protogrid
Sign inAdd to your agent

Search / io.github.nirholas/x402-bridge

x402 Universal Payer

L0· runs locally

Pay any x402 endpoint on the open web: auto-paying bridge with Bazaar discovery and spend caps.

v1.0.2 · active · repository · website · descriptor JSON · versions

Runs on your machine: something must execute the package.Only local packages are published (npm, PyPI, OCI, …). The registry never executes them, so tools are unknown until you run it.
Quality–not scored
Trust80of 100
Packages1
Tools seen0

Connect

8 clients · secrets stay placeholders
{
  "mcpServers": {
    "x402-bridge": {
      "command": "npx",
      "args": [
        "-y",
        "@three-ws/[email protected]"
      ],
      "env": {
        "MCP_BRIDGE_EVM_PRIVATE_KEY": "${MCP_BRIDGE_EVM_PRIVATE_KEY}",
        "MCP_BRIDGE_SVM_PRIVATE_KEY": "${MCP_BRIDGE_SVM_PRIVATE_KEY}",
        "MCP_BRIDGE_MAX_PRICE_PER_CALL_ATOMIC": "100000",
        "MCP_BRIDGE_MAX_TOTAL_ATOMIC": "1000000",
        "MCP_BRIDGE_ALLOW_HTTP": "0",
        "MCP_BRIDGE_DISCOVER_LIMIT": "20",
        "MCP_BRIDGE_BAZAAR_URL": "https://api.cdp.coinbase.com/platform/v2/x402/discovery/resources",
        "MCP_BRIDGE_BATCH_DEPOSIT_MULTIPLIER": "5",
        "MCP_BRIDGE_MAX_DEPOSIT_ATOMIC": "5000000",
        "X402_MCP_BRIDGE_CHANNELS_DIR": "~/.x402-mcp-bridge/channels"
      }
    }
  }
}
claude mcp add x402-bridge -e "MCP_BRIDGE_EVM_PRIVATE_KEY=${MCP_BRIDGE_EVM_PRIVATE_KEY}" -e "MCP_BRIDGE_SVM_PRIVATE_KEY=${MCP_BRIDGE_SVM_PRIVATE_KEY}" -e "MCP_BRIDGE_MAX_PRICE_PER_CALL_ATOMIC=100000" -e "MCP_BRIDGE_MAX_TOTAL_ATOMIC=1000000" -e "MCP_BRIDGE_ALLOW_HTTP=0" -e "MCP_BRIDGE_DISCOVER_LIMIT=20" -e "MCP_BRIDGE_BAZAAR_URL=https://api.cdp.coinbase.com/platform/v2/x402/discovery/resources" -e "MCP_BRIDGE_BATCH_DEPOSIT_MULTIPLIER=5" -e "MCP_BRIDGE_MAX_DEPOSIT_ATOMIC=5000000" -e "X402_MCP_BRIDGE_CHANNELS_DIR=~/.x402-mcp-bridge/channels" -- npx -y @three-ws/[email protected]
[mcp_servers.x402-bridge]
command = "npx"
args = ["-y", "@three-ws/[email protected]"]
env = { "MCP_BRIDGE_EVM_PRIVATE_KEY" = "${MCP_BRIDGE_EVM_PRIVATE_KEY}", "MCP_BRIDGE_SVM_PRIVATE_KEY" = "${MCP_BRIDGE_SVM_PRIVATE_KEY}", "MCP_BRIDGE_MAX_PRICE_PER_CALL_ATOMIC" = "100000", "MCP_BRIDGE_MAX_TOTAL_ATOMIC" = "1000000", "MCP_BRIDGE_ALLOW_HTTP" = "0", "MCP_BRIDGE_DISCOVER_LIMIT" = "20", "MCP_BRIDGE_BAZAAR_URL" = "https://api.cdp.coinbase.com/platform/v2/x402/discovery/resources", "MCP_BRIDGE_BATCH_DEPOSIT_MULTIPLIER" = "5", "MCP_BRIDGE_MAX_DEPOSIT_ATOMIC" = "5000000", "X402_MCP_BRIDGE_CHANNELS_DIR" = "~/.x402-mcp-bridge/channels" }

