# x402 Agent Hub (remote · x402-agent-hub.x402-agent-hub.workers.dev)

Onchain reads, SEC company financials, company & people enrichment, token verdicts via x402 USDC

- Trust score: 60/100 (medium)
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-11-05

## Components

- remote · `x402-agent-hub.x402-agent-hub.workers.dev`: 60/100 (this document), [markdown](https://verifymcp.io/servers/blackcat-cyber-creator-x402-agent-hub/x402-agent-hub.md), [page](https://verifymcp.io/servers/blackcat-cyber-creator-x402-agent-hub/x402-agent-hub)

## Channel facts

- Endpoint: `https://x402-agent-hub.x402-agent-hub.workers.dev/mcp`
- Transports: `streamable-http`
- Auth: `none`
- Version: `1.6.0`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-11-05.

- **Endpoint Security**: 46/100
  - The endpoint's TLS certificate is valid, in date, and uses a strong key.
  - Authorisation not fully verified: no authorisation is required to call this server, and 26 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.
  - HTTPS enforcement could not be verified: the plaintext port answered with HTTP 405, which proves neither a plaintext path nor enforcement.
  - HSTS check failed: the Strict-Transport-Security header is absent.
  - DNSSEC check failed: this domain isn't protected by DNSSEC.
- **Transport & Reachability**: 100/100
  - Verified streamable-http transport via a live MCP handshake.
- **Schema Quality & AI Usability**: 64/100
  - AI-judged instruction clarity (good).
  - Context-footprint check failed: tool/resource definitions use about 3958 tokens (~152/item across 26 items; 26 tools + 0 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 20/100
  - Stability observed for 6 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 96/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 88% of tool parameters carry a description.
- **Tool Safety**: 100/100
  - No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.
  - We read all 26 captured tool definition(s), and no name or description among them implies an irreversible operation.
  - An AI judge read all 26 captured unit(s) of tool text and found none that tries to manipulate the model reading it.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### How do I install the x402 Agent Hub MCP server?

x402 Agent Hub is a hosted endpoint at https://x402-agent-hub.x402-agent-hub.workers.dev/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

### Claude

```bash
claude mcp add --transport http blackcat-cyber-creator-x402-agent-hub 'https://x402-agent-hub.x402-agent-hub.workers.dev/mcp'
```

### Cursor

```json
{
  "mcpServers": {
    "blackcat-cyber-creator-x402-agent-hub": {
      "url": "https://x402-agent-hub.x402-agent-hub.workers.dev/mcp"
    }
  }
}
```

### VS Code

```json
{
  "servers": {
    "blackcat-cyber-creator-x402-agent-hub": {
      "type": "http",
      "url": "https://x402-agent-hub.x402-agent-hub.workers.dev/mcp"
    }
  }
}
```

### Codex

```toml
[mcp_servers.blackcat-cyber-creator-x402-agent-hub]
url = "https://x402-agent-hub.x402-agent-hub.workers.dev/mcp"
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "blackcat-cyber-creator-x402-agent-hub": {
      "type": "remote",
      "url": "https://x402-agent-hub.x402-agent-hub.workers.dev/mcp",
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add blackcat-cyber-creator-x402-agent-hub --url 'https://x402-agent-hub.x402-agent-hub.workers.dev/mcp' --transport streamable-http
```

### Hermes

```yaml
mcp_servers:
  blackcat-cyber-creator-x402-agent-hub:
    url: "https://x402-agent-hub.x402-agent-hub.workers.dev/mcp"
```

### Netclaw

```json
{
  "McpServers": {
    "blackcat-cyber-creator-x402-agent-hub": {
      "Transport": "http",
      "Url": "https://x402-agent-hub.x402-agent-hub.workers.dev/mcp"
    }
  }
}
```

### Vellum

```bash
assistant mcp add blackcat-cyber-creator-x402-agent-hub -t streamable-http -u 'https://x402-agent-hub.x402-agent-hub.workers.dev/mcp'
```

### Other

```json
{
  "mcpServers": {
    "blackcat-cyber-creator-x402-agent-hub": {
      "type": "http",
      "url": "https://x402-agent-hub.x402-agent-hub.workers.dev/mcp"
    }
  }
}
```

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-11-04 (score 60, +1)

No change was recorded against any check on this day. Stability & Change Management went from 13 to 17. That category is still filling its 30-day observation window: 4 days of observed history at the previous scan, 5 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-11-01 (score 59, +1)

- [security] Tool “token_verdict” rewrote its description, which is the text the model reads

### 2026-10-31 (score 58, 0)

- [functional improvement] Stability: unverified → 0.03
- [functional] Server version: 1.5.0 → 1.6.0
- [functional] New tool “token_verdict”

### 2026-10-30 (score 58)

First indexed and scored.

