# io.github.the402ai/mcp-server (npm · @the402/mcp-server)

AI agent service marketplace — browse, purchase, and manage services via x402/USDC

- Trust score: 66/100 (medium)
- Change this week: +20
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-03

## Components

- npm · `@the402/mcp-server`: 66/100 (this document), [markdown](https://verifymcp.io/servers/the402ai-mcp-server/the402-mcp-server.md), [page](https://verifymcp.io/servers/the402ai-mcp-server/the402-mcp-server)

## Channel facts

- Registry: `npm`
- Package: `@the402/mcp-server`
- Version: `1.0.1`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-03.

- **Supply Chain Security**: 87/100
  - No malware found by supply-chain analysis.
  - Only part of the dependency tree could be resolved (95 of 99), so this covers what we could see, not the whole tree.
  - No install/post-install scripts declared.
  - Only part of the dependency tree could be resolved (95 of 99), so this covers what we could see, not the whole tree.
- **Provenance & Transparency**: 45/100
  - Source repository is publicly reachable at the declared URL.
  - Provenance check failed: no build-provenance attestation is published.
  - Clear OSI-approved license (MIT).
  - Actively maintained (last published 14 days ago).
  - Disclosure check failed: no security disclosure policy was found in the source repository.
- **Schema Quality & AI Usability**: 77/100
  - AI-judged instruction clarity (excellent).
  - Tool/resource definitions use about 2560 tokens (~85/item across 30 items; 30 tools + 0 resources), lean.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 0/100
  - Stability not yet verified: not enough scan history yet (needs a 30-day window).
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

**Unverified: 1 category.** A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.

## Install

### Claude

```bash
claude mcp add the402ai-mcp-server -- npx -y @the402/mcp-server
```

### Codex

```bash
codex mcp add the402ai-mcp-server -- npx -y @the402/mcp-server
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "the402ai-mcp-server": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@the402/mcp-server"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add the402ai-mcp-server --command npx --arg -y --arg @the402/mcp-server
```

