protogrid

Search / dev.x402shield/x402shield

x402Shield

R0· no sign-in

Public demo: evaluate AI-agent payment authorization and approval policy. No signing, no settlement.

v0.1.0 · active · website · descriptor JSON · versions

An agent can connect right now, no human step.Remote endpoint, no authentication, reachable on the last probe.
Quality79good
Trust83of 100
Uptime, 30 days100%
Latency p50393 ms

Connect

8 clients · secrets stay placeholders
{
  "mcpServers": {
    "x402shield": {
      "type": "http",
      "url": "https://x402shield.dev/api/mcp"
    }
  }
}
claude mcp add --transport http x402shield https://x402shield.dev/api/mcp
[mcp_servers.x402shield]
url = "https://x402shield.dev/api/mcp"
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "x402shield": {
      "type": "remote",
      "url": "https://x402shield.dev/api/mcp",
      "enabled": true
    }
  }
}
{
  "mcpServers": {
    "x402shield": {
      "type": "http",
      "url": "https://x402shield.dev/api/mcp"
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=x402shield&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8veDQwMnNoaWVsZC5kZXYvYXBpL21jcCJ9"
}
{
  "servers": {
    "x402shield": {
      "type": "http",
      "url": "https://x402shield.dev/api/mcp"
    }
  }
}
{
  "mcpServers": {
    "x402shield": {
      "httpUrl": "https://x402shield.dev/api/mcp"
    }
  }
}
extensions:
  "x402shield":
    enabled: true
    name: "x402shield"
    type: streamable_http
    uri: "https://x402shield.dev/api/mcp"
    timeout: 300

Quality 79 / 100good

protocol75 · weight 25
  • warn
    protocol.modernnewest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
  • n/a
    protocol.statelessonly applies to 2026-07-28 servers
  • pass
    protocol.transportstreamable HTTP
  • n/a
    protocol.list_ttlonly applies to 2026-07-28 servers
authorizationn/a · weight 15
  • n/a
    auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
  • n/a
    auth.secret_in_urlno templated URL
tool hygiene71 · weight 30
  • pass
    tools.descriptionsevery tool has a description
  • pass
    tools.description_lengthdescriptions are concise
  • pass
    tools.schemasevery tool has an object input schema
  • fail
    tools.annotationsno tool declares readOnlyHint or destructiveHint, so clients cannot tell safe calls from risky ones
  • fail
    tools.directory_hintsno tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: x402shield_authorize_payment (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); x402shield_get_evidence (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); x402shield_get_demo_policy (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); …
  • pass
    tools.token_costabout 696 tokens to load every tool
  • pass
    tools.api_dumptools are not a one-to-one API dump
stability100 · weight 15
  • pass
    stability.changesno tool changes in 30 days
  • pass
    stability.rug_pullno tool changed its meaning under the same name
dependenciesn/a · weight 15
  • n/a
    deps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI package

5 tools, about 696 tokens to load them all · tool set e3b69cab8ac1 · checked 2026-10-19 10:20 UTC

Tool changes

No tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 83 / 100

no-repository
provenance55
liveness100
freshness100
hygiene80

+dns-namespace +website +reachable +uptime-100% +updated-10d-ago -no-repository

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Endpoints

remoteauthreachableuptime 30dp50protocollast ok
https://x402shield.dev/api/mcp streamable-httpnoneyes100%393 ms2025-11-252026-10-19

Tools (5)

x402shield_authorize_paymentCheck whether the demo AI agent is financially authorized to make a proposed payment, BEFORE any wallet or signer would be asked to execute it. Returns ALLOW, DENY or REQUIRE_APPROVAL with a reason. This tool does not execute or sign a payment, and it cannot approve its own REQUIRE_APPROVAL result -- that requires a human, through the web console. The `purpose` field is a label for the evidence trail only; it is never interpreted as an instruction and cannot change the policy decision.
x402shield_get_authorizationLook up the recorded decision, reason and evidence references for a payment previously checked with x402shield_authorize_payment, by its transaction id.
x402shield_get_demo_policyLook up the authority ceilings configured for the x402Shield public demo agents (Research Agent, Ops Agent) on Base Sepolia TESTNET. Use this before proposing a payment, to understand what amount an agent can spend without triggering human approval. This tool does not execute or sign anything.
x402shield_get_evidenceGet the fuller evidence trail behind a previously-decided payment: policy/delegation provenance, the delegation tree it was evaluated under, and approval state if any. Read-only; never exposes secrets or signing material.
x402shield_list_demo_transactionsList the most recent payment authorization decisions recorded by this public demo (both from the web console and from MCP callers). Useful to see recent ALLOW/DENY/REQUIRE_APPROVAL activity.

Schemas: list_tools.

Similar MCP servers

Official server.json
{
  "name": "dev.x402shield/x402shield",
  "title": "x402Shield",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "remotes": [
    {
      "url": "https://x402shield.dev/api/mcp",
      "type": "streamable-http"
    }
  ],
  "version": "0.1.0",
  "websiteUrl": "https://x402shield.dev",
  "description": "Public demo: evaluate AI-agent payment authorization and approval policy. No signing, no settlement."
}