← Back to search

@402index/mcp-server

GitHub Actions Scanned 22d ago

MCP server for 402 Index — search 15,000+ paid API endpoints across L402, x402, and MPP protocols with real-time health monitoring

npm ↗
C
71.2 / 100

Versions

0.3.0latest
Apr 23, 2026
0.2.5
Mar 24, 2026
0.2.4
Mar 24, 2026
0.2.3
Mar 24, 2026
0.2.2
Mar 24, 2026
+ show 6 moreshow less
0.2.1
Mar 24, 2026
0.2.0
Mar 22, 2026
0.1.3
Mar 20, 2026
0.1.2
Mar 20, 2026
0.1.1
Mar 19, 2026
0.1.0
Mar 19, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 5

invoke
annotations: none low

Acquire a capability by outcome: 402index finds a paid endpoint, quotes a firm USD price,

search_services
annotations: none low

Search and filter paid API services in the 402 Index directory. Returns services with health status, pricing, and protocol info. Includes `related_protocols` array showing other payment rails for the same URL.

q string limit number offset number category string featured boolean verified boolean max_price_usd number
get_service_detail
annotations: none low

Get full details for a single service including health check history, pricing, and schema information. Includes `related_services` array with sibling payment rail details.

id string
list_categories
annotations: none low

List all service categories with counts. Example:

get_directory_stats
annotations: none low

Get overall directory health and stats: total services, breakdown by protocol/health/source, and sync timestamps. Example:

Permissions 4

network medium
Server uses network capabilities via: fetch()
filesystem low
Server uses filesystem capabilities via: fs, fs sync ops
shell high
Server uses shell capabilities via: child_process, execSync(), spawn()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 36

low
Tool 'invoke' has no annotations annotation_checker · 100%
low
Tool 'search_services' has no annotations annotation_checker · 100%
low
Tool 'get_service_detail' has no annotations annotation_checker · 100%
low
Tool 'list_categories' has no annotations annotation_checker · 100%
low
Tool 'get_directory_stats' has no annotations annotation_checker · 100%
medium
OAuth implementation without PKCE auth_checker · 75%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: js-yaml@4.1.0 (GHSA-2883-xcg3-v3hh) dependency_analyzer · 95%
medium
Vulnerable dependency: js-yaml@4.1.0 (GHSA-52cp-r559-cp3m) dependency_analyzer · 95%
medium
Vulnerable dependency: js-yaml@4.1.0 (GHSA-5p4m-2wfm-xmqj) dependency_analyzer · 95%
medium
Vulnerable dependency: js-yaml@4.1.0 (GHSA-h67p-54hq-rp68) dependency_analyzer · 95%
medium
Vulnerable dependency: js-yaml@4.1.0 (GHSA-mh29-5h37-fv8m) dependency_analyzer · 95%
medium
Hex string literal (>50 chars) in ryanthegentry-402index-f6547ba/test/nostr.test.js:40 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in ryanthegentry-402index-f6547ba/test/nostr.test.js:47 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in ryanthegentry-402index-f6547ba/test/l402-format-field.test.js:106 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in ryanthegentry-402index-f6547ba/test/l402-format-relaxation.test.js:95 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in ryanthegentry-402index-f6547ba/test/l402-spec-compliance.test.js:97 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in ryanthegentry-402index-f6547ba/test/l402-spec-compliance.test.js:281 entropy_analyzer · 70%
medium
Buffer.from base64 in ryanthegentry-402index-f6547ba/src/services/x402-utils.js:70 entropy_analyzer · 75%
medium
Buffer.from base64 in ryanthegentry-402index-f6547ba/src/services/l402-utils.js:185 entropy_analyzer · 75%
medium
Buffer.from base64 in ryanthegentry-402index-f6547ba/router/src/challenge-x402.ts:35 entropy_analyzer · 75%
info
package.json metadata manifest_parser · 100%
info
Tool: invoke manifest_parser · 85%
info
Tool: search_services manifest_parser · 70%
info
Tool: get_service_detail manifest_parser · 70%
info
Tool: list_categories manifest_parser · 70%
info
Tool: get_directory_stats manifest_parser · 70%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (61) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 292 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%