x402station-mcp
x402station-mcp
MCP adapter for x402station.io — infrastructure for x402 agentic commerce. Exposes Preflight by x402station.io (the active flagship product, Evaluate direction) plus tools across all six capability directions: Discover (Catalog), Evaluate (Preflight), Pay (Credits), Monitor (Watch), Recover (Alternatives), Analyze (Forensics). Any agent speaking the Model Context Protocol gets one-call safety before signing PAYMENT-SIGNATURE — flags decoys, zombie services, dead endpoints, and price traps before paying them.
x402station.io independently probes every endpoint listed on agentic.market every 10 minutes — it sees what facilitator-based monitors can't, including endpoints priced ≥ $1,000 USDC that function as anti-scraper honeypots.
Install
# Claude Code / Cursor / Windsurf / Continue — works anywhere with MCP
npm install -g x402station-mcp
# or use npx in the config, no global install needed:
Configure
The adapter charges real USDC per call (via x402 itself — our oracle is dogfooded). You need a wallet private key that holds Base Sepolia USDC (or Base mainnet once we switch).
Claude Code
Add to ~/.claude/claude_desktop_config.json (or wherever your MCP servers live):
{
"mcpServers": {
"x402station": {
"command": "npx",
"args": ["-y", "x402station-mcp"],
"env": {
"AGENT_PRIVATE_KEY": "0xYOUR_PRIVATE_KEY_HERE"
}
}
}
}
Cursor / Windsurf / Continue
Same shape — every MCP host understands command / args / env. See your tool's MCP docs.
Environment
| Variable | Required | Default | Purpose |
|---|---|---|---|
AGENT_PRIVATE_KEY | yes for any tool call | — | 0x-prefixed 64-hex-char private key. Account must hold Base Sepolia USDC. |
X402STATION_BASE_URL | no | https://x402station.io | Override for dev / testing. |
Testnet USDC for the wallet: faucet.circle.com (pick Base Sepolia).
Tools
preflight(url) — $0.001 USDC
Ask whether it's safe to pay this x402 URL. Returns:
{
"ok": true,
"warnings": [],
"metadata": {
"service": "...",
"price_usdc": "0.01",
"uptime_1h_pct": 100,
"avg_latency_ms": 412
}
}
ok is true only when no critical warning fires. Warnings: unknown_endpoint, no_history, dead, zombie, decoy_price_extreme, suspicious_high_price, slow, new_provider.
forensics(url) — $0.001 USDC
Deep 7-day report. Superset of preflight. Returns hourly uptime, latency p50/p90/p99, status-code distribution, concentration-group stats, decoy probability. Extra warnings: dead_7d, mostly_dead, slow_p99, price_outlier_high, high_concentration.
catalog_decoys() — $0.005 USDC
Full blacklist. Returns every active endpoint currently flagged critical, plus per-reason counts. Pull periodically and cache locally — cheaper than preflighting every URL.
Typical agent flow
agent wants data from some_endpoint.com
│
├─ preflight("https://some_endpoint.com/data") ← $0.001
│ ok: false, warnings: ["decoy_price_extreme"]
│
└─ skip; try the next candidate
For bulk discovery, do catalog_decoys() once per day and treat the result as a set-difference against any URLs you're about to hit.
Links
- Oracle: https://x402station.io
- Manifest: https://x402station.io/.well-known/x402
- OpenAPI: https://x402station.io/api/openapi.json
- Dataset: https://huggingface.co/datasets/x402station/preflight-dataset-v0_1
- GitHub: https://github.com/sF1nX/x402station-mcp
- x402 spec: https://x402.org
Contact
- General + commercial: hello@x402station.io
- Bug reports: https://github.com/sF1nX/x402station-mcp/issues
- Security disclosures (RFC 9116): https://x402station.io/.well-known/security.txt
License
MIT
Server Config
{
"mcpServers": {
"x402station": {
"command": "npx",
"args": [
"-y",
"x402station-mcp"
],
"env": {
"AGENT_PRIVATE_KEY": "0x<your-base-mainnet-private-key>"
}
}
}
}