presidio-hardened-x402-mcp

Item: presidio-hardened-x402-mcp
Rating: 71
Author: M8ven

A pre-payment safety gate for x402 that screens payment metadata for PII, enforces spending policies, and detects replay attacks before signing.

→ presidio-v/presidio-hardened-x402-mcp · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 1 credential: PRESIDIO_X402_MCP_REMOTE_API_KEY

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configPRESIDIO_X402_MCP_LOG_LEVEL— DEBUG / INFO / WARNING / ERROR INFO

configPRESIDIO_X402_MCP_PER_ENDPOINT_JSON— Per-endpoint cap, e.g. '{"api.foo.com": 5.00}' unset

configPRESIDIO_X402_MCP_WINDOW_SECONDS— Rolling window for the daily limit 86400

configPRESIDIO_X402_MCP_AGENT_ID— Label written into audit records unset

configPRESIDIO_X402_MCP_AUDIT_PATH— Append-only JSON-L audit log path; omit to disable unset

configPRESIDIO_X402_MCP_MODE— regex (zero-setup) or nlp (needs [nlp] extra + a spaCy model) regex

configPRESIDIO_X402_MCP_REPLAY_TTL— Fingerprint cache TTL (seconds) 300

configPRESIDIO_X402_MCP_REDIS_URL— Use Redis for replay state instead of in-memory unset

configPRESIDIO_X402_MCP_REMOTE_BASE_URL— Enable HTTP-proxy mode for tool 1 — see Modes unset

🔐 secretPRESIDIO_X402_MCP_REMOTE_API_KEY— API key for the remote screening service unset

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 4 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/presidio-v-presidio-hardened-x402-mcp-1q85iv)](https://m8ven.ai/mcp/presidio-v-presidio-hardened-x402-mcp-1q85iv)

commit: 639397aa27861e535997a38f6a09a8abb307a224

code hash: 7787fd844973a4ad8741ba092d69434f83e839b6030084be38fc184f4e486569

verified: 7/30/2026, 8:47:12 AM

view raw JSON →