# sF1nX/x402station [Health: Active]

**Category:** 🔗 Aggregators  
**Repository:** https://github.com/sF1nX/x402station-mcp  
**GitHub Stars:** 3  
**npm Downloads (last month):** 432  
**Views:** 1  
**Installs:** 0  
**Upvotes:** 0  
**Directory Page:** https://allmcps.com/mcp/sf1nx-x402station

## Description
Preflight by x402station.io — infrastructure for x402 agentic commerce. Six capability directions (Discover/Evaluate/Pay/Monitor/Recover/Analyze). Agents call it before every PAYMENT-SIGNATURE to detect decoys, zombie endpoints, dead services, and price traps. Tools: preflight ($0.001), forensics ($0.001), catalogdecoys ($0.005), alternatives ($0.005), whatsnew ($0.001), buycredits ($0.50 = 1000 prepaid), watchsubscribe ($0.01) + free creditsstatus/watchstatus/watchunsubscribe. Plus free anonymous preflight-trial for self-test. Probes 50k endpoints on agentic.market every 10 min. Open dataset: huggingface.co/datasets/x402station/preflight-dataset-v01. npx -y x402station-mcp.

## Tools
Capabilities this server exposes over MCP:

- **preflight** — Preflight x402 scam check: endpoint risk before you pay — decoy / zombie / price-trap / never-paid? Trust verdict in ~200ms before PAYMENT-SIGNATURE.
- **forensics** — Forensic x402 scam/risk report for a suspicious endpoint: probe history, signatures, decoy / price-trap patterns.
- **catalog_decoys** — Searchable catalog of x402 endpoint risk signals; scam-like decoys, zombies, and price-traps flagged.
- **buy_credits** — Prepaid credit pack for high-frequency x402 scam checks, preflight, and verified calls. Returns { creditId, balance, expiresAt }; use X-Credit-Id on subsequent preflight calls.
- **credits_status** — Free, no payment required. Returns { creditId, balance, initialBalance, used, paidAmount, createdAt, expiresAt, expired, paymentTx, paymentNetwork }. UUID-only access — anyone holding the creditId can read state, same as decrement. 404 covers both 'malformed UUID' and 'no such credit' (same body so an attacker scraping random UUIDs can't tell them apart).
- **whats_new** — Polling-friendly catalog diff. Body { since?, limit? } (default since=now-24h, limit=200, max 500). Returns added_endpoints[] (first_seen_at >= since AND is_active=true), removed_endpoints[] (flipped to is_active=false since), service-level counts, polls_in_window, and current active totals. Cheap ($0.001 USDC) so hourly polling stays under $1/month — perfect for aggregator agents that need a fresh delta without re-pulling the whole catalog. Internal ingest cron runs every 5 min, so polling more often than that returns identical data.
- **alternatives** — Avoid paying unsafe x402 endpoints: ranked safe alternatives for the same capability.
- **watch_subscribe** — Monitor x402 endpoint risk; webhook on scam-like decoy / zombie / price-trap status changes. Returns watchId + secret; x402station.io posts HMAC-SHA256-signed JSON when subscribed signals fire or clear.
- **watch_status** — Returns the current state of a watch: active/expired, alerts remaining (out of 100 prepaid), last 10 alert deliveries with their delivery_status, and the last computed signal snapshot. Free — no payment required, secret-gated. The secret is the one returned by watch_subscribe.
- **watch_unsubscribe** — Deactivates the watch — no further alerts will be queued or delivered. The subscription is set is_active=false but the row + alert history is retained for audit. Free — no payment required, secret-gated. There is no refund for unused prepaid alerts.

## Claude Desktop Quick Installation
Install path detected from listing signals. Uses `npx` (confidence: high):

```json
"mcpServers": {
  "x402station": {
    "command": "npx",
    "args": ["-y","x402station-mcp"],
    "env": {
      "AGENT_PRIVATE_KEY": "",
      "X402STATION_BASE_URL": ""
    }
  }
}
```

**Requires environment variables:** `AGENT_PRIVATE_KEY`, `X402STATION_BASE_URL` — the values above are empty placeholders; fill in real credentials before running (see the repository for what each one is for).

