Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

AgentX x402 Services (paid MCP tools)

REMOTE · AGENTX.SALE

All 26 AgentX paid services as MCP tools — site checks, markets, crypto, email DNS, AI text work.

Available components

66 Trust /100

Last scanned (4 hours ago)

Scores higher than 52% of remote servers

Reachable. Last reached 5 Nov 2026.

Category Security

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →

Endpoint Security63
Transport & Reachability100
Schema Quality & AI Usability69
  • AI-judged instruction clarity (excellent).Pass
  • Context-footprint check failed: tool/resource definitions use about 5711 tokens (~167/item across 34 items; 34 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management17
  • Stability observed for 5 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage99
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 97% of tool parameters carry a description.Partial
Tool Safety100
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • We read all 34 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
  • An AI judge read all 35 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities60
  • Spec-recency check failed: implements MCP spec 2025-06-18; the latest is 2026-07-28. See how to fix → Fail
What we tested

Checks we ran (13)

  • TLS certificate
  • Authorization
  • HTTPS
  • HSTS header
  • DNSSEC
  • Transport
  • Schema quality
  • Stability
  • Tool coverage
  • Injection markers
  • Destructive annotations
  • Judged manipulation
  • MCP protocol

Does not apply to this hosted endpoint (2)

  • Supply Chain SecurityScored on package channels only. This is a hosted endpoint, so there is nothing to install or inspect.
  • Provenance & TransparencyScored on package channels only. This is a hosted endpoint, so there is nothing to install or inspect.

The score does not measure everything. What the score does not measure →

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 4 Nov 26 0
    • The server rewrote its instructions, which are the text every model session reads security
    • Schema quality: 4284 → 5711 ▼ functional
    • Schema quality: 4284 → 5331 ▼ functional
    • Server version: 0.7.15 → 0.7.16 functional
    • Server version: 0.7.14 → 0.7.15 functional
    • New tool “get_podcast_transcript” functional
    • New tool “lookup_podcast” functional
    • New tool “get_ats_job_detail” functional
    • New tool “get_youtube_channel” functional
    • New tool “get_youtube_search” functional
    • New tool “get_youtube_transcript” functional
    • New tool “get_youtube_video” functional
    • New tool “search_ats_jobs” functional
  • 3 Nov 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 7 to 10. That category is still filling its 30-day observation window: 2 days of observed history at the previous scan, 3 at this one. The score rises as the window fills, whether or not the server changes.

  • 1 Nov 26 +1
    • Stability: unverified → 0.03 ▲ functional
  • 31 Oct 26 64

    First indexed and scored.

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 5 Nov 2026 · Probed https://agentx.sale/connect/mcp

TLS valid

Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .

Subject Issuer Valid from Valid until Key Signature Serial
CN=agentx.sale CN=YE1,O=Let's Encrypt,C=US 28 Sept 2026 27 Dec 2026 ECDSA 256 ECDSA-SHA384 6e8b2d41afa49e8e959b2beb2d97821d4d5
SANs: agentx.sale, www.agentx.sale
CN=YE1,O=Let's Encrypt,C=US (CA) CN=Root YE,O=ISRG,C=US 3 Sept 2025 2 Sept 2028 ECDSA 384 ECDSA-SHA384 5ddd70dd31f801c85c186a7a04b80afe
CN=Root YE,O=ISRG,C=US (CA) CN=ISRG Root X2,O=Internet Security Research Group,C=US 13 May 2026 2 Sept 2032 ECDSA 384 ECDSA-SHA384 872165fc34b6e5fba8add5b3705fb53a
CN=ISRG Root X2,O=Internet Security Research Group,C=US (CA) CN=ISRG Root X1,O=Internet Security Research Group,C=US 13 May 2026 2 Sept 2032 ECDSA 384 SHA256-RSA 6c8f1dc727c7117f7baf853ac980f9cd

Background: What to check on a remote MCP endpoint →

DNSSEC insecure

Validation of agentx.sale. — Not signed

Zone DS Keys Algorithms Outcome
. Trust anchor 20326, 38696 8, 8 Verified
sale. DS published 58006 8 Verified
agentx.sale. No DS Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation
Authentication No authorisation required

The endpoint answered without asking for a token. Anyone who knows the URL can reach it.

