io.github.acrylicfiddle/x402tools

NPM · @X402-TOOLS/MCP · 2 COMPONENTS · SCANNED AUG 3

10 pay-per-call tools for AI agents: QR, screenshots, DNS, OCR, PDF, email & more. USDC on Base.

Available components

remote · mcp.x402tools.xyz 69 npm · @x402-tools/mcp 57

+57 this week 57 57 Trust /100

Trust breakdown (6 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score →

Supply Chain Security87

No malware found by supply-chain analysis.Pass
Only part of the dependency tree could be resolved (113 of 117), so this covers what we could see, not the whole tree.Partial
No install/post-install scripts declared.Pass
Only part of the dependency tree could be resolved (113 of 117), so this covers what we could see, not the whole tree. View diagnostics → Partial

Provenance & Transparency19

Repository check failed: the declared repository URL returned HTTP 404. See how to fix → View diagnostics → Fail
Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
Clear OSI-approved license (MIT).Pass
Actively maintained (last published 6 days ago).Pass
Security-disclosure policy not yet verified: we couldn't inspect the source repository.Unverified

Schema Quality & AI Usability61

AI-judged instruction clarity (good).Pass
Context-footprint check failed: tool/resource definitions use about 1717 tokens (~171/item across 10 items; 10 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
Usage-examples check failed: none of the tools include examples. See how to fix → Fail

Stability & Change Management0

Stability check failed: the tool surface changed between 1.6.0 and 1.8.0: 10 tool removals, 0 breaking changes, 10 additions. See how to fix → Fail

Tool Coverage100

100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
100% of tool parameters carry a description.Pass
Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass

Capabilities100

Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass

Install

Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.

npm · @x402-tools/mcp

Claude Codex opencode OpenClaw Hermes Other

# add to Claude Code

claude mcp add acrylicfiddle-x402tools -- npx -y @x402-tools/mcp

# add to Codex CLI

codex mcp add acrylicfiddle-x402tools -- npx -y @x402-tools/mcp

// opencode.json

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "acrylicfiddle-x402tools": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@x402-tools/mcp"
      ],
      "enabled": true
    }
  }
}

# add to OpenClaw

openclaw mcp add acrylicfiddle-x402tools --command npx --arg -y --arg @x402-tools/mcp

# ~/.hermes/config.yaml

mcp_servers:
  acrylicfiddle-x402tools:
    command: "npx"
    args: ["-y", "@x402-tools/mcp"]

// mcp.json

{
  "mcpServers": {
    "acrylicfiddle-x402tools": {
      "command": "npx",
      "args": [
        "-y",
        "@x402-tools/mcp"
      ]
    }
  }
}

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

3 Aug 26 +15
- Provenance: unverified → fail ▼ security
- Install scripts: unverified → pass ▲ security
- Known CVEs: unverified → partial ▲ security
- Maintenance: unverified → pass ▲ functional
- License: unverified → pass ▲ functional
- Dependency health: unverified → partial ▲ functional
- Licence: MIT functional
2 Aug 26 +15
- Malware scan: unverified → pass ▲ security
31 Jul 26 −3
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
30 Jul 26 −22
- Install scripts: pass → unverified ▼ security
- Provenance: fail → unverified ▼ security
- Known CVEs: partial → unverified ▼ security
- Maintenance: pass → unverified ▼ functional
- License: pass → unverified ▼ functional
- Dependency health: partial → unverified ▼ functional
- Licence: MIT functional
28 Jul 26 +52
- Provenance: unverified → fail ▼ security
- Known CVEs: unverified → partial ▲ security
- Install scripts: unverified → pass ▲ security
- Maintenance: unverified → pass ▲ functional
- Dependency health: unverified → partial ▲ functional
- License: unverified → pass ▲ functional
- Tool coverage: unverified → 100 ▲ functional
- First check of Schema quality: fail functional
- First check of Schema quality: good functional
- First check of Tool coverage: 100 functional
- First check of Tool coverage: 100 functional
- First check of Schema quality: fail functional
- Licence: MIT functional
27 Jul 26 0

First indexed and scored.

Show 2 earlier entries Hide earlier entries

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 3 Aug 2026 · Analysed npm/@x402-tools/[email protected]

Provenance none

Ecosystem: npm · Outcome: none

Dependencies 113 packages

113 packages in the resolved dependency tree · 112 deprecated · 29 stale.

