X402station

io.github.sF1nXPublished by GitHub account sF1nXv1.0.11Updated Oct 25, 2026

x402station.io: independent risk-signal layer for x402 endpoints before agents pay.

VerifiedSTDIODesktop onlyFinanceSecurity & Monitoring

Overview

AI-generated overview

Local MCP adapter for x402station.io that lets an assistant check whether an x402 endpoint is safe to pay before signing a payment.

What you can do
Check a single x402 endpoint before paying, returning an ok flag, warnings and basic metadata such as price, uptime and latency (preflight). Pull a deeper seven-day report on one endpoint with hourly uptime, latency percentiles, status-code distribution and decoy probability (forensics). Retrieve the full blacklist of currently flagged endpoints with per-reason counts (catalog decoys). The README also mentions Alternatives, Credits, Watch and Whats New tools, but their behaviour is not documented.
When to use it
Use it when an agent is about to pay an x402 endpoint and you want independent evidence about decoys, zombies, price traps, never-paid endpoints or latency first. Also useful for bulk discovery, where the blacklist is pulled periodically and compared against URLs about to be hit.
Requirements
Runs locally over stdio, typically via npx from the npm package. Needs the AGENT_PRIVATE_KEY environment variable with a 0x-prefixed private key for any paid call, and that account must hold Base mainnet USDC. Optional X402STATION_BASE_URL override accepts only the official site or localhost. Network access to x402station.io.
Before you install
Paid tools charge real USDC per call through x402, so calls spend money. The server requires a wallet private key in AGENT_PRIVATE_KEY, which is a high-value secret; anyone with it controls the account's funds. Endpoint URLs and payment details are sent to x402station.io. The README states the service does not route, take custody or endorse endpoints.

Installation

In SourceWeft

  1. Open X402station in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

[Glama MCP server score]

x402station-mcp

MCP adapter for x402station.io, the independent risk-signal layer for x402 agentic commerce. Exposes Preflight by x402station.io plus Forensics, Catalog Decoys, Alternatives, Credits, Watch, and Whats New. Any agent speaking the Model Context Protocol gets endpoint evidence before signing PAYMENT-SIGNATURE — decoy, zombie, price-trap, never-paid, latency, signature/settlement checks — before paying.

x402station.io independently probes every endpoint listed on agentic.market every 10 minutes and merges probe history with CDP settlement data. Policy engines decide and enforce; x402station.io measures and reports. We do not route, take custody, or endorse.

Install

bash
# Claude Code / Cursor / Windsurf / Continue — works anywhere with MCPnpm install -g x402station-mcp# or use npx in the config, no global install needed:

Configure

The adapter charges real USDC per paid call through x402 itself. You need a wallet private key that holds Base mainnet USDC.

Claude Code

Add to ~/.claude/claude_desktop_config.json (or wherever your MCP servers live):

json
{  "mcpServers": {    "x402station": {      "command": "npx",      "args": ["-y", "x402station-mcp"],      "env": {        "AGENT_PRIVATE_KEY": "0xYOUR_PRIVATE_KEY_HERE"      }    }  }}

Cursor / Windsurf / Continue

Same shape — every MCP host understands command / args / env. See your tool's MCP docs.

Environment

VariableRequiredDefaultPurpose
AGENT_PRIVATE_KEYyes for any paid tool call—0x-prefixed 64-hex-char private key. Account must hold Base mainnet USDC.
X402STATION_BASE_URLnohttps://x402station.ioOverride for dev / testing.

Tools

preflight(url) — $0.001 USDC

Ask whether it's safe to pay this x402 URL. Returns:

json
{  "ok": true,  "warnings": [],  "metadata": {    "service": "...",    "price_usdc": "0.01",    "uptime_1h_pct": 100,    "avg_latency_ms": 412  }}

ok is true only when no critical warning fires. Warnings include unknown_endpoint, no_history, dead, zombie, decoy_price_extreme, never_paid_zombie, proxy_markup, wildcard_402, spa_fallback, suspicious_high_price, slow, and new_provider.

forensics(url) — $0.001 USDC

Deep 7-day report. Superset of preflight. Returns hourly uptime, latency p50/p90/p99, status-code distribution, concentration-group stats, decoy probability. Extra warnings: dead_7d, mostly_dead, slow_p99, price_outlier_high, high_concentration.

catalog_decoys() — $0.005 USDC

Full blacklist. Returns every active endpoint currently flagged critical, plus per-reason counts. Pull periodically and cache locally — cheaper than preflighting every URL.

Typical agent flow

agent wants data from some_endpoint.com    │    ├─ preflight("https://some_endpoint.com/data")  ← $0.001    │     ok: false, warnings: ["decoy_price_extreme"]    │    └─ skip; try the next candidate

For bulk discovery, do catalog_decoys() once per day and treat the result as a set-difference against any URLs you're about to hit.

Composes with

x402station checks whether the endpoint is safe (decoy / zombie / price-trap / never-paid) before an agent pays. It pairs naturally with a payload safety check — screening the payment metadata for PII before signing:

agent intent: pay some_endpoint.com    ├─ x402station    preflight(url)              ← is the ENDPOINT safe?    ├─ presidio-x402  screen_payment_metadata()   ← is the PAYLOAD safe?    └─ pay()

presidio-hardened-x402-mcp screens payment metadata for PII before signing. The two servers are developed independently, on purpose — keeping the signals uncorrelated is the point. This is a composition pointer, not an endorsement; see their repo for the screening tool's behaviour and limits.

Links

Contact

License

MIT

Source: README.md at commit 8f4f595

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

1
  1. v1.0.11LatestSep 16, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts