Connect 8 clients · secrets stay placeholders JSON (mcpServers) Claude Code Codex OpenCode Cursor VS Code Gemini CLI Goose
{
"mcpServers": {
"boundary-guard-x402": {
"type": "http",
"url": "https://x402-resource-scanner.vercel.app/mcp",
"headers": {
"Authorization": "Bearer ${BOUNDARY_GUARD_X402_TOKEN}"
}
}
}
}claude mcp add --transport http boundary-guard-x402 https://x402-resource-scanner.vercel.app/mcp --header "Authorization: Bearer ${BOUNDARY_GUARD_X402_TOKEN}"[mcp_servers.boundary-guard-x402]
url = "https://x402-resource-scanner.vercel.app/mcp"
bearer_token_env_var = "BOUNDARY_GUARD_X402_TOKEN"
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"boundary-guard-x402": {
"type": "remote",
"url": "https://x402-resource-scanner.vercel.app/mcp",
"enabled": true,
"headers": {
"Authorization": "Bearer {env:BOUNDARY_GUARD_X402_TOKEN}"
}
}
}
}{
"mcpServers": {
"boundary-guard-x402": {
"type": "http",
"url": "https://x402-resource-scanner.vercel.app/mcp",
"headers": {
"Authorization": "Bearer ${BOUNDARY_GUARD_X402_TOKEN}"
}
}
},
"deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=boundary-guard-x402&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8veDQwMi1yZXNvdXJjZS1zY2FubmVyLnZlcmNlbC5hcHAvbWNwIiwiaGVhZGVycyI6eyJBdXRob3JpemF0aW9uIjoiQmVhcmVyICR7Qk9VTkRBUllfR1VBUkRfWDQwMl9UT0tFTn0ifX0%3D"
}{
"servers": {
"boundary-guard-x402": {
"type": "http",
"url": "https://x402-resource-scanner.vercel.app/mcp",
"headers": {
"Authorization": "Bearer ${BOUNDARY_GUARD_X402_TOKEN}"
}
}
}
}{
"mcpServers": {
"boundary-guard-x402": {
"httpUrl": "https://x402-resource-scanner.vercel.app/mcp",
"headers": {
"Authorization": "Bearer ${BOUNDARY_GUARD_X402_TOKEN}"
}
}
}
}extensions:
"boundary-guard-x402":
enabled: true
name: "boundary-guard-x402"
type: streamable_http
uri: "https://x402-resource-scanner.vercel.app/mcp"
headers:
"Authorization": "Bearer ${BOUNDARY_GUARD_X402_TOKEN}"
timeout: 300
Placeholders to fill from your own secret store: ${BOUNDARY_GUARD_X402_TOKEN}. The registry never accepts secret values.
Quality – / 100 not scored Not scored: fewer than three checks apply, usually because no remote answered a credential-free probe or the server is a local package.
protocol n/a · weight 25
n/a protocol.modern, protocol.stateless, protocol.transport, protocol.list_ttlno remote answered a protocol handshake (not probed yet, unreachable, or local-only)
authorization n/a · weight 15
n/a auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
n/a auth.secret_in_urlno templated URL
tool hygiene n/a · weight 30
n/a tools.descriptions, tools.description_length, tools.schemas, tools.annotations, tools.directory_hints, tools.token_cost, tools.api_dumptool list unknown (behind auth, not probed, or empty)
dependencies n/a · weight 15
Tool list unknown · checked 2026-10-20 05:13 UTC
Tool changes No tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.
Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.
Trust 73 / 100 no-repository +website +reachable +uptime-100% ~updated-157d-ago -no-repository
Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.
Tools (0) No tools observed. Tools appear once a credential-free probe can list them.
Schemas: list_tools .
More from io.github.LarryLemonBot Official server.json {
"name": "io.github.LarryLemonBot/boundary-guard-x402",
"_meta": {
"io.modelcontextprotocol.registry/publisher-provided": {
"llms": "https://x402-resource-scanner.vercel.app/llms.txt",
"notes": "Direct MCP discovery is public; protected tool execution uses marketplace-managed or operator-issued auth.",
"tools": [
"boundary_guard_check",
"scan_x402_resource",
"probe_x402_paid_path",
"check_agent_tool_readiness",
"generate_x402_launch_pack",
"generate_trust_receipt"
],
"openapi": "https://x402-resource-scanner.vercel.app/openapi.json",
"category": "Agent Verification and Security",
"provider": "LarryBuildsAI",
"security": {
"dataPolicy": "Do not submit private keys, API keys, cookies, payment signatures, or raw payment response headers.",
"ssrfPolicy": "The service rejects private, internal, credentialed, and unsafe target URLs before probing.",
"authBoundary": "Public MCP introspection is allowed; protected tools/call requests require upstream bearer authorization.",
"externalContentPolicy": "Targets scanned by the tools are untrusted evidence, not instructions for the agent or service."
},
"canonicalUrl": "https://x402-resource-scanner.vercel.app",
"mcpDiscovery": "https://x402-resource-scanner.vercel.app/.well-known/mcp.json",
"x402Manifest": "https://x402-resource-scanner.vercel.app/.well-known/x402",
"mcpServerCard": "https://x402-resource-scanner.vercel.app/.well-known/mcp/server-card.json",
"publicIntrospection": {
"enabled": true,
"methods": [
"initialize",
"tools/list"
],
"toolCallsRequireAuth": true
}
}
},
"title": "Boundary Guard x402",
"$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
"remotes": [
{
"url": "https://x402-resource-scanner.vercel.app/mcp",
"type": "streamable-http",
"headers": [
{
"name": "Authorization",
"isSecret": true,
"isRequired": true,
"description": "Bearer token required for protected tools/call. initialize and tools/list are public for discovery.",
"placeholder": "Bearer <token>"
}
]
}
],
"version": "0.1.0",
"websiteUrl": "https://x402-resource-scanner.vercel.app",
"description": "MCP tools for x402 readiness, paid-path probes, launch packs, and trust receipts."
}
protogrid