io.github.mk-career-planning/x402-safety-kit

Est-ce que io.github.mk-career-planning/x402-safety-kit est sûr ?

Au dernier audit MCP Hub, le serveur MCP « io.github.mk-career-planning/x402-safety-kit » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 4 outils

• catalog≈ 799 tokens

  List the tools of this server with prices, data sources, licensing, daily limits and data freshness.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "catalog", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"legal": {}, "terms": "texte", "tools": [], "paused": {}, "server": {}, "payment": {}, "provenance": [], "daily_limits": {}, "fetch_status_values": {}}}

• get_receipt≈ 676 tokens

  Re-fetch the stored result of a settled paid call by its receipt_id, for when the response was lost after payment. Free. Unknown or unsettled receipt ids return RECEIPT_NOT_FOUND. Results are kept for 90 days after settlement.

  Paramètres, retour & exemple (1)

  Paramètres

  • receipt_id · string · requis
    The receipt_id returned with a paid result ("rcpt_" + 64 hex characters).

  Exemple d'appel

  {"name": "get_receipt", "arguments": {"receipt_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"tool": "texte", "terms": "texte", "result": "texte", "payment": {}, "provenance": [], "receipt_id": "texte", "settled_at": "texte"}}

• x402_known_assets≈ 489 tokens

  Free. The limited reference list this server compares token addresses with: known assets (network, contract, symbol, decimals) with sources and check dates, known CAIP-2 networks, scheme names from the x402 specs, and payment flows. A table match is not proof that an asset or a merchant is genuine.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "x402_known_assets", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"terms": "texte", "assets": [], "schemes": [], "networks": {}, "provenance": {}, "payment_flows": {}, "registry_version": "texte"}}

• x402_parse_payment_request≈ 1181 tokens

  Free. Decode one x402 v2 payment request (base64 PAYMENT-REQUIRED header, PaymentRequired JSON or MCP tool result) and list every accepts option with exact atomic and decimal amounts. Token addresses are compared with a limited reference list. status: parsed, ambiguous (options differ in recipient, network or amount; none is chosen), malformed or unsupported. Does not verify the merchant, authorize a transfer, assess fraud risk, or guarantee any payment. URLs in the input are never fetched.

  Paramètres, retour & exemple (2)

  Paramètres

  • raw · ? · requis
    The payment request. A string: the base64 PAYMENT-REQUIRED header value (a leading 'PAYMENT-REQUIRED:' is allowed) or JSON text. An object: the PaymentRequired JSON, or for transport mcp the tool result (structuredContent, _meta x402/error or content[0].text).
  • transport · string · optionnel · http | mcp
    Where the request came from: http (402 response) or mcp (paid tool result). Default http.

  Exemple d'appel

  {"name": "x402_parse_payment_request", "arguments": {"raw": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"mode": "paid", "note": "texte", "terms": "texte", "errors": [], "parsed": "texte", "status": "parsed", "evidence": [], "warnings": [], "mismatches": [], "provenance": {}, "comparisons": [], "unsupported": []}}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://x402-safety-kit-production.mk-career-planning.workers.dev/mcp