
X402score Mcp
io.github.zagchkPublished by GitHub account zagchkv0.4.2Updated Oct 26, 2026
Check an x402-paid API endpoint's trust score before paying it - live-probed, not self-reported.
The publisher's own server: x402 Counterparty Score
Overview
Local MCP server that lets an assistant look up x402Score trust scores, grades and leaderboard data for x402-paid API endpoints before paying them.
- What you can do
- Score a single x402 endpoint by URL or endpoint ID, with grade and credible interval
- Search and browse tracked endpoints by name, domain, URL, ID or vertical, sorted by score, price, uptime or latency
- Read a calibration report on whether the scoring formula is predictive
- Submit a new x402 endpoint to the monitoring queue
- Run a cheap reachability and latency ping
- Read a methodology resource explaining what score, grade, credible interval and on-chain modifier mean
- When to use it
- Useful when an assistant or agent is about to call or pay an x402-metered API and you want a third-party, live-probed reputation check first, or when comparing candidate paid endpoints by score, price, uptime or latency.
- Requirements
- Runs locally over stdio; install the npm package x402score-mcp globally or run it via npx, which needs Node.js. Network access to the x402Score backend is required. Optionally set X402SCORE_BASE_URL to point at a staging or local backend.
Installation
In SourceWeft
- Open X402score Mcp in the dashboard and add it to a workspace.
- Enable the server for the chats that should use its tools.
Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.
Other MCP clients
Follow the launch instructions in the repository.
README
x402score-mcp
MCP server exposing x402Score's reputation data as agent tools — check an x402-paid API endpoint's trust score before paying it, from inside any MCP-compatible client (Claude Desktop, Claude Code, etc.).
Published to npm, not yet submitted to any MCP registry. The package
itself (x402score-mcp) is installable now — what's being held is the
registry listing (Claude's, Smithery, etc.), until the on-chain modifier's
calibration gate closes (~2026-10-19); see the main project README for why.
Registry listing content is pre-written in REGISTRY_SUBMISSION.md, ready to
copy-paste the moment the gate closes. Last re-verified end-to-end against
live production (real stdio MCP client, all 5 tools + the methodology
resource, confirmed structured output, error handling, and tool annotations
all work correctly): 2026-10-10.
Tools
check_endpoint_score— score, grade, and credible interval for one endpoint. Passurldirectly (preferred — the endpointId is derived locally, no separate lookup) orendpointIdif already known.search_leaderboard— search/browse tracked endpoints by name/domain/url/id and/or vertical, sortable byscore(default),price,uptime, orlatency.get_calibration_report— is the scoring formula actually predictive?submit_endpoint— add a new x402 endpoint to the monitoring queue.ping— cheap reachability/latency check, useful as a first call when connecting.
All tools declare readOnlyHint/destructiveHint/idempotentHint/openWorldHint
annotations and a matching outputSchema, and all return structured errors
(isError: true with a clear message, including the backend's own error text
where available — e.g. a rate-limit message, not just an HTTP status) instead
of letting a network failure or backend timeout kill the connection. A
x402score://methodology resource explains what the score, grade, credible
interval, and on-chain modifier actually mean — read once per session rather
than inferred from tool descriptions alone. Requests time out client-side
after 10s so a slow or degraded backend fails fast and visibly instead of
hanging the caller. See CHANGELOG.md for the version history.
Install & run
Or from source:
Use from Claude Desktop / Claude Code
Add to your MCP client config:
Or point command/args at a local node/dist/server.js build instead,
same as before.
Optionally set X402SCORE_BASE_URL in the server's env to point at a local
wrangler dev or staging deployment instead of production. This redirects
all of the server's traffic to whatever URL you give it, so only set it to a
backend you control and trust.
Development
Tool logic (src/tools.ts) is separated from MCP protocol wiring
(src/server.ts) specifically so it's testable without a real MCP transport —
tests run via the main project's vitest (from the repo root: npm test).
src/server.ts wires those same functions into @modelcontextprotocol/sdk's
McpServer, connected over stdio.
Source: mcp/README.md at commit ca47c14
Tools
0Version history
2- v0.4.2LatestOct 18, 2026
- v0.4.1Oct 18, 2026
Score
40% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
- Reached in the last 30 days25 pts
Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.
- Auth declared10 pts
Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.
- Tools listed15 pts
Answer tools/list without a credential, or ship a package that starts in a sandbox without one.
- DescriptionRequired15 pts
- Logo10 pts
- Documentation15 pts
- License10 pts
Declare a license in the repository or the registry entry.