, composite sales, LTV:CAC, margins, per-source scores. total_revenue_usdc is swarm listings only; storefront.revenue_usdc is the full settled ledger. Call after swarm.research or swarm.settle to inspect realized economics.

  Paramètres, retour & exemple (1)

  Paramètres

  • agent_id · string · optionnel
    Optional agent identity for quota accounting.

  Exemple d'appel

  {"name": "swarm.revenue", "arguments": {"agent_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"result": "texte"}}

• swarm.settle≈ 300 tokens

  Verify and settle a buyer's x402 payment for a listed composite product and record revenue. Call with product_id plus PAYMENT-SIGNATURE after the buyer pays.

  Paramètres, retour & exemple (4)

  Paramètres

  • agent_id · string · optionnel
    Seller agent identity recording the sale.
  • product_id · string · requis
    Listed composite product id. Example: the hex id from swarm.research.
  • payment_required · string · requis
    PAYMENT-REQUIRED terms for this product.
  • payment_signature · string · requis
    PAYMENT-SIGNATURE from the buyer.

  Exemple d'appel

  {"name": "swarm.settle", "arguments": {"product_id": "texte", "payment_required": "texte", "payment_signature": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"result": "texte"}}

• x402.agent_card≈ 218 tokens

  Return the A2A Protocol v1.0 Agent ID Card and MCP server card. Optional target_id filters to a skill id, name, or tag.

  Paramètres, retour & exemple (2)

  Paramètres

  • agent_id · string · optionnel
    Optional calling agent identifier for quota tracking.
  • target_id · string · optionnel
    Optional skill ID, tool name, or tag to inspect. Omit for the full server agent card.

  Exemple d'appel

  {"name": "x402.agent_card", "arguments": {"agent_id": "texte", "target_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"result": "texte"}}

• x402.build_seller≈ 660 tokens

  Build seller-side x402 payment requirements for your own HTTP resource. Pass resource_url plus discovery_* fields to catalog the endpoint in Bazaar.

  Paramètres, retour & exemple (12)

  Paramètres

  • price · string · optionnel
    List price string. Default '$0.01'. Example: '$0.05'.
  • pay_to · string · optionnel
    0x recipient for USDC. Example: '0x67ff…'. Omit to use X402_PAY_TO_ADDRESS.
  • scheme · string · optionnel
    x402 payment scheme. Default 'exact'.
  • network · string · optionnel
    CAIP-2 settlement network. Default eip155:84532 (Base Sepolia). Mainnet: eip155:8453.
  • agent_id · string · optionnel
    Optional agent identity for quota accounting.
  • mime_type · string · optionnel
    Resource MIME type. Default application/json.
  • description · string · optionnel
    Human-readable description embedded in PAYMENT-REQUIRED.
  • discoverable · boolean · optionnel
    If true, embed the Bazaar discovery extension. Omit to use server default.
  • resource_url · string · optionnel
    Public URL of the paid resource. When set with discovery_* fields, Bazaar catalogs the endpoint after a settled payment.
  • discovery_method · string · optionnel
    HTTP method advertised to Bazaar. Default GET.
  • discovery_input_example · object · optionnel
    Optional example input object for Bazaar. Omit if none.
  • discovery_output_example · object · optionnel
    Optional example output object for Bazaar. Omit if none.

  Exemple d'appel

  {"name": "x402.build_seller", "arguments": {"price": "texte", "pay_to": "texte", "scheme": "texte", "network": "texte", "agent_id": "texte", "mime_type": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"result": "texte"}}

• x402.discover≈ 326 tokens

  Discover paid HTTP APIs in the x402 Bazaar via the facilitator catalog. Call this first to find a resource URL, then x402.probe and x402.pay_and_fetch.

  Paramètres, retour & exemple (4)

  Paramètres

  • limit · integer · optionnel
    Maximum number of catalog entries to return. Default 20. Range 1–100.
  • query · string · optionnel
    Optional Bazaar search substring. Example: 'weather' or 'image'. Omit to list recent paid HTTP services.
  • agent_id · string · optionnel
    Optional agent identity for quota accounting. Example: 'agent-42'. Omit to use the anonymous free-tier id.
  • max_price_usdc · number · optionnel
    Optional USDC price ceiling. Example: 0.05. Omit to include any listed price.

  Exemple d'appel

  {"name": "x402.discover", "arguments": {"limit": 1, "query": "texte", "agent_id": "texte", "max_price_usdc": 1}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"result": "texte"}}

• x402.networks≈ 186 tokens

  List supported settlement networks, facilitators, and x402 v2 header names. Call when choosing a preferred_network for x402.pay_and_fetch or x402.build_seller.

  Paramètres, retour & exemple (1)

  Paramètres

  • agent_id · string · optionnel
    Optional agent identity for quota accounting.

  Exemple d'appel

  {"name": "x402.networks", "arguments": {"agent_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"result": "texte"}}

• x402.pay_and_fetch≈ 435 tokens

  Pay USDC via x402 and fetch a protected HTTP resource in one call. Requires EVM_PRIVATE_KEY on this host; otherwise use x402.probe for a no-spend 402.

  Paramètres, retour & exemple (7)

  Paramètres

  • url · string · requis
    Absolute paid HTTP URL to fetch after settling USDC.
  • body · string · optionnel
    Optional raw request body for POST/PUT. Omit for GET.
  • method · string · optionnel
    HTTP method for the paid request. Default GET.
  • headers · object · optionnel
    Optional extra request headers as a string map. Omit if none.
  • agent_id · string · optionnel
    Optional agent identity for quota accounting.
  • max_price_usdc · number · optionnel
    Optional spend ceiling in USDC. Example: 0.10. Calls above this are blocked.
  • preferred_network · string · optionnel
    Preferred CAIP-2 network. Example: 'eip155:8453' (Base mainnet). Omit to use the server default. Call x402.networks to list options.

  Exemple d'appel

  {"name": "x402.pay_and_fetch", "arguments": {"url": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"result": "texte"}}

• x402.probe≈ 346 tokens

  Probe a URL for HTTP 402 PAYMENT-REQUIRED terms using the x402 client SDK. Use before x402.pay_and_fetch to inspect price, network, and payTo without spending.

  Paramètres, retour & exemple (4)

  Paramètres

  • url · string · requis
    Absolute HTTP URL to probe. Example: 'https://x402-mcp.onrender.com/us/mn/property-check?address=1700%20Penn%20Ave%20N'.
  • method · string · optionnel
    HTTP method for the probe. Default GET. Example: 'GET' or 'POST'.
  • headers · object · optionnel
    Optional extra request headers as a string map. Example: {"Accept": "application/json"}. Omit if none.
  • agent_id · string · optionnel
    Optional agent identity for quota accounting. Omit for the anonymous free-tier id.

  Exemple d'appel

  {"name": "x402.probe", "arguments": {"url": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"result": "texte"}}

• x402.verify≈ 274 tokens

  Verify an x402 PAYMENT-SIGNATURE against PAYMENT-REQUIRED terms via the facilitator. Call after a buyer presents a signature and before releasing paid content.

  Paramètres, retour & exemple (3)

  Paramètres

  • agent_id · string · optionnel
    Optional agent identity for quota accounting.
  • payment_required · string · requis
    PAYMENT-REQUIRED JSON/header the signature is meant to satisfy.
  • payment_signature · string · requis
    PAYMENT-SIGNATURE header value from the buyer.

  Exemple d'appel

  {"name": "x402.verify", "arguments": {"payment_required": "texte", "payment_signature": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"result": "texte"}}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://x402-mcp.onrender.com/mcp/mcp