Server data from the Official MCP Registry
Pay-per-call AI + web + on-chain tools over x402 (USDC on Base): LLM, SEO, extract, token safety.
About
Pay-per-call AI + web + on-chain tools over x402 (USDC on Base): LLM, SEO, extract, token safety.
Security Report
The true402 MCP server is a pay-per-call gateway that signs EIP-3009 USDC authorizations on Base via a user-supplied wallet key, with strong guardrails: spend ceiling, canonical-USDC and chain pinning, no redirects, HTTPS enforcement, and key never logged. Main residual concerns are the inherent risk of holding a funded private key, auto-discovery of remote paid endpoints at startup, and the truncated stalls.ts file which could not be fully reviewed. Supply chain analysis found 8 known vulnerabilities in dependencies (2 critical, 3 high severity). Package verification found 1 issue.
6 files analyzed · 13 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
Permissions Required
This plugin requests these system permissions. Most are normal for its category.
What You'll Need
Set these up before or after installing:
Environment variable: WALLET_PRIVATE_KEY
Environment variable: SERVER_URL
Environment variable: MAX_PAYMENT_USDC
How to Install
Add this to your MCP configuration file:
{
"mcpServers": {
"dev-true402-mcp-server": {
"env": {
"SERVER_URL": "your-server-url-here",
"MAX_PAYMENT_USDC": "your-max-payment-usdc-here",
"WALLET_PRIVATE_KEY": "your-wallet-private-key-here"
},
"args": [
"-y",
"@true402.dev/mcp-server"
],
"command": "npx"
}
}
}Documentation
View on GitHubFrom the project's GitHub README.
@true402.dev/mcp-server
MCP server for the true402 machine-native marketplace — give your agent pay-per-call access to AI inference and web tools over x402 (HTTP 402 micropayments in USDC on Base).
No accounts, no API keys. The agent's wallet is its identity: each paid tool returns an HTTP 402 challenge, the server signs an EIP-3009 USDC authorization, and the call settles on-chain. Configure a funded wallet to auto-pay, or run without one and the paid tools will surface the exact payment requirements instead of failing.
Tools
Tools are auto-discovered from the live catalog at startup, so a new marketplace stall appears without an update to this package. The catalog currently yields:
| Group | Tools | Price |
|---|---|---|
| Token safety (Base) | token_report (composite avoid/caution/ok verdict — the pre-trade gate), token_safety, honeypot, address_safety, address_risk, deployer_check | $0.005–0.008 |
| Base history & flow | liquidity_history (every observed liquidity removal + co-drained tokens), liquidity_pulls, new_pairs, whale_swaps | $0.003–0.005 |
| Before you sign | tx_preflight — an unsigned Base transaction: does it revert, does it grant an unlimited approval, has the counterparty drained liquidity. Takes no key and no signature | $0.008 |
| Full dossier | token_dossier — verdict + reasons over deployer and liquidity history, and what could not be established | $0.10 |
| Other chains | token safety, token report and address safety on Ethereum and BSC (plus deployer check on Ethereum); token safety on Solana | $0.005–0.008 |
| Web | web_extract, link_preview, screenshot, robots_check (AI-crawler policy + llms.txt), headers_check | $0.003–0.005 |
| SEO & search | seo_audit (SEO + GEO audit, per page), serp, backlinks, keyword_volume (up to 200 keywords per call), ranked_keywords, keyword_ideas | $0.02–0.15 |
| Markets & finance | prediction_markets, defi_yields, quant | $0.003–0.005 |
| LLM | chat (OpenAI-compatible, per-token + 3%), list_models (free) | — |
Prices are indicative; the live 402 challenge is authoritative, and the server refuses to sign above
its per-call cap. Call list_models or read https://true402.dev/api/openapi.json for the exact set.
Install
Requires Node.js ≥ 20. Runs over stdio — point any MCP client at it via npx.
Claude Desktop / Claude Code
Add to your MCP config (claude_desktop_config.json, or .mcp.json for Claude Code):
{
"mcpServers": {
"true402": {
"command": "npx",
"args": ["-y", "@true402.dev/mcp-server"],
"env": {
"WALLET_PRIVATE_KEY": "0xYOUR_FUNDED_BASE_WALLET_KEY"
}
}
}
}
Cursor / Cline / other MCP clients
Same idea — command npx, args ["-y", "@true402.dev/mcp-server"], and the WALLET_PRIVATE_KEY env var.
