From 951561eb1ac51e24c6628316a256402519c5d609 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=C2=A8chico10117=C2=A8?= Date: Mon, 31 Aug 2026 20:04:10 -0600 Subject: [PATCH 1/3] feat(registry): add x402 Preflight server --- servers/x402-preflight.yaml | 139 ++++++++++++++++++++++++++++++++++++ 1 file changed, 139 insertions(+) create mode 100644 servers/x402-preflight.yaml diff --git a/servers/x402-preflight.yaml b/servers/x402-preflight.yaml new file mode 100644 index 0000000..3f1fd02 --- /dev/null +++ b/servers/x402-preflight.yaml @@ -0,0 +1,139 @@ +id: x402-preflight +name: x402 Preflight +description: > + Inspect and validate an unfamiliar x402 endpoint before an agent spends USDC. + The free inspection tool observes the challenge, price, network, asset, + receiver, discovery metadata, CORS, and operational signals without accepting + buyer payment credentials. Paid audit and remediation tools require explicit + caller-authorized x402 payment. +author: + name: Chiko + github: chico10117 +repository: https://github.com/chico10117/basepay-readiness-service +transport: + - http-streaming +category: Security +tags: + - x402 + - preflight + - usdc + - payments + - security + - mcp + - endpoint-audit +created_at: "2026-09-01T00:49:03.753557Z" +updated_at: "2026-09-01T00:49:03.753557Z" +tools: + - name: inspect_x402_endpoint + description: > + Call before spending on an unfamiliar x402 resource. Free, read-only, and + never sends payment credentials. + input_schema: + type: object + additionalProperties: false + required: + - resource_url + properties: + resource_url: + type: string + format: uri + pattern: "^https://" + maxLength: 2048 + description: Public HTTPS x402 resource to inspect without payment credentials. + method: + type: string + enum: + - GET + - HEAD + - POST + default: GET + expected_network: + type: string + pattern: "^[a-z0-9]+:[A-Za-z0-9._-]+$" + maxLength: 100 + max_price_usd: + type: number + minimum: 0 + maximum: 1000000 + - name: audit_x402_endpoint + description: > + Purchase a deep, deterministic audit of payment schema, discovery + metadata, redirects, CORS, cache, and operational signals. Returns HTTP + 402 until the MCP client supplies a valid payment for this call. + input_schema: + type: object + additionalProperties: false + required: + - resource_url + properties: + resource_url: + type: string + format: uri + pattern: "^https://" + maxLength: 2048 + description: Public HTTPS x402 resource to inspect without payment credentials. + method: + type: string + enum: + - GET + - HEAD + - POST + default: GET + expected_network: + type: string + pattern: "^[a-z0-9]+:[A-Za-z0-9._-]+$" + maxLength: 100 + max_price_usd: + type: number + minimum: 0 + maximum: 1000000 + - name: order_x402_remediation + description: > + Purchase a durable remediation intake after a failed audit. Creates an + order but never deploys, signs, or spends automatically. + input_schema: + type: object + additionalProperties: false + required: + - resource_url + - goal + properties: + resource_url: + type: string + format: uri + pattern: "^https://" + maxLength: 500 + goal: + type: string + minLength: 1 + maxLength: 800 + contact: + type: string + maxLength: 300 + constraints: + type: string + maxLength: 1000 + callback_url: + type: string + format: uri + pattern: "^https://" + maxLength: 2000 + response_format: + type: string + enum: + - json + - markdown + - both + default: both + language: + type: string + minLength: 2 + maxLength: 20 + default: en +install: + command: npx + args: + - "-y" + - mcp-remote + - https://x402-wallet-readiness-service.vercel.app/mcp +version: "1.0.0" From 034dfa79b17dca363afc53d35ac7e584fc18b1e9 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=C2=A8chico10117=C2=A8?= Date: Fri, 4 Sep 2026 01:16:53 +0200 Subject: [PATCH 2/3] docs(registry): clarify x402 client requirements --- servers/x402-preflight.yaml | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/servers/x402-preflight.yaml b/servers/x402-preflight.yaml index 3f1fd02..81a06a8 100644 --- a/servers/x402-preflight.yaml +++ b/servers/x402-preflight.yaml @@ -5,7 +5,9 @@ description: > The free inspection tool observes the challenge, price, network, asset, receiver, discovery metadata, CORS, and operational signals without accepting buyer payment credentials. Paid audit and remediation tools require explicit - caller-authorized x402 payment. + caller-authorized x402 payment. The published mcp-remote install supports + discovery and the free inspection tool only; paid calls require a direct + x402-compatible client that can approve, sign, and retry the payment. author: name: Chiko github: chico10117 @@ -22,7 +24,7 @@ tags: - mcp - endpoint-audit created_at: "2026-09-01T00:49:03.753557Z" -updated_at: "2026-09-01T00:49:03.753557Z" +updated_at: "2026-09-03T23:16:07Z" tools: - name: inspect_x402_endpoint description: > From 43c8d519f19df0ee37b733895f4b1f2cb71f638f Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=C2=A8chico10117=C2=A8?= Date: Fri, 4 Sep 2026 22:39:09 +0200 Subject: [PATCH 3/3] docs(registry): use canonical x402 endpoint --- servers/x402-preflight.yaml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/servers/x402-preflight.yaml b/servers/x402-preflight.yaml index 81a06a8..207ed6f 100644 --- a/servers/x402-preflight.yaml +++ b/servers/x402-preflight.yaml @@ -24,7 +24,7 @@ tags: - mcp - endpoint-audit created_at: "2026-09-01T00:49:03.753557Z" -updated_at: "2026-09-03T23:16:07Z" +updated_at: "2026-09-04T20:13:48Z" tools: - name: inspect_x402_endpoint description: > @@ -137,5 +137,5 @@ install: args: - "-y" - mcp-remote - - https://x402-wallet-readiness-service.vercel.app/mcp -version: "1.0.0" + - https://x402.chikocorp.com/mcp +version: "1.0.1"