Add x402 Preflight MCP server

servers/x402-preflight.yaml

@@ -0,0 +1,141 @@
+id: x402-preflight
+name: x402 Preflight
+description: >
+  Inspect and validate an unfamiliar x402 endpoint before an agent spends USDC.
+  The free inspection tool observes the challenge, price, network, asset,
+  receiver, discovery metadata, CORS, and operational signals without accepting
+  buyer payment credentials. Paid audit and remediation tools require explicit
+  caller-authorized x402 payment. The published mcp-remote install supports
+  discovery and the free inspection tool only; paid calls require a direct
+  x402-compatible client that can approve, sign, and retry the payment.
+author:
+  name: Chiko
+  github: chico10117
+repository: https://github.com/chico10117/basepay-readiness-service
+transport:
+  - http-streaming
+category: Security
+tags:
+  - x402
+  - preflight
+  - usdc
+  - payments
+  - security
+  - mcp
+  - endpoint-audit
+created_at: "2026-09-01T00:49:03.753557Z"
+updated_at: "2026-09-04T20:13:48Z"
+tools:
+  - name: inspect_x402_endpoint
+    description: >
+      Call before spending on an unfamiliar x402 resource. Free, read-only, and
+      never sends payment credentials.
+    input_schema:
+      type: object
+      additionalProperties: false
+      required:
+        - resource_url
+      properties:
+        resource_url:
+          type: string
+          format: uri
+          pattern: "^https://"
+          maxLength: 2048
+          description: Public HTTPS x402 resource to inspect without payment credentials.
+        method:
+          type: string
+          enum:
+            - GET
+            - HEAD
+            - POST
+          default: GET
+        expected_network:
+          type: string
+          pattern: "^[a-z0-9]+:[A-Za-z0-9._-]+$"
+          maxLength: 100
+        max_price_usd:
+          type: number
+          minimum: 0
+          maximum: 1000000
+  - name: audit_x402_endpoint
+    description: >
+      Purchase a deep, deterministic audit of payment schema, discovery
+      metadata, redirects, CORS, cache, and operational signals. Returns HTTP
+      402 until the MCP client supplies a valid payment for this call.
+    input_schema:
+      type: object
+      additionalProperties: false
+      required:
+        - resource_url
+      properties:
+        resource_url:
+          type: string
+          format: uri
+          pattern: "^https://"
+          maxLength: 2048
+          description: Public HTTPS x402 resource to inspect without payment credentials.
+        method:
+          type: string
+          enum:
+            - GET
+            - HEAD
+            - POST
+          default: GET
+        expected_network:
+          type: string
+          pattern: "^[a-z0-9]+:[A-Za-z0-9._-]+$"
+          maxLength: 100
+        max_price_usd:
+          type: number
+          minimum: 0
+          maximum: 1000000
+  - name: order_x402_remediation
+    description: >
+      Purchase a durable remediation intake after a failed audit. Creates an
+      order but never deploys, signs, or spends automatically.
+    input_schema:
+      type: object
+      additionalProperties: false
+      required:
+        - resource_url
+        - goal
+      properties:
+        resource_url:
+          type: string
+          format: uri
+          pattern: "^https://"
+          maxLength: 500
+        goal:
+          type: string
+          minLength: 1
+          maxLength: 800
+        contact:
+          type: string
+          maxLength: 300
+        constraints:
+          type: string
+          maxLength: 1000
+        callback_url:
+          type: string
+          format: uri
+          pattern: "^https://"
+          maxLength: 2000
+        response_format:
+          type: string
+          enum:
+            - json
+            - markdown
+            - both
+          default: both
+        language:
+          type: string
+          minLength: 2
+          maxLength: 20
+          default: en
+install:
+  command: npx
+  args:
+    - "-y"
+    - mcp-remote
+    - https://x402.chikocorp.com/mcp
+version: "1.0.1"