Kaal Agent Safety (x402 paid MCP)
Paid MCP tools for URL payment-safety scanning and provider recommendations; USDC on Base via x402.
What can you do with Kaal Agent Safety (x402 paid MCP)?
safety_check(target)— $0.002 per call: flagscredentials_in_url,recommend(category)— $0.005 per call: ranked whitespace/cost directory
Install
Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).
claude mcp add --transport http kaal-agent-safety-x402-paid-mcp 'https://places-wayne-experiment-facial.trycloudflare.com/mcp'
{
"mcpServers": {
"kaal-agent-safety-x402-paid-mcp": {
"type": "http",
"url": "https://places-wayne-experiment-facial.trycloudflare.com/mcp"
}
}
}
Documentation
From the project's README on GitHub, refreshed weekly. Links open on GitHub.
kaal-agent-safety — x402 paid MCP server
Two paid MCP tools plus three free HTTP endpoints. Buyers pay USDC on Base
(per-call, x402 exact scheme, EIP-3009 transferWithAuthorization) — no API
keys, no subscriptions. Free initialize + tools/list; payment only on
tools/call (HTTP 402 with payment requirements).
Endpoints
| Endpoint | Method | Price | Notes |
|---|---|---|---|
/v1/safety/check?target=<url> | GET | $0.002 | deterministic payment-safety / phishing scan + signed receipt |
/v1/recommend?category=<cat> | GET | $0.005 | ranked provider / cost-directory lookup |
/mcp | POST (MCP) | see below | streamable-http MCP transport |
/.well-known/mcp.json | GET | free | MCP discovery manifest |
/.well-known/x402 | GET | free | x402 payment manifest (payTo, facilitator, prices) |
/v1/verify?receipt=<id> | GET | free | replayable receipt verification |
/health | GET | free | liveness |
MCP tools
safety_check(target)— $0.002 per call: flagscredentials_in_url,no_hsts,ip_literal, lookalike hosts, missing/.well-known/x402manifest; returnsAVOID / CAUTION / CAUTION_NONE_DETECTED+ signed receipt.recommend(category)— $0.005 per call: ranked whitespace/cost directory across search, onchain-data, agent-safety, paid-discovery, tx-execution.
Connect
claude mcp add --transport http kaal-agent-safety https://<host>/mcp
# or any MCP client pointed at the streamable-http URL in server.json
Free: initialize, notifications/initialized, tools/list.
Paid: tools/call requires X-PAYMENT header (base64 exact-scheme payload);
server settles through an x402 facilitator and returns X-Payment-Response
with the on-chain transaction.
Run
npm ci
RECEIPT_SECRET=<32-byte-hex> \
NETWORK=base FACILITATOR_URL=http://127.0.0.1:8142 \
PORT=8140 node server.js
RECEIPT_SECRET (or WALLET_FILE=<path-to-wallet-json>) signs receipts.
NETWORK is base (mainnet) or base-sepolia. Settlement is non-custodial:
funds go straight to the configured payTo wallet on every settlement.
Verified
- Local E2E: unpaid 402 → EIP-3009 signed payment → verify → settle → on-chain receipt status 1.
- Public E2E over a tunnel: paid
GET /v1/safety/checksettled with tx0xd7bd01780b75d106fb3e286b6a3c55a78a6a486ee2cf439f4d2b3d8b5b1c28d7(Base mainnet, block 53162843, gas 83208). - Revenue ledger + treasury sweep + systemd auto-restart are part of the production deployment.
License
MIT
Frequently asked questions
What is Kaal Agent Safety (x402 paid MCP)?
Paid MCP tools for URL payment-safety scanning and provider recommendations; USDC on Base via x402.
How do I install Kaal Agent Safety (x402 paid MCP)?
It runs as a remote server. In Claude Code: claude mcp add --transport http kaal-agent-safety-x402-paid-mcp 'https://places-wayne-experiment-facial.trycloudflare.com/mcp'. For other clients, paste the JSON configuration from this page into their MCP settings.
Does Kaal Agent Safety (x402 paid MCP) need an API key?
Its registry entry lists no required key or secret. Some features may still need an account with the service it connects to.
Is Kaal Agent Safety (x402 paid MCP) open source?
Its code is public on GitHub, but the repository does not declare a standard license.
Who maintains Kaal Agent Safety (x402 paid MCP)?
It is published by immoney1. AI.tn lists it but does not maintain or endorse it.
From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.