protogrid

Search / io.github.robertoyanguas-ops/x402-audit-mcp

x402-audit-mcp

R0· no sign-in

Audits any URL for HTTP 402 x402 V2 compliance, PAYMENT-REQUIRED headers, Bazaar schema, and MCP.

v1.1.1 · active · descriptor JSON · versions

An agent can connect right now, no human step.Remote endpoint, no authentication, reachable on the last probe.
Quality76good
Trust77of 100
Uptime, 30 days100%
Latency p50219 ms

Connect

8 clients · secrets stay placeholders
{
  "mcpServers": {
    "x402-audit-mcp": {
      "type": "http",
      "url": "https://x402-audit-72343955726.us-central1.run.app/mcp/x402-audit"
    }
  }
}
claude mcp add --transport http x402-audit-mcp https://x402-audit-72343955726.us-central1.run.app/mcp/x402-audit
[mcp_servers.x402-audit-mcp]
url = "https://x402-audit-72343955726.us-central1.run.app/mcp/x402-audit"
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "x402-audit-mcp": {
      "type": "remote",
      "url": "https://x402-audit-72343955726.us-central1.run.app/mcp/x402-audit",
      "enabled": true
    }
  }
}
{
  "mcpServers": {
    "x402-audit-mcp": {
      "type": "http",
      "url": "https://x402-audit-72343955726.us-central1.run.app/mcp/x402-audit"
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=x402-audit-mcp&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8veDQwMi1hdWRpdC03MjM0Mzk1NTcyNi51cy1jZW50cmFsMS5ydW4uYXBwL21jcC94NDAyLWF1ZGl0In0%3D"
}
{
  "servers": {
    "x402-audit-mcp": {
      "type": "http",
      "url": "https://x402-audit-72343955726.us-central1.run.app/mcp/x402-audit"
    }
  }
}
{
  "mcpServers": {
    "x402-audit-mcp": {
      "httpUrl": "https://x402-audit-72343955726.us-central1.run.app/mcp/x402-audit"
    }
  }
}
extensions:
  "x402-audit-mcp":
    enabled: true
    name: "x402-audit-mcp"
    type: streamable_http
    uri: "https://x402-audit-72343955726.us-central1.run.app/mcp/x402-audit"
    timeout: 300

Quality 76 / 100good

protocol88 · weight 25
  • pass
    protocol.modernsupports 2026-07-28 (server/discover)
  • pass
    protocol.statelessanswers without a session
  • pass
    protocol.transportstreamable HTTP
  • warn
    protocol.list_ttltools/list carries no ttlMs, so clients re-fetch it
authorizationn/a · weight 15
  • n/a
    auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
  • n/a
    auth.secret_in_urlno templated URL
tool hygiene93 · weight 30
  • pass
    tools.descriptionsevery tool has a description
  • warn
    tools.description_length1 tools have descriptions over 1,024 characters, which crowds the context
  • pass
    tools.schemasevery tool has an object input schema
  • pass
    tools.annotations2 of 2 tools declare readOnlyHint or destructiveHint
  • pass
    tools.directory_hintsevery tool declares readOnlyHint, destructiveHint, idempotentHint and openWorldHint
  • pass
    tools.token_costabout 802 tokens to load every tool
  • pass
    tools.api_dumptools are not a one-to-one API dump
stability25 · weight 15
  • warn
    stability.changes11 tool changes in 30 days
  • fail
    stability.rug_pull5 tools kept their name but changed most of their description in 30 days; review before trusting them
dependenciesn/a · weight 15
  • n/a
    deps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI package

2 tools, about 802 tokens to load them all · tool set 56bbb78bc1a0 · tools last changed 2026-10-19 · checked 2026-10-20 20:14 UTC

Tool changes

  • get_agent_wallet_statuschangeddescription, input schema
    before

    Inspect an agent's account ledger: remaining free trial calls (out of 5), prepaid USD balance, cumulative spend, total API calls, and total LLM tokens saved. WHEN TO USE: Call before a batch of paid tool executions or after completing a Stripe or USDC top-up to confirm your balance. WHEN NOT TO USE: Do not use to process web content, execute marketplace tools, or submit payments; use the other tools on this server for execution. PARAMETER INTERACTIONS: Omit agent_id to inspect the default trial account derived from your client IP, or pass your explicit agent_id or agd_pass_ session key to check a specific funded wallet. Free and read-only: never charges a fee or consumes a free trial call.

