# x402 Supply

MCP tools for AI agents. Paid calls use x402 (USDC on Base) with no accounts
or API keys. Endpoint Diligence's compare_price and reseller_check previews are
free (30 calls per IP per UTC day each); full check_endpoint reports remain
$0.02/call.

Payment flow: call the endpoint -> HTTP 402 with a signed payment challenge
-> pay in USDC on Base -> retry with an X-PAYMENT header -> result.
Every HTTP endpoint below takes a POST with a JSON body and answers 402 until paid.
Protocol: https://www.x402.org/

Trust leaderboard (free):
- https://x402supply.com/trust — human-readable leaderboard and evidence pages
- https://x402supply.com/trust.json — machine-readable leaderboard
- https://x402supply.com/badge/<origin-host>.svg — embeddable score badge

Weekly market report (free):
- https://x402supply.com/reports — latest weekly x402 market report
- https://x402supply.com/reports/<date> — a specific week's report

## Entity Resolve
endpoint: https://entity-resolve.x402supply.com/mcp
price: $0.02/call
openapi: https://entity-resolve.x402supply.com/openapi.json
description: Blocks by normalized token prefix, scores with Jaro-Winkler + token-set matching (exact on email/phone), unions matches above threshold, and returns a merged canonical record per cluster with a confidence score. Deterministic, no LLM calls. Up to 10,000 records per call.
http endpoints:
- POST https://entity-resolve.x402supply.com/tools/resolve

## HTS Classify
endpoint: https://hts-classify.x402supply.com/mcp
price: $0.10/call
openapi: https://hts-classify.x402supply.com/openapi.json
description: Deterministic BM25 retrieval over the full USITC HTS schedule with heading-agreement boosting, returning the full parent-chain description, general duty rate, and a score-gap confidence per candidate.
http endpoints:
- POST https://hts-classify.x402supply.com/tools/classify
- POST https://hts-classify.x402supply.com/tools/classify_bulk
disclaimer: Informational classification aid, not a customs ruling. Verify with a licensed customs broker for binding classification.

## Chess Eval
endpoint: https://chess-eval.x402supply.com/mcp
price: $0.01/call
openapi: https://chess-eval.x402supply.com/openapi.json
description: Real Stockfish 10 (single-threaded asm.js, no SharedArrayBuffer/Worker requirement) runs in-isolate per call. `evaluate_position` returns best move, centipawn/mate score, principal variation, and up to 5 distinct multipv lines; `best_line` plays out the predicted line as SAN moves with a per-ply eval. FEN is validated strictly (piece placement, castling rights, en-passant, side-to-move-in-check) before the engine runs. Depth capped at 18 with a ~9.5s wall-clock budget per call — a deep request may return early with `depthReached` below the requested depth and `timedOut: true` rather than being killed mid-flight.
http endpoints:
- POST https://chess-eval.x402supply.com/tools/evaluate_position
- POST https://chess-eval.x402supply.com/tools/best_line

## PII Redact
endpoint: https://pii-redact.x402supply.com/mcp
price: $0.02/call
openapi: https://pii-redact.x402supply.com/openapi.json
description: Recognizers are pure pattern/checksum matching (regex + Luhn/mod-97/SSN-area validation) — no LLM calls, no external services. Person names and dates of birth are matched only via nearby context (e.g. 'Mr. Smith', 'DOB: ...'), not general NER, to keep false positives low.
http endpoints:
- POST https://pii-redact.x402supply.com/tools/redact

## Endpoint Diligence
endpoint: https://diligence.x402supply.com/mcp
price: compare_price + reseller_check free (30/IP/day each); check_endpoint $0.02/call
openapi: https://diligence.x402supply.com/openapi.json
description: Free compare_price calls expose category market percentiles; free reseller_check calls compare a live 402 challenge or supplied description against a dated upstream API catalog and report possible resemblance plus markup math without asserting resale as fact. Paid check_endpoint live-probes the endpoint's 402 challenge for x402 spec compliance (v2/v1-legacy detection, scheme/network/asset/amount/payTo validation), checks its price against market percentiles from our daily x402 doodlebug snapshot, inspects the payTo address on Base (contract/EOA, USDC balance, recent transfer activity via public RPC), checks third-party directory presence (x402scan + our own market baseline), and checks infra hygiene (HTTPS, free-host domains, domain age via RDAP), and includes the full reseller/markup evidence. Returns a 0-100 score, pass/caution/fail verdict, and per-check evidence — never a fabricated claim, unreachable sub-checks report 'unknown' rather than being scored against the endpoint.
http endpoints:
- POST https://diligence.x402supply.com/tools/check_endpoint
- POST https://diligence.x402supply.com/tools/compare_price (free, 30 per IP per day)
- POST https://diligence.x402supply.com/tools/reseller_check (free, 30 per IP per day)

