CIPHER x402 MCP

An open-source MCP server that exposes eight tools for Solana wallet scanning, password breach checking, Jito tip calculation, GitHub repo health, FRED macro data, Drift exposure, security audits, and premium content. It implements x402 protocol for automatic USDC payments on Base per tool call, supporting both local stdio and remote HTTP transports.

Endpoint and access

No sign-in to connect and list tools. Individual tools may still need a vendor account, credentials, or permissions; check the documented prerequisites.

Community listingStreamable HTTPNo sign-inEndpoint checked 2026-11-07Published by cryptomotifs

You need:Prerequisites Node.js 20+ (22 recommended) npm 10+ A Vercel account (free tier) if you want to deploy the HTTP transport

MCP endpoint (Streamable HTTP)

https://cipher-x402-mcp.vercel.app/mcp

Vendor documentation

What its tools do

15 tools, grouped by the hints the server advertises. Hints are self-declared, not verified behavior.

Not annotated (15)

solana_wallet_scan
check_password_breach
jito_tip_calculator
github_repo_health
fred_macro_series
check_drift_exposure
solana_wallet_security_audit_rules
audit_comp_live_listings
coinalyze_funding_rates
get_premium_cipher_chapter
pubmed_medical_search
osm_geocode
osm_reverse_geocode
usda_food_nutrition
openfda_adverse_events

15 of 15 have a description · 0 of 15 declare behavior hints · 13 of 13 with parameters document them all

Checks and signals

Each line is separate evidence, not a trust score.

Passed Endpoint answered the live check · Nov 7, 2026, 9:57 AM UTC
Availability 1 of 1 checks passed in 30 days

What you can do with it

Scan Solana wallet addresses for security risks
Check if passwords have been breached
Calculate Jito tips based on pool depth
Retrieve macro economic data from FRED

Source and maintenance

Community listingRegistry 0.1.0

mcp-registry: io.github.cryptomotifs/cipher-x402-mcp@0.1.0 Source repository Project website

Maintenance checked: Nov 7, 2026, 6:23 AM UTC

Protocol and capabilities

Server: cipher-x402-mcp 0.1.0
MCP protocol negotiated in check: 2025-11-25
Tools: 15 advertised
Resources: Not advertised
Resource templates: Not advertised
Prompts: Not advertised

Server-advertised capabilities

{
  "tools": {}
}

Tools

15 advertised

solana_wallet_scan

Advertised by the server during the last successful anonymous check.

Scan a Solana wallet for portfolio value, dust accounts, stale stake accounts, and low-liquidity position warnings. Returns findings + referral CTAs. Priced at $0.01 USDC on Base (x402). Pass a signed x402 v2 authorization as the '_payment' argument to unlock the paid response. Without it, the tool returns the 402 accept-list for your wallet to sign.

solana_wallet_scan input schema

{
  "type": "object",
  "required": [
    "address"
  ],
  "properties": {
    "address": {
      "type": "string",
      "description": "Base58 Solana wallet address (32-44 chars)."
    },
    "_payment": {
      "type": "string",
      "description": "Optional. Signed x402 v2 X-PAYMENT header value (base64-encoded EIP-3009 authorization). If present, forwarded upstream; if absent, tool returns the 402 accept-list."
    }
  }
}

check_password_breach

Advertised by the server during the last successful anonymous check.

Check whether a password hash prefix (SHA-1, first 5 chars) appears in the HIBP breach corpus. k-anonymity, no plaintext passwords sent. Priced at $0.005 USDC on Base (x402). Pass a signed x402 v2 authorization as the '_payment' argument to unlock the paid response. Without it, the tool returns the 402 accept-list for your wallet to sign.

check_password_breach input schema

{
  "type": "object",
  "required": [
    "sha1_prefix"
  ],
  "properties": {
    "_payment": {
      "type": "string",
      "description": "Optional. Signed x402 v2 X-PAYMENT header value (base64-encoded EIP-3009 authorization). If present, forwarded upstream; if absent, tool returns the 402 accept-list."
    },
    "sha1_prefix": {
      "type": "string",
      "pattern": "^[0-9A-Fa-f]{5}$",
      "description": "First 5 uppercase hex characters of the SHA-1 hash of the password (e.g. '21BD1')."
    }
  }
}

jito_tip_calculator

Advertised by the server during the last successful anonymous check.

