x402 payment firewall + Agent Credit Bureau. Invoice/verify/score via RLUSD on XRPL.
Maintain this server? Claim it
Call this server's tools from your browser. Nothing to install.
Requests go through mcptry because browsers can't call most MCP servers directly. Header values are sent to the server for that request only and are never stored or logged.
Tool list from our last check. Connect live to refresh it.
Full credit bureau report: score breakdown, spend history, risk factors. Cost: 0.01 RLUSD.
This tool isn't marked read-only, so it may change something on the server or in an account you connected.
Pick your client. Values in capitals, like YOUR_TOKEN, are yours to fill in.
claude mcp add --transport http 402proof 'https://four02proof.onrender.com/mcp?registry=scriptmasterlabs'
Full credit bureau report: score breakdown, spend history, risk factors. Cost: 0.01 RLUSD.
| Argument | Type | Description |
|---|---|---|
| wallet* | string | |
| payment_token | string |
{
"type": "object",
"required": [
"wallet"
],
"properties": {
"wallet": {
"type": "string"
},
"payment_token": {
"type": "string"
}
}
}Portable attestation JWT (24h TTL) proving creditworthiness. Cost: 0.01 RLUSD.
| Argument | Type | Description |
|---|---|---|
| wallet* | string | |
| payment_token | string |
{
"type": "object",
"required": [
"wallet"
],
"properties": {
"wallet": {
"type": "string"
},
"payment_token": {
"type": "string"
}
}
}FICO-style 300-850 Agent Credit Bureau score for any XRPL wallet. Includes grade and loyalty tier. Free.
| Argument | Type | Description |
|---|---|---|
| wallet* | string |
{
"type": "object",
"required": [
"wallet"
],
"properties": {
"wallet": {
"type": "string"
}
}
}Verify a bureau attestation JWT. Free.
| Argument | Type | Description |
|---|---|---|
| token* | string |
{
"type": "object",
"required": [
"token"
],
"properties": {
"token": {
"type": "string"
}
}
}Boolean creditworthiness check — is this wallet above a score threshold? Cost: 0.005 RLUSD.
| Argument | Type | Description |
|---|---|---|
| wallet* | string | |
| payment_token | string |
{
"type": "object",
"required": [
"wallet"
],
"properties": {
"wallet": {
"type": "string"
},
"payment_token": {
"type": "string"
}
}
}Loyalty tier and free-call balance for any XRPL wallet. Automatic — no registration. Free.
| Argument | Type | Description |
|---|---|---|
| wallet* | string |
{
"type": "object",
"required": [
"wallet"
],
"properties": {
"wallet": {
"type": "string"
}
}
}Full Agent Passport for any XRPL wallet: payment history, risk score 0-100, loyalty tier, passport hash. Free.
| Argument | Type | Description |
|---|---|---|
| wallet* | string |
{
"type": "object",
"required": [
"wallet"
],
"properties": {
"wallet": {
"type": "string"
}
}
}Retrieve a tamper-evident compliance receipt by UUID. Contains XRPL tx hash, agent wallet, endpoint, amount, and timestamp. Free.
| Argument | Type | Description |
|---|---|---|
| receipt_id* | string |
{
"type": "object",
"required": [
"receipt_id"
],
"properties": {
"receipt_id": {
"type": "string"
}
}
}Request a payment invoice for any SqueezeOS endpoint. Returns destination address, amount, and payment_options for XRPL (RLUSD or USDC), Xahau (native XAH), Base (USDC), or Solana (USDC-SPL). Pass currency='USDC' and chain='solana' for Solana; pass asset='XAH' (or chain='xahau') for the Xahau rail. Xahau invoices for third-party endpoints also return fee_required/fee_amount/fee_pay_to/fee_memo_hex: a flat 0.01 XAH facilitator fee paid as a second Xahau Payment (SML endpoints are fee-exempt; the XRPL rail has no facilitator fee). Free.
| Argument | Type | Description |
|---|---|---|
| asset | string | RLUSD (default, XRPL), USDC (XRPL/Base/Solana per chain), or XAH (Xahau) |
| chain | string | solana — use Solana USDC-SPL rail; base — use Base USDC rail; xrpl — use USDC on XRPL; xahau — use Xahau native-XAH rail |
| currency | string | USDC for Base/Solana rail; omit for RLUSD on XRPL |
| endpoint_id* | string | UUID of endpoint to pay for |
{
"type": "object",
"required": [
"endpoint_id"
],
"properties": {
"asset": {
"type": "string",
"description": "RLUSD (default, XRPL), USDC (XRPL/Base/Solana per chain), or XAH (Xahau)"
},
"chain": {
"type": "string",
"description": "solana — use Solana USDC-SPL rail; base — use Base USDC rail; xrpl — use USDC on XRPL; xahau — use Xahau native-XAH rail"
},
"currency": {
"type": "string",
"description": "USDC for Base/Solana rail; omit for RLUSD on XRPL"
},
"endpoint_id": {
"type": "string",
"description": "UUID of endpoint to pay for"
}
}
}Live 402Proof platform stats: total payments, volume, active agents. Free.
No arguments.
{
"type": "object",
"properties": {}
}Submit tx_hash after paying an invoice. Supports XRPL, Xahau, Base (0x… hash), and Solana. Returns a signed JWT access_token (1-hour TTL). For a Xahau invoice with fee_required=true, also submit fee_tx_hash (the 0.01 XAH facilitator-fee payment) — settlement requires both payments. Free.
| Argument | Type | Description |
|---|---|---|
| tx_hash* | string | XRPL/Xahau: 64-char hex; Base: 0x-prefixed hex; Solana: base58 signature |
| invoice_id* | string | |
| fee_tx_hash | string | Xahau only, when the invoice has fee_required=true: tx hash of the 0.01 XAH facilitator-fee payment to fee_pay_to carrying fee_memo_hex |
| agent_domain | string | |
| agent_wallet* | string | |
| recovery_secret* | string | Private high-entropy secret returned only with the original invoice; required to recover a previously settled token after lost response/restart |
{
"type": "object",
"required": [
"invoice_id",
"recovery_secret",
"tx_hash",
"agent_wallet"
],
"properties": {
"tx_hash": {
"type": "string",
"description": "XRPL/Xahau: 64-char hex; Base: 0x-prefixed hex; Solana: base58 signature"
},
"invoice_id": {
"type": "string"
},
"fee_tx_hash": {
"type": "string",
"description": "Xahau only, when the invoice has fee_required=true: tx hash of the 0.01 XAH facilitator-fee payment to fee_pay_to carrying fee_memo_hex"
},
"agent_domain": {
"type": "string"
},
"agent_wallet": {
"type": "string"
},
"recovery_secret": {
"type": "string",
"description": "Private high-entropy secret returned only with the original invoice; required to recover a previously settled token after lost response/restart"
}
}
}We read every tool's name, description and inputs the way the model will, looking for instructions hidden from you. A clean result means no warning signs, not a guarantee. Scanned Nov 1, 2026.
Takes a password, API key or token as an argument, so the secret passes through the model's context and chat logs.
Fix: Read credentials from the server's own configuration (environment, OAuth) instead of a tool argument.
No readOnlyHint / destructiveHint annotations, so clients can't tell a read from a write without asking.
Fix: Add annotations to each tool, e.g. { readOnlyHint: true } for tools that only read.