CIPHER x402 — Paid Solana & Crypto Tools

io.github.cryptomotifsPublished by GitHub account cryptomotifsv0.1.0Updated Oct 29, 2026

8 CIPHER tools — Solana scan, breach check, Jito, FRED, Drift, repo health, more. x402-paid on Base.

VerifiedStreamable HTTPWeb executableFinanceDeveloper ToolsSecurity & Monitoring

Overview

AI-generated overview

Remote MCP server exposing Solana, crypto, macro and research tools that are mostly paid per call in USDC on Base via the x402 protocol.

What you can do
  • Scan Solana wallets for portfolio value, dust, stale stake and liquidity warnings, and check Drift Protocol exposure
  • Check password-breach status by SHA-1 prefix and score GitHub repository health
  • Compute Jito tips for Solana arbitrage bundles and fetch FRED macro series and aggregated perpetual funding rates
  • Look up audit competitions and bug bounties, and read premium CIPHER chapters
  • Return metadata for a free Solana wallet security audit ruleset
When to use it
Useful when an assistant needs quick Solana wallet, DeFi or macro data, or niche lookups such as breach checks and repo health, and the caller is set up to pay small per-call USDC fees on Base. Not needed if you only want free, unauthenticated data sources.
Requirements
Remote streamable HTTP endpoint, no account or API key declared. Paid tools require an x402-capable wallet that can sign an EIP-3009 authorization in USDC on Base and pass it as the _payment argument. Self-hosting needs Node.js 20+ and npm; optional env variables override upstream URLs.
Before you install
Most tools cost money per call ($0.001–$0.25 USDC on Base) and settle on-chain; the server relays the 402 accept-list and the caller's wallet signs the payment. Wallet addresses and search inputs are sent to third-party upstream endpoints. Results include referral and promotional content, and the README also advertises paid plans, products and consulting.

Installation

In SourceWeft

  1. Open CIPHER x402 — Paid Solana & Crypto Tools in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.github.cryptomotifs%2Fcipher-x402-mcp/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "cipher-x402-paid-solana-crypto-tools": {
      "type": "http",
      "url": "https://cipher-x402-mcp.vercel.app/mcp"
    }
  }
}

README

cipher-x402-mcp

[CI] [License: MIT] [MCP] [x402] [MCPize]

An MCP server that exposes 8 Solana / crypto / macro tools to any MCP-aware client (Claude Desktop, Cursor, Cline, Continue, etc.). Seven of the tools are gated behind the x402 payment protocol — agents auto-pay in USDC on Base, $0.005 – $0.25 per tool call. One tool is free (educational).

The server is a forward-only relay: when an agent calls a paid tool without an X-PAYMENT header, we surface the upstream HTTP 402 + accept-list verbatim so the agent's own wallet signs the payment. We never custody caller funds.

Free + MIT-licensed. Fork it, ship your own, no strings.


Hosted Plans (MCPize)

Prefer not to self-host? A managed listing is live on MCPize with gateway proxying, rate limiting, API-key auth, and consolidated billing:

mcpize.com/mcp/cipher-x402-mcp

PlanPriceRequests / moRate limitIncludes
Free$010010 / minFree tools + solana_wallet_scan
Starter$91,00060 / min4 read-only tools (scan, HIBP, repo health, FRED)
Pro (recommended)$295,000120 / minAll 8 tools, priority GitHub support
Team$9925,000600 / minAll 8 tools + custom upstream override, 24h response SLA

Pay-as-you-go via MCPize's gateway. Self-host is still free (this repo, MIT).


