Log inSubmit server
X402station logo

X402station

by sF1nX

Checks x402 endpoints for scams, service failures, price traps, and safer alternatives before agents make payments.

InstallRepositoryWebsite
Full README Compare alternatives Embed widget Claim this listing

Install X402station

Pick your client, then add it in one click or paste the config.

STDIONode.js
~/Library/Application Support/Claude/claude_desktop_config.json
claude_desktop_config.json
{
  "mcpServers": {
    "sf1nx-x402station": {
      "command": "npx",
      "args": [
        "-y",
        "x402station-mcp"
      ],
      "env": {
        "AGENT_PRIVATE_KEY": "YOUR_VALUE_HERE",
        "X402STATION_BASE_URL": "YOUR_VALUE_HERE"
      }
    }
  }
}

Settings → Developer → Edit Config, merge this into mcpServers, then fully quit and reopen Claude Desktop.

Values are written into the snippet above so you can paste it as is. They never leave your browser.

Install not yet sandbox-tested— the server itself is confirmed live (we called its tools/list endpoint). The stdio install command is a separate, ongoing check.

Overview

The sF1nX/x402station MCP server connects agents to x402station.io for endpoint risk checks before signing PAYMENT-SIGNATURE. Its tools inspect uptime, latency, payment history, pricing signals, decoy patterns, alternatives, catalog changes, and ongoing watch alerts. Paid checks use USDC through x402, while credit and watch status operations are free. Use it when an agent must evaluate unfamiliar x402 services before paying.

Use cases

  • Preflight unfamiliar x402 URLs before signing payments
  • Inspect suspicious endpoints with seven-day forensic data
  • Cache catalog decoys for bulk candidate screening
  • Find safer alternatives to risky services
  • Monitor endpoint risk changes with signed webhooks

Key features

  • Endpoint preflight risk verdicts
  • Seven-day forensic reports
  • Decoy and price-trap catalog
  • Ranked service alternatives
  • Catalog change polling
  • Webhook-based risk monitoring

Tools10

What X402station lets your agent do. Expand a tool for its parameters.

Verified live~1.6k tokens of context

Security & health

What it can reach and how reliably it runs — from our own checks, not the maintainer’s claims.

ActiveLast checked Today

Recent health check succeeded.

6/7 checks healthy over the last 78d

Supply-chain signal

No high-severity advisories surfaced by our automated scan.

Critical 0High 0Medium 0Low 0

Scanned 7d ago via OSV.dev · x402station-mcp (npm)

Adoption & maintenance

Factual signals from GitHub, npm, and our automated checks — not a rating.

GitHub stars3Stargazers on the source repository.
npm downloads432Package downloads in the last 30 days.
Last commit4mo agoMost recent push to the default branch.
Tools exposed10Callable tools this server registers over MCP.
Directory activity1 viewsConfig copies, upvotes, and views on AllMCPs.

How X402station works

What sF1nX/x402station MCP server does

The sF1nX/x402station MCP server gives MCP-compatible agents risk evidence about x402 payment endpoints. It is designed for the step immediately before an agent signs a PAYMENT-SIGNATURE, helping identify endpoints associated with decoys, zombie services, extreme or suspicious prices, dead services, slow responses, and endpoints with little or no payment history.

The service independently probes endpoints listed on agentic.market and combines probe history with CDP settlement data. Its role is measurement and reporting: it does not route payments, hold funds, or make policy decisions for the calling agent.

How it works

An agent can call preflight with a URL for a quick verdict, or use forensics when it needs a deeper historical report. Preflight returns an ok result, warnings, and metadata such as service identity, price, recent uptime, and average latency. The result is intended to support the agent's own decision about whether to continue.

For broader screening, catalog_decoys returns active endpoints marked with critical risk signals and counts grouped by reason. An agent can cache that result and compare it with candidate URLs rather than issuing a separate check for every endpoint. alternatives provides ranked safer alternatives for a requested capability, while whats_new supplies changes to the endpoint catalog since a chosen time. The ingest process runs every five minutes, so more frequent polling may return unchanged data.

