Agent Kiosk — 23-in-1 B2A Intelligence, Action & x402 API

السجل الرسمي المالية والمدفوعات

23-in-1 MCP server: EVM tx simulator, funding rate arb, macro radar, swap calldata & security.

التثبيت

أضف هذا إلى إعدادات MCP في عميلك (Claude Desktop: claude_desktop_config.json، وCursor: ‏.cursor/mcp.json، ويستخدم VS Code وغيره الصيغة نفسها «mcpServers»).

Remote (streamable-http)
Claude Code
claude mcp add --transport http agent-kiosk-23-in-1-b2a-intelligence-act 'https://agent-kiosk.vercel.app/mcp'
إعداد JSON (Claude Desktop وCursor وVS Code)
{
    "mcpServers": {
        "agent-kiosk-23-in-1-b2a-intelligence-act": {
            "type": "http",
            "url": "https://agent-kiosk.vercel.app/mcp"
        }
    }
}

التوثيق

مأخوذ من ملف README للمشروع على GitHub ويُحدَّث أسبوعيًا. تفتح الروابط على GitHub.

المحتويات
  1. Agent Kiosk — 24-in-1 Autonomous B2A Intelligence, Action & Compliance Supermarket (x402 v2 & MCP)
  2. 1. Unified Route, Method & Price Catalogue
  3. 2. Production x402 Buyer Guide & Facilitator Integration
  4. 3. Verified Base Mainnet Settlement Evidence (Operator Tests)
  5. 4. Quick Connect (Claude Desktop / Cursor / Windsurf / VS Code)

Agent Kiosk — 24-in-1 Autonomous B2A Intelligence, Action & Compliance Supermarket (x402 v2 & MCP)

Agent Kiosk is an instant pay-per-call API and Model Context Protocol (MCP) server built for autonomous AI agents, trading bots, coding assistants, and research workflows on Base Mainnet (eip155:8453). Every paid and prepaid response includes a cryptographic SHA-256 + HMAC-SHA256 attestation envelope (attested tag).

  • Production Base URL: https://agent-kiosk.vercel.app
  • Merchant Payment Recipient (payTo): 0xd8429209Aee6A398B9707DFf5F28AAA93452eE95 (Base USDC 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913, 6 decimals)
  • Catalogue Scope: 24 x402-protected endpoints (23 paid per-call endpoints + 1 prepaid 30-day API pass) plus free discovery, telemetry, MCP teaser & partner-fee swap routes
  • Live Telemetry & Wallet Dashboard: https://agent-kiosk.vercel.app/stats (GET /v1/stats JSON)
  • MCP Endpoint: https://agent-kiosk.vercel.app/mcp (https://agent-kiosk--batuhansenavci.run.tools)
  • x402scan Store (24/24 Verified): x402scan.com/server/a1af2789-615a-4324-b3f1-83b97834ece8
  • Glama MCP Listing: glama.ai/mcp/servers/ralf9090/agent-kiosk
  • Smithery Store: smithery.ai/servers/batuhansenavci/agent-kiosk

1. Unified Route, Method & Price Catalogue

A. 23 Paid Per-Call x402 Endpoints (Base USDC eip155:8453)

All /v1/* routes accept POST (primary JSON body) and GET (query parameters). Unauthenticated requests return HTTP 402 Payment Required with the PAYMENT-REQUIRED header.

