Agent Wormhole MCP server

by runningoffcode·io.github.runningoffcode/wormhole-x402·v0.8.0

Check tokens, pages and x402 payments before your agent trusts them. Offline verdicts.

B83/100grade B

What users say

No reviews yet

Safety scan

B83/100

Adoption

Growing

3 stars776 downloads/wk

Reviews

Nobody has reviewed Agent Wormhole yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

check_before_use
Check anything BEFORE trusting it — a web page you are about to read,
check_token
Check a token launch BEFORE reading its metadata. A token's name,
scan_text
Scan untrusted text or a JSON document (a 402 quote body, a merchant
verify_delivery
Check what a PAID request actually delivered, AFTER the payment — the
verify_payment
Check an x402 payment against the merchant's quote BEFORE signing it.

scanner v0.1.9 · 2026-09-20 · same rubric, same numbers if you re-run it

no findings

Code scan29 source files scanned25/25
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitystatic API keys via environment variables6/15
Maintenancelast push 1 days ago15/15
Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Overall 83/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

Runs npx -y wormhole-x402 on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add wormhole-x402 -- npx -y wormhole-x402

Is Agent Wormhole MCP server safe?: Mostly: it is graded B (83/100). Read the Agent Wormhole safety report
How do I install Agent Wormhole?: It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
Does Agent Wormhole need an API key?: Yes. The registry entry asks for WORMHOLE_API_KEY.
Is Agent Wormhole maintained?: The last commit was in the last day (2026-09-19). The latest release is v0.8.0.
What can I use instead of Agent Wormhole?: Servers from other publishers that do the same job: MCP server, mcptoon MCP server and llmtrim MCP server. Compare all Agent Wormhole alternatives.

Same job from other publishers: the closest match first, then the best rated.

MCP
Authorize consequential AI agent actions before execution
not reviewed
Established
A
mcptoon
MCP tools + agent skills in one zero-dependency CLI: 71,929 -> 581 tokens (-99.2%, measured).
not reviewed
Established
A
llmtrim
MCP server and proxy that compresses LLM prompts, tool output, and replies to cut token cost.
not reviewed
Established
A
PDF
Agentic RAG over one PDF or a whole folder: hybrid search, selective page reads, tables, OCR.
not reviewed
Established
A
elisym
AI agent discovery, marketplace, messaging, and payments on Nostr - no platform, no middleman
not reviewed
Established
B

Local package. It runs on your machine, not through the gateway.

WORMHOLE_API_KEYsecretOptional. Hosted-mode key from dashboard.agentwormhole.com: adds URL checks with change history, and the operator's spend policy (budgets, approvals, kill switch) on payments.
WORMHOLE_VERIFY_URLOptional. Override the hosted verifier endpoint (default https://dashboard.agentwormhole.com/api/v1/verify).
WORMHOLE_ADDRESS_LEDGEROptional. Path to the address-provenance ledger written by wormhole-guard's readguard hook (default ~/.wormhole/addresses.jsonl).

Claim it to keep the listing current and reply to reviews. Claiming never changes the grade or hides a review.

Shows the safety grade and links back to this page. It updates itself after every scan and review.

[![mcp.market](https://mcp.market/badge/runningoffcode-wormhole-x402.svg)](https://mcp.market/server/runningoffcode-wormhole-x402)