io.github.acrylicfiddle/x402tools

REMOTE · MCP.X402TOOLS.XYZ · 2 COMPONENTS · SCANNED AUG 3

10 pay-per-call tools for AI agents: QR, screenshots, DNS, OCR, PDF, email & more. USDC on Base.

Available components

remote · mcp.x402tools.xyz 69 npm · @x402-tools/mcp 57

+4 this week 69 69 Trust /100

Trust breakdown (6 categories)

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score →

Endpoint Security80

The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
No authorisation is required to call this server. Every tool declares its destructiveHint and none is destructive, so open access doesn't expose one. See how to fix → View diagnostics → Partial
HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
The HSTS (Strict-Transport-Security) header is present. View diagnostics → Pass
DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail

Transport & Reachability100

Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass

Schema Quality & AI Usability60

AI-judged instruction clarity (good).Pass
Context-footprint check failed: tool/resource definitions use about 1855 tokens (~168/item across 11 items; 11 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
Usage-examples check failed: none of the tools include examples. See how to fix → Fail

Stability & Change Management0

Stability check failed: schema churn in the 8 days we've observed: 11 tool removals, 0 breaking changes, 0 auth/transport breaks, 11 additions. See how to fix → Fail

Tool Coverage100

100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
100% of tool parameters carry a description.Pass
Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass

Capabilities100

Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass

Install

Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.

remote · mcp.x402tools.xyz

Claude Codex opencode OpenClaw Hermes Other

# add to Claude Code

claude mcp add --transport http acrylicfiddle-x402tools https://mcp.x402tools.xyz/mcp

# ~/.codex/config.toml

[mcp_servers.acrylicfiddle-x402tools]
url = "https://mcp.x402tools.xyz/mcp"

// opencode.json

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "acrylicfiddle-x402tools": {
      "type": "remote",
      "url": "https://mcp.x402tools.xyz/mcp",
      "enabled": true
    }
  }
}

# add to OpenClaw

openclaw mcp add acrylicfiddle-x402tools --url https://mcp.x402tools.xyz/mcp --transport streamable-http

# ~/.hermes/config.yaml

mcp_servers:
  acrylicfiddle-x402tools:
    url: "https://mcp.x402tools.xyz/mcp"

// mcp.json

{
  "mcpServers": {
    "acrylicfiddle-x402tools": {
      "type": "http",
      "url": "https://mcp.x402tools.xyz/mcp"
    }
  }
}

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

31 Jul 26 +4
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
27 Jul 26 +6
- Stability: unverified → fail ▼ security
- Tool “dns_lookup” was removed ▼ security
- Tool “extract_text_ocr” was removed ▼ security
- Tool “enrich_prospect” was removed ▼ security
- Tool “capture_screenshot” was removed ▼ security
- Tool “parse_document” was removed ▼ security
- Tool “render_pdf” was removed ▼ security
- Tool “screen_prompt_injection” was removed ▼ security
- Tool “validate_email” was removed ▼ security
- Tool “wordstats” was removed ▼ security
- Tool “generate_styled_qr” was removed ▼ security
- Tool “generate_qr” was removed ▼ security
- Authorization: unverified → partial ▲ security
- First check of Tool coverage: 100 functional
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- Server version: 1.7.0 → 1.8.0 functional
- New tool “security.screen” functional
- New tool “qr.generate_styled” functional
- New tool “qr.generate” functional
- New tool “prospect.enrich” functional
- New tool “image.screenshot” functional
- New tool “image.ocr” functional
- New tool “email.validate” functional
- New tool “document.render_pdf” functional
- New tool “document.parse” functional
- New tool “dns.lookup” functional
- New tool “community.wordstats” functional
26 Jul 26 59

First indexed and scored.

Show 1 earlier entry Hide earlier entries

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 3 Aug 2026 · Probed https://mcp.x402tools.xyz/mcp

TLS valid

Negotiated TLS 1.3 with TLS_AES_256_GCM_SHA384 .

