
Company News
AWS Security Hub Adds Socket for Supply Chain Security
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.
agentx402-mcp-server
Advanced tools
The execution layer for AI agent commerce. 100+ DeFi adapters across 20+ chains (BTC, EVM, Starknet via NEAR MPC) with signed receipts on every action. The full loop: discover skills, pay via x402, run under ShadeGuard policy + Intel TDX TEE, receive File
Policy-gated, receipt-backed x402 execution for AI agents — ShadeGuard before funds move, TEE-attested runs, verifiable proof. Thin stdio wrapper for the live YieldAgentX402 MCP endpoint.
Proof: 16 tools · 18 chains · no custody · signed receipts on every call.
Docs · Try without signup · Get API Key · What is x402?
The yax_get_capabilities tool is public — you can discover everything before you ever sign up.
curl -X POST https://api.yieldagentx402.app/mcp \
-H "Content-Type: application/json" \
-d '{"jsonrpc":"2.0","id":1,"method":"tools/call",
"params":{"name":"yax_get_capabilities","arguments":{}}}'
Returns: differentiators (pitch), proof_points (16 tools · 18 chains · no custody · signed receipts), security posture, and live infra status.
Works with Claude Desktop, Claude Code, Cursor, Windsurf, Zed, and any MCP 2025-03-26 stdio client.
{
"mcpServers": {
"yieldagentx402": {
"command": "npx",
"args": ["-y", "agentx402-mcp-server"],
"env": {
"YAX_API_KEY": "yax_live_...",
"YAX_AGENT_ID": "optional-agent-id"
}
}
}
}
Get an API key at https://yieldagentx402.app/apply (or call POST /api/agent-onboard for instant demo credentials).
| Category | Tools |
|---|---|
| Discovery (public, no auth) | yax_get_capabilities |
| Wallet & custody | yax_get_wallet_status — returns Shade Agent MPC addresses on EVM + BTC + Starknet |
| Execution | yax_run_secure_workflow, yax_process_x402_payment |
| Policy & governance | yax_check_policy, yax_run_compliance_monitor, yax_get_attestation |
| Receipts & audit | yax_get_receipt, yax_verify_receipt, yax_list_runs |
| Workflows | yax_score_leads, yax_enrich_lead_data, yax_build_email_sequence, yax_monitor_churn_risk, yax_collect_ar_invoices, yax_forecast_cash_flow |
Every tool call is:
mrEnclave verifiable at /api/tee/report)The Shade Agent (NEAR chain signatures) derives payment addresses on demand — no private keys held anywhere.
| Chain | Address | Mode |
|---|---|---|
| EVM (Base/Eth) | 0x6905D04C3655625F6171f7b1e801a9325B1Fa1e8 | MPC-signed |
| Bitcoin (P2WPKH) | bc1qcd8ljsj7x0rq3sw7drrt7ragqmmt3tfsfxs6gy | MPC-signed |
| Starknet | 0x003a4e08…570906a21 | Stark curve, preset |
Live manifest: https://shade-agent-worker.cryptoblac.workers.dev/api/wallet
| Env var | Required | Default |
|---|---|---|
YAX_API_KEY | Yes (for non-public tools) | — |
YAX_AGENT_ID | No | — |
YAX_MCP_ENDPOINT | No | https://api.yieldagentx402.app/mcp |
YAX_API_BASE | No | (sets endpoint if YAX_MCP_ENDPOINT unset) |
agentx402-mcp-server (this package)fabianjefferson2/agentx402-mcp-server — direct gateway listinghttps://api.yieldagentx402.app/mcp (Streamable HTTP, MCP 2025-03-26)#21702 (separate from Stacks #32 / TRON #1)npm install
npm run build
npm start
The package is intentionally thin. Tool discovery and tool calls are provided by the public YieldAgentX402 MCP endpoint, so the local package stays truthful as the hosted server evolves.
MIT
FAQs
The execution layer for AI agent commerce. 100+ DeFi adapters across 20+ chains (BTC, EVM, Starknet via NEAR MPC) with signed receipts on every action. The full loop: discover skills, pay via x402, run under ShadeGuard policy + Intel TDX TEE, receive File
We found that agentx402-mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.

Research
/Security News
Popular npm packages keyv and cacheable compromised.

Security News
A misconfiguration gave three Anthropic models internet access, and one, believing it was in a simulation, shipped a credential-stealing package to PyPI.