## Documentation

## What sF1nX/x402station MCP server does

The sF1nX/x402station MCP server gives MCP-compatible agents risk evidence about x402 payment endpoints. It is designed for the step immediately before an agent signs a `PAYMENT-SIGNATURE`, helping identify endpoints associated with decoys, zombie services, extreme or suspicious prices, dead services, slow responses, and endpoints with little or no payment history.

The service independently probes endpoints listed on agentic.market and combines probe history with CDP settlement data. Its role is measurement and reporting: it does not route payments, hold funds, or make policy decisions for the calling agent.

## How it works

An agent can call `preflight` with a URL for a quick verdict, or use `forensics` when it needs a deeper historical report. Preflight returns an `ok` result, warnings, and metadata such as service identity, price, recent uptime, and average latency. The result is intended to support the agent's own decision about whether to continue.

For broader screening, `catalog_decoys` returns active endpoints marked with critical risk signals and counts grouped by reason. An agent can cache that result and compare it with candidate URLs rather than issuing a separate check for every endpoint. `alternatives` provides ranked safer alternatives for a requested capability, while `whats_new` supplies changes to the endpoint catalog since a chosen time. The ingest process runs every five minutes, so more frequent polling may return unchanged data.

The sF1nX/x402station MCP server also supports monitoring. `watch_subscribe` creates a watch and returns an identifier plus secret; x402station.io sends HMAC-SHA256-signed JSON when subscribed risk signals change. `watch_status` reports the watch state, remaining alerts, recent delivery results, and the latest signal snapshot. `watch_unsubscribe` stops future deliveries while retaining the subscription and alert history.

## Setup and configuration

Run the adapter with `npx -y x402station-mcp`, or install it globally with npm. MCP hosts use a command, argument, and environment-variable configuration. The README provides configurations for Claude Code and describes the same structure for Cursor, Windsurf, and Continue.

Paid calls require `AGENT_PRIVATE_KEY`, containing a `0x`-prefixed 64-hex-character private key for an account holding Base mainnet USDC. The adapter charges real USDC through x402 for paid operations. `X402STATION_BASE_URL` is optional and defaults to `https://x402station.io`; it can override the service URL for development or testing.

## Tools and capabilities

The sF1nX/x402station MCP server exposes these operations:

- `preflight`: Performs a low-cost endpoint risk check before payment.
- `forensics`: Returns a deeper seven-day report with uptime, latency percentiles, status distributions, concentration statistics, and decoy probability.
- `catalog_decoys`: Lists active endpoints with critical warnings and per-reason totals.
- `alternatives`: Finds ranked alternatives for the same capability.
- `whats_new`: Reports recently added and removed endpoints, service counts, polling totals, and active catalog totals.
- `buy_credits`: Creates a prepaid credit pack and returns its identifier, balance, and expiration.
- `credits_status`: Shows credit usage and payment details when given the credit identifier.
- `watch_subscribe`, `watch_status`, and `watch_unsubscribe`: Create, inspect, and deactivate risk watches.

Preflight, forensics, and catalog operations have stated USDC prices. Credit and watch status or removal operations are free, while watch subscriptions include prepaid alert capacity. A free anonymous `preflight-trial` is also available for self-testing.

## Limitations and notes

Risk results are signals for an agent's policy engine, not a payment guarantee or endorsement. A new or unknown endpoint may have limited evidence, and checks can report latency, missing history, or other warnings that require application-specific handling. Credit identifiers and watch secrets should be protected: access is based on possession of the identifier or secret. Unused prepaid watch alerts are not refunded.

_Full upstream README: https://allmcps.com/mcp/sf1nx-x402station/readme_