# true402/mcp-server [Health: Active]

**Category:** 💰 Finance & Fintech  
**Repository:** https://github.com/true402/mcp-server  
**GitHub Stars:** 0  
**Views:** 3  
**Installs:** 0  
**Upvotes:** 0  
**Directory Page:** https://allmcps.com/mcp/true402-mcp-server

## Description
Pay-per-call AI + web + on-chain tools for agents over x402 (USDC on Base) — no accounts, no API keys; the wallet is the identity. 11 tools incl. token rug/honeypot safety (0–100 score, risk band, buy/sell simulation), new-pairs / liquidity-pull / whale-swap signals, SEO/GEO audit, web extract, link preview, robots & security-headers checks, and LLM inference. Tools auto-discover from the live catalog. npx -y @true402.dev/mcp-server

## Tools
Capabilities this server exposes over MCP:

- **list_models** — List every LLM model available through true402's pay-per-call inference, with live per-token pricing (3% over provider cost, min $0.0001/request). Returns each model's id, provider, and input/output token prices across OpenAI, Anthropic, Google, Groq, Mistral and Together — so an agent can pick a model and know the exact cost before paying via x402 (USDC on Base, no account or API key).
- **chat** — Send a chat completion request to an LLM via true402 (PAID x402 service, USDC on Base). Requires a funded wallet (WALLET_PRIVATE_KEY) on the MCP server.
- **seo_audit** — Audit web pages for SEO + GEO (generative-engine optimization). POST `{ url, mode? }` for a single page, or `{ urls: [...], mode? }` to audit several in one call — priced per page ($0.04/page, up to 5 pages per request on this deployment). An unpaid request returns 402 with payment requirements. After payment, a single `url` returns a flat report (per-category scores + issues); `urls` returns `{ count, succeeded, pages: [...] }`. (PAID x402 service — USDC on Base; the MCP server needs a funded wallet to settle.) Price: $0.04–$0.2 USD/page (DYNAMIC — can exceed a fixed MAX_PAYMENT_USDC ceiling; raise it if a call is refused).
- **web_extract** — Fetch a web page and return clean readable text + light markdown + title/description/links. POST `{ url }`; an unpaid request returns 402. Flat-priced per request. (PAID x402 service — USDC on Base; the MCP server needs a funded wallet to settle.) Price: $0.005 USD (fixed).
- **link_preview** — Fetch a URL and return its Open Graph card (title, description, image, site name, favicon, canonical). POST `{ url }`; an unpaid request returns 402. Flat-priced per request. (PAID x402 service — USDC on Base; the MCP server needs a funded wallet to settle.) Price: $0.003 USD (fixed).
- **screenshot** — Render a web page in headless Chromium and return a PNG screenshot as base64 JSON. POST `{ url, fullPage?, width? }`; an unpaid request returns 402. Flat-priced per request. (PAID x402 service — USDC on Base; the MCP server needs a funded wallet to settle.) Price: $0.01 USD (fixed).
- **quant** — Deterministic finance calculators in one dispatch endpoint. POST `{ function, params }` where function ∈ {black_scholes, implied_volatility, kelly, sharpe, sortino, max_drawdown, historical_var, cvar, cagr, volatility}. e.g. black_scholes params {S,K,T,r,sigma,type}; kelly {p,b}; sharpe {returns[],rf?}. Unpaid: free while the caller's IP has free-trial calls left that day (a small daily allowance shared across the trial stalls, no wallet); otherwise returns 402. Flat-priced per request. (PAID x402 service — USDC on Base; the MCP server needs a funded wallet to settle.) Price: $0.003 USD (fixed).
- **prediction_markets** — Keyword-search live prediction markets across Polymarket, Limitless, and Manifold; returns normalized markets (probability outcomes, USD volume, close date). POST `{ query, limit? }`. Unpaid: free while the caller's IP has free-trial calls left that day (a small daily allowance shared across the trial stalls, no wallet); otherwise returns 402. Flat-priced per request. (PAID x402 service — USDC on Base; the MCP server needs a funded wallet to settle.) Price: $0.005 USD (fixed).
