
Security News
White House Authorizes Private Companies to Conduct Offensive Cyber Operations
A new federal program will let vetted U.S. cybersecurity firms help investigate and disrupt foreign cybercrime groups under government direction.
spraay-x402-mcp
Advanced tools
Auto-syncing MCP server for the Spraay x402 Gateway. Auto-creates a wallet on first run — no env vars, just fund and go. Pay-per-call x402, USDC, no API keys.
Full-stack DeFi infrastructure for AI agents — 183 pay-per-call tools, backed by the 192-endpoint Spraay x402 Gateway on Base, with Solana, Ethereum, XRP, and Stellar payment rails.
Connect Claude, Cursor, or any MCP client to onchain payments, batch payouts, swaps, bridging, payroll, invoicing, escrow, oracle data, analytics, 200+ AI models, GPU/compute, research APIs, search/RAG, and more. Agents pay USDC per request via the x402 protocol — no API keys, no accounts.
The tool list is generated from the live gateway manifest at build time (
npm run sync), so the authoritative catalog and pricing always live at the gateway — see Tool catalog. 24 of the gateway's endpoints are free (no payment required).
Install and go — no config, no API keys, no env vars. On first run the
server auto-creates a wallet, saves it to ~/.spraay/.session, and prints the
address to stderr. Fund that address with USDC on Base and start calling tools.
Read Security & Wallet Safety — these tools move real funds.
claude mcp add spraay -s user -- npx -y spraay-x402-mcp
Cursor (.cursor/mcp.json) or Claude Desktop (claude_desktop_config.json):
{
"mcpServers": {
"spraay": {
"command": "npx",
"args": ["-y", "spraay-x402-mcp"]
}
}
}
That's it. The first run prints something like:
💧 Spraay created a new wallet: 0xABC…123
Private key saved to ~/.spraay/.session (keep it safe — it controls funds).
Fund this address with USDC on Base to start paying for tool calls.
To sign with a key you already control instead of the auto-created one, set
EVM_PRIVATE_KEY in your environment (it overrides the session wallet).
Never paste a raw key into a committed config file — use a dedicated hot
wallet funded only with what the agent may spend. See
Security & Wallet Safety.
Settlement is handled gateway-side; your client never holds a signing key.
{
"mcpServers": {
"spraay": {
"url": "https://spraay-x402-mcp--plagtech.run.tools"
}
}
}
smithery mcp add Plagtech/Spraay-x402-mcp
git clone https://github.com/plagtech/spraay-x402-mcp
cd spraay-x402-mcp
npm install
npm run build
npm start # auto-creates a wallet on first run
183 tools spanning the gateway's 33 categories. Highlights by area:
| Area | What it covers |
|---|---|
| AI & Inference | 200+ LLMs (OpenAI-compatible), wallet/tx classification, contract explanation, summaries |
| Compute | Text / image / video / TTS / STT / embeddings across Replicate, Chutes, OpenRouter; batch jobs |
| Compute Futures | Prepaid compute credits with tier discounts; draw down per inference |
| Bittensor | Decentralized inference, image gen, and embeddings via SN64 / SN19 |
| Payments | Batch payouts up to 200 recipients (Base, XRP Ledger, Stellar); estimates |
| Payroll | Stablecoin payroll runs across Base, Ethereum, Solana |
| Invoicing & Escrow | Crypto-native invoices and milestone escrow (persistent) |
| DeFi & Data | Swaps (Uniswap V3 / Aerodrome), oracle prices/gas/FX, bridge quotes, balances, ENS/Basename |
| Analytics | Wallet profiles and decoded transaction history |
| Research | 250M+ papers (OpenAlex), arXiv, Crossref, PubMed, PubChem, US Census, dictionary |
| Search & RAG | Web search, content extraction, question answering |
| Communication | Email, SMS, XMTP messaging, webhooks |
| Infrastructure | Multi-chain RPC, IPFS/Arweave storage, cron scheduling, structured logs |
| Identity & Compliance | KYC/sanctions screening, auth sessions, audit trail, crypto tax (FIFO, IRS 8949) |
| Supply Chain (SCTP) | Supplier registration, purchase orders, invoice verification, settlement |
| Robotics (RTP) | Register robots, dispatch paid tasks, escrow-backed completion |
| Trust & Safety | ProofLayer trust scores; free token-safety, address-safety, and tx-decode checks |
24 free endpoints require no payment — gas/prices/chain-status, address & batch validation, ENS resolution, unit conversion, x402 discovery probes, and model/compute discovery.
For the exact, current tool list and per-tool pricing, query the live manifest:
curl https://gateway.spraay.app/.well-known/x402.json
Pricing ranges from $0.001 (reads) to ~$0.10 (payroll, escrow release, tax), settled in USDC on Base.
spraay_batch_execute).402 Payment Required with a USDC amount.@x402/axios signs a USDC micropayment from the auto-created
(or overridden) wallet.These tools can initiate real USDC payments. Treat the server like any tool with funds access.
~/.spraay/.session. Protect that file like any
secret — anyone who reads it controls the wallet. It's written with 0600
permissions on POSIX systems. Back it up if the funds matter; delete it to
rotate to a new wallet on the next run.EVM_PRIVATE_KEY, use a dedicated hot wallet
that controls no other assets, and never put a raw private key in a config
file, issue, or any committed file — keep it in your shell environment only.The published npm package ships only dist/, README, and LICENSE (verify
with npm pack --dry-run) — no binaries, no build tooling, no install scripts.
Report security issues to security@spraay.app, not a public issue.
None are required — the server runs with zero configuration. All of the following are optional overrides.
| Variable | Required | Default | Description |
|---|---|---|---|
EVM_PRIVATE_KEY | No | auto-created at ~/.spraay/.session | Override the auto-created wallet with your own key. Use a dedicated, funded-as-needed hot wallet. |
SPRAAY_GATEWAY_URL | No | https://gateway.spraay.app | Override the gateway URL. |
MIT
FAQs
Auto-syncing MCP server for the Spraay x402 Gateway. Auto-creates a wallet on first run — no env vars, just fund and go. Pay-per-call x402, USDC, no API keys.
We found that spraay-x402-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
A new federal program will let vetted U.S. cybersecurity firms help investigate and disrupt foreign cybercrime groups under government direction.

Research
/Security News
The campaign amassed more than 75,000 installs by targeting Russian-speaking users seeking access to blocked services.

Company News
Open source maintainers are under more pressure than ever. We're raising our open source program from the Team plan to the Business plan, free.