SPORE x402 Attestation
Signed x402 attestations and bounty-packet preflight checks, paid per call in USDC on Base.
Should I use this
Quality & Safety
Findings (4)
- LOWin approval-check
- LOWin dns-preflight
- LOWin base-wallet-lens
- LOWin endpoint-check
Based on automated analysis of tool definitions and protocol compliance.
Context Cost
This is the approximate number of tokens consumed each time the server's tools are loaded into a model's context. Higher counts reduce the attention available for other tasks.
Install
One-Click Install
Add this to your `claude_desktop_config.json` file:
{
"mcpServers": {
"x402-attestation": {
"url": "https://spore-x402.worker.beacon.host/mcp"
}
}
}Remote endpoints
https://spore-x402.worker.beacon.host/mcpstreamable-httpWhat it can do
Tool inventory
Tools (6)
⚪x402_attest(subject)
Signed x402-v2 attestation of a subject/delivery packet: artifact URLs live, sha256 digests match the bound refs, report coherent with evidence.
Input Schema
{
"type": "object",
"properties": {
"subject": {
"type": "string"
}
},
"required": [
"subject"
]
}⚪x402_preflight(packet)
Preflight-verify a bounty delivery packet before claim/payout (reachability + digest binding + report/evidence coherence) -> signed verdict.
Input Schema
{
"type": "object",
"properties": {
"packet": {
"type": "object"
}
},
"required": [
"packet"
]
}🟢approval-check(owner, spender, token)
Check a token approval before signing it: reads the ERC-20 allowance (owner -> spender) live on Base and returns the raw allowance, an unlimited-approval flag and a risk verdict. Read-only, no keys, no transaction.
Input Schema
{
"type": "object",
"properties": {
"owner": {
"type": "string",
"description": "ERC-20 token owner address (0x + 40 hex)."
},
"spender": {
"type": "string",
"description": "Spender address whose allowance is checked."
},
"token": {
"type": "string",
"description": "ERC-20 token address. Defaults to USDC on Base."
}
},
"required": [
"owner",
"spender"
]
}⚪dns-preflight(domain)
DNS MX TXT A records domain lookup with an email-deliverability verdict: A records, MX hosts, SPF (v=spf1) and DMARC policy, CAA, plus a signed ok/warn/fail verdict.
Input Schema
{
"type": "object",
"properties": {
"domain": {
"type": "string",
"description": "Domain to check (e.g. example.com)."
}
},
"required": [
"domain"
]
}🟢base-wallet-lens(address)
Base wallet balances USDC ERC20 portfolio snapshot: live USDC / WETH / DAI balances, ETH balance, nonce and tx count for any Base address. Read-only.
Input Schema
{
"type": "object",
"properties": {
"address": {
"type": "string",
"description": "Base address to read (0x + 40 hex)."
}
},
"required": [
"address"
]
}🟡endpoint-check(url)
Check an x402 endpoint before paying it: fetch the unpaid 402 challenge of any x402 URL and verify it is payable and safe - HTTP 402, a parseable x402 v1/v2 challenge, network, asset, payTo, amount, whether the advertised resource URL is the URL you actually called, manifest consistency (/.well-known/x402.json), header-size overflow risk for Node clients, and a signed pay / caution / avoid verdict. Read-only: we never send a payment.
Input Schema
{
"type": "object",
"properties": {
"url": {
"type": "string",
"description": "x402 URL to check before paying it."
}
},
"required": [
"url"
]
}Community
Evidence