Atlas / MCP servers / mapizarro1 / mapizarro1-foragex402

mapizarro1-foragex402CAUTION

mcp/mapizarro1/foragex402

Meta-search MCP for x402 agent-payable services -- find paid APIs across every registry.

Verdict
CAUTION
Grade
B
Trust score
81 /100
Exposed tools
2 2r · 0w · 0d
Transport
streamable-http
License
—
Stars
0
01

Overview

Meta-search MCP for x402 agent-payable services -- find paid APIs across every registry.

Read from source at commit 258466333b8eOBSERVED · 2026-10-12
Advertisement
02

Exposed tools (2)

2 read · 0 write · 0 destructive.

ToolRiskDescription
report_missing_servicereadReport a paid service or capability you needed but could not
search_servicesreadFind and compare paid API services that AI agents can purchase
03

Trust audit

CAUTIONgrade B · trust 81/100 Install with care. The audit found things worth knowing before you trust its output.

LayerWhat it checksResult
L0Provenance & inventoryPASS
L1Static analysis of the codeWARN
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfaceWARN
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
none-observed
Network
UNDECLARED (3 observation(s))
Shell
none-observed
Dependencies
pinned
Secrets in source
none-found

Findings (6)

MEDIUMNetwork egress · net.client · CWE-200, CWE-319
sources.py:3
TIMEOUT = httpx.Timeout(10.0)
MEDIUMNetwork egress · net.client · CWE-200, CWE-319
sources.py:31
async with httpx.AsyncClient(timeout=TIMEOUT) as client:
MEDIUMNetwork egress · net.client · CWE-200, CWE-319
sources.py:43
async with httpx.AsyncClient(timeout=TIMEOUT) as client:
MEDIUMAuth / authz · mcp.remote_no_auth · CWE-287, CWE-862
streamable-http
Why it matters. a network transport with no auth environment variable found
Fix. require a token
LOWInventory / provenance · inv.no_license · CWE-1104
Why it matters. no LICENSE file and no repo licence
Fix. add a licence
INFOPrompt injection · scope.undeclared_network · CWE-94, CWE-1427
<declared scope>
network use found in code, not declared in the description
Why it matters. the description does not admit a capability the code has
Fix. declare network use in the description, or remove it

Gates applied: no_behavioural_pass, no_license.

Audited 2026-10-12 · audit v0.4.1 · source sha 258466333b8efull audit observations/trust-audit/mcp-server/mapizarro1__foragex402.json · Report an issue / request a re-scan
04

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-10-12258466333b8eCAUTIONB81first audit
05

Questions

What is the mapizarro1-foragex402 MCP server?

Meta-search MCP for x402 agent-payable services -- find paid APIs across every registry.

What tools does mapizarro1-foragex402 expose?

2 in total: 2 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.

Is mapizarro1-foragex402 safe to connect to an agent?

With care. The audit graded it B (81/100) and found 6 things worth knowing before you trust this server, listed below with the exact line each was found on.

What credentials does mapizarro1-foragex402 need?

No credential environment variables were found in its source, so it appears to need none.

How does mapizarro1-foragex402 run?

It speaks streamable-http, so it runs as a service you connect to over the network.

How current is this page?

The grade is for one exact copy of the source (258466333b8e), read on 2026-10-12. The repository is watched and re-audited when it changes.

Advertisement