io.github.hypeprinter007-stack/anchor-x402
REMOTE · API.ANCHOR-X402.COM · 2 COMPONENTS
x402-paid agent tools: 18 over HTTP, 14 over stdio. USDC per call, no API key.
Available components
Last scanned (3 hours ago)
Scores higher than 76% of remote servers
Reachable. Last reached 5 Nov 2026.
Category Crypto and Web3
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security57
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- Authorisation not fully verified: no authorisation is required to call this server, and 6 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe. See how to fix → View diagnostics → Unverified
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- HSTS check failed: the Strict-Transport-Security header is absent. See how to fix → View diagnostics → Fail
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability73
- AI-judged instruction clarity (good).Pass
- Context-footprint check failed: tool/resource definitions use about 1983 tokens (~110/item across 18 items; 18 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
- No destabilizing schema changes in the last 30 days.Pass
Tool Coverage97
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 92% of tool parameters carry a description.Partial
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 18 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 19 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a current MCP spec version (2026-07-28).Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 28 Oct 26 0
- The server rewrote its instructions, which are the text every model session reads security
- 18 Oct 26 0
- Tool “screen_wallet” rewrote its description, which is the text the model reads security
- 28 Sept 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 25 Sept 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 31 Aug 26 0
- Stability: 0.97 → pass security
- 26 Aug 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 21 Aug 26 0
- Tool coverage: 87% → 92% ▲ functional
- “tldr_text” reworded the description of “url” cosmetic
- “ledger_report” reworded the description of “format” cosmetic
- “tldr_text” reworded the description of “text” cosmetic
- 11 Aug 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 5 Nov 2026 · Probed https://api.anchor-x402.com/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=api.anchor-x402.com | CN=Amazon RSA 2048 M04,O=Amazon,C=US | 9 Oct 2026 | 24 Apr 2027 | RSA 2048 | SHA256-RSA | 69746d3f2c50752e1bcdcbe8e42edd4 |
| SANs: api.anchor-x402.com | ||||||
| CN=Amazon RSA 2048 M04,O=Amazon,C=US (CA) | CN=Amazon Root CA 1,O=Amazon,C=US | 23 Aug 2022 | 23 Aug 2030 | RSA 2048 | SHA256-RSA | 773124f2a952e3ed18a58bdb85d1bc0ce5f27 |
| CN=Amazon Root CA 1,O=Amazon,C=US (CA) | CN=Starfield Services Root Certificate Authority - G2,O=Starfield Technologies\, Inc.,L=Scottsdale,ST=Arizona,C=US | 25 May 2015 | 31 Dec 2037 | RSA 2048 | SHA256-RSA | 67f944a2a27cdf3fac2ae2b01f908eeb9c4c6 |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of api.anchor-x402.com. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| com. | present | 19718 | 13 | Verified |
| anchor-x402.com. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://api.anchor-x402.com/mcp | Verified | 200 | |
| http (plaintext) | http://api.anchor-x402.com/mcp | HTTPS enforced |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
anchor_hash anchor ~119
Anchor a 32-byte hash to Base + Solana mainnet in parallel. Returns both tx URLs as cryptographic proof of when the hash existed. $0.005 USDC.
| Name | Type | Req | Description |
|---|---|---|---|
| data | – | – | Arbitrary JSON to be canonicalized + SHA-256'd by the server. Mutually exclusive with `hash`. |
| hash | – | – | Pre-computed 32-byte hex hash (64 chars, no 0x prefix). Mutually exclusive with `data`. |
| note | – | – | Optional 200-char note included in the response (not on-chain). |
No output schema declared.
No examples provided.
attest_decision attest ~252
Attest a decision over (input_hash, output_hash, decision): sign it yourself, or omit the signature and the treasury signs for you — then dual-chain anchor. Returns the signer, on-chain proof URLs, and a free re-verify URL. $0.010 USDC.
| Name | Type | Req | Description |
|---|---|---|---|
| decision | string | yes | Free-form short label, e.g. "APPROVED", "REJECTED", "CONFIDENCE=0.93". |
| input_hash | string | yes | 64-char hex SHA-256 of the agent's input. |
| output_hash | string | yes | 64-char hex SHA-256 of the agent's output / decision payload. |
| scheme | – | – | Signature scheme when you supply a `signature`: "eip191" (EVM) or "ed25519" (Solana). |
| signature | – | – | 0x-prefixed hex (eip191) or base58 (ed25519). Omit to have the anchor-x402 treasury sign for you (hosted-signer mode, for wallet-less agents). |
| signer_pubkey | – | – | Required for ed25519 (Solana base58 pubkey). Ignored for eip191 — address is recovered. |
No output schema declared.
