Boundary Guard x402

REMOTE · X402-RESOURCE-SCANNER.VERCEL.APP · SCANNED AUG 3

MCP tools for x402 readiness, paid-path probes, launch packs, and trust receipts.

Available components

remote · x402-resource-scanner.vercel.app 72

+9 this week 72 72 Trust /100

Trust breakdown (6 categories)

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score →

Endpoint Security89

The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
Authorisation is enforced on tool calls, but the challenge carries no valid RFC 9728 metadata, so a client cannot discover where to get a token. See how to fix → View diagnostics → Fail
HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
The HSTS (Strict-Transport-Security) header is present. View diagnostics → Pass
DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail

Transport & Reachability100

Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass

Schema Quality & AI Usability56

AI-judged instruction clarity (good).Pass
Context-footprint check failed: tool/resource definitions use about 1048 tokens (~174/item across 6 items; 6 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
Usage-examples check failed: none of the tools include examples. See how to fix → Fail

Stability & Change Management27

Stability observed for 8 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial

Tool Coverage100

100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
100% of tool parameters carry a description.Pass
Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass

Capabilities20

Spec-recency check failed: implements MCP spec 2024-11-05; the latest is 2026-07-28. See how to fix → Fail

Install

Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.

remote · x402-resource-scanner.vercel.app

Claude Codex opencode OpenClaw Hermes Other

# add to Claude Code

claude mcp add --transport http larrylemonbot-boundary-guard-x402 https://x402-resource-scanner.vercel.app/mcp

# ~/.codex/config.toml

[mcp_servers.larrylemonbot-boundary-guard-x402]
url = "https://x402-resource-scanner.vercel.app/mcp"

// opencode.json

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "larrylemonbot-boundary-guard-x402": {
      "type": "remote",
      "url": "https://x402-resource-scanner.vercel.app/mcp",
      "enabled": true
    }
  }
}

# add to OpenClaw

openclaw mcp add larrylemonbot-boundary-guard-x402 --url https://x402-resource-scanner.vercel.app/mcp --transport streamable-http

# ~/.hermes/config.yaml

mcp_servers:
  larrylemonbot-boundary-guard-x402:
    url: "https://x402-resource-scanner.vercel.app/mcp"

// mcp.json

{
  "mcpServers": {
    "larrylemonbot-boundary-guard-x402": {
      "type": "http",
      "url": "https://x402-resource-scanner.vercel.app/mcp"
    }
  }
}

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

3 Aug 26 +1

No change was recorded against any check on this day. Stability & Change Management went from 23 to 27. That category is still filling its 30-day observation window: 7 days of observed history at the previous scan, 8 at this one. The score rises as the window fills, whether or not the server changes.
1 Aug 26 +1

No change was recorded against any check on this day. Stability & Change Management went from 17 to 20. That category is still filling its 30-day observation window: 5 days of observed history at the previous scan, 6 at this one. The score rises as the window fills, whether or not the server changes.
31 Jul 26 +5
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
30 Jul 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
29 Jul 26 +1

No change was recorded against any check on this day. Stability & Change Management went from 7 to 10. That category is still filling its 30-day observation window: 2 days of observed history at the previous scan, 3 at this one. The score rises as the window fills, whether or not the server changes.
28 Jul 26 +1

No change was recorded against any check on this day. Stability & Change Management went from 3 to 7. That category is still filling its 30-day observation window: 1 days of observed history at the previous scan, 2 at this one. The score rises as the window fills, whether or not the server changes.
27 Jul 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
26 Jul 26 63

First indexed and scored.

Show 7 earlier entries Hide earlier entries

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 3 Aug 2026 · Probed https://x402-resource-scanner.vercel.app/mcp

TLS valid

Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .

