dev.workers.kikoribera03.flat-rate-llm/x402-tools
REMOTE · FLAT-RATE-LLM.KIKORIBERA03.WORKERS.DEV · SCANNED SEP 20
61 x402 pay-per-call tools that chain: each answer names the next call. No API key, no account.
Available components
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security46
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- Authorisation not fully verified: no authorisation is required to call this server, and 66 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe. See how to fix → View diagnostics → Unverified
- HTTPS enforcement could not be verified: the plaintext port answered with HTTP 405, which proves neither a plaintext path nor enforcement. View diagnostics → Unverified
- HSTS check failed: the Strict-Transport-Security header is absent. See how to fix → View diagnostics → Fail
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability74
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 8338 tokens (~126/item across 66 items; 66 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management37
- Stability observed for 11 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 66 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 67 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
How do I install the dev.workers.kikoribera03.flat-rate-llm/x402-tools MCP server?
dev.workers.kikoribera03.flat-rate-llm/x402-tools is a hosted endpoint at https://flat-rate-llm.kikoribera03.workers.dev/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · flat-rate-llm.kikoribera03.workers.dev
claude mcp add --transport http dev-workers-kikoribera03-flat-rate-llm-x402-tool 'https://flat-rate-llm.kikoribera03.workers.dev/mcp'
{
"mcpServers": {
"dev-workers-kikoribera03-flat-rate-llm-x402-tool": {
"url": "https://flat-rate-llm.kikoribera03.workers.dev/mcp"
}
}
} {
"servers": {
"dev-workers-kikoribera03-flat-rate-llm-x402-tool": {
"type": "http",
"url": "https://flat-rate-llm.kikoribera03.workers.dev/mcp"
}
}
} [mcp_servers.dev-workers-kikoribera03-flat-rate-llm-x402-tool] url = "https://flat-rate-llm.kikoribera03.workers.dev/mcp"
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"dev-workers-kikoribera03-flat-rate-llm-x402-tool": {
"type": "remote",
"url": "https://flat-rate-llm.kikoribera03.workers.dev/mcp",
"enabled": true
}
}
} openclaw mcp add dev-workers-kikoribera03-flat-rate-llm-x402-tool --url 'https://flat-rate-llm.kikoribera03.workers.dev/mcp' --transport streamable-http
mcp_servers:
dev-workers-kikoribera03-flat-rate-llm-x402-tool:
url: "https://flat-rate-llm.kikoribera03.workers.dev/mcp" {
"McpServers": {
"dev-workers-kikoribera03-flat-rate-llm-x402-tool": {
"Transport": "http",
"Url": "https://flat-rate-llm.kikoribera03.workers.dev/mcp"
}
}
} assistant mcp add dev-workers-kikoribera03-flat-rate-llm-x402-tool -t streamable-http -u 'https://flat-rate-llm.kikoribera03.workers.dev/mcp'
{
"mcpServers": {
"dev-workers-kikoribera03-flat-rate-llm-x402-tool": {
"type": "http",
"url": "https://flat-rate-llm.kikoribera03.workers.dev/mcp"
}
}
} The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 20 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 33 to 37. That category is still filling its 30-day observation window: 10 days of observed history at the previous scan, 11 at this one. The score rises as the window fills, whether or not the server changes.
- 17 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 23 to 27. That category is still filling its 30-day observation window: 7 days of observed history at the previous scan, 8 at this one. The score rises as the window fills, whether or not the server changes.
- 15 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 17 to 20. That category is still filling its 30-day observation window: 5 days of observed history at the previous scan, 6 at this one. The score rises as the window fills, whether or not the server changes.