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "x402-bridge": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@three-ws/[email protected]"
      ],
      "enabled": true,
      "environment": {
        "MCP_BRIDGE_EVM_PRIVATE_KEY": "{env:MCP_BRIDGE_EVM_PRIVATE_KEY}",
        "MCP_BRIDGE_SVM_PRIVATE_KEY": "{env:MCP_BRIDGE_SVM_PRIVATE_KEY}",
        "MCP_BRIDGE_MAX_PRICE_PER_CALL_ATOMIC": "100000",
        "MCP_BRIDGE_MAX_TOTAL_ATOMIC": "1000000",
        "MCP_BRIDGE_ALLOW_HTTP": "0",
        "MCP_BRIDGE_DISCOVER_LIMIT": "20",
        "MCP_BRIDGE_BAZAAR_URL": "https://api.cdp.coinbase.com/platform/v2/x402/discovery/resources",
        "MCP_BRIDGE_BATCH_DEPOSIT_MULTIPLIER": "5",
        "MCP_BRIDGE_MAX_DEPOSIT_ATOMIC": "5000000",
        "X402_MCP_BRIDGE_CHANNELS_DIR": "~/.x402-mcp-bridge/channels"
      }
    }
  }
}
{
  "mcpServers": {
    "x402-bridge": {
      "command": "npx",
      "args": [
        "-y",
        "@three-ws/[email protected]"
      ],
      "env": {
        "MCP_BRIDGE_EVM_PRIVATE_KEY": "${MCP_BRIDGE_EVM_PRIVATE_KEY}",
        "MCP_BRIDGE_SVM_PRIVATE_KEY": "${MCP_BRIDGE_SVM_PRIVATE_KEY}",
        "MCP_BRIDGE_MAX_PRICE_PER_CALL_ATOMIC": "100000",
        "MCP_BRIDGE_MAX_TOTAL_ATOMIC": "1000000",
        "MCP_BRIDGE_ALLOW_HTTP": "0",
        "MCP_BRIDGE_DISCOVER_LIMIT": "20",
        "MCP_BRIDGE_BAZAAR_URL": "https://api.cdp.coinbase.com/platform/v2/x402/discovery/resources",
        "MCP_BRIDGE_BATCH_DEPOSIT_MULTIPLIER": "5",
        "MCP_BRIDGE_MAX_DEPOSIT_ATOMIC": "5000000",
        "X402_MCP_BRIDGE_CHANNELS_DIR": "~/.x402-mcp-bridge/channels"
      }
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=x402-bridge&config=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"
}
{
  "servers": {
    "x402-bridge": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@three-ws/[email protected]"
      ],
      "env": {
        "MCP_BRIDGE_EVM_PRIVATE_KEY": "${MCP_BRIDGE_EVM_PRIVATE_KEY}",
        "MCP_BRIDGE_SVM_PRIVATE_KEY": "${MCP_BRIDGE_SVM_PRIVATE_KEY}",
        "MCP_BRIDGE_MAX_PRICE_PER_CALL_ATOMIC": "100000",
        "MCP_BRIDGE_MAX_TOTAL_ATOMIC": "1000000",
        "MCP_BRIDGE_ALLOW_HTTP": "0",
        "MCP_BRIDGE_DISCOVER_LIMIT": "20",
        "MCP_BRIDGE_BAZAAR_URL": "https://api.cdp.coinbase.com/platform/v2/x402/discovery/resources",
        "MCP_BRIDGE_BATCH_DEPOSIT_MULTIPLIER": "5",
        "MCP_BRIDGE_MAX_DEPOSIT_ATOMIC": "5000000",
        "X402_MCP_BRIDGE_CHANNELS_DIR": "~/.x402-mcp-bridge/channels"
      }
    }
  }
}
{
  "mcpServers": {
    "x402-bridge": {
      "command": "npx",
      "args": [
        "-y",
        "@three-ws/[email protected]"
      ],
      "env": {
        "MCP_BRIDGE_EVM_PRIVATE_KEY": "${MCP_BRIDGE_EVM_PRIVATE_KEY}",
        "MCP_BRIDGE_SVM_PRIVATE_KEY": "${MCP_BRIDGE_SVM_PRIVATE_KEY}",
        "MCP_BRIDGE_MAX_PRICE_PER_CALL_ATOMIC": "100000",
        "MCP_BRIDGE_MAX_TOTAL_ATOMIC": "1000000",
        "MCP_BRIDGE_ALLOW_HTTP": "0",
        "MCP_BRIDGE_DISCOVER_LIMIT": "20",
        "MCP_BRIDGE_BAZAAR_URL": "https://api.cdp.coinbase.com/platform/v2/x402/discovery/resources",
        "MCP_BRIDGE_BATCH_DEPOSIT_MULTIPLIER": "5",
        "MCP_BRIDGE_MAX_DEPOSIT_ATOMIC": "5000000",
        "X402_MCP_BRIDGE_CHANNELS_DIR": "~/.x402-mcp-bridge/channels"
      }
    }
  }
}
extensions:
  "x402-bridge":
    enabled: true
    name: "x402-bridge"
    type: stdio
    cmd: "npx"
    args:
      - "-y"
      - "@three-ws/[email protected]"
    envs:
      "MCP_BRIDGE_EVM_PRIVATE_KEY": "${MCP_BRIDGE_EVM_PRIVATE_KEY}"
      "MCP_BRIDGE_SVM_PRIVATE_KEY": "${MCP_BRIDGE_SVM_PRIVATE_KEY}"
      "MCP_BRIDGE_MAX_PRICE_PER_CALL_ATOMIC": "100000"
      "MCP_BRIDGE_MAX_TOTAL_ATOMIC": "1000000"
      "MCP_BRIDGE_ALLOW_HTTP": "0"
      "MCP_BRIDGE_DISCOVER_LIMIT": "20"
      "MCP_BRIDGE_BAZAAR_URL": "https://api.cdp.coinbase.com/platform/v2/x402/discovery/resources"
      "MCP_BRIDGE_BATCH_DEPOSIT_MULTIPLIER": "5"
      "MCP_BRIDGE_MAX_DEPOSIT_ATOMIC": "5000000"
      "X402_MCP_BRIDGE_CHANNELS_DIR": "~/.x402-mcp-bridge/channels"
    timeout: 300