## MCP tools (26)

### `get_hub_catalog` (~45 tokens)

FREE ($0.00): Inspect the live x402 Agent Hub service catalog, supported CFD/Forex tickers, per-call Base USDC pricing, and OpenAPI URL.

### `get_ict_sessions` (~99 tokens)

Get live ICT Killzones (Asian, London Open, NY Open, London Close), 60m Silver Bullet FVG windows, CFD rollover spread-danger alerts, and Wednesday/Friday triple-swap flags ($0.005 USDC on Base).

Input parameters:

- `at` (string): Optional ISO-8601 UTC timestamp (defaults to live current UTC time)
- `paymentSignature` (string): Optional x402 v2 base64 PAYMENT-SIGNATURE

### `get_cfd_microstructure` (~146 tokens)

Get institutional ECN calibrated spreads, round-turn commissions, M1 ATR, spread-to-ATR execution cost ratios across M1-H1, scalping suitability, and live MT5 FVGs for XAUUSD, BTCUSD, NAS100, US30, US500, GER40, JPN225, USOUSD, EURUSD, GBPUSD, USDJPY ($0.01 USDC on Base).

Input parameters:

- `paymentSignature` (string): Optional x402 v2 base64 PAYMENT-SIGNATURE
- `symbol` (string): Optional ticker like XAUUSD, NAS100, BTCUSD, US30, GER40, USOUSD, EURUSD

### `calculate_prop_firm_risk` (~213 tokens)

Calculate exact CFD/Forex lot size factoring ECN spread+commission friction and prop-firm daily/max drawdown auto-lock status ($0.01 USDC on Base).

Input parameters:

- `accountBalanceUsd` (number, required): Starting prop-firm account balance in USD (e.g. 100000)
- `currentEquityUsd` (number): Current live account equity in USD
- `dailyDrawdownLimitPercent` (number)
- `maxTotalDrawdownLimitPercent` (number)
- `paymentSignature` (string): Optional x402 v2 base64 PAYMENT-SIGNATURE
- `riskPercent` (number, required): Risk percentage per trade (e.g. 0.5 for 0.5%)
- `stopLossPriceDistance` (number, required): Stop-loss distance in raw price units (e.g. 4.5 on XAUUSD, 25 on NAS100)
- `symbol` (string, required): Instrument symbol, e.g. XAUUSD, NAS100, BTCUSD, EURUSD

### `extract_clean_markdown` (~90 tokens)

Fetch any public webpage and convert it into clean, token-efficient LLM Markdown with metadata and token count ($0.005 USDC on Base).

Input parameters:

- `maxChars` (number): Maximum Markdown characters (500-50000)
- `paymentSignature` (string): Optional x402 v2 base64 PAYMENT-SIGNATURE
- `url` (string, required): Public http/https URL to convert to Markdown

### `enrich_business_lead` (~124 tokens)

Enrich a business URL for SDR/sales outreach: sanitize brand names, detect phantom wa.me/linktr.ee/marketplace links, extract normalized E.164 WhatsApp/mobile phones (rejecting office PSTN landlines), find emails/socials, and detect CMS/analytics pixels ($0.015 USDC on Base).

Input parameters:

- `businessName` (string): Optional raw business title to sanitize
- `paymentSignature` (string): Optional x402 v2 base64 PAYMENT-SIGNATURE
- `url` (string, required): Business website, social bio, or marketplace URL

### `audit_technical_seo` (~70 tokens)

Run an instant 0-100 Technical SEO & Website Modernization Audit scorecard with prioritized fixes ($0.02 USDC on Base).

