Loading…
Crypto intelligence API gateway with x402 micropayments for real-time market data and financial analytics.
Review before connecting
The findings on this server are worth reviewing before you connect an agent to it.
Scanned 1 month ago Due for re-check
A server can change after it's graded. Re-run the automated scan to refresh this report.
This grade is deterministic and reproducible: the same server surface always yields the same grade under a given algorithm version. It is a real automated assessment computed by the MCPGrade engine from what the probe actually observed — not a fabricated or opinion score. It is not a manual human pentest, so it can miss context-specific risks.
Every signal below was measured directly by the automated probe. The grade is derived only from evidence like this — nothing is assumed.
The x402-alpha MCP server exposes 19 tools, focused primarily on general-purpose capabilities. Its published description reads: "Crypto intelligence API gateway with x402 micropayments for real-time market data and financial analytics". It communicates over Streamable HTTP using the 2025-06-18 protocol revision, and does not require authorization to connect. MCPGrade currently rates x402-alpha C- — the findings are worth reviewing before you connect an agent to it. Its most notable findings include "Data-exfiltration parameters" and "Data-exfiltration parameters". This report is a deterministic, reproducible automated assessment: the same observed surface always yields the same grade under a given algorithm version, and it is refreshed as new scans arrive and free to read — but it is not a substitute for a manual human security review. Always re-check x402-alpha's advertised tools, transport security, and authorization posture before connecting an autonomous agent or sharing sensitive context with it.
Add x402-alpha to an MCP client using the endpoint below. Review the grade and findings above before granting an autonomous agent access.
MCP endpoint
https://x402.911fund.io/mcpStreamable HTTP transport. This is the MCP endpoint, not a website — paste it into your MCP client server list rather than a browser.
Captured passively during the read-only scan. Click any value to find servers that match it.
The tools this server advertises via tools/list — names, purposes, and the parameters each accepts, exactly as enumerated read-only.
AI-synthesized token intelligence with price, volume, holders, X/Twitter engagement data, and analysis. $0.03 USDC. Twitter included free. Payment is consumed on execution, including timeouts.
AI-analyzed trending tokens with X/Twitter engagement data and market narratives. $0.03 USDC. Twitter included free. Payment is consumed on execution, including timeouts.
X (up to 99 tweets) + Reddit cross-source sentiment with full engagement metrics (likes, views, retweets, followers, upvotes), AI bull/bear scoring, and an X-vs-Reddit corroboration check. $0.062 USDC
Neural web search + Twitter + AI synthesis (Exa + Grok). $0.03 USDC. Payment is consumed on execution, including timeouts.
Sorted worst-first. Each finding shows its severity, what it means, its OWASP MCP Top-10 mapping, and a recommended fix — the check id links to the exact methodology row that produced it.
tool: alpha_subscribe
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
parameter "webhook"RecommendationRemove side-channel parameters; constrain tool inputs.
tool: alpha_risk
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
alpha_risk Token safety assessment — audit status, rug pull signRecommendationRemove side-channel parameters; constrain tool inputs.
The server accepts tool enumeration (and likely invocation) with no authentication.
RecommendationRequire OAuth 2.1 authorization for any server exposing non-public tools.
tool: alpha_subscribe
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "alpha_subscribe"RecommendationScope tools to the minimum needed.
Validates ZUGFeRD, Factur-X, and XRechnung e-invoices against EN 16931 with correction suggestions.
Tracks US tariff and trade-action changes from Federal Register documents and exposes them through an API for AI agents.
Instant rug-check for any EVM or Solana token, distilled to one clear 0-10 risk verdict.
Provides access to Bible translations, books, chapters, verses, and search functionality.
Remote-first MCP adapter for emitting Settlement Attestation Receipts; not a verifier.
Risk-ranked registry of AI tools for enterprise governance, enabling lookup of tool risk and shadow AI domain detection.
Deep multi-source research (Exa + Firecrawl + Claude + up to 99 tweets). $0.10 USDC. May take up to 60s. Payment is consumed on execution, including timeouts.
Prediction market intelligence (Polymarket + Kalshi + Twitter + Grok). $0.03 USDC. Payment is consumed on execution, including timeouts.
Macro economic pulse (FRED + prediction markets + Twitter + Grok). $0.05 USDC. Payment is consumed on execution, including timeouts.
AI-filtered crypto news from CoinTelegraph, Decrypt, CoinDesk, Blockworks + X/Twitter with AI synthesis. $0.02 USDC. Payment is consumed on execution, including timeouts.
One-call token brief bundling market data, X/Twitter sentiment, on-chain transfers, and risk research with a unified AI synthesis. $0.20 USDC. Payment is consumed on execution, including timeouts.
Memecoin vertical — top meme tokens by volume with momentum, or a per-token degen risk read (liquidity, rug flags, social velocity). $0.05 USDC. Payment is consumed on execution, including timeouts.
Perpetual futures funding rates across Hyperliquid and Gate with crowded-trade extremes and squeeze-risk synthesis. $0.05 USDC. Payment is consumed on execution, including timeouts.
Create a notify-on-condition webhook subscription: 5 prepaid HMAC-signed deliveries when a price/funding condition triggers. $0.05 USDC ($0.01 per delivery, prepaid). Payment is consumed on execution.
Get gateway stats (uptime, memory, rate limits). Free — no payment required.
On-chain activity intelligence — whale movements, large transfers, DEX volume anomalies, smart money tracking. $0.05 USDC. Payment is consumed on execution, including timeouts.
Side-by-side token comparison across price action, volume, sentiment, and fundamentals. $0.05 USDC. Payment is consumed on execution, including timeouts.
Detect and track active market narratives — AI tokens, RWA, L2, memecoins, DePIN. $0.05 USDC. Payment is consumed on execution, including timeouts.
Upcoming crypto events — token unlocks, protocol upgrades, governance votes, launches. $0.03 USDC. Payment is consumed on execution, including timeouts.
Token safety assessment — audit status, rug pull signals, liquidity depth, holder concentration, honeypot detection, plus X and Reddit scam-report corroboration. $0.062 USDC. Payment is consumed on ex
Wallet portfolio analysis — token holdings, diversification score, risk exposure, AI rebalancing suggestions. $0.05 USDC. Payment is consumed on execution, including timeouts.