402 Coffee

Non-custodial x402 tip jars for the agentic web, enabling USDC tips via a hosted MCP tool for agents.

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 5 credentials: CDP_API_KEY_SECRET, CRON_SECRET, RESEND_API_KEY, SIWE_SECRET, WEBHOOK_SIGNING_SECRET

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configBASE_RPC_URL— Optional: CRON_SECRET, RESEND_API_KEY, .

configBASE_URL

configCDP_API_KEY_ID— / CDP_API_KEY_SECRET (mainnet facilitator), X402_NETWORK=mainnet.

🔐 secretCDP_API_KEY_SECRET— CDP_API_KEY_ID / (mainnet facilitator), X402_NETWORK=mainnet.

🔐 secretCRON_SECRET— Optional: , RESEND_API_KEY, BASE_RPC_URL.

configDATABASE_URL— cp .env.example .env.local # set SIWE_SECRET + (see below)

configNOTIFY_EMAIL_FROM

🔐 secretRESEND_API_KEY— Optional: CRON_SECRET, , BASE_RPC_URL.

🔐 secretSIWE_SECRET— cp .env.example .env.local # set + DATABASE_URL (see below)

configTEST_PK

🔐 secretWEBHOOK_SIGNING_SECRET

configX402_NETWORK— CDP_API_KEY_ID / CDP_API_KEY_SECRET (mainnet facilitator), =mainnet.

configX402_VERSION

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 1 concrete improvement we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/0xsector-402coffee-1g1w8q)](https://m8ven.ai/mcp/0xsector-402coffee-1g1w8q)

commit: 4ae6a85a06fac38d19043686576b673e17ade75b

code hash: 9c2b2dec4db19da5f6aa18b628c95b36e02eab57ab8fd64d927d44dd1e298f12

verified: 7/14/2026, 8:28:57 AM

view raw JSON →