A drop-in MCP server that exposes 15 production tools — Solana, crypto, macro, public data — gated behind the x402 v2 spec. Your agent's wallet auto-pays in USDC on Base, $0.001–$0.25 per call. No subscriptions. No keys to juggle.
# Your agent is mid-task. Needs Solana wallet diagnostics.
$ agent.tool("solana_wallet_scan", address: "7xKXt...")
# cipher-x402-mcp returns a 402 Payment Required + accept-list:
→ { scheme: "x402", amount: "10000", asset: "USDC@Base", recipient: "0x…" }
# The agent's wallet signs an EIP-3009 authorization, retries.
$ 200 OK { portfolio_usd: 12450, dust_accounts: 7, stale_stake: 3 }
# Cost: $0.01 USDC. Settled on Base in 1 second. Done.
Your AI agent calls 50 different APIs across one task. It doesn't need 50 monthly plans. It needs to pay for what it uses, when it uses it.
$0.001 to $0.25 per tool call. Whatever your agent uses, that's what it pays. No floor, no waste, no contracts.
Forget API-key vaulting. The wallet signs an EIP-3009 authorization. We never see your secrets. Your agent never carries them.
Drop into Claude Desktop, Cursor, Cline, Continue, or anything that speaks MCP. Two lines of config. No bridge layer.
cipher-solana-wallet-audit v1.4.0 ruleset. 13 rules across plaintext keys, hex literals, mnemonic strings, Anchor wallet leaks, Token2022 transfer-hook abuse, and the April-2026 Drift-hack admin-bundle correlations.
Curated snapshot of live audit competitions and bug-bounty programs across Code4rena, Cantina, Sherlock, and direct-protocol disclosure channels. Updated April 2026.
Portfolio value, dust accounts, stale stake, and low-liquidity warnings for any Solana address.
Perp funding-rate intel across 17 venues — Binance, Bybit, OKX, BitMEX, Hyperliquid, dYdX, Coinbase and more. Pre-aggregated, OI-weighted.
EV-maximizing Jito tip for an arbitrage bundle. Inputs: pool depth, expected profit, slot probability.
0–100 repo-health score: commit cadence, issue close-latency, contributor diversity, CI green-rate, release frequency.
Drift Protocol exposure for any wallet — open perp positions, collateral, unrealized PnL, liquidation distance.
Federal Reserve macro data by series ID — DGS10, WALCL, T10Y2Y. Cleaned, latest observations only.
k-anonymity password breach check via the HIBP corpus. SHA-1 prefix only — no plaintext leaves your agent.
PubMed/NCBI medical literature search with year-range, has-meta-analysis and has-review enrichment.
OpenStreetMap Nominatim geocoding. Address → lat/lon and lat/lon → normalized address.
USDA FoodData Central nutrition lookup. Per-100g macros — calories, protein, carbs, fat, fiber, potassium.
openFDA drug adverse-event lookup, last 12 months. Top reactions, report counts, seriousness breakdown.
Long-form CIPHER chapters — MEV deep-dive, three-tier wallet hardening, Canadian compliance, Oracle Cloud free-tier.
Add the server to your MCP client. That's it.
// ~/Library/Application Support/Claude/claude_desktop_config.json
{
"mcpServers": {
"cipher-x402": {
"command": "npx",
"args": ["-y", "cipher-x402-mcp"]
}
}
}
The MCP server is MIT. The hosted gateway adds rate-limiting, API-key auth, and consolidated billing.
x402 is the HTTP 402 Payment Required spec, formalized as a Linux Foundation standard in April 2026. The server returns a 402 with an accept-list. The client signs an authorization (EIP-3009 on EVM, Solana Pay on Solana) and re-requests with an X-PAYMENT header. The server settles, the call completes.
Any EVM-compatible wallet works. Base + USDC is the default, but the spec is chain-agnostic.
Self-host if your stack is one or two agents and you're already hosting MCP servers. Hosted plans on MCPize add rate-limiting, API-key auth, consolidated billing, and uptime; useful when more than a couple of agents share the same tool surface.
No. The MCP server runs forward-only: when an agent calls a paid tool without payment, the upstream's 402 + accept-list is relayed verbatim. The agent's wallet pays directly. The server never custodies caller funds.
Yes — fork the repo, add a ToolDef entry to src/tools.ts, point at your own x402-gated upstream, redeploy. PRs welcome.