Input parameters:

- `paymentSignature` (string): Optional x402 v2 base64 PAYMENT-SIGNATURE
- `url` (string, required): Target website URL to audit

### `render_visual_card` (~159 tokens)

Render a deterministic, typo-free 1200x630 OpenGraph banner, 1080x1350 social KPI slide, or trading signal sparkline card as SVG + data URI ($0.025 USDC on Base).

Input parameters:

- `accentColor` (string)
- `badge` (string)
- `brandName` (string)
- `metricDelta` (string)
- `metricLabel` (string)
- `metricValue` (string)
- `paymentSignature` (string): Optional x402 v2 base64 PAYMENT-SIGNATURE
- `sparkline` (array)
- `subtitle` (string)
- `template` (string)
- `theme` (string)
- `title` (string, required): Primary card headline

### `audit_crypto_token` (~217 tokens)

Audit any Base, Ethereum, Arbitrum, Optimism, Polygon, BSC, Avalanche, or Solana token contract for honeypots, buy/sell taxes, hidden ownership, whale concentration, LP locks, live DEX liquidity depth, and AMM slippage impact for an intended USD order size. On Base, Ethereum, BSC, Arbitrum, Optimism and Polygon it also simulates a real buy -> sell round trip to measure actual taxes and confirm the token can be sold ($0.01 USDC on Base).

Input parameters:

- `chain` (string): Target chain (defaults to 'base' for 0x addresses or 'solana' for Base58)
- `intendedOrderUsd` (number): Intended swap size in USD to estimate AMM pool price impact (default 1000)
- `paymentSignature` (string): Optional x402 v2 base64 PAYMENT-SIGNATURE
- `tokenAddress` (string, required): 0x-prefixed EVM token contract address or Base58 Solana mint address

### `generate_outreach_dossier` (~149 tokens)

Generate a complete B2B SDR Outreach Dossier in 1 call: Brand Sanitizer, Phantom Lead Shield, E.164 WhatsApp/email contacts, CMS/pixel stack, 0-100 Technical SEO revenue-leak audit, and ready-to-send personalized WhatsApp & Cold Email scripts ($0.05 USDC on Base).

Input parameters:

- `agencyOffer` (string): Optional description of your product/agency offer to weave into the scripts
- `businessName` (string): Optional raw business title to sanitize
- `paymentSignature` (string): Optional x402 v2 base64 PAYMENT-SIGNATURE
- `url` (string, required): Target business website, social bio, or marketplace URL

### `chain_native_balance` (~139 tokens)

Native coin balance of any address on Base, Ethereum, Arbitrum, Optimism, Polygon, BSC or Avalanche, with raw wei and formatted units plus the block it was read at. You only pay for successful reads: invalid input, not-found and upstream errors cancel settlement. ($0.002 USDC on Base)

Input parameters:

- `address` (string, required): 0x-prefixed wallet or contract address.
- `chain` (string): base (default), ethereum, arbitrum, optimism, polygon, bsc or avalanche. Chain IDs also accepted.
- `paymentSignature` (string): Optional x402 v2 base64 PAYMENT-SIGNATURE

### `chain_token_balance` (~161 tokens)

ERC-20 token balance of any address on 7 EVM chains, returned raw and decimal-formatted with the token symbol, so agents never mis-scale USDC (6) vs 18-decimal tokens. You only pay for successful reads: invalid input, not-found and upstream errors cancel settlement. ($0.002 USDC on Base)

Input parameters:

- `address` (string, required): 0x-prefixed wallet or contract address.
- `chain` (string): base (default), ethereum, arbitrum, optimism, polygon, bsc or avalanche. Chain IDs also accepted.
- `paymentSignature` (string): Optional x402 v2 base64 PAYMENT-SIGNATURE
- `token` (string, required): 0x-prefixed ERC-20 token contract address.

### `chain_token_info` (~127 tokens)

ERC-20 token metadata on 7 EVM chains: name, symbol, decimals and formatted total supply in one call. You only pay for successful reads: invalid input, not-found and upstream errors cancel settlement. ($0.002 USDC on Base)

Input parameters:

- `chain` (string): base (default), ethereum, arbitrum, optimism, polygon, bsc or avalanche. Chain IDs also accepted.
- `paymentSignature` (string): Optional x402 v2 base64 PAYMENT-SIGNATURE
- `token` (string, required): 0x-prefixed ERC-20 token contract address.

