Back to Browse

X402 Agent Tollbooth MCP Server

Developer ToolsUse Caution0.2MCP RegistryLocalRemote
Free

Server data from the Official MCP Registry

On-chain DeFi smart contract auditor, arbitrage scanner, and agent tollbooth via x402 on Base.

About

On-chain DeFi smart contract auditor, arbitrage scanner, and agent tollbooth via x402 on Base.

Remote endpoints: streamable-http: https://x402-agent-tollbooth.onrender.com/mcp

Security Report

0.2
Use Caution0.2Critical Risk

The paid-tool dispatcher grants access to any request carrying a non-empty PAYMENT-SIGNATURE or X-PAYMENT header without verifying the payment, and settlement is attempted but its result is ignored. Several security tools return hardcoded or fabricated 'safe' audit results when analysis fails, which is misleading for a security product. Additional concerns include reading credential files from a developer's personal Windows path, unauthenticated shared memory keys, and sold query logs that may expose user activity. Supply chain analysis found 34 known vulnerabilities in dependencies (4 critical, 15 high severity).

3 files analyzed · 44 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

File System Write

Writes or modifies files on your machine. Check that this is expected for the tool.

env_vars

Check that this permission is expected for this type of plugin.

database

Check that this permission is expected for this type of plugin.

How to Install & Connect

Available as Local & Remote

This plugin can run on your machine or connect to a hosted endpoint. during install.

Documentation

View on GitHub

From the project's GitHub README.

🛣️ x402 Agent Tollbooth

The x402 Agent Tollbooth is an enterprise-grade Model Context Protocol (MCP) server that demonstrates machine-to-machine (M2M) micro-transactions on the Base network.

This project provides an infrastructure layer allowing AI agents to programmatically access specialized Web3 intelligence and smart contract analysis tools by fulfilling automated HTTP 402 (Payment Required) workflows via the x402 protocol standard. Agents pay per tool execution directly in USDC, enabling a seamless, trustless API monetization model.

Smithery Quality Score: 100/100 Network Currency


💻 Open Source Implementation & Self-Hosting

This repository contains the full, open-source Python implementation of the MCP server. The server is built using the official mcp SDK and sse-starlette to handle Server-Sent Events (SSE) and JSON-RPC tool calling.

The core implementation is located in tollbooth_agent.py.

Running from Source (Local Execution)

You can easily self-host this MCP server or run it locally for your own agents.

Using Docker:

docker build -t x402-tollbooth .
docker run -p 8000:8000 -e GEMINI_API_KEY="your_api_key" x402-tollbooth

Using Python:

pip install -r requirements.txt
uvicorn tollbooth_agent:mcp_app --host 0.0.0.0 --port 8000

🛠️ Server Capabilities

This server exposes a navigable tree of specialized Web3 tools. AI agents must provide a valid Base network paymentHash (transaction receipt) for the exact USDC amount required to execute the paid tools.

🤝 Referral Revenue Sharing Protocol: The server implements an optional referralWallet parameter. AI agents acting as intermediaries can append their wallet address to receive a 20% protocol fee distribution.

🆓 Infrastructure & Discovery

  • contract.auditTeaser (FREE): Scans a Base smart contract for vulnerabilities and returns a high-level summary. Designed to allow agents to assess necessity before authorizing paid deep-dives.

📊 Token Data & Intelligence

  • token.analyze (0.50 USDC): Real-time liquidity, volume, and analytics for any Base token. Aggregates data for high-frequency algorithmic usage.

🔐 Smart Contract Security

  • contract.audit (1.00 USDC): Full AI-driven smart contract vulnerability audit. Returns exact lines of code, risk severity, and attack vectors.
  • contract.patch (5.00 USDC): Premium service. Audits the contract and generates production-ready, secure Solidity code to patch the vulnerabilities.

🧠 Market Intelligence

  • market.alpha (10.00 USDC): High-level metadata brokering. Aggregates metadata to reveal which smart contracts are currently experiencing high automated analysis volume on the network.
  • wallet.profile (2.00 USDC): Behavioral finance AI analysis of a specific wallet address. Generates risk profiles and portfolio strategies based on public on-chain actions.

💾 Agent Persistence

  • memory.store (0.01 USDC): Persistent memory bank for agents to store context across sessions.
  • memory.retrieve (0.01 USDC): Retrieve stored contextual memory.
  • llm.query (0.10 USDC): Query the Tollbooth's underlying LLM directly for complex reasoning tasks.

⚡ The X402 FastPass SDK (Seamless Agent Integration)

If you are building custom AI agents in LangChain, AutoGen, or CrewAI, you do not need to teach your LLMs how to write Web3 transactions to use this server.

We have included the X402 FastPass SDK (x402_fastpass.py) directly in this repository. It acts as a wrapper around the MCP client and automatically handles the USDC crypto payments natively in Python.

How to give your agent seamless access:

from x402_fastpass import X402FastPass
import asyncio

# 1. Give the FastPass Client your agent's Base wallet private key
client = X402FastPass(private_key="0xYOUR_PRIVATE_KEY")

# 2. Give this Python function to your agent as a standard tool.
# The SDK automatically handles the on-chain USDC transfer and passes the payment hash to the MCP server!
async def run_audit():
    result = await client.audit_contract("0xTargetSmartContractAddress")
    print(result)

asyncio.run(run_audit())

Note: The FastPass SDK automatically injects your agent's wallet address as the referralWallet, meaning your agent automatically earns a 20% cashback on all tools it calls!


⚙️ How it Works (x402 Protocol)

  1. The AI Agent initiates a tool call, providing required inputs (e.g., contractAddress).
  2. The Agent executes an on-chain transaction sending the exact USDC amount to the specified service wallet (0x73279fa4BadA7CAC888c62CDa4f5c8104765f6f1).
  3. The Agent passes the transaction hash via the paymentHash argument.
  4. The server verifies the transaction on BaseScan.
  5. Upon successful verification, the server executes the capability and returns the requested JSON payload.

🚀 Connecting to the Hosted Endpoint

If you do not want to run the server from source, you can connect directly to our public hosted endpoint.

Compatible with standard MCP clients (Claude Desktop, Cursor) and indexed on Smithery.

npx @smithery/cli mcp install x402-agent-tollbooth

Reviews

No reviews yet

Be the first to review this server!