Compute an expected-value-maximizing Jito tip for a Solana arbitrage bundle. Inputs: pool_depth (USD), expected_profit (USD), slot_probability [0..1]. Returns tip lamports + EV breakdown. Priced at $0.01 USDC on Base (x402). Pass a signed x402 v2 authorization as the '_payment' argument to unlock the paid response. Without it, the tool returns the 402 accept-list for your wallet to sign.

jito_tip_calculator input schema

{
  "type": "object",
  "required": [
    "pool_depth",
    "expected_profit",
    "slot_prob"
  ],
  "properties": {
    "_payment": {
      "type": "string",
      "description": "Optional. Signed x402 v2 X-PAYMENT header value (base64-encoded EIP-3009 authorization). If present, forwarded upstream; if absent, tool returns the 402 accept-list."
    },
    "slot_prob": {
      "type": "number",
      "maximum": 1,
      "minimum": 0,
      "description": "Probability the leader slot is a Jito validator [0..1]."
    },
    "pool_depth": {
      "type": "number",
      "description": "Target pool depth in USD."
    },
    "expected_profit": {
      "type": "number",
      "description": "Gross expected profit of the bundle in USD."
    }
  }
}

github_repo_health

Advertised by the server during the last successful anonymous check.

Score a GitHub repository's health — commit cadence, issue-close latency, contributor diversity, CI green rate, release frequency. Returns 0-100 health score with per-factor breakdown. Priced at $0.02 USDC on Base (x402). Pass a signed x402 v2 authorization as the '_payment' argument to unlock the paid response. Without it, the tool returns the 402 accept-list for your wallet to sign.

github_repo_health input schema

{
  "type": "object",
  "required": [
    "owner",
    "repo"
  ],
  "properties": {
    "repo": {
      "type": "string",
      "description": "Repo name (e.g. 'solana')."
    },
    "owner": {
      "type": "string",
      "description": "GitHub org or user (e.g. 'solana-labs')."
    },
    "_payment": {
      "type": "string",
      "description": "Optional. Signed x402 v2 X-PAYMENT header value (base64-encoded EIP-3009 authorization). If present, forwarded upstream; if absent, tool returns the 402 accept-list."
    }
  }
}

fred_macro_series

Advertised by the server during the last successful anonymous check.

Fetch a Federal Reserve Economic Data (FRED) series by ID — e.g. 'DGS10' (10Y yield), 'WALCL' (Fed balance sheet), 'T10Y2Y' (yield curve). Returns cleaned latest observations. Priced at $0.005 USDC on Base (x402). Pass a signed x402 v2 authorization as the '_payment' argument to unlock the paid response. Without it, the tool returns the 402 accept-list for your wallet to sign.

fred_macro_series input schema

{
  "type": "object",
  "required": [
    "series_id"
  ],
  "properties": {
    "_payment": {
      "type": "string",
      "description": "Optional. Signed x402 v2 X-PAYMENT header value (base64-encoded EIP-3009 authorization). If present, forwarded upstream; if absent, tool returns the 402 accept-list."
    },
    "series_id": {
      "type": "string",
      "description": "FRED series ID (e.g. 'DGS10', 'WALCL', 'T10Y2Y', 'DFF')."
    }
  }
}

check_drift_exposure

Advertised by the server during the last successful anonymous check.

Check a Solana wallet's exposure to Drift Protocol — open perp positions, collateral, unrealized PnL, liquidation risk distance. Priced at $0.01 USDC on Base (x402). Pass a signed x402 v2 authorization as the '_payment' argument to unlock the paid response. Without it, the tool returns the 402 accept-list for your wallet to sign.

check_drift_exposure input schema

{
  "type": "object",
  "required": [
    "wallet"
  ],
  "properties": {
    "wallet": {
      "type": "string",
      "description": "Base58 Solana wallet address."
    },
    "_payment": {
      "type": "string",
      "description": "Optional. Signed x402 v2 X-PAYMENT header value (base64-encoded EIP-3009 authorization). If present, forwarded upstream; if absent, tool returns the 402 accept-list."
    }
  }
}

solana_wallet_security_audit_rules

Advertised by the server during the last successful anonymous check.