Subject	Issuer	Valid from	Valid until	Key	Signature	Serial
CN=mcp.x402tools.xyz	CN=YR2,O=Let's Encrypt,C=US	11 Jun 2026	9 Sept 2026	RSA 2048	SHA256-RSA	50423f4c88d8c04819dd3e696d611933e3e
SANs: mcp.x402tools.xyz
CN=YR2,O=Let's Encrypt,C=US (CA)	CN=Root YR,O=ISRG,C=US	3 Sept 2025	2 Sept 2028	RSA 2048	SHA256-RSA	4ebd24947e24d394802d84a52fd5b319
CN=Root YR,O=ISRG,C=US (CA)	CN=ISRG Root X1,O=Internet Security Research Group,C=US	13 May 2026	2 Sept 2032	RSA 4096	SHA256-RSA	f24b6d17f9d9ad7cb1c9fea78782699f

DNSSEC insecure

Validation of mcp.x402tools.xyz. — Not signed

Zone	DS	Keys	Algorithms	Outcome
.	trust_anchor	20326, 38696	8, 8	Verified
xyz.	present	3599, 18130	8, 8	Verified
x402tools.xyz.	absent			Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation

Authentication No authorisation required

The endpoint answered without asking for a token. Anyone who knows the URL can reach it.

Result	No authorisation required
HTTP status	200

Header	Value
strict-transport-security	max-age=31536000; includeSubDomains

Transports 2 probes

Transport	URL	Outcome	Status	Location
streamable-http	https://mcp.x402tools.xyz/mcp	Verified	200
http (plaintext)	http://mcp.x402tools.xyz/mcp	HTTPS enforced	308	https://mcp.x402tools.xyz/mcp

MCP tools — 11 exposed · ~1,855 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.

Tool Tokens

community.wordstats Wordstats ~138

Return word count, character count, and average word length for a block of text. Costs $0.001 on eip155:8453. Community service (x402 pay-per-call).

Input Output Examples

Name	Type	Req	Description
_payment	string	—	Base64-encoded signed v2 PaymentPayload (the value you'd put in the PAYMENT-SIGNATURE HTTP header). Use @x402/evm or @x402/fetch to sign locally with your own wallet — your private key never leaves y…
text	string	yes	Parameter "text" forwarded to the x402 service.

Name	Type	Req	Description
error	string	—	Error message when the call failed.
network	string	—	Settlement network for the x402 payment (base).
payment_required	boolean	—	True when the call needs an x402 payment before it will run.
price_usdc	string	—	Price charged for this call, in USDC on Base.
requirements	—	—	x402 payment requirements (scheme, network, amount, payTo, asset) when payment_required is true.
result	—	—	Raw JSON payload returned by the x402 service on a successful, paid call.
service	string	—	Underlying x402tools service that handled the call.

No examples provided.

dns.lookup DNS Lookup ~132

Look up DNS records (A, AAAA, MX, NS, TXT, SOA) for any domain. Costs $0.02 USDC on Base.

Input Output Examples

Name	Type	Req	Description
_payment	string	—	Base64-encoded signed v2 PaymentPayload (the value you'd put in the PAYMENT-SIGNATURE HTTP header). Use @x402/evm or @x402/fetch to sign locally with your own wallet — your private key never leaves y…
domain	string	yes	Domain name to look up (e.g. example.com)

Name	Type	Req	Description
error	string	—	Error message when the call failed.
network	string	—	Settlement network for the x402 payment (base).
payment_required	boolean	—	True when the call needs an x402 payment before it will run.
price_usdc	string	—	Price charged for this call, in USDC on Base.
requirements	—	—	x402 payment requirements (scheme, network, amount, payTo, asset) when payment_required is true.
result	—	—	Raw JSON payload returned by the x402 service on a successful, paid call.
service	string	—	Underlying x402tools service that handled the call.

No examples provided.

document.parse Parse Document ~151

Parse any public HTML page or PDF URL into clean structured JSON. Auto-detects doc type. Costs $0.01 USDC on Base.

