Skip to content

geld machen x402 agent utilities

by geld-machen-x402.fly.dev · remote · no sign-in to list tools · v1.0.3 · published by dev.fly.geld-machen-x402

x402 pay-per-call agent tools (Base USDC): web search, URL extract, OCR, Base tx & allowance scans

Final · 1Changes · 11
CompareRegistry entry

22 tools: 1 do something that can't be undone, 11 change things and 10 only read.

Scanned Oct 21, 2026

2 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http agent-utilities https://geld-machen-x402.fly.dev/mcp

Findings

Matches of fixed checks, with the text they matched.

2 warn
  • Warnfacilitator-dry-run

    The server marks "facilitator-dry-run" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "facilitator-dry-run" says "run": a word for a change.

    What this check looks for
  • Warnpayment-receipt-auditor

    The server marks "payment-receipt-auditor" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "payment-receipt-auditor" says "payment": a word that usually means money moves, which cannot be taken back.

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

22 tools

Can't be undone 1Claude Code: ask
  • payment-receipt-auditorVerify an x402 PAYMENT-RESPONSE or settle tx hash on Base before retrying a paid call.1 finding

    Why it is in this group

    • The name "payment-receipt-auditor" says "payment": a word that usually means money moves, which cannot be taken back.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "payment-receipt-auditor" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "payment-receipt-auditor" says "payment": a word that usually means money moves, which cannot be taken back.

      What this check looks for
    Description, as the server wrote it
    Verify an x402 PAYMENT-RESPONSE or settle tx hash on Base before retrying a paid call. Use when a paid call failed or looks unsettled and you need proof. Not for pre-launch payload checks (use facilitator-dry-run). Returns a free sample plus the paid URL and pay steps (no charge here); the full result costs $0.02 Base USDC via x402.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • title: Payment Receipt Auditor: Is This 402 Settle Real?
Changes things 11Claude Code: ask
  • bazaar-checkAudit an x402 endpoint for CDP Bazaar indexing: 402 header compliance, bazaar schema, quality issues.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Audit an x402 endpoint for CDP Bazaar indexing: 402 header compliance, bazaar schema, quality issues. Use when your x402 endpoint is not showing up in the CDP Bazaar. Not for general URL metadata (use url-fingerprint). Returns a free sample plus the paid URL and pay steps (no charge here); the full result costs $0.05 Base USDC via x402.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • title: Bazaar Readiness Check: x402 Index + Fix-JSON
  • facilitator-dry-runDry-run an x402 payment payload + requirements against the facilitator /verify path before going live.1 finding