Return metadata for the cipher-solana-wallet-audit v1.4.0 ruleset — the free MIT GitHub Action that catches Solana wallet anti-patterns in CI: plaintext private keys (base58 OR hex), seed phrases (in comments OR string literals), Anchor.toml wallet leaks, Token2022 transfer-hook abuse, Drift-hack-derived admin bundles, leaked .env files, hardcoded RPC URLs. Free, no payment required.

solana_wallet_security_audit_rules input schema

{
  "type": "object",
  "required": [],
  "properties": {}
}

audit_comp_live_listings

Advertised by the server during the last successful anonymous check.

Return a curated snapshot of currently-live audit competitions and bug-bounty programs across Code4rena, Cantina, Sherlock, and direct-protocol channels. Useful for solo wardens triaging which contests to enter. Snapshot updates with each cipher-x402-mcp release; treat the data as a hint, always cross-check the platform before submitting. Free, no payment required.

audit_comp_live_listings input schema

{
  "type": "object",
  "required": [],
  "properties": {}
}

coinalyze_funding_rates

Advertised by the server during the last successful anonymous check.

Fetch perpetual-futures funding-rate intelligence for a given base asset (e.g. 'BTC', 'ETH', 'SOL') aggregated across 17 major perp venues — Binance, Bybit, OKX, BitMEX, Deribit, dYdX, Hyperliquid, Bitfinex, Huobi, Kraken, Phemex, WOO X, Aster, Lighter, Coinbase, Gate.io, Vertex. Returns per-exchange rate + USD open interest, OI-weighted aggregate funding, divergence in bps, and max/min funding exchange — pre-computed for perp-arbitrage bots. Priced at $0.01 USDC on Base (x402). Pass a signed x402 v2 authorization as the '_payment' argument to unlock the paid response. Without it, the tool returns the 402 accept-list for your wallet to sign.

coinalyze_funding_rates input schema

{
  "type": "object",
  "required": [
    "symbol"
  ],
  "properties": {
    "symbol": {
      "type": "string",
      "pattern": "^[A-Za-z0-9]{1,12}$",
      "description": "Base asset ticker (1-12 alphanumerics), e.g. 'BTC', 'ETH', 'SOL', 'DOGE', 'XRP', 'AVAX', 'LINK', 'APT', 'SUI'."
    },
    "_payment": {
      "type": "string",
      "description": "Optional. Signed x402 v2 X-PAYMENT header value (base64-encoded EIP-3009 authorization). If present, forwarded upstream; if absent, tool returns the 402 accept-list."
    }
  }
}

get_premium_cipher_chapter

Advertised by the server during the last successful anonymous check.

Fetch a CIPHER premium chapter (markdown). Four chapters available: 'mev-deep-dive', 'three-tier-wallet', 'canadian-compliance', 'oracle-cloud-free-tier'. Priced at $0.25 USDC on Base (x402) per chapter. Pass a signed x402 v2 authorization as the '_payment' argument to unlock the paid response. Without it, the tool returns the 402 accept-list for your wallet to sign.

get_premium_cipher_chapter input schema

{
  "type": "object",
  "required": [
    "slug"
  ],
  "properties": {
    "slug": {
      "enum": [
        "mev-deep-dive",
        "three-tier-wallet",
        "canadian-compliance",
        "oracle-cloud-free-tier"
      ],
      "type": "string",
      "description": "Chapter slug: 'mev-deep-dive' | 'three-tier-wallet' | 'canadian-compliance' | 'oracle-cloud-free-tier'."
    },
    "_payment": {
      "type": "string",
      "description": "Optional. Signed x402 v2 X-PAYMENT header value (base64-encoded EIP-3009 authorization). If present, forwarded upstream; if absent, tool returns the 402 accept-list."
    }
  }
}

pubmed_medical_search

Advertised by the server during the last successful anonymous check.

