X402nano MCP Server

This x402nano MCP server implements a micropayment system for market intelligence data using HTTP 402 Payment Required flows. While the authentication model is sophisticated and payment logic is generally sound, the code has several moderate security concerns: unauthenticated access to sensitive operational endpoints, weak input validation on payment parameters, potential rate-limiting bypasses, and excessive admin/debug functionality exposed without proper authentication. The server also handles real cryptocurrency payments and webhook registrations, increasing the impact of vulnerabilities. The codebase is large and complex with inconsistent error handling. Supply chain analysis found 5 known vulnerabilities in dependencies (0 critical, 2 high severity).

4 files analyzed · 18 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.