Skip to content

io.github.hypeprinter007-stack/anchor-x402

by hypeprinter007-stack · remote · local (npm) · no sign-in to list tools · v0.3.2 · published by GitHub user hypeprinter007-stack

x402-paid agent tools: 18 over HTTP, 14 over stdio. USDC per call, no API key.

Final · 2Changes · 13
CompareRegistry entry

18 tools: 2 do something that can't be undone, 13 change things and 3 only read.

Scanned Oct 21, 2026

1 check matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http anchor-x402 https://api.anchor-x402.com/mcp

Findings

Matches of fixed checks, with the text they matched.

1 warn
  • Warnledger_summary

    The server marks "ledger_summary" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

    Matched text

    annotations: {"readOnlyHint":true,"openWorldHint":true}; The input addresses people (input.to): what it sends cannot be taken back.

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

18 tools

Can't be undone 2Claude Code: ask
  • ledger_reportSigned + dual-chain-anchored x402 expense report (markdown + CSV, async job).No findings

    Why it is in this group

    • The input addresses people (input.to): what it sends cannot be taken back.
    Description, as the server wrote it
    Signed + dual-chain-anchored x402 expense report (markdown + CSV, async job). $0.35 USDC.

    Annotations the server declares

    • readOnlyHint: false
    • openWorldHint: true
  • ledger_summaryx402 spend accounting for any Base wallet — totals + per-service breakdown reconstructed from chain data.1 finding

    Why it is in this group

    • The input addresses people (input.to): what it sends cannot be taken back.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "ledger_summary" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

      Matched text

      annotations: {"readOnlyHint":true,"openWorldHint":true}; The input addresses people (input.to): what it sends cannot be taken back.

      What this check looks for
    Description, as the server wrote it
    x402 spend accounting for any Base wallet — totals + per-service breakdown reconstructed from chain data. $0.01 USDC.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
Changes things 13Claude Code: ask
  • anchor_hashAnchor a 32-byte hash to Base + Solana mainnet in parallel.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Anchor a 32-byte hash to Base + Solana mainnet in parallel. Returns both tx URLs as cryptographic proof of when the hash existed. $0.005 USDC.

    Annotations the server declares

    • readOnlyHint: false
    • openWorldHint: true
  • attest_decisionAttest a decision over (input_hash, output_hash, decision): sign it yourself, or omit the signature and the treasury signs for you — then dual-chain anchor.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Attest a decision over (input_hash, output_hash, decision): sign it yourself, or omit the signature and the treasury signs for you — then dual-chain anchor. Returns the signer, on-chain proof URLs, and a free re-verify URL. $0.010 USDC.

    Annotations the server declares

    • readOnlyHint: false
    • openWorldHint: true
  • decode_calldataDecode raw EVM calldata into function name + typed parameters via openchain.xyz + eth_abi.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Decode raw EVM calldata into function name + typed parameters via openchain.xyz + eth_abi. EVM-only. $0.001 USDC.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • decode_txStructured decode of any mainnet transaction by hash.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Structured decode of any mainnet transaction by hash. Supports Base, Ethereum, Solana. Mined txs cached. $0.001 USDC.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • grade_targetAcademic letter grade with red-pen marginalia for anything.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Academic letter grade with red-pen marginalia for anything. $0.01 USDC.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • intel_walletUnified wallet intelligence bundle.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Unified wallet intelligence bundle. ONE call: balances on Base + Ethereum + Solana, USDC, tx counts, ENS/SNS reverse, sanctions verdict. 8-10 parallel sources. $0.005 USDC.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • investigate_walletAgent-driven wallet due diligence — multi-step investigation, signed markdown report + JSON sidecar, dual-chain anchored.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Agent-driven wallet due diligence — multi-step investigation, signed markdown report + JSON sidecar, dual-chain anchored. Async — returns job_id; poll /v1/investigate/status/{job_id} for the deliverable. ETA 5-10 min. $1.77 USDC.

    Annotations the server declares

    • readOnlyHint: false
    • openWorldHint: true
  • oracle_verdictYes/no oracle with dual-chain anchored verdict (Base + Solana).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Yes/no oracle with dual-chain anchored verdict (Base + Solana). $0.05 USDC.

    Annotations the server declares

    • readOnlyHint: false
    • openWorldHint: true
  • parse_datetimeParse freeform datetime strings into ISO 8601 + components + relative time + confidence.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Parse freeform datetime strings into ISO 8601 + components + relative time + confidence. $0.001 USDC.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • roast_targetWitty roast of any target — wallet, tweet, idea, code, anything.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Witty roast of any target — wallet, tweet, idea, code, anything. $0.05 USDC.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • roll_randomVerifiable RNG — cryptographically-random integer(s) signed by the treasury key.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Verifiable RNG — cryptographically-random integer(s) signed by the treasury key. Drop-in VRF for game studios. $0.001 USDC.

    Annotations the server declares

    • readOnlyHint: false
    • openWorldHint: true
  • screen_walletWallet risk pre-flight for agent payments: OFAC SDN sanctions plus address-reputation (drainer, phishing, mixer, laundering) resolved to an allow/review/block recommendation with p…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Wallet risk pre-flight for agent payments: OFAC SDN sanctions plus address-reputation (drainer, phishing, mixer, laundering) resolved to an allow/review/block recommendation with per-signal detail. $0.005 USDC.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • token_priceUSD spot price for any major token.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    USD spot price for any major token. By symbol or chain+contract. CoinGecko-backed, 60s cache. $0.001 USDC.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
Only reads 3Claude Code: allow
  • aura_readRead the aura of anything — color, tier (S/A/B/C/D/F), score 0-9999, description.No findings

    Why it is in this group

    • The name "aura_read" says "read": a word for reading.
    Description, as the server wrote it
    Read the aura of anything — color, tier (S/A/B/C/D/F), score 0-9999, description. $0.01 USDC.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • resolve_nameCross-chain name resolution: ENS (.eth) and Bonfida SNS (.sol).No findings

    Why it is in this group

    • The name "resolve_name" says "resolve": a word for reading.
    Description, as the server wrote it
    Cross-chain name resolution: ENS (.eth) and Bonfida SNS (.sol). Returns resolved address(es). 1h cache. $0.001 USDC.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • tldr_textSummarize a URL or pasted text into 3-5 concise bullets.No findings

    Why it is in this group

    • The description's first verb is "summarize": a word for reading.
    Description, as the server wrote it
    Summarize a URL or pasted text into 3-5 concise bullets. $0.01 USDC.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.3.2. Values in angle brackets are yours to fill in.

claude mcp add --transport http anchor-x402 https://api.anchor-x402.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__anchor-x402__aura_read",
      "mcp__anchor-x402__resolve_name",
      "mcp__anchor-x402__tldr_text"
    ],
    "ask": [
      "mcp__anchor-x402__anchor_hash",
      "mcp__anchor-x402__attest_decision",
      "mcp__anchor-x402__decode_calldata",
      "mcp__anchor-x402__decode_tx",
      "mcp__anchor-x402__grade_target",
      "mcp__anchor-x402__intel_wallet",
      "mcp__anchor-x402__investigate_wallet",
      "mcp__anchor-x402__ledger_report",
      "mcp__anchor-x402__ledger_summary",
      "mcp__anchor-x402__oracle_verdict",
      "mcp__anchor-x402__parse_datetime",
      "mcp__anchor-x402__roast_target",
      "mcp__anchor-x402__roll_random",
      "mcp__anchor-x402__screen_wallet",
      "mcp__anchor-x402__token_price"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as anchor-x402. Review it before you use it.