- **defi_yields** — Filter + rank live DeFi lending/staking pool APYs across every protocol/chain (DefiLlama, ~15k pools). POST `{ chain?, project?, asset?, stablecoinOnly?, minTvlUsd?, includeOutliers?, limit? }`; returns pools sorted by APY (percent units, apyBase/apyReward split), TVL, stablecoin + ilRisk flags, and the DefiLlama poolId. Exploit-y outlier pools excluded by default. Unpaid: free while the caller's IP has free-trial calls left that day (a small daily allowance shared across the trial stalls, no wallet); otherwise returns 402. Flat-priced per request. (PAID x402 service — USDC on Base; the MCP server needs a funded wallet to settle.) Price: $0.005 USD (fixed).
- **backlinks** — A domain's backlink profile: referring domains and pages, the dofollow split that carries authority, authority rank, spam score, broken backlinks, and link composition by TLD, type, attribute and country. POST `{ target }`; unpaid returns 402. (PAID x402 service — USDC on Base; the MCP server needs a funded wallet to settle.) Price: $0.1 USD (fixed).
- **keyword_volume** — Monthly search volume, CPC and competition for a batch of keywords, with a 12-month trend per term. Send up to 200 keywords in ONE call — they are priced per call, not per keyword. POST `{ keywords }`; unpaid returns 402. (PAID x402 service — USDC on Base; the MCP server needs a funded wallet to settle.) Price: $0.15 USD (fixed).
- **ranked_keywords** — Which keywords a domain already ranks for in organic search, with position, search volume, CPC and competition. POST `{ target }`; unpaid returns 402. (PAID x402 service — USDC on Base; the MCP server needs a funded wallet to settle.) Price: $0.05 USD (fixed).
- **keyword_ideas** — Related and long-tail keyword ideas for a seed term, each with search volume, CPC, competition and search intent. POST `{ seed }`; unpaid returns 402. (PAID x402 service — USDC on Base; the MCP server needs a funded wallet to settle.) Price: $0.05 USD (fixed).
- **robots_check** — Fetch a site's robots.txt + llms.txt and report whether the major AI crawlers are allowed/blocked, plus sitemaps. POST `{ url }`; unpaid returns 402. (PAID x402 service — USDC on Base; the MCP server needs a funded wallet to settle.) Price: $0.003 USD (fixed).
- **headers_check** — Fetch a URL and analyse its HTTP security headers (HSTS, CSP, X-Frame-Options, …) into present/missing + a 0–100 score. POST `{ url }`; unpaid returns 402. (PAID x402 service — USDC on Base; the MCP server needs a funded wallet to settle.) Price: $0.003 USD (fixed).
- **token_safety** — Rug/honeypot safety check for an ERC-20 token on Base (from on-chain reads — no API key): ERC-20 conformance, ownership renounce, mint-capability, WETH/USDC liquidity depth across Uniswap V3 + Aerodrome, and a buy/sell honeypot simulation (a gas-free eth_call that round-trips a tiny WETH→token→WETH trade to detect tokens you can buy but not sell). Returns a 0–100 score + risk flags. POST `{ token }`. Unpaid: free while the caller's IP has free-trial calls left that day (a small daily allowance shared across the trial stalls, no wallet); otherwise returns 402. (PAID x402 service — USDC on Base; the MCP server needs a funded wallet to settle.) Price: $0.005 USD (fixed).
- **new_pairs** — Recently-created Base DEX pairs (Uniswap V3 + Aerodrome) from a background log-watcher — fresh token launches for trading agents/snipers. POST `{ since?, limit?, dex?, withToken? }`; each pair gives the new token, quote (WETH/USDC), pool, fee|stable, block + approx age. Bundle with /v1/token-safety for a pre-trade rug/honeypot check. Unpaid: free while the caller's IP has free-trial calls left that day (a small daily allowance shared across the trial stalls, no wallet); otherwise returns 402. (PAID x402 service — USDC on Base; the MCP server needs a funded wallet to settle.) Price: $0.003 USD (fixed).
