Name: X402 Data Gateway
Author: epistemedeus

X402 Data Gateway MCP

Paid x402 and MPP tools for agent discovery, payment safety, data, and DeFi.

Tool-list grade A Remote · Streamable HTTP No auth needed 29 tools v1.23.49 MIT

No reviews yet by epistemedeusGitHub The publisher’s own endpoint — this marketplace is not in the path

93/100

tool-list score

tools declared

remote

at its publisher

—

calls last 7d

What it does

Paid x402 and MPP tools for agent discovery, payment safety, data, and DeFi.

Quickstart

# 1 — add it to Claude Code
claude mcp add --scope user --transport http x402-data-gateway-mcp https://agents.samedaydesk.com/mcp

# 2 — ask your agent for something these tools do
#   careers_board, extract, extract_batch and 26 more

X402 Data Gateway costs nothing on mcprush: there is no plan to choose here, no cap to set and nothing mcprush can bill you for.

Publishernot claimed

epistemedeus3 servers

3 categories

All 3 servers

Collected from a public index. Nobody has claimed this account, so nothing here was written by its author — claim it if it is yours.

Tool surface

What the model actually sees. Descriptions are diffed on every release — see version history.

Only tools that write or reach the network

Read one configured public careers board and return title, location or null, posting URL, source, fetchedAt, and explicit coverage. Use careers_board_cold for the acquired free recipe. Partial, missing, duplicate, listed, empty, and changed stay explicit. A source failure is unavailable and is not an empty board. Price is $0.005 USDC. Payment challenge and credentials are bound to GET https://ag

Parameter	Type	Required	Notes
board	string	yes	Named board id or alias. Initial reference ids are acxiom and liveramp.
company	string	no	Optional alias. When board is also set, both must resolve to the same id.

Fetch a public HTTP(S) page and return compact extraction signals for programmatic inspection: title, meta description, Open Graph/Twitter metadata, JSON-LD, headings, links, text excerpt, and AI-readiness flags. Use read instead when you need the page body as LLM-ready Markdown rather than metadata or a link inventory. Does not execute JavaScript; follows redirects and applies SSRF, timeout, an

Parameter	Type	Required	Notes
url	string	yes	Public HTTP(S) URL. Choose extract for metadata, JSON-LD, headings, links, and a bounded text excerpt; use read for longer bounded Markdown. Content is fetched without JavaScript rendering. Check stat
textExcerptLimitChars	integer	no	Optional excerpt budget. Default 1200. Maximum 40000. Rejected before fetch. Does not purchase /read or change the price.

Fetch one to five public HTTPS URLs and return bounded structured fields for each source in one paid attempt. Supply urls as a JSON array and optional unique fields. Use extract for a single URL when you do not need batch accounting. Charge is one flat introductory 0.01 USDC quote for the bounded attempt, not a guarantee that every URL succeeds. Automatic retries are disabled; unknown outcom

Parameter	Type	Required	Notes
urls	array	yes	One to five public HTTPS URLs as a JSON array. Charge is one flat introductory attempt, not per-URL success.
fields	array	no	Optional unique bounded subset of structured extraction fields.
textExcerptLimitChars	integer	no	Optional per-item excerpt budget. Omitted requests keep 1200. A value that cannot fit the batch response ceiling is rejected before fetch. Does not change the price.

Inspect two caller-supplied npm package-lock.json objects and return added, removed, and changed name+version+integrity+resolved pins. Supply JSON before and after lockfile objects, not filesystem paths, URLs, or commands. An identical pin set is informational, not a failure. HTML, package.json, and unsupported lockfileVersion values are refused before payment. This is not an npm install, audi

Parameter	Type	Required	Notes
before	object	yes	npm package-lock.json object (lockfileVersion 2 or 3). Not a filesystem path, URL, or command.
after	object	yes	npm package-lock.json object (lockfileVersion 2 or 3). Not a filesystem path, URL, or command.

