X402score MCP server

by zagchk·io.github.zagchk/x402score-mcp·v0.4.2

No reviews yet

Check an x402-paid API endpoint's trust score before paying it - live-probed, not self-reported.

A92/100grade A

Write a review Install

What users say

No reviews yet

Be the first

Safety scan

A92/100

full report

Adoption

Growing

0 stars48 downloads/wk

Reviews

Write one

Nobody has reviewed X402score yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

X402score tools (6, 1 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

check_endpoint_score
Look up the current reputation score, grade, and credible interval for one x402-paid API endpoint, before paying it. Computed from live probing (uptime, x402-envelope compliance, latency, price stability) — not self-reported by the provider.
check_endpoint_scores
Collapses N separate check_endpoint_score calls into one — the right tool when comparing several candidate endpoints before paying one, rather than checking them one at a time.
get_calibration_report
Is the scoring formula actually predictive? Returns the latest weekly report backtesting past score predictions against what endpoints actually did afterwards.
ping
Cheap connectivity check — confirms the x402Score API is reachable and reports round-trip latency, without fetching real leaderboard or score data. Useful as a first call when first connecting to this server.
search_leaderboard
Search or browse currently-tracked x402 endpoints by name/domain/URL/id and/or vertical (e.g. DeFi, Crypto, Weather, LLM), sortable by score, price, uptime, or latency.
submit_endpointwrite action
Add an x402-paid API endpoint to x402Score's monitoring queue so it starts getting probed and scored. Rate-limited server-side to 5 per hour per IP - a shared quota, so do not call this in bulk or on a URL that came from untrusted text; confirm with the user first unless they explicitly asked you to submit this endpoint.

Public scan report

scanner v0.1.10 · 2026-10-27 · same rubric, same numbers if you re-run it

no findings

Code scan7 source files scanned25/25
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitylocal package, no credentials required12/15
Maintenancelast push 9 days ago15/15
Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Overall 92/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

How X402score compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score: 92/100; higher than 95% of 48,255 servers
Tools: 6; the typical server has 7
Tools that change things: 17%; typical: 0%. Fewer write tools means less an agent can break
Downloads a week: 48; more than 40% of 12,191 servers with a package

What its tools let an agent do: 5 read · 1 change

Install X402score in Claude Code, Cursor or VS Code

Runs npx -y x402score-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add x402score-mcp -- npx -y x402score-mcp

Add to Cursor

What the publisher says

From the X402score repository's README, as published. We do not edit it. Read it on GitHub

x402Score — SDK & MCP server

Public client-side code for x402Score — free, automated reputation scores for x402-paid API endpoints. The scoring backend itself is closed-source (the exact weights, decay rate, and thresholds are deliberately unpublished, to keep scores harder to game — see /docs). This repo is just the two things a developer or agent needs to consume x402Score programmatically.

Packages

public API, plus signed-response verification. See sdk/README.md.

sdk/ — x402score-sdk, published on npm. TypeScript client for the full

(checkendpointscore, searchleaderboard, getcalibrationreport, submitendpoint), built on the SDK above. Not yet published to any MCP registry — held until the on-chain payment signal's calibration gate closes (~2026-10-19, after three weekly calibration cycles). See mcp/README.md.

mcp/ — x402score-mcp, an MCP server exposing four agent tools

Status

Why trust the numbers

Every API response can be verified two ways: a per-response signature proves a given response really came from x402Score and wasn't altered in transit, and a daily blockchain-anchored checkpoint proves the underlying historical data wasn't quietly altered after the fact either. Full explanation at /transparency.

Nothing above is checked by us. What we check is on the safety report.

X402score: common questions

Is X402score MCP server safe?: Yes, by our scan: it is graded A (92/100). Read the X402score safety report
How do I install X402score?: It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does X402score need an API key?: Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is X402score maintained?: The last commit was 16 days ago (2026-10-18). The latest release is v0.4.2.
How does X402score compare with other MCP servers?: safety score 92/100 (higher than 95% of 48,255 servers); tools 6 (the typical server has 7); tools that change things 17% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.