## Page Extract
endpoint: https://page-extract.x402supply.com/mcp
price: $0.01/call
openapi: https://page-extract.x402supply.com/openapi.json
description: Fetches a URL and runs deterministic, pure-JS extraction (Readability-based article parsing with a hand-rolled boilerplate-stripper fallback for thin/non-article pages) to return markdown and/or plain text, title, byline, language, an excerpt, word count, OpenGraph/canonical meta, and a link census (internal/external counts, up to 10 absolute top links). Static HTML only, no JS rendering. An SSRF guard blocks private/reserved network targets — including decimal/octal/hex-encoded raw-IP forms — re-checked on every redirect hop; non-HTML responses, responses over 2MB, and fetch failures/timeouts return a structured error instead of partial data.
http endpoints:
- POST https://page-extract.x402supply.com/tools/page_extract

## Polymarket Snapshot
endpoint: https://polymarket-snapshot.x402supply.com/mcp
price: $0.005/call
openapi: https://polymarket-snapshot.x402supply.com/openapi.json
description: `search_markets` searches Polymarket markets by text (optional `active`, `limit` 1-25, and `order` by volume24hr, liquidity or endDate) and returns each market with current outcome prices (YES/NO or multi-outcome), 24h volume, total volume, liquidity, end date, closed/resolved status and the resolved outcome. `get_market` fetches one market by slug or id and, with `includeBook`, adds best bid, best ask, spread and the top 5 order-book levels per outcome token from the Polymarket CLOB. Every response carries the upstream `source` URLs and an `asOf` timestamp. Live passthrough of Polymarket's free public read APIs, no LLM. Malformed input returns `bad_request` (400), an unknown slug/id `not_found` (404), and Polymarket 429/5xx/network/timeout failures `upstream_failed` (502); a query with no matches returns an empty list.
http endpoints:
- POST https://polymarket-snapshot.x402supply.com/tools/search_markets
- POST https://polymarket-snapshot.x402supply.com/tools/get_market
disclaimer: Read-only market data, not financial advice. Prices are a point-in-time snapshot and can change within seconds. Verify on polymarket.com before relying on any figure.

## Treasury Yield Curve
endpoint: https://treasury-yield-curve.x402supply.com/mcp
price: $0.005/call
openapi: https://treasury-yield-curve.x402supply.com/openapi.json
description: Treasury Yield Curve returns the official daily US Treasury par yield curve (1mo to 30yr, percent) from home.treasury.gov. `yield_curve` gives one date or the latest; weekends and holidays resolve to the nearest prior business day and say so. `yield_curve_history` returns up to 31 days of curves. Every response carries source URLs and an asOf timestamp. Data from U.S. Treasury; not financial advice.
http endpoints:
- POST https://treasury-yield-curve.x402supply.com/tools/yield_curve
- POST https://treasury-yield-curve.x402supply.com/tools/yield_curve_history
disclaimer: Data from U.S. Treasury; not financial advice. Par yields are published end-of-day and may be revised.

## HTTP Security Headers Grade
endpoint: https://http-security-headers-grade.x402supply.com/mcp
price: $0.01/call
openapi: https://http-security-headers-grade.x402supply.com/openapi.json
description: HTTP Security Headers Grade fetches a public URL (GET, up to 5 redirects, headers only, 10s timeout) and grades its security headers from A+ to F. It checks HSTS (max-age, includeSubDomains, preload), CSP (presence, unsafe-inline, wildcards), X-Frame-Options or frame-ancestors, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, COOP, COEP, CORP and Set-Cookie flags. Returns score, present and missing lists, per-header findings and copy-paste fix values. SSRF-guarded.
http endpoints:
- POST https://http-security-headers-grade.x402supply.com/tools/grade_headers
disclaimer: Passive header inspection of a single response only. A high grade is not a security audit; it does not test application vulnerabilities.