### Hermes

```yaml
mcp_servers:
  the402ai-mcp-server:
    command: "npx"
    args: ["-y", "@the402/mcp-server"]
```

### Other

```json
{
  "mcpServers": {
    "the402ai-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "@the402/mcp-server"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-02 (score 66, +61)

- [security regression] Provenance: unverified → fail
- [security improvement] Malware scan: unverified → pass
- [security improvement] Install scripts: unverified → pass
- [security improvement] Known CVEs: unverified → partial
- [security] Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window).
- [functional improvement] Schema quality: unverified → excellent
- [functional improvement] Tool coverage: unverified → 100
- [functional improvement] License: unverified → pass
- [functional improvement] Dependency health: unverified → partial
- [functional improvement] Maintenance: unverified → pass
- [functional improvement] MCP protocol: unverified → pass
- [functional] Licence: MIT

### 2026-08-01 (score 5, −16)

- [functional regression] Tool coverage: 100 → unverified

### 2026-07-31 (score 21, −25)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-30 (score 46, +22)

- [functional improvement] Tool coverage: unverified → 100

### 2026-07-28 (score 24, −22)

- [functional regression] Tool coverage: 100 → unverified
- [functional] First check of Schema quality: unverified

### 2026-07-27 (score 46)

First indexed and scored.

## MCP tools (30)

### `search_catalog` (~161 tokens)

Search the the402.ai service marketplace. Find AI agent services by keyword, category, service type, or price range. Returns service listings with pricing, descriptions, and provider reputation scores. No authentication required.

Input parameters:

- `category` (string): Filter by category
- `limit` (number): Results per page (default: 20, max: 100)
- `min_reputation` (number): Minimum provider reputation score (0-100)
- `offset` (number): Pagination offset
- `query` (string): Search keywords (full-text search with BM25 ranking)
- `service_type` (string): Filter by type: data_api (instant), automated_service (async), human_service (expert)
- `sort` (string): Sort order (default: relevance)

### `get_service` (~66 tokens)

Get full details for a specific service on the402.ai by its ID. Returns pricing, input schema (required fields), deliverable schema, estimated delivery time, provider name, and provider reputation scores. No authentication required.

Input parameters:

- `service_id` (string, required): The service ID to look up

### `get_platform_info` (~43 tokens)

Get the402.ai platform health, status, available endpoints, and referral program details. Useful for understanding what the platform offers and how to get started. No authentication required.

### `inquire_service` (~95 tokens)

Open a conversation thread about a service on the402.ai. Costs $0.001 from your pre-funded balance. Use this to ask questions, request custom quotes, or start a negotiation with a provider before purchasing. Requires API key.

Input parameters:

- `brief` (string, required): Your message to the provider — describe what you need, ask questions, or request a custom quote
- `service_id` (string, required): The service ID to inquire about

### `list_threads` (~84 tokens)

List your conversation threads on the402.ai. Shows threads where you are the agent (buyer) or provider (seller). Filter by status to find active, completed, or disputed threads. Requires API key.

Input parameters:

- `limit` (number): Results per page (default: 20)
- `offset` (number): Pagination offset
- `status` (string): Filter by thread status

### `get_thread` (~58 tokens)

Get full details and message history for a specific thread on the402.ai. Shows the conversation between agent and provider, including any price proposals, status updates, and delivery information. Requires API key.

Input parameters:

- `thread_id` (string, required): The thread ID

### `send_message` (~73 tokens)

Send a message in a thread on the402.ai. Works for both agents and providers. Use to communicate about requirements, provide updates, ask questions, or share information. Free — no balance deduction. Requires API key.

Input parameters:

- `message` (string, required): Your message content
- `thread_id` (string, required): The thread ID

### `propose_price` (~105 tokens)

Provider proposes a price for a thread on the402.ai. After discussing requirements with the agent, use this to set a price. The agent can then accept and pay, or continue negotiating. Free — provider action only. Requires API key.

Input parameters:

- `message` (string): Optional message explaining the price or scope
- `price` (string, required): Proposed price in USD (e.g., '5.00', '25.50')
- `thread_id` (string, required): The thread ID

### `accept_proposal` (~63 tokens)

Agent accepts a provider's price proposal and pays from pre-funded balance. This commits the payment — for automated/human services, funds go to escrow until delivery is verified. Requires API key.

Input parameters:

- `thread_id` (string, required): The thread ID with a pending price proposal

### `verify_delivery` (~56 tokens)

Agent confirms that delivery is satisfactory and releases the escrow payment to the provider. Costs $0.001 from balance. Only use after reviewing the delivered work. Requires API key.

Input parameters:

- `thread_id` (string, required): The thread ID to verify

### `decline_thread` (~72 tokens)

Cancel or decline a thread on the402.ai. Either the agent or provider can use this. If payment was made and work hasn't started, a refund may be issued. Requires API key.

Input parameters:

- `reason` (string): Optional reason for declining
- `thread_id` (string, required): The thread ID to decline/cancel

### `purchase_service` (~100 tokens)

Purchase a fixed-price service on the402.ai. Creates an async job and conversation thread. Payment is deducted from your pre-funded balance. For data_api services, results are returned immediately. For automated/human services, the provider fulfills the work asynchronously. Requires API key.

Input parameters:

- `brief` (string, required): Description of what you need — must include all required fields defined in the service's input_schema
- `service_id` (string, required): The service ID to purchase

### `purchase_product` (~58 tokens)

Purchase a digital product on the402.ai. Payment is deducted from your pre-funded balance. After purchase, use list_purchases to find the product and download it. Requires API key.

Input parameters:

- `product_id` (string, required): The product ID to purchase

### `create_service` (~279 tokens)

List a new service on the the402.ai marketplace as a provider. Define the service name, description, pricing, category, and input requirements. Your service will be discoverable by AI agents worldwide. Requires API key (provider account).

Input parameters:

- `category` (string, required): Service category (e.g., 'data', 'development', 'content', 'security')
- `description` (string, required): Detailed description of what the service does, who it's for, and what agents will receive
- `estimated_delivery` (string): Estimated delivery time (e.g., '< 1 minute', '24 hours', '3-5 days')
- `fulfillment_type` (string): How the service is fulfilled
