protogrid

Search / io.github.chico10117/x402-preflight

x402 Preflight

R0· no sign-in

Inspect and validate an x402 endpoint before an autonomous agent spends USDC.

v1.0.1 · active · repository · descriptor JSON · versions

An agent can connect right now, no human step.Remote endpoint, no authentication, reachable on the last probe.
Quality80good
Trust91of 100
Uptime, 30 days100%
Latency p50276 ms

Connect

8 clients · secrets stay placeholders
{
  "mcpServers": {
    "x402-preflight": {
      "type": "http",
      "url": "https://x402.chikocorp.com/mcp"
    }
  }
}
claude mcp add --transport http x402-preflight https://x402.chikocorp.com/mcp
[mcp_servers.x402-preflight]
url = "https://x402.chikocorp.com/mcp"
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "x402-preflight": {
      "type": "remote",
      "url": "https://x402.chikocorp.com/mcp",
      "enabled": true
    }
  }
}
{
  "mcpServers": {
    "x402-preflight": {
      "type": "http",
      "url": "https://x402.chikocorp.com/mcp"
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=x402-preflight&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8veDQwMi5jaGlrb2NvcnAuY29tL21jcCJ9"
}
{
  "servers": {
    "x402-preflight": {
      "type": "http",
      "url": "https://x402.chikocorp.com/mcp"
    }
  }
}
{
  "mcpServers": {
    "x402-preflight": {
      "httpUrl": "https://x402.chikocorp.com/mcp"
    }
  }
}
extensions:
  "x402-preflight":
    enabled: true
    name: "x402-preflight"
    type: streamable_http
    uri: "https://x402.chikocorp.com/mcp"
    timeout: 300

Quality 80 / 100good

protocol75 · weight 25
  • warn
    protocol.modernnewest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
  • n/a
    protocol.statelessonly applies to 2026-07-28 servers
  • pass
    protocol.transportstreamable HTTP
  • n/a
    protocol.list_ttlonly applies to 2026-07-28 servers
authorizationn/a · weight 15
  • n/a
    auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
  • n/a
    auth.secret_in_urlno templated URL
tool hygiene100 · weight 30
  • pass
    tools.descriptionsevery tool has a description
  • pass
    tools.description_lengthdescriptions are concise
  • pass
    tools.schemasevery tool has an object input schema
  • pass
    tools.annotations3 of 3 tools declare readOnlyHint or destructiveHint
  • pass
    tools.directory_hintsevery tool declares readOnlyHint, destructiveHint, idempotentHint and openWorldHint
  • pass
    tools.token_costabout 736 tokens to load every tool
  • pass
    tools.api_dumptools are not a one-to-one API dump
stability50 · weight 15
  • pass
    stability.changes3 tool changes in 30 days
  • fail
    stability.rug_pull3 tools kept their name but changed most of their description in 30 days; review before trusting them
dependenciesn/a · weight 15
  • n/a
    deps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI package

3 tools, about 736 tokens to load them all · tool set 28f428edfbe1 · tools last changed 2026-10-01 · checked 2026-10-19 10:52 UTC

Tool changes

  • order_x402_remediationchangedtitle, descriptionmeaning changed
    before

    Purchase a durable remediation intake after a failed audit. Creates an order but never deploys, signs, or spends automatically.

    after · 13% of words in common

    Diagnostic report for API developers launching or debugging x402. An explicitly authorized x402 purchase creates a durable order for asynchronous findings, evidence, and prioritized fix recommendations in JSON/Markdown. The receipt is not the completed report. No implementation, human consultation, target payment, deployment, or guaranteed marketplace indexing.

  • audit_x402_endpointchangedtitle, descriptionmeaning changed
    before

    Purchase a deep, deterministic audit of payment schema, discovery metadata, redirects, CORS, cache, and operational signals. Returns HTTP 402 until the MCP client supplies a valid payment for this call.

    after · 20% of words in common

    Technical audit for API developers launching or debugging x402. Returns deeper read-only evidence of payment configuration, schemas, redirects, CORS, cache behavior, OpenAPI, llms.txt, agent metadata, and x402 discovery consistency. Requires an explicitly authorized x402 purchase; does not test settlement, paid delivery, or actual marketplace indexing.

  • inspect_x402_endpointchangedtitle, descriptionmeaning changed
    before

    Call before spending on an unfamiliar x402 resource. Free, read-only, and never sends payment credentials.

    after · 9% of words in common

    Free endpoint check for API developers launching or debugging x402. Inspect your live payment challenge and caller-selected comparison policy without sending payment credentials. ALLOW and BLOCK are policy decisions, not launch certification; a price-limit BLOCK does not establish a broken integration. Buyer-side inspection remains available.

Full history: list_changes · trend: quality JSON.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 91 / 100

provenance80
liveness100
freshness85
hygiene100

+repository +namespace-matches-repo +reachable +uptime-100% ~updated-45d-ago

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Endpoints

remoteauthreachableuptime 30dp50protocollast ok
https://x402.chikocorp.com/mcp streamable-httpnoneyes100%276 ms2025-11-252026-10-19

Tools (3)

audit_x402_endpointread-onlyTechnical audit for API developers launching or debugging x402. Returns deeper read-only evidence of payment configuration, schemas, redirects, CORS, cache behavior, OpenAPI, llms.txt, agent metadata, and x402 discovery consistency. Requires an explicitly authorized x402 purchase; does not test settlement, paid delivery, or actual marketplace indexing.
inspect_x402_endpointread-onlyFree endpoint check for API developers launching or debugging x402. Inspect your live payment challenge and caller-selected comparison policy without sending payment credentials. ALLOW and BLOCK are policy decisions, not launch certification; a price-limit BLOCK does not establish a broken integration. Buyer-side inspection remains available.
order_x402_remediationDiagnostic report for API developers launching or debugging x402. An explicitly authorized x402 purchase creates a durable order for asynchronous findings, evidence, and prioritized fix recommendations in JSON/Markdown. The receipt is not the completed report. No implementation, human consultation, target payment, deployment, or guaranteed marketplace indexing.

Schemas: list_tools.

Similar MCP servers

Official server.json
{
  "name": "io.github.chico10117/x402-preflight",
  "title": "x402 Preflight",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "remotes": [
    {
      "url": "https://x402.chikocorp.com/mcp",
      "type": "streamable-http"
    }
  ],
  "version": "1.0.1",
  "repository": {
    "url": "https://github.com/chico10117/basepay-readiness-service",
    "source": "github"
  },
  "description": "Inspect and validate an x402 endpoint before an autonomous agent spends USDC."
}