No examples provided.
aura_read aura ~54
Read the aura of anything — color, tier (S/A/B/C/D/F), score 0-9999, description. $0.01 USDC.
| Name | Type | Req | Description |
|---|---|---|---|
| target | string | yes | Anything to read the aura of. |
No output schema declared.
No examples provided.
decode_calldata decode/calldata ~103
Decode raw EVM calldata into function name + typed parameters via openchain.xyz + eth_abi. EVM-only. $0.001 USDC.
| Name | Type | Req | Description |
|---|---|---|---|
| calldata_hex | string | yes | Raw EVM calldata (>=4-byte selector), with or without 0x prefix. |
| chain | string | yes | "ethereum" supported; "solana" returns 400. |
| contract_address | – | – | Optional. Reserved for future on-chain ABI lookups; currently unused. |
No output schema declared.
No examples provided.
decode_tx decode/tx ~54
Structured decode of any mainnet transaction by hash. Supports Base, Ethereum, Solana. Mined txs cached. $0.001 USDC.
| Name | Type | Req | Description |
|---|---|---|---|
| chain | string | yes | – |
| tx_hash | string | yes | – |
No output schema declared.
No examples provided.
grade_target grade ~37
Academic letter grade with red-pen marginalia for anything. $0.01 USDC.
| Name | Type | Req | Description |
|---|---|---|---|
| target | string | yes | Anything to grade. |
No output schema declared.
No examples provided.
intel_wallet intel/wallet ~78
Unified wallet intelligence bundle. ONE call: balances on Base + Ethereum + Solana, USDC, tx counts, ENS/SNS reverse, sanctions verdict. 8-10 parallel sources. $0.005 USDC.
| Name | Type | Req | Description |
|---|---|---|---|
| wallet | string | yes | EVM 0x… address (40 hex) or Solana base58 pubkey. |
No output schema declared.
No examples provided.
investigate_wallet investigate ~88
Agent-driven wallet due diligence — multi-step investigation, signed markdown report + JSON sidecar, dual-chain anchored. Async — returns job_id; poll /v1/investigate/status/{job_id} for the deliverable. ETA 5-10 min. $1.77 USDC.
| Name | Type | Req | Description |
|---|---|---|---|
| address | string | yes | EVM 0x... or Solana base58 address to investigate. |
No output schema declared.
No examples provided.
ledger_report ledger/report ~195
Signed + dual-chain-anchored x402 expense report (markdown + CSV, async job). $0.35 USDC.
| Name | Type | Req | Description |
|---|---|---|---|
| direction | string | – | outbound = spend, inbound = revenue. |
| format | string | – | Which report files to produce. Default both. |
| from | – | – | ISO date or datetime, start of range. Default: 30 days before `to`. |
| group_by | string | – | – |
| include_unfiltered | boolean | – | Include non-x402 USDC transfers as category=other_transfer. |
| min_amount | – | – | Minimum USDC per transfer, e.g. 0.001. |
| prepared_for | – | – | Optional client name for the report header. |
| title | – | – | Report title; appears in the markdown header. |
| to | – | – | ISO date or datetime, end of range. Default: now. |
| wallet | string | yes | EVM address (Base) whose x402 spend to reconstruct. |
No output schema declared.
No examples provided.
ledger_summary ledger/summary ~154
x402 spend accounting for any Base wallet — totals + per-service breakdown reconstructed from chain data. $0.01 USDC.
| Name | Type | Req | Description |
|---|---|---|---|
| direction | string | – | outbound = spend, inbound = revenue. |
| from | – | – | ISO date or datetime, start of range. Default: 30 days before `to`. |
| group_by | string | – | – |
| include_unfiltered | boolean | – | Include non-x402 USDC transfers as category=other_transfer. |
| min_amount | – | – | Minimum USDC per transfer, e.g. 0.001. |
| to | – | – | ISO date or datetime, end of range. Default: now. |
| wallet | string | yes | EVM address (Base) whose x402 spend to reconstruct. |
No output schema declared.
No examples provided.
oracle_verdict oracle ~44
Yes/no oracle with dual-chain anchored verdict (Base + Solana). $0.05 USDC.
| Name | Type | Req | Description |
|---|---|---|---|
| question | string | yes | A yes/no question for the oracle. |
No output schema declared.
No examples provided.
parse_datetime parse/datetime ~83
Parse freeform datetime strings into ISO 8601 + components + relative time + confidence. $0.001 USDC.
| Name | Type | Req | Description |
|---|---|---|---|
| base_time | – | – | ISO 8601 reference; defaults to now UTC. |
| input | string | yes | Freeform datetime string in any format. |
| timezone | string | – | IANA tz name (e.g. 'America/New_York'). |
No output schema declared.
