X402score Mcp

io.github.zagchkPublished by GitHub account zagchkv0.4.2Updated Oct 26, 2026

Check an x402-paid API endpoint's trust score before paying it - live-probed, not self-reported.

The publisher's own server: x402 Counterparty Score

Overview

AI-generated overview

Local MCP server that lets an assistant look up x402Score trust scores, grades and leaderboard data for x402-paid API endpoints before paying them.

What you can do
  • Score a single x402 endpoint by URL or endpoint ID, with grade and credible interval
  • Search and browse tracked endpoints by name, domain, URL, ID or vertical, sorted by score, price, uptime or latency
  • Read a calibration report on whether the scoring formula is predictive
  • Submit a new x402 endpoint to the monitoring queue
  • Run a cheap reachability and latency ping
  • Read a methodology resource explaining what score, grade, credible interval and on-chain modifier mean
When to use it
Useful when an assistant or agent is about to call or pay an x402-metered API and you want a third-party, live-probed reputation check first, or when comparing candidate paid endpoints by score, price, uptime or latency.
Requirements
Runs locally over stdio; install the npm package x402score-mcp globally or run it via npx, which needs Node.js. Network access to the x402Score backend is required. Optionally set X402SCORE_BASE_URL to point at a staging or local backend.
Before you install
The server sends endpoint URLs and queries to the x402Score backend, a third party. Setting X402SCORE_BASE_URL redirects all of its traffic to whatever URL you give, so only point it at a backend you control. submit_endpoint adds data to a monitoring queue. The README notes the package is published but not yet listed in MCP registries.

Installation

In SourceWeft

  1. Open X402score Mcp in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

x402score-mcp

MCP server exposing x402Score's reputation data as agent tools — check an x402-paid API endpoint's trust score before paying it, from inside any MCP-compatible client (Claude Desktop, Claude Code, etc.).

Published to npm, not yet submitted to any MCP registry. The package itself (x402score-mcp) is installable now — what's being held is the registry listing (Claude's, Smithery, etc.), until the on-chain modifier's calibration gate closes (~2026-10-19); see the main project README for why. Registry listing content is pre-written in REGISTRY_SUBMISSION.md, ready to copy-paste the moment the gate closes. Last re-verified end-to-end against live production (real stdio MCP client, all 5 tools + the methodology resource, confirmed structured output, error handling, and tool annotations all work correctly): 2026-10-10.

Tools

  • check_endpoint_score — score, grade, and credible interval for one endpoint. Pass url directly (preferred — the endpointId is derived locally, no separate lookup) or endpointId if already known.
  • search_leaderboard — search/browse tracked endpoints by name/domain/url/id and/or vertical, sortable by score (default), price, uptime, or latency.
  • get_calibration_report — is the scoring formula actually predictive?
  • submit_endpoint — add a new x402 endpoint to the monitoring queue.
  • ping — cheap reachability/latency check, useful as a first call when connecting.

All tools declare readOnlyHint/destructiveHint/idempotentHint/openWorldHint annotations and a matching outputSchema, and all return structured errors (isError: true with a clear message, including the backend's own error text where available — e.g. a rate-limit message, not just an HTTP status) instead of letting a network failure or backend timeout kill the connection. A x402score://methodology resource explains what the score, grade, credible interval, and on-chain modifier actually mean — read once per session rather than inferred from tool descriptions alone. Requests time out client-side after 10s so a slow or degraded backend fails fast and visibly instead of hanging the caller. See CHANGELOG.md for the version history.

Install & run

bash
npm install -g x402score-mcpx402score-mcp

Or from source:

bash
cd mcp && npm install && npm run buildnpm start

Use from Claude Desktop / Claude Code

Add to your MCP client config:

json
{  "mcpServers": {    "x402score": {      "command": "npx",      "args": ["-y", "x402score-mcp"]    }  }}

Or point command/args at a local node/dist/server.js build instead, same as before.

Optionally set X402SCORE_BASE_URL in the server's env to point at a local wrangler dev or staging deployment instead of production. This redirects all of the server's traffic to whatever URL you give it, so only set it to a backend you control and trust.

Development

Tool logic (src/tools.ts) is separated from MCP protocol wiring (src/server.ts) specifically so it's testable without a real MCP transport — tests run via the main project's vitest (from the repo root: npm test). src/server.ts wires those same functions into @modelcontextprotocol/sdk's McpServer, connected over stdio.

Source: mcp/README.md at commit ca47c14

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

2
  1. v0.4.2LatestOct 18, 2026
  2. v0.4.1Oct 18, 2026

Score

40% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts

    Declare a license in the repository or the registry entry.

Other X402score integrations