Server data from the Official MCP Registry
No-KYC web search for AI agents, paid per query in Lightning sats (L402). Holds no keys.
About
No-KYC web search for AI agents, paid per query in Lightning sats (L402). Holds no keys.
Security Report
This is a well-architected L402 payment client for search with strong security fundamentals. The server holds no cryptographic keys or wallet credentials—the trust model is sound. Code quality is high with proper input validation, safe HTTP handling, and clear separation of concerns. Minor findings are limited to informational code quality observations that do not materially impact security. Supply chain analysis found 5 known vulnerabilities in dependencies (2 critical, 2 high severity). Package verification found 1 issue.
7 files analyzed · 10 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
Permissions Required
This plugin requests these system permissions. Most are normal for its category.
What You'll Need
Set these up before or after installing:
Environment variable: SEARCH_SERVICE_URL
How to Install
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-llmops-pro-l402-search-mcp": {
"env": {
"SEARCH_SERVICE_URL": "your-search-service-url-here"
},
"args": [
"-y",
"l402-search-mcp"
],
"command": "npx"
}
}
}Documentation
View on GitHubFrom the project's GitHub README.
l402-search-mcp
No-KYC web search for AI agents — paid per query in Lightning sats, via MCP.
This is an MCP client-side server for L402-paywalled search endpoints. It gives any MCP-capable agent (Claude Desktop, Claude Code, Cursor, nostr-merchant, …) a search tool that costs sats instead of an API key:
search(query)→ returns a bolt11 Lightning invoice +payment_hash- The agent pays the invoice with its own wallet — e.g.
nwc-mcp'snwc_pay_invoice, under the agent's own budget caps search(query, payment_preimage)→ JSON results
No account. No API key. No KYC. Each payment buys exactly one search.
By default it points at https://llmops-search.fly.dev (50 sats/search, run by us), but SEARCH_SERVICE_URL works with any endpoint speaking the same L402 dialect.
The trust model (read this)
This server holds NO keys. Not a wallet connection, not an nsec, nothing. Payment happens in the agent's wallet, where the agent's own budget caps, allowlists, and audit logs apply. l402-search-mcp only:
- relays the L402 challenge (invoice) to the agent,
- remembers which macaroon belongs to which
payment_hash(so the agent only handles the preimage its wallet already returned), - makes the authorized retry.
Worst-case compromise of this process leaks pending search queries — never money.
Install
npx -y l402-search-mcp
Claude Code (project scope):
claude mcp add l402-search -s project -- npx -y l402-search-mcp
Claude Desktop (claude_desktop_config.json):
{
"mcpServers": {
"l402-search": { "command": "npx", "args": ["-y", "l402-search-mcp"] }
}
}
Pair it with a wallet server (e.g. nwc-mcp) so the agent can actually pay.
Tools
| Tool | Price | What it does |
|---|---|---|
search | sats (set by the endpoint; 50 on the default) | First call returns the invoice; the call with payment_preimage returns results. |
search_service_info | free | Endpoint reachability, pending challenges, flow explainer. |
Configuration
Everything is optional — the defaults work. Set in the environment or a .env next to the install (never read from cwd):
SEARCH_SERVICE_URL=https://llmops-search.fly.dev # any L402 search endpoint
CHALLENGE_TTL_SECONDS=900 # match the endpoint's macaroon TTL
AUDIT_LOG_PATH=./l402-search-mcp-audit.log # NDJSON, append-only
HTTP_TIMEOUT_MS=15000
The flow, end to end
agent l402-search-mcp endpoint agent's wallet
│ search("foo") │ │ │
│ ────────────────────────► │ GET /search?q=foo │ │
│ │ ───────────────────────► │ │
│ │ 402 {macaroon, invoice} │ │
│ {invoice, payment_hash} │ ◄─────────────────────── │ │
│ ◄──────────────────────── │ (macaroon cached) │ │
│ nwc_pay_invoice(invoice) │ │ │
│ ──────────────────────────┼──────────────────────────┼─────────────────────► │
│ {preimage} │ │ │
│ ◄─────────────────────────┼──────────────────────────┼────────────────────── │
│ search("foo", preimage) │ │ │
│ ────────────────────────► │ GET + Authorization: │ │
│ │ L402 macaroon:preimage │ │
│ │ ───────────────────────► │ │
│ {results} │ 200 {results} │ │
│ ◄──────────────────────── │ ◄─────────────────────── │ │
The macaroon never round-trips through the LLM — the agent only sees the invoice and hands back the preimage its wallet returned. sha256(preimage) = payment_hash recovers the rest.
Audit log
NDJSON, one line per event: startup, challenge_received, results_received, unknown_preimage, endpoint_error. Same shape as the other servers in the kit.
Part of the LLMOps.Pro agent-payments kit
nwc-mcp (wallet) · nostr-ops-mcp (NOSTR identity/publishing) · marketplace-mcp (storefront) · albyhub-admin-mcp (node admin) · paywall-mcp (sell YOUR tools for sats) · l402-search-mcp (buy search with sats)
MIT. Built by LLMOps.Pro · ⚡ sovereigncitizens@getalby.com
Reviews
No reviews yet
Be the first to review this server!
More Developer Tools MCP Servers
Fetch
Freeby Modelcontextprotocol · Developer Tools
Web content fetching and conversion for efficient LLM usage
Git
Freeby Modelcontextprotocol · Developer Tools
Read, search, and manipulate Git repositories programmatically
Toleno
Freeby Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
mcp-creator-python
Freeby mcp-marketplace · Developer Tools
Create, build, and publish Python MCP servers to PyPI — conversationally.
MarkItDown
Freeby Microsoft · Content & Media
Convert files (PDF, Word, Excel, images, audio) to Markdown for LLM consumption
MCP Marketplace
Freeby mcp-marketplace · Developer Tools
Search and install MCP servers from inside your AI client.