A2A Gateway — Base Token Guard & x402 Settlement
Pre-trade Base token risk verdicts, EVM route simulation and code audits, paid per call over x402.
Description from the maker (original English)
21 paid tools: US macro data, SEC EDGAR filings, on-chain EVM reads. Settled in USDC on Base.
These three are never merged into one score: opinions, measurements and popularity are different things.
We have not written a plain-language summary for this one yet. Below are the facts we read from the registry.
Pick the AI app you use, then copy the settings.
You need
Which app do you use?
Pick your app above. We remember it, so next time the button says “Install in …”.
Works in Claude on the web, desktop and mobile:
https://x402.agentfund.net/mcpRun this in your terminal
claude mcp add --transport http us-economic-macro-sec-edgar-onchain-data https://x402.agentfund.net/mcpPaste into .cursor/mcp.json in your project, or ~/.cursor/mcp.json
{
"mcpServers": {
"us-economic-macro-sec-edgar-onchain-data": {
"url": "https://x402.agentfund.net/mcp"
}
}
}Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.
Paste into .vscode/mcp.json in your project
{
"servers": {
"us-economic-macro-sec-edgar-onchain-data": {
"type": "http",
"url": "https://x402.agentfund.net/mcp"
}
}
}Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.
ChatGPT connects only to servers on the internet:
https://x402.agentfund.net/mcpMenu names can differ slightly by plan and over time.
Your choice stays on this device in a cookie; no account needed.
These settings are generated from the maker’s registry entry. If the README says otherwise, follow the README.
We have not read this server’s tool list yet; we check endpoints in rotation.
We check information anyone can see; we have not read the code. Checks that do not apply are left out of the count. · Checked Nov 10, 2026
The publisher (agentfund.net) is not the repo owner (ktcod); someone else may have listed it
We have not read this repo from GitHub yet
We have not read this repo from GitHub yet
Not checked yet; we check endpoints in rotation
Not checked yet; we check endpoints in rotation
Not checked yet; we read the tool list when we check the endpoint
Compared with every active server in this category in the registry. Stars count only when the publisher owns the repo.
It passed 0 of 1 applicable basic checks. We have not read the code. Before adding a key or token, see what access the server asks for and use a key with only the permissions you need.
The registry does not list a required key, though some servers ask you to sign in on first use.
It runs in the maker’s cloud. Connect over the internet with nothing to install, but what you send passes through the maker’s servers.
The GitHub repo last changed –, and the latest version (0.2.0) reached the registry 3 months ago.
Apps that support MCP, such as Claude Desktop, Claude Code, Cursor and VS Code. It connects by URL, so apps that accept remote MCP servers work too, such as ChatGPT in developer mode.
In the same category: A2A Gateway — Base Token Guard & x402 Settlement, PayStage Auth Watch, Diamond Bitcoin Intelligence
Servers in the same category from other makers, sorted by stars.
Reading a card:↓ Downloads per weeki★ GitHub starsiThree pillars: reviews · checks · usageiUpdated = latest version published to the registryi
Pre-trade Base token risk verdicts, EVM route simulation and code audits, paid per call over x402.
Read-only MCP tools to list and flag outstanding ERC-20, Permit2, and EIP-3009 auths
Bitcoin MCP for fee budgets, transaction proofs and address checks. Free service discovery.
Copied from the maker’s repo as written. PopNx MCP has not reviewed or endorsed it. HTML, images and scripts are removed. Links lead off this site.
21 data tools that AI agents discover and pay for per call, settled in USDC on Base via the x402 payment protocol. No account, no API key, no subscription.
Live: https://x402.agentfund.net · Agent guide · Verification ledger · Settlements
| Endpoint | Purpose |
|---|---|
POST /mcp | MCP over streamable-HTTP (stateless) |
POST /x402/ | One HTTP route per tool; arguments as a plain JSON body |
GET /openapi.json | OpenAPI 3.1 discovery document with x-payment-info per route |
GET /SKILL.md | Agent-facing usage guide |
GET /VERIFICATION.md | How each tool was verified, and the upstream traps found |
GET /monitor | Live on-chain settlement dashboard |
GET /health | Liveness and configuration mode |
US macro — treasury_yield_curve, bls_cpi, macro_pce, macro_jobs, macro_gdp, macro_retail_sales, macro_housing, macro_energy, macro_release_calendar
SEC EDGAR — edgar_filings_feed, edgar_financials, edgar_insider_transactions, edgar_13f_holdings, edgar_full_text_search
On-chain EVM — onchain_token_balances, onchain_portfolio, onchain_cross_chain_balances, onchain_oracle_price, onchain_gas
Pure compute — structured_json_repair, tabular_to_json
Prices run $0.001–$0.03 per call.
Every tool wraps free public-domain US government data (Treasury, BLS, BEA, Census, EIA, SEC EDGAR) or a direct on-chain read via public RPC. There is no upstream vendor licence, so nothing here can be revoked or repriced by a third party, and the cost of goods is zero.
The trade-off is inherited from the publishers: government statistics are lagged and revised, 13F is quarterly and stale by design, and none of this is market data. Those limits are stated plainly in SKILL.md rather than buried.
Every tool was checked against live upstream data before shipping — not only against unit tests, because a test written from the same wrong assumption as the code passes happily.
That caught six real defects, including 13F values being 1000× too large by following SEC's *own* documentation, and Census silently returning five regional rows where a national figure was expected. Each is documented with the evidence that exposed it, and locked in by a regression test: [VERIFICATION.md](VERIFICATION.md).
A failed call is never billed. The MCP SDK turns a thrown tool error into an HTTP 200 carrying isError: true; the payment gate inspects the result and returns errors unsettled rather than charging for a result the caller never received.
@x402/core, @x402/evm) with the Coinbase CDP facilitator on Base mainnet.@hono/mcp StreamableHTTPTransport (the SDK's own transport is Node-http-based). Stateless JSON./mcp and /x402/ both run through PaymentGate.chargeAndRun, so money-safety rules cannot drift between them.type: "http" — so an MCP endpoint alone can never be listed.initialize, tools/list and ping are answered without payment configuration, so the server introspects cleanly on a fresh clone or in a CI sandbox.Function, which Workers forbid, and the schema is a runtime input so it cannot be precompiled.config.ts refuses private-key- or seed-shaped input.Adding a tool is a one-file change plus a line in src/tools/index.ts.
npm install
npm test # 174 tests npm run typecheck npm run dev # wrangler dev npm run dev:node # tsx watch src/node.ts
Copy .dev.vars.example to .dev.vars for local configuration. Only the public payout address is ever needed — never a private key or seed phrase.
Docs are mirrored into the bundle (Workers have no filesystem); run npm run gen:docs after editing SKILL.md or VERIFICATION.md, or test/docs.test.ts will fail on the drift.
Production runs on Cloudflare Workers. Secrets are set with wrangler secret put, never in wrangler.toml:
npx wrangler deploy --env production
A Dockerfile is included for self-hosting the Node entrypoint; it needs no secrets, so the container starts and passes introspection out of the box. See OPERATOR_CHECKLIST.md for the full runbook.
PAYER_PRIVATE_KEY=0x… node scripts/pay-test.mjs # pay via /mcp
PAYER_PRIVATE_KEY=0x… node scripts/pay-http.mjs # pay via /x402/ node scripts/index-all.mjs # dry run: Bazaar index status
Payment is gasless for the payer (the facilitator submits the transaction), so a test wallet needs USDC and no ETH. index-all.mjs skips already-indexed routes and refuses to spend without --yes.
MIT (declared in package.json; no LICENSE file has been added yet).