Code402

io.github.89ratPublished by GitHub account 89ratv1.0.1Updated Oct 24, 2026

Discover machine-payable APIs, probe x402 payment terms, and run seller operations. Non-custodial.

VerifiedStreamable HTTPWeb executableWeb Search & ScrapingFinanceSecurity & Monitoring

Overview

AI-generated overview

A remote MCP server offering deterministic crypto, FX and trade-document checks on Base, each returning a signed receipt, plus x402 payment discovery.

What you can do
Code402 exposes 24 tools: Base chain lookups (block info, ETH and ERC-20 balances, nonce activity, token contract facts), a cached crypto spot price, a static FX rate table, and structural validators for IBAN, LEI, SWIFT/BIC, Belgian VAT, Indian GSTIN, PAN, UPI VPA and IFSC. It also bundles batch validation, a vendor onboarding pack, a pre-disbursement guard, an EVM address sanctions screen, a Markdown page scraper, JSON schema validation and text distillation. Most results carry a signed receipt, and receipt_verify checks receipts from any x402 service.
When to use it
Use it when an assistant needs cheap, repeatable checks on crypto addresses, token contracts or trade identifiers, or when it must confirm that a tool result was signed. It suits procurement and payment flows where structural validation is enough and no registry or identity lookup is required.
Requirements
A remote streamable HTTP endpoint; no package, account, API key or environment variable is declared. Network access to the endpoint is needed. Some tools take a preceding receipt hash, and check_price returns a quote and settlement URL for paid tools.
Before you install
Several tools are paid through x402 settlement, so acting on a quote can spend funds; check_price itself is free. Validators are structural only and explicitly do not prove ownership, registration, bank existence or absence of fraud, and the sanctions screen returns null status and does not screen names. The scraper fetches arbitrary public URLs, and the FX table is static, not live.

Installation

In SourceWeft

  1. Open Code402 in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.github.89rat%2Fcode402/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "code402": {
      "type": "http",
      "url": "https://rail.hcrb.in/mcp"
    }
  }
}

README

This repository has no README.

Tools

24

crypto_ticker

Crypto ticker

Spot USD price for a crypto ticker or CoinGecko id from public price feeds, cached 60 s. Result carries a signed receipt.

Parameterssymbolrequired

erc20_balance

ERC-20 Token Balance Snapshot

Raw and formatted ERC-20 balanceOf for an address on Base, with decimals read from the token. Result carries a signed receipt.

Parametersaddressrequireddecimalstoken_addressrequired

fx_spot_price_oracle

FX spot price oracle

Reference fiat and stablecoin conversion rate from a static table, not a live feed. Returns rate and inverse; result carries a signed receipt.

Parametersbaserequiredquoterequired

block_info

Base Block Header Info

Base block header: number, timestamp, transaction count and base fee for the latest or a given block. Result carries a signed receipt.

Parametersblock

tx_activity

Tx Activity & Contract Detection

Outbound transaction count (nonce) and contract-or-EOA check for an address on Base. Result carries a signed receipt.

Parametersaddressrequired

token_contract_risk

Token contract facts (Base)

Deterministic Base contract facts: ERC-20 metadata, proxy slots, owner(), privileged-function selectors and flags. Not a safety verdict. Result carries a signed receipt.

Parameterschainaddressrequired

clean_markdown_scraper

Clean markdown scraper

Fetch a public web page by URL (or take your HTML) and return Markdown plus headings. No JavaScript rendering. Result carries a signed receipt.

Parametersurlhtml

context_distill

Context distill

Deterministic text digest: word count, top-5 most frequent meaningful words (stop words excluded), first sentence, and a keccak-256 content hash. Pure function — no external calls, no ML.

Parameterstextrequired

instant_json_schema_verifier

Instant JSON schema verifier

Validate JSON data payloads against schema definitions. Preflighted for agent tool call pipelines.

Parametersdatarequiredschemarequired

balance_check

Base Account Balance Snapshot

Native ETH and one ERC-20 balance (default USDC) for an address on Base, raw and formatted. Result carries a signed receipt.