Subject	Issuer	Valid from	Valid until	Key	Signature	Serial
CN=*.vercel.app	CN=WR1,O=Google Trust Services,C=US	28 Jun 2026	26 Sept 2026	RSA 2048	SHA256-RSA	b1c2b607df94f28513779ae26fecf92f
SANs: *.vercel.app
CN=WR1,O=Google Trust Services,C=US (CA)	CN=GTS Root R1,O=Google Trust Services LLC,C=US	13 Dec 2023	20 Feb 2029	RSA 2048	SHA256-RSA	7fd9e2c2d2048a0474b627a26d0868a7
CN=GTS Root R1,O=Google Trust Services LLC,C=US (CA)	CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE	19 Jun 2020	28 Jan 2028	RSA 4096	SHA256-RSA	77bd0d6cdb36f91aea210fc4f058d30d

DNSSEC insecure

Validation of x402-resource-scanner.vercel.app. — Not signed

Zone	DS	Keys	Algorithms	Outcome
.	trust_anchor	20326, 38696	8, 8	Verified
app.	present	23684	8	Verified
vercel.app.	absent			Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation

Authentication Challenged, unverified

The endpoint asked for a token, but we could not retrieve and validate the RFC 9728 metadata that tells a client how to obtain one.

Result	Challenged, unverified
Enforced	On tool calls
HTTP status	200

WWW-Authenticate challenge Bearer realm="GateCheck by LarryBuildsAI"

Bearer realm="GateCheck by LarryBuildsAI"

Header	Value
strict-transport-security	max-age=63072000; includeSubDomains; preload

Protected resource metadata

Retrieved	No
Problem	no_resource_metadata

Transports 2 probes

Transport	URL	Outcome	Status	Location
streamable-http	https://x402-resource-scanner.vercel.app/mcp	Verified	200
http (plaintext)	http://x402-resource-scanner.vercel.app/mcp	HTTPS enforced	308	https://x402-resource-scanner.vercel.app/mcp

MCP tools — 6 exposed · ~1,048 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.

Tool Tokens

boundary_guard_check Boundary Guard Check ~120

Create a deterministic, read-only pre-action receipt from request, policy, and optional result evidence. Use before an agent posts, spends, lists, or writes so the decision can be audited; no external action is executed.

Input Output Examples

Name	Type	Req	Description
nextStep	string	—	Optional guidance stored in the receipt.
policy	object	—	Decision object, e.g. allow/retry/review/block and reason.
request	object	yes	Action metadata the agent is about to perform.
result	object	—	Optional result or dry-run summary to hash into evidence.

Name	Type	Req	Description
claimBoundary	string	yes	—
createdAt	string	yes	—
decision	string	yes	—
evidenceHash	string	yes	—
marketplacePositioning	object	—	—
nextStep	string	—	—
receiptId	string	yes	—

No examples provided.

check_agent_tool_readiness GateCheck Readiness ~239

GateCheck readiness: check whether an x402/agent-facing tool is ready for agent routing, marketplace listing, and paid-path monitoring, including public agent discovery surfaces (/llms.txt, /agents.txt, /.well-known/mcp.json, /mcp). Pass target plus optional tier, marketplace_url, expected_resources, and paid_path; deep/report tiers add unpaid 402 probing when paid_path is supplied. Tiers: quick $1, deep $5, report $10.

Input Output Examples

Name	Type	Req	Description
expected	object	—	Optional expected x402 network/asset/price metadata for paid_path probes.
expected_resources	integer	—	Optional expected resource count.
marketplace_url	string	—	Optional marketplace/listing URL to compare against public metadata.
method	string	—	Safe unpaid probe method when paid_path is supplied. Defaults to GET.
paid_path	string	—	Optional specific paid endpoint to probe without payment for deep/report tiers.
target	string	yes	Target API/provider base URL to scan.
tier	string	—	Readiness depth. quick=$1, deep=$5, report=$10. Defaults to quick.

Name	Type	Req	Description
checks	object	yes	—
healthProbe	object\|null	—	—
issues	array	yes	—
priceUsd	string	yes	—
product	string	yes	—
ready	boolean	yes	—
recommendedFixes	array	yes	—
report	object	—	—
scan	object	—	—
score	integer	yes	—
target	string	yes	—
tier	string	yes	—

No examples provided.

generate_trust_receipt Generate Trust Receipt ~187

Generate a deterministic trust receipt from sanitized request/policy/result/payment summaries. Do not submit raw auth headers, cookies, API keys, private keys, payment signatures, payment response headers, customer prompts, customer documents, or payer-identifying evidence.

