X402 Data Gateway MCP Server

by epistemedeus Your server? Claim it

answering

X402 Data Gateway is answering right now. Last checked 3 min ago. It exposes 24 tools. Last commit 12 Sep 2026.

Paid x402 and MPP tools for agent discovery, payment safety, data, and DeFi.

Uptime history 47 days of history · worst day 99%

47 days agonow

100.0%

Uptime 24h

184 of 184 checks

Tools

read from the server

317 ms

Response time

average over 24h

Stars

last commit 12 Sep 2026

What changed 330

Every tool that appeared, vanished or quietly changed what it asks for. Recorded since 8 August 2026. No other catalogue keeps this.

12 Sep a tool changed version6 times that day

12 Sep a tool appeared lockfile_pin_delta

12 Sep a tool description was rewritten lockfile_pin_delta

10 Sep 2 tools changed the parameters they ask for extract, read

10 Sep a tool changed version2 times that day

8 Sep a tool changed version4 times that day

8 Sep a tool appeared extract_batch

7 Sep a tool changed version6 times that day

1 Sep a tool changed version6 times that day

30 Aug a tool changed version20 times that day

and 319 more, back to 8 August 2026

What the code does

We read the source, 22 h ago · tools taken from the live server · rules 3dff92dd89df

Capabilities

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

Builds a file path from a variable receipt-referral-recheck.mjs:242

    return path.join(claimsDir, referralId);

Runs an external command merchant-path-indexing-continuity-capture.mjs:151, page-change-http.mjs:524, lockfile-pin-delta.mjs:430

  const child = spawn(process.execPath, ["server.js"], {

Long encoded blob in source service-deployment-statement.json:4

  "payload": "eyJjYW5vbmljYWxPcmlnaW4iOiJodHRwczovL2FnZW50cy5zYW1lZGF5ZGVzay5jb20iLCJkZXBsb3ltZW50cyI6W3sib3JpZ2luIjoiaHR0cHM6Ly9hZ2VudHMuc2FtZWRheWRlc2suY29tIiwicm91dGVzIjpbeyJtZXRob2QiOiJHRVQiLCJwYXRoIjoiL2NoYWluL3NvbGFuYS10cmFuc2FjdGlvbi1yZWNlaXB0In0seyJtZXRob2QiOiJHRVQiLCJwYX…

Sends data to a third-party sink idempotency-replay.mjs:385, paid-action-effect-profile.mjs:39

    requestBinding: Object.freeze([

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

This code can reach further than it looks

We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 3 min ago.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add x402-data-gateway --transport http https://x402-url-extractor-production.up.railway.app/mcp

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "x402-data-gateway": {
      "url": "https://x402-url-extractor-production.up.railway.app/mcp"
    }
  }
}

~/.codex/config.toml

[mcp_servers.x402-data-gateway]
url = "https://x402-url-extractor-production.up.railway.app/mcp"

.cursor/mcp.json

{
  "mcpServers": {
    "x402-data-gateway": {
      "url": "https://x402-url-extractor-production.up.railway.app/mcp"
    }
  }
}

.vscode/mcp.json

{
  "mcpServers": {
    "x402-data-gateway": {
      "url": "https://x402-url-extractor-production.up.railway.app/mcp"
    }
  }
}

This server publishes 1 more address. The block above uses the one we reach during checks; the full list is under Endpoints below, and the author may intend a particular one for your client.

Available tools 24

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

morpho

morpho_market_underwrite

Underwrite one Base Morpho market with independent GraphQL, REST, and direct-RPC evidence for configuration integrity, liquidity, utilization, concentration, borrower health bands, recent history, bad debt, and PreLiquidation availability. Use `morpho_position` or `morpho_protection` for one borrower's current position or protection plan, and `morpho_preliquidation_replay` for the economics of one completed historical event. Read-only evidence with explicit disagreements; no opaque risk score or transaction action.

morpho_position

Inspect one Base borrower across Morpho markets and return position balances, LTV, health factor, liquidation headroom, direct-RPC verification, and caller-selected collateral-price stress scenarios. Use `morpho_protection` when you need exact repay or add-collateral amounts and unsigned transaction templates, `morpho_market_underwrite` for market-wide risk, or `morpho_preliquidation_replay` for one completed historical event. Read-only; no wallet, signing, broadcast, or custody.