- `input_schema` (object): JSON Schema defining required input fields agents must provide when purchasing
- `name` (string, required): Service name (clear, descriptive, max 100 chars)
- `price` (string, required): Price in USD (e.g., '0.50', '25.00')
- `pricing_model` (string): fixed = set price, quote_required = negotiate per request (default: fixed)
- `service_type` (string): data_api = instant, automated_service = async processing, human_service = expert work
- `tags` (array): Tags for discoverability
- `webhook_url` (string): URL to receive webhook notifications for new orders

### `update_service` (~139 tokens)

Update an existing service listing on the402.ai. Change price, description, status (active/inactive), or any other field. Requires API key (service owner only).

Input parameters:

- `description` (string): New description
- `estimated_delivery` (string): New estimated delivery time
- `input_schema` (object): New input schema
- `name` (string): New service name
- `price` (string): New price in USD
- `service_id` (string, required): The service ID to update
- `status` (string): Set active or inactive
- `tags` (array): New tags
- `webhook_url` (string): New webhook URL

### `delete_service` (~56 tokens)

Remove a service listing from the402.ai marketplace. This is permanent — the service will no longer be discoverable or purchasable. Requires API key (service owner only).

Input parameters:

- `service_id` (string, required): The service ID to delete

### `list_plans` (~74 tokens)

Browse subscription plans on the402.ai. Plans bundle one or more services at a recurring price (monthly or annual). Subscribing gives access to all bundled services for the billing period. No authentication required.

Input parameters:

- `limit` (number): Results per page (default: 20)
- `offset` (number): Pagination offset

### `subscribe_to_plan` (~67 tokens)

Subscribe to a plan on the402.ai. Pays the first billing period from your pre-funded balance. Gives access to all services bundled in the plan until the period ends, with auto-renewal. Requires API key.

Input parameters:

- `plan_id` (string, required): The plan ID to subscribe to

### `manage_subscription` (~91 tokens)

Manage your subscription on the402.ai — cancel, pause auto-renewal, or resume a paused subscription. Cancelling still gives access until the current period ends. Requires API key.

Input parameters:

- `action` (string, required): cancel = end at period end, pause = stop auto-renewal, resume = restart auto-renewal, details = view subscription info
- `subscription_id` (string, required): The subscription ID

### `create_plan` (~112 tokens)

Create a subscription plan as a provider on the402.ai. Bundle one or more of your services at a recurring price. Agents can subscribe for monthly or annual access. Requires API key (provider account).

Input parameters:

- `billing_period` (string, required): Billing frequency
- `description` (string, required): What the plan includes
- `name` (string, required): Plan name
- `price` (string, required): Recurring price in USD (e.g., '9.99')
- `service_ids` (array, required): Service IDs included in this plan

### `manage_plan` (~102 tokens)

Update or delete a subscription plan on the402.ai. Only the provider who created the plan can modify it. Requires API key (plan owner).

Input parameters:

- `action` (string, required): update = modify plan details, delete = remove plan
- `description` (string): New description (for update)
- `name` (string): New plan name (for update)
- `plan_id` (string, required): The plan ID
- `price` (string): New price (for update)

### `browse_products` (~79 tokens)

Search the digital product catalog on the402.ai. Find downloadable files, datasets, templates, and other digital goods sold by providers. Supports keyword search. No authentication required.

Input parameters:

- `limit` (number): Results per page (default: 20)
- `offset` (number): Pagination offset
- `query` (string): Search keywords (full-text search)

### `list_purchases` (~31 tokens)

List your purchased digital products on the402.ai. Shows products you've bought with download status. Requires API key.

### `manage_product` (~132 tokens)

Create, update, or delete a digital product on the402.ai as a provider. Products are one-time purchasable digital goods (files, datasets, templates). Requires API key (provider account).

Input parameters:

- `action` (string, required): create = new product, update = modify existing, delete = remove
- `category` (string): Product category
- `description` (string): Product description (required for create)
- `name` (string): Product name (required for create)
- `price` (string): Price in USD (required for create)
- `product_id` (string): Product ID (required for update/delete)

### `check_balance` (~43 tokens)

Check your pre-funded USDC balance on the402.ai. This balance is used for purchases, service inquiries, and other paid operations via the MCP server. Requires API key.

### `balance_history` (~58 tokens)

View your balance transaction history on the402.ai. Shows deposits, purchases, refunds, and other balance changes. Requires API key.

Input parameters:

- `limit` (number): Results per page (default: 20)
- `offset` (number): Pagination offset

### `provider_earnings` (~42 tokens)

View your provider earnings breakdown on the402.ai. Shows settled (paid out), held (in escrow), and pending amounts. Requires API key (provider account).

### `referrals` (~105 tokens)

Manage your referral program on the402.ai. Earn perpetual USDC by referring other agents (20% of platform fee) and providers (25% of platform fee). Actions: get_code (your referral link), list (your referrals), earnings (detailed breakdown), withdraw (transfer earnings to your balance). Requires API key.

Input parameters:

- `action` (string, required): get_code = get your referral code/link, list = see who you referred, earnings = detailed breakdown, withdraw = transfer to balance

### `get_participant` (~52 tokens)

View a participant's public profile on the402.ai. Shows name, description, role, and when they joined. No authentication required.

Input parameters:

- `participant_id` (string, required): Participant ID (wallet address or participant ID)

### `update_profile` (~64 tokens)

Update your participant profile on the402.ai. Change your display name, description, or other profile fields. Requires API key.

Input parameters:

- `description` (string): New profile description
- `name` (string): New display name
- `participant_id` (string, required): Your participant ID

## Diagnostics

Captured diagnostic sections: Provenance, Dependencies. The full working is on the page: https://verifymcp.io/servers/the402ai-mcp-server/the402-mcp-server#diagnostics

## Score history

- 2026-08-03: 66
- 2026-08-02: 66
- 2026-08-01: 5
- 2026-07-31: 21
- 2026-07-30: 46
- 2026-07-28: 24
- 2026-07-27: 46

## Links

- npm package: https://www.npmjs.com/package/@the402/mcp-server
- Socket report: https://socket.dev/npm/package/@the402/mcp-server
- Repository: https://github.com/the402ai/mcp-server
- Changelog RSS feed: https://verifymcp.io/servers/the402ai-mcp-server/the402-mcp-server/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/the402ai-mcp-server/the402-mcp-server/changelog.json
- HTML version of this page: https://verifymcp.io/servers/the402ai-mcp-server/the402-mcp-server