The full upstream README, mirrored here for reference. Install config, tool schemas, adoption signals, and an original overview live on the TensorFeed x402 Base Reader listing page.
Read-only MCP server for verifying x402 USDC settlements on Base mainnet. Drop it into any MCP-compatible agent (Claude Desktop, Claude Code, Cursor, ChatGPT) to independently audit x402 payment receipts on-chain, parse publisher .well-known/x402 manifests, and check AFTA federation status. No private keys, no signing, no broadcasts.
Coinbase shipped Base MCP (the official mcp.base.org server, launched May 2026) as the transact-side MCP: it connects an agent to a Base Account and lets the agent propose swaps, transfers, and x402 payments that the user approves in-wallet.
This package, @tensorfeed/x402-base-mcp, is the verify-side MCP. Once an x402 payment has been made (by Base MCP, by a server-side @coinbase/x402 middleware, or by any other x402 client), this server lets the calling agent independently check the on-chain settlement, parse the publisher's /.well-known/x402 manifest, and audit the receipt. Read-only chain visibility, no wallet.
The two are complementary, not competing. Use Base MCP to pay. Use this MCP to verify.
x402 is a payment protocol where agents pay merchants in USDC on Base for paid API responses. When an agent receives a payment receipt back, it has two options for confirming that the settlement actually happened the way the receipt claims:
Most existing EVM MCP servers either require a private key (so the agent can also send transactions, which is operationally risky and unnecessary for verification), or are generic multi-chain readers that don't speak x402. This server is the read-only, x402-aware option. Drop it into a Claude Desktop or Claude Code session and any agent can verify x402 payments without operating a wallet.
The TensorFeed-flavor tools (verify_afta_federation, tf_payment_lookup) compose the same primitives against TF's canonical surfaces and demonstrate the pattern. Use them or ignore them; the generic tools work fine on their own.
Add to claude_desktop_config.json:
The server defaults to the public Base RPC (https://mainnet.base.org), which is fine for casual use. For heavier workloads, set an Alchemy or Infura URL via TENSORFEED_RPC_URL. The URL must match the allowlist in src/rpc/allowlist.ts; anything else falls back to the public endpoint and logs a warning to stderr.
Affiliate links if you don't already have an account:
| Tool | Description |
|---|---|
balance | Native ETH balance for an address |
usdc_balance | USDC (Circle native bridged) balance for an address |
block_number | Latest Base block number |
get_tx_receipt | Full tx receipt with status, gas, and logs summary |
call | Read-only contract call (eth_call, never broadcasts) |
recent_transfers | USDC Transfer events involving an address over N blocks |
| Tool | Description |
|---|---|
verify_x402_settlement | Given a tx hash, expected recipient, and expected USDC amount, returns a structured verdict on whether the on-chain Transfer event matches. |
parse_x402_manifest | Fetches https://{domain}/.well-known/x402.json, returns the structured manifest. |
usdc_recent_payments_to | USDC transfers TO an address over N blocks; the merchant-side view. |
probe_x402_endpoint | Probes any https URL and reports whether it returns a canonical x402-paid 402 response with accepts[]. |
decode_x402_payment_payload | Offline decode of a base64 X-PAYMENT header (Coinbase x402 V2): returns scheme, network, version, EIP-3009 authorization, signature. |
| Tool | Description |
|---|---|
verify_afta_federation | Calls TensorFeed's AFTA certification endpoint for a domain, returns a scored checklist. |
tf_payment_lookup | Checks whether a tx hash is a USDC payment to TensorFeed's canonical wallet on Base. |
x402_publisher_health | Returns current outcome + 24h/7d uptime + recent series for a domain monitored by TensorFeed's hourly x402 status probe. |
afta_federation_members | Returns the canonical curated list of confirmed AFTA federation members (TF origin + federated members). |
Verify an x402 settlement (works on TensorFeed's first canonical V2 payment):
Inspect a publisher's x402 manifest:
Check AFTA certification:
Read-only chain-visibility MCP. The full picture is in SECURITY.md; the short version:
_origin: "external" marker so the calling agent knows the value came from a third party.npm audit signatures.Report security issues to security@tensorfeed.ai. Please do not file a public issue or CVE for an unfixed vulnerability.
MIT