Result No authorisation required
HTTP status 200
Header Value
strict-transport-security max-age=31536000; includeSubDomains
x-content-type-options nosniff
x-frame-options SAMEORIGIN
referrer-policy strict-origin-when-cross-origin

Background: How OAuth 2.1 works in the 2026 MCP spec →

Transports 2 probes
Transport URL Outcome Status Location
streamable-http https://agentx.sale/connect/mcp Verified 200
http (plaintext) http://agentx.sale/connect/mcp HTTPS enforced 301 https://agentx.sale/connect/mcp
MCP tools · 34 exposed · ~5,260 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
check_cves ~166

CISA KEV + NVD CVE check for software+version. GET /x402/kevcheck?software=&version= — $0.10.

NameTypeReqDescription
paymentstring–Optional. Your x402 payment proof for this exact call — the PAYMENT-SIGNATURE value produced by settling this route's 402 challenge (USDC on Base or Solana), or an MPP 'Authorization: Payment ...' va…
softwarestringyesProduct name, e.g. nginx
versionstringyesVersion, e.g. 1.24.0

No output schema declared.

No examples provided.

check_email_dns ~141

MX, SPF, DMARC and outreach verdict for a domain or address. GET /x402/email-check?q= — $0.01.

NameTypeReqDescription
paymentstring–Optional. Your x402 payment proof for this exact call — the PAYMENT-SIGNATURE value produced by settling this route's 402 challenge (USDC on Base or Solana), or an MPP 'Authorization: Payment ...' va…
qstringyesDomain or email address

No output schema declared.

No examples provided.

check_security_headers ~146

Security headers score 0–10: CSP, HSTS, framing, cookies, TLS. GET /x402/secscore?url= — $0.01.

NameTypeReqDescription
paymentstring–Optional. Your x402 payment proof for this exact call — the PAYMENT-SIGNATURE value produced by settling this route's 402 challenge (USDC on Base or Solana), or an MPP 'Authorization: Payment ...' va…
urlstringyeshttps URL to score

No output schema declared.

No examples provided.

check_webmcp ~141

WebMCP agent-compatibility check with pass/fail verdict. GET /x402/webmcp-check?host= — $0.10.

NameTypeReqDescription
hoststringyesDomain
paymentstring–Optional. Your x402 payment proof for this exact call — the PAYMENT-SIGNATURE value produced by settling this route's 402 challenge (USDC on Base or Solana), or an MPP 'Authorization: Payment ...' va…

No output schema declared.

No examples provided.

check_x402 ~151

x402 Doctor: is a URL a valid agent-payable paid resource (v1+v2). GET /x402/x402-check?url= — $0.01.

NameTypeReqDescription
paymentstring–Optional. Your x402 payment proof for this exact call — the PAYMENT-SIGNATURE value produced by settling this route's 402 challenge (USDC on Base or Solana), or an MPP 'Authorization: Payment ...' va…
urlstringyeshttps URL of a paid endpoint

No output schema declared.

No examples provided.

classify_text ~163

AI topic classification of supplied text (max 24k chars). POST /x402/classify — $1.75.

NameTypeReqDescription
labelsarray–Optional caller label set
multiLabelboolean–Allow multiple labels
paymentstring–Optional. Your x402 payment proof for this exact call — the PAYMENT-SIGNATURE value produced by settling this route's 402 challenge (USDC on Base or Solana), or an MPP 'Authorization: Payment ...' va…
textstringyesText to classify, max 24k chars

No output schema declared.

No examples provided.

extract_keywords ~145

AI keyword extraction with scores and language. POST /x402/keywords — $0.90.