Placeholders to fill from your own secret store: ${MCP_BRIDGE_EVM_PRIVATE_KEY}, ${MCP_BRIDGE_SVM_PRIVATE_KEY}. The registry never accepts secret values.

This is a local package: the command runs on your machine.

Quality – / 100not scored

Not scored: fewer than three checks apply, usually because no remote answered a credential-free probe or the server is a local package.

protocoln/a · weight 25
  • n/a
    protocol.modern, protocol.stateless, protocol.transport, protocol.list_ttlno remote answered a protocol handshake (not probed yet, unreachable, or local-only)
authorizationn/a · weight 15
  • n/a
    auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
  • n/a
    auth.secret_in_urlno templated URL
tool hygienen/a · weight 30
  • n/a
    tools.descriptions, tools.description_length, tools.schemas, tools.annotations, tools.directory_hints, tools.token_cost, tools.api_dumptool list unknown (behind auth, not probed, or empty)
stabilityn/a · weight 15
  • n/a
    stability.changes, stability.rug_pulltool list unknown
dependencies67 · weight 15
  • pass
    deps.known_vulnsno known advisory in 179 resolved packages
  • fail
    deps.mcp_sdk_version@modelcontextprotocol/sdk 1.30.1 has 1 known advisory (GHSA-6qxp-vccf-f47h); update @modelcontextprotocol/sdk to 1.31.0 or later
  • pass
    deps.resolvable@three-ws/[email protected] resolved: 179 packages

Tool list unknown · checked 2026-10-20 10:35 UTC

Tool changes

No tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 80 / 100

duplicate-repo
provenance90
livenessn/a
freshness85
hygiene60

+repository +namespace-matches-repo +website ~liveness-unmeasured ~updated-62d-ago -duplicate-repo(51 names)

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Dependencies

@three-ws/[email protected] npm178 dependencies, resolved · MCP SDK @modelcontextprotocol/sdk 1.30.1 · advisories checked 2026-10-19

advisoryseveritypackagefixed in
GHSA-6qxp-vccf-f47hMCP TypeScript SDK: OAuth client could send credentials to an authorization server chosen by the MCP serverhigh@modelcontextprotocol/[email protected]MCP SDK, directfixed in 1.31.0

Dependency graphs from deps.dev; advisories from OSV.dev, including the GitHub Advisory Database and the PyPI Advisory Database; all CC BY 4.0. The graph is what a clean install of this version resolves today; nothing was installed or run. How it is checked.