- 14 Sept 26 0
- The server rewrote its instructions, which are the text every model session reads security
- Tool “catalog” rewrote its description, which is the text the model reads security
- Tool “red_email_check” rewrote its description, which is the text the model reads security
- New tool “ai_image” functional
- New tool “ai_speech” functional
- New tool “ai_transcribe” functional
- 13 Sept 26 +1
- The server rewrote its instructions, which are the text every model session reads security
- Tool “catalog” rewrote its description, which is the text the model reads security
- New tool “evm_token_price” functional
- 12 Sept 26 0
- The server rewrote its instructions, which are the text every model session reads security
- Tool “catalog” rewrote its description, which is the text the model reads security
- New tool “crypto_sanctions” functional
- 11 Sept 26 0
- The server rewrote its instructions, which are the text every model session reads security
- Tool “content_advice” rewrote its description, which is the text the model reads security
- Tool “content_fact” rewrote its description, which is the text the model reads security
- Tool “content_horror_story” rewrote its description, which is the text the model reads security
- Tool “content_joke” rewrote its description, which is the text the model reads security
- Tool “content_riddle” rewrote its description, which is the text the model reads security
- Tool “content_roast” rewrote its description, which is the text the model reads security
- Tool “content_word_of_the_day” rewrote its description, which is the text the model reads security
- Tool “evm_balance” rewrote its description, which is the text the model reads security
- Tool “evm_block” rewrote its description, which is the text the model reads security
- Tool “evm_call” rewrote its description, which is the text the model reads security
- Tool “evm_chains” rewrote its description, which is the text the model reads security
- Tool “evm_ens” rewrote its description, which is the text the model reads security
- Tool “evm_erc20_allowance” rewrote its description, which is the text the model reads security
- Tool “evm_erc20_balance” rewrote its description, which is the text the model reads security
- Tool “evm_estimate_gas” rewrote its description, which is the text the model reads security
- Tool “evm_fees” rewrote its description, which is the text the model reads security
- Tool “evm_gas” rewrote its description, which is the text the model reads security
- Tool “evm_is_contract” rewrote its description, which is the text the model reads security
- Tool “evm_nft_owner” rewrote its description, which is the text the model reads security
- Tool “evm_nonce” rewrote its description, which is the text the model reads security
- Tool “evm_portfolio” rewrote its description, which is the text the model reads security
- Tool “evm_receipt” rewrote its description, which is the text the model reads security
- Tool “evm_storage” rewrote its description, which is the text the model reads security
- Tool “evm_token_info” rewrote its description, which is the text the model reads security
- Tool “evm_token_safety” rewrote its description, which is the text the model reads security
- Tool “evm_tx” rewrote its description, which is the text the model reads security
- Tool “fx_convert” rewrote its description, which is the text the model reads security
- Tool “llm_completion” rewrote its description, which is the text the model reads security
- Tool “random_coinflip” rewrote its description, which is the text the model reads security
- Tool “random_dice” rewrote its description, which is the text the model reads security
- Tool “random_number” rewrote its description, which is the text the model reads security
- Tool “random_password” rewrote its description, which is the text the model reads security
- Tool “random_pick” rewrote its description, which is the text the model reads security
- Tool “random_shuffle” rewrote its description, which is the text the model reads security
- Tool “red_asn” rewrote its description, which is the text the model reads security
- Tool “red_dnsbl” rewrote its description, which is the text the model reads security
- Tool “red_domain_check” rewrote its description, which is the text the model reads security
- Tool “red_email_check” rewrote its description, which is the text the model reads security
- Tool “red_ip” rewrote its description, which is the text the model reads security
- Tool “red_whois” rewrote its description, which is the text the model reads security
- Tool “time_convert” rewrote its description, which is the text the model reads security
- Tool “time_now” rewrote its description, which is the text the model reads security
- Tool “time_zones” rewrote its description, which is the text the model reads security
- Tool “util_address” rewrote its description, which is the text the model reads security
- Tool “util_base64” rewrote its description, which is the text the model reads security
- Tool “util_hex” rewrote its description, which is the text the model reads security
- Tool “util_iban” rewrote its description, which is the text the model reads security
- Tool “util_keccak256” rewrote its description, which is the text the model reads security
- Tool “util_phone” rewrote its description, which is the text the model reads security
- Tool “util_selector” rewrote its description, which is the text the model reads security
- Tool “util_sha256” rewrote its description, which is the text the model reads security
- Tool “util_units” rewrote its description, which is the text the model reads security
- Tool “util_uuid” rewrote its description, which is the text the model reads security
- Tool “util_vat” rewrote its description, which is the text the model reads security
- Tool “util_verify_signature” rewrote its description, which is the text the model reads security