Input Output Examples

Name	Type	Req	Description
_payment	string	—	Base64-encoded signed v2 PaymentPayload (the value you'd put in the PAYMENT-SIGNATURE HTTP header). Use @x402/evm or @x402/fetch to sign locally with your own wallet — your private key never leaves y…
include_raw_text	boolean	—	Include raw extracted text
output_schema	string	—	Output schema type
url	string	yes	Public URL of HTML page or PDF to parse

Name	Type	Req	Description
error	string	—	Error message when the call failed.
network	string	—	Settlement network for the x402 payment (base).
payment_required	boolean	—	True when the call needs an x402 payment before it will run.
price_usdc	string	—	Price charged for this call, in USDC on Base.
requirements	—	—	x402 payment requirements (scheme, network, amount, payTo, asset) when payment_required is true.
result	—	—	Raw JSON payload returned by the x402 service on a successful, paid call.
service	string	—	Underlying x402tools service that handled the call.

No examples provided.

document.render_pdf Render PDF ~170

Convert raw HTML or a public URL into a PDF document. Costs $0.05 USDC on Base.

Input Output Examples

Name	Type	Req	Description
_payment	string	—	Base64-encoded signed v2 PaymentPayload (the value you'd put in the PAYMENT-SIGNATURE HTTP header). Use @x402/evm or @x402/fetch to sign locally with your own wallet — your private key never leaves y…
format	string	—	Page size
html	string	—	Raw HTML to render (provide html OR url)
landscape	boolean	—	Landscape orientation
scale	number	—	Render scale, 0.1-2
url	string	—	Public URL to render (provide html OR url)

Name	Type	Req	Description
encoding	string	—	Encoding of the binary payload (base64).
error	string	—	Error message when the call failed.
mimeType	string	—	MIME type of the returned binary payload (e.g. image/png, application/pdf).
network	string	—	Settlement network for the x402 payment (base).
payment_required	boolean	—	True when the call needs an x402 payment before it will run.
price_usdc	string	—	Price charged for this call, in USDC on Base.
requirements	—	—	x402 payment requirements (scheme, network, amount, payTo, asset) when payment_required is true.
result	—	—	Raw JSON payload returned by the x402 service on a successful, paid call.
service	string	—	Underlying x402tools service that handled the call.

No examples provided.

email.validate Validate Email ~143

Validate and verify an email address. Checks syntax, MX records, SMTP deliverability, disposable domains, and returns a risk score. Costs $0.03 USDC on Base.

Input Output Examples

Name	Type	Req	Description
_payment	string	—	Base64-encoded signed v2 PaymentPayload (the value you'd put in the PAYMENT-SIGNATURE HTTP header). Use @x402/evm or @x402/fetch to sign locally with your own wallet — your private key never leaves y…
checkSmtp	boolean	—	Attempt an SMTP deliverability probe
email	string	yes	Email address to validate

Name	Type	Req	Description
error	string	—	Error message when the call failed.
network	string	—	Settlement network for the x402 payment (base).
payment_required	boolean	—	True when the call needs an x402 payment before it will run.
price_usdc	string	—	Price charged for this call, in USDC on Base.
requirements	—	—	x402 payment requirements (scheme, network, amount, payTo, asset) when payment_required is true.
result	—	—	Raw JSON payload returned by the x402 service on a successful, paid call.
service	string	—	Underlying x402tools service that handled the call.

No examples provided.

image.ocr Extract Text (OCR) ~164

Extract text from an image using OCR. Costs $0.05 USDC on Base.

