agent-sec-scan

io.github.6mickswagger9Published by GitHub account 6mickswagger9v0.0.4Updated Nov 3, 2026

x402 paid API for AI agents. USDC on Base. CDP facilitator.

The publisher's own server: scan.mx Email Diagnostics

VerifiedSTDIODesktop onlyFinanceAI & ML

Overview

AI-generated overview

agent-sec-scan is a local stdio MCP server described as a paid x402 API for AI agents, settling in USDC on Base via a CDP facilitator.

What you can do
  • The registry entry gives no tool list, instructions or README, so the concrete capabilities are undocumented.
  • The description presents it as an x402 paid API aimed at AI agents.
  • Payments are described as USDC on Base, processed through a CDP facilitator.
  • Beyond that, what an assistant can actually do with it cannot be determined from the supplied material.
When to use it
Only consider it if you specifically want an agent-facing API that is billed per call through x402 with USDC on Base, and you are prepared to evaluate it without documentation.
Requirements
Runs as a local process installed from the npm package agent-sec-scan over stdio; desktop only. No authentication, environment variables or headers are declared. Because it is described as a paid API, a funded USDC wallet on Base and a CDP facilitator setup are likely needed, though the input does not specify how these are configured.
Before you install
The description indicates paid, per-call access settled in USDC on Base, so using it can spend real funds; set spending limits and check what each call costs. No tools, instructions or README are provided, so the server's actual behaviour cannot be reviewed before installing. It is a local process with no declared credentials, but payment-related configuration may involve wallet or facilitator secrets that are not documented here.

Installation

In SourceWeft

  1. Open agent-sec-scan in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

This repository has no README.

Tools

2

agent-scan

Security scan an x402 agent's base URL. Checks for open endpoints, missing auth, exposed keys, and common misconfigurations.

Parametersurlrequired

wallet-trust

Check trust score for an agent's wallet address. Returns tx count, activity level, and risk rating.

Parameterswalletrequired

Version history

1
  1. v0.0.4LatestOct 31, 2026

Score

65% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts
  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts

    Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.

  • License10 pts

    Declare a license in the repository or the registry entry.

Other Scan integrations