Parametersaddressrequiredtoken_address

calculate_fx_savings

Calculate cross-border FX savings

Arithmetic comparison of a USDC settlement against comparator percentages YOU supply (bank_fee_pct, custodial_fee_pct) across 14 global fiat currencies. The comparators are assumptions, not measurements of any bank or provider; no protocol fee is deducted on this rail.

Parametersamountcurrencyamount_usdamount_usdc

iban_check

IBAN Structure and Checksum Check

Validate IBAN structure and MOD-97 checksum. Does not establish account ownership, beneficiary identity or absence of fraud.

Parametersibanrequired

lei_check

LEI Structure and Checksum Check

Validate a 20-character LEI and MOD-97 check digits. No registry lookup, active-registration check or legal-entity identity verification.

Parametersleirequired

vat_mod97_check

Belgian VAT MOD-97 Check

Check the supported Belgian VAT format and MOD-97 checksum. BE only; not VIES, other EU VAT formats, registration status or tax compliance.

Parametersvat_numberrequired

swift_bic_check

SWIFT/BIC Structure Check

Check SWIFT/BIC structure and country code. Does not establish bank existence, active routing or beneficiary identity.

Parametersbicrequired

batch_validate

Batch Identifier Checks (up to 50 items)

Run up to 50 supported {tool, value} checks in one request. Each result states its scope. Compare the current batch quote with individual quotes; savings depend on batch size.

Parametersitemsrequired

vendor_onboarding_pack

Vendor Identifier Check Pack

Check supplied IBAN, LEI, Belgian VAT and UK company-number fields in one result. Structural checks only; no ownership, registry or fraud clearance.

Parametersleiibanvat_numbercompany_number

india_supplier_check

India Supplier Verification Pack

One call, one receipt: GSTIN + PAN + UPI VPA + IFSC for an Indian counterparty. Four deterministic structural checks, each stating its own scope. Built for cross-border procurement where the buyer is an agent that cannot open an INR account.

Parameterspanvpaifscgstin

pre_disbursement_guard

Counterparty Risk Indicators

Evaluate supplied identifiers, domain-age evidence and mismatch signals. Requires a preceding receipt hash. An advisory result is not verified identity, fraud clearance or authorization to release funds.

Parametersleivat_numbervendor_domaincompany_numberrecipient_ibandeclared_countryphysical_addressprev_receipt_hashinvoice_amount_usd

gstin_check

GSTIN check (India)

Validate an Indian GSTIN by structure (2-digit state code + PAN + entity code + 'Z') and its mod-36 cross-sum checksum.

Parametersgstinrequired

ifsc_check

IFSC Format Check

Check the 11-character Indian IFSC format, including its fifth-character zero. No bank-branch registry lookup or account verification.

Parametersifscrequired

sanctions_address_screen

Address Snapshot & Operator Policy Comparison

Exact EVM-address comparison against the identified address snapshot and existing operator block policy. Current legal status is unknown; is_sanctioned is null. valid=false preserves a local block; valid=null never authorizes a transaction. Names are not screened. Missing, stale or incomplete evidence is explicit; no UN/EU coverage or sanctions clearance is provided.

Parameterssubjectrequired

check_price

Zero-cost price index and gasless x402 quote generator

Instant zero-cost pricing hook for code402 tools. Returns the live price, an opaque quote_id, TTL, and the settlement URL. Free forever — feeds the price index into an agent planner's context without creating any financial obligation. If the planner acts on the quote, it hits the settlement_url with an EIP-3009 signed voucher.

Parameterstoolrequiredamount

receipt_verify

Verify any XDR-1 receipt — free, stateless, any issuer

Verifies a signed XDR-1 receipt from ANY x402 service: recomputes the canonical digest and recovers the signer, then compares it to the declared signer. Free forever — no account, no quota, no storage (stateless). A valid receipt proves the signer signed that tool call at that timestamp; it does NOT prove funds moved or any business claim.

Parametersreceiptrequired

Version history

2
  1. v1.0.1LatestSep 25, 2026
  2. v1.0.0Sep 16, 2026

Score

75% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts

    Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.

  • License10 pts

    Declare a license in the repository or the registry entry.