Endpoints

packageregistryversionruntimesecrets
@three-ws/mcp-bridgenpm1.0.2npxMCP_BRIDGE_EVM_PRIVATE_KEY, MCP_BRIDGE_SVM_PRIVATE_KEY

Tools (0)

No tools observed. Local packages are never executed by the registry.

Schemas: list_tools.

Also listed as

50 other active names share this repository (showing 10): io.github.nirholas/3d-agent-mcp, io.github.nirholas/3D-AI-Agent-Avatar, io.github.nirholas/activity-mcp, io.github.nirholas/agenc-mcp, io.github.nirholas/agentcore-payments-mcp, io.github.nirholas/agent-sniper, io.github.nirholas/agora-mcp, io.github.nirholas/alerts-mcp, io.github.nirholas/alibaba-cloud, io.github.nirholas/assistant-widget

Similar MCP servers

  • HPP x402 MCP BridgeL0
    io.github.hpp-io/x402-mcp-bridge

    MCP bridge for autonomous x402 payments in HPP USDC.e — discover and pay for services per call.

  • nano-payL0
    com.feeless402/nano-pay

    Pay for x402-priced APIs with feeless, sub-second Nano (XNO) micropayments from a local wallet.

  • anchor-x402R0quality 89
    io.github.hypeprinter007-stack/anchor-x402

    x402-paid agent tools: 18 over HTTP, 14 over stdio. USDC per call, no API key.

  • Neuronto Payments: x402 facilitator and API gatewayR0quality 79
    com.neuronto/x402-payments-facilitator

    Put any API behind x402 in one call, settle USDC on Base, buy credits, find paid resources

  • Apex Edge — x402-paid machine servicesR0quality 70
    dev.pages.nonsynthetic/apex-edge

    x402-paid MCP tools: utils, audit screens, corpus search, inference. USDC Base+Solana.

  • x402-payagent-mcpL0
    io.github.stevemilton/x402-payagent-mcp

    Pay x402 APIs in USDC on Base, Solana, and BNB Chain with spend mandates, receipts, idempotency.

More from io.github.nirholas

  • Papertrade AIR2quality 100
    io.github.nirholas/papertrade-ai

    Trade Papertrade BTC and ETH perps from Claude, ChatGPT, Codex, Cursor and any MCP client.

  • paired.exchangeR0quality 88
    io.github.nirholas/paired

    Launch coins quoted in tokenized stocks on Robinhood Chain; the user signs at a launch link.

  • three.ws 3D Studio (free)R0quality 86
    io.github.nirholas/threews-3d-studio-free

    Free text/image → 3D: generate, rig, avatar-ify, and refine GLB models. No auth, no payment.

  • three.ws for GrokR0quality 86
    io.github.nirholas/threews-grok

    Free text/image to 3D for Grok Bot, plus your three.ws agents once signed in. Never spends.

  • IBM Granite x402 RemoteR2quality 83
    io.github.nirholas/ibm-x402-mcp-remote

    Pay-per-use IBM Granite AI via x402: chat, code, embeddings, forecasting. USDC on Base or Solana.

  • three.ws Avatars & AgentsR2quality 83
    io.github.nirholas/three.ws

    3D avatars, embeds, glTF tools, agent memory, and on-chain agent identity from three.ws.

And 73 more from this publisher.