#MCP Toolx402 REST RouteMethodPrice (USDC)Atomic Units (6 dec)Description
1x402_ping/v1/pingPOST / GET$0.0011000Instant x402 v2 & v1 wallet verification ping, settlement check & round-trip echo.
2llm_chat_completions/v1/chat/completionsPOST / GET$0.0022000OpenAI-compatible LLM Chat Completions Gateway (gpt-4o-mini, openai, deepseek-chat).
3evm_tx_simulator/v1/tx-simulatePOST / GET$0.0055000Pre-flight EVM transaction simulator (eth_call + eth_estimateGas), revert decoder, ERC-20 allowance & EIP-1967 proxy detector.
4perp_funding_arbitrage/v1/funding-ratesPOST / GET$0.0088000Cross-exchange perpetual funding rate arbitrage, basis APR spread & open interest radar (Hyperliquid + dYdX v4).
5tradfi_macro_radar/v1/macro-radarPOST / GET$0.0088000Live S&P 500, Nasdaq, VIX, DXY, US 10Y Treasury Yield, Gold, Oil, Crypto Fear & Greed, BTC Dominance & DeFi TVL.
6web_extract/v1/web-extractPOST / GET$0.0110000Clean URL-to-Markdown extractor with Prompt Injection trap detection.
7package_audit/v1/package-auditPOST / GET$0.0110000Open-source package & CVE vulnerability scanner (npm, PyPI, crates.io) via Google OSV.dev.
8github_intel/v1/github-intelPOST / GET$0.0110000GitHub repository & open-source competitive intelligence: stars, releases, issues & topic leaders.
9kalshi_polymarket_arb/v1/prediction-arbPOST / GET$0.01515000Unified Kalshi, Polymarket & Manifold prediction market aggregator and cross-venue probability spread scanner.
10social_search/v1/social-searchPOST / GET$0.0220000Live Reddit & HackerNews discussions in clean JSON & Markdown.
11security_audit/v1/security-auditPOST / GET$0.02200000x Token/Contract Honeypot & tax scanner (GoPlus + DexScreener) & URL phishing audit.
12token_alpha/v1/token-alphaPOST / GET$0.0220000Real-time DEX order-flow (buy vs. sell pressure), liquidity depth & momentum signal.
13domain_intel/v1/domain-intelPOST / GET$0.0220000B2B company & domain intelligence: DNS, MX email provider, SaaS TXT stack, RDAP & subdomains.
14academic_search/v1/academic-searchPOST / GET$0.0220000Peer-reviewed scientific literature search (OpenAlex + arXiv) with abstracts & PDF links.
15prediction_markets/v1/prediction-marketsPOST / GET$0.0220000Live event probabilities (%) & betting volume from Polymarket and Manifold Markets.
16defi_yields/v1/defi-yieldsPOST / GET$0.0220000Highest DeFi APY & yield radar powered by DeFiLlama filtered by token, chain, and TVL.
17maps_leads/v1/maps-leadsPOST / GET$0.0330000City-scoped B2B business leads with phone, website, email, address & GPS.
18wallet_profiler/v1/wallet-profilerPOST / GET$0.0330000Multi-chain whale & wallet profiler (Base, Ethereum, Arbitrum, Polygon): USDC/ETH balances & tx counts.
19compliance_check/v1/compliance-checkPOST / GET$0.0550000AML, Sanctions (OFAC) & Counterparty Screening: 14 risk vectors (Phishing, Tornado Cash mixer, Honeypot creator, Darkweb, Cybercrime) across Base & Ethereum.
20defi_swap_quote/v1/defi-swap-quotePOST / GET$0.0550000Executable DeFi Swap & Cross-Chain Bridge Calldata Builder: Best DEX route (LI.FI + ParaSwap) + ready-to-sign EVM transactionRequest (to, data, value, gasLimit).
21token_due_diligence/v1/token-due-diligencePOST / GET$0.101000003-in-1 Institutional Token Verdict: GoPlus contract audit + DEX order-flow + social sentiment (Grade A–F).
22b2b_company_dossier/v1/b2b-company-dossierPOST / GET$0.101000004-in-1 B2B Executive Dossier: DNS/SaaS tech stack + website scrape + local leads + social mentions.
23whale_alpha_radar/v1/whale-alpha-radarPOST / GET$0.101000003-in-1 Whale Portfolio & Yield Optimizer: 4-chain wallet profiler + top DeFi yields + macro odds.
B. 1 Prepaid 30-Day API Pass Endpoint (Base USDC eip155:8453)
#MCP Toolx402 REST RouteMethodPrice (USDC)Atomic Units (6 dec)Description
24buy_prepaid_pass/v1/buy-passPOST / GET$5.00500000030-Day Prepaid VIP API Key (ak_live_...): Mints a stateless HMAC-SHA256 signed API key that unlocks all 23 paid per-call endpoints for 30 days via X-API-KEY or Authorization: Bearer without per-call x402 signing.
C. Free / Unpaid Routes ($0.00 USDC — HTTP 200 without x402 payment)
RouteMethodPricePurpose
/v1/free-swapPOST / GET$0.00Zero-paywall executable DEX swap & cross-chain bridge calldata builder (monetized via 0.25% on-chain partner fee to payToWallet).
/v1/modelsGET$0.00OpenAI-compatible model list discovery (gpt-4o-mini, openai, deepseek-chat).
/mcpPOST / GET$0.00 (Teaser) / Paid (Full)Streamable-HTTP MCP JSON-RPC 2.0 server (lists all 24 tools; unauthenticated tools/call returns an HTTP 200 1-item teaser preview + x402_unlock_full_data challenge, while x402_ping and defi_swap_quote return full preview data; passing payment_signature or x_api_key in tool arguments returns full unmasked data).
/v1/stats, /statsGET$0.00Live JSON & HTML server funnel telemetry + on-chain Base USDC wallet balance dashboard.
/.well-known/x402.jsonGET$0.00Machine-readable x402 v2 catalogue, facilitator configuration & route breakdown (/.well-known/x402 and /.well-known/agent.json aliased).
/.well-known/agent-card.jsonGET$0.00Google A2A v0.3.0 Agent Card with a2a-x402 extension.
/.well-known/mcp.jsonGET$0.00MCP server manifest (24 tools, 4 prompts, 3 resources).
/openapi.jsonGET$0.00OpenAPI 3.1.0 specification covering all 24 x402 endpoints.
/llms.txt, /llms-full.txtGET$0.00LLM-readable discovery catalogue, buyer integration guide & complete input schemas.

