x402 Agent Tollbooth MCP Server
by ak10082247-maxio.github.ak10082247-max/x402-agent-tollboothv2.1.0
On-chain DeFi smart contract auditor, arbitrage scanner, and agent tollbooth via x402 on Base.
context tax
~373 tok/turn4 tools
security
100/100
cold start
hosted
freshness
Activetoday
Our reading of x402 Agent Tollbooth, from the data
x402 Agent Tollbooth is a security MCP server from ak10082247-max, listed in the official MCP Registry.
Its 4 tools add about 373 tokens to every model turn, lighter than the security median of 1,742 tokens across 94 measured servers (measured 2026-10-19).
Maintenance is active: the last public signal was in the last day (2026-10-18). For comparison, 67% of security servers are active or maintained.
With 0 GitHub stars it ranks #579 of 1,263 security servers we index.
It runs as a hosted endpoint, so there is nothing to install.
Install x402 Agent Tollbooth MCP server
Install in Claude Code
claude mcp add --transport http x402-agent-tollbooth https://x402-agent-tollbooth.onrender.com/mcpInstall in Cursor
{
"mcpServers": {
"x402-agent-tollbooth": {
"url": "https://x402-agent-tollbooth.onrender.com/mcp"
}
}
}Install in Claude Desktop
{
"mcpServers": {
"x402-agent-tollbooth": {
"command": "npx",
"args": [
"-y",
"mcp-remote",
"https://x402-agent-tollbooth.onrender.com/mcp"
]
}
}
}Or add it as a custom connector under Settings → Connectors. The config above bridges via mcp-remote.
Install in VS Code
{
"servers": {
"x402-agent-tollbooth": {
"type": "http",
"url": "https://x402-agent-tollbooth.onrender.com/mcp"
}
}
}Install in Windsurf
{
"mcpServers": {
"x402-agent-tollbooth": {
"serverUrl": "https://x402-agent-tollbooth.onrender.com/mcp"
}
}
}Remote endpoints
- streamable-http
https://x402-agent-tollbooth.onrender.com/mcp
Context tax
Connecting this server adds ~373 tokens of tool definitions to every model turn (lean, 4 tools). Measured 2026-10-19 via its hosted endpoint; o200k tokenizer, worst case for clients that load all tools up front. How we measure
| Model | Per 1,000 turns | With prompt caching |
|---|---|---|
| Claude Opus 5.5 | $1.49 | $0.075 |
| Claude Sonnet 5.5 | $0.746 | $0.075 |
| Claude Haiku 5.5 | $0.037 | — |
Input prices as of 2026-10-06. Excludes your own prompt and output.
Tools (4)
arbitrage_scan101 tokCross-DEX Arbitrage & Liquidity Scanner. Analyzes Uniswap, Aerodrome, and BaseSwap pools for profitable routing opportunities. Cost: 0.002 USDC on Base.
smart_router94 tokOptimal Execution Smart Router. Computes optimal gas and slippage routing paths for Base AI agents and automated executors. Cost: 0.001 USDC on Base.
contract_audit91 tokLive Smart Contract AI Auditor. Analyzes Base contracts for vulnerabilities. Cost: 0.02 USDC via x402 protocol. Cost: 0.02 USDC on Base.
ai_intel85 tokDeep AI Vulnerability & Intelligence Engine. Scans contracts and code for logic vulnerabilities and exploits on Base. Cost: 0.001 USDC on Base.
Security signals
100/100 — no known issues found as of 2026-10-19, from the checks below. This is not a guarantee of safety; review what a server can do before connecting it.
Deductions
No findings from the checks that ran.
Checks
- ✓Repository hygiene (archived, activity, license, security policy)
- ✓Tool descriptions (prompt-injection and hidden-text heuristics)
- ○Package metadata (install scripts, provenance) — pending
- ○Source scan (secrets, CVEs, risky code) by vectra-guard — pending
Scan it yourself before installing with vectra-guard, the open-source agent security CLI. Scoring rules
Freshness
Active — last maintenance signal today. The newest of the signals below sets the band.
Last commit (default branch)
2026-10-18 · today · GitHub
Latest release
no data · GitHub
Package published
no data · npm/PyPI
Registry entry updated
2026-10-15 · 3d ago · official registry · v2.1.0
How it compares in Security
Against the most-starred security servers we index. Token cost is per model turn, measured from each server's live tool list.
| Server | Stars | Tools | Tokens / turn | Freshness | Runs |
|---|---|---|---|---|---|
| x402 Agent Tollbooth (this) | 0 | 4 | 373 | Active | hosted |
| Semgrep | 17,123 | — | not measured | Active | — |
| Ida Pro | 13,002 | — | not measured | Active | — |
| Ghidra | 11,390 | — | not measured | Active | — |
| Robin: AI-Powered Dark Web OSINT | 7,591 | — | not measured | Active | local |
| Claude Code Ultimate Guide | 6,196 | — | not measured | Active | local |
FAQ
›How do I install the x402 Agent Tollbooth MCP server in Claude Code?
Run: claude mcp add --transport http x402-agent-tollbooth https://x402-agent-tollbooth.onrender.com/mcp. For Cursor, VS Code, Claude Desktop and Windsurf, use the install tabs above.
›Does x402 Agent Tollbooth require an API key?
No required environment variables are declared in its published metadata.
›Can I use x402 Agent Tollbooth as a remote (hosted) MCP server?
Yes. It is a hosted MCP server; connect to its URL with any client that supports remote MCP.
›Is x402 Agent Tollbooth in the official MCP registry?
Yes, as io.github.ak10082247-max/x402-agent-tollbooth.
›How many tokens does x402 Agent Tollbooth add to my context?
Its tool definitions total about 373 tokens, resent on every turn.
Sources and method
- Official MCP Registry entry
- updated 2026-10-15
- GitHub repository
- fetched 2026-10-19
- Tool list (tools/list), measured by us
- 2026-10-19
- Security signals, computed by us
- 2026-10-19
- Last checked against all sources
- 2026-10-19
The description, packages and links come from the maintainer's own published metadata. Token cost, security signals, freshness and the reading above are MCPSkillHub's own measurements; see the methodology. Spot an error? Request a correction or claim the listing.
Alternatives to x402 Agent Tollbooth
Other security MCP servers.
CCXTActiveOfficial CCXT MCP server - Market data and trading across 100+ exchanges and prediction markets
SemgrepActiveScan code for security vulnerabilities using Semgrep.
Ida ProActiveIDA Pro plugin for binary analysis: decompilation, disassembly and automatic malware analysis reports.
GhidraActiveAutonomous reverse engineering with Ghidra: decompile binaries, rename methods and data, and list methods, classes, imports and exports.
Robin: AI-Powered Dark Web OSINTActiveDark web OSINT over Tor: search onion engines, scrape pages, report with your own model.
Claude Code Ultimate GuideActiveSearch the Claude Code Ultimate Guide, official Anthropic documentation, releases, examples, security references, agent harness data, and translations from any MCP-compatible client.