warppay402-serverCAUTION
Instant x402 V2 monetization SDK for MCP tools, Hono APIs, Cloudflare Gateway, and Base.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
[](https://m8ven.ai/mcp/golfgolfgolf200-x402-monetize-ojdrdz?s=readme)
Instant x402 V2 monetization SDK and self-hosted infrastructure for Model Context Protocol (MCP) AI tools, Hono HTTP APIs, Cloudflare Monetization Gateway, Base, Solana, Arbitrum, and Arc Mainnet.
@warppay402/server allows developers to monetize any MCP tool or HTTP API route in a few lines of code. It automatically generates standard x402 V2 HTTP payment challenges, verifies gasless EIP-712 / native USDC signatures, enforces platform fee splits, protects against prompt injection threats, and prevents signature replay attacks.
Official Site: https://www.warppay402.com
Features
- x402 V2 Compliant: Standardized payment challenge headers (
PAYMENT-REQUIRED,PAYMENT-SIGNATURE,PAYMENT-RESPONSE). - Multi-Chain Native: Multi-chain challenge generation supporting Base Mainnet (
eip155:8453), Arbitrum One (eip155:42161), Solana Mainnet-Beta (solana:5eykt...), and Arc Mainnet (eip155:5042) out of the box. - Native USDC Gas & Off-Chain Signing: Supports gasless
TransferWithAuthorization(Base/Arbitrum), SPL-USDC (Solana), and direct native USDC value transfers (Arc Mainnet). - Automated Platform Fee Split: Configurable fee split in basis points (e.g., 50 BPS = 0.5%) routed directly during facilitator settlement.
- x402-Guard Security: Pre-flight middleware protecting endpoints against prompt injection attacks, payload buffer overruns, and high-velocity traffic spikes.
- MCP Native Decorator: Seamlessly wraps tools written for the Model Context Protocol.
- Replay Protection: Includes built-in
MemoryNonceStoreand distributedRedisNonceStoredrivers to prevent double-spending or signature reuse. - Edge Compatible: Zero Node.js-only API dependencies; runs seamlessly on Cloudflare Workers, Vercel
bb7becba59faOBSERVED · 2026-10-11Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add server --env FACILITATOR_PRIVATE_KEY=${FACILITATOR_PRIVATE_KEY} --env PAYMENT_PRIVATE_KEY=${PAYMENT_PRIVATE_KEY} --env PRIVATE_KEY=${PRIVATE_KEY} -- npx -y @warppay402/[email protected]{
"mcpServers": {
"server": {
"command": "npx",
"args": [
"-y",
"@warppay402/[email protected]"
],
"env": {
"FACILITATOR_PRIVATE_KEY": "${FACILITATOR_PRIVATE_KEY}",
"PAYMENT_PRIVATE_KEY": "${PAYMENT_PRIVATE_KEY}",
"PRIVATE_KEY": "${PRIVATE_KEY}"
}
}
}
}Exposed tools (2)
2 read · 0 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
get_weather | read | Fetch live city weather (Costs $0.01 USDC via x402) |
web_search | read | Perform deep web searches for AI agents |
Trust audit
CAUTIONgrade B · trust 89/100 Install with care. The audit found things worth knowing before you trust its output.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | WARN |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- declared (7 observation(s))
- Shell
- none-observed
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (9)
console.log(`🚀 [Self-Hosted Facilitator] Listening on http://127.0.0.1:${info.port}`);console.log(` Listening on http://127.0.0.1:${info.port}`);.clawhubignore
const decodedString = atob(paymentSignature);
const decoded = JSON.parse(atob(requiredHeader!));
expect(JSON.parse(atob(responseHeader!)).txHash).toBe("0xabc123");const decodedString = atob(paymentSignature);
const challenge = JSON.parse(atob(paymentRequiredHeader));
@hono/node-server, @solana/web3.js, @xpaysh/x402, dotenv, hono, viem, @types/node, tsx
Gates applied: no_behavioural_pass.
bb7becba59fafull audit observations/trust-audit/mcp-server/warppay402__warppay402-server.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-11 | bb7becba59fa | CAUTION | B | 89 | first audit |
Questions
What is the warppay402-server MCP server?
Instant x402 V2 monetization SDK for MCP tools, Hono APIs, Cloudflare Gateway, and Base.
What tools does warppay402-server expose?
2 in total: 2 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is warppay402-server safe to connect to an agent?
With care. The audit graded it B (89/100) and found 9 things worth knowing before you trust this server, listed below with the exact line each was found on.
What credentials does warppay402-server need?
It reads FACILITATOR_PRIVATE_KEY, PAYMENT_PRIVATE_KEY and PRIVATE_KEY from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How current is this page?
The grade is for one exact copy of the source (bb7becba59fa), read on 2026-10-11. The repository is watched and re-audited when it changes.