morpho_preliquidation_replay

Reconstruct one successful Base Morpho PreLiquidation transaction from its receipt and the exact block state, returning repaid and seized assets, protocol-oracle valuation, gross incentive, configured health window, and transaction gas before off-chain costs. Use `morpho_market_underwrite` for current market risk, `morpho_position` for a current borrower, or `morpho_protection` for a future protection plan. Historical read-only evidence; no transaction simulation, wallet, signing, or broadcast.

morpho_protection

Calculate two alternative protection plans for one Base Morpho borrower under a selected collateral-price shock and target health factor: partial repayment or added collateral. Each plan includes the bounded asset amount, expected stressed health factor, evidence basis, and unsigned ERC-20 approval plus Morpho call templates. Use `morpho_position` for diagnosis without an action plan, `morpho_market_underwrite` for market-wide risk, or `morpho_preliquidation_replay` for a completed historical event. Read-only; no wallet, signing, broadcast, or custody.

agent

agent_discoverability_audit

Measure one service's brand-blind rank, source-family coverage, expected-route presence, canonical-vs-alias listing identity, duplicate records, competitors, and exact-price drift across ten public machine-service discovery views. Supply `runtimeUrl` with an exact GET route to derive the comparison price from one coherent live unsigned x402 or MPP offer; otherwise `expectedPriceUsd` remains caller-supplied. Set `surfaceAudit` to check the target's public Agent Card, ERC-8004 registration document, and action catalog. Set `materializationAudit` with an exact GET or POST route to distinguish Coinbase seller ineligibility from provider acceptance without exact-resource Bazaar materialization. Catalog queries use no credentials or payments. Results are point-in-time provider and catalog evidence, not demand, seller trust, settlement, or future-rank proof.

agent_surface_budget_audit

Measure one public service's credential-free MCP tools/list, OpenAPI, or both declared discovery surfaces before any tool call or target payment. Use `agent_discoverability_audit` for catalog reach and rank, `seller_integrity_audit` for one exact operation's response contract, or this tool for byte budgets, heaviest definitions, missing selection contracts, and progressive-discovery fixes. Unselected surfaces are not fetched or judged. It follows no redirect, calls no target tool, sends no credential or target payment, and returns no target schema, response body, or session identifier.

extract

extract

Fetch a public HTTP(S) page and return compact extraction signals for programmatic inspection: title, meta description, Open Graph/Twitter metadata, JSON-LD, headings, links, text excerpt, and AI-readiness flags. Use `read` instead when you need the page body as LLM-ready Markdown rather than metadata or a link inventory. Does not execute JavaScript; follows redirects and applies SSRF, timeout, and response-size guards.

extract_batch

Fetch one to five public HTTPS URLs and return bounded structured fields for each source in one paid attempt. Supply `urls` as a JSON array and optional unique `fields`. Use `extract` for a single URL when you do not need batch accounting. Charge is one flat introductory 0.01 USDC quote for the bounded attempt, not a guarantee that every URL succeeds. Automatic retries are disabled; unknown outcomes must not be re-paid automatically. Payment challenge and credentials are bound to https://agents.samedaydesk.com/extract/batch, not mcp://. Retry the identical authorized arguments and credential.

wallet

wallet_enrich

Inspect a public Base or EVM address and return an agent-ready on-chain profile: EOA or contract type, native and curated token holdings, token/NFT metadata, proxy evidence, activity, and a derived profile label. Use `enrich` for a company domain; the two tools accept different identifiers and return different evidence. Read-only public chain data; no wallet action or custody.

wallet_policy_conformance

Evaluate safe standardized allow, deny, and error observations from an agent wallet or delegated signer. Use this after running a bounded provider policy test matrix to distinguish explicit provider-policy enforcement from validation or generic provider failures and to test exact execution shape separately from operation allowlisting. Accepts no credentials, wallet IDs, signatures, transactions, or raw provider responses; it evaluates caller-supplied observations and does not run the provider tests itself.

contract

contract_qualified_search

Search Agent402 and the official MPP catalog for paid machine services that both match a capability intent and guarantee buyer-required JSON response paths. Use `agent_discoverability_audit` when you are measuring one known seller's catalog reach or rank, `seller_integrity_audit` when you already know the exact seller route to inspect, or `payment_offer_preflight` when you already have one exact callable GET URL. This search excludes SameDayDesk-owned supply and unresolved routes before audit, uses no credential or wallet, sends no seller POST or target payment, reads no paid response body, and returns only a query digest.