2. Production x402 Buyer Guide & Facilitator Integration

A. Base Mainnet Settlement Facilitators (We Are the Seller, Not a Facilitator)

Agent Kiosk verifies and settles incoming EIP-3009 (TransferWithAuthorization) USDC signatures on Base Mainnet (eip155:8453 / base) using a multi-facilitator failover pipeline configured in src/x402.js:

RoleFacilitator NameAPI Base URLSupported EndpointVerify EndpointSettle EndpointSupported Versions & SchemesFacilitator Signer / Relayer Addresses (Not Merchant Addresses)
PrimaryPayAI Networkhttps://facilitator.payai.networkGET https://facilitator.payai.network/supportedPOST https://facilitator.payai.network/verifyPOST https://facilitator.payai.network/settlex402 v2 (eip155:8453, exact) & x402 v1 (base, exact), zero API key required0xB2Bd29925CBbCEA7628279c91945Ca5B98bf371B, 0xc6699d2aadA6c36Dfea5C248DD70f9CB0235cB63 (and pool signers listed in signers["eip155:*"] at /supported)
Secondary FallbackDexterhttps://facilitator.dexter.cashGET https://facilitator.dexter.cash/supportedPOST https://facilitator.dexter.cash/verifyPOST https://facilitator.dexter.cash/settlex402 v2 (eip155:8453, exact) & x402 v1 (base, exact)0x402Feee072D655B85e08f1751AF9ddbCd249521f
Tertiary Fallback (v1)Mogamihttps://facilitator.mogami.techGET https://facilitator.mogami.tech/supportedPOST https://facilitator.mogami.tech/verifyPOST https://facilitator.mogami.tech/settlex402 v1 (base, exact)Public v1 relayer pool
  • Merchant Receiving Address (payTo): 0xd8429209Aee6A398B9707DFf5F28AAA93452eE95 (Base Mainnet USDC 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913, 6 decimals).
B. Accepted Payment, Challenge & Receipt Headers
DirectionHeader / ParameterProtocolFormat & Description
HTTP 402 ResponsePAYMENT-REQUIREDx402 v2Base64-encoded JSON PaymentRequired challenge (x402Version: 2, accepts[0] with scheme: "exact", network: "eip155:8453", amount, maxAmountRequired, asset, payTo, maxTimeoutSeconds: 60, extra: { name: "USD Coin", version: "2" }). The identical JSON object is also returned as the HTTP 402 response body.
HTTP Request (Pay-Per-Call)PAYMENT-SIGNATUREx402 v2Base64, Base64URL, or raw JSON string containing { x402Version: 2, scheme: "exact", network: "eip155:8453", payload: { signature, authorization: { from, to, value, validAfter, validBefore, nonce } } }.
HTTP Request (Legacy / Alias)X-PAYMENT or X-PAYMENT-SIGNATUREx402 v1 / v2Accepted for x402 v1 (network: "base") and v2 clients that send payment headers under X-PAYMENT or X-PAYMENT-SIGNATURE.
HTTP Request (Prepaid Pass)X-API-KEY or Authorization: Bearer <key>Prepaid PassPass ak_live_<payloadB64>.<sigB64> minted via POST /v1/buy-pass ($5.00 USDC) to access any of the 23 paid endpoints for 30 days without per-call signing.
MCP tools/call Argumentspayment_signature, x_payment, or x_api_keyMCP over HTTP / stdioPass the x402 payment payload or ak_live_... key directly inside params.arguments on POST /mcp to unlock full unmasked data inside MCP clients.
HTTP 200 Response (Receipt)PAYMENT-RESPONSE and X-PAYMENT-RESPONSEx402 v2 & v1Base64-encoded JSON settlement receipt returned by the facilitator: {"success":true,"transaction":"0x...","network":"eip155:8453","payer":"0x..."}. The on-chain transaction hash is also echoed in the HTTP 200 JSON body as tx_hash.
C. Timeouts, Uncertain Settlement & Recovery Instructions
  1. Server & Challenge Timeouts:
    • Every 402 Payment Required challenge specifies maxTimeoutSeconds: 60. Buyers should sign EIP-3009 TransferWithAuthorization messages with validAfter = 0 and validBefore >= now + 300 seconds.
    • Server-side facilitator calls enforce a 6.5-second timeout per facilitator on POST /verify and a 10.0-second timeout per facilitator on POST /settle.
    • If the primary facilitator (facilitator.payai.network) returns an HTTP/network error on /verify or /settle, the middleware automatically fails over to the next configured facilitator (facilitator.dexter.cash). If a signature is cryptographically invalid (invalid_exact_evm_signature), the server immediately returns HTTP 402 with the exact error reason without retrying.
  2. Handling Uncertain Settlement (Client Timeout / Network Drop):
    • Each EIP-3009 TransferWithAuthorization uses a unique 32-byte nonce. Once consumed on Base Mainnet, the USDC contract (0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913) permanently marks that (authorizer, nonce) pair as used (AuthorizationUsed event), making replay or double-charging of the same signature impossible on-chain.
    • Rule for Buyers on Timeout: If your HTTP request times out or disconnects after sending PAYMENT-SIGNATURE, do NOT immediately sign a new nonce:
      1. Query Base USDC (0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913) via authorizationState(address authorizer, bytes32 nonce) (0xe94a0102) or check https://basescan.org/address/0xd8429209Aee6A398B9707DFf5F28AAA93452eE95#tokentxns.
      2. If authorizationState is false (not settled on-chain): You can safely retry the request using the exact same PAYMENT-SIGNATURE header (same nonce) until validBefore expires, or wait for validBefore to pass before signing a new nonce.
      3. If authorizationState is true (settled on-chain, but HTTP response was lost in transit): Open an issue at github.com/ralf9090/agent-kiosk/issues with the Base txHash, endpoint path, and timestamp for immediate response replay or a complimentary Prepaid API Pass credit.

