
Security News
Ruby's Bundler 4.0.18 Extends Cooldown to bundle lock and bundle cache
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.
x402node-mcp
Advanced tools
MCP server exposing x402 paid APIs (cn402.com + x402node.dev) as MCP tools. Auto-discovers from CDP Bazaar. USDC micropayments on Base + Solana mainnet.
MCP server bringing hundreds of x402-paid APIs to AI agents (Claude, Cursor, MCP-aware clients). Auto-discovers tools from CDP Bazaar; handles USDC micropayments on Base + Solana.
Add to claude_desktop_config.json:
{
"mcpServers": {
"x402-mcp": {
"command": "npx",
"args": ["-y", "x402node-mcp"],
"env": { "X402_PRIVATE_KEY": "0xYOUR_BASE_PRIVATE_KEY" }
}
}
}
Set X402_PRIVATE_KEY to a Base EOA private key (hex, 0x-prefixed) with USDC on Base mainnet (Solana payment via SPL USDC also supported). Restart Claude Desktop. The server auto-discovers ~117 tools on first run.
MAX_PRICE_USD env var (default $0.10/call); calls above are blockedAgent calls tool -> HTTP 402 -> x402-fetch signs EIP-3009 -> CDP Facilitator settles on Base or Solana -> response returned. Buyer pays no gas.
git clone https://github.com/x402node/x402-mcp
cd x402-mcp
npm install
cp .env.example .env # edit X402_PRIVATE_KEY
node mcp-server.js
MIT
FAQs
MCP server exposing x402 paid APIs (cn402.com + x402node.dev) as MCP tools. Auto-discovers from CDP Bazaar. USDC micropayments on Base + Solana mainnet.
The npm package x402node-mcp receives a total of 39 weekly downloads. As such, x402node-mcp popularity was classified as not popular.
We found that x402node-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.

Security News
During a UK cyber test, a Mythos 5 agent used sockpuppets, social engineering, and prompt injection to try to get a maintainer to merge malware.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.