# io.github.agentc22/x402engine-mcp (npm · x402engine-mcp)

50+ pay-per-call APIs for AI agents — images, LLM, code, crypto, travel & more via x402

- Trust score: 63/100 (medium)
- Change this week: +19
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-03

## Components

- npm · `x402engine-mcp`: 63/100 (this document), [markdown](https://verifymcp.io/servers/agentc22-x402engine-mcp/x402engine-mcp.md), [page](https://verifymcp.io/servers/agentc22-x402engine-mcp/x402engine-mcp)

## Channel facts

- Registry: `npm`
- Package: `x402engine-mcp`
- Version: `1.0.3`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-03.

- **Supply Chain Security**: 87/100
  - No malware found by supply-chain analysis.
  - Only part of the dependency tree could be resolved (95 of 99), so this covers what we could see, not the whole tree.
  - No install/post-install scripts declared.
  - Only part of the dependency tree could be resolved (95 of 99), so this covers what we could see, not the whole tree.
- **Provenance & Transparency**: 45/100
  - Source repository is publicly reachable at the declared URL.
  - Provenance check failed: no build-provenance attestation is published.
  - Clear OSI-approved license (MIT).
  - Actively maintained (last published 8 days ago).
  - Disclosure check failed: no security disclosure policy was found in the source repository.
- **Schema Quality & AI Usability**: 45/100
  - 0% of prompts and resources have a non-trivial description (not blank, and not just the item's name).
  - AI-judged instruction clarity (good).
  - Tool/resource definitions use about 1533 tokens (~73/item across 21 items; 20 tools + 1 resources), lean.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 27/100
  - Stability observed for 8 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### Claude

```bash
claude mcp add agentc22-x402engine-mcp -- npx -y x402engine-mcp
```

### Codex

```bash
codex mcp add agentc22-x402engine-mcp -- npx -y x402engine-mcp
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "agentc22-x402engine-mcp": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "x402engine-mcp"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add agentc22-x402engine-mcp --command npx --arg -y --arg x402engine-mcp
```