- Tool “web_read” rewrote its description, which is the text the model reads security
- Tool “web_status” rewrote its description, which is the text the model reads security
- Tool “catalog” rewrote its description, which is the text the model reads security
- Schema quality: 5678 → 7488 ▼ functional
- Schema quality: 5678 → 6998 ▼ functional
- New tool “red_cert” functional
- New tool “weather_forecast” functional
- New tool “weather_now” functional
- New tool “fx_convert” functional
- New tool “red_asn” functional
- New tool “red_dnsbl” functional
- New tool “red_ip” functional
- New tool “red_whois” functional
- New tool “util_iban” functional
- New tool “util_phone” functional
- New tool “util_vat” functional
- New tool “web_status” functional
- 10 Sept 26 0
- A breaking change shipped without a version bump: still 1.0.0 ▼ security
- The server rewrote its instructions, which are the text every model session reads security
- Tool “catalog” rewrote its description, which is the text the model reads security
- Tool “evm_balance” rewrote its description, which is the text the model reads security
- Tool “evm_block” rewrote its description, which is the text the model reads security
- Tool “evm_chains” rewrote its description, which is the text the model reads security
- Tool “evm_erc20_allowance” rewrote its description, which is the text the model reads security
- Tool “evm_erc20_balance” rewrote its description, which is the text the model reads security
- Tool “evm_estimate_gas” rewrote its description, which is the text the model reads security
- Tool “evm_fees” rewrote its description, which is the text the model reads security
- Tool “evm_gas” rewrote its description, which is the text the model reads security
- Tool “evm_is_contract” rewrote its description, which is the text the model reads security
- Tool “evm_nft_owner” rewrote its description, which is the text the model reads security
- Tool “evm_nonce” rewrote its description, which is the text the model reads security
- Tool “evm_portfolio” rewrote its description, which is the text the model reads security
- Tool “evm_receipt” rewrote its description, which is the text the model reads security
- Tool “evm_storage” rewrote its description, which is the text the model reads security
- Tool “evm_token_info” rewrote its description, which is the text the model reads security
- Tool “evm_tx” rewrote its description, which is the text the model reads security
- Tool “llm_completion” rewrote its description, which is the text the model reads security
- Schema quality: pass → fail ▼ functional
- “random_pick” changed the type of “items”: array → string ▼ functional
- “random_shuffle” changed the type of “items”: array → string ▼ functional
- Stability: unverified → 0.03 ▲ functional
- New tool “content_horror_story” functional
- New tool “content_roast” functional
- New tool “evm_token_safety” functional
- New tool “red_domain_check” functional
- New tool “red_email_check” functional
- New tool “web_read” functional
- New tool “content_advice” functional
- New tool “content_fact” functional
- New tool “content_joke” functional
- New tool “content_riddle” functional
- New tool “content_word_of_the_day” functional
- New tool “random_coinflip” functional
- New tool “random_dice” functional
- New tool “random_number” functional
- New tool “random_password” functional
- New tool “random_pick” functional
- New tool “random_shuffle” functional
- New tool “time_convert” functional
- New tool “time_now” functional
- New tool “time_zones” functional
- “random_pick” reworded the description of “items” cosmetic
- “random_shuffle” reworded the description of “items” cosmetic
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 20 Sept 2026 · Probed https://flat-rate-llm.kikoribera03.workers.dev/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=kikoribera03.workers.dev | CN=WE1,O=Google Trust Services,C=US | 8 Sept 2026 | 7 Dec 2026 | ECDSA 256 | ECDSA-SHA256 | 9e9a4a2d2a49facd13f6a9a565df5132 |
| SANs: kikoribera03.workers.dev, *.kikoribera03.workers.dev | ||||||
| CN=WE1,O=Google Trust Services,C=US (CA) | CN=GTS Root R4,O=Google Trust Services LLC,C=US | 13 Dec 2023 | 20 Feb 2029 | ECDSA 256 | ECDSA-SHA384 | 7ff31977972c224a76155d13b6d685e3 |
| CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) | CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE | 15 Nov 2023 | 28 Jan 2028 | ECDSA 384 | SHA256-RSA | 7fe530bf331343bedd821610493d8a1b |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of flat-rate-llm.kikoribera03.workers.dev. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| dev. | present | 60074 | 8 | Verified |
| workers.dev. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://flat-rate-llm.kikoribera03.workers.dev/mcp | Verified | 200 | |
| http (plaintext) | http://flat-rate-llm.kikoribera03.workers.dev/mcp | Inconclusive | 405 |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
util_address Address checksum and validation ~79
Validates an EVM address and returns it in EIP-55 mixed-case checksum form. Catches typos before you send funds: an address that fails the checksum is almost always mistyped. $0.0025 per call, paid over x402 (USDC).
| Name | Type | Req | Description |
|---|---|---|---|
| address | string | yes | The address to validate, in any case. |
No output schema declared.
No examples provided.
util_base64 Base64 encode and decode ~110
Base64 in both directions, including the URL-safe alphabet, with UTF-8 handled properly. Encoding is what carries payloads through headers and JSON, and x402 itself rides on it. $0.0025 per call, paid over x402 (USDC).
| Name | Type | Req | Description |
|---|---|---|---|
| input | string | yes | The text or base64 to convert. |
| mode | string | – | encode | decode. Defaults to encode. |
| urlSafe | boolean | – | Use the URL-safe alphabet (-_ instead of +/). |
No output schema declared.