Search PubMed (NCBI) for medical / life-sciences literature by keyword. Returns enriched article list: pmid, title, authors, journal, year, pub_types, plus a year-range + has-meta-analysis / has-review enrichment block. Ideal for medical RAG agents. Priced at $0.005 USDC on Base (x402). Pass a signed x402 v2 authorization as the '_payment' argument to unlock the paid response. Without it, the tool returns the 402 accept-list for your wallet to sign.

pubmed_medical_search input schema

{
  "type": "object",
  "required": [
    "term"
  ],
  "properties": {
    "term": {
      "type": "string",
      "description": "Free-text biomedical query (e.g. 'metformin liver', 'semaglutide cardiovascular outcomes')."
    },
    "retmax": {
      "type": "number",
      "maximum": 20,
      "minimum": 1,
      "description": "Max articles to return (1-20). Default 5."
    },
    "_payment": {
      "type": "string",
      "description": "Optional. Signed x402 v2 X-PAYMENT header value (base64-encoded EIP-3009 authorization). If present, forwarded upstream; if absent, tool returns the 402 accept-list."
    }
  }
}

osm_geocode

Advertised by the server during the last successful anonymous check.

Forward geocoding via OpenStreetMap Nominatim. Address string → lat/lon + normalized address block (country_code, state, city, postcode, road) + match_quality label. Priced at $0.001 USDC on Base (x402). Pass a signed x402 v2 authorization as the '_payment' argument to unlock the paid response. Without it, the tool returns the 402 accept-list for your wallet to sign.

osm_geocode input schema

{
  "type": "object",
  "required": [
    "q"
  ],
  "properties": {
    "q": {
      "type": "string",
      "description": "Address to geocode (e.g. '1600 Pennsylvania Ave NW, Washington DC')."
    },
    "_payment": {
      "type": "string",
      "description": "Optional. Signed x402 v2 X-PAYMENT header value (base64-encoded EIP-3009 authorization). If present, forwarded upstream; if absent, tool returns the 402 accept-list."
    }
  }
}

osm_reverse_geocode

Advertised by the server during the last successful anonymous check.

Reverse geocoding via OpenStreetMap Nominatim. lat/lon → normalized address + place class/type. Priced at $0.001 USDC on Base (x402). Pass a signed x402 v2 authorization as the '_payment' argument to unlock the paid response. Without it, the tool returns the 402 accept-list for your wallet to sign.

osm_reverse_geocode input schema

{
  "type": "object",
  "required": [
    "lat",
    "lon"
  ],
  "properties": {
    "lat": {
      "type": "number",
      "description": "Latitude (WGS84)."
    },
    "lon": {
      "type": "number",
      "description": "Longitude (WGS84)."
    },
    "_payment": {
      "type": "string",
      "description": "Optional. Signed x402 v2 X-PAYMENT header value (base64-encoded EIP-3009 authorization). If present, forwarded upstream; if absent, tool returns the 402 accept-list."
    }
  }
}

usda_food_nutrition

Advertised by the server during the last successful anonymous check.

USDA FoodData Central nutrition lookup. Query any food (brand or generic) and receive the best-matching record with a clean per_100g macro block (calories_kcal, protein_g, carb_g, fat_g, fiber_g, sugar_g, potassium_mg), plus alternates. Priced at $0.002 USDC on Base (x402). Pass a signed x402 v2 authorization as the '_payment' argument to unlock the paid response. Without it, the tool returns the 402 accept-list for your wallet to sign.

usda_food_nutrition input schema

{
  "type": "object",
  "required": [
    "query"
  ],
  "properties": {
    "limit": {
      "type": "number",
      "maximum": 10,
      "minimum": 1,
      "description": "Alternates to return (1-10). Default 5."
    },
    "query": {
      "type": "string",
      "description": "Food name (e.g. 'banana', 'chicken breast raw')."
    },
    "_payment": {
      "type": "string",
      "description": "Optional. Signed x402 v2 X-PAYMENT header value (base64-encoded EIP-3009 authorization). If present, forwarded upstream; if absent, tool returns the 402 accept-list."
    }
  }
}

openfda_adverse_events

Advertised by the server during the last successful anonymous check.

openFDA drug adverse-event lookup for the last 12 months. Returns top reactions, report count, and seriousness breakdown (serious vs non-serious). Searches brand, generic, and medicinal-product names in parallel. Priced at $0.005 USDC on Base (x402). Pass a signed x402 v2 authorization as the '_payment' argument to unlock the paid response. Without it, the tool returns the 402 accept-list for your wallet to sign.

