{"name":"io.github.sF1nX/x402station","slug":"sf1nx-x402station","title":null,"description":"x402station.io: independent risk-signal layer for x402 endpoints before agents pay.","url":"https://mcp.market/server/sf1nx-x402station","rating":null,"grade":"B","score":72,"certified":false,"status":"active","category":"other","tags":[],"presence":{"score":21,"stars":3,"forks":0,"downloads_week":59,"last_push_at":"2026-06-02T05:51:47.000Z","license":"MIT"},"uptime":null,"claimed":false,"transport":"npm","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/sF1nX/x402station-mcp","website":null,"version":"1.0.11","remotes":[],"packages":[{"registryType":"npm","identifier":"x402station-mcp","version":"1.0.11","transport":{"type":"stdio"},"environmentVariables":[{"description":"0x-prefixed 64-hex-char private key. Account must hold Base mainnet USDC. Required for any paid tool call.","isRequired":true,"format":"string","isSecret":true,"name":"AGENT_PRIVATE_KEY"},{"description":"Optional override. Only https://x402station.io or http(s)://localhost are accepted to prevent payload hijacking; any other value makes the adapter refuse to start.","format":"string","name":"X402STATION_BASE_URL"}]}],"tools":[{"name":"alternatives","description":"Avoid paying unsafe x402 endpoints: ranked safe alternatives for the same capability.","write_action":false,"price_micros":0,"input_schema":null},{"name":"buy_credits","description":"Prepaid credit pack for high-frequency x402 scam checks, preflight, and verified calls. Returns { creditId, balance, expiresAt }; use X-Credit-Id on subsequent preflight calls.","write_action":true,"price_micros":0,"input_schema":null},{"name":"catalog_decoys","description":"Searchable catalog of x402 endpoint risk signals; scam-like decoys, zombies, and price-traps flagged.","write_action":false,"price_micros":0,"input_schema":null},{"name":"credits_status","description":"Free, no payment required. Returns { creditId, balance, initialBalance, used, paidAmount, createdAt, expiresAt, expired, paymentTx, paymentNetwork }. UUID-only access — anyone holding the creditId can read state, same as decrement. 404 covers both 'malformed UUID' and 'no such credit' (same body so an attacker scraping random UUIDs can't tell them apart).","write_action":false,"price_micros":0,"input_schema":null},{"name":"forensics","description":"Forensic x402 scam/risk report for a suspicious endpoint: probe history, signatures, decoy / price-trap patterns.","write_action":false,"price_micros":0,"input_schema":null},{"name":"preflight","description":"Preflight x402 scam check: endpoint risk before you pay — decoy / zombie / price-trap / never-paid? Trust verdict in ~200ms before PAYMENT-SIGNATURE.","write_action":false,"price_micros":0,"input_schema":null},{"name":"watch_status","description":"Returns the current state of a watch: active/expired, alerts remaining (out of 100 prepaid), last 10 alert deliveries with their delivery_status, and the last computed signal snapshot. Free — no payment required, secret-gated. The secret is the one returned by watch_subscribe.","write_action":false,"price_micros":0,"input_schema":null},{"name":"watch_subscribe","description":"Monitor x402 endpoint risk; webhook on scam-like decoy / zombie / price-trap status changes. Returns watchId + secret; x402station.io posts HMAC-SHA256-signed JSON when subscribed signals fire or clear.","write_action":false,"price_micros":0,"input_schema":null},{"name":"watch_unsubscribe","description":"Deactivates the watch — no further alerts will be queued or delivered. The subscription is set is_active=false but the row + alert history is retained for audit. Free — no payment required, secret-gated. There is no refund for unused prepaid alerts.","write_action":false,"price_micros":0,"input_schema":null},{"name":"whats_new","description":"Polling-friendly catalog diff. Body { since?, limit? } (default since=now-24h, limit=200, max 500). Returns added_endpoints[] (first_seen_at >= since AND is_active=true), removed_endpoints[] (flipped to is_active=false since), service-level counts, polls_in_window, and current active totals. Cheap ($0.001 USDC) so hourly polling stays under $1/month — perfect for aggregator agents that need a fres","write_action":false,"price_micros":0,"input_schema":null}],"scan":{"score":72,"grade":"B","scanned_at":"2026-09-27T12:17:03.405Z","report":{"scannerVersion":"0.1.9","scannedAt":"2026-09-27T12:17:03.429Z","components":{"code":{"score":25,"max":25,"notes":["3 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":6,"max":15,"notes":["static API keys via environment variables"]},"maintenance":{"score":8,"max":15,"notes":["last push 117 days ago"]},"identity":{"score":8,"max":10,"notes":["registry namespace matches repository owner","GitHub account older than a year"]}},"findings":[],"inputs":{"packages":[{"registryType":"npm","identifier":"x402station-mcp","version":"1.0.11","found":true,"license":"MIT","hasInstallScripts":false,"dependencyCount":5,"publishedAt":"2026-06-02T04:49:38.647Z","repositoryUrl":"git+https://github.com/sF1nX/x402station-mcp.git","weeklyDownloads":59}],"repo":{"found":true,"owner":"sF1nX","repo":"x402station-mcp","archived":false,"pushedAt":"2026-06-02T05:51:47Z","stars":3,"forks":0,"openIssues":3,"ownerType":"User","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/31286419?v=4","ownerCreatedAt":"2017-08-23T16:36:53Z","license":"MIT"},"icon":{"url":"https://avatars.githubusercontent.com/u/31286419?v=4&s=128","source":"github"},"presence":{"stars":3,"forks":0,"downloadsWeek":59,"license":"MIT","lastPushAt":"2026-06-02T05:51:47.000Z","score":21}}}},"grade_history":[],"reviews":[]}