3. Verified Base Mainnet Settlement Evidence (Operator Tests)

Disclosure: The transactions below are operator test payments executed against the live production deployment (https://agent-kiosk.vercel.app) and settled on Base Mainnet (eip155:8453) via the PayAI Network facilitator (https://facilitator.payai.network/settle), not third-party customer volume.

Example 1 — POST https://agent-kiosk.vercel.app/v1/token-alpha (0.02 USDC / 20000 atomic units)
  • Endpoint & Method: POST https://agent-kiosk.vercel.app/v1/token-alpha
  • Amount Settled: 0.02 USDC (20000 atomic units, Base USDC 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913)
  • Base Mainnet Transaction Link: https://basescan.org/tx/0x5aa1b42ef7dae5323ba561b9374e9e5db0d42b0eae23d7e4fc5c2f0929df61be (Block 52809684, Status: Success)
  • Facilitator Relayer (from on-chain): 0xc6699d2aadA6c36Dfea5C248DD70f9CB0235cB63 (PayAI Network relayer)
  • Seller Recipient (payTo): 0xd8429209Aee6A398B9707DFf5F28AAA93452eE95

Decoded PAYMENT-RESPONSE / X-PAYMENT-RESPONSE Header:

{
  "success": true,
  "transaction": "0x5aa1b42ef7dae5323ba561b9374e9e5db0d42b0eae23d7e4fc5c2f0929df61be",
  "network": "eip155:8453",
  "payer": "0xd8429209aee6a398b9707dff5f28aaa93452ee95"
}

Redacted HTTP 200 Resource Response (POST /v1/token-alpha with {"query":"AERO","chain":"base"}):