openfda_adverse_events input schema

{
  "type": "object",
  "required": [
    "drug"
  ],
  "properties": {
    "drug": {
      "type": "string",
      "description": "Drug name (brand or generic), e.g. 'ozempic', 'metformin'."
    },
    "limit": {
      "type": "number",
      "maximum": 25,
      "minimum": 1,
      "description": "Top-reaction count to return (1-25). Default 10."
    },
    "_payment": {
      "type": "string",
      "description": "Optional. Signed x402 v2 X-PAYMENT header value (base64-encoded EIP-3009 authorization). If present, forwarded upstream; if absent, tool returns the 402 accept-list."
    }
  }
}

Prompts

Not advertised

No prompt definitions available.

Resources

Not advertised

No resource definitions available.

90-day uptime

A lightweight connection check about every six hours, sampled on hosts with many listings. It shows the server answered, not that its tools work.

Too few checks for a percentage yet (1 of 1 answered).

2026-11-07: 1 of 1 checks answered

30-day availability

Aggregated from read-only remote checks; this is not a tool-execution or security guarantee.

Successful checks: 1 of 1 (100%)
Average latency: 1530 ms
95th percentile latency: 1530 ms

Maintenance history

Public check and source-refresh events. Editorial and ownership records remain private.

Nov 7, 2026, 9:57 AM UTC · probe · passed · 1530 ms · metadata changed · 15 tool(s)

Connect from your client

Each snippet registers the same endpoint; pick the client you use.

This server is operated by the named third party. Listing and endpoint checks are not an endorsement or a security audit. Review the operator's permissions, terms, and data handling before connecting. How listings are checked and corrected.

Claude Code

Run this once in a terminal. It registers the remote server. Use --scope project to write .mcp.json for the repo.

Claude Code configuration

claude mcp add --transport http cipher-x402-mcp https://cipher-x402-mcp.vercel.app/mcp

Codex

Run this once. Codex stores MCP servers in ~/.codex/config.toml (or .codex/config.toml in a trusted project).

Codex configuration

codex mcp add cipher-x402-mcp --url https://cipher-x402-mcp.vercel.app/mcp

Cursor

Merge this server into .cursor/mcp.json in your project, then enable cipher-x402-mcp in your MCP settings.

Cursor configuration

{
  "mcpServers": {
    "cipher-x402-mcp": {
      "url": "https://cipher-x402-mcp.vercel.app/mcp"
    }
  }
}

Cline

Merge this into cline_mcp_settings.json (Cline → MCP Servers → Configure).

Cline configuration

{
  "mcpServers": {
    "cipher-x402-mcp": {
      "type": "streamableHttp",
      "url": "https://cipher-x402-mcp.vercel.app/mcp",
      "disabled": false
    }
  }
}

VS Code

Merge this server into .vscode/mcp.json. Use MCP: List Servers to start cipher-x402-mcp and inspect its tools.

VS Code configuration

{
  "servers": {
    "cipher-x402-mcp": {
      "type": "http",
      "url": "https://cipher-x402-mcp.vercel.app/mcp"
    }
  }
}

Gemini CLI

Run this once. It writes .gemini/settings.json in the current project; pass --scope user for ~/.gemini/settings.json.

Gemini CLI configuration

gemini mcp add --transport http cipher-x402-mcp https://cipher-x402-mcp.vercel.app/mcp

Claude Desktop

Open Claude Settings > Connectors > Add custom connector, enter this server URL and enable it for the conversation. This is a manual remote-connector handoff, not a desktop JSON configuration.

Claude Desktop configuration

https://cipher-x402-mcp.vercel.app/mcp

Windsurf

Merge this into ~/.codeium/windsurf/mcp_config.json, then refresh MCP in Cascade. Windsurf remote servers use serverUrl, not url.

Windsurf configuration

{
  "mcpServers": {
    "cipher-x402-mcp": {
      "serverUrl": "https://cipher-x402-mcp.vercel.app/mcp"
    }
  }
}

Let your agent find its tools

Find servers like CIPHER x402 MCP from your agent. Add Koskamo once to search the index for endpoints, access requirements, and client setup. Public discovery needs no key.

Connect Koskamo Explore workflows