MCP.Market

x402 Oracle MCP server

online · 100% uptime
by kwizzlesurp10-ctrl·io.github.kwizzlesurp10-ctrl/x402orcle·v0.1.0

Paid x402 help: debug 402 errors, review MCP manifests, rewrite Bazaar listings. USDC on Base.

B81/100grade B
What users say
No reviews yet
Be the first
Safety scan
B81/100

full report

Adoption
Growing

0 stars

Reviews

Write one

Nobody has reviewed x402 Oracle yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

x402 Oracle tools (7, 1 write)

write = sends, deletes, buys or posts
  • complete_oracle_taskFree

    Outcome A2A task: typed diffs, operator handoff notes, and revenue/risk for a concrete x402 shipping goal.

  • oracle_askFree

    Paid x402/MCP/A2A/Bazaar consult. JSON wisdom envelope: verdict, wisdom, developer build notes, risk, citations, receipt.

  • oracle_bazaar_rewriteFree

    Rewrite serviceName (≤32), description (≤500), tags (≤5) for buyer-query rank. Warns on first-index freeze.

  • oracle_diagnose_402write actionFree

    Post-mortem a 402 handshake: PAYMENT-REQUIRED shape, bazaar extension, network, asset, resource.url.

  • oracle_healthFree

    Free liveness + seller posture (payTo configured, no spend key, network, demo/live).

  • oracle_pricingFree

    Free menu of paid consults, A2A tasks, and connect how-to. No keys requested.

  • oracle_review_mcpFree

    Review an MCP paid-tool server for createPaymentWrapper, free health tool, discovery extension, burner isolation.

Public scan report

scanner v0.1.10 · 2026-10-28 · same rubric, same numbers if you re-run it

1 high
  • –Code scanremote-only server, no package to scann/a
  • Live reliabilityremote reachable in 617ms20/20
  • Tool poisoning7 tool descriptions checked15/15
  • Auth qualityopen endpoint exposes 1 write-action tools with no auth3/15
  • Maintenancelast push 11 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Findings (1)

  • highWrite-action tools reachable without authenticationauth.open-write
Overall 81/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How x402 Oracle compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
81/100
higher than 62% of 48,255 servers
Tools
7
the typical server has 7
Tools that change things
14%
typical: 0%. Fewer write tools means less an agent can break
Uptime
100%
of our recent checks; the typical remote server answers 100%
Response time
106 ms
faster than 83% of 30,031 servers

What its tools let an agent do: 6 read · 1 change

Install x402 Oracle in Claude Code, Cursor or VS Code

claude mcp add --transport http x402orcle https://x402orcle.vercel.app/mcp
Add to Cursor

What the publisher says

From the x402 Oracle repository's README, as published. We do not edit it. Read it on GitHub

x402 Oracle (x402orcle)

402 is the answer. The Oracle is how you ask.

Paid MCP + HTTP 402 wisdom market for x402 / MCP / A2A / Bazaar. Seller-only public host. Base USDC (eip155:8453).

Discover

Tools

Free: oraclehealth, oraclepricing Paid: oracleask $0.10 · oraclediagnose402 $0.50 · oraclereviewmcp $3 · oraclebazaarrewrite $1.50 · completeoracletask $10 (clamped to MAXPRICE_USD=25)

Paid replies are a wisdom envelope: verdict, wisdom, implementation_prompt, risk, citations, receipt.

Env (never a spend key)

X402_PAY_TO=0x…                 # 42-char address only
X402_NETWORK=eip155:8453
X402_FACILITATOR_URL=https://api.cdp.coinbase.com/platform/v2/x402
CDP_API_KEY_ID=                 # Secret API key id (JWT). Not a wallet key.
CDP_API_KEY_SECRET=
MAX_PRICE_USD=25
DEMO_MODE=true                  # local DemoFacilitator

Do not set EVMPRIVATEKEY on Vercel/Render. Buyer keys stay on the operator laptop.

x402.org/facilitator is not the default production path for mainnet EVM.

Run

cp .env.example .env
pnpm install
pnpm --filter @x402orcle/oracle-brain test
pnpm --filter @x402orcle/mcp test
pnpm --filter @x402orcle/mcp dev     # :4021
pnpm --filter @x402orcle/web dev     # :3000 landing

Unpaid consult → HTTP 402 + PAYMENT-REQUIRED (base64 JSON, extensions.bazaar). Demo: POST /v1/demo/mint-payment then retry with PAYMENT-SIGNATURE.

Bazaar

Cataloging is settlement-triggered. Validate first (no pay):

curl -sS -X POST https://api.cdp.coinbase.com/platform/v2/x402/validate \
  -H 'content-type: application/json' \
  -d '{"resource":"https://YOUR_HOST/api/consult/oracle_ask","method":"POST"}'

Then one mainnet seed settle from a local burner. No settlement = no rank.

Monorepo

apps/web            Next.js App Router landing + discovery + 402
apps/mcp            streamable-HTTP paid MCP + HTTP twins
packages/oracle-brain

FOSS: @x402/mcp createPaymentWrapper + x402ResourceServer, @x402/extensions/bazaar declareDiscoveryExtension (see apps/mcp/src/x402-foss.ts).

Legal

Payment for delivered consult artifacts or a voluntary tip. Not a token, not equity, not a raise.

Nothing above is checked by us. What we check is on the safety report.

x402 Oracle: common questions

Is x402 Oracle MCP server safe?
Mostly: it is graded B (81/100). Read the x402 Oracle safety report
How do I install x402 Oracle?
It runs remotely at x402orcle.vercel.app. Add it to Claude Code, Cursor, VS Code or Claude Desktop with the snippets above, or call it through the mcp.market gateway without installing anything.
Does x402 Oracle need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is x402 Oracle maintained?
The last commit was 17 days ago (2026-10-17). The latest release is v0.1.0.
Is x402 Oracle up?
100% of our last 28 checks got an answer. We check remote servers about four times a day.
How does x402 Oracle compare with other MCP servers?
safety score 81/100 (higher than 62% of 48,255 servers); tools 7 (the typical server has 7); tools that change things 14% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.