The sF1nX/x402station MCP server also supports monitoring. watch_subscribe creates a watch and returns an identifier plus secret; x402station.io sends HMAC-SHA256-signed JSON when subscribed risk signals change. watch_status reports the watch state, remaining alerts, recent delivery results, and the latest signal snapshot. watch_unsubscribe stops future deliveries while retaining the subscription and alert history.

Setup and configuration

Run the adapter with npx -y x402station-mcp, or install it globally with npm. MCP hosts use a command, argument, and environment-variable configuration. The README provides configurations for Claude Code and describes the same structure for Cursor, Windsurf, and Continue.

Paid calls require AGENT_PRIVATE_KEY, containing a 0x-prefixed 64-hex-character private key for an account holding Base mainnet USDC. The adapter charges real USDC through x402 for paid operations. X402STATION_BASE_URL is optional and defaults to https://x402station.io; it can override the service URL for development or testing.

Tools and capabilities

The sF1nX/x402station MCP server exposes these operations:

  • preflight: Performs a low-cost endpoint risk check before payment.
  • forensics: Returns a deeper seven-day report with uptime, latency percentiles, status distributions, concentration statistics, and decoy probability.
  • catalog_decoys: Lists active endpoints with critical warnings and per-reason totals.
  • alternatives: Finds ranked alternatives for the same capability.
  • whats_new: Reports recently added and removed endpoints, service counts, polling totals, and active catalog totals.
  • buy_credits: Creates a prepaid credit pack and returns its identifier, balance, and expiration.
  • credits_status: Shows credit usage and payment details when given the credit identifier.
  • watch_subscribe, watch_status, and watch_unsubscribe: Create, inspect, and deactivate risk watches.

Preflight, forensics, and catalog operations have stated USDC prices. Credit and watch status or removal operations are free, while watch subscriptions include prepaid alert capacity. A free anonymous preflight-trial is also available for self-testing.

Limitations and notes

Risk results are signals for an agent's policy engine, not a payment guarantee or endorsement. A new or unknown endpoint may have limited evidence, and checks can report latency, missing history, or other warnings that require application-specific handling. Credit identifiers and watch secrets should be protected: access is based on possession of the identifier or secret. Unused prepaid watch alerts are not refunded.

Read the full README View source on GitHub

Reviews

No reviews yet — be the first to share how it worked for you.

Frequently Asked Questions about X402station

sF1nX/x402station is an MCP server that connects agents to x402station.io for endpoint risk intelligence before x402 payments. Its main tools include preflight checks, forensic reports, decoy catalog searches, safer alternatives, catalog updates, prepaid credits, and webhook-based endpoint monitoring.

Install it with npm or run it directly with npx. Use `npx -y x402station-mcp` in the MCP host configuration, or install it globally with `npm install -g x402station-mcp`, then provide the required environment configuration.

Yes, sF1nX/x402station works with Cursor. Configure it using the standard MCP `command`, `args`, and `env` fields, using `npx -y x402station-mcp` as the command setup and supplying the required private key for paid calls.

`AGENT_PRIVATE_KEY` is required for paid tool calls and must contain a 0x-prefixed 64-hex-character private key for an account with Base mainnet USDC. `X402STATION_BASE_URL` is optional and defaults to `https://x402station.io`.

Use `watch_subscribe` to create a watch for an endpoint. The service returns a watch ID and secret, then sends HMAC-SHA256-signed JSON when subscribed risk signals fire or clear; use `watch_status` to inspect delivery state and `watch_unsubscribe` to stop alerts.

Related MCP servers

All in Aggregators All alternatives
Add a badge to your READMEShow it’s listed — live SVG, Markdown or HTML.

AllMCPs Directory Badge

Full Badge Customizer

Showcase your server listing on GitHub or your project documentation. Embed this dynamic SVG badge to highlight official listing status and live engagement.

Badge Style:
Live Dynamic SVG PreviewX402station AllMCPs Directory Badge
Markdown (GitHub README)
[![AllMCPs](https://allmcps.com/api/badge/sf1nx-x402station?style=directory)](https://allmcps.com/mcp/sf1nx-x402station)
HTML Embed
<a href="https://allmcps.com/mcp/sf1nx-x402station"><img src="https://allmcps.com/api/badge/sf1nx-x402station?style=directory" alt="X402station on AllMCPs" /></a>