### `chain_transaction_status` (~157 tokens)

Status of any transaction on 7 EVM chains: pending / success / reverted, confirmations, block time, from/to, value and the all-in fee (including the OP-stack L1 data fee on Base and Optimism). Use it to confirm a payment or deployment landed. You only pay for successful reads: invalid input, not-found and upstream errors cancel settlement. ($0.002 USDC on Base)

Input parameters:

- `chain` (string): base (default), ethereum, arbitrum, optimism, polygon, bsc or avalanche. Chain IDs also accepted.
- `hash` (string, required): 0x-prefixed 32-byte transaction hash.
- `paymentSignature` (string): Optional x402 v2 base64 PAYMENT-SIGNATURE

### `chain_address_info` (~172 tokens)

Classify any address on 7 EVM chains before interacting with it: EOA, EIP-7702-delegated EOA or contract, code size, nonce, native balance, and proxy detection (EIP-1967 implementation/admin/beacon slots, legacy ZeppelinOS proxies such as USDC, and EIP-1167 minimal proxies). You only pay for successful reads: invalid input, not-found and upstream errors cancel settlement. ($0.003 USDC on Base)

Input parameters:

- `address` (string, required): 0x-prefixed wallet or contract address.
- `chain` (string): base (default), ethereum, arbitrum, optimism, polygon, bsc or avalanche. Chain IDs also accepted.
- `paymentSignature` (string): Optional x402 v2 base64 PAYMENT-SIGNATURE

### `chain_ens_resolve` (~137 tokens)

Resolve an ENS name to an address, or an address to its primary ENS name, via the Ethereum mainnet Universal Resolver (CCIP-read / offchain names supported). Pass exactly one of 'name' or 'address'. You only pay for successful reads: invalid input, not-found and upstream errors cancel settlement. ($0.002 USDC on Base)

Input parameters:

- `address` (string): Address to reverse-resolve to its primary ENS name.
- `name` (string): ENS name to resolve, e.g. vitalik.eth.
- `paymentSignature` (string): Optional x402 v2 base64 PAYMENT-SIGNATURE

### `chain_portfolio` (~164 tokens)

One call returns an address's native coin, USDC and USDT balances on Base, Ethereum, Arbitrum, Optimism, Polygon, BSC and Avalanche (or a 'chains' subset), plus a total stablecoin USD figure, instead of 21 separate reads. Chains whose RPC fails are listed in chainsFailed. You only pay for successful reads: invalid input, not-found and upstream errors cancel settlement. ($0.005 USDC on Base)

Input parameters:

- `address` (string, required): 0x-prefixed wallet or contract address.
- `chains` (string): Optional comma-separated subset, e.g. base,arbitrum. Defaults to all 7 chains.
- `paymentSignature` (string): Optional x402 v2 base64 PAYMENT-SIGNATURE

### `company_search` (~124 tokens)

Search ~10,000 SEC-registered US public companies by ticker or name and get the ticker, legal name and CIK to use with the other company tools. You only pay for successful reads: invalid input, not-found and upstream errors cancel settlement. ($0.002 USDC on Base)

Input parameters:

- `limit` (string): Max results, 1-25 (default 10).
- `paymentSignature` (string): Optional x402 v2 base64 PAYMENT-SIGNATURE
- `q` (string, required): Ticker or company name fragment, e.g. nvidia.

### `company_profile` (~150 tokens)

Official SEC profile of a US public company: legal name, tickers, exchanges, SIC industry, state of incorporation, fiscal year end, website, business address, former names, and direct links to its latest annual, quarterly and current reports. You only pay for successful reads: invalid input, not-found and upstream errors cancel settlement. ($0.002 USDC on Base)

Input parameters:

- `cik` (string): SEC Central Index Key, e.g. 320193 (alternative to ticker).
- `paymentSignature` (string): Optional x402 v2 base64 PAYMENT-SIGNATURE
- `ticker` (string): US stock ticker, e.g. AAPL or BRK.B. Provide ticker or cik.

