
Company News
Socket Joins New OpenJS Program to Fund Node.js Security Work
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.
genesis402-mcp
Advanced tools
Genesis402: pay-per-call APIs for AI agents over x402. MCP server for twin.unykorn.org: 360 endpoints (DeFi and market data, SEC financials, wallet and token risk signals from public data, web and domain lookups, AI text tools, multi-chain reads). Quote-o
Genesis402: pay-per-call APIs for AI agents over x402.
This is the MCP server for the Genesis402 rail: 360 pay-per-call endpoints covering DeFi and market data, SEC financials, wallet and token risk signals from public data, web and domain lookups, AI text tools, and multi-chain reads across EVM chains, Solana, Bitcoin, Stellar and the XRP Ledger.
Pay only for the call you make: no account, no subscription, no API key. Prices from $0.001 per call, shown before you pay. This package pays in USDC on Base via x402 v2.
Quote-only by default: nothing is signed or paid until you turn paying on and set a price cap.
Out of the box every paid tool returns the price quote and stops. To enable payment you must
set both GENESIS402_LIVE=1 and GENESIS402_PAYER_KEY. Even then, any quote above
GENESIS402_MAX_USD (default $0.25) is refused rather than paid.
The rail sets the price. This client never does; it only decides whether to accept it.
Connect any MCP client that supports streamable HTTP to https://twin.unykorn.org/mcp. It exposes the same 14 tools over all 360 endpoints.
@x402/fetch
or a CDP/AgentKit wallet) and call the tool again with payment_signature.// Claude Desktop: claude_desktop_config.json
// Cursor: .cursor/mcp.json
{
"mcpServers": {
"genesis402": {
"command": "npx",
"args": ["-y", "genesis402-mcp"]
}
}
}
That configuration can browse the catalog and see prices, and cannot spend anything.
To let it pay:
{
"mcpServers": {
"genesis402": {
"command": "npx",
"args": ["-y", "genesis402-mcp"],
"env": {
"GENESIS402_LIVE": "1",
"GENESIS402_PAYER_KEY": "0x<a funding key you are willing to spend from>",
"GENESIS402_MAX_USD": "0.05"
}
}
}
}
Use a dedicated key holding a few dollars of USDC on Base, never your main wallet.
Each paid tool's description carries its live price, read from the rail's
/.well-known/x402 manifest at startup, so a price change on the rail never leaves this
client advertising a stale number.
| Tool | Cost | What it does |
|---|---|---|
genesis402_catalog | free | Every endpoint with price, title, path and parameters. Call first. |
genesis402_receipt | free | A paid-call receipt by id from the public receipts feed. |
genesis402_call | per endpoint | Call any of the 360 endpoints by name. |
genesis402_wallet_brief | paid | Wallet risk signals in one call: public sanctions-list check, 10-chain scan, activity and summary, with an evidence hash. |
genesis402_token_brief | paid | Token pre-trade check: metadata, price, holder concentration, source verification, sanctions-list signal. |
genesis402_screen_sanctions | paid | Public-data sanctions-list signal: OFAC SDN digital-currency entries and community blocklists. |
genesis402_multi_chain_scan | paid | One call across 10 EVM chains for a single address. |
genesis402_defi_yields | paid | DeFi yields from 15,000+ pools, filterable by chain, protocol, token, stablecoin-only and minimum TVL. |
genesis402_sec_financials | paid | As-reported fundamentals for a US public company from SEC XBRL. |
genesis402_email_check | paid | Email/domain deliverability: MX, provider, SPF, DMARC, disposable flag. |
genesis402_whois | paid | Domain registrar, age, expiry, status and nameservers via RDAP. |
genesis402_extract_json | paid | Extract your fields from any text as JSON; missing fields are null, never invented. |
genesis402_web_extract | paid | Any public web page as clean text, title, headings and links. |
genesis402_prove | paid | A signed Ed25519 receipt binding your SHA-256 digest (or text) to a settled payment. |
/__validate first. Bad input is
refused before a quote is even requested.One payment buys exactly one execution; re-presenting it returns 409.
prove records a claim; it does not evaluate it. The receipt chain is not externally
anchored: a valid receipt shows the rail issued it and has not altered it, not that the
rail could not have back-dated its own chain.| Variable | Default | Meaning |
|---|---|---|
GENESIS402_ORIGIN | https://twin.unykorn.org | Rail origin. |
GENESIS402_LIVE | unset | 1 enables payment. Anything else is quote-only. |
GENESIS402_PAYER_KEY | unset | Private key that funds calls. Required for live mode. |
GENESIS402_MAX_USD | 0.25 | Hard cap per call. Quotes above this are refused. |
node smoke.mjs # read-only checks against the live rail; never pays
node boot-test.mjs # boots over stdio and lists the tools a client would see
UnyKorn LLC (Wyoming). MIT licensed.
Discovery: /.well-known/x402 ·
Receipts: /receipts
FAQs
Genesis402: pay-per-call APIs for AI agents over x402. MCP server for twin.unykorn.org: 360 endpoints (DeFi and market data, SEC financials, wallet and token risk signals from public data, web and domain lookups, AI text tools, multi-chain reads). Quote-o
We found that genesis402-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Company News
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.