X402 Scan MCP server
x402 Endpoint Scanner — a free local health probe for x402 paid endpoints as an MCP server.
28 downloads/wk
Reviews
Write oneNobody has reviewed X402 Scan yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
X402 Scan tools (3, 1 write)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
census_statsFetches the latest ForgeMesh catalog stats (best-effort, 5s timeout, no input required) alongside the static headline numbers from the August 2026 x402 Bazaar health census: 1,225 sellers probed, 74% healthy, 206 dead, 40 serving paid content for free, and 15% MPP dual-stack. Source: https://forgemesh.io/blog/x402-bazaar-health-census-august-2026
scan_batchwrite actionRuns scan_endpoint sequentially over a list of URLs (max 10) and returns each full result plus a one-line summary, e.g. '7/10 healthy, 2 dead, 1 broken envelope'. One bad URL never aborts the batch — its error is reported per-item instead. Same no-spend, SSRF-guarded probe as scan_endpoint applied to every URL.
scan_endpointFree, local, no-payment health probe for one x402 endpoint. GETs the URL (retries once as POST with {} on a 405), then checks: is the response HTTP 402; does it carry a valid PAYMENT-REQUIRED envelope (Base64 JSON with numeric x402Version and a non-empty accepts[] where every entry has scheme/network/asset/payTo/amount), falling back to checking the body for an x402Version field; and does it also
Public scan report
scanner v0.1.9 · 2026-09-20 · same rubric, same numbers if you re-run it
- Code scan8 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancerepository not readable: repo not found3/15
- Maintainer identityno repository or website to verify2/10
Install directly
Runs npx -y @forgemeshlabs/x402-scan-mcp on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add x402-scan-mcp -- npx -y @forgemeshlabs/x402-scan-mcp
X402 Scan: common questions
- Is X402 Scan MCP server safe?
- With care: it is graded C, so read the findings first (65/100). Read the X402 Scan safety report
- How do I install X402 Scan?
- It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
- Does X402 Scan need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is X402 Scan maintained?
- The latest release is v0.1.2.
- What can I use instead of X402 Scan?
- Servers from other publishers that do the same job: DNS Doctor MCP server, HoneyLabs MCP server and signals.edge graduation radar MCP server. Compare all X402 Scan alternatives.
Alternatives to X402 Scan
Same job from other publishers: the closest match first, then the best rated.
DNS DoctorScan, fix, verify and monitor DNS: SPF, DMARC, DKIM, propagation, health, expiry. Validated fixes.not reviewedGrowingA- HoneyLabsHoneypot probe data: IP reputation, scanners, CVE probing, TLS and SSH fingerprints.not reviewedGrowingB
- signals.edge graduation radarpump.fun graduation radar for trading bots and AI agents. x402 USDC per scan, no key.not reviewedGrowingA
ScanLabsAI Security ScannerScan a website for vulnerabilities: OWASP Top 10, CVEs, SSL, headers - with plain-English fixesnot reviewedNewB- CodeInspectusLocal-first MCP security scanner and CLI for AI-generated applications.not reviewedGrowingC