    Why it is in this group

    • The name "facilitator-dry-run" says "run": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "facilitator-dry-run" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "facilitator-dry-run" says "run": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Dry-run an x402 payment payload + requirements against the facilitator /verify path before going live. Use when you build an x402 seller and want to know if payments will verify. Not for auditing a receipt after payment (use payment-receipt-auditor). Returns a free sample plus the paid URL and pay steps (no charge here); the full result costs $0.05 Base USDC via x402.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • title: Facilitator Dry-Run: Would CDP Accept This 402 Envelope?
  • image-ocrOCR an image URL with local Tesseract: text, word count, confidence.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    OCR an image URL with local Tesseract: text, word count, confidence. Use when you need text from a screenshot or scanned image. Not for web pages (use url-extract). Returns a free sample plus the paid URL and pay steps (no charge here); the full result costs $0.01 Base USDC via x402.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • title: Image OCR: Extract Text from Image URL
  • nebenverdienst-pdfDownload a German PDF guide: 7 legal side-income routes in Switzerland.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Download a German PDF guide: 7 legal side-income routes in Switzerland. Use when a Swiss/German-speaking human wants a guide. Not for agent automation (use the JSON tools). Returns a free sample plus the paid URL and pay steps (no charge here); the full result costs $17 Base USDC via x402.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • title: Nebenverdienst Schweiz: 7 Wege
  • offer-scoreScore a side-income offer 0-100 with GO/MAYBE/NO-GO band, 8 rubric dimensions and rewrite tips (local heuristics).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Score a side-income offer 0-100 with GO/MAYBE/NO-GO band, 8 rubric dimensions and rewrite tips (local heuristics). Use when you need a fast comparable 0-100 score to rank several offers. Not for quoted scam evidence or live URL/domain checks (use red-flag-scan) or a static checklist (use deal-brief). Pick this when the question is 'which offer is best?'. Returns a free sample plus the paid URL and pay steps (no charge here); the full result costs $0.35 Base USDC via x402.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • title: Offer Score: Paste-an-Offer Rubric (0–100)
  • phantom-seller-scanCheck whether an x402 URL's payTo actually receives Base USDC (economically live vs phantom).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Check whether an x402 URL's payTo actually receives Base USDC (economically live vs phantom). Use when before integrating or paying one unknown x402 endpoint you already have. Not for listing many vetted sellers (use phantom-allowlist) or finding new endpoints (use agent-lead-pack). Pick this when the question is 'is THIS URL real?'. Returns a free sample plus the paid URL and pay steps (no charge here); the full result costs $0.03 Base USDC via x402.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • title: Phantom Seller Scan: Is payTo Economically Dead?
  • red-flag-scanScan one offer/pitch for 12 evidence-quoted scam red flags plus live URL anchors (HTTP/TLS/DNS, RDAP domain age).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Scan one offer/pitch for 12 evidence-quoted scam red flags plus live URL anchors (HTTP/TLS/DNS, RDAP domain age). Use when you must decide whether a specific offer or seller page is a scam before paying or replying. Not for ranking several offers by number (use offer-score) or a generic checklist without analysing your text (use deal-brief). Pick this when the question is 'is THIS offer a scam?'. Returns a free sample plus the paid URL and pay steps (no charge here); the full result costs $0.25 Base USDC via x402.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • title: Red-Flag Scan: 12 Sketchy Side-Income Signals
  • side-income-pdfDownload an English PDF playbook with 7 side-income plays starting under $100.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Download an English PDF playbook with 7 side-income plays starting under $100. Use when a human wants a full guide. Not for agent automation (use the JSON tools). Returns a free sample plus the paid URL and pay steps (no charge here); the full result costs $17 Base USDC via x402.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • title: Side Income with Under $100: 7 Practical Plays
  • url-extractExtract title, meta description, ~3k chars plain text and outbound links from a URL (local fetch).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Extract title, meta description, ~3k chars plain text and outbound links from a URL (local fetch). Use when you need readable page text cheaply. Not for clean markdown of JS-heavy pages (use web-extract). Returns a free sample plus the paid URL and pay steps (no charge here); the full result costs $0.02 Base USDC via x402.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • title: URL Extract: Live Title/Meta/Text/Links
  • url-fingerprintFingerprint a URL: final URL, status, content type, body SHA-256, TLS issuer, DNS sample.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Fingerprint a URL: final URL, status, content type, body SHA-256, TLS issuer, DNS sample. Use when detecting page changes or verifying a site cheaply. Not for page text (use url-extract) or markdown (use web-extract). Returns a free sample plus the paid URL and pay steps (no charge here); the full result costs $0.01 Base USDC via x402.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • title: URL Fingerprint: Live TLS/HTTP Hash
  • web-extractScrape a URL to clean markdown via Firecrawl (handles JS-heavy pages).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Scrape a URL to clean markdown via Firecrawl (handles JS-heavy pages). Use when you need LLM-ready markdown of a page. Not for a cheap hash/excerpt (use url-fingerprint or url-extract). Returns a free sample plus the paid URL and pay steps (no charge here); the full result costs $0.03 Base USDC via x402.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • title: Web Extract: Firecrawl Clean Markdown
Only reads 10Claude Code: allow
  • agent-lead-packReturn a fresh timestamped list of live x402 endpoints scraped from public catalogs (PayAI, CDP), optionally 402-probed.No findings

    Why it is in this group

    • The description's first verb is "return": a word for reading.
    Description, as the server wrote it
    Return a fresh timestamped list of live x402 endpoints scraped from public catalogs (PayAI, CDP), optionally 402-probed. Use when you need fresh, broad discovery leads of payable agent APIs. Not for a vetted/signed seller list (use phantom-allowlist) or checking one URL (use phantom-seller-scan). Pick this when the question is 'what x402 APIs exist right now?'. Returns a free sample plus the paid URL and pay steps (no charge here); the full result costs $0.025 Base USDC via x402.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • title: Agent Lead Pack: Live x402 Discovery Feed
  • base-allowance-scanList notable ERC-20 allowances of a Base address (USDC/WETH/USDT/DAI/cbETH to DEX/bridge spenders).No findings

    Why it is in this group

    • The description's first verb is "list": a word for reading.
    Description, as the server wrote it
    List notable ERC-20 allowances of a Base address (USDC/WETH/USDT/DAI/cbETH to DEX/bridge spenders). Use when checking approval risk of a wallet. Not for balances (use base-balance). Returns a free sample plus the paid URL and pay steps (no charge here); the full result costs $0.02 Base USDC via x402.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • title: Base Allowance Scan: Notable ERC-20 Approvals
  • base-balanceRead live Base ETH and USDC balance of one address.No findings

    Why it is in this group

    • The description's first verb is "read": a word for reading.
    Description, as the server wrote it
    Read live Base ETH and USDC balance of one address. Use when you only need balances. Not for allowances (use base-allowance-scan) or DeFi context (use defi-base-snapshot). Returns a free sample plus the paid URL and pay steps (no charge here); the full result costs $0.01 Base USDC via x402.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • title: Base Balance: ETH + USDC Onchain Read
  • base-tx-explainDecode one Base transaction: from/to/value/status/logs/method selector.No findings