Tools

ToolPrice (USDC, Base)Upstream
solana_wallet_scan(address)$0.01cipher-scan-three.vercel.app
check_password_breach(sha1_prefix)$0.005cipher-pwned.vercel.app
jito_tip_calculator(pool_depth, expected_profit, slot_prob)$0.01cipher-jito-tip.vercel.app
github_repo_health(owner, repo)$0.02cipher-repo-health.vercel.app
fred_macro_series(series_id)$0.005cipher-fred.vercel.app
check_drift_exposure(wallet)$0.01cipher-drift-exposure.vercel.app
solana_wallet_security_audit_rules()freelocal (v1.1.0 ruleset)
get_premium_cipher_chapter(slug)$0.25cipher-x402.vercel.app

Base network, USDC asset 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913. The current x402 payout recipient is exposed via the root / JSON manifest at runtime — agents discover it automatically, you don't configure it by hand.

Install (Claude Desktop)

Add this to ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows):

json
{  "mcpServers": {    "cipher-x402": {      "command": "npx",      "args": ["-y", "cipher-x402-mcp"]    }  }}

Restart Claude Desktop. The 8 tools show up in the tool tray.

Install (Cursor / Cline / Continue)

Any MCP-over-stdio client works the same way — the launcher is npx -y cipher-x402-mcp.

Install (Smithery)

bash
npx -y @smithery/cli install cipher-x402-mcp --client claude

Remote HTTP transport

Deployed at https://cipher-x402-mcp.vercel.app/mcp (streamable HTTP). Probe the manifest at the root URL.

How payment works

  1. Agent calls (e.g.) solana_wallet_scan({ "address": "..." }) without a payment.
  2. Server returns a structured result starting with HTTP 402 Payment Required — upstream returned an x402 accept-list. followed by the JSON accept-list (price, network, payTo, asset, etc.).
  3. Agent's wallet signs an EIP-3009 authorization for the advertised maxAmountRequired.
  4. Agent re-invokes the same tool with { "address": "...", "_payment": "<base64-signed-header>" }.
  5. Server forwards the X-PAYMENT header upstream, upstream's facilitator verifies + settles on Base, and the content is returned to the agent.

The server itself is stateless — no API keys, no user session, no funds.


🏃 Run it yourself

Prerequisites

  • Node.js 20+ (22 recommended)
  • npm 10+
  • A Vercel account (free tier) if you want to deploy the HTTP transport
  • No API keys required for local stdio use — the server is a pass-through to public upstream endpoints

Clone + build

bash
git clone https://github.com/cryptomotifs/cipher-x402-mcpcd cipher-x402-mcpnpm installnpm run buildnpm run smoke     # tool-registry smoke testnpm start         # stdio transportnpm run start:http  # HTTP transport on :8080

Configure your own upstream endpoints (optional)

All upstream base URLs are overridable via env — useful if you fork the upstream endpoints to your own Vercel project and want the MCP server to route to them:

bash
CIPHER_SCAN_API_URL=https://your-scan.example.com \CIPHER_PWNED_URL=https://your-pwned.example.com \CIPHER_JITO_TIP_URL=https://your-jito.example.com \CIPHER_REPO_HEALTH_URL=https://your-repo-health.example.com \CIPHER_FRED_URL=https://your-fred.example.com \CIPHER_DRIFT_URL=https://your-drift.example.com \CIPHER_X402_URL=https://your-x402.example.com \  npx cipher-x402-mcp

Deploy to Vercel

bash
vercel linkvercel --prod

The /mcp route serves MCP JSON-RPC messages; / serves a lightweight JSON manifest used by registries.


🛒 Buy

A few small paid sidecars if the MCP is useful and you want to go deeper — all direct-pay, no platform middleman:

Also available as a managed MCPize listing: mcpize.com/mcp/cipher-x402-mcp — Free / $9 / $29 / $99 per month.


🙏 Support

This is free + MIT. If it saved you time, tips in SOL are appreciated:

cR9KrbsLVJvir5rY9cfY3WeNoxMwUGofzpCoVyobryy

No pressure — star the repo or share it and that's equally valued.


💼 Hire me

Solo Canadian dev (Ontario, ET). Available 20 hr/wk for x402 / MCP / Solana integration work.