### `company_financials` (~216 tokens)

Reported fundamentals for US-GAAP filers from SEC XBRL data: revenue, operating income, net income, diluted EPS, operating cash flow, capex, free cash flow, total assets/liabilities, equity, cash, margins and YoY revenue growth for the last 1-12 annual or quarterly periods. Q4 and quarterly cash flows are derived from year-to-date filings and flagged. You only pay for successful reads: invalid input, not-found and upstream errors cancel settlement. ($0.005 USDC on Base)

Input parameters:

- `cik` (string): SEC Central Index Key, e.g. 320193 (alternative to ticker).
- `limit` (string): Number of periods, 1-12 (default 4).
- `paymentSignature` (string): Optional x402 v2 base64 PAYMENT-SIGNATURE
- `period` (string): annual (default) or quarterly.
- `ticker` (string): US stock ticker, e.g. AAPL or BRK.B. Provide ticker or cik.

### `company_filings` (~209 tokens)

A company's most recent SEC filings, optionally filtered by form type (e.g. 10-K,8-K) and date, with filing/report dates, 8-K item numbers and direct links to the document and filing index. You only pay for successful reads: invalid input, not-found and upstream errors cancel settlement. ($0.002 USDC on Base)

Input parameters:

- `cik` (string): SEC Central Index Key, e.g. 320193 (alternative to ticker).
- `form` (string): Comma-separated form types, e.g. 10-K,10-Q,8-K.
- `limit` (string): Max filings, 1-50 (default 10).
- `paymentSignature` (string): Optional x402 v2 base64 PAYMENT-SIGNATURE
- `since` (string): Only filings on/after this date (YYYY-MM-DD).
- `ticker` (string): US stock ticker, e.g. AAPL or BRK.B. Provide ticker or cik.

### `company_insider_trades` (~195 tokens)

Parsed SEC Form 4 insider filings for a company: insider name and role (director, officer title, 10% owner), transaction code (open-market buy/sell, award, exercise, tax withholding...), shares, price, USD value, holdings after, 10b5-1 plan flag, plus a buy/sell summary. You only pay for successful reads: invalid input, not-found and upstream errors cancel settlement. ($0.005 USDC on Base)

Input parameters:

- `cik` (string): SEC Central Index Key, e.g. 320193 (alternative to ticker).
- `limit` (string): Number of recent Form 4 filings, 1-20 (default 10).
- `paymentSignature` (string): Optional x402 v2 base64 PAYMENT-SIGNATURE
- `ticker` (string): US stock ticker, e.g. AAPL or BRK.B. Provide ticker or cik.

### `entity_search` (~136 tokens)

Search Wikidata for companies, notable people or anything else by name and get IDs, short descriptions and Wikipedia links, so you can pick the right entity before enriching it. You only pay for successful reads: invalid input, not-found and upstream errors cancel settlement. ($0.002 USDC on Base)

Input parameters:

- `limit` (string): Max results, 1-20 (default 5).
- `paymentSignature` (string): Optional x402 v2 base64 PAYMENT-SIGNATURE
- `q` (string, required): Name to search, e.g. grab.
- `type` (string): company, person or any (default any).

### `entity_company` (~199 tokens)

Enrich any company worldwide (private, startup or listed; not just US) by name, website domain or Wikidata ID: website, founding date, headquarters, countries, industries, current CEO, founders, employee count, revenue, stock listings and tickers, LEI/ISIN, legal form, parent and subsidiaries, official X/LinkedIn/GitHub/Instagram accounts, logo and the Wikipedia summary. You only pay for successful reads: invalid input, not-found and upstream errors cancel settlement. ($0.003 USDC on Base)

Input parameters:

- `domain` (string): Company website or domain, e.g. stripe.com (matched to its official website).
- `id` (string): Wikidata item ID, e.g. Q7624104 (skips name matching).
- `name` (string): Company name, e.g. Stripe.
- `paymentSignature` (string): Optional x402 v2 base64 PAYMENT-SIGNATURE

