com.maximusmediahousePublished by maximusmediahouse.comOfficial publisherv0.2.1Updated Oct 29, 2026
Deterministic text prep for agents. Pay per call via x402 USDC.
Remote MCP server offering deterministic text-prep tools (normalize, validate, extract, redact, chunk, dedupe, hash) paid per call in USDC via x402.
Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.
Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.
Read https://sourceweft.com/mcp/com.maximusmediahouse%2Fpreplayer/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.Add this to your client's mcpServers config.
{
"mcpServers": {
"preplayer-ai": {
"type": "http",
"url": "https://api.maximusmediahouse.com/mcp"
}
}
}Twelve x402-paid deterministic text primitives for AI agents. Pay per call in USDC. No API keys, no accounts, no signup.
Base URL: https://preplayer.maximusboomerus.workers.dev
Mirror URL (production): https://api.maximusmediahouse.com
MCP endpoint: https://preplayer.maximus-boomerus.workers.dev/mcp (streamable-http, POST)
Service version: 0.2.0
PrepLayer is a single Cloudflare Worker exposing twelve deterministic text prep
primitives behind one MCP server. Each call costs a few cents in USDC and is paid for
on the wire via the x402 protocol — the agent signs a TransferWithAuthorization
(EIP-3009) against USDC, the Worker verifies the signature with the Coinbase Developer
Platform facilitator, and the call runs.
The primitives are the boring text work an agent has to do before it can think: normalize whitespace, validate an identifier, hash content for a cache key, dedupe a document set, redact PII before logging, chunk for RAG, diff two blobs. Each primitive is pure — identical input always produces identical output — so results are content-addressable and safe to cache.
The MCP server and Worker source live in a private working tree. This repo is the
public landing surface: discovery, manifest, license, security contact, and a small
example showing how a payer actually executes a paid call. If you want to self-host
the worker, see docs/METHODOLOGY.md for what you'd need to
stand up — none of the secrets are here on purpose.
Every paid endpoint is POST and gated with x402. The first call without payment
returns 402 Payment Required with a PAYMENT-REQUIRED header (base64 JSON) and a
PAYMENT-REQUIRED JSON body describing the challenge. The second call carries a
PAYMENT-SIGNATURE header (base64 JSON) and returns 200.
Prices on Polygon and Arbitrum One are ×1.2; prices on Base,
Base Sepolia, and Solana mainnet are ×1.0. Atomic units are 6-decimal USDC.
PrepLayer is paid through x402 — HTTP's 402 Payment Required
made useful. The wire:
POST an endpoint with the tool's JSON body and no payment header. The server
returns 402 with a PAYMENT-REQUIRED header (base64 JSON challenge) describing
the scheme, network, asset, amount, treasury address, and an EIP-712 domain.TransferWithAuthorization message against the
USDC contract on the selected network and base64-encodes the resulting
PaymentPayload into a PAYMENT-SIGNATURE header.POST again with that header. The server verifies the signature with the CDP
facilitator (https://api.cdp.coinbase.com/platform/v2/x402), executes the tool,
and returns 200 with a PAYMENT-RESPONSE header containing the settlement
receipt.The v2 protocol on the wire:
402: PAYMENT-REQUIRED (base64 JSON; lowercase header name as the
Worker emits it).200: PAYMENT-SIGNATURE (base64 JSON; ditto).200 (settle receipt): PAYMENT-RESPONSE (base64 JSON).exact. Networks: eip155:8453, solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp,
eip155:137, eip155:42161, eip155:84532 (Base Sepolia, test only).USDC.0x8cb59b1bffb39c130ab85a8177e93eae9ddbaf10.https://api.cdp.coinbase.com/platform/v2/x402 (Coinbase Developer
Platform; the path matters — /v2/x402 404s and is the wrong URL).The probe below is always safe to run — it returns the 402 challenge and never
spends anything. Use it to verify connectivity, the treasury address, and the
per-network price.
The response is HTTP/2 402, with:
Decoded, the body is a JSON object describing the accepted (scheme, network, amount,
asset, payTo). See examples/probe.mjs for a runnable version that decodes the base64
challenge and prints it.
The real paid flow needs a wallet — there is no honest way to do it with bare curl.
examples/paid-call.mjs shows the verified-working pattern (EIP-3009 signing via
@x402/evm/exact/client, header encoding via @x402/core/client's
x402HTTPClient.encodePaymentSignatureHeader). To run it:
The script signs a single call to /v1/dedupe, prints the first 18 chars of the
EIP-712 signature (never the key, never the full signature), and prints the
PAYMENT-RESPONSE settlement receipt on success. The same machinery handles the
other 11 primitives and batch.
Never commit, log, or paste your PAYER_PRIVATE_KEY. A leaked private key is
unrecoverable loss of USDC.
