MCP.Market

X402 SMS MCP server

by UltraStarz·io.github.UltraStarz/x402-sms·v0.1.0

Pay-per-call MCP server. $0.03 USDC sends one transactional SMS to a US phone number via x402.

C69/100grade C
What users say
No reviews yet
Be the first
Safety scan
C69/100

full report

Adoption
New

0 stars138 downloads/wk

Reviews

Write one

Nobody has reviewed X402 SMS yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

X402 SMS tools (1, 1 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • send_smswrite action

    Send one transactional SMS message to a US phone number.

Public scan report

scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it

no findings
  • Code scan3 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancelast push 129 days ago8/15
  • Maintainer identityregistry namespace matches repository owner6/10
Overall 69/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How X402 SMS compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
69/100
higher than 32% of 48,243 servers
Tools
1
the typical server has 7
Tools that change things
100%
typical: 0%. Fewer write tools means less an agent can break
Downloads a week
138
more than 69% of 12,306 servers with a package

What its tools let an agent do: 1 send or post

Install X402 SMS in Claude Code, Cursor or VS Code

Runs npx -y x402-sms-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add x402-sms -- npx -y x402-sms-mcp
Add to Cursor

What the publisher says

From the X402 SMS repository's README, as published. We do not edit it. Read it on GitHub

x402-sms-mcp

A paid MCP server that lets AI agents send SMS messages to US phone numbers.

Each send_sms tool call:

  1. Sends a transactional SMS via a verified toll-free number
  2. Auto-appends Reply STOP to opt out if the body doesn't include opt-out language
  3. Costs $0.03 USDC per message, paid automatically from the configured wallet via x402

No API keys. No Twilio account. The agent pays the toll, the message goes out.

Status (2026-05-22): Public beta on Base Sepolia (testnet). The seller's toll-free number is undergoing Twilio TFV approval (submitted 2026-05-14, still in queue). During this window /send calls short-circuit to a 503 deliverypendingtfvapproval response before** the buyer wallet signs anything, so no USDC is moved. The day Twilio approves the number, delivery flips on; pricing flips to Base mainnet shortly after.

Install in Claude Desktop / Cursor / Windsurf

Add this to your MCP config (~/Library/Application Support/Claude/claudedesktopconfig.json on macOS):

{
  "mcpServers": {
    "x402-sms": {
      "command": "npx",
      "args": ["-y", "x402-sms-mcp"],
      "env": {
        "BUYER_PRIVATE_KEY": "0xYOUR_PRIVATE_KEY"
      }
    }
  }
}

Restart your MCP client. A send_sms tool will appear.

What you need

A wallet on Base Sepolia (testnet) funded with:

  • A small amount of ETH for gas (free from )
  • USDC for payments (free from , select Base Sepolia)

Generate a throwaway key:

node -e "const {generatePrivateKey,privateKeyToAccount}=require('viem/accounts');const k=generatePrivateKey();console.log('PRIVATE_KEY=',k);console.log('ADDRESS=',privateKeyToAccount(k).address)"

Use the printed address to claim from faucets, then put the printed key into your MCP config.

Try it

In Claude Desktop, ask:

Text my cell at +15551234567 when this long-running task finishes. The recipient (me) consents to receive this message.

Claude will call sendsms with optin_attestation: true. You'll get back a Twilio SID + the on-chain settlement hash. The transfer is visible at .

Compliance — please read

This MCP wraps a regulated SMS gateway. The operator (you) is responsible for ensuring every recipient has consented to receive messages before invoking sendsms. The optin_attestation: true argument is your legal attestation under TCPA and CTIA short-code/long-code rules.

Do NOT use this MCP to:

  • Send marketing or promotional content
  • Text strangers, scraped lists, or anyone who hasn't opted in
  • Send to non-US numbers (the seller currently rejects non-+1 E.164)
  • Send anything related to S.H.A.F.T.-C (Sex, Hate, Alcohol, Firearms, Tobacco, Cannabis)

The seller-side automatically:

  • Appends Reply STOP to opt out to every message
  • Honors carrier-level STOP/HELP keyword handling
  • Logs each send for audit purposes

If you have any doubt about consent, do not call this tool.

Configuration

To point the MCP server at your own seller deployment, override SMS_URL.

Errors you might see

The MCP surfaces three distinct error shapes so the model can explain what happened to the user and decide whether to retry.

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

X402 SMS: common questions

Is X402 SMS MCP server safe?
With care: it is graded C, so read the findings first (69/100). Read the X402 SMS safety report
How do I install X402 SMS?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does X402 SMS need an API key?
Yes. The registry entry asks for BUYER_PRIVATE_KEY.
Is X402 SMS maintained?
The last commit was 168 days ago (2026-05-22). The latest release is v0.1.0.
How does X402 SMS compare with other MCP servers?
safety score 69/100 (higher than 32% of 48,243 servers); tools 1 (the typical server has 7); tools that change things 100% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

More from UltraStarz →