Fixed-price SKUs:

#ServicePriceDuration
1Wire x402 into your Next.js / Node app — merged PR + live test$9002 days
2x402 or Solana bot architecture + security review — written report + 60-min call$10001 day
3AI-agent paid-API: 0 → live on Base with MCP wrapper$12003 days

Hourly: $150/hr open-scope, 5-hour minimum block. $125/hr if 40+ hours upfront.

Payout: USDC on Base 0x2a33D2414312e8776dA4011c2586c2d067267210, USDC on Solana cR9KrbsLVJvir5rY9cfY3WeNoxMwUGofzpCoVyobryy, or Wise-USD on request.

Engage: open an issue titled [Consulting]: <what you need> on this repo, or DM @[email protected]. I reply within the hour with scope + 50% deposit address.

Walkthrough of the settlement-path hardening I ship: dev.to/sai_93caeceb4f6a4d9969910/shipped-x402-paid-endpoint-starter-kit-nextjs-16-5g39

Also: prompt packs for Solana / x402 / MCP devs at cipher-checkout.vercel.app — 5 packs covering Anchor audit, x402 + MCP design, Solana bot engineering, crypto dev productivity, and a 20%-off bundle. Card or crypto.


Related

Niche x402 endpoints (non-crypto agent surfaces)

License

MIT — see LICENSE.

Source: README.md at commit f13579d

Tools

15

solana_wallet_scan

Scan a Solana wallet for portfolio value, dust accounts, stale stake accounts, and low-liquidity position warnings. Returns findings + referral CTAs. Priced at $0.01 USDC on Base (x402). Pass a signed x402 v2 authorization as the '_payment' argument to unlock the paid response. Without it, the tool returns the 402 accept-list for your wallet to sign.

Parametersaddressrequired_payment

check_password_breach

Check whether a password hash prefix (SHA-1, first 5 chars) appears in the HIBP breach corpus. k-anonymity, no plaintext passwords sent. Priced at $0.005 USDC on Base (x402). Pass a signed x402 v2 authorization as the '_payment' argument to unlock the paid response. Without it, the tool returns the 402 accept-list for your wallet to sign.

Parameters_paymentsha1_prefixrequired

jito_tip_calculator

Compute an expected-value-maximizing Jito tip for a Solana arbitrage bundle. Inputs: pool_depth (USD), expected_profit (USD), slot_probability [0..1]. Returns tip lamports + EV breakdown. Priced at $0.01 USDC on Base (x402). Pass a signed x402 v2 authorization as the '_payment' argument to unlock the paid response. Without it, the tool returns the 402 accept-list for your wallet to sign.

Parameters_paymentslot_probrequiredpool_depthrequiredexpected_profitrequired

github_repo_health

Score a GitHub repository's health — commit cadence, issue-close latency, contributor diversity, CI green rate, release frequency. Returns 0-100 health score with per-factor breakdown. Priced at $0.02 USDC on Base (x402). Pass a signed x402 v2 authorization as the '_payment' argument to unlock the paid response. Without it, the tool returns the 402 accept-list for your wallet to sign.

Parametersreporequiredownerrequired_payment

fred_macro_series

Fetch a Federal Reserve Economic Data (FRED) series by ID — e.g. 'DGS10' (10Y yield), 'WALCL' (Fed balance sheet), 'T10Y2Y' (yield curve). Returns cleaned latest observations. Priced at $0.005 USDC on Base (x402). Pass a signed x402 v2 authorization as the '_payment' argument to unlock the paid response. Without it, the tool returns the 402 accept-list for your wallet to sign.

Parameters_paymentseries_idrequired

check_drift_exposure

Check a Solana wallet's exposure to Drift Protocol — open perp positions, collateral, unrealized PnL, liquidation risk distance. Priced at $0.01 USDC on Base (x402). Pass a signed x402 v2 authorization as the '_payment' argument to unlock the paid response. Without it, the tool returns the 402 accept-list for your wallet to sign.