No examples provided.
util_hex Hex converter ~107
Converts between hex, decimal and UTF-8 text in one call, with big integers handled exactly. For reading raw RPC output, which comes back as hex and overflows a JavaScript number. $0.0025 per call, paid over x402 (USDC).
| Name | Type | Req | Description |
|---|---|---|---|
| as | string | – | hex | decimal | text. What the value IS. Defaults to autodetect. |
| value | string | yes | A 0x-prefixed hex string, a decimal number, or text. |
No output schema declared.
No examples provided.
util_iban IBAN check ~106
Validates one IBAN offline: country, expected length, ISO 7064 mod-97 check digits, whether it is inside SEPA, and the account number split out. Deterministic, no network call and no third party that can go down. Built for cleaning a list of accounts one at a time. $0.005 per call, paid over x402 (USDC).
| Name | Type | Req | Description |
|---|---|---|---|
| iban | string | yes | The IBAN to check. Spaces and lowercase are accepted. |
No output schema declared.
No examples provided.
util_keccak256 Keccak-256 hash ~90
Keccak-256 of any string or hex payload - the hash Ethereum actually uses, which is NOT the same as SHA3-256. Needed for selectors, event topics, salts and CREATE2 addresses. $0.0025 per call, paid over x402 (USDC).
| Name | Type | Req | Description |
|---|---|---|---|
| input | string | yes | Plain text, or a 0x-prefixed hex payload to hash as bytes. |
No output schema declared.
No examples provided.
util_phone Phone number check ~189
Checks one phone number offline: normalises it to E.164, works out its country (including the twelve calling codes shared by several countries, such as +1 US/Canada/Caribbean) and validates the national number length against that country's numbering plan. Returns the tel: URI and the national dialling form. Numbering data from Google's libphonenumber. No network call and no API key, so it cannot fail because a third party is down. $0.005 per call, paid over x402 (USDC).
| Name | Type | Req | Description |
|---|---|---|---|
| country | string | – | Optional ISO 3166-1 alpha-2 country, e.g. ES. Only used when the number carries no country code. |
| phone | string | yes | The phone number, in any usual notation: +34 612 34 56 78, 0034612345678, (612) 345-678. |
No output schema declared.
No examples provided.
util_selector Function selector and event topic ~86
Turns a Solidity signature like transfer(address,uint256) into its 4-byte function selector and its 32-byte event topic0. What you need to build calldata by hand or to filter logs. $0.0025 per call, paid over x402 (USDC).
| Name | Type | Req | Description |
|---|---|---|---|
| signature | string | yes | Canonical signature: name(type1,type2), no spaces and no argument names. |
No output schema declared.
No examples provided.
util_sha256 SHA-256 hash ~83
SHA-256 of any string or hex payload, returned as hex and as base64. The hash everything outside Ethereum uses: file digests, API signatures, content addressing. $0.0025 per call, paid over x402 (USDC).
| Name | Type | Req | Description |
|---|---|---|---|
| input | string | yes | Plain text, or a 0x-prefixed hex payload to hash as bytes. |
No output schema declared.
No examples provided.
util_units Token unit converter ~119
Converts between wei, gwei, ether and any token decimals using exact integer maths - no floating point, no silent rounding. The mistake that costs real money is being off by a thousand on decimals. $0.0025 per call, paid over x402 (USDC).
| Name | Type | Req | Description |
|---|---|---|---|
| amount | string | yes | The quantity, as a string to avoid float loss. |
| from | string | yes | wei | gwei | ether, or a number of decimals. |
| to | string | yes | wei | gwei | ether, or a number of decimals. |
No output schema declared.
No examples provided.
util_uuid UUID v4 generator ~87
Cryptographically random UUID v4s, up to 100 per call, straight from the platform CSPRNG. For idempotency keys, request ids and correlation ids - the ones that must not collide. $0.0025 per call, paid over x402 (USDC).
| Name | Type | Req | Description |
|---|---|---|---|
| count | number | – | How many to generate, 1-100. Defaults to 1. |
No output schema declared.
No examples provided.
util_vat EU VAT number check ~105
Validates one EU VAT number offline: country prefix, the format that country uses, and the published check-digit algorithm where one exists. Says explicitly whether the check digits were verified or only the format. Deterministic, no network call. Built for cleaning a list of companies one at a time. $0.005 per call, paid over x402 (USDC).
| Name | Type | Req | Description |
|---|---|---|---|
| vat | string | yes | The VAT number, with or without the country prefix and with any spacing. |
No output schema declared.