Official server.json
{
  "name": "io.github.nirholas/x402-bridge",
  "icons": [
    {
      "src": "https://three.ws/three-ws-mcp-icon.svg",
      "sizes": [
        "any"
      ],
      "mimeType": "image/svg+xml"
    }
  ],
  "title": "x402 Universal Payer",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "version": "1.0.2",
  "packages": [
    {
      "version": "1.0.2",
      "transport": {
        "type": "stdio"
      },
      "identifier": "@three-ws/mcp-bridge",
      "runtimeHint": "npx",
      "registryType": "npm",
      "environmentVariables": [
        {
          "name": "MCP_BRIDGE_EVM_PRIVATE_KEY",
          "format": "string",
          "isSecret": true,
          "description": "0x-prefixed 32-byte hex private key that funds USDC payments on EVM chains (Base, Arbitrum, …). At least one of the EVM/SVM keys is required. Treat like cash — use a dedicated low-balance wallet."
        },
        {
          "name": "MCP_BRIDGE_SVM_PRIVATE_KEY",
          "format": "string",
          "isSecret": true,
          "description": "Solana secret key that funds USDC payments: base58 64-byte secret key (Phantom / solana-keygen format) or a JSON array of 64 integers. At least one of the EVM/SVM keys is required. Treat like cash."
        },
        {
          "name": "MCP_BRIDGE_MAX_PRICE_PER_CALL_ATOMIC",
          "format": "number",
          "default": "100000",
          "description": "Per-call spending cap in atomic units (USDC has 6 decimals). Payments above this abort with a clear reason."
        },
        {
          "name": "MCP_BRIDGE_MAX_TOTAL_ATOMIC",
          "format": "number",
          "default": "1000000",
          "description": "Cumulative session spending ceiling in atomic units. Once total spend would exceed it, further payments abort until restart."
        },
        {
          "name": "MCP_BRIDGE_ALLOWED_PAYTO",
          "format": "string",
          "description": "Comma-separated payee allowlist. When set, any payment whose payTo address is not listed is refused."
        },
        {
          "name": "MCP_BRIDGE_ALLOWED_HOSTS",
          "format": "string",
          "description": "Comma-separated hostname allowlist for outbound paid requests. When set, any other host is refused before a request is signed."
        },
        {
          "name": "MCP_BRIDGE_ALLOW_HTTP",
          "format": "boolean",
          "default": "0",
          "description": "Set to 1 to allow http:// targets (local development only). https is enforced otherwise."
        },
        {
          "name": "MCP_BRIDGE_DISCOVER_LIMIT",
          "format": "number",
          "default": "20",
          "description": "Max number of x402 Bazaar resources to register as dynamic tools at startup. Set 0 to disable discovery."
        },
        {
          "name": "MCP_BRIDGE_BAZAAR_URL",
          "format": "string",
          "default": "https://api.cdp.coinbase.com/platform/v2/x402/discovery/resources",
          "description": "x402 Bazaar discovery endpoint. Override to point at a self-hosted or alternative bazaar."
        },
        {
          "name": "MCP_BRIDGE_BATCH_DEPOSIT_MULTIPLIER",
          "format": "number",
          "default": "5",
          "description": "How many request-amounts to deposit at once when opening an EVM batch-settlement channel."
        },
        {
          "name": "MCP_BRIDGE_MAX_DEPOSIT_ATOMIC",
          "format": "number",
          "default": "5000000",
          "description": "Hard cap in atomic units on a single batch-settlement channel deposit or top-up."
        },
        {
          "name": "X402_MCP_BRIDGE_CHANNELS_DIR",
          "format": "string",
          "default": "~/.x402-mcp-bridge/channels",
          "description": "Directory for persisted batch-settlement channel state (survives client restarts)."
        },
        {
          "name": "RPC_URL_8453",
          "format": "string",
          "description": "Per-chain RPC override, one variable per chain id (RPC_URL_<chainId>, e.g. RPC_URL_8453 for Base). Defaults to viem's public RPC for that chain."
        }
      ]
    }
  ],
  "repository": {
    "url": "https://github.com/nirholas/three.ws",
    "source": "github",
    "subfolder": "mcp-bridge"
  },
  "websiteUrl": "https://three.ws",
  "description": "Pay any x402 endpoint on the open web: auto-paying bridge with Bazaar discovery and spend caps."
}