thebuyside-x402-agent

The MCP gateway that lets any AI agent discover and pay metered APIs on Base or Solana — without the user wiring payments themselves.

→ jaysperspective/thebuyside-x402-agent · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 2 credentials: X402_PAYER_PRIVATE_KEY, X402_PAYER_SOLANA_KEY

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configX402_AGENTIC_URL— api.agentic.market/v1/services/search agentic.market endpoint override

configX402_ALLOWLIST— hosts in seed.json Comma-separated allowed hostnames (replaces default)

configX402_ALLOW_UNVERIFIED— (off) 1 allows any host — dev only

configX402_BAZAAR_URL— api.cdp.coinbase.com/platform/v2/x402/discovery/search CDP Bazaar endpoint override

configX402_CONFIRM_STRICT— (off) 1 refuses payment when the client lacks elicitation OR advertises elicitation but lacks tasks/create (e.g. Claude Code as of 2026-05). Default: log a one-time warning and proceed

configX402_DAILY_LIMIT— 1.00 Max USDC spent per rolling 24h window

configX402_DIRECTORY_URL

configX402_DISABLE_402DIRECTORY

configX402_DISABLE_AGENTIC— (off) 1 skips agentic.market

configX402_DISABLE_BAZAAR— (off) 1 skips CDP Bazaar

configX402_DISABLE_X402WATCH— (off) 1 skips x402watch

configX402_FEDERATION— on off disables all external indexes; discover returns local-only results

configX402_FEDERATION_TIMEOUT_MS— 1500 Per-source timeout. A slow source produces zero entries (and a warning), never blocks discover

configX402_KILL_SWITCH

configX402_MPP_ALLOW_NON_MAINNET

configX402_MPP_DEBUG

🔐 secretX402_PAYER_PRIVATE_KEY— export =0x...

🔐 secretX402_PAYER_SOLANA_KEY— export =<base58 secret key>

configX402_PER_CALL_LIMIT— 0.05 Max USDC per single call

configX402_RECEIPTS_PATH— .local/receipts.jsonl Where the receipts log is written

configX402_REQUIRE_CONFIRM— always always, never, or a USDC threshold (e.g. 0.01). Asks the user to approve via MCP elicitation before signing

configX402_SOLANA_RPC— api.mainnet-beta.solana.com Solana RPC for fetching a recent blockhash at sign time

configX402_TEST_MPP_URL

configX402_TEST_URL— news-ep stories Override target for pnpm pay-newsep and pnpm pay-solana

configX402_X402WATCH_URL— GitHub raw snapshot URL x402watch daily snapshot URL (the {date} placeholder is filled at request time)

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 5 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/jaysperspective-thebuyside-x402-agent-17omqs)](https://m8ven.ai/mcp/jaysperspective-thebuyside-x402-agent-17omqs)

commit: 66748867a0390aa7593e1b23d775965e1381c675

code hash: afe57ec84e4975b1f564cff2650045a86b0ee3d4ac3d29e94c772e7a982405b6

verified: 6/13/2026, 10:28:48 AM

view raw JSON →