{"name":"io.github.chico10117/x402-preflight","slug":"chico10117-x402-preflight","title":"x402 Preflight","description":"Inspect and validate an x402 endpoint before an autonomous agent spends USDC.","url":"https://mcp.market/server/chico10117-x402-preflight","rating":null,"grade":"C","score":57,"certified":false,"status":"active","category":"ai","tags":["ai"],"presence":{"score":15,"stars":0,"forks":0,"downloads_week":null,"last_push_at":"2026-09-15T08:48:24.000Z","license":null},"uptime":{"percent":100,"checks":28,"ok":28,"last_checked_at":"2026-11-05T17:20:42.922Z","last_ok_at":"2026-11-05T17:20:42.922Z","latency_ms":800},"claimed":false,"transport":"remote","callable_via_gateway":true,"default_price_micros":0,"repository":"https://github.com/chico10117/basepay-readiness-service","website":null,"version":"1.0.1","remotes":[{"type":"streamable-http","url":"https://x402.chikocorp.com/mcp"}],"packages":[],"tools":[{"name":"audit_x402_endpoint","description":"Technical audit for API developers launching or debugging x402. Returns deeper read-only evidence of payment configuration, schemas, redirects, CORS, cache behavior, OpenAPI, llms.txt, agent metadata, and x402 discovery consistency. Requires an explicitly authorized x402 purchase; does not test settlement, paid delivery, or actual marketplace indexing.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"resource_url":{"type":"string","format":"uri","pattern":"^https://","maxLength":2048,"description":"Public HTTPS x402 resource to inspect without payment credentials."},"method":{"type":"string","enum":["GET","HEAD","POST"],"default":"GET"},"expected_network":{"type":"string","pattern":"^[a-z0-9]+:[A-Za-z0-9._-]+$","maxLength":100},"max_price_usd":{"type":"number","minimum":0,"maximum":1000000}},"required":["resource_url"],"additionalProperties":false}},{"name":"inspect_x402_endpoint","description":"Free endpoint check for API developers launching or debugging x402. Inspect your live payment challenge and caller-selected comparison policy without sending payment credentials. ALLOW and BLOCK are policy decisions, not launch certification; a price-limit BLOCK does not establish a broken integration. Buyer-side inspection remains available.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"resource_url":{"type":"string","format":"uri","pattern":"^https://","maxLength":2048,"description":"Public HTTPS x402 resource to inspect without payment credentials."},"method":{"type":"string","enum":["GET","HEAD","POST"],"default":"GET"},"expected_network":{"type":"string","pattern":"^[a-z0-9]+:[A-Za-z0-9._-]+$","maxLength":100},"max_price_usd":{"type":"number","minimum":0,"maximum":1000000}},"required":["resource_url"],"additionalProperties":false}},{"name":"order_x402_remediation","description":"Diagnostic report for API developers launching or debugging x402. An explicitly authorized x402 purchase creates a durable order for asynchronous findings, evidence, and prioritized fix recommendations in JSON/Markdown. The receipt is not the completed report. No implementation, human consultation, target payment, deployment, or guaranteed marketplace indexing.","write_action":true,"price_micros":0,"input_schema":{"type":"object","properties":{"resource_url":{"type":"string","format":"uri","pattern":"^https://","maxLength":500},"goal":{"type":"string","minLength":1,"maxLength":800},"contact":{"type":"string","maxLength":300},"constraints":{"type":"string","maxLength":1000},"callback_url":{"type":"string","format":"uri","pattern":"^https://","maxLength":2000},"response_format":{"type":"string","enum":["json","markdown","both"],"default":"both"},"language":{"type":"string","minLength":2,"maxLength":20,"default":"en"}},"required":["resource_url","goal"],"additionalProperties":false}}],"scan":{"score":57,"grade":"C","scanned_at":"2026-10-16T17:07:12.460Z","report":{"scannerVersion":"0.1.10","scannedAt":"2026-10-16T17:07:12.427Z","components":{"code":{"score":-1,"max":25,"notes":["remote-only server, no package to scan"]},"reliability":{"score":20,"max":20,"notes":["remote reachable in 886ms"]},"poisoning":{"score":15,"max":15,"notes":["3 tool descriptions checked"]},"auth":{"score":3,"max":15,"notes":["open endpoint exposes 1 write-action tools with no auth"]},"maintenance":{"score":3,"max":15,"notes":["repository not readable: repo not found"]},"identity":{"score":2,"max":10,"notes":["no repository or website to verify"]}},"findings":[{"id":"auth.open-write","severity":"high","component":"auth","title":"Write-action tools reachable without authentication"}],"inputs":{"probes":[{"url":"https://x402.chikocorp.com/mcp","reachable":true,"authRequired":false,"latencyMs":886,"serverInfo":{"name":"x402-preflight","version":"1.0.0"}}],"packages":[],"repo":{"found":false,"owner":"chico10117","repo":"basepay-readiness-service","error":"repo not found"},"icon":{"url":"https://x402.chikocorp.com/favicon.svg","source":"registry"},"presence":{"stars":0,"forks":0,"downloadsWeek":null,"license":null,"lastPushAt":"2026-09-15T08:48:24.000Z","score":15}}}},"grade_history":[{"kind":"downgrade","fromGrade":"B","toGrade":"C","reason":"score 57: Write-action tools reachable without authentication","createdAt":"2026-10-16T17:07:13.635Z"}],"reviews":[]}