### `entity_person` (~153 tokens)

Professional profile of a notable person (founders, executives, public figures) from Wikidata and Wikipedia: description, occupations, current employers and positions, education, citizenship, birth year, website and public X/LinkedIn/GitHub accounts. No family, residence or full birth dates are returned. You only pay for successful reads: invalid input, not-found and upstream errors cancel settlement. ($0.003 USDC on Base)

Input parameters:

- `id` (string): Wikidata item ID, e.g. Q305177 (skips name matching).
- `name` (string): Person's name, e.g. Jensen Huang.
- `paymentSignature` (string): Optional x402 v2 base64 PAYMENT-SIGNATURE

### `token_verdict` (~207 tokens)

Token rug check: is this token safe? Get an A-F grade, safety score, one-line verdict and plain-language take on any token on Base, Ethereum, BSC, Arbitrum, Optimism, Polygon, Avalanche or Solana. Built on the included full audit (live buy/sell simulation on 6 EVM chains, taxes, owner powers, liquidity, holders); the grade never comes from the AI. Plus a share page and card PNG. Risk screen, not financial advice. $0.015 USDC on Base. Failed calls are not charged. ($0.015 USDC on Base)

Input parameters:

- `chain` (string): base (default), ethereum, bsc, arbitrum, optimism, polygon, avalanche or solana.
- `paymentSignature` (string): Optional x402 v2 base64 PAYMENT-SIGNATURE
- `token` (string, required): Token contract address: 0x-prefixed on EVM chains, base58 mint on Solana.

## Diagnostics

Captured diagnostic sections: TLS, DNSSEC, Authorisation, Transports. The full working is on the page: https://verifymcp.io/servers/blackcat-cyber-creator-x402-agent-hub/x402-agent-hub#diagnostics

## Score history

- 2026-11-05: 60
- 2026-11-04: 60
- 2026-11-03: 59
- 2026-11-02: 59
- 2026-11-01: 59
- 2026-10-31: 58
- 2026-10-30: 58

## Common questions

### What is the x402 Agent Hub MCP server?

x402 Agent Hub is an MCP server listed in the public MCP registry as io.github.BlackCat-cyber-creator/x402-agent-hub. Onchain reads, SEC company financials, company & people enrichment, token verdicts via x402 USDC. This page covers its hosted endpoint (https://x402-agent-hub.x402-agent-hub.workers.dev/mcp).

### Is the x402 Agent Hub MCP server safe to use?

x402 Agent Hub scores 60 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

### What tools does the x402 Agent Hub MCP server expose?

x402 Agent Hub exposes 26 tools: get_hub_catalog, get_ict_sessions, get_cfd_microstructure, calculate_prop_firm_risk, extract_clean_markdown, and 21 more. Their descriptions and schemas cost roughly 3,958 tokens of context every time the server is loaded.

### Does the x402 Agent Hub MCP server require authentication?

No. We connected to x402 Agent Hub without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.

### Is the x402 Agent Hub MCP server still maintained?

x402 Agent Hub is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

### What did VerifyMCP test on the x402 Agent Hub MCP server?

VerifyMCP ran 11 checks on x402 Agent Hub, covering TLS certificate, HSTS header, DNSSEC, Transport and 7 more. 2 items could not be completed, a gap on our side rather than a finding about x402 Agent Hub: Authorization and HTTPS. Supply Chain Security and Provenance & Transparency do not apply to a hosted endpoint, so they were not tested. The score does not measure everything, and the scoring documentation lists what it leaves out.

## Links

- Remote endpoint: https://x402-agent-hub.x402-agent-hub.workers.dev/mcp
- Repository: https://github.com/BlackCat-cyber-creator/x402-agent-hub-mcp
- Website: https://tryponcho.com/m/x402-agent-hub.x402-agent-hub.workers.dev
- Changelog RSS feed: https://verifymcp.io/servers/blackcat-cyber-creator-x402-agent-hub/x402-agent-hub.xml
- Changelog JSON feed: https://verifymcp.io/servers/blackcat-cyber-creator-x402-agent-hub/x402-agent-hub/changelog.json
- Trust report (JSON): https://verifymcp.io/servers/blackcat-cyber-creator-x402-agent-hub/x402-agent-hub.json
- HTML version of this page: https://verifymcp.io/servers/blackcat-cyber-creator-x402-agent-hub/x402-agent-hub