The open marketplace for the agent economy — Buy any of 24,000+ live x402 services with USDC on Base.
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.
Next.js has a Middleware / Proxy bypass in App Router applications via segment-prefetch routes
Next.js has a Middleware / Proxy bypass in App Router applications via segment-prefetch routes - Incomplete Fix Follow-Up
Next.js has a Middleware / Proxy bypass in Pages Router applications using i18n
Next.js has a Middleware / Proxy bypass through dynamic route parameter injection
Next.js Vulnerable to Denial of Service with Server Components
process.env. You'll be asked to provide them before it can run.ADMIN_KEY— No Enables /admin?key=<value>. Leave unset to disable.AMOUNT_CENTSAPI_BASE_URLBUY_BODYDO_SETTLEFACILITATOR_URLFROM_KEYLABS_UPSTREAM_ANSWER_MODELLABS_UPSTREAM_BASE_URLLABS_UPSTREAM_KEYNEXT_PUBLIC_APP_URL— Yes Your app URLNEXT_PUBLIC_CONVEX_URL— Convex writes CONVEX_DEPLOYMENT and into .env.local automatically on first run.OFFER_ID— curl -X POST https://payanagent.com/x402/$ \PAYANAGENT_API_KEY— const seller = new PayanAgent({ apiKey: process.env. })PAYANAGENT_BASE_URLPAYANAGENT_FEE_BPSPAYANAGENT_WALLET_PRIVATE_KEY— Gives any MCP-capable agent (Claude, Cursor, …) the marketplace as native tools. Set (a Base wallet with USDC) and the buy tool completes purchases automatically.PLATFORM_INTERNAL_KEY— Yes Gates receipt writes + business mutations (set in Convex and the app env)PLATFORM_RECEIPT_SECRET— Yes HMAC key for receipt signatures (Convex env)PLATFORM_WALLET_ADDRESS— Yes Platform wallet (escrow custody only)PLATFORM_WALLET_PRIVATE_KEY— Yes Key for escrow releasePUBLIC_CONTACT_EMAILTEST_API_KEYTEST_CLIENT_KEYTOUPSTASH_REDIS_REST_TOKENUPSTASH_REDIS_REST_URLX402_FACILITATOR_URLX402_NETWORK— Yes base-sepolia or base[](https://m8ven.ai/mcp/dernif-payanagent-19kbf9)