- **liquidity_pulls** — Liquidity-pull / rug alerts on Base — Burn (liquidity-removal) events on recently-launched DEX pools (the new-pairs watcher's set). POST `{ since?, limit?, dex?, minQuote? }`; each event gives the pool, token, and WETH/USDC amount removed (the rug magnitude). Cross-check the token with /v1/token-safety. Unpaid: free while the caller's IP has free-trial calls left that day (a small daily allowance shared across the trial stalls, no wallet); otherwise returns 402. (PAID x402 service — USDC on Base; the MCP server needs a funded wallet to settle.) Price: $0.003 USD (fixed).
- **liquidity_history** — Observed liquidity history for a Base token, from our own DEX archive. POST `{ token, limit? }` returns every pool we have indexed for it, every liquidity-removal event with the amount removed, block and transaction hash, and the other tokens drained in the SAME transaction (one actor, several pools). Unlike a live honeypot simulation this answers what ALREADY happened — a pool drained last month simulates fine today if it was re-seeded. Every answer carries `coverage`, the exact block range our removal index covers, so an absence of removals is never presented as a clean bill of health. Unpaid: free while the caller's IP has free-trial calls left that day (a small daily allowance shared across the trial stalls, no wallet); otherwise returns 402. (PAID x402 service — USDC on Base; the MCP server needs a funded wallet to settle.) Price: $0.005 USD (fixed).
- **tx_preflight** — Check a Base transaction BEFORE signing it. POST an UNSIGNED transaction `{ from, to, data?, value? }` and get three independent lenses: simulation against current state (does it revert?), decoded intent (is this an unlimited approval that outlives the trade?), and the counterparty liquidity-removal history from our own archive. Takes NO private key and NO signature, so the service cannot broadcast or front-run the transaction it inspects — a deliberate security property. It never returns "safe": a clean result means these checks found nothing, and the `limits` array says so in every response. Unpaid: free while the caller's IP has free-trial calls left that day (a small daily allowance shared across the trial stalls, no wallet); otherwise returns 402. (PAID x402 service — USDC on Base; the MCP server needs a funded wallet to settle.) Price: $0.008 USD (fixed).
- **whale_swaps** — Recent large ($-value) DEX Swap events (Uniswap V3 + Aerodrome) on the Base pools the new-pairs watcher tracks — a whale-following / copy-trading signal. POST `{ min?, dex?, since?, limit?, direction? }`; each swap gives the pool, token, quote (WETH/USDC), USD size, direction (buy/sell of the token), block + approx age, txHash. usdValue is the quote side (WETH×ETH-USD or USDC). Unpaid: free while the caller's IP has free-trial calls left that day (a small daily allowance shared across the trial stalls, no wallet); otherwise returns 402. (PAID x402 service — USDC on Base; the MCP server needs a funded wallet to settle.) Price: $0.005 USD (fixed).
- **token_dossier** — Everything we know about a Base ERC-20, in one call. Contains the full Token Report (ERC-20 conformance, ownership, mint-capability, liquidity depth, buy/sell honeypot simulation, live rug + whale activity, avoid|caution|ok verdict) PLUS two sections the cheaper report cannot carry: the deployer's reputation (wallet age, prior deployments) and the durable liquidity archive for this token (every pool, every removal with amount/block/tx, and the other tokens drained in the SAME transaction — operator linkage). Those two are what distinguish a bad token from a serial rugger. Each section reports its own status and `limits[]` names what could NOT be established, because a silently missing section reads as reassurance. The verdict is inherited from the Token Report and may only be escalated, never softened. POST `{ token }`. No free trial on this stall. (PAID x402 service — USDC on Base; the MCP server needs a funded wallet to settle.) Price: $0.1 USD (fixed).
