Server data from the Official MCP Registry
Multi-tenant HTTP 402 infrastructure gateway and stdio MCP server for machine payments.
About
Multi-tenant HTTP 402 infrastructure gateway and stdio MCP server for machine payments.
Security Report
This MCP server is a cryptocurrency payment gateway that handles private keys, executes financial transactions, and routes payments on Base L2. Multiple critical security vulnerabilities were identified: private keys are accepted as string inputs and logged in error messages, environment variables containing sensitive credentials are transmitted over the network, the proxy gateway has insufficient transaction validation logic, and there is no meaningful authentication or authorization for payment operations. The server can be exploited to drain wallets, execute unauthorized payments, or replay transactions. Supply chain analysis found 1 known vulnerability in dependencies (0 critical, 1 high severity). Package verification found 1 issue.
8 files analyzed ยท 21 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
Permissions Required
This plugin requests these system permissions. Most are normal for its category.
How to Install
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-seob5285-alt-x402-facilitator-proxy": {
"args": [
"-y",
"x402-facilitator-proxy"
],
"command": "npx"
}
}
}Documentation
View on GitHubFrom the project's GitHub README.
X402 Facilitator Proxy - Multi-Tenant Payment Gateway
A decentralized, autonomous payment infrastructure for API monetization on Base L2 with programmatic fee routing and agent-compatible settlement protocols.
๐๏ธ Architecture Overview
The X402 Facilitator Proxy implements a complete multi-tenant payment gateway that enables merchants to monetize APIs through HTTP 402 "Payment Required" responses, while autonomous agents can seamlessly settle transactions using USDC on Base L2.
x402-facilitator-proxy/
โโโ src/ # Core Cloudflare Worker Engine
โ โโโ index.ts # Main proxy gateway endpoint
โ โโโ backend/automation/
โ โโโ sweeper.ts # Automated fee collection
โโโ x402-client-sdk/ # Core Interface Rails
โ โโโ src/
โ โ โโโ client-library.ts # TypeScript SDK
โ โ โโโ mcp-server.ts # Model Context Protocol Server
โ โโโ package.json # SDK dependencies
โ โโโ tsconfig.json # TypeScript configuration
โโโ templates/ # Integration Templates
โโโ express-middleware/
โ โโโ x402-guard.js # Merchant-Side API Gating
โโโ langchain-ts/
โ โโโ agent.ts # TypeScript Agent Template
โ โโโ package.json # LangChain dependencies
โ โโโ README.md # Setup instructions
โโโ crewai-python/
โโโ agent.py # Python Agent Template
๐ Core Components
1. Cloudflare Worker Proxy Engine
The core backend (src/index.ts) operates as a serverless payment verification gateway deployed on Cloudflare's edge network:
- Endpoint:
https://x402-facilitator-proxy.seob5285.workers.dev/api/v1/verify-and-settle - Platform Vault:
0x2E3DADfb314718849A93c49A78618E586c3b2C60 - Fee Structure: Automated 1% platform fee routing
Key Features:
- Multi-tenant transaction verification
- Base L2 USDC settlement validation
- Automated fee splitting (99% to merchant, 1% to platform)
- Edge-deployed for global low-latency access
2. Model Context Protocol (MCP) Server
The MCP server (x402-client-sdk/src/mcp-server.ts) provides a standardized interface for AI agents to interact with the payment system:
# Start the MCP server locally via stdio
npm run mcp:start
Protocol Features:
- Standard I/O communication interface
- Agent-compatible payment tool registration
- Automatic transaction handling and verification
- Cross-platform AI framework compatibility
3. Merchant-Side API Gating
The Express middleware (templates/express-middleware/x402-guard.js) enables merchants to protect APIs with HTTP 402 challenges:
import { x402TollboothGuard } from './templates/express-middleware/x402-guard.js';
app.use('/api/premium', x402TollboothGuard("0.10", "0xYourWalletAddress"));
Middleware Behavior:
- Challenge: Returns HTTP 402 with payment instructions when headers are missing
- Verification: Validates payment through the proxy gateway
- Access: Grants API access upon successful payment verification
4. Autonomous Agent Templates
TypeScript/LangChain Agent (templates/langchain-ts/agent.ts)
import { createPaymentAgent } from './templates/langchain-ts/agent.js';
const agent = await createPaymentAgent();
const result = await agent.invoke({
input: JSON.stringify({
agentPrivateKey: process.env.AGENT_PRIVATE_KEY,
developerWallet: "0x742d35Cc6297C24aE0E4838C4667C02693C4cB36",
amountUSD: "0.10"
})
});
Python/CrewAI Agent (templates/crewai-python/agent.py)
from templates.crewai_python.agent import X402PaymentAgent
agent = X402PaymentAgent()
result = agent.process_payment({
"agent_private_key": os.getenv("AGENT_PRIVATE_KEY"),
"developer_wallet": "0x742d35Cc6297C24aE0E4838C4667C02693C4cB36",
"amount_usd": "0.10"
})
๐ง Quick Start
1. Deploy the Proxy Engine
npm install
npm run deploy
2. Setup the MCP Server
cd x402-client-sdk
npm install
npm run mcp:start
3. Integrate Merchant Middleware
# Copy the Express middleware to your project
cp templates/express-middleware/x402-guard.js your-project/middleware/
# Install in your Express app
import { x402TollboothGuard } from './middleware/x402-guard.js';
app.use('/api/protected', x402TollboothGuard("0.05", "0xYourWallet"));
4. Setup Agent Templates
# For TypeScript/LangChain agents
cd templates/langchain-ts
npm install
npm run dev
# For Python/CrewAI agents
cd templates/crewai-python
pip install -r requirements.txt
python agent.py
๐ Security & Environment Variables
Critical Security Guidelines
โ ๏ธ NEVER HARDCODE PRIVATE KEYS IN REPOSITORY FILES
All sensitive credentials must be managed through secure environment variables:
Cloudflare Worker Environment (Production)
# Set via Cloudflare Workers dashboard or wrangler
wrangler secret put FACILITATOR_PRIVATE_KEY
wrangler secret put PLATFORM_VAULT_ADDRESS
Local Development Environment
Create .env files for local testing:
# .env (root directory - for Cloudflare Worker development)
FACILITATOR_PRIVATE_KEY=0x1234567890abcdef...