Configuration
| Env var | Default | Description |
|---|---|---|
SERVER_URL | https://true402.dev/api | true402 API base. Override to point at a self-hosted instance. |
WALLET_PRIVATE_KEY | (none) | A funded Base wallet private key used to sign x402 payments. Needs USDC (gas is sponsored by the facilitator — no ETH required). Without it, paid tools return the 402 requirements instead of paying. |
MAX_PAYMENT_USDC | 0.25 | Hard per-call spend ceiling in USDC. This server auto-discovers every paid stall the marketplace advertises (it walks the live OpenAPI spec, not a fixed list), so a new or repriced stall can appear above the default at any time — a call over the ceiling is refused (not paid, not crashed), and the refusal names the price and the ceiling. Raise it if a discovered tool's description shows a price close to or over your configured value; one stall (seo_audit) is priced per page and can itself exceed a typical ceiling on a large page. |
X402_ALLOW_NETWORKS | (none) | Payments are signed for Base mainnet (eip155:8453) only; a 402 naming any other chain is refused. To also pay on Base Sepolia or Ethereum mainnet, list them as comma-separated CAIP-2 ids, e.g. eip155:84532,eip155:1. Unsupported entries are ignored. |
Security: the key is read only from the environment and is never logged, echoed, or returned. Use a dedicated low-balance wallet — fund it with only what you intend to spend.
How payment works
- The tool calls the true402 endpoint with no payment.
- The server replies
402with accepted payment options (USDC on Base). - This MCP server signs an EIP-3009
transferWithAuthorizationwith your wallet. - It retries with the signed payment in the
PAYMENT-SIGNATUREheader (x402 v2); the service verifies and responds. - Settlement happens on-chain. Your wallet pays only USDC — the facilitator sponsors gas.
When a newer release of this server exists, the first tool result of the session carries one extra line saying so, with the install command. Nothing is blocked; it is shown once per process.
Links
- Marketplace: https://true402.dev
- Free Telegram rug-check bot (no wallet): https://t.me/True402bot
- Live tool catalog: https://true402.dev/api/v1/services
- x402 protocol: https://x402.org
Guides
- The x402 protocol, explained
- x402 facilitators: what they do and which to use
- Fund a Base wallet for x402 (USDC only, no ETH)
Also available for
MCP (Claude Code / Desktop, Cursor, Hermes) · Hermes Agent · OpenClaw · ElizaOS · LangChain · CrewAI · Vercel AI SDK · Coinbase AgentKit · Virtuals GAME · CLI — same on-chain checks, one install command each: true402.dev/integrations
Paying, exactly
The rules below are the service's, not this package's — they bite whatever client you use, and they are the ones that surprise people writing their own payer.
- Pay the EXACT amount quoted in the 402. Underpaying is rejected. Overpaying is refused with 402 and never credited — settlement submits the signed value and there is no refund path, so a surplus would simply be swept. Equality is also what binds an authorization to the resource it was quoted for.
- One authorization buys exactly one response. A replay is refused, not double-charged.
- You are charged on success only. Settlement is submitted only when the endpoint returns 2xx; if it errors or times out, your signed authorization is never submitted, so there is nothing to refund.
- Some endpoints serve a few free calls per day per client IP, with no wallet. The per-operation description in the OpenAPI spec says which.
Full rules: true402.dev/terms · what is logged and kept: true402.dev/privacy
License
MIT
Reviews
No reviews yet
Be the first to review this server!
More Developer Tools MCP Servers
Rea
Freeby Morluto · Developer Tools
Reverse engineer anything from your terminal or agent with one CLI and MCP server.
Paperclip
Freeby Paperclipai · Developer Tools
Trending hip-hop artist momentum scores across four cultural dimensions.
Fetch
Freeby Modelcontextprotocol · Developer Tools
Web content fetching and conversion for efficient LLM usage
Git
Freeby Modelcontextprotocol · Developer Tools
Read, search, and manipulate Git repositories programmatically
Toleno
Freeby Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
MCP Marketplace
Freeby mcp-marketplace · Developer Tools
Search and install MCP servers from inside your AI client.