- **token_report** — The flagship composite for a Base ERC-20 — one call instead of five. Runs the full token-safety check (ERC-20 conformance, ownership, mint-capability, WETH/USDC liquidity depth, buy/sell honeypot simulation), enriches it with the live recent liquidity-removal (rug) + whale-swap activity on the token, and returns a single avoid|caution|ok verdict with reasons plus the underlying reports. POST `{ token }`. Cheaper than buying token-safety + liquidity-pulls + whale-swaps separately. Unpaid: free while the caller's IP has free-trial calls left that day (a small daily allowance shared across the trial stalls, no wallet); otherwise returns 402. (PAID x402 service — USDC on Base; the MCP server needs a funded wallet to settle.) Price: $0.01 USD (fixed).
- **address_safety** — Structural safety profile for ANY Base address — an EOA or an arbitrary contract — before an agent sends funds to it, approves it, or calls it. Returns contract-vs-EOA, ETH + USDC balance, tx-count (activity), and for contracts: whether it is a recognised ERC-20, ownership state, a mint() selector, and whether it is an EIP-1967 upgradeable proxy (its logic can be swapped after you trust it). Coarse risk band + flags. On-chain reads only — no API key. POST `{ address }`. Unpaid: free while the caller's IP has free-trial calls left that day (a small daily allowance shared across the trial stalls, no wallet); otherwise returns 402. (PAID x402 service — USDC on Base; the MCP server needs a funded wallet to settle.) Price: $0.005 USD (fixed).
- **deployer_check** — Resolves the deployer of a Base token and profiles that wallet's reputation: age (tx-count), balance, contracts shipped, and whether it is a FRESH throwaway spun up for the launch (a common rug setup) — the discriminating caution. Reputation context a structural/honeypot check can't see; raw contract count is reported as context, NOT a rug verdict (legit protocols ship many). POST `{ token }`. Unpaid returns 402 — no free trial on this stall, it is paid from the first call. Requires an explorer key on the server; returns 503 if not configured (and is not charged). (PAID x402 service — USDC on Base; the MCP server needs a funded wallet to settle.) Price: $0.008 USD (fixed).
- **token_safety_ethereum** — Rug/honeypot safety check for an ERC-20 token on Ethereum (from on-chain reads — no API key): ERC-20 conformance, ownership renounce, mint-capability, WETH/USDC liquidity depth across uniswap-v3 + uniswap-v2, and a buy/sell honeypot simulation (a gas-free eth_call that round-trips a tiny WETH→token→WETH trade to detect tokens you can buy but not sell). Returns a 0–100 score + risk flags. POST `{ token }`. Unpaid: free while the caller's IP has free-trial calls left that day (a small daily allowance shared across the trial stalls, no wallet); otherwise returns 402. (PAID x402 service — USDC on Base; the MCP server needs a funded wallet to settle.) Price: $0.005 USD (fixed).
- **token_report_ethereum** — The flagship composite for a Ethereum ERC-20 — one call instead of five. Runs the full token-safety check (ERC-20 conformance, ownership, mint-capability, WETH/USDC liquidity depth, buy/sell honeypot simulation), enriches it with the live recent liquidity-removal (rug) + whale-swap activity on the token, and returns a single avoid|caution|ok verdict with reasons plus the underlying reports. POST `{ token }`. Cheaper than buying token-safety + liquidity-pulls + whale-swaps separately. Unpaid: free while the caller's IP has free-trial calls left that day (a small daily allowance shared across the trial stalls, no wallet); otherwise returns 402. (PAID x402 service — USDC on Base; the MCP server needs a funded wallet to settle.) Price: $0.01 USD (fixed).
- **address_safety_ethereum** — Structural safety profile for ANY Ethereum address — an EOA or an arbitrary contract — before an agent sends funds to it, approves it, or calls it. Returns contract-vs-EOA, ETH + USDC balance, tx-count (activity), and for contracts: whether it is a recognised ERC-20, ownership state, a mint() selector, and whether it is an EIP-1967 upgradeable proxy (its logic can be swapped after you trust it). Coarse risk band + flags. On-chain reads only — no API key. POST `{ address }`. Unpaid: free while the caller's IP has free-trial calls left that day (a small daily allowance shared across the trial stalls, no wallet); otherwise returns 402. (PAID x402 service — USDC on Base; the MCP server needs a funded wallet to settle.) Price: $0.005 USD (fixed).