No examples provided.
util_verify_signature Verify wallet signature ~113
Recovers the address that signed a personal_sign (EIP-191) message and tells you whether it matches the address you expected. This is how you prove a wallet is controlled by whoever is talking to you. $0.0025 per call, paid over x402 (USDC).
| Name | Type | Req | Description |
|---|---|---|---|
| expected | string | – | Optional address to compare the recovered signer against. |
| message | string | yes | The exact message that was signed. |
| signature | string | yes | 65-byte 0x signature from personal_sign. |
No output schema declared.
No examples provided.
weather_forecast Multi-day forecast from the official national service ~177
Day-by-day forecast for any point on Earth, up to nine days out, from the Norwegian Meteorological Institute's official model rather than a commercial aggregator. Each day carries its minimum and maximum temperature, total precipitation, strongest wind and the midday symbol, together with the exact model run and the institute's declared units, so a planning decision can cite where the number came from. $0.01 per call, paid over x402 (USDC).
| Name | Type | Req | Description |
|---|---|---|---|
| days | number | – | How many days to return, 1-9. Defaults to 5. The last day is usually partial and says so. |
| lat | number | yes | Latitude in decimal degrees, -90 to 90. Rounded to 4 decimals. |
| lon | number | yes | Longitude in decimal degrees, -180 to 180. Rounded to 4 decimals. |
No output schema declared.
No examples provided.
weather_now Current weather from the official national forecast ~178
Current conditions for any point on Earth, taken from the Norwegian Meteorological Institute's official forecast model rather than a commercial aggregator. Returns temperature, humidity, pressure, wind speed and bearing, cloud cover and the next hour's precipitation, plus the exact model run it came from and the units the institute itself declares, so the figure can be cited and checked instead of merely trusted. $0.01 per call, paid over x402 (USDC).
| Name | Type | Req | Description |
|---|---|---|---|
| hours | number | – | How many hourly steps to include after the current one, 0-24. Defaults to 6. |
| lat | number | yes | Latitude in decimal degrees, -90 to 90. Rounded to 4 decimals, which is what the institute accepts. |
| lon | number | yes | Longitude in decimal degrees, -180 to 180. Rounded to 4 decimals. |
No output schema declared.
No examples provided.
web_read Read a web page as markdown ~130
Fetches one URL and returns the readable page as markdown: title, description, headings, paragraphs and links with their destinations, plus the canonical URL, language and word count. Boilerplate, scripts and navigation are stripped. Built for going through a list of links one at a time. No API key, no account. $0.01 per call, paid over x402 (USDC).
| Name | Type | Req | Description |
|---|---|---|---|
| links | boolean | – | Also return the outbound links as a list. Defaults to false. |
| url | string | yes | The page to read. http and https only; private and loopback addresses are refused. |
No output schema declared.
No examples provided.
web_status URL status and redirect chain ~136
Checks one URL without downloading the page: HTTP status, the full redirect chain hop by hop with the code of each, the final URL, whether it ends on HTTPS, content type and size, and the security headers the server sends. Built for going through a list of links one at a time. No API key, no account. $0.005 per call, paid over x402 (USDC).
| Name | Type | Req | Description |
|---|---|---|---|
| method | string | – | HEAD (default) or GET. Some servers refuse HEAD and only answer GET. |
| url | string | yes | The URL to check. http and https only; private and loopback addresses are refused. |
No output schema declared.
No examples provided.
What is the dev.workers.kikoribera03.flat-rate-llm/x402-tools MCP server?
dev.workers.kikoribera03.flat-rate-llm/x402-tools is an MCP server listed in the public MCP registry as dev.workers.kikoribera03.flat-rate-llm/x402-tools. 61 x402 pay-per-call tools that chain: each answer names the next call. No API key, no account. This page covers its hosted endpoint (https://flat-rate-llm.kikoribera03.workers.dev/mcp).
Is the dev.workers.kikoribera03.flat-rate-llm/x402-tools MCP server safe to use?
dev.workers.kikoribera03.flat-rate-llm/x402-tools scores 65 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the dev.workers.kikoribera03.flat-rate-llm/x402-tools MCP server expose?
dev.workers.kikoribera03.flat-rate-llm/x402-tools exposes 66 tools: catalog, llm_completion, evm_balance, evm_erc20_balance, evm_token_info, and 61 more. Their descriptions and schemas cost roughly 8,266 tokens of context every time the server is loaded.
Does the dev.workers.kikoribera03.flat-rate-llm/x402-tools MCP server require authentication?
No. We connected to dev.workers.kikoribera03.flat-rate-llm/x402-tools without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the dev.workers.kikoribera03.flat-rate-llm/x402-tools MCP server still maintained?
dev.workers.kikoribera03.flat-rate-llm/x402-tools is still listed as active in the MCP registry. We last reached this channel on 20 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.