
X402 Api
io.github.fernsugiPublished by GitHub account fernsugiv1.0.5Updated Oct 24, 2026
Eight paid DeFi tools: prices, gas, swaps, token security, holders, yields, funding and wallets
Overview
A local MCP server giving assistants eight pay-per-call crypto and DeFi data tools, paid in USDC on Base via the x402 protocol.
- What you can do
- Fetch crypto prices and multi-chain gas prices with no parameters required, and get a single DEX swap quote for a token pair and amount, plus hourly perpetual funding rates for an asset or all assets on Hyperliquid and dYdX v4. Run token security scans for rug-pull and honeypot flags, sample top holders and supply share, and list DeFi yield pools filtered by chain and minimum TVL. Profile a wallet's observed balances and transaction counts. By default it only inspects payment requirements and returns the 402 details without paying.
- When to use it
- Useful when an assistant needs quick crypto market, gas, DEX quote, token risk, holder, yield, funding-rate or wallet data and you are willing to pay small per-call USDC fees. The inspect mode is a safe way to see what each call costs before enabling payments.
- Requirements
- Runs locally via npx or a global npm install (Node.js). Optional auto-pay needs the viem package, a Base wallet funded with USDC, and the X402_WALLET_PRIVATE_KEY environment variable. Optional settings: X402_API_BASE_URL, X402_MAX_PER_CALL_USDC (default 0.01), X402_EXPECTED_PAY_TO and X402_REFERRAL_SOURCE. Network access to the x402 API is required.
Installation
In SourceWeft
- Open X402 Api in the dashboard and add it to a workspace.
- Enable the server for the chats that should use its tools.
Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.
Other MCP clients
Follow the launch instructions in the repository.
README
@x402-api/mcp-server
[x402-api MCP server]MCP server that gives Claude, ChatGPT, and any MCP-compatible AI agent access to pay-per-call crypto/DeFi data via the x402 protocol.
8 tools. No API keys. AI agents pay USDC micropayments on Base, per request.
Find this service: Official MCP Registry · Glama · Agent discovery manifest · OpenAPI.
Tools
Quick Start
Option A: Inspect mode (no payment needed)
Just run it — any 402 responses will return human-readable payment instructions:
Claude will tell you what's needed when a tool requires payment.
Option B: Auto-pay mode (fully autonomous)
Install optional payment deps and set your wallet key:
The MCP server signs Base USDC EIP-3009 authorizations only when the API advertises that settlement mode. The default payment cap is 0.01 USDC per call. Fund the wallet with USDC on Base; the API operator sponsors gas in direct settlement mode.
Claude Desktop Integration
Add to your claude_desktop_config.json:
Without auto-pay (inspect mode)
With auto-pay
Config file location:
- macOS:
~/Library/Application Support/Claude/claude_desktop_config.json - Windows:
%APPDATA%\Claude\claude_desktop_config.json - Linux:
~/.config/Claude/claude_desktop_config.json
Environment Variables
How x402 Payments Work
This API uses the x402 protocol — HTTP 402 Payment Required:
- Agent calls tool → MCP server makes API request
- Server returns 402 with payment details (amount, USDC address, Base network)
- Auto-pay mode: this client signs an EIP-3009 authorization and retries; the API settles it on Base
- Inspect mode: MCP returns 402 details without signing or paying
Payment details:
- Token: USDC on Base mainnet
- Address:
0x60264c480b67adb557efEd22Cf0e7ceA792DefB7 - Chain: Base (chain ID 8453)
- Amount: 0.001–0.008 USDC per call (< 1 cent USD)
Tool Reference
get_crypto_prices
No parameters. Returns current prices for BTC, ETH, SOL + top 24h movers.
get_gas_prices
No parameters. Returns gas prices for Ethereum, Base, Polygon, Arbitrum — slow/standard/fast tiers.
get_dex_quotes
Get one ParaSwap aggregate route. No independent comparison between DEX venues.
scan_token
Token security scan — detects rug-pull flags, honeypot patterns, mint authority, etc.
track_whales
Top-holder sample from GoPlus. Gini and recent transfer history unavailable.
scan_yields
Top DeFi yield opportunities across Aave, Compound, Morpho, Lido, Pendle, etc.
get_funding_rates
Hourly perpetual funding from Hyperliquid and dYdX v4. Spreads are indicative.
profile_wallet
Observed priced wallet balances and available transaction counts. DeFi positions, PnL and risk score unavailable.
Development
To test without a payment wallet, simply run and see the 402 responses:
Links
License
MIT
Three runnable workflows
Runnable Node examples start in inspect mode. Each demo has inputs, recorded provider output, coverage limits, a spending cap, and an agent prompt.
Optional X402_REFERRAL_SOURCE labels requests for first-party aggregate attribution (default mcp). It is a hint, not verified caller identity. The API journals no raw payer wallets, IP addresses, or signatures. X402_EXPECTED_PAY_TO pins the payment recipient to the official wallet by default. Tools advertise that auto-pay can spend money and repeated calls can incur another charge.
Cursor / other local MCP clients
Use the same mcpServers configuration shown above. For Cursor, put it in .cursor/mcp.json in your project. Inspect mode needs no wallet. Set X402_MAX_PER_CALL_USDC before enabling auto-pay; repeated calls spend again. Keep wallet credentials in local environment settings, outside Git.
Registry publication
The Publish MCP Registry GitHub workflow validates the matching npm version, then publishes server.json using GitHub OIDC. It runs on a published GitHub release or a manual dispatch from main. No npm token, GitHub PAT, or wallet key is stored in CI. Actions and official publisher source are pinned to verified commits. npm publication still happens separately before creating the release.
Source: README.md at commit 44bdf37
Tools
0Version history
3- v1.0.5LatestSep 30, 2026
- v1.0.4Sep 29, 2026
- v1.0.2Sep 16, 2026
Score
50% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
- Reached in the last 30 days25 pts
Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.
- Auth declared10 pts
Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.
- Tools listed15 pts
Answer tools/list without a credential, or ship a package that starts in a sandbox without one.
- DescriptionRequired15 pts
- Logo10 pts
- Documentation15 pts
- License10 pts

