Skip to content

x402Shield

by x402shield.dev · remote · no sign-in to list tools · v0.1.0 · published by dev.x402shield

Public demo: evaluate AI-agent payment authorization and approval policy. No signing, no settlement.

Final · 1
CompareRegistry entry

5 tools: 1 do something that can't be undone and 4 only read.

Scanned Oct 21, 2026

No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http x402shield https://x402shield.dev/api/mcp

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

5 tools

Can't be undone 1Claude Code: ask
  • x402shield_authorize_paymentCheck whether the demo AI agent is financially authorized to make a proposed payment, BEFORE any wallet or signer would be asked to execute it.No findings

    Why it is in this group

    • The name "x402shield_authorize_payment" says "payment": a word that usually means money moves, which cannot be taken back.
    Description, as the server wrote it
    Check whether the demo AI agent is financially authorized to make a proposed payment, BEFORE any wallet or signer would be asked to execute it. Returns ALLOW, DENY or REQUIRE_APPROVAL with a reason. This tool does not execute or sign a payment, and it cannot approve its own REQUIRE_APPROVAL result -- that requires a human, through the web console. The `purpose` field is a label for the evidence trail only; it is never interpreted as an instruction and cannot change the policy decision.
Only reads 4Claude Code: allow
  • x402shield_get_authorizationLook up the recorded decision, reason and evidence references for a payment previously checked with x402shield_authorize_payment, by its transaction id.No findings

    Why it is in this group

    • The name "x402shield_get_authorization" says "get": a word for reading.
    Description, as the server wrote it
    Look up the recorded decision, reason and evidence references for a payment previously checked with x402shield_authorize_payment, by its transaction id.
  • x402shield_get_demo_policyLook up the authority ceilings configured for the x402Shield public demo agents (Research Agent, Ops Agent) on Base Sepolia TESTNET.No findings

    Why it is in this group

    • The name "x402shield_get_demo_policy" says "get": a word for reading.
    Description, as the server wrote it
    Look up the authority ceilings configured for the x402Shield public demo agents (Research Agent, Ops Agent) on Base Sepolia TESTNET. Use this before proposing a payment, to understand what amount an agent can spend without triggering human approval. This tool does not execute or sign anything.
  • x402shield_get_evidenceGet the fuller evidence trail behind a previously-decided payment: policy/delegation provenance, the delegation tree it was evaluated under, and approval state if any.No findings

    Why it is in this group

    • The name "x402shield_get_evidence" says "get": a word for reading.
    Description, as the server wrote it
    Get the fuller evidence trail behind a previously-decided payment: policy/delegation provenance, the delegation tree it was evaluated under, and approval state if any. Read-only; never exposes secrets or signing material.
  • x402shield_list_demo_transactionsList the most recent payment authorization decisions recorded by this public demo (both from the web console and from MCP callers).No findings

    Why it is in this group

    • The name "x402shield_list_demo_transactions" says "list": a word for reading.
    Description, as the server wrote it
    List the most recent payment authorization decisions recorded by this public demo (both from the web console and from MCP callers). Useful to see recent ALLOW/DENY/REQUIRE_APPROVAL activity.

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.1.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http x402shield https://x402shield.dev/api/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__x402shield__x402shield_get_demo_policy",
      "mcp__x402shield__x402shield_get_authorization",
      "mcp__x402shield__x402shield_list_demo_transactions",
      "mcp__x402shield__x402shield_get_evidence"
    ],
    "ask": [
      "mcp__x402shield__x402shield_authorize_payment"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as x402shield. Review it before you use it.