Inspect and validate an x402 endpoint before an autonomous agent spends USDC.
Inferred from the transports this listing declares (streamable-http). A client not listed here hasn’t been ruled out — it just isn’t something Forge can confirm.
Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.
Read out of the source npm actually ships, at scan time. The package was never executed. Tools registered dynamically at runtime, or hidden inside bundled or minified code, can be missed — so this is a floor on the tool surface, not a complete census of it.
x402-preflightInspect, audit, and remediate x402 endpoints before an agent spends USDC.Inspect, audit, and remediate x402 endpoints before an agent spends USDC.
No input schema was published for this tool.
inspect_x402_endpointCall before spending on an unfamiliar x402 resource. Free, read-only, and never sends payment credentials.Call before spending on an unfamiliar x402 resource. Free, read-only, and never sends payment credentials.
No input schema was published for this tool.
audit_x402_endpointPurchase a deep, deterministic audit of payment schema, discovery metadata, redirects, CORS, cache, and operational signals. Returns HTTP 402 until the MCP client supplies a valid payment for this call.Purchase a deep, deterministic audit of payment schema, discovery metadata, redirects, CORS, cache, and operational signals. Returns HTTP 402 until the MCP client supplies a valid payment for this call.
No input schema was published for this tool.
order_x402_remediationPurchase a durable remediation intake after a failed audit. Creates an order but never deploys, signs, or spends automatically.Purchase a durable remediation intake after a failed audit. Creates an order but never deploys, signs, or spends automatically.
No input schema was published for this tool.
preflightThe three canonical agent capabilities.The three canonical agent capabilities.
No input schema was published for this tool.
labsBackward-compatible experimental routes not included as primary operations.Backward-compatible experimental routes not included as primary operations.
No input schema was published for this tool.
6 of 6 tools published a description.
Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.
Inspect and validate an x402 endpoint before an autonomous agent spends USDC.
Linked names open Forge’s index of every entry observed exposing that tool. Browse all indexed tools.
This entry publishes no npm package, so Forge has no dependency tree for it. That is a gap in coverage — not a statement that it has no dependencies.