x402-facilitatorCAUTION
x402 payment facilitator — verifies and settles EIP-3009 micropayments multichain. v2 facilitator.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
[](https://github.com/nirholas/x402-facilitator/stargazers) [](https://github.com/nirholas/x402-facilitator/commits) [](https://github.com/nirholas/x402-facilitator/pulls) [](https://github.com/nirholas/x402-facilitator/blob/HEAD/AGENTS.md)
Verify and settle x402 v2 micropayments (USDC) on EVM chains. Powers https://three.ws/pay.
Live endpoint: https://facilitator.three.ws
Supported chains
Quick start
git clone https://github.com/nirholas/x402-facilitator cd x402-facilitator cp .env.example .env # Set FACILITATOR_PRIVATE_KEY and fund it with ETH on each chain npm install npm run dev
API
x402Version 2 paylo
bd90919201a6OBSERVED · 2026-10-10Install
Commands as the repository documents them. They are shown, not run.
git clone https://github.com/nirholas/x402-facilitator.git
npm install
git clone https://github.com/nirholas/x402-facilitator
npm install
git clone https://github.com/nirholas/x402-facilitator
npm install
Host compatibility
What the documentation claims. We have not run a compatibility test.
| Host | Status | Notes |
|---|---|---|
| claude-code | mentioned | |
| codex | mentioned | |
| copilot | mentioned | |
| cursor | mentioned |
Trust audit
CAUTIONgrade B · trust 85/100 Install with care. The audit found things worth knowing before you trust its output.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | WARN |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | WARN |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- declared (1 observation(s))
- Shell
- none-observed
- Dependencies
- not all pinned
- Secrets in source
- found
Findings (10)
token: '0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913' as Address,
token: '0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913' as Address,
import type { X402Payment } from '../../src/types/index.js';vi.mock('../../src/config/env.js', () => ({vi.mock('../../src/utils/logger.js', () => ({vi.mock('../../src/utils/metrics.js', () => ({const mod = await import('../../src/core/facilitator.js');@hono/node-server, @hono/zod-validator, hono, lru-cache, viem, zod, @types/node, eslint
- `.env` files are gitignored; never commit credentials, and read configuration from environment variables.
Gates applied: no_behavioural_pass.
bd90919201a6full audit observations/trust-audit/skill/nirholas__x402-facilitator.json · Report an issue / request a re-scanAudit history
Every audit this skill has had.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-10 | bd90919201a6 | CAUTION | B | 85 | first audit |
Questions
What does the x402-facilitator skill do?
x402 payment facilitator — verifies and settles EIP-3009 micropayments multichain. v2 facilitator.
Is x402-facilitator safe to install?
With care. The audit graded it B (85/100) and found 10 things worth knowing before you trust this skill, listed below with the exact line each was found on.
What can x402-facilitator access on my machine?
The audit observed that it reaches the network. Each of those is consistent with what it says it does. Secrets in the source: found — see the findings.
Which assistants does x402-facilitator work with?
Its documentation mentions claude-code, codex, copilot and cursor. That is what the text claims, not a compatibility test we ran.
How current is this page?
The grade is for one exact copy of the source (bd90919201a6), read on 2026-10-10. The repository is watched, and a new audit runs when it changes — this is the first audit.