X402 Agent Data — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited X402 Agent Data (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Pay-per-call data tools for AI agents, settled per call in USDC on Base via the x402 protocol. The buyer is another agent: it discovers an endpoint, auto-pays per request (HTTP 402 → payment → data), and gets structured JSON back. No API key, no signup, no account — the seller's only setup is one public wallet address.
Live at https://x402.charliemorrison.dev — also listed as a remote MCP server in the Official MCP Registry as dev.charliemorrison/agent-web-reader.
| Tool | Endpoint | Price | Returns |
|---|---|---|---|
market_signal | GET /signal | $0.005 | Crypto market signal (price/trend/momentum) for a symbol |
web_read | GET /extract | $0.005 | Clean, readable text + metadata extracted from any URL |
repo_audit | GET /audit?owner=&repo= | $0.005 | GitHub repo discoverability/SEO score (0–100) + concrete fixes |
Free, unpaid routes:
GET / — discovery doc (service + paid-endpoint metadata, x402-aware)GET /healthz — livenessGET /.well-known/mcp.json — MCP discovery manifestGET /.well-known/agent.json — A2A Agent CardPOST /mcp — remote MCP server (Streamable HTTP). Lists the three tools; anunpaid tools/call returns the decoded x402 payment-required challenge, and a call carrying an x402 payment returns the data.
x402 challenge (amount, asset = USDC, network = base, payTo address).
X-PAYMENT header.
No private key ever lives in this server's config — it only receives. Settlement is delegated to an x402 facilitator (default: a zero-fee, gas-sponsored facilitator; Coinbase CDP facilitator is supported via env and inert unless configured).
npm install
PAY_TO=0xYourReceivingAddress node server.js # listens on :4021Environment:
PAY_TO — your receiving wallet (USDC on Base). Required for real revenue.PORT — default 4021.CDP_API_KEY_ID / CDP_API_KEY_SECRET — optional; switches settlement to theCoinbase CDP facilitator. Omitted by default.
The buyer is a machine and distribution is a registry — there's no cold human audience to recruit, which is the wall that kills most indie API/tool launches. Seller setup is a single wallet address; every call is zero-marginal-cost public data.
MIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.