Any MCP client that supports streamable-http can drive PrepLayer by pointing at:
The server returns the full tool list (normalize, validate, extract, redact,
classify, dedupe, diff, chunk, extract_custom, validate_json, slugify,
hash, batch, subscription, priority) on tools/list. Each tool call goes
through x402 like any other HTTP call — the MCP layer is a thin transport.
If you are writing your own MCP client: the initialize handshake is JSON-RPC 2.0 over
HTTP POST with Content-Type: application/json and Accept: application/json, text/event-stream. tools/call is a paid request that returns the same 402 /
PAYMENT-SIGNATURE round-trip as the bare HTTP path.
This service is honest about what it is and what it isn't.
normalize, slugify, and extract do Unicode folding to a fixed ASCII surface.
That's the whole point — content hashes stay stable across whitespace, smart-quote,
and accent variants — but it means we strip diacritics, we don't preserve them
round-trip. "naïve café" becomes "naive cafe". If you need Unicode-preserving
normalization (e.g. NFKC without NFKD), this is the wrong tool.
subscription ($200 / 10 000 calls / month) and priority (X-Priority: high,
no published price) both return 501 Not Implemented today. The manifest advertises
them so x402 directories render the full tier ladder, but the Worker has no D1 store
backing subscriptions and no SLA behind the priority tier. Do not pay into either
yet — the server will refuse the call regardless of whether the signature is valid.
One Cloudflare Worker, no Durable-Object-backed request queueing. Latency P99 is
unmeasured but the Worker can be cold-started after a deploy, and a single misbehaving
caller can pin a CPU slot for several seconds on extract_custom with a malicious
regex (we have a static guard and a 10 KB subject cap, but no economic rate limit
beyond that). Treat this as a beta: useful for research workloads, not yet a fit for
time-sensitive production pipelines.
Settlement goes through Coinbase Developer Platform's x402 endpoint. If the CDP
facilitator is down, every paid call will 503 regardless of how good the signature
is. We have no in-process fallback. Mirror status: https://status.coinbase.com/.
A successfully-paid call cannot be replayed against the same endpoint (the Worker uses a Durable Object keyed by payment nonce, exactly-once under concurrency), but the same signed payment can be replayed once per Worker instance across different endpoints if the JSON body changes to fit. If you fork this for production, add a per-tool-keyed replay set on top of the per-payload nonce.
Between 0.1.0 and 0.2.0 the receipt field list moved (the facilitator field
used to read "mock-cdp" during Phase 1; it now reads the real facilitator URL).
Anything that scrapes receipts and pins the field names needs an update if the
settlement envelope changes in a future minor version.
These URLs never charge and never rate-limit:
The Worker is in 0.2.0. It was red-teamed (preplayer_redteam_2026-10-19.md in the
project notes) before paid real USDC was accepted; the payment bypass, replay,
ReDoS, and price-tier findings are closed. Two P3 items (HEAD → 404 not 405,
duplicate 402 in MCP structuredContent) remain open. The Worker has been serving
real EIP-3009-signed USDC calls against the CDP facilitator since Phase 2.
MIT — see LICENSE. Service source is private; this repo and the
endpoints it documents are MIT.
Source: README.md at commit 3a569bd
Deterministic text normalization: Unicode NFKC, zero-width/bidi stripping, smart-quote and dash folding, whitespace collapse, case folding. Returns a stable content hash so two texts can be compared for exact equality. $0.002 USDC per successful call (x402, client-paid); failed calls are not charged.
Takes no parameters.
Validate and canonicalize one identifier: email, URL, E.164 phone, IBAN (mod-97), payment card (Luhn), UUID, SHA-256, git SHA, EVM address (EIP-55) or domain. Returns {valid, canonical, fingerprint}. $0.002 USDC per successful call (x402, client-paid); failed calls are not charged.
Takes no parameters.
Extract structured fields from unstructured text with byte offsets and normalized values: emails, URLs, IPv4, phones, money amounts, ISO dates, UUIDs, EVM addresses, SKUs, semver. $0.005 USDC per successful call (x402, client-paid); failed calls are not charged.
Takes no parameters.
Redact PII from text before it is stored or logged. Returns redacted text plus exact byte spans and counts per class: credit_card, iban, email, private_key, evm_address, phone, ipv4, url. $0.005 USDC per successful call (x402, client-paid); failed calls are not charged.
Takes no parameters.
Rule-based multi-label text classification over a fixed taxonomy (urgency, financial_promise, credential_request, crypto_mention, cta, legal_offer, medical_claim, seo_spam, url_shortener, press_release, question, has_contact). Deterministic - identical text always yields identical labels. $0.003 USDC per successful call (x402, client-paid); failed calls are not charged.
Takes no parameters.
