Back to MCP Trust Indexm8ven
74
/ 100
1 day ago
glama

agent402-mcp

Open-source MCP server exposing the Agent402.Tools catalog: 500+ deterministic pay-per-call tools for AI agents, including browser rendering, web search, PDFs, OCR, LLM inference, code execution, live financial/crypto/macro data, SEC EDGAR, and wallet-keyed memory. Free via proof-of-work, or pay per call in USDC across ten chains via the x402 protocol. No API keys, no signups

→ MikeyPetrillo/Agent402· listed on glama
Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
✅
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 26 credentials: AGENT402_OPERATOR_TOKEN, AGENT_KEY, ALCHEMY_API_KEY, BRAVE_ANSWERS_API_KEY, BRAVE_API_KEY, BRAVE_SUGGEST_API_KEY, BURNER_KEY, CDP_API_KEY_SECRET, COINGECKO_API_KEY, E2B_API_KEY, FRED_API_KEY, GH_TOKEN, GITHUB_TOKEN, INDEXNOW_KEY, NEYNAR_API_KEY, OPENAI_API_KEY, OPENROUTER_API_KEY, OP_TOKEN, POSTHOG_API_KEY, POW_SECRET, SOLANA_AGENT_KEY, SOLANA_BURNER_KEY, STELLAR_BURNER_SECRET, WARPCAST_API_KEY, X402_UPSTREAM_BUYER_KEY, YAHOO_RELAY_TOKEN
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configAGENT402_BUDGET
configAGENT402_MAX_PER_CALL
configAGENT402_NETWORKS
🔐 secretAGENT402_OPERATOR_TOKEN
configAGENT402_TOOLS
configAGENT402_URL
🔐 secretAGENT_KEY
🔐 secretALCHEMY_API_KEY
configALCHEMY_LIVE_TEST
configALGORAND_ALGOD_URL
configALGORAND_BURNER_MNEMONIC
configALGORAND_REVENUE_WALLET
configALGORAND_UPSTREAM_BUYER_MNEMONIC
configBACKFILL_WORKFLOW
configBASE_RPCS
configBASE_RPC_URL
configBASE_URL
configBATCH_COUNT
configBATCH_INDEX
🔐 secretBRAVE_ANSWERS_API_KEY
🔐 secretBRAVE_API_KEY
configBRAVE_LIVE_TEST
🔐 secretBRAVE_SUGGEST_API_KEY
🔐 secretBURNER_KEY
configCANARY_CHAIN_LOW_WATER_USD
configCANARY_DELAY_MS
configCANARY_DRY
configCANARY_LIMIT
configCANARY_LOW_WATER_USD
configCANARY_MAX_USD
configCANARY_SLUGS
configCANARY_TOOL_MAX_USD
configCDP_API_KEY_ID
🔐 secretCDP_API_KEY_SECRET
configCDP_FAUCET_LIVE_TEST
configCHAIN
🔐 secretCOINGECKO_API_KEY
configCONTRACT_LIVE_TEST
configDEX_LIVE_TEST
configDRY_RUN
🔐 secretE2B_API_KEY
configE2B_LIVE_TEST
configENRICH_LIVE_TEST
configEXPECT_NAME
configEXT_DELAY_MS
configEXT_DRY
configEXT_MAX_USD
configEXT_PER_BUY_USD
🔐 secretFRED_API_KEY
configFRED_API_KEY_V2
configFUND_WAIT_MINUTES
🔐 secretGH_TOKEN
configGITHUB_REPOSITORY
🔐 secretGITHUB_TOKEN
🔐 secretINDEXNOW_KEY
configKEY_FILE
configLEADERBOARD_SNAPSHOT_FILE
configMATRIX_DRY_RUN
configMATRIX_TOP_N
configMAX_CALLS
configMAX_CALL_USD
configMAX_PRICE_USD
configMAX_SPEND_USD
configMAX_TXS
configMAX_WAIT_SECS
configMODE
🔐 secretNEYNAR_API_KEY
🔐 secretOPENAI_API_KEY
🔐 secretOPENROUTER_API_KEY
configOPENROUTER_LOW_CREDITS_USD
🔐 secretOP_TOKEN
configOUR_SOLANA_WALLETS
configOUR_WALLETS
configPAYAI_FACILITATOR_URL
configPAY_NETWORK
configPOLL_SECS
🔐 secretPOSTHOG_API_KEY
configPOSTHOG_TEST_CAPTURE
🔐 secretPOW_SECRET— on a -signed token (not a spoofable User-Agent), so the operator
configQUIET_GATE
configQUIET_SECS
configREVENUE_WALLET
configROBINHOOD_FACILITATOR_URL— ) via standard x402 clients:
configROBINHOOD_RPC_URL
configSALES_LEDGER_DB
configSCAN_NETWORK
configSIG_LIMIT
configSLUGS
configSMOKE_BODY
configSMOKE_EXPECT
configSMOKE_METHOD
configSMOKE_QUERY
configSMOKE_ROUTE
configSMOKE_TARGET
🔐 secretSOLANA_AGENT_KEY
🔐 secretSOLANA_BURNER_KEY
configSOLANA_REVENUE_WALLET
configSOLANA_RPCS
configSOR_MIN_SETTLED_TX
configSPAN_BLOCKS
🔐 secretSTELLAR_BURNER_SECRET
configSTELLAR_REVENUE_WALLET
configSTELLAR_RPC_URL
configSWEEP_DELAY_MS
configSWEEP_DRY
configSWEEP_FLOAT_USD
configSWEEP_LIMIT
configSWEEP_MAX_USD
configSWEEP_TOOL_MAX_USD
configTARGET_URL
configTX
🔐 secretWARPCAST_API_KEY
configX402_SYNC_ON_START
🔐 secretX402_UPSTREAM_BUYER_KEY
🔐 secretYAHOO_RELAY_TOKEN
configYAHOO_RELAY_URL
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 0 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/mikeypetrillo-agent402-yam29p)](https://m8ven.ai/mcp/mikeypetrillo-agent402-yam29p)
commit: 682c016dc415e38afe53677f27fb4d97ee60fc80
code hash: 02fded7c8f731ade523e97ab281820cd7bda0a88b52dc4da6949b95404ca8f6d
verified: 7/30/2026, 8:38:25 AM
view raw JSON →