Is X402 Api Mcp Server safe to install?

SaferSkills independently audited X402 Api Mcp Server (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.

CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

100

35.0 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 0 flagged

Securityscore 100 · 0 findings

✓—All security checks passedNo findings in this category for the latest scan.pass

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

README.md · 1 file

README.md6.8 KB · Markdown

@x402-api/mcp-server

MCP server that gives Claude, ChatGPT, and any MCP-compatible AI agent access to pay-per-call crypto/DeFi data via the x402 protocol.

8 tools. No API keys. AI agents pay USDC micropayments on Base, per request.

  ██╗  ██╗██╗  ██╗ ██████╗ ██████╗
   ╚██╗██╔╝██║  ██║██╔═══██╗╚════██╗
    ╚███╔╝ ███████║██║   ██║ █████╔╝
    ██╔██╗ ╚════██║██║   ██║██╔═══╝
   ██╔╝ ██╗     ██║╚██████╔╝███████╗
   ╚═╝  ╚═╝     ╚═╝ ╚═════╝ ╚══════╝

Tools

Tool	API Endpoint	Cost	Description
`get_crypto_prices`	`GET /api/price-feed`	0.001 USDC	BTC/ETH/SOL + top 24h movers
`get_gas_prices`	`GET /api/gas-tracker`	0.001 USDC	Multi-chain gas (ETH, Base, Polygon, Arbitrum)
`get_dex_quotes`	`GET /api/dex-quotes`	0.002 USDC	Swap quotes: Uniswap, SushiSwap, 1inch
`scan_token`	`GET /api/token-scanner`	0.003 USDC	Token security scan + rug-pull detection
`track_whales`	`GET /api/whale-tracker`	0.005 USDC	Holder concentration + whale alerts
`scan_yields`	`GET /api/yield-scanner`	0.005 USDC	DeFi yields: Aave, Compound, Morpho, Lido, Pendle
`get_funding_rates`	`GET /api/funding-rates`	0.008 USDC	Perp funding rates across 6 venues
`profile_wallet`	`GET /api/wallet-profiler`	0.008 USDC	Full wallet portfolio + risk profile

Quick Start

Option A: Inspect mode (no payment needed)

Just run it — any 402 responses will return human-readable payment instructions:

npx @x402-api/mcp-server

Claude will tell you what's needed when a tool requires payment.

Option B: Auto-pay mode (fully autonomous)

Install optional payment deps and set your wallet key:

npm install -g @x402-api/mcp-server
npm install -g x402-fetch viem
export X402_WALLET_PRIVATE_KEY=0x<your_private_key>
x402-api-mcp

The server will auto-pay 402 responses using USDC on Base. Make sure your wallet has USDC on Base mainnet.

Claude Desktop Integration

Add to your claude_desktop_config.json:

Without auto-pay (inspect mode)

{
  "mcpServers": {
    "x402-api": {
      "command": "npx",
      "args": ["@x402-api/mcp-server"]
    }
  }
}

With auto-pay

{
  "mcpServers": {
    "x402-api": {
      "command": "npx",
      "args": ["@x402-api/mcp-server"],
      "env": {
        "X402_WALLET_PRIVATE_KEY": "0x<your_private_key>"
      }
    }
  }
}

Config file location:

macOS: ~/Library/Application Support/Claude/claude_desktop_config.json
Windows: %APPDATA%\Claude\claude_desktop_config.json
Linux: ~/.config/Claude/claude_desktop_config.json

Environment Variables

Variable	Required	Description
`X402_WALLET_PRIVATE_KEY`	Optional	Private key for auto-pay (e.g. `0x...`). If set, x402-fetch handles payments automatically.
`X402_API_BASE_URL`	Optional	Override API URL (default: `https://x402-api.fly.dev`)

How x402 Payments Work

This API uses the x402 protocol — HTTP 402 Payment Required:

Agent calls tool → MCP server makes API request
Server returns 402 with payment details (amount, USDC address, Base network)
Auto-pay mode: x402-fetch signs and submits payment, retries request automatically
Manual mode: MCP returns 402 details so user/agent can arrange payment

Payment details:

Token: USDC on Base mainnet
Address: 0x60264c480b67adb557efEd22Cf0e7ceA792DefB7
Chain: Base (chain ID 8453)
Amount: 0.001–0.008 USDC per call (< 1 cent USD)

Tool Reference

`get_crypto_prices`

No parameters. Returns current prices for BTC, ETH, SOL + top 24h movers.

Cost: 0.001 USDC

`get_gas_prices`

No parameters. Returns gas prices for Ethereum, Base, Polygon, Arbitrum — slow/standard/fast tiers.

Cost: 0.001 USDC

`get_dex_quotes`

Compare swap quotes across DEXes.

Parameter	Type	Required	Description
`from`	string	✅	Input token (e.g. `"ETH"`, `"0x..."`)
`to`	string	✅	Output token (e.g. `"USDC"`)
`amount`	string	✅	Amount to swap (e.g. `"1.5"`)

Cost: 0.002 USDC

`scan_token`

Token security scan — detects rug-pull flags, honeypot patterns, mint authority, etc.

Parameter	Type	Required	Description
`token`	string	✅	Contract address or symbol (e.g. `"PEPE"`)

Cost: 0.003 USDC

`track_whales`

Whale tracking — holder concentration, Gini coefficient, recent large moves.

Parameter	Type	Required	Description
`token`	string	✅	Contract address or symbol

Cost: 0.005 USDC

`scan_yields`

Top DeFi yield opportunities across Aave, Compound, Morpho, Lido, Pendle, etc.

Parameter	Type	Required	Description
`chain`	string	❌	Filter by chain: `"ethereum"`, `"base"`, `"arbitrum"`, `"polygon"`
`min_tvl`	number	❌	Minimum TVL in USD (e.g. `1000000`)

Cost: 0.005 USDC

`get_funding_rates`

Perpetual funding rates across Binance, OKX, Bybit, dYdX, GMX, Hyperliquid.

Parameter	Type	Required	Description
`asset`	string	❌	Asset symbol (e.g. `"BTC"`, `"ETH"`). All assets if omitted.

Cost: 0.008 USDC

`profile_wallet`

Full wallet portfolio analysis — holdings, DeFi positions, activity, PnL, risk score.

Parameter	Type	Required	Description
`address`	string	✅	Ethereum/Base wallet address (`0x...`)

Cost: 0.008 USDC

Development

git clone https://github.com/fernsugi/x402-api-mcp-server
cd x402-api-mcp-server

npm install
npm run build
npm start

To test without a payment wallet, simply run and see the 402 responses:

node dist/index.js

License

MIT

X402 Api Mcp Server— agent skill

Is X402 Api Mcp Server safe to install?

@x402-api/mcp-server

Tools

Quick Start

Option A: Inspect mode (no payment needed)

Option B: Auto-pay mode (fully autonomous)

Claude Desktop Integration

Without auto-pay (inspect mode)

With auto-pay

Environment Variables

How x402 Payments Work

Tool Reference

`get_crypto_prices`

`get_gas_prices`

`get_dex_quotes`

`scan_token`

`track_whales`

`scan_yields`

`get_funding_rates`

`profile_wallet`

Development

Links

License

Audit the pieces. Scan the whole. Decide.