    after · 97% of words in common

    Inspect an agent's account ledger: remaining free trial calls (out of 5), prepaid USD balance, cumulative spend, total API calls, and total LLM tokens saved. WHEN TO USE: Call before a batch of paid tool executions or after completing a Stripe or USDC top-up to confirm your balance. WHEN NOT TO USE: Do not use to process web content, execute marketplace tools, or submit payments; use the other tools on this server for execution. PARAMETER INTERACTIONS: Omit agent_id to inspect the default trial account derived from your client IP, or pass your explicit agent_id or agd_pass_ session key to check a specific funded wallet. Free and read-only: never charges a fee or consumes a free trial call. Example: get_agent_wallet_status(agent_id='example')

  • audit_x402_and_a2a_endpointchangeddescription, input schema
    before

    Audits any remote agent or MCP URL for JSON-RPC compliance, latency SLA, OpenAPI schema, and HTTP 402 settlement headers. WHEN TO USE: Call `audit_x402_and_a2a_endpoint` when your task requires deterministic `x402-audit` analysis for `url`; use `get_agent_wallet_status` to check your remaining free trial quota or prepaid balance. WHEN NOT TO USE: Do not use for unrelated domains or binary media. PARAMETER INTERACTIONS: Pass the target `url` as a non-empty string; omit `agent_id` and `tx_hash` during your 5 free trial calls, or supply `agent_id` (`agd_pass_...`) / `tx_hash` for paid execution. Read-only and idempotent; results are cached for 1 hour (<5ms cache hit). $0.01 per call. Pricing: the first 5 calls per agent_id are free and failed calls are never charged. After 5 calls, the tool returns a payment-required quote (not a fatal error) with a $2 Stripe top-up link and Base/Solana USDC addresses; complete payment, then retry with your agd_pass_ key in agent_id or pass tx_hash.

    after · 96% of words in common

    Audits any remote agent or MCP URL for JSON-RPC compliance, latency SLA, OpenAPI schema, and HTTP 402 settlement headers. WHEN TO USE: Call `audit_x402_and_a2a_endpoint` when your task requires deterministic `x402-audit` analysis for `url`; use `get_agent_wallet_status` to check your remaining free trial quota or prepaid balance. WHEN NOT TO USE: Do not use for unrelated domains or binary media. PARAMETER INTERACTIONS: Pass the target `url` as a non-empty string; omit `agent_id` and `tx_hash` during your 5 free trial calls, or supply `agent_id` (`agd_pass_...`) / `tx_hash` for paid execution. Read-only and idempotent; results are cached for 1 hour (<5ms cache hit). $0.01 per call. Pricing: the first 5 calls per agent_id are free and failed calls are never charged. After 5 calls, the tool returns a payment-required quote (not a fatal error) with a $2 Stripe top-up link and Base/Solana USDC addresses; complete payment, then retry with your agd_pass_ key in agent_id or pass tx_hash. Example: audit_x402_and_a2a_endpoint(url='https://docs.stripe.com/api')

  • get_agent_wallet_statuschangeddescription, input schema, output schemameaning changed
    before

    Show an agent's account: free calls used (of 5), prepaid USD balance, total spent, total calls and tokens saved. Free: it never charges or uses a free call. Call it before a batch of paid calls, or after a top-up to confirm the credit arrived. It does not process content or take payments; use the other tools on this server for that. Returns JSON with free_calls_used, balance_usd, total_spent_usd, total_tokens_saved.

    after · 41% of words in common

    Inspect an agent's account ledger: remaining free trial calls (out of 5), prepaid USD balance, cumulative spend, total API calls, and total LLM tokens saved. WHEN TO USE: Call before a batch of paid tool executions or after completing a Stripe or USDC top-up to confirm your balance. WHEN NOT TO USE: Do not use to process web content, execute marketplace tools, or submit payments; use the other tools on this server for execution. PARAMETER INTERACTIONS: Omit agent_id to inspect the default trial account derived from your client IP, or pass your explicit agent_id or agd_pass_ session key to check a specific funded wallet. Free and read-only: never charges a fee or consumes a free trial call.