Fetch a public HTTP(S) page and return its readable body as cleaned Markdown for LLM context, preserving headings, links, and lists while dropping navigation, ads, scripts, headers, footers, asides, and forms. Use extract instead when you need metadata, JSON-LD, Open Graph/Twitter tags, or a link inventory. Markdown is capped at 40,000 characters and no JavaScript is executed. Payment challenge

Parameter	Type	Required	Notes
url	string	yes	Public HTTP(S) URL whose readable body is needed as Markdown. Content is fetched without JavaScript rendering and may be truncated at 40,000 characters. Check status/sourceOk/error/truncated/capture;

Static supply-chain security scan of a public GitHub repo before an agent installs/runs it. Flags exfil sinks, obfuscation, credential reads, install-time curl|bash. risk=clean|suspicious|dangerous. Payment challenge and credentials are bound to GET https://agents.samedaydesk.com/scan, not mcp://. Retry the identical authorized arguments and credential.

Parameter	Type	Required	Notes
repo	string	yes	Public GitHub repo: owner/name or URL

Analyze a public business site and return a deterministic, paste-ready JSON-LD template plus the live structured-data gap diff and ranked fixes. Use deep_audit instead when the same call must also return company, technology, contact, and DNS/email evidence. Generated markup contains placeholders that must be replaced with real business values; this tool makes no site changes and does not guarant

Parameter	Type	Required	Notes
site	string	yes	Public business homepage or representative landing-page URL. Live HTML must be directly fetchable; JavaScript is not executed.
vertical	string	no	Optional structured-data template profile. med-spas is currently the specialized profile; unsupported values fall back to it.
city	string	no	Optional city the business serves; used to contextualize the generated structured-data template.

Inspect a public company domain and return structured identity, technology, social, contact, DNS, email-infrastructure, and AI-readiness evidence. Use schemaforge instead for a paste-ready JSON-LD template and remediation diff, or deep_audit when both outputs are required together. Public data only; this tool makes no site changes. Payment challenge and credentials are bound to GET https://age

Parameter	Type	Required	Notes
domain	string	yes	Public company domain or URL, for example stripe.com. Use enrich for company evidence; use wallet_enrich for an EVM address.

Inspect a public Base or EVM address and return an agent-ready on-chain profile: EOA or contract type, native and curated token holdings, token/NFT metadata, proxy evidence, activity, and a derived profile label. Use enrich for a company domain; the two tools accept different identifiers and return different evidence. Read-only public chain data; no wallet action or custody. Payment challenge an

Parameter	Type	Required	Notes
address	string	yes	Public Base or EVM 0x address. Use wallet_enrich for on-chain evidence; use enrich for a company domain.

Run one read-only AI-search-readiness audit for a public business domain: company, technology, contact, and DNS/email evidence from enrich, plus the live structured-data gap analysis and paste-ready JSON-LD template from schemaforge. Use enrich for company facts only or schemaforge for structured-data remediation only. The template contains placeholders for real data; the score is diagnost

Parameter	Type	Required	Notes
domain	string	yes	Public business domain or URL. The hostname is normalized and the audit starts at its HTTPS homepage; any supplied path or query is ignored.
vertical	string	no	Optional structured-data template profile. med-spas is currently specialized; unsupported values fall back to it.
city	string	no	Optional city the business serves; used only to contextualize the generated structured-data template.

Inspect one Base borrower across Morpho markets and return position balances, LTV, health factor, liquidation headroom, direct-RPC verification, and caller-selected collateral-price stress scenarios. Use morpho_protection when you need exact repay or add-collateral amounts and unsigned transaction templates, morpho_market_underwrite for market-wide risk, or morpho_preliquidation_replay for o

Parameter	Type	Required	Notes
address	string	yes	Borrower EVM address on Base mainnet
shocks	array	no	Collateral price shocks in percent

Calculate two alternative protection plans for one Base Morpho borrower under a selected collateral-price shock and target health factor: partial repayment or added collateral. Each plan includes the bounded asset amount, expected stressed health factor, evidence basis, and unsigned ERC-20 approval plus Morpho call templates. Use morpho_position for diagnosis without an action plan, `morpho_mark

Parameter	Type	Required	Notes
address	string	yes	Borrower EVM address on Base mainnet.
targetHealthFactor	number	no	Target Morpho health factor after the selected collateral-price shock; must be greater than 1 and at most 5.
protectAgainstShockPct	number	no	Collateral-price shock percentage to withstand, from -99 through 0; for example -10 models a 10% price decline.
executionBufferBps	integer	no	Additional repayment or collateral amount buffer in basis points for debt accrual and integer rounding; 25 means 0.25%.

