Discover and pay x402 endpoints with spend caps and safer automated access.
This MCP tool comes from an official registry, is open source, and has recent updates, with no obvious malicious red flags in the provided material. However, its core function uses blockchain private keys for automatic payments and may connect to discovered x402 endpoints and chain RPCs, so strict spend caps and allowlists are important.
It requires MCP_BRIDGE_EVM_PRIVATE_KEY and MCP_BRIDGE_SVM_PRIVATE_KEY, which can directly authorize on-chain payments. Combined with the stated 'auto-paying bridge' capability, leakage, misconfiguration, or induced use could lead to real fund spending. MAX_PRICE/MAX_TOTAL/ALLOWED_* settings help mitigate this, but the credentials are highly sensitive and carry a clear risk of monetary misuse.
No fixed remote host is listed, but the description indicates it can pay x402 endpoints on the open web and use Bazaar discovery. The presence of RPC_URL_8453, MCP_BRIDGE_BAZAAR_URL, ALLOWED_HOSTS, and ALLOW_HTTP also shows it may connect to discovery services, blockchain RPC, and allowed payment endpoints. This is typical network behavior for this type of tool, but host allowlists and any HTTP enablement should be reviewed carefully.
The system checks indicate that this tool executes code/spawns processes. For an MCP tool, this is a normal capability. The provided material does not show system permissions clearly beyond its stated function, nor any suspicious execution chain, but it should still be run with least privilege and in a constrained host environment.
The presence of X402_MCP_BRIDGE_CHANNELS_DIR suggests it may read/write local channel or state data. Together with private keys and spend settings, related local files may contain sensitive financial or channel information. The material does not indicate broad file-system access beyond its payment function, so this currently looks like limited local state access rather than excessive authorization.
It comes from an official registry, has a public open-source repository, and was updated within the last year, all of which are positive supply-chain signals. However, the missing README, unspecified license, and 0-star community adoption reduce verifiability and maturity confidence. Overall, supply-chain risk does not appear high, but source and dependency review is still advisable before deployment.
Copy the install command and let the AI configure it · recommended for beginners
Please install the "x402 Universal Payer" MCP server from askskill: Run: claude mcp add 'io-github-nirholas-x402-bridge' -- npx -y @three-ws/mcp-bridge
Use x402 Universal Payer to access a weather data API that requires x402 payment, automatically discover the endpoint and complete payment, with a per-request spend cap of $2.
Returns the successfully paid API result, including amount spent, payment status, and endpoint response.
Use x402 Universal Payer to batch-call multiple x402-enabled data services, set a spend cap for each service, and automatically stop payments when the budget is exceeded.
Outputs each service result, amount paid, budget usage, and records of blocked over-budget requests.
Integrate x402 Universal Payer into my MCP agent workflow so the agent can automatically discover, pay for, and log transactions when accessing paid open-web endpoints.
Produces a working integration flow or configuration so the agent can safely call paid endpoints and retain audit logs.
Analyze a tracked wallet’s P&L and trades for a specific token.
Resolve .sol names and reverse-lookup wallets and handles for AI agents.
Generate 3D assets, rig models, and check agent reputation and market intel.
Check Coin Clash standings, enlist in factions, and rally participants.
Track trending agents, coins, holder rankings, and site-wide activity updates.
Manage copy trading follows, sizing rules, risk guards, and owed fees.
Check x402 endpoints for liveness, scams, and receiver safety before payment.
Lets AI agents send USDC micropayments on Solana with verification and tracking.
Enable agents to use auto-paid pay-per-call tools onchain without API keys.
Pay x402 v2 services per call with Kaspa, no account or API key.
Check trust and reliability scores for x402 endpoints.
Connect AI agents to pay-per-call Cloudflare Worker APIs with automatic discovery.