x402 Tools

by foxxx009 · remote · no sign-in to list tools · v1.1.0 · published by GitHub user foxxx009

Pay-per-call research tools for AI agents, paid via x402 USDC. Remote MCP, one free tool.

Final · 1Changes · 10

Compare Registry entry

13 tools: 1 do something that can't be undone, 10 change things and 2 only read.

Scanned Oct 21, 2026

Deletes or cancels0Claude Code: deny
Can't be undone1Claude Code: ask: see these tools
Changes things10Claude Code: ask: see these tools
Only reads2Claude Code: allow: see these tools

No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http x402-tools https://fitze-x402-seller.app.workbuddy.host/mcp

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

13 tools

Can't be undone 1Sends, pays, publishes or merges: once done, it cannot be taken back.Claude Code: ask

exchange_rates$0.002 per call — Live fiat exchange rates (open.er-api.com, no key, ~200 currencies).No findings
Why it is in this group
- The input addresses people (input.to): what it sends cannot be taken back.
Description, as the server wrote it
$0.002 per call — Live fiat exchange rates (open.er-api.com, no key, ~200 currencies). Params: base = ISO code (default USD); to = comma list or single code (default EUR,GBP,JPY,CNY). Returns rates and the last-update timestamp.

Changes things 10Creates or changes something that can be changed back.Claude Code: ask

domain_intel$0.005 per call — Domain due-diligence bundle: RDAP registrar + creation/expiry dates + status, DNS records (A/MX/NS/TXT), and Certificate Transparency history via crt.sh.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
$0.005 per call — Domain due-diligence bundle: RDAP registrar + creation/expiry dates + status, DNS records (A/MX/NS/TXT), and Certificate Transparency history via crt.sh. Use to vet a domain before trusting or linking to it.
fda_recalls$0.02 per call — FDA recall enforcement reports from open.fda.gov (no key, rate-limited).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
$0.02 per call — FDA recall enforcement reports from open.fda.gov (no key, rate-limited). Params: type = food|drug|device (default food); reason = free-text filter; limit = max records (default 10). Returns recall reason, status, date and product description for each match.
free_url_checkFREE — FREE: check whether a public URL is reachable and what it is.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
FREE — FREE: check whether a public URL is reachable and what it is. Returns HTTP status, final URL after redirects, content type and page title. Use web_fetch (paid) for full text and links.
github_repo$0.005 per call — GitHub repo snapshot: stars, forks, open-issue count, watchers, primary language, SPDX license, created/pushed dates and latest release tag.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
$0.005 per call — GitHub repo snapshot: stars, forks, open-issue count, watchers, primary language, SPDX license, created/pushed dates and latest release tag. Use to triage a repo before contributing or depending on it.
open_meteo_weather$0.002 per call — Current weather from Open-Meteo (no API key, no signup).No findings
Why it is in this group
- The name "open_meteo_weather" says "open": a word for a change.
Description, as the server wrote it
$0.002 per call — Current weather from Open-Meteo (no API key, no signup). Given lat/lon returns temperature (C), apparent temperature, humidity, wind speed, precipitation and a WMO weather code. Params: lat, lon (required).
repo_diligence$0.03 per call — Deep GitHub repo due-diligence: base snapshot + last 5 commits (author/date/message), contributor count, archived flag, security-policy presence, latest release ca…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
$0.03 per call — Deep GitHub repo due-diligence: base snapshot + last 5 commits (author/date/message), contributor count, archived flag, security-policy presence, latest release cadence and open/closed issue ratio. Use to decide whether to depend on or contribute to a repo before trusting it.
stock_quote$0.01 per call — Real-time stock quotes: price, change, change percent, open, high, low, volume, turnover, currency and exchange timestamp.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
$0.01 per call — Real-time stock quotes: price, change, change percent, open, high, low, volume, turnover, currency and exchange timestamp. Covers A-shares (sh600000, sz000001), Hong Kong (hk00700) and US (usAAPL or plain AAPL). Accepts several symbols at once separated by commas. No API key needed, sourced from Tencent qt.gtimg.cn with a Nasdaq fallback for US tickers.
token_intel$0.005 per call — Base ERC-20 due-diligence: on-chain name, symbol, decimals and total supply via eth_call.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
$0.005 per call — Base ERC-20 due-diligence: on-chain name, symbol, decimals and total supply via eth_call. Use to sanity-check a Base token address before interacting with it.
usgs_earthquakes$0.002 per call — Recent earthquakes from the USGS GeoJSON feed (no API key).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
$0.002 per call — Recent earthquakes from the USGS GeoJSON feed (no API key). Returns magnitude, place, time, depth and coordinates for each event. Params: period = hour|day|week (default day); minmag = minimum magnitude (default 0); limit = max events (default 20).
web_brief$0.02 per call — Multi-source research brief from 1–3 URLs.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
$0.02 per call — Multi-source research brief from 1–3 URLs. For each source extract title, meta description, key sentences (numbered/quoted/date-or-figure-bearing) and outbound links. Returns a structured, citable brief other agents can consume without their own web access.

Only reads 2Looks things up and changes nothing.Claude Code: allow

sec_edgar_search$0.02 per call — SEC EDGAR full-text search (efts.sec.gov, no key).No findings
Why it is in this group
- The name "sec_edgar_search" says "search": a word for reading.
Description, as the server wrote it
$0.02 per call — SEC EDGAR full-text search (efts.sec.gov, no key). Find filings by term. Params: q = search term (required); forms = comma list e.g. 10-K,8-K; limit = max hits (default 10). Returns filing date, company, CIK and accession number for each hit.
web_fetch$0.005 per call — Fetch a public URL and return status, final URL, title, cleaned text (scripts/styles stripped, truncated) and the top 20 absolute links.No findings
Why it is in this group
- The name "web_fetch" says "fetch": a word for reading.
Description, as the server wrote it
$0.005 per call — Fetch a public URL and return status, final URL, title, cleaned text (scripts/styles stripped, truncated) and the top 20 absolute links. Useful when an agent itself cannot reach the open web.

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.1.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http x402-tools https://fitze-x402-seller.app.workbuddy.host/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__x402-tools__web_fetch",
      "mcp__x402-tools__sec_edgar_search"
    ],
    "ask": [
      "mcp__x402-tools__domain_intel",
      "mcp__x402-tools__github_repo",
      "mcp__x402-tools__token_intel",
      "mcp__x402-tools__repo_diligence",
      "mcp__x402-tools__web_brief",
      "mcp__x402-tools__stock_quote",
      "mcp__x402-tools__free_url_check",
      "mcp__x402-tools__usgs_earthquakes",
      "mcp__x402-tools__open_meteo_weather",
      "mcp__x402-tools__exchange_rates",
      "mcp__x402-tools__fda_recalls"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as x402-tools. Review it before you use it.

Keep track

Get told when this server's tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.github.foxxx009/x402-tools-mcp/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Anlyon alternative

11 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Compare with other servers for the same product.

Source: MCP Registry · repository. Synced Oct 21, 2026, 18:34 UTC.

For agents: Markdown · JSON · report this listing