X402-Broker Global A2A, MCP & x402 Super-Marketplace
by x402broker.com · remote · no sign-in to list tools · v7.0.17 · published by com.x402broker
1,400+ tool A2A, MCP & x402 clearinghouse with free semantic discovery and paid execution.
4 tools: 2 change things and 2 only read.
Scanned Oct 21, 2026
- Deletes or cancels0Claude Code: deny
- Can't be undone0Claude Code: ask
- Changes things2Claude Code: ask: see these tools
- Only reads2Claude Code: allow: see these tools
2 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http x402-broker https://x402broker.com/mcpFindings
Matches of fixed checks, with the text they matched.
The server marks "execute_marketplace_tool" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "execute_marketplace_tool" says "execute": a word for a change.
The server marks "execute_workflow_bundle" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "execute_workflow_bundle" says "execute": a word for a change.
Tools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
4 tools
Changes things 2Claude Code: ask
execute_marketplace_toolExecute any of the 16 native AgentDiet B2A tools by slug or proxy an external marketplace tool URL ($0.001-$0.02 per call).1 finding
Why it is in this group
- The name "execute_marketplace_tool" says "execute": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
The server marks "execute_marketplace_tool" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "execute_marketplace_tool" says "execute": a word for a change.
Description, as the server wrote it Execute any of the 16 native AgentDiet B2A tools by slug or proxy an external marketplace tool URL ($0.001-$0.02 per call). WHEN TO USE: Call to run a single tool discovered via search_x402_mcp_marketplace; use execute_workflow_bundle when you want to run a 4-tool composite bundle in parallel. WHEN NOT TO USE: Do not use for catalog search (use search_x402_mcp_marketplace) or wallet checks (use get_agent_wallet_status). PARAMETER INTERACTIONS: Set target_tool to a native slug (e.g. 'distill', 'token-intel', 'sec-intel', 'github-audit') or external https:// URL, and pass its primary input in input_value. Omit agent_id and tx_hash during your 5 free calls. Read-only and idempotent; results are cached for 1 hour (<5ms cache hit). Pricing: the first 5 calls per agent_id are free and failed calls are never charged. After 5 calls, the tool returns a payment-required quote (not a fatal error) with a $2 Stripe top-up link and Base/Solana USDC addresses; complete payment, then retry with your agd_pass_ key in agent_id or pass tx_hash. Example: execute_marketplace_tool(target_tool='example')
Annotations the server declares
- title: Execute marketplace tool
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
execute_workflow_bundleExecute a 4-tool native workflow bundle in parallel in a single call ($0.015-$0.03) and return a unified dossier, saving 3 LLM round-trips.1 finding
Why it is in this group
- The name "execute_workflow_bundle" says "execute": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
The server marks "execute_workflow_bundle" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "execute_workflow_bundle" says "execute": a word for a change.
Description, as the server wrote it Execute a 4-tool native workflow bundle in parallel in a single call ($0.015-$0.03) and return a unified dossier, saving 3 LLM round-trips. WHEN TO USE: Call for comprehensive multi-source due diligence on a token, company domain, repository, or research topic; use execute_marketplace_tool when you only need a single tool. WHEN NOT TO USE: Do not use for single-endpoint queries or free catalog search. PARAMETER INTERACTIONS: Select bundle_id first and provide the matching entity identifier (token/0x address, domain, repo, or URL) in target. Omit agent_id and tx_hash during your 5 free calls. Read-only and idempotent; results are cached for 1 hour (<5ms cache hit). Pricing: the first 5 calls per agent_id are free and failed calls are never charged. After 5 calls, the tool returns a payment-required quote (not a fatal error) with a $2 Stripe top-up link and Base/Solana USDC addresses; complete payment, then retry with your agd_pass_ key in agent_id or pass tx_hash. Example: execute_workflow_bundle(bundle_id='example')
Annotations the server declares
- title: Execute workflow bundle
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
Only reads 2Claude Code: allow
get_agent_wallet_statusInspect an agent's account ledger: remaining free trial calls (out of 5), prepaid USD balance, cumulative spend, total API calls, and total LLM tokens saved.No findings
Why it is in this group
- The name "get_agent_wallet_status" says "get": a word for reading.
Description, as the server wrote it Inspect an agent's account ledger: remaining free trial calls (out of 5), prepaid USD balance, cumulative spend, total API calls, and total LLM tokens saved. WHEN TO USE: Call before a batch of paid tool executions or after completing a Stripe or USDC top-up to confirm your balance. WHEN NOT TO USE: Do not use to process web content, execute marketplace tools, or submit payments; use the other tools on this server for execution. PARAMETER INTERACTIONS: Omit agent_id to inspect the default trial account derived from your client IP, or pass your explicit agent_id or agd_pass_ session key to check a specific funded wallet. Free and read-only: never charges a fee or consumes a free trial call. Example: get_agent_wallet_status(agent_id='example')
Annotations the server declares
- title: Get agent wallet status
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
search_x402_mcp_marketplaceSearch 490+ indexed MCP and HTTP 402 (x402) tools by capability keyword and return ranked endpoints with pricing, trust scores, and SLA tiers.No findings
Why it is in this group
- The name "search_x402_mcp_marketplace" says "search": a word for reading.
Description, as the server wrote it Search 490+ indexed MCP and HTTP 402 (x402) tools by capability keyword and return ranked endpoints with pricing, trust scores, and SLA tiers. WHEN TO USE: Call first to discover which native slug or external endpoint matches your task before calling execute_marketplace_tool. WHEN NOT TO USE: Do not use to execute a tool directly (use execute_marketplace_tool or execute_workflow_bundle). PARAMETER INTERACTIONS: Pass capability keywords or a domain in query; omit agent_id and tx_hash (this discovery tool is always free and never consumes a free trial call). Example: search_x402_mcp_marketplace(query='example')
Annotations the server declares
- title: Search x402 mcp marketplace
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 7.0.17. Values in angle brackets are yours to fill in.
claude mcp add --transport http x402-broker https://x402broker.com/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__x402-broker__search_x402_mcp_marketplace",
"mcp__x402-broker__get_agent_wallet_status"
],
"ask": [
"mcp__x402-broker__execute_marketplace_tool",
"mcp__x402-broker__execute_workflow_bundle"
],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as x402-broker. Review it before you use it.