Skip to content

Teppi

by teppi.xyz · remote · no sign-in to list tools · v0.1.0 · published by xyz.teppi

Check what a paid x402 endpoint or MCP server delivered, from probes anyone can repeat.

Changes · 2

5 tools: 2 change things and 3 only read.

Scanned Oct 21, 2026

No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http teppi https://api.teppi.xyz/mcp

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

5 tools

Changes things 2Claude Code: ask
  • check_exposureLook up every paid endpoint your agents call in one go, added up by the address each one pays: which are unknown to the record, which took money and returned nothing, which list wh…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Look up every paid endpoint your agents call in one go, added up by the address each one pays: which are unknown to the record, which took money and returned nothing, which list what they do not serve, and how much monthly spend sits on each. Unknown is reported as unknown, never as bad.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • plan_routeTurn a goal and a budget into an ordered list of paid endpoints that could reach it, with a cost estimate and what has been verified about each step.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Turn a goal and a budget into an ordered list of paid endpoints that could reach it, with a cost estimate and what has been verified about each step. Moves no money and buys nothing: it returns the plan for you to run yourself.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
Only reads 3Claude Code: allow
  • check_gradeReturn what has been verified about an x402 endpoint or its url: whether it answers, what it charges, and whether that price has moved.No findings

    Why it is in this group

    • The description's first verb is "return": a word for reading.
    Description, as the server wrote it
    Return what has been verified about an x402 endpoint or its url: whether it answers, what it charges, and whether that price has moved. Answers unrated rather than guessing when the evidence is thin. Works for endpoints Teppi does not operate, and a url never seen is put in line for a free handshake, so ask again in an hour.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • get_capabilityFull detail for one capability: schemas, pricing, networks, the seller behind it, and every observation recorded against it.No findings

    Why it is in this group

    • The name "get_capability" says "get": a word for reading.
    Description, as the server wrote it
    Full detail for one capability: schemas, pricing, networks, the seller behind it, and every observation recorded against it.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • search_capabilitiesSearch paid agent capabilities by task description.No findings

    Why it is in this group

    • The name "search_capabilities" says "search": a word for reading.
    Description, as the server wrote it
    Search paid agent capabilities by task description. Returns the price, the input and output schemas, the networks each one settles on, and what has been verified about it. Sort by verified to put the ones with the most evidence behind them first. Use before paying an x402 endpoint you have not used.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.1.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http teppi https://api.teppi.xyz/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__teppi__search_capabilities",
      "mcp__teppi__get_capability",
      "mcp__teppi__check_grade"
    ],
    "ask": [
      "mcp__teppi__plan_route",
      "mcp__teppi__check_exposure"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as teppi. Review it before you use it.