Underwrite one Base Morpho market with independent GraphQL, REST, and direct-RPC evidence for configuration integrity, liquidity, utilization, concentration, borrower health bands, recent history, bad debt, and PreLiquidation availability. Use morpho_position or morpho_protection for one borrower's current position or protection plan, and morpho_preliquidation_replay for the economics of one

Parameter	Type	Required	Notes
marketId	string	yes	Morpho market ID on Base mainnet

Reconstruct one successful Base Morpho PreLiquidation transaction from its receipt and the exact block state, returning repaid and seized assets, protocol-oracle valuation, gross incentive, configured health window, and transaction gas before off-chain costs. Use morpho_market_underwrite for current market risk, morpho_position for a current borrower, or morpho_protection for a future protec

Parameter	Type	Required	Notes
transactionHash	string	yes	Successful Base transaction containing a Morpho PreLiquidate event

Agent work opportunity -> deterministic attempt, verify-first, or abandon preflight using caller-supplied cost and selection assumptions plus dated platform evidence. Returns break-even probability, expected surplus, hard gates, and source-linked evidence. No claim, bid, payment, or submission. Payment challenge and credentials are bound to GET https://agents.samedaydesk.com/work/opportunity-prefl

Parameter	Type	Required	Notes
platform	string	no	Optional platform slug used to attach dated platform-health evidence when a matching card exists.
rewardUsd	number	yes	Maximum gross reward in USD if the opportunity is selected and paid.
hours	number	yes	Estimated human and agent work time in hours for one complete attempt.
hourlyCostUsd	number	yes	Internal opportunity cost per hour in USD.
computeUsd	number	no	Expected model, API, hosting, and compute spend in USD for one attempt.
mandatorySpendUsd	number	no	Non-recoverable cash spend in USD required before the opportunity can settle.
reusableValueUsd	number	no	Conservative USD value of reusable code, research, distribution, or other assets created by the attempt.
selectionProbabilityPct	number	no	Caller-supplied probability, from 0 to 100, of receiving the reward; omit to receive a verify-first decision.
competition	integer	no	Known number of competing submissions or workers; use 0 when unknown.
slots	integer	no	Number of independently paid winner or worker slots.
agentAccess	string	no	Whether the platform explicitly allows agent participation, is agent-only, mixes agents and humans, is human-only, or remains unknown.
acceptance	string	no	How completion is accepted: deterministic proof, machine score, review deadline, discretionary judgment, or unknown.
settlement	string	no	How the reward is funded and paid: direct, escrow, platform balance, discretionary, unfunded, or unknown.

Measure one service's brand-blind rank, source-family coverage, expected-route presence, canonical-vs-alias listing identity, duplicate records, competitors, and exact-price drift across ten public machine-service discovery views. Supply runtimeUrl with an exact GET route to derive the comparison price from one coherent live unsigned x402 or MPP offer; otherwise expectedPriceUsd remains caller

Parameter	Type	Required	Notes
origin	string	yes	Public HTTPS service origin
intent	string	yes	Brand-blind capability description
route	string	no	Optional expected exact path
method	string	no	Exact route method for the optional Coinbase materialization audit. Defaults to GET; runtimeUrl is GET-only.
runtimeUrl	string	no	Optional exact same-origin HTTPS GET URL whose unpaid x402 or MPP offer supplies the runtime price reference. Requires route and an exactly matching pathname.
payTo	string	no	Optional EVM payTo for alias matching
expectedPriceUsd		no	Optional exact route price expected by the caller. A coherent runtimeUrl offer takes precedence and caller drift is reported.
surfaceAudit	boolean	no	When true, inspect the target's public Agent Card, ERC-8004 registration document, and action catalog for the expected route through bounded same-origin fetches.
materializationAudit	boolean	no	When true with route and method, distinguish Coinbase seller ineligibility from provider acceptance without exact-resource Bazaar materialization.