deep

deep_audit

Run one read-only AI-search-readiness audit for a public business domain: company, technology, contact, and DNS/email evidence from `enrich`, plus the live structured-data gap analysis and paste-ready JSON-LD template from `schemaforge`. Use `enrich` for company facts only or `schemaforge` for structured-data remediation only. The template contains placeholders for real data; the score is diagnostic, no site changes are made, and it does not guarantee AI citations.

enrich

enrich

Inspect a public company domain and return structured identity, technology, social, contact, DNS, email-infrastructure, and AI-readiness evidence. Use `schemaforge` instead for a paste-ready JSON-LD template and remediation diff, or `deep_audit` when both outputs are required together. Public data only; this tool makes no site changes.

lockfile

lockfile_pin_delta

Inspect two caller-supplied npm package-lock.json objects and return added, removed, and changed name+version+integrity+resolved pins. Supply JSON `before` and `after` lockfile objects, not filesystem paths, URLs, or commands. An identical pin set is informational, not a failure. HTML, package.json, and unsupported lockfileVersion values are refused before payment. This is not an npm install, audit, or purchase. Ordinary wallets sign through examples/customer-x402 (inspect, explicit approve, attempt-receipt, read-only reconcile), not a precomputed signature. Initial live release accepts x402 only. Payment challenge and credentials are bound to https://agents.samedaydesk.com/lockfile-pin-delta, not mcp://. Retry the identical authorized arguments and credential.

opportunity

opportunity_preflight

Agent work opportunity -> deterministic attempt, verify-first, or abandon preflight using caller-supplied cost and selection assumptions plus dated platform evidence. Returns break-even probability, expected surplus, hard gates, and source-linked evidence. No claim, bid, payment, or submission.

payment

payment_offer_preflight

Compare x402 and MPP payment challenges, terms, and seller-declared JSON success-response readiness for one exact public HTTPS GET route before buyer authorization, including URL and realm binding, expiry, cross-protocol economic parity, and exact-route OpenAPI evidence. Use `agent_discoverability_audit` instead when you need to know whether catalogs rank or expose a service. This tool uses no target credential, signature, or target payment, follows no redirect, never reads the paid target body, and reads only the same-origin public OpenAPI document under a strict size cap. A seller declaration is advisory and does not establish runtime validity, seller trust, utility, or settlement reliability.

read

read

Fetch a public HTTP(S) page and return its readable body as cleaned Markdown for LLM context, preserving headings, links, and lists while dropping navigation, ads, scripts, headers, footers, asides, and forms. Use `extract` instead when you need metadata, JSON-LD, Open Graph/Twitter tags, or a link inventory. Markdown is capped at 40,000 characters and no JavaScript is executed.

scan

scan

Static supply-chain security scan of a public GitHub repo before an agent installs/runs it. Flags exfil sinks, obfuscation, credential reads, install-time curl|bash. risk=clean|suspicious|dangerous.

schemaforge

schemaforge

Analyze a public business site and return a deterministic, paste-ready JSON-LD template plus the live structured-data gap diff and ranked fixes. Use `deep_audit` instead when the same call must also return company, technology, contact, and DNS/email evidence. Generated markup contains placeholders that must be replaced with real business values; this tool makes no site changes and does not guarantee AI citations.

seller

seller_integrity_audit

Use this after a buyer integration fails, a seller changes a paid route, or before the next paid retry or release. Audit one exact paid GET or POST seller route against buyer-required JSON success paths. GET verifies constructible non-secret input, exact request binding, live x402 and MPP economics, and optional Bazaar eligibility; POST performs static-safe OpenAPI contract analysis and sends no target request. Use `payment_offer_preflight` instead when you already have one exact callable GET URL and only need its current unpaid offer before buyer authorization, or `agent_discoverability_audit` for catalog rank and identity. Uses no target credential, signature, or target payment and retains no seller schema, body, or query values.

settlement

settlement_proof

Verify one claimed canonical Base USDC settlement after execution by matching a successful transaction receipt to the exact recipient, atomic amount, and optional payer. Use `payment_offer_preflight` before authorization when you need to inspect an unpaid x402 or MPP offer instead. This tool reads only public Base receipt and log data; it reads no merchant ledger and performs no wallet, signing, broadcast, custody, or execution action.

