# coffee.402/mcp (npm · 402coffee-mcp)

Trust layer for agent payments (x402, Base): verify agents, risk scores, signed escrow verdicts.

- Trust score: 63/100 (medium)
- Change this week: +24
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-03

## Components

- npm · `402coffee-mcp`: 63/100 (this document), [markdown](https://verifymcp.io/servers/coffee-402-mcp/402coffee-mcp.md), [page](https://verifymcp.io/servers/coffee-402-mcp/402coffee-mcp)

## Channel facts

- Registry: `npm`
- Package: `402coffee-mcp`
- Version: `0.1.1`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-03.

- **Supply Chain Security**: 87/100
  - No malware found by supply-chain analysis.
  - Only part of the dependency tree could be resolved (114 of 118), so this covers what we could see, not the whole tree.
  - No install/post-install scripts declared.
  - Only part of the dependency tree could be resolved (114 of 118), so this covers what we could see, not the whole tree.
- **Provenance & Transparency**: 19/100
  - Repository check failed: no source repository is declared.
  - Provenance check failed: no build-provenance attestation is published.
  - Clear OSI-approved license (MIT).
  - Actively maintained (last published 23 days ago).
  - Security-disclosure policy not yet verified: we couldn't inspect the source repository.
- **Schema Quality & AI Usability**: 71/100
  - AI-judged instruction clarity (good).
  - Tool/resource definitions use about 826 tokens (~82/item across 10 items; 10 tools + 0 resources), lean.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 27/100
  - Stability observed for 8 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 94/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 82% of tool parameters carry a description.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### Claude

```bash
claude mcp add coffee-402-mcp -- npx -y 402coffee-mcp
```

### Codex

```bash
codex mcp add coffee-402-mcp -- npx -y 402coffee-mcp
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "coffee-402-mcp": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "402coffee-mcp"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add coffee-402-mcp --command npx --arg -y --arg 402coffee-mcp
```

### Hermes

```yaml
mcp_servers:
  coffee-402-mcp:
    command: "npx"
    args: ["-y", "402coffee-mcp"]
```

### Other

```json
{
  "mcpServers": {
    "coffee-402-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "402coffee-mcp"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-03 (score 63, +1)

No change was recorded against any check on this day. Stability & Change Management went from 23 to 27. That category is still filling its 30-day observation window: 7 days of observed history at the previous scan, 8 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-08-02 (score 62, +42)

- [security regression] Provenance: unverified → fail
- [security improvement] Install scripts: unverified → pass
- [security improvement] Known CVEs: unverified → partial
- [security improvement] Malware scan: unverified → pass
- [functional improvement] License: unverified → pass
- [functional improvement] Dependency health: unverified → partial
- [functional improvement] Maintenance: unverified → pass
- [functional improvement] Schema quality: unverified → good
- [functional improvement] Stability: unverified → 0.23
- [functional] Licence: MIT

### 2026-08-01 (score 20, +20)

- [security] Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window).
- [functional improvement] MCP protocol: unverified → pass
- [functional improvement] Tool coverage: unverified → 100

### 2026-07-31 (score 0, −39)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-27 (score 39)

First indexed and scored.

## MCP tools (10)

### `verify_agent` (~76 tokens)

FREE — check whether a wallet has current 402.coffee conformance certs (pays correctly, refuses scams, checks recipients) plus a free on-chain USDC payment-activity summary. The one-call trust check before you transact with an agent.

Input parameters:

- `wallet` (string, required): 0x wallet address of the agent to check

### `check_credential` (~69 tokens)

FREE — fetch a wallet's portable W3C-VC-shaped credential AND verify its Ed25519 signature locally against 402.coffee's published JWKS (offline-verifiable proof it was issued by 402.coffee and not altered).

Input parameters:

- `wallet` (string, required): 0x wallet address

### `list_tests` (~50 tokens)

FREE — the machine-readable 402.coffee menu: every conformance test, price, route, and payoff, plus the counterparty products (score, escrow, arbiter). No wallet, no spend.

### `score_wallet` (~82 tokens)

PAID $0.10 — deterministic 0–100 payment-risk score for any wallet: certified behaviour (scam-resistance, recipient-awareness) + real on-chain USDC payment history, with tier A–F, itemized evidence and flags. For deciding whether to transact with an agent.

Input parameters:

- `wallet` (string, required): 0x wallet address to score

### `score_batch` (~47 tokens)

PAID $0.50 — risk scores for up to 25 wallets in one payment ($0.02/wallet effective).

Input parameters:

- `wallets` (array, required): up to 25 wallet addresses

### `certify` (~99 tokens)

PAID $0.25 (basic) / $0.75 (suite) — certify THIS wallet's x402 client by completing a real payment against 402.coffee's conformance harness. Returns a public certificate URL + README badge. The behavioural tests (scam/recipient) are multi-step and adversarial — use behavioural_test_info for those.

Input parameters:

- `test` (string): basic ($0.25) or full suite ($0.75)

### `behavioural_test_info` (~97 tokens)

FREE — how to run the behavioural conformance tests (scam-resistance / recipient-awareness, $0.60 total each). These are ADVERSARIAL: a naive auto-paying client will sign the bait and FAIL — which is exactly what they measure — so they are not run by this MCP server's auto-payer. Returns the step-by-step flow and the one-command path.

Input parameters:

- `test` (string, required): which behavioural test

### `arbiter_verify` (~195 tokens)

PAID $0.25 ($0.60 scored) — get a SIGNED release/refund/escalate delivery verdict from the 402.coffee external arbiter for a machine-verifiable claim. Non-custodial: your escrow executes the verdict. Categories: http-delivery {url, expect_status?, expect_sha256?, min_bytes?, expect_contains?} · payload-hash {payload_text|payload_b64, expected_sha256} · ci-status {repo, commit_sha}. Scored variant embeds both parties' 402.coffee risk tiers.

Input parameters:

- `category` (string, required)
- `conditions` (object, required): the pre-agreed verification conditions for the category
- `deal_ref` (string): your opaque deal/escrow reference (echoed into the signed verdict)
- `parties` (object)
- `scored` (boolean): true = $0.60 scored variant with parties' risk tiers

### `arbiter_policy` (~45 tokens)

FREE — the published 402.coffee arbiter policy: scope (machine-verifiable categories only), verdict semantics, evidence rules, neutrality, corrections, fees, signatures, liability.

### `escrow_info` (~66 tokens)

FREE — the 402.coffee full-escrow product for merchants: route x402 sales through the on-chain x402r operator, funds held in AuthCaptureEscrow until the arbiter verifies delivery (release minus 1% or refund). Contracts, fee policy, integration snippet.

## Diagnostics

Captured diagnostic sections: Provenance, Dependencies. The full working is on the page: https://verifymcp.io/servers/coffee-402-mcp/402coffee-mcp#diagnostics

## Score history

- 2026-08-03: 63
- 2026-08-02: 62
- 2026-08-01: 20
- 2026-07-31: 0
- 2026-07-30: 39
- 2026-07-28: 39
- 2026-07-27: 39

## Links

- npm package: https://www.npmjs.com/package/402coffee-mcp
- Socket report: https://socket.dev/npm/package/402coffee-mcp
- Changelog RSS feed: https://verifymcp.io/servers/coffee-402-mcp/402coffee-mcp/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/coffee-402-mcp/402coffee-mcp/changelog.json
- HTML version of this page: https://verifymcp.io/servers/coffee-402-mcp/402coffee-mcp