  • audit_x402_and_a2a_endpointchangeddescription, input schema, output schema
    before

    Audits any remote agent or MCP URL for JSON-RPC compliance, latency SLA, OpenAPI schema, and HTTP 402 settlement headers. Use it when your task needs this for one url; this endpoint offers only this tool and get_agent_wallet_status. Read-only; results are cached for 1 hour. $0.01 per call. Returns JSON with the result under data. Pricing: the first 5 calls per agent_id are free and failed calls are never charged. After that the tool returns a payment-required message (not an error) with a Stripe top-up link (from $2) and Base/Solana USDC addresses; pay, then repeat the same call with the same agent_id, or add tx_hash after a USDC transfer.

    after · 54% of words in common

    Audits any remote agent or MCP URL for JSON-RPC compliance, latency SLA, OpenAPI schema, and HTTP 402 settlement headers. WHEN TO USE: Call `audit_x402_and_a2a_endpoint` when your task requires deterministic `x402-audit` analysis for `url`; use `get_agent_wallet_status` to check your remaining free trial quota or prepaid balance. WHEN NOT TO USE: Do not use for unrelated domains or binary media. PARAMETER INTERACTIONS: Pass the target `url` as a non-empty string; omit `agent_id` and `tx_hash` during your 5 free trial calls, or supply `agent_id` (`agd_pass_...`) / `tx_hash` for paid execution. Read-only and idempotent; results are cached for 1 hour (<5ms cache hit). $0.01 per call. Pricing: the first 5 calls per agent_id are free and failed calls are never charged. After 5 calls, the tool returns a payment-required quote (not a fatal error) with a $2 Stripe top-up link and Base/Solana USDC addresses; complete payment, then retry with your agd_pass_ key in agent_id or pass tx_hash.

  • get_agent_wallet_statuschangeddescription, input schema, annotationsmeaning changed
    before

    Returns the calling agent's remaining free quota, USD balance, and total tokens saved. WHEN TO USE: Call for deterministic, token-efficient `get_agent_wallet_status` execution. WHEN NOT TO USE: Skip on binary media or unrelated domains. BEHAVIOR: Read-only, idempotent, 1h cache (<5ms HIT), SHA-256 ROI proof (HTTP 402 / x402 Base USDC / L402).

    after · 21% of words in common

    Show an agent's account: free calls used (of 5), prepaid USD balance, total spent, total calls and tokens saved. Free: it never charges or uses a free call. Call it before a batch of paid calls, or after a top-up to confirm the credit arrived. It does not process content or take payments; use the other tools on this server for that. Returns JSON with free_calls_used, balance_usd, total_spent_usd, total_tokens_saved.

  • audit_x402_and_a2a_endpointchangeddescription, input schema, annotationsmeaning changed
    before

    A2A, MCP & HTTP 402 Endpoint SLA Compliance Auditor (0.01 USDC via x402): Audits any remote agent or MCP URL for JSON-RPC compliance, latency SLA, OpenAPI schema, and HTTP 402 settlement headers. WHEN TO USE: Call for deterministic, token-efficient `audit_x402_and_a2a_endpoint` execution. WHEN NOT TO USE: Skip on binary media or unrelated domains. BEHAVIOR: Read-only, idempotent, 1h cache (<5ms HIT), SHA-256 ROI proof (HTTP 402 / x402 Base USDC / L402).

    after · 27% of words in common

    Audits any remote agent or MCP URL for JSON-RPC compliance, latency SLA, OpenAPI schema, and HTTP 402 settlement headers. Use it when your task needs this for one url; this endpoint offers only this tool and get_agent_wallet_status. Read-only; results are cached for 1 hour. $0.01 per call. Returns JSON with the result under data. Pricing: the first 5 calls per agent_id are free and failed calls are never charged. After that the tool returns a payment-required message (not an error) with a Stripe top-up link (from $2) and Base/Solana USDC addresses; pay, then repeat the same call with the same agent_id, or add tx_hash after a USDC transfer.

  • get_agent_wallet_statuschangedinput schema
  • audit_x402_and_a2a_endpointchangedinput schema
  • get_agent_wallet_statuschangeddescription, input schema, annotationsmeaning changed
    before

    Returns the calling agent's remaining free quota, USD balance, and total tokens saved.

    after · 27% of words in common

    Returns the calling agent's remaining free quota, USD balance, and total tokens saved. WHEN TO USE: Call for deterministic, token-efficient `get_agent_wallet_status` execution. WHEN NOT TO USE: Skip on binary media or unrelated domains. BEHAVIOR: Read-only, idempotent, 1h cache (<5ms HIT), SHA-256 ROI proof (HTTP 402 / x402 Base USDC / L402).