PLATFORM_VAULT_ADDRESS=0x2E3DADfb314718849A93c49A78618E586c3b2C60
# Agent execution environments
AGENT_PRIVATE_KEY=0xabcdef1234567890...
OPENAI_API_KEY=sk-...
Agent Runtime Security
- TypeScript Agents: Use
process.env.AGENT_PRIVATE_KEY - Python Agents: Use
os.getenv("AGENT_PRIVATE_KEY") - MCP Server: Loads keys from system environment at runtime
๐ Platform Reference
Core Infrastructure
- Verification Gateway:
https://x402-facilitator-proxy.seob5285.workers.dev/api/v1/verify-and-settle - Platform Vault:
0x2E3DADfb314718849A93c49A78618E586c3b2C60 - Network: Base L2 (Chain ID: 8453)
- Payment Token: USDC (
0x833589fCD6eDb6E08f4c7C32d4f71b54bda02913)
Fee Structure
- Merchant Revenue: 99% of payment amount
- Platform Fee: 1% automatically routed to platform vault
- Gas Optimization: Batched transfers for cost efficiency
๐ Integration Patterns
HTTP 402 Payment Flow
- API Request: Client attempts to access protected endpoint
- Payment Challenge: Server responds with HTTP 402 and payment instructions
- Agent Processing: Autonomous agent detects 402, executes USDC payment split
- Verification: Proxy gateway validates on-chain transaction
- Access Granted: Original API request succeeds with payment headers
Agent Integration Workflow
graph TD
A[Agent API Call] --> B{HTTP 402?}
B -->|Yes| C[Parse Payment Requirements]
C --> D[Execute USDC Split Transfer]
D --> E[Submit to Proxy Gateway]
E --> F[Retry Original Request]
F --> G[Access Granted]
B -->|No| G
๐ ๏ธ Development Commands
# Core proxy development
npm run dev # Start local development server
npm run deploy # Deploy to Cloudflare Workers
npm run cf-typegen # Generate Cloudflare types
# SDK development
cd x402-client-sdk
npm run build # Build TypeScript SDK
npm run mcp:start # Start MCP server
# Template testing
cd templates/langchain-ts
npm run dev # Test TypeScript agent
cd templates/crewai-python
python agent.py # Test Python agent
# Automated fee collection
npm run sweep # Execute fee sweeping automation
๐ Documentation
- Client Integration Guide: Detailed integration instructions
- LangChain Template README: TypeScript agent setup
- API Reference: Core gateway endpoints and responses
๐ค Contributing
- Fork the repository
- Create feature branches for new integrations
- Test against Base L2 testnet before mainnet deployment
- Submit pull requests with comprehensive test coverage
๐ License
This project is licensed under the MIT License - enabling open-source innovation while maintaining platform sustainability through programmatic fee routing.
Built for the autonomous economy. Powered by Base L2. Secured by multi-tenant verification.
Reviews
No reviews yet
Be the first to review this server!
More Developer Tools MCP Servers
Fetch
Freeby Modelcontextprotocol ยท Developer Tools
Web content fetching and conversion for efficient LLM usage
Git
Freeby Modelcontextprotocol ยท Developer Tools
Read, search, and manipulate Git repositories programmatically
Toleno
Freeby Toleno ยท Developer Tools
Toleno Network MCP Server โ Manage your Toleno mining account with Claude AI using natural language.
mcp-creator-python
Freeby mcp-marketplace ยท Developer Tools
Create, build, and publish Python MCP servers to PyPI โ conversationally.
MarkItDown
Freeby Microsoft ยท Content & Media
Convert files (PDF, Word, Excel, images, audio) to Markdown for LLM consumption
MCP Marketplace
Freeby mcp-marketplace ยท Developer Tools
Search and install MCP servers from inside your AI client.
