X402 Extract Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited X402 Extract Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Pay-per-call tools for AI agents, as one remote MCP server:
https://api.tollkit.dev/mcpNo account and no API key. Each paid tool costs a fixed amount of USDC, paid per call with x402 on Base or Solana. A call that fails is never charged.
Listed in the official MCP Registry as io.github.UltraStarz/x402-extract.
Add the URL above as a remote (Streamable HTTP) MCP server in Claude, Cursor or any MCP client. In clients that take a JSON config:
{
"mcpServers": {
"tollkit": { "url": "https://api.tollkit.dev/mcp" }
}
}Paying: MCP has no 402 status, so a paid tool called without its payment argument returns the price quote as its result. Sign that quote with your x402 wallet and call the tool again with payment set. Six tools are always free: try_it_free (a real sample result), get_service_info, find_service, check_service, check_my_balance and verify_attestation. Fourteen give 3 free calls a day without a payment: read_page, screenshot_page, pdf_to_text, weather_forecast, airport_delays, geocode_address, exchange_rate, ip_lookup, wallet_balance, token_info, transaction_lookup, token_price, token_check and sec_company.
| Group | Tools | Price per call |
|---|---|---|
| Web pages & documents | web search (with date, site and news filters), search + read top pages, read a page or up to 5 at once in a real browser, screenshot, summarize, page brief, PDF to text | $0.002 – $0.008 |
| Public data | SEC filings, financials, company snapshot and due diligence; weather anywhere in the world (by point, or US address); FAA airport delays; US address geocoding; exchange rates; IP lookup | $0.002 – $0.03 |
| On-chain (Base, Ethereum, Solana) | wallet balance and portfolio, token info, token price, token safety check, transaction lookup, pre-trade check | $0.001 – $0.01 |
| x402 market data | best x402 tools for a task, seller lookup, full market dataset | $0.01 – $0.10 |
| Product data | price, stock, brand, SKU and images from a store page; compare up to 5 | $0.01 – $0.04 |
| Proof | signed, timestamped record of what a page said | $0.05 |
Live prices: /health · every tool with its URL and body: llms.txt · tollkit.dev/tools
Every tool is also a plain HTTP endpoint: POST the JSON body, get HTTP 402 with the price, pay with any x402 client (for example @x402/fetch), repeat the request. OpenAPI per hostname, e.g. https://data.tollkit.dev/openapi.json.
server.json is the MCP Registry entry. src/ holds an older stdio client (the x402-extract-mcp npm package) that only wraps product extraction and is no longer maintained; use the remote server above instead.
MIT licensed.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.