NameTypeReqDescription
maxKeywordsinteger–Optional cap
paymentstring–Optional. Your x402 payment proof for this exact call — the PAYMENT-SIGNATURE value produced by settling this route's 402 challenge (USDC on Base or Solana), or an MPP 'Authorization: Payment ...' va…
textstringyesSource text, max 24k chars

No output schema declared.

No examples provided.

find_polymarket_arb ~148

Markets where YES_ask + NO_ask < $1.00. GET /x402/polymarket-arb?limit= — $0.01.

NameTypeReqDescription
limitinteger–Optional scan size
paymentstring–Optional. Your x402 payment proof for this exact call — the PAYMENT-SIGNATURE value produced by settling this route's 402 challenge (USDC on Base or Solana), or an MPP 'Authorization: Payment ...' va…

No output schema declared.

No examples provided.

get_agent_card ~147

Site agent-readiness verdict card (llms.txt, A2A, MCP, TLS, crawlers). GET /x402/agent-card?host= — $0.01.

NameTypeReqDescription
hoststringyesDomain
paymentstring–Optional. Your x402 payment proof for this exact call — the PAYMENT-SIGNATURE value produced by settling this route's 402 challenge (USDC on Base or Solana), or an MPP 'Authorization: Payment ...' va…

No output schema declared.

No examples provided.

get_ats_job_detail ~186

Full job detail from Greenhouse or Lever by id or hosted URL: title, location, department, full description. GET /x402/ats-job? — $0.01.

NameTypeReqDescription
companystringyesBoard slug
idstring–Job id
paymentstring–Optional. Your x402 payment proof for this exact call — the PAYMENT-SIGNATURE value produced by settling this route's 402 challenge (USDC on Base or Solana), or an MPP 'Authorization: Payment ...' va…
platformstringyesgreenhouse or lever
urlstring–Or hosted job URL (greenhouse.io/lever.co)

No output schema declared.

No examples provided.

get_btc_fees ~139

Bitcoin sat/vB forecast: next block, 30 min, 1 hour, economy. GET /x402/btc-fees — $0.01. No params.

NameTypeReqDescription
paymentstring–Optional. Your x402 payment proof for this exact call — the PAYMENT-SIGNATURE value produced by settling this route's 402 challenge (USDC on Base or Solana), or an MPP 'Authorization: Payment ...' va…

No output schema declared.

No examples provided.

get_crawler_policy ~137

TLS + security headers + AI-crawler policy matrix. GET /x402/crawler-policy?host= — $0.01.

NameTypeReqDescription
hoststringyesDomain
paymentstring–Optional. Your x402 payment proof for this exact call — the PAYMENT-SIGNATURE value produced by settling this route's 402 challenge (USDC on Base or Solana), or an MPP 'Authorization: Payment ...' va…

No output schema declared.

No examples provided.

get_crypto_prices ~149

USD price + 24h move for up to 10 tokens. GET /x402/crypto-ticker?assets= — $0.01.

NameTypeReqDescription
assetsstringyesComma symbols, e.g. btc,eth
paymentstring–Optional. Your x402 payment proof for this exact call — the PAYMENT-SIGNATURE value produced by settling this route's 402 challenge (USDC on Base or Solana), or an MPP 'Authorization: Payment ...' va…

No output schema declared.

No examples provided.

get_fear_greed ~132

Crypto Fear & Greed Index plus 7-day history. GET /x402/fear-greed — $0.01. No params.

NameTypeReqDescription
paymentstring–Optional. Your x402 payment proof for this exact call — the PAYMENT-SIGNATURE value produced by settling this route's 402 challenge (USDC on Base or Solana), or an MPP 'Authorization: Payment ...' va…

No output schema declared.

No examples provided.

get_fx_rates ~156

ECB reference FX rates. GET /x402/fx-rates?base=&symbols= — $0.01.