The dependency tree was only partially resolved, so these counts may be incomplete.

MCP tools — 10 exposed · ~1,717 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.

Tool Tokens

dns.lookup DNS Lookup ~132

Look up DNS records (A, AAAA, MX, NS, TXT, SOA) for any domain. Costs $0.02 USDC on Base.

Input Output Examples

Name	Type	Req	Description
_payment	string	—	Base64-encoded signed v2 PaymentPayload (the value you'd put in the PAYMENT-SIGNATURE HTTP header). Use @x402/evm or @x402/fetch to sign locally with your own wallet — your private key never leaves y…
domain	string	yes	Domain name to look up (e.g. example.com)

Name	Type	Req	Description
error	string	—	Error message when the call failed.
network	string	—	Settlement network for the x402 payment (base).
payment_required	boolean	—	True when the call needs an x402 payment before it will run.
price_usdc	string	—	Price charged for this call, in USDC on Base.
requirements	—	—	x402 payment requirements (scheme, network, amount, payTo, asset) when payment_required is true.
result	—	—	Raw JSON payload returned by the x402 service on a successful, paid call.
service	string	—	Underlying x402tools service that handled the call.

No examples provided.

document.parse Parse Document ~151

Parse any public HTML page or PDF URL into clean structured JSON. Auto-detects doc type. Costs $0.01 USDC on Base.

Input Output Examples

Name	Type	Req	Description
_payment	string	—	Base64-encoded signed v2 PaymentPayload (the value you'd put in the PAYMENT-SIGNATURE HTTP header). Use @x402/evm or @x402/fetch to sign locally with your own wallet — your private key never leaves y…
include_raw_text	boolean	—	Include raw extracted text
output_schema	string	—	Output schema type
url	string	yes	Public URL of HTML page or PDF to parse

Name	Type	Req	Description
error	string	—	Error message when the call failed.
network	string	—	Settlement network for the x402 payment (base).
payment_required	boolean	—	True when the call needs an x402 payment before it will run.
price_usdc	string	—	Price charged for this call, in USDC on Base.
requirements	—	—	x402 payment requirements (scheme, network, amount, payTo, asset) when payment_required is true.
result	—	—	Raw JSON payload returned by the x402 service on a successful, paid call.
service	string	—	Underlying x402tools service that handled the call.

No examples provided.

document.render_pdf Render PDF ~170

Convert raw HTML or a public URL into a PDF document. Costs $0.05 USDC on Base.

Input Output Examples

Name	Type	Req	Description
_payment	string	—	Base64-encoded signed v2 PaymentPayload (the value you'd put in the PAYMENT-SIGNATURE HTTP header). Use @x402/evm or @x402/fetch to sign locally with your own wallet — your private key never leaves y…
format	string	—	Page size
html	string	—	Raw HTML to render (provide html OR url)
landscape	boolean	—	Landscape orientation
scale	number	—	Render scale, 0.1-2
url	string	—	Public URL to render (provide html OR url)

Name	Type	Req	Description
encoding	string	—	Encoding of the binary payload (base64).
error	string	—	Error message when the call failed.
mimeType	string	—	MIME type of the returned binary payload (e.g. image/png, application/pdf).
network	string	—	Settlement network for the x402 payment (base).
payment_required	boolean	—	True when the call needs an x402 payment before it will run.
price_usdc	string	—	Price charged for this call, in USDC on Base.
requirements	—	—	x402 payment requirements (scheme, network, amount, payTo, asset) when payment_required is true.
result	—	—	Raw JSON payload returned by the x402 service on a successful, paid call.
service	string	—	Underlying x402tools service that handled the call.

No examples provided.

email.validate Validate Email ~143

Validate and verify an email address. Checks syntax, MX records, SMTP deliverability, disposable domains, and returns a risk score. Costs $0.03 USDC on Base.

