cipher-x402-mcp

Implements a forward-only relay pattern where MCP clients invoke paid tools without pre-funding. When an agent calls a gated tool lacking an X-PAYMENT header, the server returns the upstream HTTP 402 response with an accept-list (payment terms, amount, recipient address) verbatim. The agent's wallet signs the payment in USDC on Base, includes the signature in X-PAYMENT header, and retries. The server never custodies funds — it validates signatures and forwards authenticated requests upstream. This enables pay-per-call microtransactions (0.005–0.25 USDC) without wallet pre-setup or escrow.

Provides a free, rule-based security audit for Solana wallets by analyzing on-chain activity patterns and account state. The audit applies a hardcoded ruleset (included in the MCP server) to detect common vulnerabilities: token account misconfigurations, suspicious delegation patterns, exposure to known malicious programs, and balance anomalies. Results are returned as structured findings with severity levels. This is the only free tool in the suite; others are gated behind x402 payments.

Scans a Solana wallet's transaction history, token balances, and account state by querying the Solana RPC API. Returns structured data including recent transactions, token holdings, SOL balance, and account metadata. The tool abstracts RPC complexity behind a simple wallet address input, handling pagination and data aggregation internally. Results are cached implicitly by the RPC provider but not by the MCP server itself.

Checks if an email address or password has appeared in known data breaches by querying the Have I Been Pwned (HIBP) API. The MCP server acts as a relay, forwarding requests to HIBP and returning breach records with metadata (breach name, date, compromised data types). Requests are gated behind x402 payments to monetize access to the HIBP service.

Calculates optimal Jito tips for Solana transactions based on current network congestion and MEV conditions. The tool queries Jito's tip API to fetch current tip percentiles and returns a recommendation (in lamports or USDC) for a given transaction size. This enables agents to optimize transaction inclusion probability without overpaying for tips.

Analyzes a GitHub repository and returns a health score based on metrics: commit frequency, issue resolution time, test coverage, documentation completeness, and dependency freshness. The tool queries the GitHub API to fetch repository metadata, recent commits, issues, and workflows, then applies a weighted scoring algorithm. Results include the overall health score (0-100) and component breakdowns.

Fetches economic time-series data from the Federal Reserve Economic Data (FRED) API, including GDP, inflation, unemployment, and interest rates. The tool accepts a FRED series ID and returns historical data points with dates and values. Results can be aggregated (mean, median, latest) or returned as full time-series for agent-side analysis.

Queries the Drift Protocol (a Solana perpetual futures platform) to retrieve a wallet's open positions, collateral, and leverage exposure. The tool fetches position data from Drift's on-chain state and returns structured position information including entry price, current price, PnL, and liquidation risk. This enables agents to monitor trading positions and assess liquidation risk in real-time.

The cipher-x402-mcp server itself is deployable as a standalone MCP server that integrates with any MCP client (Claude Desktop, Cursor, Cline, Continue). The server implements the MCP protocol specification, exposing tools as callable functions with standardized input/output schemas. The payment relay logic is built into the server: it intercepts tool calls, checks for X-PAYMENT headers, returns HTTP 402 responses with payment terms when needed, and validates signatures on retry. The server is stateless and can be deployed as a Docker container, Node.js process, or serverless function.