## Protocol TVL Brief
endpoint: https://protocol-tvl-brief.x402supply.com/mcp
price: $0.01/call
openapi: https://protocol-tvl-brief.x402supply.com/openapi.json
description: Protocol TVL Brief returns a compact DeFi protocol brief from DefiLlama. `protocol_brief` takes a protocol slug or name and returns current TVL, 1d/7d/30d TVL change, TVL by chain, category, chains, audit links, fees and revenue for 24h/7d/30d where available, and the DefiLlama URL. `find_protocol` resolves a name to candidate slugs. Summaries only, never raw history. Data by DefiLlama (defillama.com). Not financial advice.
http endpoints:
- POST https://protocol-tvl-brief.x402supply.com/tools/protocol_brief
- POST https://protocol-tvl-brief.x402supply.com/tools/find_protocol
disclaimer: Informational only, not financial advice. Data is provided by DefiLlama and may be delayed or incomplete. Verify before relying on it.

## SEC EDGAR
endpoint: https://sec-edgar.x402supply.com/mcp
price: $0.01/call
openapi: https://sec-edgar.x402supply.com/openapi.json
description: SEC EDGAR resolves a ticker, CIK or fuzzy company name to the 10-digit CIK, tickers, exchange, legal name and SIC code (`resolve_company`), lists filings by form type and date range with direct document links (`list_filings`), and decodes recent 8-K item codes into plain-English events (`recent_8k_events`). All data comes from SEC EDGAR (sec.gov, data.sec.gov), fetched live and rate-limited to SEC fair-access rules. Every response carries source URLs and asOf.
http endpoints:
- POST https://sec-edgar.x402supply.com/tools/resolve_company
- POST https://sec-edgar.x402supply.com/tools/list_filings
- POST https://sec-edgar.x402supply.com/tools/recent_8k_events
disclaimer: Informational only, not investment or legal advice. Data comes from SEC EDGAR and may lag the filing by minutes. Verify against the filing before relying on it.

## Timezone Convert
endpoint: https://timezone-convert.x402supply.com/mcp
price: $0.005/call
openapi: https://timezone-convert.x402supply.com/openapi.json
description: Timezone Convert uses IANA tzdata. `convert_time` converts one local time to up to 20 zones with offset, abbreviation and DST flag, and explicitly flags nonexistent (spring-forward) and ambiguous (fall-back) times. `zone_info` returns a zone's current offset, DST rules and transition instants for a year. `overlap_hours` finds shared working hours across 2-10 zones. Unknown zones return close-match suggestions. Deterministic, no LLM, no network.
http endpoints:
- POST https://timezone-convert.x402supply.com/tools/convert_time
- POST https://timezone-convert.x402supply.com/tools/zone_info
- POST https://timezone-convert.x402supply.com/tools/overlap_hours
disclaimer: Based on the IANA tz database shipped with the runtime. Governments change rules with short notice; verify critical scheduling against local authorities.

## Token Verdict
endpoint: https://token-verdict.x402supply.com/mcp
price: $0.01/call
openapi: https://token-verdict.x402supply.com/openapi.json
description: Token Verdict screens a Base (8453) ERC20 by contract address. `token_verdict` returns a 0-100 rug-risk score and A-F grade from ERC20 shape, honeypot-style fee/limit selectors, DEX liquidity, pair age and 24h market data. Admin powers (proxy, owner, mint, blacklist, pause) are reported separately with evidence and never graded. Known issuers (USDC, EURC, cbBTC, WETH) are labeled. Unknown never counts against the token. Deterministic, no LLM.
http endpoints:
- POST https://token-verdict.x402supply.com/tools/token_verdict
disclaimer: Automated, rules-based screen of public onchain data. Not financial advice and not a security audit. A pass does not mean a token is safe, and unknown checks are excluded from the score.

## Token Facts
endpoint: https://token-facts.x402supply.com/mcp
price: $0.005/call
openapi: https://token-facts.x402supply.com/openapi.json
description: Token Facts reads a Base (8453) ERC20 straight from chain via public JSON-RPC. `token_facts` returns ERC20 shape, honeypot-style fee/limit selectors and an ungraded admin-powers profile (proxy, owner, mint, blacklist, pause) with raw evidence per check. No DEX data, so no grade: grade is n/a. Known issuers (USDC, EURC, cbBTC, WETH) are labeled. Cheaper than token_verdict. Deterministic, no LLM.
http endpoints:
- POST https://token-facts.x402supply.com/tools/token_facts
disclaimer: Automated, rules-based screen of public onchain data. Not financial advice and not a security audit. A pass does not mean a token is safe, and unknown checks are excluded from the score.

Discovery (free, no payment required):
- POST {jsonrpc: "2.0", id: 1, method: "tools/list", params: {}} to any
  endpoint above for its full input schema.
- GET <endpoint-without-/mcp>/openapi.json for an OpenAPI 3.1 document with
  pricing, schema, and agent-facing usage guidance.