USDC micropayments on Base + Solana via x402. BYO wallets. Cloudflare Workers. No Coinbase.
Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.
Read out of the source npm actually ships, at scan time. The package was never executed. Tools registered dynamically at runtime, or hidden inside bundled or minified code, can be missed — so this is a floor on the tool surface, not a complete census of it.
explain_x402_starterExplain how this x402 Cloudflare Worker accepts USDC on Base and Solana, which SKUs are paid, and how it parallels live Stripe Payment Links. Use this first when an agent needs architecture context. Do not use it to list SKU prices (list_agent_skus) or supported chains (get_supported_networks). Rea…Explain how this x402 Cloudflare Worker accepts USDC on Base and Solana, which SKUs are paid, and how it parallels live Stripe Payment Links. Use this first when an agent needs architecture context. Do not use it to list SKU prices (list_agent_skus) or supported chains (get_supported_networks). Rea…
No input schema was published for this tool.
list_agent_skusReturn the hybrid x402 + Stripe first-dollar SKU catalog (id, paid path, USD price, Stripe Payment Link). Use when an agent needs to choose a product to pay for. Not a network list (get_supported_networks) and not deploy docs (get_deployment_instructions). Read-only local catalog; does not create a…Return the hybrid x402 + Stripe first-dollar SKU catalog (id, paid path, USD price, Stripe Payment Link). Use when an agent needs to choose a product to pay for. Not a network list (get_supported_networks) and not deploy docs (get_deployment_instructions). Read-only local catalog; does not create a…
No input schema was published for this tool.
get_supported_networksReturn the blockchain networks this Worker accepts for x402 exact-scheme USDC payments (Base Mainnet eip155:8453 and Solana Mainnet), plus the default PayAI facilitator. Use before generating a paid route. Does not broadcast transactions. Read-only; no wallet secrets are returned.Return the blockchain networks this Worker accepts for x402 exact-scheme USDC payments (Base Mainnet eip155:8453 and Solana Mainnet), plus the default PayAI facilitator. Use before generating a paid route. Does not broadcast transactions. Read-only; no wallet secrets are returned.
No input schema was published for this tool.
generate_paid_endpointGenerate a TypeScript snippet that adds a new x402-gated GET route to this Worker (middleware accept block + hono handler). Use when extending the catalog. This does not deploy or mutate wrangler.toml. Not a substitute for get_deployment_instructions. Output is code only — review before commit.Generate a TypeScript snippet that adds a new x402-gated GET route to this Worker (middleware accept block + hono handler). Use when extending the catalog. This does not deploy or mutate wrangler.toml. Not a substitute for get_deployment_instructions. Output is code only — review before commit.
No input schema was published for this tool.
get_deployment_instructionsReturn step-by-step wrangler deploy instructions for this starter: clone, set BASE_ADDRESS and SOLANA_ADDRESS secrets, deploy, then test free /v1/catalog versus paid SKUs. Use when the user is shipping the Worker. Does not run wrangler and does not write secrets. Read-only docs.Return step-by-step wrangler deploy instructions for this starter: clone, set BASE_ADDRESS and SOLANA_ADDRESS secrets, deploy, then test free /v1/catalog versus paid SKUs. Use when the user is shipping the Worker. Does not run wrangler and does not write secrets. Read-only docs.
No input schema was published for this tool.
5 of 5 tools published a description.
Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.
USDC micropayments on Base + Solana via x402. BYO wallets. Cloudflare Workers. No Coinbase.
Linked names open Forge’s index of every entry observed exposing that tool. Browse all indexed tools.
This entry publishes no npm package, so Forge has no dependency tree for it. That is a gap in coverage — not a statement that it has no dependencies.