NameTypeReqDescription
basestringyesBase currency, e.g. USD
paymentstring–Optional. Your x402 payment proof for this exact call — the PAYMENT-SIGNATURE value produced by settling this route's 402 challenge (USDC on Base or Solana), or an MPP 'Authorization: Payment ...' va…
symbolsstringyesComma codes, e.g. GBP,EUR

No output schema declared.

No examples provided.

get_gas_price ~166

Live gas on Base/Ethereum/Polygon/Avalanche/Arbitrum/OP plus USD transfer cost. GET /x402/gas-check?chain= — $0.01.

NameTypeReqDescription
chainstring–Optional chain: base|ethereum|polygon|avalanche|arbitrum|optimism
paymentstring–Optional. Your x402 payment proof for this exact call — the PAYMENT-SIGNATURE value produced by settling this route's 402 challenge (USDC on Base or Solana), or an MPP 'Authorization: Payment ...' va…

No output schema declared.

No examples provided.

get_page_roast ~145

Legends Roast of a page's biggest flaw: score, verdict, SVG. GET /x402/gtm-roast?url= — $0.01.

NameTypeReqDescription
paymentstring–Optional. Your x402 payment proof for this exact call — the PAYMENT-SIGNATURE value produced by settling this route's 402 challenge (USDC on Base or Solana), or an MPP 'Authorization: Payment ...' va…
urlstringyeshttps page URL

No output schema declared.

No examples provided.

get_podcast_transcript ~203

Full transcript of a podcast episode with published transcript tags (Podcasting 2.0, keyless, deterministic). GET /x402/podcast-transcript?feed=&index=&episode=&format= — $0.02.

NameTypeReqDescription
episodestring–guid or title substring
feedstringyesRSS feed URL or Apple Podcasts numeric id
formatstring–text | vtt | json
indexinteger–1 = newest episode (as listed)
paymentstring–Optional. Your x402 payment proof for this exact call — the PAYMENT-SIGNATURE value produced by settling this route's 402 challenge (USDC on Base or Solana), or an MPP 'Authorization: Payment ...' va…

No output schema declared.

No examples provided.

get_polymarket_book ~142

Top-of-book bid/ask, spread, USD depth. GET /x402/polymarket-book?q= — $0.01.

NameTypeReqDescription
paymentstring–Optional. Your x402 payment proof for this exact call — the PAYMENT-SIGNATURE value produced by settling this route's 402 challenge (USDC on Base or Solana), or an MPP 'Authorization: Payment ...' va…
qstringyesTopic or slug

No output schema declared.

No examples provided.

get_polymarket_history ~161

YES-price series 1–90 days with change and high/low. GET /x402/polymarket-history?q=&days= — $0.01.

NameTypeReqDescription
daysinteger–Window 1–90, optional
paymentstring–Optional. Your x402 payment proof for this exact call — the PAYMENT-SIGNATURE value produced by settling this route's 402 challenge (USDC on Base or Solana), or an MPP 'Authorization: Payment ...' va…
qstringyesTopic or slug

No output schema declared.

No examples provided.

get_polymarket_odds ~146

Live YES/NO odds for a named Polymarket market. GET /x402/polymarket-odds?q= — $0.01.

NameTypeReqDescription
paymentstring–Optional. Your x402 payment proof for this exact call — the PAYMENT-SIGNATURE value produced by settling this route's 402 challenge (USDC on Base or Solana), or an MPP 'Authorization: Payment ...' va…
qstringyesTopic or slug

No output schema declared.

No examples provided.

get_polymarket_resolution ~143

Did a market resolve and which outcome won. GET /x402/polymarket-resolution?q= — $0.01.

NameTypeReqDescription
paymentstring–Optional. Your x402 payment proof for this exact call — the PAYMENT-SIGNATURE value produced by settling this route's 402 challenge (USDC on Base or Solana), or an MPP 'Authorization: Payment ...' va…
qstring–Optional topic; omit for newest resolved

No output schema declared.

No examples provided.

get_polymarket_trending ~148

Top open Polymarket markets by 24h volume with YES prices. GET /x402/polymarket-trending?limit= — $0.01.

