Back to Browse

True402 MCP Server

by True402
Developer ToolsUse Caution4.8MCP RegistryLocal
Free

Server data from the Official MCP Registry

Pay-per-call AI + web + on-chain tools over x402 (USDC on Base): LLM, SEO, extract, token safety.

About

Pay-per-call AI + web + on-chain tools over x402 (USDC on Base): LLM, SEO, extract, token safety.

Security Report

4.8
Use Caution4.8High Risk

This MCP server implements a legitimate micropayment marketplace client with sound cryptographic practices and reasonable security controls. The codebase properly handles wallet private keys (read-only from env, never logged), validates payment requirements before signing, and implements fail-closed spend ceilings. Minor code quality issues and broad exception handling do not outweigh the solid authentication and payment verification mechanisms. Supply chain analysis found 5 known vulnerabilities in dependencies (2 critical, 3 high severity). Package verification found 1 issue.

8 files analyzed · 11 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

env_vars

Check that this permission is expected for this type of plugin.

HTTP Network Access

Connects to external APIs or services over the internet.

crypto_sign

Check that this permission is expected for this type of plugin.

What You'll Need

Set these up before or after installing:

Funded Base wallet private key for x402 payment signing (optional; without it, paid tools return the 402 requirements).Required

Environment variable: WALLET_PRIVATE_KEY

true402 API base (default https://true402.dev/api). Must be https (or localhost) — the signer refuses to send a payment over cleartext.Optional

Environment variable: SERVER_URL

Client-side per-call spend ceiling in USDC (default 0.10). The signer refuses to auto-pay a 402 whose amount exceeds this — protects the wallet from a hostile endpoint.Optional

Environment variable: MAX_PAYMENT_USDC

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "dev-true402-mcp-server": {
      "env": {
        "SERVER_URL": "your-server-url-here",
        "MAX_PAYMENT_USDC": "your-max-payment-usdc-here",
        "WALLET_PRIVATE_KEY": "your-wallet-private-key-here"
      },
      "args": [
        "-y",
        "@true402.dev/mcp-server"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

@true402.dev/mcp-server

MCP server for the true402 machine-native marketplace — give your agent pay-per-call access to AI inference and web tools over x402 (HTTP 402 micropayments in USDC on Base).

No accounts, no API keys. The agent's wallet is its identity: each paid tool returns an HTTP 402 challenge, the server signs an EIP-3009 USDC authorization, and the call settles on-chain. Configure a funded wallet to auto-pay, or run without one and the paid tools will surface the exact payment requirements instead of failing.

Tools

ToolPriceWhat it does
chatper-token + 3%OpenAI-compatible LLM inference across many models
list_modelsfreeList available models + pricing
token_safety$0.005ERC-20 rug/honeypot pre-check on Base → 0–100 score, risk band, flags, liquidity depth + a buy/sell honeypot simulation
seo_audit$0.04/pageSEO + GEO (generative-engine-optimization) audit of a page → structured report
web_extract$0.005Fetch a URL → clean text + markdown + links + metadata
link_preview$0.003Fetch a URL → Open Graph / unfurl card
robots_check$0.003A site's AI-crawler policy (GPTBot, ClaudeBot, Google-Extended, PerplexityBot, …) + sitemaps + llms.txt
headers_check$0.003HTTP security-headers analysis (HSTS, CSP, …) + a 0–100 score
new_pairs$0.003Newly created Base DEX pairs (Uniswap V3 / Aerodrome) — fresh token launches
liquidity_pulls$0.003Liquidity-removal / rug alerts on Base pools
whale_swaps$0.005Large swaps on Base by USD size — whale flow
token_report$0.01Fuller on-chain token report
liquidity_history$0.005What ALREADY happened to a Base token's liquidity — every removal with amount/block/tx, plus the other tokens drained in the same transaction. History a live simulation cannot re-derive
tx_preflight$0.008Check an unsigned Base transaction before signing: does it revert, does it grant an unlimited approval, and has the counterparty been seen draining liquidity. Takes no key and no signature, so it cannot broadcast or front-run

Tools are auto-discovered from the live catalog, so new marketplace stalls appear automatically. Prices are illustrative; the live 402 challenge is authoritative.

Example: add token-safety to your agent

A copy-paste reference in examples/token-safety/ — a framework-agnostic x402 client plus a drop-in LangChain tool that rug/honeypot-checks any Base token for $0.005/call.

Install

Requires Node.js ≥ 20. Runs over stdio — point any MCP client at it via npx.

Claude Desktop / Claude Code

Add to your MCP config (claude_desktop_config.json, or .mcp.json for Claude Code):

{
  "mcpServers": {
    "true402": {
      "command": "npx",
      "args": ["-y", "@true402.dev/mcp-server"],
      "env": {
        "WALLET_PRIVATE_KEY": "0xYOUR_FUNDED_BASE_WALLET_KEY"
      }
    }
  }
}

Cursor / Cline / other MCP clients

Same idea — command npx, args ["-y", "@true402.dev/mcp-server"], and the WALLET_PRIVATE_KEY env var.

Configuration

Env varDefaultDescription
SERVER_URLhttps://true402.dev/apitrue402 API base. Override to point at a self-hosted instance.
WALLET_PRIVATE_KEY(none)A funded Base wallet private key used to sign x402 payments. Needs USDC (gas is sponsored by the facilitator — no ETH required). Without it, paid tools return the 402 requirements instead of paying.

Security: the key is read only from the environment and is never logged, echoed, or returned. Use a dedicated low-balance wallet — fund it with only what you intend to spend.

How payment works

  1. The tool calls the true402 endpoint with no payment.
  2. The server replies 402 with accepted payment options (USDC on Base).
  3. This MCP server signs an EIP-3009 transferWithAuthorization with your wallet.
  4. It retries with the signed X-PAYMENT header; the service verifies and responds.
  5. Settlement happens on-chain. Your wallet pays only USDC — the facilitator sponsors gas.

Links

Also available for

MCP (Claude Code / Desktop, Cursor, Hermes) · Hermes Agent · OpenClaw · ElizaOS · LangChain · CrewAI · Vercel AI SDK · Coinbase AgentKit · Virtuals GAME · CLI — same on-chain checks, one install command each: true402.dev/integrations

License

MIT

Reviews

No reviews yet

Be the first to review this server!