
Research
/Security News
737 Chrome VPN Extensions Linked to Brand Impersonation and Browser Traffic Redirection
The campaign amassed more than 75,000 installs by targeting Russian-speaking users seeking access to blocked services.
@suimpp/discovery
Advanced tools
Sui-specific discovery validation for MPP servers — validate OpenAPI documents and probe 402 payment challenges
Sui-specific discovery validation for MPP servers. Validate OpenAPI documents, check x-payment-info extensions, and probe 402 payment challenges.
# Full validation — OpenAPI + live 402 probe
npx @suimpp/discovery check mpp.t2000.ai
# List paid endpoints only
npx @suimpp/discovery discover mpp.t2000.ai
# Machine-readable JSON
npx @suimpp/discovery check mpp.t2000.ai --json
t2000 MPP Gateway v1.0.0
https://mpp.t2000.ai/openapi.json
Endpoints: 88 total, 88 paid
POST /openai/v1/chat/completions $0.01
POST /openai/v1/embeddings $0.001
...
Discovery
✓ OpenAPI valid
Probe https://mpp.t2000.ai/openai/v1/chat/completions
✓ 402 with Sui payment challenge
Recipient: 0x...
Currency: 0xdba...::usdc::USDC
Realm: mpp.t2000.ai
✓ All checks passed
import { check, discover, probe } from '@suimpp/discovery';
// Full validation
const result = await check('mpp.t2000.ai');
console.log(result.ok); // true
console.log(result.summary.errors); // 0
// Discovery only (no probe)
const disc = await discover('mpp.t2000.ai');
for (const ep of disc.endpoints) {
console.log(ep.method, ep.path, ep.paymentInfo.price);
}
// Probe a specific endpoint
const probeResult = await probe(
'https://mpp.t2000.ai/openai/v1/chat/completions',
'https://mpp.t2000.ai',
);
console.log(probeResult.hasSuiPayment); // true
console.log(probeResult.recipient); // 0x...
x-payment-info on paid operationsprotocols includes "mpp"402 response definedrequestBody on POST/PUT/PATCHx-guidance or x-service-info presentWWW-Authenticate header)0x...)| Code | Severity | Description |
|---|---|---|
OPENAPI_FETCH_FAILED | error | Could not fetch /openapi.json |
OPENAPI_VERSION_INVALID | error | Not OpenAPI 3.1.x |
NO_PAID_ENDPOINTS | error | No operations with x-payment-info |
MISSING_402_RESPONSE | error | Paid operation missing 402 response |
MISSING_REQUEST_BODY | warning | POST/PUT/PATCH without requestBody |
MISSING_PROTOCOLS | warning | No protocols field in x-payment-info |
PROTOCOL_NOT_MPP | error | protocols does not include "mpp" |
MISSING_PRICING | error | Fixed pricing with no price |
HIGH_ROUTE_COUNT | warning | >80 paid routes |
PROBE_NOT_402 | error | Endpoint did not return 402 |
PROBE_INVALID_RECIPIENT | error | Not a valid Sui address |
PROBE_UNKNOWN_CURRENCY | warning | Unrecognized Sui token type |
PROBE_REALM_MISMATCH | error | Realm doesn't match origin |
pnpm --filter @suimpp/discovery test # 19 tests
pnpm --filter @suimpp/discovery typecheck
MIT
FAQs
Sui-specific discovery validation for MPP servers — validate OpenAPI documents and probe 402 payment challenges
We found that @suimpp/discovery demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
The campaign amassed more than 75,000 installs by targeting Russian-speaking users seeking access to blocked services.

Company News
Open source maintainers are under more pressure than ever. We're raising our open source program from the Team plan to the Business plan, free.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.