Mmcp.market

X402 Scan MCP server

by forgemeshlabs·io.github.forgemeshlabs/x402-scan-mcp·v0.1.2

x402 Endpoint Scanner — a free local health probe for x402 paid endpoints as an MCP server.

C65/100grade C
What users say
No reviews yet
Be the first
Safety scan
C65/100

full report

Adoption
New

28 downloads/wk

Reviews

Write one

Nobody has reviewed X402 Scan yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

X402 Scan tools (3, 1 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • census_stats

    Fetches the latest ForgeMesh catalog stats (best-effort, 5s timeout, no input required) alongside the static headline numbers from the August 2026 x402 Bazaar health census: 1,225 sellers probed, 74% healthy, 206 dead, 40 serving paid content for free, and 15% MPP dual-stack. Source: https://forgemesh.io/blog/x402-bazaar-health-census-august-2026

  • scan_batchwrite action

    Runs scan_endpoint sequentially over a list of URLs (max 10) and returns each full result plus a one-line summary, e.g. '7/10 healthy, 2 dead, 1 broken envelope'. One bad URL never aborts the batch — its error is reported per-item instead. Same no-spend, SSRF-guarded probe as scan_endpoint applied to every URL.

  • scan_endpoint

    Free, local, no-payment health probe for one x402 endpoint. GETs the URL (retries once as POST with {} on a 405), then checks: is the response HTTP 402; does it carry a valid PAYMENT-REQUIRED envelope (Base64 JSON with numeric x402Version and a non-empty accepts[] where every entry has scheme/network/asset/payTo/amount), falling back to checking the body for an x402Version field; and does it also

Public scan report

scanner v0.1.9 · 2026-09-20 · same rubric, same numbers if you re-run it

no findings
  • Code scan8 source files scanned25/25
  • Live reliabilityno gateway calls yet and no remote to proben/a
  • Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancerepository not readable: repo not found3/15
  • Maintainer identityno repository or website to verify2/10
Overall 65/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

Install directly

Runs npx -y @forgemeshlabs/x402-scan-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add x402-scan-mcp -- npx -y @forgemeshlabs/x402-scan-mcp
Add to Cursor

X402 Scan: common questions

Is X402 Scan MCP server safe?
With care: it is graded C, so read the findings first (65/100). Read the X402 Scan safety report
How do I install X402 Scan?
It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
Does X402 Scan need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is X402 Scan maintained?
The latest release is v0.1.2.
What can I use instead of X402 Scan?
Servers from other publishers that do the same job: DNS Doctor MCP server, HoneyLabs MCP server and signals.edge graduation radar MCP server. Compare all X402 Scan alternatives.

Alternatives to X402 Scan

Same job from other publishers: the closest match first, then the best rated.

All X402 Scan alternatives →
  • DNS Doctor
    Scan, fix, verify and monitor DNS: SPF, DMARC, DKIM, propagation, health, expiry. Validated fixes.
    A
  • HoneyLabs
    Honeypot probe data: IP reputation, scanners, CVE probing, TLS and SSH fingerprints.
    B
  • signals.edge graduation radar
    pump.fun graduation radar for trading bots and AI agents. x402 USDC per scan, no key.
    A
  • ScanLabsAI Security Scanner
    Scan a website for vulnerabilities: OWASP Top 10, CVEs, SSL, headers - with plain-English fixes
    B
  • CodeInspectus
    Local-first MCP security scanner and CLI for AI-generated applications.
    C

More from forgemeshlabs