- **deployer_check_ethereum** — Resolves the deployer of a Ethereum token and profiles that wallet's reputation: age (tx-count), balance, contracts shipped, and whether it is a FRESH throwaway spun up for the launch (a common rug setup) — the discriminating caution. Reputation context a structural/honeypot check can't see; raw contract count is reported as context, NOT a rug verdict (legit protocols ship many). POST `{ token }`. Unpaid returns 402 — no free trial on this stall, it is paid from the first call. Requires an explorer key on the server; returns 503 if not configured (and is not charged). (PAID x402 service — USDC on Base; the MCP server needs a funded wallet to settle.) Price: $0.008 USD (fixed).
- **token_safety_bsc** — Rug/honeypot safety check for an ERC-20 token on BNB Smart Chain (BSC) (from on-chain reads — no API key): ERC-20 conformance, ownership renounce, mint-capability, WBNB/USDC liquidity depth across pancakeswap-v3 + pancakeswap-v2, and a buy/sell honeypot simulation (a gas-free eth_call that round-trips a tiny WETH→token→WETH trade to detect tokens you can buy but not sell). Returns a 0–100 score + risk flags. POST `{ token }`. Unpaid: free while the caller's IP has free-trial calls left that day (a small daily allowance shared across the trial stalls, no wallet); otherwise returns 402. (PAID x402 service — USDC on Base; the MCP server needs a funded wallet to settle.) Price: $0.005 USD (fixed).
- **token_report_bsc** — The flagship composite for a BNB Smart Chain (BSC) ERC-20 — one call instead of five. Runs the full token-safety check (ERC-20 conformance, ownership, mint-capability, WBNB/USDC liquidity depth, buy/sell honeypot simulation), enriches it with the live recent liquidity-removal (rug) + whale-swap activity on the token, and returns a single avoid|caution|ok verdict with reasons plus the underlying reports. POST `{ token }`. Cheaper than buying token-safety + liquidity-pulls + whale-swaps separately. Unpaid: free while the caller's IP has free-trial calls left that day (a small daily allowance shared across the trial stalls, no wallet); otherwise returns 402. (PAID x402 service — USDC on Base; the MCP server needs a funded wallet to settle.) Price: $0.01 USD (fixed).
- **address_safety_bsc** — Structural safety profile for ANY BNB Smart Chain (BSC) address — an EOA or an arbitrary contract — before an agent sends funds to it, approves it, or calls it. Returns contract-vs-EOA, ETH + USDC balance, tx-count (activity), and for contracts: whether it is a recognised ERC-20, ownership state, a mint() selector, and whether it is an EIP-1967 upgradeable proxy (its logic can be swapped after you trust it). Coarse risk band + flags. On-chain reads only — no API key. POST `{ address }`. Unpaid: free while the caller's IP has free-trial calls left that day (a small daily allowance shared across the trial stalls, no wallet); otherwise returns 402. (PAID x402 service — USDC on Base; the MCP server needs a funded wallet to settle.) Price: $0.005 USD (fixed).
- **token_safety_solana** — Rug/trap safety check for a Solana SPL or Token-2022 token: mint authority (supply inflation), freeze authority (the Solana honeypot — the issuer can freeze your token account so you cannot sell), Token-2022 extensions (permanentDelegate = tokens can be moved out of your wallet, transferHook = issuer code can reject your transfer, transferFee) and pool liquidity depth. Returns a 0–100 score + risk flags. POST `{ token }` with a base58 mint. NOT a buy/sell simulation: Solana has no EVM bytecode, so the eth_call round-trip the Base/Ethereum/BSC stalls run does not exist here. Unpaid: free while the caller's IP has free-trial calls left that day (a small daily allowance shared across the trial stalls, no wallet); otherwise returns 402. (PAID x402 service — USDC on Base; the MCP server needs a funded wallet to settle.) Price: $0.005 USD (fixed).