{
  "ok": true,
  "payment_mode": "x402",
  "tx_hash": "0x5aa1b42ef7dae5323ba561b9374e9e5db0d42b0eae23d7e4fc5c2f0929df61be",
  "attestation": {
    "attested": true,
    "issuer": "io.github.ralf9090/agent-kiosk",
    "signer_wallet": "0xd8429209Aee6A398B9707DFf5F28AAA93452eE95",
    "algorithm": "HMAC-SHA256",
    "route": "/v1/token-alpha",
    "payload_sha256": "c1bcebf107e25a742a7afc58ca39692bc33f4e6da49a2ca1afc8b892fae63a1f",
    "timestamp_utc": "2026-10-19T11:18:33.296Z",
    "signature": "<REDACTED_ATTESTATION_HMAC>"
  },
  "data": {
    "query": "AERO",
    "found": true,
    "token": {
      "name": "Aerodrome",
      "symbol": "AERO",
      "address": "0x940181a94A35A4569E4529A3CDfB74e38FD98631",
      "primary_chain": "base",
      "price_usd": 0.7866,
      "market_cap_usd": 789632423,
      "fdv_usd": 1575158274
    },
    "alpha_metrics": {
      "signal": "SELL_PRESSURE",
      "total_top5_liquidity_usd": 47963273,
      "volume_1h_usd": 403817,
      "volume_24h_usd": 12606349,
      "order_flow_1h": { "buys": 88, "sells": 495, "buy_pressure_pct": 15.1 },
      "order_flow_24h": { "buys": 3508, "sells": 13997, "buy_pressure_pct": 20 }
    },
    "llm_summary": "Aerodrome (AERO on base): $0.7866 | Signal: SELL_PRESSURE | 1h Buy Pressure: 15.1% (88 buys vs 495 sells) | Liquidity: $47,963,273 | 24h Vol: $12,606,349."
  }
}
Example 2 — POST https://agent-kiosk.vercel.app/v1/ping (0.001 USDC / 1000 atomic units)

Decoded PAYMENT-RESPONSE / X-PAYMENT-RESPONSE Header:

{
  "success": true,
  "transaction": "0xd4869a2190887c15b9fb53c109045fe60bb6bef6a3cf8b66e6f7e0a9904fda7e",
  "network": "eip155:8453",
  "payer": "0xd8429209aee6a398b9707dff5f28aaa93452ee95"
}

Redacted HTTP 200 Resource Response (POST /v1/ping with {"message":"x402-registry-verification"}):

{
  "ok": true,
  "payment_mode": "x402",
  "tx_hash": "0xd4869a2190887c15b9fb53c109045fe60bb6bef6a3cf8b66e6f7e0a9904fda7e",
  "attestation": {
    "attested": true,
    "issuer": "io.github.ralf9090/agent-kiosk",
    "signer_wallet": "0xd8429209Aee6A398B9707DFf5F28AAA93452eE95",
    "algorithm": "HMAC-SHA256",
    "route": "/v1/ping",
    "payload_sha256": "6fc2d484b7899b71b18d80b87c18230e8904e7f296ca3c471763cc618a932041",
    "timestamp_utc": "2026-10-19T11:18:31.280Z",
    "signature": "<REDACTED_ATTESTATION_HMAC>"
  },
  "data": {
    "status": "pong",
    "verified": true,
    "payment_mode": "x402",
    "service": "Agent Kiosk",
    "version": "2.6.0",
    "protocol": "x402 v2 & v1 + MCP (Attested)",
    "network": "eip155:8453",
    "asset": "USDC",
    "echo": "x402-registry-verification",
    "payer": "0xd8429209Aee6A398B9707DFf5F28AAA93452eE95",
    "tx_hash": "0xd4869a2190887c15b9fb53c109045fe60bb6bef6a3cf8b66e6f7e0a9904fda7e"
  }
}

4. Quick Connect (Claude Desktop / Cursor / Windsurf / VS Code)

{
  "mcpServers": {
    "agent-kiosk": {
      "url": "https://agent-kiosk.vercel.app/mcp"
    }
  }
}

الأسئلة الشائعة

ما هو Agent Kiosk — 23-in-1 B2A Intelligence, Action & x402 API؟

23-in-1 MCP server: EVM tx simulator, funding rate arb, macro radar, swap calldata & security.

كيف أثبّت Agent Kiosk — 23-in-1 B2A Intelligence, Action & x402 API؟

يعمل كخادم بعيد. في Claude Code: claude mcp add --transport http agent-kiosk-23-in-1-b2a-intelligence-act 'https://agent-kiosk.vercel.app/mcp'. وفي العملاء الآخرين، الصق إعداد JSON من هذه الصفحة في إعدادات MCP الخاصة بهم.

هل يحتاج Agent Kiosk — 23-in-1 B2A Intelligence, Action & x402 API إلى مفتاح API؟

لا يذكر إدراجه في السجل أي مفتاح أو سر إلزامي. قد تتطلب بعض الميزات حسابًا لدى الخدمة التي يتصل بها.

هل Agent Kiosk — 23-in-1 B2A Intelligence, Action & x402 API مفتوح المصدر؟

نعم. شيفرته متاحة على GitHub بترخيص MIT.

من يصون Agent Kiosk — 23-in-1 B2A Intelligence, Action & x402 API؟

ينشره ralf9090. يدرجه AI.tn لكنه لا يصونه ولا يوصي به.

من سجل MCP الرسمي. الإدراج ليس توصية: راجع شيفرة الخادم وصلاحياته قبل منحه الوصول إلى بياناتك.