Compare x402 and MPP payment challenges, terms, and seller-declared JSON success-response readiness for one exact public HTTPS GET route before buyer authorization, including URL and realm binding, expiry, cross-protocol economic parity, and exact-route OpenAPI evidence. Use agent_discoverability_audit instead when you need to know whether catalogs rank or expose a service. This tool uses no tar

Parameter	Type	Required	Notes
url	string	yes	Exact public HTTPS GET route whose unpaid x402 and MPP challenge headers and same-origin OpenAPI success-response declaration should be inspected before buyer authorization. Credential-like query keys
catalog	object	no	Optional caller-supplied catalog candidate. When present, the tool compares it with every live unsigned offer across request, protocol, amount, network, asset, recipient, and expiry.

Use this after a buyer integration fails, a seller changes a paid route, or before the next paid retry or release. Audit one exact paid GET or POST seller route against buyer-required JSON success paths. GET verifies constructible non-secret input, exact request binding, live x402 and MPP economics, and optional Bazaar eligibility; POST performs static-safe OpenAPI contract analysis and sends no t

Parameter	Type	Required	Notes
origin	string	yes	Credential-free public HTTPS seller origin on port 443.
route	string	yes	Exact paid GET or POST path declared by the seller, without query or template parameters.
method	string	no	POST receives static OpenAPI response-contract analysis without sending a target request.
requiredPaths	array	no	Buyer-required dotted success-response paths that the seller schema must guarantee recursively.
requireBazaar	boolean	no	When true, missing Bazaar discovery metadata becomes a repair finding for live-probed GET routes.
referral	string	no	Optional x402 receipt-derived acquisition label. It cannot change payment or delivery.

Search Agent402 and the official MPP catalog for paid machine services that both match a capability intent and guarantee buyer-required JSON response paths. Use agent_discoverability_audit when you are measuring one known seller's catalog reach or rank, seller_integrity_audit when you already know the exact seller route to inspect, or payment_offer_preflight when you already have one exact c

Parameter	Type	Required	Notes
query	string	yes	Capability intent sent to Agent402 and used locally to rank MPP catalog metadata. Do not include credentials or private values.
requiredPaths	array	yes	Buyer-required dotted success-response paths that every returned seller schema must guarantee recursively.
maxPriceDisplayUnits	number	no	Maximum advertised per-call price in each source's display currency.
limit	integer	no	Maximum candidates audited and returned across Agent402 and MPP.

Measure one public service's credential-free MCP tools/list, OpenAPI, or both declared discovery surfaces before any tool call or target payment. Use agent_discoverability_audit for catalog reach and rank, seller_integrity_audit for one exact operation's response contract, or this tool for byte budgets, heaviest definitions, missing selection contracts, and progressive-discovery fixes. Unselec

Parameter	Type	Required	Notes
origin	string	yes	Credential-free public HTTPS service origin on port 443, with no path or query.
surfaceMode	string	no	Audit MCP only, OpenAPI only, or both. Unselected surfaces are not fetched or judged.
mcpPath	string	no	Exact root-relative MCP streamable-HTTP path.
openApiPath	string	no	Exact root-relative OpenAPI JSON path.
mcpBudgetBytes	integer	no	Maximum preferred raw MCP tools/list response size in bytes.
openApiBudgetBytes	integer	no	Maximum preferred raw OpenAPI document size in bytes.

Verify one claimed canonical Base USDC settlement after execution by matching a successful transaction receipt to the exact recipient, atomic amount, and optional payer. Use payment_offer_preflight before authorization when you need to inspect an unpaid x402 or MPP offer instead. This tool reads only public Base receipt and log data; it reads no merchant ledger and performs no wallet, signing, b

Parameter	Type	Required	Notes
transactionHash	string	yes	Base mainnet transaction hash containing the claimed canonical USDC transfer.
recipient	string	yes	Expected canonical Base USDC recipient.
amountAtomic	string	yes	Expected positive USDC amount in six-decimal atomic units.
payer	string	no	Optional expected canonical Base USDC payer.