Input Output Examples

Name	Type	Req	Description
_payment	string	—	Base64-encoded signed v2 PaymentPayload (the value you'd put in the PAYMENT-SIGNATURE HTTP header). Use @x402/evm or @x402/fetch to sign locally with your own wallet — your private key never leaves y…
checkSmtp	boolean	—	Attempt an SMTP deliverability probe
email	string	yes	Email address to validate

Name	Type	Req	Description
error	string	—	Error message when the call failed.
network	string	—	Settlement network for the x402 payment (base).
payment_required	boolean	—	True when the call needs an x402 payment before it will run.
price_usdc	string	—	Price charged for this call, in USDC on Base.
requirements	—	—	x402 payment requirements (scheme, network, amount, payTo, asset) when payment_required is true.
result	—	—	Raw JSON payload returned by the x402 service on a successful, paid call.
service	string	—	Underlying x402tools service that handled the call.

No examples provided.

image.ocr Extract Text (OCR) ~164

Extract text from an image using OCR. Costs $0.05 USDC on Base.

Input Output Examples

Name	Type	Req	Description
_payment	string	—	Base64-encoded signed v2 PaymentPayload (the value you'd put in the PAYMENT-SIGNATURE HTTP header). Use @x402/evm or @x402/fetch to sign locally with your own wallet — your private key never leaves y…
format	string	—	Output format
image	string	—	Base64-encoded image data (provide url OR image)
language	string	—	OCR language (ISO 639-3, e.g. eng)
url	string	—	Public image URL to OCR (provide url OR image)

Name	Type	Req	Description
error	string	—	Error message when the call failed.
network	string	—	Settlement network for the x402 payment (base).
payment_required	boolean	—	True when the call needs an x402 payment before it will run.
price_usdc	string	—	Price charged for this call, in USDC on Base.
requirements	—	—	x402 payment requirements (scheme, network, amount, payTo, asset) when payment_required is true.
result	—	—	Raw JSON payload returned by the x402 service on a successful, paid call.
service	string	—	Underlying x402tools service that handled the call.

No examples provided.

image.screenshot Capture Website Screenshot ~210

Capture a screenshot of any website. Supports dark mode, full-page, and element selection. Costs $0.05 USDC on Base.

Input Output Examples

Name	Type	Req	Description
_payment	string	—	Base64-encoded signed v2 PaymentPayload (the value you'd put in the PAYMENT-SIGNATURE HTTP header). Use @x402/evm or @x402/fetch to sign locally with your own wallet — your private key never leaves y…
darkMode	boolean	—	Emulate prefers-color-scheme: dark
delay	number	—	Wait ms after page load before capture
format	string	—	Output image format
fullPage	boolean	—	Capture full scrollable page
height	number	—	Viewport height in pixels
selector	string	—	CSS selector to capture specific element
url	string	yes	URL to screenshot
width	number	—	Viewport width in pixels

Name	Type	Req	Description
encoding	string	—	Encoding of the binary payload (base64).
error	string	—	Error message when the call failed.
mimeType	string	—	MIME type of the returned binary payload (e.g. image/png, application/pdf).
network	string	—	Settlement network for the x402 payment (base).
payment_required	boolean	—	True when the call needs an x402 payment before it will run.
price_usdc	string	—	Price charged for this call, in USDC on Base.
requirements	—	—	x402 payment requirements (scheme, network, amount, payTo, asset) when payment_required is true.
result	—	—	Raw JSON payload returned by the x402 service on a successful, paid call.
service	string	—	Underlying x402tools service that handled the call.

No examples provided.

prospect.enrich Enrich Prospect ~199

Turn a name + company domain into a sales-ready prospect profile: seniority, buyer persona, decision-maker probability, company intel, email pattern, and a personalised cold-email opener. Use for AI SDRs, lead enrichment, and outbound personalisation. Costs $0.50 USDC on Base.

Input Output Examples

Name	Type	Req	Description
_payment	string	—	Base64-encoded signed v2 PaymentPayload (the value you'd put in the PAYMENT-SIGNATURE HTTP header). Use @x402/evm or @x402/fetch to sign locally with your own wallet — your private key never leaves y…
company_name	string	—	Company name if known (optional)
domain	string	yes	Company domain, e.g. stripe.com
linkedin_url	string	—	Known LinkedIn profile URL (optional hint)
name	string	yes	Full name of the prospect

Name	Type	Req	Description
error	string	—	Error message when the call failed.
network	string	—	Settlement network for the x402 payment (base).
payment_required	boolean	—	True when the call needs an x402 payment before it will run.
price_usdc	string	—	Price charged for this call, in USDC on Base.
requirements	—	—	x402 payment requirements (scheme, network, amount, payTo, asset) when payment_required is true.
result	—	—	Raw JSON payload returned by the x402 service on a successful, paid call.
service	string	—	Underlying x402tools service that handled the call.

