Back to Browse

Trust Score X402 MCP Server

Developer ToolsModerate5.0MCP RegistryLocalRemote
Free

Server data from the Official MCP Registry

Trust scoring for domains, wallets, APIs. SSL+DNS+WHOIS+headers. Score 0-100.

About

Trust scoring for domains, wallets, APIs. SSL+DNS+WHOIS+headers. Score 0-100.

Remote endpoints: sse: https://trust-score.api.klymax402.com/mcp

Security Report

5.0
Moderate5.0Moderate Risk

This MCP server implements a trust scoring API for domains, wallets, and IPs with a payment model (x402 micropayments). The code is well-structured with proper input validation, no malicious patterns, and appropriate use of external APIs. However, there are several moderate-severity concerns: (1) unchecked arbitrary domain/URL fetching could enable SSRF attacks, (2) missing authentication/authorization on the main MCP endpoints, (3) environment variable handling is minimal, and (4) error messages could leak sensitive information. Permissions align well with the stated purpose. Supply chain analysis found 5 known vulnerabilities in dependencies.

5 files analyzed · 13 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

How to Install & Connect

Available as Local & Remote

This plugin can run on your machine or connect to a hosted endpoint. during install.

Documentation

View on GitHub

From the project's GitHub README.

Trust Score API

MCP Server x402 License: MIT

Evaluate trustworthiness of any domain, URL, wallet, or API. Returns 0-100 score with 5 sub-scores: SSL, DNS, WHOIS, security headers, content. Zero-cost, zero-dependency. The trust layer agents need before interacting with unknown services. Pay-per-call via x402 (USDC on Base L2) -- no API key, no signup, no rate-limit wall.

Part of the klymax402 marketplace -- 100 x402 micropayment APIs for AI agents, one wallet, USDC on Base.

Quickstart -- MCP

Add to your MCP client config (Claude Desktop, Cursor, ElizaOS, etc.):

{
  "mcpServers": {
    "trust-score": {
      "url": "https://trust-score.api.klymax402.com/mcp"
    }
  }
}

Quickstart -- HTTP (x402)

curl -X POST "https://trust-score.api.klymax402.com/api/score" \
  -H "Content-Type: application/json" \
  -d '{"target":"..."}'
# -> 402 Payment Required, with an x402 payment challenge in the response body

Any x402-aware client (@x402/fetch, x402-agent-tools, ATXP) handles the 402 -> sign -> retry cycle automatically.

Tools

ToolMethodPathPriceDescription
trust_score_evaluatePOST/api/score$0.02Evaluate trust of a domain, URL, wallet address, or API endpoint. Returns composite score 0-100 with grade (A+ to F), verdict (trusted/moderate/suspicious/dangerous), and 5 detailed sub-scores.
trust_score_batch_comparePOST/api/batch$0.03Compare trustworthiness of 2-5 targets side by side. Returns all scores ranked from most to least trusted.

trust_score_evaluate

Use this when you need to check if a domain, website, API endpoint, or crypto wallet is safe to interact with. Returns a composite trust score 0-100 with letter grade (A+ to F), verdict (trusted/moderate/suspicious/dangerous), and 5 sub-scores:

Parameters

NameTypeRequiredDescription
targetstringyesDomain (example.com), full URL (https://api.example.com/v1), wallet address (0x...), or IP address to evaluate
checksarraynoWhich checks to run. Default: all. Pass a subset like ["ssl","dns"] for faster results (under 2s). Full scan takes 3-8s.

Example response:

{ compositeScore: 82, grade: "A", verdict: "trusted", subscores: { ssl: { score: 90, ... }, dns: { score: 85, ... }, ... } }

When to use: making payments, sending sensitive data, or trusting any external service. Essential for agent safety.

Not for: SEO analysis (use seo_audit_page), email validation (use email_verify_address), tech stack detection (use website_detect_tech_stack), port scanning (use network_scan_ports).

trust_score_batch_compare

Use this when you need to compare the trustworthiness of multiple domains, URLs, or wallets and pick the safest option. Accepts 2-5 targets and returns trust scores for all, sorted from most to least trusted.

Parameters

NameTypeRequiredDescription
targetsarrayyesList of 2-5 domains, URLs, or wallet addresses to evaluate and rank

Not for: single targets (use trust_score_evaluate).

Example agent prompts

  • "Check if a domain, website, API endpoint, or crypto wallet is safe to interact with"
  • "Compare the trustworthiness of multiple domains, URLs, or wallets and pick the safest option"

Payment

  • Protocol: x402 -- HTTP-native pay-per-call, no signup, no API key
  • Network: Base L2 (eip155:8453)
  • Asset: USDC
  • Facilitator: Coinbase CDP (primary), PayAI (fallback)
  • Also reachable via ATXP (OAuth-wrapped x402, RFC 9728 protected-resource metadata)

Part of klymax402

100 x402 micropayment APIs for AI agents -- one wallet, USDC on Base, zero signup.

License

MIT

Reviews

No reviews yet

Be the first to review this server!