x402 Doctor is answering right now. Last checked 4 min ago. It exposes 11 tools. Last commit 16 Oct 2026.
Is this x402/MPP API safe to pay? $0.001 preflight, fixes, a $0.25 test purchase. Free quick check.
Every tool that appeared, vanished or quietly changed what it asks for. Recorded since 27 September 2026. No other catalogue keeps this.
We read the source, 23 h ago · tools taken from the live server · rules ccca72095570
A value the model can set ends up inside a file or shell call. That is not a flaw by itself — for a terminal server it is the job — but it is where things go wrong when it is not.
const r = Number(await need().eval(TAKE, { keys: [k(hash)], arguments: [String(n)] }));
What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.
subprocess.run(cmd, check=True)
with open(os.path.join(HERE, args.script)) as f:
const r = Number(await need().eval(TAKE, { keys: [k(hash)], arguments: [String(n)] }));
$("who").innerHTML = account.toLowerCase() === AUTHORITY.toLowerCase()
String.raw`\b(read|open|cat|include)\b.{0,30}(~\/|\.ssh|id_rsa|\.env\b|mcp\.json|private key|seed phrase|mnemonic)`,
if (!PROFILES.has(extra.requestBindingProfile)) problems.push(`extra.requestBindingProfile must be "http:1" or "mcp:1" (is ${JSON.stringify(extra.requestBindingProfile)})`);
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
That is not a flaw by itself — but it is where things go wrong when it is not the job. We re-read this code on every release. Watch it and you hear from us the day another one appears.
Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 4 min ago.
claude mcp add x402-doctor --transport http https://x402-doctor.onrender.com/mcp
{
"mcpServers": {
"x402-doctor": {
"url": "https://x402-doctor.onrender.com/mcp"
}
}
}
[mcp_servers.x402-doctor]
url = "https://x402-doctor.onrender.com/mcp"
{
"mcpServers": {
"x402-doctor": {
"url": "https://x402-doctor.onrender.com/mcp"
}
}
}
{
"mcpServers": {
"x402-doctor": {
"url": "https://x402-doctor.onrender.com/mcp"
}
}
}
This server publishes 1 more address. The block above uses the one we reach during checks; the full list is under Endpoints below, and the author may intend a particular one for your client.
Read directly from the server with tools/list, grouped by what they act on.
If a tool disappears, we record the date.
x402_delivery_check
x402_delivery_status
x402_diagnose
x402_fix
x402_preflight
x402_preflight_batch
x402_preflight_deep
x402_quick_check
feedback
check_payment_proof
verify_receipt
| URL | Transport | State | Latency | Checked |
|---|---|---|---|---|
| https://x402-doctor.onrender.com/mcp | streamable-http | answering | 241 ms | 4 min ago |
| https://x402-doctor.fizzl.eu/mcp | streamable-http | answering | 233 ms | 4 min ago |
Check x402 endpoints before your agent pays: payTo, paid test purchases, payee and buyer reports
Base token safety checks (honeypot test, liquidity, new launches), paid per call in USDC via x402.
Tested AI agent skill files (SKILL.md), bought once over x402 for cents on Base. Free MCP search.
GET https://delvorn.site/api/x402/test-asset $0.05 Base. First independent=Certified+$0.05 back.
Tests an AI agent's purchase against the task it was given. Paid per call in USDC via x402.
Before buying a token on Arc, test whether it can be sold back. Free, or 1-5c a call over x402.
Checks current App Store version by bundle ID. x402 payment required (testnet USDC).
Checks if a URL path is allowed by robots.txt. x402 payment required (testnet USDC).
Answers built from our own checks of this server.