Input Output Examples

Name	Type	Req	Description
nextStep	string	—	Optional receipt next-step guidance.
payment	object	—	Optional sanitized payment summary or caller-provided hashes only; do not include raw payment signatures, raw payment response headers, private keys, API keys, cookies, payer-identifying evidence, or…
policy	object	—	Sanitized policy or decision summary to hash.
request	object	yes	Sanitized request/action summary to hash; omit raw prompts, documents, credentials, cookies, auth headers, signatures, and secrets.
result	object	—	Sanitized outcome/result summary to hash; omit customer data and secret-like values.

Name	Type	Req	Description
claimBoundary	string	yes	—
createdAt	string	yes	—
decision	string	yes	—
evidenceHash	string	yes	—
marketplacePositioning	object	—	—
nextStep	string	—	—
receiptId	string	yes	—

No examples provided.

generate_x402_launch_pack x402 Launch Pack Generator ~275

Generate marketplace-safe launch assets for an x402/MCP seller: listing copy, buyer FAQ, checklist, approval packet, and claim boundaries. Pass target plus optional product_name, audience, primary_use_case, marketplace_url, and paid_path; service/premium tiers include readiness evidence. Tiers: single $9, service $29, premium $49.

Input Output Examples

Name	Type	Req	Description
audience	string	—	Primary buyer/audience for listing copy.
desired_marketplaces	array	—	Optional marketplace names to include in launch planning.
expected	object	—	Optional expected x402 network/asset/price metadata for paid_path probes.
expected_resources	integer	—	Optional expected resource count.
marketplace_url	string	—	Optional marketplace/listing URL to compare against public metadata.
method	string	—	Safe unpaid probe method when paid_path is supplied. Defaults to GET.
paid_path	string	—	Optional paid endpoint to validate via unpaid 402 challenge for service/premium packs.
primary_use_case	string	—	Primary buyer outcome/use case.
product_name	string	—	Buyer-facing product title.
target	string	yes	Target API/provider base URL to package for launch.
tier	string	—	Launch pack depth. single=$9, service=$29, premium=$49. Defaults to single.

Name	Type	Req	Description
approvalRequiredBeforeDistribution	boolean	yes	—
claimBoundary	string	—	—
launchPack	object	yes	—
priceUsd	string	yes	—
product	string	yes	—
productName	string	yes	—
readiness	object	—	—
readinessScore	integer	yes	—
readyForDistribution	boolean	—	—
report	object	—	—
target	string	yes	—
tier	string	yes	—

No examples provided.

probe_x402_paid_path x402 Paid-Path Health Probe ~121

Probe a public x402 paid endpoint without signing or paying, then parse the HTTP 402 challenge. Pass target plus optional expected network/asset/price to verify payment metadata and receive a deterministic health receipt.

Input Output Examples

Name	Type	Req	Description
expected	object	—	Optional expected x402 metadata such as network, asset, and priceUsd.
method	string	—	Safe unpaid probe method. Defaults to GET.
mode	string	—	Probe mode for v1. Defaults to unpaid_402.
target	string	yes	Specific paid endpoint URL to probe without payment.

Name	Type	Req	Description
checks	object	yes	—
healthy	boolean	yes	—
issues	array	yes	—
observed	object	yes	—
receipt	object	yes	—
recommendedFixes	array	yes	—
target	string	yes	—

No examples provided.

scan_x402_resource x402 Resource Scan ~106

Read-only scan of a public API/provider URL for x402, OpenAPI, pricing, and agent-discovery metadata. Pass url, and optionally marketplace_url plus expected_resources, to get a readiness score, issues, and fixes; no private endpoints are called.

Input Output Examples

Name	Type	Req	Description
expected_resources	integer	—	Optional expected resource count.
marketplace_url	string	—	Optional marketplace/listing URL to compare against public metadata.
url	string	yes	Target API/provider base URL to scan.

Name	Type	Req	Description
issues	array	yes	—
marketplacePositioning	object	—	—
nextSteps	array	yes	—
prices	array	—	—
score	integer	yes	—
target	string	yes	—

No examples provided.

On this page

Handy links

Scoring key

80+ high trust
60–79 medium
below 60 low

How we score

Score history · last 30 days

26 Jul 3 Aug

Day	Score
26 Jul	63
27 Jul	63
28 Jul	64
29 Jul	65
30 Jul	65
31 Jul	70
1 Aug	71
2 Aug	71
3 Aug	72