No examples provided.

qr.generate Generate QR Code ~142

Generate a QR code from text or URL. Returns PNG image as base64. Costs $0.01 USDC on Base.

Input Output Examples

Name	Type	Req	Description
_payment	string	—	Base64-encoded signed v2 PaymentPayload (the value you'd put in the PAYMENT-SIGNATURE HTTP header). Use @x402/evm or @x402/fetch to sign locally with your own wallet — your private key never leaves y…
format	string	—	Output format
size	number	—	Image width/height in pixels
text	string	yes	Content to encode in QR code

Name	Type	Req	Description
encoding	string	—	Encoding of the binary payload (base64).
error	string	—	Error message when the call failed.
mimeType	string	—	MIME type of the returned binary payload (e.g. image/png, application/pdf).
network	string	—	Settlement network for the x402 payment (base).
payment_required	boolean	—	True when the call needs an x402 payment before it will run.
price_usdc	string	—	Price charged for this call, in USDC on Base.
requirements	—	—	x402 payment requirements (scheme, network, amount, payTo, asset) when payment_required is true.
result	—	—	Raw JSON payload returned by the x402 service on a successful, paid call.
service	string	—	Underlying x402tools service that handled the call.

No examples provided.

qr.generate_styled Generate Styled QR Code ~228

Generate an artistic/styled QR code with custom shapes, colors, and gradients. Costs $0.05 USDC on Base.

Input Output Examples

Name	Type	Req	Description
_payment	string	—	Base64-encoded signed v2 PaymentPayload (the value you'd put in the PAYMENT-SIGNATURE HTTP header). Use @x402/evm or @x402/fetch to sign locally with your own wallet — your private key never leaves y…
backgroundColor	string	—	Hex background color
cornerColor	string	—	Hex color for finder pattern corners
dotColor	string	—	Hex color for dots (e.g. #6366f1)
dotType	string	—	Shape of QR modules
format	string	—	Output format
gradientFrom	string	—	Gradient start color (hex)
gradientTo	string	—	Gradient end color (hex)
size	number	—	Image width/height in pixels
text	string	yes	Content to encode in QR code

Name	Type	Req	Description
encoding	string	—	Encoding of the binary payload (base64).
error	string	—	Error message when the call failed.
mimeType	string	—	MIME type of the returned binary payload (e.g. image/png, application/pdf).
network	string	—	Settlement network for the x402 payment (base).
payment_required	boolean	—	True when the call needs an x402 payment before it will run.
price_usdc	string	—	Price charged for this call, in USDC on Base.
requirements	—	—	x402 payment requirements (scheme, network, amount, payTo, asset) when payment_required is true.
result	—	—	Raw JSON payload returned by the x402 service on a successful, paid call.
service	string	—	Underlying x402tools service that handled the call.

No examples provided.

security.screen Screen for Prompt Injection ~178

Screen text for prompt injection and jailbreak attacks before passing it to an LLM. Detects 10 attack categories. Costs $0.03 USDC on Base.

Input Output Examples

Name	Type	Req	Description
_payment	string	—	Base64-encoded signed v2 PaymentPayload (the value you'd put in the PAYMENT-SIGNATURE HTTP header). Use @x402/evm or @x402/fetch to sign locally with your own wallet — your private key never leaves y…
redacted	boolean	—	Redact flagged snippets in the response
sensitivity	string	—	Detection sensitivity
source	string	—	Origin of the text (user_input, email, form, etc.)
text	string	yes	Text to screen for prompt injection (max 50,000 chars)

Name	Type	Req	Description
error	string	—	Error message when the call failed.
network	string	—	Settlement network for the x402 payment (base).
payment_required	boolean	—	True when the call needs an x402 payment before it will run.
price_usdc	string	—	Price charged for this call, in USDC on Base.
requirements	—	—	x402 payment requirements (scheme, network, amount, payTo, asset) when payment_required is true.
result	—	—	Raw JSON payload returned by the x402 service on a successful, paid call.
service	string	—	Underlying x402tools service that handled the call.

No examples provided.

On this page

Handy links

Scoring key

80+ high trust
60–79 medium
below 60 low

How we score

Score history · last 30 days

27 Jul 3 Aug