Parameterswalletrequired_payment

solana_wallet_security_audit_rules

Return metadata for the cipher-solana-wallet-audit v1.4.0 ruleset — the free MIT GitHub Action that catches Solana wallet anti-patterns in CI: plaintext private keys (base58 OR hex), seed phrases (in comments OR string literals), Anchor.toml wallet leaks, Token2022 transfer-hook abuse, Drift-hack-derived admin bundles, leaked .env files, hardcoded RPC URLs. Free, no payment required.

Takes no parameters.

audit_comp_live_listings

Return a curated snapshot of currently-live audit competitions and bug-bounty programs across Code4rena, Cantina, Sherlock, and direct-protocol channels. Useful for solo wardens triaging which contests to enter. Snapshot updates with each cipher-x402-mcp release; treat the data as a hint, always cross-check the platform before submitting. Free, no payment required.

Takes no parameters.

coinalyze_funding_rates

Fetch perpetual-futures funding-rate intelligence for a given base asset (e.g. 'BTC', 'ETH', 'SOL') aggregated across 17 major perp venues — Binance, Bybit, OKX, BitMEX, Deribit, dYdX, Hyperliquid, Bitfinex, Huobi, Kraken, Phemex, WOO X, Aster, Lighter, Coinbase, Gate.io, Vertex. Returns per-exchange rate + USD open interest, OI-weighted aggregate funding, divergence in bps, and max/min funding exchange — pre-computed for perp-arbitrage bots. Priced at $0.01 USDC on Base (x402). Pass a signed x402 v2 authorization as the '_payment' argument to unlock the paid response. Without it, the tool returns the 402 accept-list for your wallet to sign.

Parameterssymbolrequired_payment

get_premium_cipher_chapter

Fetch a CIPHER premium chapter (markdown). Four chapters available: 'mev-deep-dive', 'three-tier-wallet', 'canadian-compliance', 'oracle-cloud-free-tier'. Priced at $0.25 USDC on Base (x402) per chapter. Pass a signed x402 v2 authorization as the '_payment' argument to unlock the paid response. Without it, the tool returns the 402 accept-list for your wallet to sign.

Parametersslugrequired_payment

osm_geocode

Forward geocoding via OpenStreetMap Nominatim. Address string → lat/lon + normalized address block (country_code, state, city, postcode, road) + match_quality label. Priced at $0.001 USDC on Base (x402). Pass a signed x402 v2 authorization as the '_payment' argument to unlock the paid response. Without it, the tool returns the 402 accept-list for your wallet to sign.

Parametersqrequired_payment

osm_reverse_geocode

Reverse geocoding via OpenStreetMap Nominatim. lat/lon → normalized address + place class/type. Priced at $0.001 USDC on Base (x402). Pass a signed x402 v2 authorization as the '_payment' argument to unlock the paid response. Without it, the tool returns the 402 accept-list for your wallet to sign.

Parameterslatrequiredlonrequired_payment

usda_food_nutrition

USDA FoodData Central nutrition lookup. Query any food (brand or generic) and receive the best-matching record with a clean per_100g macro block (calories_kcal, protein_g, carb_g, fat_g, fiber_g, sugar_g, potassium_mg), plus alternates. Priced at $0.002 USDC on Base (x402). Pass a signed x402 v2 authorization as the '_payment' argument to unlock the paid response. Without it, the tool returns the 402 accept-list for your wallet to sign.

Parameterslimitqueryrequired_payment

openfda_adverse_events

openFDA drug adverse-event lookup for the last 12 months. Returns top reactions, report count, and seriousness breakdown (serious vs non-serious). Searches brand, generic, and medicinal-product names in parallel. Priced at $0.005 USDC on Base (x402). Pass a signed x402 v2 authorization as the '_payment' argument to unlock the paid response. Without it, the tool returns the 402 accept-list for your wallet to sign.

Parametersdrugrequiredlimit_payment

Version history

1
  1. v0.1.0LatestSep 16, 2026

Score

100% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts