
402sentinel Mcp
A risk gatekeeper for x402 payments that scores counterparties before your agent sends money. It exposes seven tools: assess_counterparty and assess_counterparty_deep return 0–100 risk scores based on on-chain settlement behavior on Base, recommend_policy generates wallet spending caps and denylists, and report_outcome feeds a delivery feedback loop. The firewall tools catch fraudulent routing, prompt injection payments, and drain attempts by comparing against your agent's payment history. Calls cost $0.002 to $0.02 paid via Circle Gateway in USDC. Reach for this when building autonomous agents that need programmatic spend controls tied to counterparty reputation, not just static allowlists.
- GitHub stars
- 1
- tools
- 10
- auth
- Secret needed
- transport
- STDIO
- env vars
- 2
- last updated
- Oct 19, 2026
Tools
10 toolsPublic tool metadata for what this MCP can expose to an agent.
assess_counterpartyRisk score + decision + a ready-to-apply recommended_policy for vetting the seller.
Risk score + decision + a ready-to-apply recommended_policy for vetting the seller.
No parameter schema in public metadata yet.
assess_counterparty_deepSame as assess_counterparty, scanning more on-chain history.
Same as assess_counterparty, scanning more on-chain history.
No parameter schema in public metadata yet.
recommend_policyReturns decision and a wallet-ready spending policy (caps, denylist, approval).
Returns decision and a wallet-ready spending policy (caps, denylist, approval).
No parameter schema in public metadata yet.
report_outcomeAfter paying, reports delivery outcome to train the reliability flywheel.
After paying, reports delivery outcome to train the reliability flywheel.
No parameter schema in public metadata yet.
firewallChecks whether the agent should make this payment now, catching fraudulent routing, drain velocity, overcharge, and injection-sourced instructions.
Checks whether the agent should make this payment now, catching fraudulent routing, drain velocity, overcharge, and injection-sourced instructions.
No parameter schema in public metadata yet.
firewall_recordSeeds the agent's payment history so the firewall has a behavioural baseline.
Seeds the agent's payment history so the firewall has a behavioural baseline.
No parameter schema in public metadata yet.
firewall_outcomeReports what actually happened after a firewall verdict so the firewall learns which signals are predictive.
Reports what actually happened after a firewall verdict so the firewall learns which signals are predictive.
No parameter schema in public metadata yet.
assess_rwaRWA risk gate that scores a tokenized asset before buying it.
RWA risk gate that scores a tokenized asset before buying it.
No parameter schema in public metadata yet.
compliance_checkPre-pay compliance screen covering OFAC sanctions, counterparty due-diligence tier, structuring detection, and FATF Travel-Rule threshold.
Pre-pay compliance screen covering OFAC sanctions, counterparty due-diligence tier, structuring detection, and FATF Travel-Rule threshold.
No parameter schema in public metadata yet.
verify_serviceOpt-in 402Sentinel Verified badge: submits a payTo for a deep settlement-graph audit.
Opt-in 402Sentinel Verified badge: submits a payTo for a deep settlement-graph audit.
No parameter schema in public metadata yet.
Sponsors
Configuration
CLIENT_PRIVATE_KEY*secretA Base wallet holding USDC on-chain (no gas needed) — pays per call, from $0.002.
SENTINEL_URL*Required since 0.9.0 (the hosted service was retired on 2026-10-31): base URL of a 402Sentinel server you trust. 402sentinel.com is refused.
Readme
402sentinel-mcp
[!WARNING] Retirement notice. The 402Sentinel service this package talks to (402sentinel.com) will be retired on 31 October 2026, and the domain will not be renewed (it lapses in May 2027). After 31 October the default endpoint stops answering; after May 2027 the domain may be controlled by someone else. This package can make x402 payments, so do not keep a version that defaults to 402sentinel.com — uninstall it, or point it only at an endpoint you trust. The package is deprecated; the code stays here under its licence.
0.9.0 (final release): there is no default endpoint any more, and
402sentinel.comis refused even if you set it, so this version can never send requests or payments to the retired domain. SetSENTINEL_URLonly to a server you run and trust.
Details
- Repository
- github.com/kaditang/402sentinel-mcp
- Category
- Finance & Commerce
- Package
@kaditang/402sentinel-mcp- Transport
- STDIO
- Auth
- Required
- Registry
- MCP registry, active