NameTypeReqDescription
limitinteger–Optional max markets
paymentstring–Optional. Your x402 payment proof for this exact call — the PAYMENT-SIGNATURE value produced by settling this route's 402 challenge (USDC on Base or Solana), or an MPP 'Authorization: Payment ...' va…

No output schema declared.

No examples provided.

get_site_health ~141

DNS, TLS cert, HTTP status and latency snapshot. GET /x402/site-health?host= — $0.01.

NameTypeReqDescription
hoststringyesDomain, e.g. example.com
paymentstring–Optional. Your x402 payment proof for this exact call — the PAYMENT-SIGNATURE value produced by settling this route's 402 challenge (USDC on Base or Solana), or an MPP 'Authorization: Payment ...' va…

No output schema declared.

No examples provided.

get_weather ~142

Live current weather for any city via Open-Meteo. GET /x402/weather?city= — $0.01 USDC.

NameTypeReqDescription
citystringyesCity name, e.g. Aberdeen
paymentstring–Optional. Your x402 payment proof for this exact call — the PAYMENT-SIGNATURE value produced by settling this route's 402 challenge (USDC on Base or Solana), or an MPP 'Authorization: Payment ...' va…

No output schema declared.

No examples provided.

get_youtube_channel ~147

15 latest videos of a YouTube channel with views and likes. GET /x402/youtube-channel?id= — $0.01.

NameTypeReqDescription
idstringyesChannel URL, @handle or UC… id
paymentstring–Optional. Your x402 payment proof for this exact call — the PAYMENT-SIGNATURE value produced by settling this route's 402 challenge (USDC on Base or Solana), or an MPP 'Authorization: Payment ...' va…

No output schema declared.

No examples provided.

get_youtube_search ~159

Keyless YouTube search with optional video or channel filter. GET /x402/youtube-search?q= — $0.01.

NameTypeReqDescription
filterstring–video or channel
limitinteger–1-20
paymentstring–Optional. Your x402 payment proof for this exact call — the PAYMENT-SIGNATURE value produced by settling this route's 402 challenge (USDC on Base or Solana), or an MPP 'Authorization: Payment ...' va…
qstringyesSearch query

No output schema declared.

No examples provided.

get_youtube_transcript ~157

Full YouTube transcript: timestamped segments plus plainText. GET /x402/youtube-transcript?url= — $0.02.

NameTypeReqDescription
langstring–Optional transcript language code
paymentstring–Optional. Your x402 payment proof for this exact call — the PAYMENT-SIGNATURE value produced by settling this route's 402 challenge (USDC on Base or Solana), or an MPP 'Authorization: Payment ...' va…
urlstringyesAny YouTube video URL or id

No output schema declared.

No examples provided.

get_youtube_video ~153

YouTube video metadata: title, channel, views, length, description. GET /x402/youtube-video?url= — $0.01.

NameTypeReqDescription
paymentstring–Optional. Your x402 payment proof for this exact call — the PAYMENT-SIGNATURE value produced by settling this route's 402 challenge (USDC on Base or Solana), or an MPP 'Authorization: Payment ...' va…
urlstringyesAny YouTube video URL, youtu.be or raw video id

No output schema declared.

No examples provided.

lint_protocol_card ~142

A2A/MCP protocol card lint with patched JSON fixes. GET /x402/protocol-lint?url= — $0.01.

NameTypeReqDescription
paymentstring–Optional. Your x402 payment proof for this exact call — the PAYMENT-SIGNATURE value produced by settling this route's 402 challenge (USDC on Base or Solana), or an MPP 'Authorization: Payment ...' va…
urlstringyesDomain or card URL

No output schema declared.

No examples provided.

lookup_podcast ~177

FREE podcast discovery: show metadata and episode list (titles, dates, durations, audio urls, hasTranscript flags) from any RSS feed or Apple Podcasts id. GET /x402/podcast-lookup?feed= — free.