Input Output Examples

Name	Type	Req	Description
_payment	string	—	Base64-encoded signed v2 PaymentPayload (the value you'd put in the PAYMENT-SIGNATURE HTTP header). Use @x402/evm or @x402/fetch to sign locally with your own wallet — your private key never leaves y…
format	string	—	Output format
image	string	—	Base64-encoded image data (provide url OR image)
language	string	—	OCR language (ISO 639-3, e.g. eng)
url	string	—	Public image URL to OCR (provide url OR image)

Name	Type	Req	Description
error	string	—	Error message when the call failed.
network	string	—	Settlement network for the x402 payment (base).
payment_required	boolean	—	True when the call needs an x402 payment before it will run.
price_usdc	string	—	Price charged for this call, in USDC on Base.
requirements	—	—	x402 payment requirements (scheme, network, amount, payTo, asset) when payment_required is true.
result	—	—	Raw JSON payload returned by the x402 service on a successful, paid call.
service	string	—	Underlying x402tools service that handled the call.

No examples provided.

image.screenshot Capture Website Screenshot ~210

Capture a screenshot of any website. Supports dark mode, full-page, and element selection. Costs $0.05 USDC on Base.

Input Output Examples

Name	Type	Req	Description
_payment	string	—	Base64-encoded signed v2 PaymentPayload (the value you'd put in the PAYMENT-SIGNATURE HTTP header). Use @x402/evm or @x402/fetch to sign locally with your own wallet — your private key never leaves y…
darkMode	boolean	—	Emulate prefers-color-scheme: dark
delay	number	—	Wait ms after page load before capture
format	string	—	Output image format
fullPage	boolean	—	Capture full scrollable page
height	number	—	Viewport height in pixels
selector	string	—	CSS selector to capture specific element
url	string	yes	URL to screenshot
width	number	—	Viewport width in pixels

Name	Type	Req	Description
encoding	string	—	Encoding of the binary payload (base64).
error	string	—	Error message when the call failed.
mimeType	string	—	MIME type of the returned binary payload (e.g. image/png, application/pdf).
network	string	—	Settlement network for the x402 payment (base).
payment_required	boolean	—	True when the call needs an x402 payment before it will run.
price_usdc	string	—	Price charged for this call, in USDC on Base.
requirements	—	—	x402 payment requirements (scheme, network, amount, payTo, asset) when payment_required is true.
result	—	—	Raw JSON payload returned by the x402 service on a successful, paid call.
service	string	—	Underlying x402tools service that handled the call.

No examples provided.

prospect.enrich Enrich Prospect ~199

Turn a name + company domain into a sales-ready prospect profile: seniority, buyer persona, decision-maker probability, company intel, email pattern, and a personalised cold-email opener. Use for AI SDRs, lead enrichment, and outbound personalisation. Costs $0.50 USDC on Base.

Input Output Examples

Name	Type	Req	Description
_payment	string	—	Base64-encoded signed v2 PaymentPayload (the value you'd put in the PAYMENT-SIGNATURE HTTP header). Use @x402/evm or @x402/fetch to sign locally with your own wallet — your private key never leaves y…
company_name	string	—	Company name if known (optional)
domain	string	yes	Company domain, e.g. stripe.com
linkedin_url	string	—	Known LinkedIn profile URL (optional hint)
name	string	yes	Full name of the prospect

Name	Type	Req	Description
error	string	—	Error message when the call failed.
network	string	—	Settlement network for the x402 payment (base).
payment_required	boolean	—	True when the call needs an x402 payment before it will run.
price_usdc	string	—	Price charged for this call, in USDC on Base.
requirements	—	—	x402 payment requirements (scheme, network, amount, payTo, asset) when payment_required is true.
result	—	—	Raw JSON payload returned by the x402 service on a successful, paid call.
service	string	—	Underlying x402tools service that handled the call.

No examples provided.

qr.generate Generate QR Code ~142

Generate a QR code from text or URL. Returns PNG image as base64. Costs $0.01 USDC on Base.

