MCP.Market

X402station MCP server

by sF1nX·io.github.sF1nX/x402station·v1.0.11·3 stars
No reviews yet

x402station.io: independent risk-signal layer for x402 endpoints before agents pay.

B72/100grade B
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
B72/100

full report

Adoption
New

3 stars59 downloads/wk

Reviews

Write one

Nobody has reviewed X402station yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

X402station tools (10, 1 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • alternatives

    Avoid paying unsafe x402 endpoints: ranked safe alternatives for the same capability.

  • buy_creditswrite action

    Prepaid credit pack for high-frequency x402 scam checks, preflight, and verified calls. Returns { creditId, balance, expiresAt }; use X-Credit-Id on subsequent preflight calls.

  • catalog_decoys

    Searchable catalog of x402 endpoint risk signals; scam-like decoys, zombies, and price-traps flagged.

  • credits_status

    Free, no payment required. Returns { creditId, balance, initialBalance, used, paidAmount, createdAt, expiresAt, expired, paymentTx, paymentNetwork }. UUID-only access — anyone holding the creditId can read state, same as decrement. 404 covers both 'malformed UUID' and 'no such credit' (same body so an attacker scraping random UUIDs can't tell them apart).

  • forensics

    Forensic x402 scam/risk report for a suspicious endpoint: probe history, signatures, decoy / price-trap patterns.

  • preflight

    Preflight x402 scam check: endpoint risk before you pay — decoy / zombie / price-trap / never-paid? Trust verdict in ~200ms before PAYMENT-SIGNATURE.

  • watch_status

    Returns the current state of a watch: active/expired, alerts remaining (out of 100 prepaid), last 10 alert deliveries with their delivery_status, and the last computed signal snapshot. Free — no payment required, secret-gated. The secret is the one returned by watch_subscribe.

  • watch_subscribe

    Monitor x402 endpoint risk; webhook on scam-like decoy / zombie / price-trap status changes. Returns watchId + secret; x402station.io posts HMAC-SHA256-signed JSON when subscribed signals fire or clear.

  • watch_unsubscribe

    Deactivates the watch — no further alerts will be queued or delivered. The subscription is set is_active=false but the row + alert history is retained for audit. Free — no payment required, secret-gated. There is no refund for unused prepaid alerts.

  • whats_new

    Polling-friendly catalog diff. Body { since?, limit? } (default since=now-24h, limit=200, max 500). Returns added_endpoints[] (first_seen_at >= since AND is_active=true), removed_endpoints[] (flipped to is_active=false since), service-level counts, polls_in_window, and current active totals. Cheap ($0.001 USDC) so hourly polling stays under $1/month — perfect for aggregator agents that need a fres

Public scan report

scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it

no findings
  • Code scan3 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancelast push 117 days ago8/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 72/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How X402station compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
72/100
higher than 38% of 48,255 servers
Tools
10
the typical server has 7
Tools that change things
10%
typical: 0%. Fewer write tools means less an agent can break
GitHub stars
3
more than 80% of 28,688 servers
Downloads a week
59
more than 48% of 12,191 servers with a package

What its tools let an agent do: 9 read · 1 change

Install X402station in Claude Code, Cursor or VS Code

Runs npx -y x402station-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add x402station -- npx -y x402station-mcp
Add to Cursor

What the publisher says

From the X402station repository's README, as published. We do not edit it. Read it on GitHub

x402station-mcp

<!-- mcp-name: io.github.sF1nX/x402station -->

MCP adapter for x402station.io, the independent risk-signal layer for x402 agentic commerce. Exposes Preflight by x402station.io plus Forensics, Catalog Decoys, Alternatives, Credits, Watch, and Whats New. Any agent speaking the Model Context Protocol gets endpoint evidence before signing PAYMENT-SIGNATURE — decoy, zombie, price-trap, never-paid, latency, signature/settlement checks — before paying.

x402station.io independently probes every endpoint listed on agentic.market every 10 minutes and merges probe history with CDP settlement data. Policy engines decide and enforce; x402station.io measures and reports. We do not route, take custody, or endorse.

Install

# Claude Code / Cursor / Windsurf / Continue — works anywhere with MCP
npm install -g x402station-mcp
# or use npx in the config, no global install needed:

Configure

The adapter charges real USDC per paid call through x402 itself. You need a wallet private key that holds Base mainnet USDC.

Claude Code

Add to ~/.claude/claudedesktopconfig.json (or wherever your MCP servers live):

{
  "mcpServers": {
    "x402station": {
      "command": "npx",
      "args": ["-y", "x402station-mcp"],
      "env": {
        "AGENT_PRIVATE_KEY": "0xYOUR_PRIVATE_KEY_HERE"
      }
    }
  }
}

Cursor / Windsurf / Continue

Same shape — every MCP host understands command / args / env. See your tool's MCP docs.

Environment

Tools

preflight(url) — $0.001 USDC

Ask whether it's safe to pay this x402 URL. Returns:

{
  "ok": true,
  "warnings": [],
  "metadata": {
    "service": "...",
    "price_usdc": "0.01",
    "uptime_1h_pct": 100,
    "avg_latency_ms": 412
  }
}

ok is true only when no critical warning fires. Warnings include unknownendpoint, nohistory, dead, zombie, decoypriceextreme, neverpaidzombie, proxymarkup, wildcard402, spafallback, suspicioushighprice, slow, and newprovider.

forensics(url) — $0.001 USDC

Deep 7-day report. Superset of preflight. Returns hourly uptime, latency p50/p90/p99, status-code distribution, concentration-group stats, decoy probability. Extra warnings: dead7d, mostlydead, slowp99, priceoutlierhigh, highconcentration.

catalog_decoys() — $0.005 USDC

Full blacklist. Returns every active endpoint currently flagged critical, plus per-reason counts. Pull periodically and cache locally — cheaper than preflighting every URL.

Typical agent flow

agent wants data from some_endpoint.com
    │
    ├─ preflight("https://some_endpoint.com/data")  ← $0.001
    │     ok: false, warnings: ["decoy_price_extreme"]
    │
    └─ skip; try the next candidate

For bulk discovery, do catalog_decoys() once per day and treat the result as a set-difference against any URLs you're about to hit.

Composes with

x402station checks whether the endpoint is safe (decoy / zombie / price-trap / never-paid) before an agent pays. It pairs naturally with a payload safety check — screening the payment metadata for PII before signing:

agent intent: pay some_endpoint.com
    ├─ x402station    preflight(url)              ← is the ENDPOINT safe?
    ├─ presidio-x402  screen_payment_metadata()   ← is the PAYLOAD safe?
    └─ pay()

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

X402station: common questions

Is X402station MCP server safe?
Mostly: it is graded B (72/100). Read the X402station safety report
How do I install X402station?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does X402station need an API key?
Yes. The registry entry asks for AGENT_PRIVATE_KEY.
Is X402station maintained?
The last commit was 155 days ago (2026-06-02). The latest release is v1.0.11.
How does X402station compare with other MCP servers?
safety score 72/100 (higher than 38% of 48,255 servers); tools 10 (the typical server has 7); tools that change things 10% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.