No examples provided.
resolve_name resolve/name ~83
Cross-chain name resolution: ENS (.eth) and Bonfida SNS (.sol). Returns resolved address(es). 1h cache. $0.001 USDC.
| Name | Type | Req | Description |
|---|---|---|---|
| name | string | yes | Human-readable name, e.g. 'vitalik.eth' or 'bonfida.sol'. ENS (.eth) and Bonfida SNS (.sol) are supported. |
No output schema declared.
No examples provided.
roast_target roast ~52
Witty roast of any target — wallet, tweet, idea, code, anything. $0.05 USDC.
| Name | Type | Req | Description |
|---|---|---|---|
| target | string | yes | Anything to roast: wallet, tweet, idea, code, etc. |
No output schema declared.
No examples provided.
roll_random roll ~152
Verifiable RNG — cryptographically-random integer(s) signed by the treasury key. Drop-in VRF for game studios. $0.001 USDC.
| Name | Type | Req | Description |
|---|---|---|---|
| commitment | – | – | Optional 32-byte hex pre-commitment from the caller. Included in the signed payload, so the server cannot have chosen the result after seeing the caller's downstream intent. |
| count | integer | – | How many integers to sample. 1-100. |
| high | integer | yes | Inclusive high bound. Must be >= low. |
| label | – | – | Optional caller-defined tag (e.g. 'treasure_drop_42'). Included verbatim in the signed payload. |
| low | integer | yes | Inclusive low bound of the integer range. |
No output schema declared.
No examples provided.
screen_wallet screen ~81
Wallet risk pre-flight for agent payments: OFAC SDN sanctions plus address-reputation (drainer, phishing, mixer, laundering) resolved to an allow/review/block recommendation with per-signal detail. $0.005 USDC.
| Name | Type | Req | Description |
|---|---|---|---|
| wallet | string | yes | EVM 0x… address (40 hex) or Solana base58 pubkey. |
No output schema declared.
No examples provided.
tldr_text tldr ~64
Summarize a URL or pasted text into 3-5 concise bullets. $0.01 USDC.
| Name | Type | Req | Description |
|---|---|---|---|
| text | – | – | Pasted text to summarize. Provide either text or url. |
| url | – | – | URL to fetch and summarize. Provide either text or url. |
No output schema declared.
No examples provided.
token_price price/token ~109
USD spot price for any major token. By symbol or chain+contract. CoinGecko-backed, 60s cache. $0.001 USDC.
| Name | Type | Req | Description |
|---|---|---|---|
| chain | – | – | Chain slug: base, ethereum, solana, polygon, arbitrum, optimism, bsc, avalanche. Use with contract. |
| contract | – | – | Token contract address. Requires chain. |
| symbol | – | – | Token symbol like 'ETH', 'BTC', 'SOL', 'USDC'. Mutually exclusive with chain+contract. |
No output schema declared.
No examples provided.
How do I install the io.github.hypeprinter007-stack/anchor-x402 MCP server?
io.github.hypeprinter007-stack/anchor-x402 is a hosted endpoint at https://api.anchor-x402.com/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · api.anchor-x402.com
claude mcp add --transport http hypeprinter007-stack-anchor-x402 'https://api.anchor-x402.com/mcp'
What is the io.github.hypeprinter007-stack/anchor-x402 MCP server?
io.github.hypeprinter007-stack/anchor-x402 is an MCP server listed in the public MCP registry as io.github.hypeprinter007-stack/anchor-x402. x402-paid agent tools: 18 over HTTP, 14 over stdio. USDC per call, no API key. This page covers its hosted endpoint (https://api.anchor-x402.com/mcp).
Is the io.github.hypeprinter007-stack/anchor-x402 MCP server safe to use?
io.github.hypeprinter007-stack/anchor-x402 scores 78 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the io.github.hypeprinter007-stack/anchor-x402 MCP server expose?
io.github.hypeprinter007-stack/anchor-x402 exposes 18 tools: anchor_hash, attest_decision, aura_read, decode_calldata, decode_tx, and 13 more. Their descriptions and schemas cost roughly 1,802 tokens of context every time the server is loaded.
Does the io.github.hypeprinter007-stack/anchor-x402 MCP server require authentication?
No. We connected to io.github.hypeprinter007-stack/anchor-x402 without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the io.github.hypeprinter007-stack/anchor-x402 MCP server still maintained?
io.github.hypeprinter007-stack/anchor-x402 is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.