x402 Preflight

io.github.chico10117Published by GitHub account chico10117v1.0.2Updated Nov 5, 2026

Check an x402 endpoint's payment challenge and discovery metadata before paying.

The publisher's own server: Preflight

VerifiedStreamable HTTPWeb executableFinance

Overview

x402 Preflight's hosted MCP server (x402.chikocorp.com); no sign-in required; Streamable HTTP; 3 tools.

No AI overview yet: these facts come from the registry entry and the server itself.

Endpoint
x402.chikocorp.com
Last checked

Installation

In SourceWeft

  1. Open x402 Preflight in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.github.chico10117%2Fx402-preflight/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "x402-preflight": {
      "type": "http",
      "url": "https://x402.chikocorp.com/mcp"
    }
  }
}

README

x402 Preflight — public documentation

Documentation only. This repository holds the public, citable material for x402 Preflight, a read-only launch-diagnostics service for x402 endpoints (https://x402.chikocorp.com).

The service code is private; nothing in this repository is required to run it, and no payment logic, credentials or infrastructure configuration belongs here.

What the service does

It reads the live 402 challenge your endpoint serves and compares it with what the endpoint advertises — price, network, asset, receiver, scheme — plus discovery metadata, input schemas, CORS, redirects and cache behaviour, and returns findings with evidence. It never connects a wallet, signs nothing, and makes no purchase on the target.

Free check (no account, no wallet)

bash
curl -s -X POST https://x402.chikocorp.com/api/preflight/inspect \  -H 'content-type: application/json' \  -d '{"resource_url":"https://your-api.example.com/resource","method":"GET"}'

Machine-readable manifests

Everything a registry, directory or agent needs to index this server without filling a form:

filefor
server.jsonofficial MCP registry manifest (streamable HTTP remote)
glama.jsonGlama maintainer claim
SKILL.mdagent skill: tools, inputs, prices and boundaries
gemini-extension.jsonGemini CLI extension pointing at https://x402.chikocorp.com/mcp

Live equivalents served by the service: /llms.txt, /mcp and /.well-known/x402.json.

Contents

  • docs/ — short answers: what x402 is, how to add it, and how to tell whether an endpoint really charges.
  • guides/x402scan-discovery.md — discovery requirements for catalogue listings (OpenAPI as the canonical contract).
  • guides/bazaar-listing-verification.md — how a Bazaar listing is verified and what the catalogue evidence says.
  • reference/ — mirrors of the live public artifacts (llms.txt, openapi.json).

Canonical source

The rendered pages live at https://x402.chikocorp.com/docs/. If this repository and the site disagree, the live service wins — the runtime 402 is the authoritative contract.

Contributing

Corrections and additions are welcome: see CONTRIBUTING.md. Keep claims verifiable — a finding without a reproducible command is not documentation.

Contact

[email protected]

Source: README.md at commit 917af1b

Tools

3

inspect_x402_endpoint

Free x402 Endpoint Check

Free endpoint check for API developers launching or debugging x402. Inspect your live payment challenge and caller-selected comparison policy without sending payment credentials. ALLOW and BLOCK are policy decisions, not launch certification; a price-limit BLOCK does not establish a broken integration. Buyer-side inspection remains available.

Parametersmethodresource_urlrequiredmax_price_usdexpected_network

audit_x402_endpoint

x402 Technical Audit

Technical audit for API developers launching or debugging x402. Returns deeper read-only evidence of payment configuration, schemas, redirects, CORS, cache behavior, OpenAPI, llms.txt, agent metadata, and x402 discovery consistency. Requires an explicitly authorized x402 purchase; does not test settlement, paid delivery, or actual marketplace indexing.

Parametersmethodresource_urlrequiredmax_price_usdexpected_network

order_x402_remediation

Order x402 Diagnostic Report

Diagnostic report for API developers launching or debugging x402. An explicitly authorized x402 purchase creates a durable order for asynchronous findings, evidence, and prioritized fix recommendations in JSON/Markdown. The receipt is not the completed report. No implementation, human consultation, target payment, deployment, or guaranteed marketplace indexing.

Parametersgoalrequiredcontactlanguageconstraintscallback_urlresource_urlrequiredresponse_format

Version history

2
  1. v1.0.2LatestNov 5, 2026
  2. v1.0.1Sep 16, 2026

Score

90% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts

    Declare a license in the repository or the registry entry.

Other Preflight integrations

Preflight

social.preflightOfficial publisher

Hosted social media scheduling server that lets an assistant draft, rule-check, schedule and publish posts to 12 networks.

Streamable HTTPWeb executableAuth
Productivity & WorkflowCredential requiredOct 27, 2026

SQLite rebuild copy-map preflight

Published by GitHub account showflexinc

Remote preflight service that checks the structure of SQLite table-rebuild copy maps before a rebuild is run.

Streamable HTTPWeb executableAuth
DatabasesCredential requiredNov 4, 2026

Rust MCP Preflight

Published by GitHub account Wolfe-Jam

Checks an MCP Registry listing before publishing: the README mcp-name line, server.json publish rules and the server name.

STDIODesktop only
Developer ToolsNot validated yetNov 7, 2026

Multipart row preflight

Published by GitHub account showflexinc

CSV row-structure inspection (inspect_parts) and manifest comparison (compare_manifest).

Streamable HTTPWeb executableAuth
Data & AnalyticsCredential requiredOct 31, 2026

Tool-dialogue preflight

Published by GitHub account showflexinc

Tool-dialogue preflight's hosted MCP server; credential required; Streamable HTTP.

Streamable HTTPWeb executableAuth
Credential requiredOct 31, 2026