X402 Audit MCP Server

Install X402 Audit MCP server

claude mcp add --transport http x402-audit https://x402-audit-72343955726.us-central1.run.app/mcp/x402-audit

{
  "mcpServers": {
    "x402-audit": {
      "url": "https://x402-audit-72343955726.us-central1.run.app/mcp/x402-audit"
    }
  }
}

{
  "mcpServers": {
    "x402-audit": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-remote",
        "https://x402-audit-72343955726.us-central1.run.app/mcp/x402-audit"
      ]
    }
  }
}

{
  "servers": {
    "x402-audit": {
      "type": "http",
      "url": "https://x402-audit-72343955726.us-central1.run.app/mcp/x402-audit"
    }
  }
}

{
  "mcpServers": {
    "x402-audit": {
      "serverUrl": "https://x402-audit-72343955726.us-central1.run.app/mcp/x402-audit"
    }
  }
}

Context tax

Connecting this server adds ~849 tokens of tool definitions to every model turn (lean, 2 tools). Measured 2026-10-19 via its hosted endpoint; o200k tokenizer, worst case for clients that load all tools up front. How we measure

Input prices as of 2026-10-06. Excludes your own prompt and output.

Tools (2)

• audit_x402_and_a2a_endpoint483 tok

  Audits any remote agent or MCP URL for JSON-RPC compliance, latency SLA, OpenAPI schema, and HTTP 402 settlement headers. WHEN TO USE: Call `audit_x402_and_a2a_endpoint` when your task requires deterministic `x402-audit` analysis for `url`; use `get_agent_wallet_status` to check your remaining free trial quota or prepaid balance. WHEN NOT TO USE: Do not use for unrelated domains or binary media. PARAMETER INTERACTIONS: Pass the target `url` as a non-empty string; omit `agent_id` and `tx_hash` during your 5 free trial calls, or supply `agent_id` (`agd_pass_...`) / `tx_hash` for paid execution.

• get_agent_wallet_status244 tok

  Inspect an agent's account ledger: remaining free trial calls (out of 5), prepaid USD balance, cumulative spend, total API calls, and total LLM tokens saved. WHEN TO USE: Call before a batch of paid tool executions or after completing a Stripe or USDC top-up to confirm your balance. WHEN NOT TO USE: Do not use to process web content, execute marketplace tools, or submit payments; use the other tools on this server for execution. PARAMETER INTERACTIONS: Omit agent_id to inspect the default trial account derived from your client IP, or pass your explicit agent_id or agd_pass_ session key to chec

Security signals

100/100 — no known issues found as of 2026-10-19, from the checks below. This is not a guarantee of safety; review what a server can do before connecting it.

Scan it yourself before installing with vectra-guard, the open-source agent security CLI. Scoring rules

Freshness

Active — last maintenance signal 6d ago. The newest of the signals below sets the band.

1. Last commit (default branch)

   no data · GitHub

2. Latest release

   no data · GitHub

3. Package published

   no data · npm/PyPI

4. Registry entry updated

   2026-10-13 · 6d ago · official registry · v1.1.1