NameTypeReqDescription
feedstringyesRSS feed URL or Apple Podcasts numeric id
limitinteger–1-50, default 15
paymentstring–Optional. Your x402 payment proof for this exact call — the PAYMENT-SIGNATURE value produced by settling this route's 402 challenge (USDC on Base or Solana), or an MPP 'Authorization: Payment ...' va…

No output schema declared.

No examples provided.

order_webmcp_upgrade ~203

DESTRUCTIVE: places a paid WebMCP upgrade order ($4.00). Fetches the site and generates webmcp.js. Confirm with the user before calling. POST /x402/webmcp-upgrade JSON {url, notes?}. This MCP server never settles payment.

NameTypeReqDescription
confirmbooleanyesMust be true after explicit user confirmation to place the $4.00 order
notesstring–Optional focus notes
paymentstring–Optional. Your x402 payment proof for this exact call — the PAYMENT-SIGNATURE value produced by settling this route's 402 challenge (USDC on Base or Solana), or an MPP 'Authorization: Payment ...' va…
urlstringyeshttps site URL

No output schema declared.

No examples provided.

run_seo_audit ~143

Rules-based SEO + agent-readiness audit with score and findings. GET /x402/seo-audit?host= — $0.10.

NameTypeReqDescription
hoststringyesDomain to audit
paymentstring–Optional. Your x402 payment proof for this exact call — the PAYMENT-SIGNATURE value produced by settling this route's 402 challenge (USDC on Base or Solana), or an MPP 'Authorization: Payment ...' va…

No output schema declared.

No examples provided.

search_ats_jobs ~195

Open jobs from a public Greenhouse or Lever board with query/location/department filters. GET /x402/ats-jobs?platform=&company= — $0.01.

NameTypeReqDescription
companystringyesBoard slug, e.g. coinbase
departmentstring––
limitinteger–1-50
locationstring––
paymentstring–Optional. Your x402 payment proof for this exact call — the PAYMENT-SIGNATURE value produced by settling this route's 402 challenge (USDC on Base or Solana), or an MPP 'Authorization: Payment ...' va…
platformstringyesgreenhouse or lever
querystring––

No output schema declared.

No examples provided.

Install

How do I install the AgentX x402 Services (paid MCP tools) server?

AgentX x402 Services (paid MCP tools) is a hosted endpoint at https://agentx.sale/connect/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

remote · agentx.sale

# add to Claude Code
claude mcp add --transport http floortomproductions-droid-agentx-x402-services 'https://agentx.sale/connect/mcp'
Common questions

What is the AgentX x402 Services (paid MCP tools) server?

AgentX x402 Services (paid MCP tools) is listed in the public MCP registry as io.github.floortomproductions-droid/agentx-x402-services. All 26 AgentX paid services as MCP tools, site checks, markets, crypto, email DNS, AI text work. This page covers its hosted endpoint (https://agentx.sale/connect/mcp).

Is the AgentX x402 Services (paid MCP tools) server safe to use?

AgentX x402 Services (paid MCP tools) scores 66 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the AgentX x402 Services (paid MCP tools) server expose?

AgentX x402 Services (paid MCP tools) exposes 34 tools: get_weather, get_site_health, check_security_headers, check_x402, run_seo_audit, and 29 more. Their descriptions and schemas cost roughly 5,260 tokens of context every time the server is loaded.

Does the AgentX x402 Services (paid MCP tools) server require authentication?

No. We connected to AgentX x402 Services (paid MCP tools) without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.

Is the AgentX x402 Services (paid MCP tools) server still maintained?

AgentX x402 Services (paid MCP tools) is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

What did VerifyMCP test on the AgentX x402 Services (paid MCP tools) server?

VerifyMCP ran 13 checks on AgentX x402 Services (paid MCP tools), covering TLS certificate, Authorization, HTTPS, HSTS header and 9 more. Supply Chain Security and Provenance & Transparency do not apply to a hosted endpoint, so they were not tested. The score does not measure everything, and the scoring documentation lists what it leaves out.