SPORE x402 Attestation

host.beacon.worker.spore-x402Published by spore-x402.worker.beacon.hostOfficial publisherv2.1.0Updated Oct 24, 2026

Signed x402 attestations and bounty-packet preflight checks, paid per call in USDC on Base.

VerifiedStreamable HTTPWeb executable

Overview

SPORE x402 Attestation's hosted MCP server (spore-x402.worker.beacon.host), published by spore-x402.worker.beacon.host; no sign-in required; Streamable HTTP; 6 tools.

No AI overview yet: these facts come from the registry entry and the server itself.

Publisher
spore-x402.worker.beacon.host
Endpoint
spore-x402.worker.beacon.host
Last checked

Installation

In SourceWeft

  1. Open SPORE x402 Attestation in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/host.beacon.worker.spore-x402%2Fx402-attestation/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "spore-x402-attestation": {
      "type": "http",
      "url": "https://spore-x402.worker.beacon.host/mcp"
    }
  }
}

Tools

6

x402_attest

Signed x402-v2 attestation of a subject/delivery packet: artifact URLs live, sha256 digests match the bound refs, report coherent with evidence.

Parameterssubjectrequired

x402_preflight

Preflight-verify a bounty delivery packet before claim/payout (reachability + digest binding + report/evidence coherence) -> signed verdict.

Parameterspacketrequired

approval-check

Check a token approval before signing it: reads the ERC-20 allowance (owner -> spender) live on Base and returns the raw allowance, an unlimited-approval flag and a risk verdict. Read-only, no keys, no transaction.

Parametersownerrequiredtokenspenderrequired

dns-preflight

DNS MX TXT A records domain lookup with an email-deliverability verdict: A records, MX hosts, SPF (v=spf1) and DMARC policy, CAA, plus a signed ok/warn/fail verdict.

Parametersdomainrequired

base-wallet-lens

Base wallet balances USDC ERC20 portfolio snapshot: live USDC / WETH / DAI balances, ETH balance, nonce and tx count for any Base address. Read-only.

Parametersaddressrequired

endpoint-check

Check an x402 endpoint before paying it: fetch the unpaid 402 challenge of any x402 URL and verify it is payable and safe - HTTP 402, a parseable x402 v1/v2 challenge, network, asset, payTo, amount, whether the advertised resource URL is the URL you actually called, manifest consistency (/.well-known/x402.json), header-size overflow risk for Node clients, and a signed pay / caution / avoid verdict. Read-only: we never send a payment.

Parametersurlrequired

Version history

1
  1. v2.1.0LatestOct 21, 2026

Score

72% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts

    Publish an icon in the registry entry.

  • Documentation15 pts

    Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.

  • LicenseNot applicable

    A hosted service is used under its provider's terms, so no license is expected here. This check is left out of the percentage.