solana

solana_transaction_receipt

Inspect one finalized Solana mainnet transaction signature and return normalized success or failure status, slot, block time, fee, SPL-token owner deltas, and canonical USDC deltas. Supply recipient, amount, and optional payer when an exact settlement claim must be verified; use `transaction_receipt` for Base or Ethereum. Raw instructions and logs are excluded, and this tool performs no wallet, signing, broadcast, custody, or execution action.

stateful

stateful_wallet_policy_conformance

Evaluate safe standardized observations from wallet policies that track prior or concurrent requests. Use `wallet_policy_conformance` instead for one-request action shape, method, chain, token, recipient, amount, and function controls. This tool separately tests sequential cumulative limits, signed-but-unbroadcast accounting, ABI extraction, concurrent oversubscription, counter-reference failure, and application serialization. It accepts no credentials, counter values, wallet or resource IDs, signatures, transactions, or raw provider responses and does not run the provider tests itself.

transaction

transaction_receipt

Inspect one Base or Ethereum transaction hash and return normalized success or revert status, block time, gas and fee fields, decoded ERC-20 Transfer events, and canonical USDC transfers. Use `settlement_proof` instead when you must verify an exact canonical Base USDC recipient, amount, and optional payer claim. Raw logs are excluded; this tool performs no wallet, signing, broadcast, custody, or execution action.

Endpoints

URL	Transport	State	Latency	Checked
https://x402-url-extractor-production.up.railway.app/mcp	streamable-http	answering	285 ms	3 min ago
https://agents.samedaydesk.com/mcp	streamable-http	answering	360 ms	3 min ago

Alternatives to X402 Data Gateway

same job, measured the same way

AgentBodega MCP

by agentbodegastore

Discover AgentBodega paid data tools, contracts, and x402/L402 HTTP payment handoff metadata.

73 installs/wk local only

HumanMirror x402 Microtools + OmniDome Commons

by humanmirror

x402 agent microtools for safety, verified results, payments and OmniDome Commons discovery.

3 tools answering

Market Data

by timzinin-api

33 pay-per-call market and news data tools over MCP with free discovery and x402 payments.

36 tools answering

Secant Agent Research Pack

by jnilrac

Paid MCP web research for agents: search, extraction, citations, and x402 payment discovery.

5 tools answering

X402 Solana

by digitalweb33333-creator

x402 paid API tools for AI agents on Solana: crypto safety, market data, KYB/AML verification.

10 tools answering

Pay MCP

by pay-skill

USDC payments for AI agents on Base — direct, tabs, x402 paywalls, discovery

62 installs/wk local only

Lead Intelligence

by timzinin-api

Pay-per-call lead intelligence tools with free MCP discovery and x402 payments.

8 tools answering

SAP MCP Server

by oobeprotocol-sap-mcp

Solana-native MCP gateway for SAP, DeFi tools, SNS identity, and x402 payments.

351 installs/wk 406 tools answering

X402 Data Gateway — questions

Answers built from our own checks of this server.

What can X402 Data Gateway do?

It exposes 24 tools, read directly from the server on our last check. Among them: agent_discoverability_audit, agent_surface_budget_audit, contract_qualified_search, deep_audit, enrich, extract and 18 more. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →

What is X402 Data Gateway mostly used for?

Its tools cluster around morpho, agent and extract. That is what this server is built to work with — the grouping comes from the actual tool names, not from a category we assigned.

Is X402 Data Gateway working right now?

We send a real MCP handshake every 15 minutes. Over the last 24 hours 184 of 184 checks got a reply (100.0%), average response time 317 ms. The bar chart above shows every period we have measured.

How do I connect X402 Data Gateway?

Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.

Does X402 Data Gateway need an API key?

No. X402 Data Gateway completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 24 of them are readable on this page. This is what we observed, not what the docs claim.

How fast is X402 Data Gateway?

It answers our handshake in 317 ms on average, which is faster than 48% of all working MCP servers we measure. The comparison comes from our own checks across the whole registry, every 15 minutes.

Is X402 Data Gateway open source?

Yes — it is published under the MIT licence, written in JavaScript, 1 stars on GitHub and 1 open issue. The source link is on this page, so you can read exactly what it does with your data before you connect it.