    Why it is in this group

    • The name "base-tx-explain" says "explain": a word for reading.
    Description, as the server wrote it
    Decode one Base transaction: from/to/value/status/logs/method selector. Use when you have a tx hash and need what it did. Not for wallet-wide views (use base-balance). Returns a free sample plus the paid URL and pay steps (no charge here); the full result costs $0.02 Base USDC via x402.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • title: Base Tx Explain: Receipt + Basic Decode
  • deal-briefReturn a 60-second go/no-go checklist and rubric for any micro side-income offer.No findings

    Why it is in this group

    • The description's first verb is "return": a word for reading.
    Description, as the server wrote it
    Return a 60-second go/no-go checklist and rubric for any micro side-income offer. Use when a human-readable checklist is enough and no specific offer needs analysing. Not for scanning a specific offer for scam evidence (use red-flag-scan) or scoring/ranking offers (use offer-score). Pick this when the question is 'what should I check?'. Returns a free sample plus the paid URL and pay steps (no charge here); the full result costs $0.75 Base USDC via x402.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • title: Agent Deal Brief: 60-Second Micro Offer Rubric
  • defi-base-snapshotSnapshot Base DeFi state: ETH+USDC balances, base fee/block and protocol TVL/APY proxies.No findings

    Why it is in this group

    • The name "defi-base-snapshot" says "snapshot": a word for reading.
    Description, as the server wrote it
    Snapshot Base DeFi state: ETH+USDC balances, base fee/block and protocol TVL/APY proxies. Use when you need a one-call Base market/wallet context. Not for a single balance (use base-balance) or one tx (use base-tx-explain). Returns a free sample plus the paid URL and pay steps (no charge here); the full result costs $0.03 Base USDC via x402.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • title: Base DeFi Snapshot: Balances + Gas + Protocol TVL/APY
  • get-catalogFree, call first: list every SKU with price (Base USDC), paid URL, free teaser and payTo, so you can pick the right paid tool.No findings

    Why it is in this group

    • The name "get-catalog" says "get": a word for reading.
    Description, as the server wrote it
    Free, call first: list every SKU with price (Base USDC), paid URL, free teaser and payTo, so you can pick the right paid tool. Use when unsure which tool fits; no payment needed.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • title: Free x402 catalog (all SKUs + prices)
  • phantom-allowlistReturn an HMAC-signed allowlist of x402 sellers with probe evidence (402 seen, probe ok, last paid ok).No findings

    Why it is in this group

    • The description's first verb is "return": a word for reading.
    Description, as the server wrote it
    Return an HMAC-signed allowlist of x402 sellers with probe evidence (402 seen, probe ok, last paid ok). Use when you want a signed list of already-vetted x402 sellers before spending. Not for checking one specific URL (use phantom-seller-scan) or raw unvetted discovery leads (use agent-lead-pack). Pick this when the question is 'whom can I safely pay?'. Returns a free sample plus the paid URL and pay steps (no charge here); the full result costs $0.03 Base USDC via x402.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • title: Signed Phantom Allowlist: Payable x402 Sellers
  • prompt-packReturn 10 reusable prompts for finding, pricing, pitching and delivering micro side-income work.No findings

    Why it is in this group

    • The description's first verb is "return": a word for reading.
    Description, as the server wrote it
    Return 10 reusable prompts for finding, pricing, pitching and delivering micro side-income work. Use when an agent needs ready prompts for freelance/gig operations. Not for analysing a specific offer (use offer-score). Returns a free sample plus the paid URL and pay steps (no charge here); the full result costs $0.49 Base USDC via x402.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • title: 10 High-Signal Side-Income Prompts for Agents

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.0.3. Values in angle brackets are yours to fill in.

claude mcp add --transport http agent-utilities https://geld-machen-x402.fly.dev/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__agent-utilities__get-catalog",
      "mcp__agent-utilities__phantom-allowlist",
      "mcp__agent-utilities__defi-base-snapshot",
      "mcp__agent-utilities__base-allowance-scan",
      "mcp__agent-utilities__base-tx-explain",
      "mcp__agent-utilities__agent-lead-pack",
      "mcp__agent-utilities__base-balance",
      "mcp__agent-utilities__web-search",
      "mcp__agent-utilities__prompt-pack",
      "mcp__agent-utilities__deal-brief"
    ],
    "ask": [
      "mcp__agent-utilities__facilitator-dry-run",
      "mcp__agent-utilities__payment-receipt-auditor",
      "mcp__agent-utilities__bazaar-check",
      "mcp__agent-utilities__phantom-seller-scan",
      "mcp__agent-utilities__url-fingerprint",
      "mcp__agent-utilities__url-extract",
      "mcp__agent-utilities__web-extract",
      "mcp__agent-utilities__image-ocr",
      "mcp__agent-utilities__red-flag-scan",
      "mcp__agent-utilities__offer-score",
      "mcp__agent-utilities__side-income-pdf",
      "mcp__agent-utilities__nebenverdienst-pdf"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as agent-utilities. Review it before you use it.