Inspect one Base or Ethereum transaction hash and return normalized success or revert status, block time, gas and fee fields, decoded ERC-20 Transfer events, and canonical USDC transfers. Use settlement_proof instead when you must verify an exact canonical Base USDC recipient, amount, and optional payer claim. Raw logs are excluded; this tool performs no wallet, signing, broadcast, custody, or e

Parameter	Type	Required	Notes
transactionHash	string	yes	Mined Base or Ethereum transaction hash whose normalized receipt should be returned.
network	string	no	Receipt network. Defaults to Base mainnet.

Inspect one finalized Solana mainnet transaction signature and return normalized success or failure status, slot, block time, fee, SPL-token owner deltas, and canonical USDC deltas. Supply recipient, amount, and optional payer when an exact settlement claim must be verified; use transaction_receipt for Base or Ethereum. Raw instructions and logs are excluded, and this tool performs no wallet, si

Parameter	Type	Required	Notes
signature	string	yes	Finalized Solana mainnet transaction signature.
mint	string	no	Optional SPL-token mint; defaults to canonical Solana USDC.
recipient	string	no	Optional expected token recipient owner.
amountAtomic	string	no	Optional expected positive token amount in atomic units; requires recipient.
payer	string	no	Optional expected token payer owner; requires recipient and amountAtomic.

Evaluate safe standardized allow, deny, and error observations from an agent wallet or delegated signer. Use this after running a bounded provider policy test matrix to distinguish explicit provider-policy enforcement from validation or generic provider failures and to test exact execution shape separately from operation allowlisting. Accepts no credentials, wallet IDs, signatures, transactions, o

Parameter	Type	Required	Notes
profileId	string	yes	Caller-defined policy profile identifier with no credential or wallet secret.
provider	string	yes	Wallet or delegated-signer provider name.
network	string	yes	Network identifier used by the tested profile.
protocol	string	yes	Payment or execution protocol bound by the tested profile.
observations	array	yes	Unique standardized observations. Raw provider responses, signatures, transactions, credentials, and wallet IDs are rejected.

Evaluate safe standardized observations from wallet policies that track prior or concurrent requests. Use wallet_policy_conformance instead for one-request action shape, method, chain, token, recipient, amount, and function controls. This tool separately tests sequential cumulative limits, signed-but-unbroadcast accounting, ABI extraction, concurrent oversubscription, counter-reference failure,

Parameter	Type	Required	Notes
profileId	string	yes	Caller-defined stateful policy profile identifier with no credential, wallet, or counter secret.
provider	string	yes	Wallet or delegated-signer provider name.
network	string	yes	Network identifier used by the tested stateful profile.
protocol	string	yes	Payment or execution protocol bound by the tested stateful profile.
observations	array	yes	Unique standardized stateful observations. Raw provider responses, signatures, transactions, counter values, credentials, wallet IDs, and resource IDs are rejected.

Compare two already-held extract-batch JSON artifacts on caller-named fields. This tool is free: charged is false, it does not fetch, and it does not accept payment. Use extract_batch when you still need a paid observation. Do not add a second paid diff.

Parameter	Type	Required	Notes
before	object	yes	Already delivered batch JSON object. Not a URL or filesystem path.
after	object	yes	Already delivered batch JSON object. Not a URL or filesystem path.
fields	array	yes	Explicit field names to compare.

Return the acquired cold careers-board recipe and its public tests. This tool is free: charged is false, it does not fetch a live board, and it does not accept payment. Use careers_board when you need one named-board observation. Direct free execution remains available.

No parameter schema on file.

Optionally state whether the current paid morpho_position result was useful or not_useful. This tool is free: charged is false, it does not repay, and it does not change the delivered purchase. Read the capability only from the paid result meta samedaydesk/mcp-caller-result. Schema success is not a statement. Absence is not useful or not_useful. Do not follow a link, do not send the capability to

Parameter	Type	Required	Notes
token	string	yes	Capability copied from the paid result meta. Not a payer, price, or event id.
disposition	string	yes	Explicit statement after you inspect the result.
reasonCategory	string	no	Optional reason. Omit it to leave the reason empty.

Read the stored outcome of an earlier native paid call using its original input and credential. This call cannot execute or pay.

