MCP server for Munition x402-paid agent services
Inferred from the transports this listing declares (stdio, streamable-http). A client not listed here hasn’t been ruled out — it just isn’t something Forge can confirm.
Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.
Read out of the source npm actually ships, at scan time. The package was never executed. Tools registered dynamically at runtime, or hidden inside bundled or minified code, can be missed — so this is a floor on the tool surface, not a complete census of it.
flight_booking_linksGenerate KAYAK and Kiwi.com flight search links from airports and dates. Free and local: no account, wallet, API key, or network request is required. These links start a new external search; they do not reserve a flight or convert a Duffel offer ID into the same fare. Confirm travelers, cabin, avai…Generate KAYAK and Kiwi.com flight search links from airports and dates. Free and local: no account, wallet, API key, or network request is required. These links start a new external search; they do not reserve a flight or convert a Duffel offer ID into the same fare. Confirm travelers, cabin, avai…
No input schema was published for this tool.
flight_offer_detailsFetch normalized Duffel details for a single flight offer id. Costs 0.01 USDC via x402 from the account wallet.Fetch normalized Duffel details for a single flight offer id. Costs 0.01 USDC via x402 from the account wallet.
No input schema was published for this tool.
uploadprivilegedUpload a local file (≤ 10 MB) with optional stable tags. Returns a public URL retained for 7 days plus upload metadata including tags. Costs 0.005 USDC via x402.Upload a local file (≤ 10 MB) with optional stable tags. Returns a public URL retained for 7 days plus upload metadata including tags. Costs 0.005 USDC via x402.
No input schema was published for this tool.
balanceReturns the account's USDC wallet balance for x402 payments.Returns the account's USDC wallet balance for x402 payments.
No input schema was published for this tool.
topup_linkReturns an deposit URL for funding the account x402 wallet with USDC on Base.Returns an deposit URL for funding the account x402 wallet with USDC on Base.
No input schema was published for this tool.
connect_linkReturn a one-time link (valid 15 minutes) that lets the user use this same Munition account and balance in Claude.ai, ChatGPT or any app connected to the remote MCP server https://api.munition.io/mcp. The user opens it in the browser they will connect from, confirms, then adds or reconnects the con…Return a one-time link (valid 15 minutes) that lets the user use this same Munition account and balance in Claude.ai, ChatGPT or any app connected to the remote MCP server https://api.munition.io/mcp. The user opens it in the browser they will connect from, confirms, then adds or reconnects the con…
No input schema was published for this tool.
setup_linkReturn a deposit link for the existing account, creating an anonymous account only if credentials are absent. Never resets existing credentials.Return a deposit link for the existing account, creating an anonymous account only if credentials are absent. Never resets existing credentials.
No input schema was published for this tool.
renew_uploadprivilegedExtend a file's retention by 7 more days. Costs 0.005 USDC via x402.Extend a file's retention by 7 more days. Costs 0.005 USDC via x402.
No input schema was published for this tool.
delete_uploadprivilegedDelete a previously-uploaded file. Free.Delete a previously-uploaded file. Free.
No input schema was published for this tool.
recent_uploadsList the account's recent uploads (non-deleted), most recent first. Returns id, url, size, mime, hash, originalFilename, tags, uploadedAt, expiresAt, renewalCount, txHash. Free.List the account's recent uploads (non-deleted), most recent first. Returns id, url, size, mime, hash, originalFilename, tags, uploadedAt, expiresAt, renewalCount, txHash. Free.
No input schema was published for this tool.
render_pdfRender self-contained HTML (inline CSS, data: images, no scripts or external resources, up to 1 MiB) into an A4 PDF (up to 20 pages / 10 MiB) and return its public URL. Costs 0.020 USDC per call via x402 from the account wallet. The URL is public and non-guessable, eligible for deletion after 7 day…Render self-contained HTML (inline CSS, data: images, no scripts or external resources, up to 1 MiB) into an A4 PDF (up to 20 pages / 10 MiB) and return its public URL. Costs 0.020 USDC per call via x402 from the account wallet. The URL is public and non-guessable, eligible for deletion after 7 day…
No input schema was published for this tool.
search_flightsSearch live flight offers and return normalized itineraries. Costs 0.05 USDC via x402 from the account wallet.Search live flight offers and return normalized itineraries. Costs 0.05 USDC via x402 from the account wallet.
No input schema was published for this tool.
12 of 12 tools published a description.
Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.
MCP server for Munition x402-paid agent services
Linked names open Forge’s index of every entry observed exposing that tool. Browse all indexed tools.
The crawl stopped at the depth-4 limit. Anything below that level was never resolved.
The crawl stopped at the 60-package limit. The rest of the tree was never resolved.
36 more resolved packages are not drawn here (display cap: 24). Every dependency carrying an advisory is drawn regardless of the cap. Full inventory (CycloneDX SBOM)
55 declared dependencies never landed in the tree. They are missing from Forge's resolution, not from the package.
+43 more not listed. The counts by reason above cover all of them.
Not followed: peerDependencies. This tree covers runtime dependencies only, so anything those pull in was never resolved.