dev.true402/mcp-serverfinance

mcp-server

Flagged

Pay-per-call agent tools over x402 on Base: token/rug safety, DeFi signals, SEO, LLM. No keys.

Our take

Pay-per-call x402 marketplace tools (LLM inference, rug checks, SEO audits) that want a funded Base wallet private key in an env var. The audit found the operator — a five-week-old anonymous account with zero followers — mass-forked eight awesome-* lists in a two-day burst and committed self-insertions ('Add true402 to the Ecosystem') to fake ecosystem presence. Manufactured credibility plus hot-wallet key custody from an unidentifiable operator is exactly the combination we flag; the spend-ceiling safeguards in the code don't offset who holds the other end.

reviewed by hand · 2026-07-05

Something wrong or dead here? Report it

Verification record

last verified: yesterday
github stars: 0
last commit: 3 days ago
archived: no
license: MIT
npm: @true402.dev/mcp-server
downloads / wk: 487
latest version: 1.0.0
in registry since: 2026-06-28

github.com/true402/mcp-server