Parameter	Type	Required	Notes
name	string	yes	—
arguments	object	yes	—

Free

$0 forever

Every tool — any call limit is its publisher’s, not ours
No card, and mcprush charges nothing for it
Runs at its publisher’s own address — this marketplace is not in the path
Nothing to cap, because mcprush bills nothing

Nothing here is billable: mcprush charges nothing to install X402 Data Gateway or to call it, at any volume.

ATool-list grade · score 93 / 100

Release 1.23.49 · scanned 20 Oct 2026

Graded from the tools this server lists, not from its source code.

Two independent axes, because powerful and malicious are different questions. The grade is threat only. The capability level is blast radius, and it is never a penalty on the grade — it is priced as one subtract-only term in the score, where you can see it.

Threat score100

Client score93

Findings0 threat · 3 capability

Capabilitymoderate

Coveragemanifest

Verificationnot in this report

Surface digesta36958def81ba570f0da54c7095a74061041b5da92c52f8f919147df3892cd28

Score vectorthreat 100 → client 93

Term	Level	What it prices	Points
capability-exposure	moderate	capability blast radius (moderate) — client exposure if the model is manipulated	−3
coverage-honesty	manifest	inspection depth (manifest) — how much of the target the scan could see	−4

score = clamp(round(threatScore − E_cap − E_ver − E_cov), 0, 100). No model, no opinion, no network call at scoring time: the same methodology version against the same bytes always produces this number, and every line above is a field of the report rather than a summary of it.

What the scan could actually read

A grade is only as meaningful as its coverage, so the scanner publishes its own depth before it publishes its result.

The scan read each tool’s name, description, input schema and annotations exactly as the server listed them the last time it answered us; no code was reviewed. We ask the server again about once a month, and a list that changed is graded again.

Tool surfaceread

Implementation sourcenot available

Package metadatanot available

Live transportnot available

The implementation source was not read — this reflects the declared tool metadata only.

Capability — what it could do if the model were manipulated

Tags derived from each tool’s schema and the implementation, not from what the tool calls itself. moderate is the level these add up to.

Tool	Capability tags	Why the tag was assigned
careers_board	no tags
extract	untrusted-input	untrusted-input: keyword "fetch", parameter "url" with "fetch" in the description
extract_batch	untrusted-input	untrusted-input: keyword "fetch", parameter "url" with "fetch" in the description
lockfile_pin_delta	no tags
read	untrusted-input	untrusted-input: keyword "fetch", parameter "url" with "fetch" in the description
scan	no tags
schemaforge	no tags
enrich	no tags
wallet_enrich	no tags
deep_audit	no tags
morpho_position	no tags
morpho_protection	no tags
morpho_market_underwrite	no tags
morpho_preliquidation_replay	no tags
opportunity_preflight	no tags
agent_discoverability_audit	no tags
payment_offer_preflight	no tags
seller_integrity_audit	no tags
contract_qualified_search	no tags
agent_surface_budget_audit	no tags
settlement_proof	external-sink	external-sink: parameter "recipient"
transaction_receipt	no tags
solana_transaction_receipt	external-sink	external-sink: parameter "recipient"
wallet_policy_conformance	no tags
stateful_wallet_policy_conformance	no tags
page_change	no tags
careers_board_cold	no tags
report_caller_result	no tags
recover_paid_result	no tags

Toxic-flow graph

The lethal trifecta, checked as a graph rather than as a checklist: untrusted input, a sensitive source and an external sink have to meet before there is a path worth worrying about.

flow-1

Untrusted input can drive an external action even though no sensitive source is exposed.

Supply chain and provenance

Integrityfirst-seen

Surface digesta36958def81ba570

Scanned2026-10-20

This is the first scan of this surface here, so there is nothing yet to compare it against.

Every result on this tab comes from one deterministic pass over the published package — offline, rule by rule, and auditable line by line above. Same methodology version, same bytes, same score.

Where are you running it?

Tool surface

Release history

X402 Data Gateway MCP

What it does

Quickstart

Where are you running it?

Tool surface

What counts against your monthly calls

What the scan could actually read

Capability — what it could do if the model were manipulated

Toxic-flow graph

Supply chain and provenance

Release history

See also