## Claude Desktop Quick Installation
Install path detected from listing signals. Uses `npx` (confidence: high):

```json
"mcpServers": {
  "mcp-server": {
    "command": "npx",
    "args": ["-y","@true402.dev/mcp-server"],
    "env": {
      "WALLET_PRIVATE_KEY": "",
      "SERVER_URL": "",
      "MAX_PAYMENT_USDC": ""
    }
  }
}
```

**Requires environment variables:** `WALLET_PRIVATE_KEY`, `SERVER_URL`, `MAX_PAYMENT_USDC` — the values above are empty placeholders; fill in real credentials before running (see the repository for what each one is for).

## Documentation

## What true402/mcp-server MCP server does

The true402/mcp-server MCP server connects MCP clients to the true402 machine-native marketplace. It exposes tools for LLM inference, web and SEO analysis, deterministic finance calculations, prediction markets, DeFi yields, and blockchain safety checks. The catalog includes both free discovery functions and paid operations whose prices are returned through x402 payment challenges.

Blockchain coverage includes Base, Ethereum, and selected BNB Smart Chain token checks. Depending on the tool, an agent can inspect ERC-20 behavior, liquidity, ownership, mint capability, honeypot behavior, deployer reputation, liquidity removals, whale swaps, or the safety of an unsigned transaction. Web tools can extract page text, preview links, render screenshots, inspect robots and llms policies, and score HTTP security headers.

## How it works

The true402/mcp-server MCP server sends a tool request to the true402 API. For a paid operation, the API returns HTTP 402 with the exact payment terms. When a wallet is configured, the server signs an EIP-3009 USDC authorization on Base, retries with the payment header, and settlement occurs on-chain. The facilitator sponsors gas, so the configured wallet needs USDC but does not need ETH for gas.

Each authorization buys one response. Payment is submitted only after a successful 2xx response, and calls that error or time out are not settled. The server enforces MAX_PAYMENT_USDC as a per-call ceiling; requests above that limit are refused before payment. Tool prices can change, and the live 402 response is authoritative.

## Setup and configuration

The package runs over stdio and requires Node.js 20 or newer. A typical MCP client configuration uses `npx -y @true402.dev/mcp-server`. Claude Desktop, Claude Code, Cursor, Cline, and other MCP clients can use the same command pattern.

Environment settings include:

- `WALLET_PRIVATE_KEY`: a funded Base wallet key for automatic x402 payments. The key is read from the environment and is not logged or returned.
- `SERVER_URL`: API base URL, defaulting to `https://true402.dev/api`; it can point to a self-hosted instance.
- `MAX_PAYMENT_USDC`: maximum amount allowed for one call, defaulting to `0.25`.

A wallet is not needed to start the process. Without one, paid tools return their payment requirements rather than completing the payment. The documentation recommends using a dedicated, low-balance wallet.

## Tools and capabilities

The true402/mcp-server MCP server includes `list_models` for live model IDs and token prices, and `chat` for paid LLM completions across several providers. Other capabilities include:

- SEO/GEO audits, keyword volume and ideas, ranked keywords, and backlink reports.
- Web extraction, Open Graph link previews, screenshots, robots and llms checks, and security-header analysis.
- Black-Scholes, volatility, Sharpe, Sortino, Kelly, drawdown, VaR, CVaR, and CAGR calculations.
- Prediction-market search and DeFi pool filtering with APY, TVL, stablecoin, and risk fields.
- Token reports, address and deployer checks, new-pair discovery, liquidity alerts and history, whale swaps, and unsigned transaction preflight.

Tools are auto-discovered from the live catalog, so the available set may change without a package update.

## Limitations and notes

Most operations are paid in USDC on Base, although some have a small per-IP daily free allowance. `list_models` is free. `seo_audit` is priced per page and can exceed a normal per-call ceiling when auditing multiple pages, so the ceiling may need adjustment. `deployer_check` requires an explorer key on the service side and can return 503 when that configuration is absent.

On-chain safety results are assessments, not guarantees. For example, `tx_preflight` checks simulation, decoded intent, and archived counterparty liquidity activity but never labels a transaction safe. Historical liquidity coverage is limited to the indexed block range, and a clean result means only that the reported checks found no issue.

_Full upstream README: https://allmcps.com/mcp/true402-mcp-server/readme_