Input Output Examples

Name	Type	Req	Description
_payment	string	—	Base64-encoded signed v2 PaymentPayload (the value you'd put in the PAYMENT-SIGNATURE HTTP header). Use @x402/evm or @x402/fetch to sign locally with your own wallet — your private key never leaves y…
format	string	—	Output format
size	number	—	Image width/height in pixels
text	string	yes	Content to encode in QR code

Name	Type	Req	Description
encoding	string	—	Encoding of the binary payload (base64).
error	string	—	Error message when the call failed.
mimeType	string	—	MIME type of the returned binary payload (e.g. image/png, application/pdf).
network	string	—	Settlement network for the x402 payment (base).
payment_required	boolean	—	True when the call needs an x402 payment before it will run.
price_usdc	string	—	Price charged for this call, in USDC on Base.
requirements	—	—	x402 payment requirements (scheme, network, amount, payTo, asset) when payment_required is true.
result	—	—	Raw JSON payload returned by the x402 service on a successful, paid call.
service	string	—	Underlying x402tools service that handled the call.

No examples provided.

qr.generate_styled Generate Styled QR Code ~228

Generate an artistic/styled QR code with custom shapes, colors, and gradients. Costs $0.05 USDC on Base.

Input Output Examples

Name	Type	Req	Description
_payment	string	—	Base64-encoded signed v2 PaymentPayload (the value you'd put in the PAYMENT-SIGNATURE HTTP header). Use @x402/evm or @x402/fetch to sign locally with your own wallet — your private key never leaves y…
backgroundColor	string	—	Hex background color
cornerColor	string	—	Hex color for finder pattern corners
dotColor	string	—	Hex color for dots (e.g. #6366f1)
dotType	string	—	Shape of QR modules
format	string	—	Output format
gradientFrom	string	—	Gradient start color (hex)
gradientTo	string	—	Gradient end color (hex)
size	number	—	Image width/height in pixels
text	string	yes	Content to encode in QR code

Name	Type	Req	Description
encoding	string	—	Encoding of the binary payload (base64).
error	string	—	Error message when the call failed.
mimeType	string	—	MIME type of the returned binary payload (e.g. image/png, application/pdf).
network	string	—	Settlement network for the x402 payment (base).
payment_required	boolean	—	True when the call needs an x402 payment before it will run.
price_usdc	string	—	Price charged for this call, in USDC on Base.
requirements	—	—	x402 payment requirements (scheme, network, amount, payTo, asset) when payment_required is true.
result	—	—	Raw JSON payload returned by the x402 service on a successful, paid call.
service	string	—	Underlying x402tools service that handled the call.

No examples provided.

security.screen Screen for Prompt Injection ~178

Screen text for prompt injection and jailbreak attacks before passing it to an LLM. Detects 10 attack categories. Costs $0.03 USDC on Base.

Input Output Examples

Name	Type	Req	Description
_payment	string	—	Base64-encoded signed v2 PaymentPayload (the value you'd put in the PAYMENT-SIGNATURE HTTP header). Use @x402/evm or @x402/fetch to sign locally with your own wallet — your private key never leaves y…
redacted	boolean	—	Redact flagged snippets in the response
sensitivity	string	—	Detection sensitivity
source	string	—	Origin of the text (user_input, email, form, etc.)
text	string	yes	Text to screen for prompt injection (max 50,000 chars)

Name	Type	Req	Description
error	string	—	Error message when the call failed.
network	string	—	Settlement network for the x402 payment (base).
payment_required	boolean	—	True when the call needs an x402 payment before it will run.
price_usdc	string	—	Price charged for this call, in USDC on Base.
requirements	—	—	x402 payment requirements (scheme, network, amount, payTo, asset) when payment_required is true.
result	—	—	Raw JSON payload returned by the x402 service on a successful, paid call.
service	string	—	Underlying x402tools service that handled the call.

No examples provided.

On this page

Handy links

Scoring key

80+ high trust
60–79 medium
below 60 low

How we score

Score history · last 30 days

26 Jul 3 Aug

Day	Score
26 Jul	59
27 Jul	65
28 Jul	65
29 Jul	65
30 Jul	65
31 Jul	69
1 Aug	69
2 Aug	69
3 Aug	69