  • audit_x402_and_a2a_endpointchangeddescription, input schema, annotationsmeaning changed
    before

    A2A, MCP & HTTP 402 Endpoint SLA Compliance Auditor (0.01 USDC via x402): Audits any remote agent or MCP URL for JSON-RPC compliance, latency SLA, OpenAPI schema, and HTTP 402 settlement headers.

    after · 48% of words in common

    A2A, MCP & HTTP 402 Endpoint SLA Compliance Auditor (0.01 USDC via x402): Audits any remote agent or MCP URL for JSON-RPC compliance, latency SLA, OpenAPI schema, and HTTP 402 settlement headers. WHEN TO USE: Call for deterministic, token-efficient `audit_x402_and_a2a_endpoint` execution. WHEN NOT TO USE: Skip on binary media or unrelated domains. BEHAVIOR: Read-only, idempotent, 1h cache (<5ms HIT), SHA-256 ROI proof (HTTP 402 / x402 Base USDC / L402).

Showing the latest 10. Full history: list_changes · trend: quality JSON.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 77 / 100

no-repository
provenance35
liveness100
freshness100
hygiene80

+reachable +uptime-100% +updated-7d-ago -no-repository

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Endpoints

remoteauthreachableuptime 30dp50protocollast ok
https://x402-audit-72343955726.us-central1.run.app/mcp/x402-audit streamable-httpnoneyes100%219 ms2026-07-28, 2025-11-25, 2025-06-18, 2025-03-262026-10-20

Tools (2)

audit_x402_and_a2a_endpointread-onlyAudits any remote agent or MCP URL for JSON-RPC compliance, latency SLA, OpenAPI schema, and HTTP 402 settlement headers. WHEN TO USE: Call `audit_x402_and_a2a_endpoint` when your task requires deterministic `x402-audit` analysis for `url`; use `get_agent_wallet_status` to check your remaining free trial quota or prepaid balance. WHEN NOT TO USE: Do not use for unrelated domains or binary media. PARAMETER INTERACTIONS: Pass the target `url` as a non-empty string; omit `agent_id` and `tx_hash` during your 5 free trial calls, or supply `agent_id` (`agd_pass_...`) / `tx_hash` for paid execution. Read-only and idempotent; results are cached for 1 hour (<5ms cache hit). $0.01 per call. Pricing: the first 5 calls per agent_id are free and failed calls are never charged. After 5 calls, the tool returns a payment-required quote (not a fatal error) with a $2 Stripe top-up link and Base/Solana USDC addresses; complete payment, then retry with your agd_pass_ key in agent_id or pass tx_hash. Example: audit_x402_and_a2a_endpoint(url='https://docs.stripe.com/api')
get_agent_wallet_statusread-onlyInspect an agent's account ledger: remaining free trial calls (out of 5), prepaid USD balance, cumulative spend, total API calls, and total LLM tokens saved. WHEN TO USE: Call before a batch of paid tool executions or after completing a Stripe or USDC top-up to confirm your balance. WHEN NOT TO USE: Do not use to process web content, execute marketplace tools, or submit payments; use the other tools on this server for execution. PARAMETER INTERACTIONS: Omit agent_id to inspect the default trial account derived from your client IP, or pass your explicit agent_id or agd_pass_ session key to check a specific funded wallet. Free and read-only: never charges a fee or consumes a free trial call. Example: get_agent_wallet_status(agent_id='example')

Schemas: list_tools.

Similar MCP servers

More from io.github.robertoyanguas-ops

And 17 more from this publisher.

Official server.json
{
  "name": "io.github.robertoyanguas-ops/x402-audit-mcp",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "remotes": [
    {
      "url": "https://x402-audit-72343955726.us-central1.run.app/mcp/x402-audit",
      "type": "streamable-http"
    }
  ],
  "version": "1.1.1",
  "description": "Audits any URL for HTTP 402 x402 V2 compliance, PAYMENT-REQUIRED headers, Bazaar schema, and MCP."
}