### Hermes

```yaml
mcp_servers:
  agentc22-x402engine-mcp:
    command: "npx"
    args: ["-y", "x402engine-mcp"]
```

### Other

```json
{
  "mcpServers": {
    "agentc22-x402engine-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "x402engine-mcp"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-02 (score 63, +39)

- [security regression] Provenance: unverified → fail
- [security improvement] Install scripts: unverified → pass
- [security improvement] Known CVEs: unverified → partial
- [security improvement] Malware scan: unverified → pass
- [security] Stability: Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.
- [functional regression] Capabilities: pass → unverified
- [functional improvement] License: unverified → pass
- [functional improvement] Stability: unverified → 0.23
- [functional improvement] Dependency health: unverified → partial
- [functional improvement] Maintenance: unverified → pass
- [functional improvement] Schema quality: unverified → good
- [functional] Licence: MIT

### 2026-08-01 (score 24, +5)

- [security] Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window).
- [functional improvement] MCP protocol: unverified → pass

### 2026-07-31 (score 19, −25)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-27 (score 44)

First indexed and scored.

## MCP tools (20)

### `discover_services` (~32 tokens)

List all available x402 Engine APIs with pricing, endpoints, and payment networks. Call this first to understand what's available.

### `generate_image` (~142 tokens)

Generate an image from a text prompt. Three quality tiers: 'fast' ($0.015, FLUX Schnell), 'quality' ($0.05, FLUX.2 Pro), 'text' ($0.12, Ideogram v3 for images with text). Returns image URL.

Input parameters:

- `height` (number): Image height in pixels
- `prompt` (string, required): Text description of the image to generate
- `seed` (number): Random seed for reproducibility
- `tier` (string): Quality tier: fast ($0.015), quality ($0.05), text ($0.12)
- `width` (number): Image width in pixels

### `execute_code` (~69 tokens)

Execute code in a secure sandboxed environment (E2B). Supports Python, JavaScript, Bash, and R. $0.005 per execution.

Input parameters:

- `code` (string, required): Code to execute
- `language` (string): Programming language
- `timeout` (number): Execution timeout in seconds

### `transcribe_audio` (~97 tokens)

Transcribe audio to text using Deepgram Nova-3. Accepts a public URL to an audio file. $0.10 per transcription.

Input parameters:

- `audio_url` (string, required): Public URL to audio file (mp3, wav, etc.)
- `diarize` (boolean): Enable speaker identification
- `language` (string): Language code (e.g., 'en', 'es')
- `punctuate` (boolean): Add punctuation

### `get_crypto_price` (~90 tokens)

Get current prices for cryptocurrencies. $0.001 per request.

Input parameters:

- `currencies` (string): Comma-separated fiat currencies (default: 'usd')
- `ids` (string, required): Comma-separated coin IDs (e.g., 'bitcoin,ethereum,solana')
- `include_24h` (boolean): Include 24h price change
- `include_mcap` (boolean): Include market cap

### `get_crypto_markets` (~77 tokens)

Get top cryptocurrencies by market cap with detailed market data. $0.002 per request.

Input parameters:

- `category` (string): Filter by category
- `currency` (string): Fiat currency for prices
- `limit` (number): Number of results
- `order` (string): Sort order
- `page` (number): Page number

### `get_crypto_history` (~62 tokens)

Get historical price data for a cryptocurrency. $0.003 per request.

Input parameters:

- `currency` (string): Fiat currency
- `days`: Number of days of history (or 'max')
- `id` (string, required): Coin ID (e.g., 'bitcoin')

### `get_trending_crypto` (~21 tokens)

Get trending cryptocurrencies. $0.001 per request.

### `search_crypto` (~38 tokens)

Search for a cryptocurrency by name or symbol. $0.001 per request.

Input parameters:

- `q` (string, required): Search query (coin name or symbol)

### `get_wallet_balances` (~65 tokens)

Get token balances for a wallet address on any supported chain. $0.005 per request.

Input parameters:

- `address` (string, required): Wallet address
- `chain` (string, required): Blockchain name (e.g., 'ethereum', 'base', 'solana', 'arbitrum')

### `get_wallet_transactions` (~42 tokens)

Get transaction history for a wallet address. $0.005 per request.

Input parameters:

- `address` (string, required): Wallet address
- `chain` (string, required): Blockchain name

### `get_wallet_pnl` (~77 tokens)

Get profit and loss analysis for a wallet's token trades. $0.01 per request.

Input parameters:

- `address` (string, required): Wallet address
- `chain` (string, required): Blockchain name
- `min_liquidity` (number): Minimum liquidity filter
- `min_volume_24h` (number): Minimum 24h volume filter

### `get_token_prices` (~39 tokens)

Get DEX-derived prices for tokens by contract address. $0.005 per request.

Input parameters:

- `tokens` (array, required): Array of tokens to price

### `get_token_metadata` (~83 tokens)

Get metadata for a token (name, symbol, decimals, etc.). $0.002 per request.

Input parameters:

- `address` (string): Token contract address
- `chain` (string): Blockchain name (required with address)
- `id` (string): Token ID (alternative to chain+address)
- `slug` (string): Token slug (alternative to chain+address)

### `pin_to_ipfs` (~59 tokens)

Pin JSON data to IPFS via Pinata. Returns the IPFS CID. $0.01 per pin.

Input parameters:

- `json` (object, required): JSON object to pin to IPFS
- `name` (string): Name for the pinned content

### `get_from_ipfs` (~38 tokens)

Retrieve content from IPFS by CID. $0.001 per request.

Input parameters:

- `cid` (string, required): IPFS content identifier (CID)

### `search_flights` (~166 tokens)

Search flight offers by route, dates, and passengers. Returns pricing, itineraries, and airlines. $0.01 per request.

Input parameters:

- `adults` (number): Number of adult passengers
- `currencyCode` (string): Currency code for prices (e.g., 'USD', 'EUR')
- `departureDate` (string, required): Departure date in YYYY-MM-DD format
- `destination` (string, required): Destination airport IATA code (e.g., 'LAX')
- `max` (number): Maximum number of offers to return
- `nonStop` (boolean): Only show non-stop flights
- `origin` (string, required): Origin airport IATA code (e.g., 'JFK')
- `returnDate` (string): Return date in YYYY-MM-DD format (for round trips)

### `search_locations` (~74 tokens)

Search for airports and cities by keyword. Returns IATA codes, names, and coordinates. $0.005 per request.

Input parameters:

- `keyword` (string, required): Search keyword (e.g., 'London', 'JFK', 'Paris')
- `subType` (string): Location type filter: AIRPORT, CITY, or both

### `search_hotels` (~155 tokens)

Search hotel offers by city and dates. Returns room details, pricing, and availability. $0.01 per request.

Input parameters:

- `adults` (number): Number of adult guests per room
- `checkInDate` (string, required): Check-in date in YYYY-MM-DD format
- `checkOutDate` (string, required): Check-out date in YYYY-MM-DD format
- `cityCode` (string, required): City IATA code (e.g., 'PAR' for Paris, 'LON' for London)
- `currency` (string): Currency code for prices (e.g., 'USD')
- `priceRange` (string): Price range filter (e.g., '100-200')
- `roomQuantity` (number): Number of rooms

### `search_cheapest_dates` (~103 tokens)

Find the cheapest travel dates for a route. Returns date/price pairs sorted by price. $0.01 per request.

Input parameters:

- `departureDate` (string): Approximate departure date in YYYY-MM-DD format
- `destination` (string, required): Destination airport IATA code (e.g., 'LAX')
- `oneWay` (boolean): Search one-way flights only
- `origin` (string, required): Origin airport IATA code (e.g., 'JFK')

## Diagnostics

Captured diagnostic sections: Provenance, Dependencies. The full working is on the page: https://verifymcp.io/servers/agentc22-x402engine-mcp/x402engine-mcp#diagnostics

## Score history

- 2026-08-03: 63
- 2026-08-02: 63
- 2026-08-01: 24
- 2026-07-31: 19
- 2026-07-30: 44
- 2026-07-28: 44
- 2026-07-27: 44

## Links

- npm package: https://www.npmjs.com/package/x402engine-mcp
- Socket report: https://socket.dev/npm/package/x402engine-mcp
- Repository: https://github.com/agentc22/x402engine-mcp
- Changelog RSS feed: https://verifymcp.io/servers/agentc22-x402engine-mcp/x402engine-mcp/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/agentc22-x402engine-mcp/x402engine-mcp/changelog.json
- HTML version of this page: https://verifymcp.io/servers/agentc22-x402engine-mcp/x402engine-mcp