Back to Browse

Agent Search Pro MCP Server

Developer ToolsUse Caution4.2MCP RegistryLocalRemote
Free

Server data from the Official MCP Registry

Live web search and research synthesis for agents, with free samples and x402 USDC payments.

About

Live web search and research synthesis for agents, with free samples and x402 USDC payments.

Remote endpoints: streamable-http: https://aggregator-beta.vercel.app/mcp

Security Report

4.2
Use Caution4.2High Risk

Agent Search Pro is a well-architected x402 payment-gated web search MCP server with thoughtful security design around payment flows and telemetry. However, several code quality issues and a credential handling gap reduce confidence. The server properly isolates paid operations behind cryptographic payment verification, implements structured telemetry with wallet pseudonymization, and scopes permissions appropriately to its stated purpose. The main concerns are: (1) the Serper API key is passed over HTTPS to an external service without additional per-request authentication, (2) error messages in payment flows may leak partial facilitator responses, and (3) broad exception handling in critical paths masks real errors. These are not critical vulnerabilities but reflect operational security gaps typical of experimental revenue systems. Supply chain analysis found 8 known vulnerabilities in dependencies (0 critical, 1 high severity).

7 files analyzed · 16 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

env_vars

Check that this permission is expected for this type of plugin.

HTTP Network Access

Connects to external APIs or services over the internet.

File System Write

Writes or modifies files on your machine. Check that this is expected for the tool.

system_info

Check that this permission is expected for this type of plugin.

How to Install & Connect

Available as Local & Remote

This plugin can run on your machine or connect to a hosted endpoint. during install.

Documentation

View on GitHub

From the project's GitHub README.

Agent Search Pro — x402 Pay-Per-Call API + MCP Server

Live endpoint: https://aggregator-beta.vercel.app

Agent-native web search and research synthesis, paid per call in USDC on Base via x402. No buyer API keys, accounts, or subscriptions. Includes standard HTTP routes for x402 discovery plus a streamable HTTP MCP facade.

Experimental service: payment and search paths are working and dogfooded with a real 0.02 USDC Base transaction. Availability, pricing, and upstream providers may change during validation.

Tiers

ToolPriceWhat you get
web_search_sampleFREE1 search, 3 results — no wallet needed
web_search$0.02/callFull search, up to 10 results (Serper)
web_synthesis$0.10/callMulti-angle research synthesis: core + latest + critique (3 parallel searches)

Use (any MCP client, streamable HTTP)

POST https://<deployed-url>/mcp
Content-Type: application/json

{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"web_search","arguments":{"query":"x402 protocol"}}}

Unpaid calls → HTTP 402 with a canonical base64 PAYMENT-REQUIRED header (x402 V2). Compatible agent clients retry with PAYMENT-SIGNATURE; the public XPay facilitator verifies and settles EIP-3009 USDC directly from buyer to seller on Base.

Discovery surfaces

  • GET /health — liveness + tiers
  • GET /.well-known/x402.json — machine-readable payment manifest
  • GET /llms.txt — LLM-readable service description

Run locally

MOCK_MODE=1 npm install && npm start   # full 402 flow, mock settlement — no keys
npm test                                # 16-check E2E suite

Production env

See .env.example. Requires: SERPER_API_KEY, PAY_TO_ADDRESS (Base wallet), and PUBLIC_URL. X402_FACILITATOR_URL optionally overrides the default public XPay facilitator. ALCHEMY_URL is only needed for the disabled-by-default manual tx-hash fallback.

Telemetry

Every interaction is emitted as structured [telemetry] JSON to platform logs. Production writes one immutable JSON event to a private Vercel Blob store; local development also appends telemetry/interactions.jsonl. Wallets are represented only by keyed, pseudonymous identifiers; raw wallet and transaction hashes are excluded.

Part of the Grokbot Autonomous Revenue system (ranked-playbooks.md).

Reviews

No reviews yet

Be the first to review this server!