Near-duplicate detection across a batch of documents. Exact Jaccard similarity over word-3-shingle sets decides duplication; a 64-bit SimHash is returned per document as a compact content fingerprint. Up to 200 documents per call. $0.01 USDC per successful call (x402, client-paid); failed calls are not charged.
Takes no parameters.
Line-level LCS diff of two text blobs. Returns a structured edit script with insertions, deletions, unchanged line counts and per-operation metadata; with format='unified' also returns a unified-diff string. $0.005 USDC per successful call (x402, client-paid); failed calls are not charged.
Takes no parameters.
Split long text into pieces for RAG retrieval. Strategies: 'sentence' packs whole sentences into a size budget and never splits mid-sentence; 'paragraph' prefers \n\n boundaries; 'fixed' is a hard char window with overlap. The highest-value endpoint for agents that build retrieval pipelines. $0.005 USDC per successful call (x402, client-paid); failed calls are not charged.
Takes no parameters.
Pull caller-defined structured fields from text using regex patterns with deterministic type coercion. Supported types: string, bool, date, url, email, number. Returns {fields: {name: value|null}, found, missing}. Pure deterministic — no LLM call. $0.005 USDC per successful call (x402, client-paid); failed calls are not charged.
Takes no parameters.
Deterministic JSON-Schema subset validator. Catches malformed JSON before it breaks a pipeline. Supports: type, required, properties, items, minLength, maxLength, pattern, enum, minimum, maximum, additionalProperties. No external dependencies. $0.003 USDC per successful call (x402, client-paid); failed calls are not charged.
Takes no parameters.
URL-safe slug from arbitrary text. NFKD-decomposes unicode (é -> e), lowercases, replaces every non-[a-z0-9] run with a separator, strips leading/trailing separators, truncates on separator boundaries (never mid-word). $0.002 USDC per successful call (x402, client-paid); failed calls are not charged.
Takes no parameters.
Content-addressable hashing for caching and dedup. Three algorithms: sha256 (via node:crypto / Web Crypto), xxhash64 and murmur3 (inline pure-JS, deterministic across runs). Returns hex digest + algorithm + byte count. $0.002 USDC per successful call (x402, client-paid); failed calls are not charged.
Takes no parameters.
Run up to 10 primitive calls in one round trip. One x402 payment of $0.02 (=$0.0020 per call) — below the priciest single-call route ($0.01). Each request specifies an `endpoint` (normalize, validate, extract, redact, classify, dedupe, diff, chunk, extract_custom, validate_json, slugify, hash) and the input for it; the response carries the results in the same order. Single-call batch — no streaming. The larger ladder rungs go lower per call: /v1/batch/50 ($0.075, =$0.0015/call) and /v1/batch/100 ($0.100, =$0.0010/call). $0.02 USDC per successful call (x402, client-paid); failed calls are not charged.
Takes no parameters.
Run up to 50 primitive calls in one round trip. One x402 payment of $0.075 (=$0.0015 per call — cheaper per call than the 10-slot batch). Same `{endpoint, input}` request shape as /v1/batch; the response carries up to 50 results in order. Built for a production buyer running a whole corpus in one settle. $0.075 USDC per successful call (x402, client-paid); failed calls are not charged.
Takes no parameters.
Run up to 100 primitive calls in one round trip. One x402 payment of $0.100 (=$0.0010 per call — the deepest rung of the batch ladder, cheaper per call than the 10- and 50-slot batches). Same `{endpoint, input}` request shape as /v1/batch. The volume mechanic for a corpus-holding buyer: one settle per 100 calls. $0.100 USDC per successful call (x402, client-paid); failed calls are not charged.
Takes no parameters.
Recurring tier — a PREPAID CALL BALANCE. One x402 payment of $1.00 credits 1,000 units of prepaid capacity (=$0.0010 per call) that you draw down across sessions on the cheap deterministic routes (<=$0.01). The funded balance is the source of truth and is queryable at GET /v1/subscription/balance. No account, no API key, no monthly lock-in — top up when it runs low. The $200/10k shape in the original spec was [guess]-calibrated and is replaced by this ladder-derived default (OWNER SIGN-OFF NEEDED). $1.00 USDC per successful call (x402, client-paid); failed calls are not charged.
Takes no parameters.
90% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
Declare a license in the repository or the registry entry.
curl -i -X POST https://preplayer.maximus-boomerus.workers.dev/v1/normalize \ -H 'content-type: application/json' \ --data '{"text":"Hello\u200b, World!"}'PAYMENT-REQUIRED: eyJ4NDAyVmVyc2lvbiI6...npm install viem @x402/core @x402/evmPAYER_PRIVATE_KEY=0x<64 hex chars> node examples/paid-call.mjshttps://preplayer.maximus-boomerus.workers.dev/mcp