From f512e13d7d787f8a7f9e236df36adf1491252838 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=C5=9E=C3=BCkr=C3=BC=20K=C3=9C=C3=87=C3=9CK?= Date: Wed, 24 Jun 2026 19:00:00 +0300 Subject: [PATCH 1/3] Create x402 Bazaar Plugin documentation Added x402 Bazaar Plugin documentation for read-only onchain data and AI reports. --- skills/base-mcp/plugins/x402-bazaar.md | 88 ++++++++++++++++++++++++++ 1 file changed, 88 insertions(+) create mode 100644 skills/base-mcp/plugins/x402-bazaar.md diff --git a/skills/base-mcp/plugins/x402-bazaar.md b/skills/base-mcp/plugins/x402-bazaar.md new file mode 100644 index 0000000..8c808fa --- /dev/null +++ b/skills/base-mcp/plugins/x402-bazaar.md @@ -0,0 +1,88 @@ +--- +title: "x402 Bazaar Plugin" +description: "Read-only onchain data & AI reports for Base (token risk, wallet intelligence, OFAC sanctions, prices, NFTs) via the x402-bazaar-mcp server; paid per call in USDC over x402. Returns data only — makes no Base MCP transaction." +tags: [data, token-risk, wallet-intel, compliance, x402] +name: x402-bazaar +version: 0.1.0 +integration: external-mcp +chains: [base] +requires: + shell: none + allowlist: [] + externalMcp: x402-bazaar-mcp + cliPackage: null +auth: none +risk: [] +--- + +# x402 Bazaar Plugin + +> [!IMPORTANT] +> Run Base MCP onboarding first (see SKILL.md). This plugin is read-only — it +> returns intelligence the user/agent can act on; it never builds a transaction. + +## Overview + +x402 Bazaar is a pay-per-call API marketplace on Base exposing 40+ read-only +services — token safety (risk, honeypot, rug score), wallet intelligence (net +worth, age/activity, approvals, transfers, NFTs), OFAC sanctions screening, +prices/momentum/pools, and Claude-written AI token & wallet reports. It is +reached through the **`x402-bazaar-mcp`** server. Each call settles a tiny USDC +micro-payment over **x402** on Base (gasless for the payer; the wallet key never +leaves the caller's machine). It complements Base MCP: Base MCP lets an agent +*act*, x402 Bazaar lets it *know what to act on*. No onchain transaction is +produced, so no `send_calls` handoff occurs. + +## Detection + +Consider this plugin available when the host has the `x402-bazaar` MCP server +connected (tools prefixed `x402-bazaar` / e.g. `token_risk`, `ai_token_report`, +`wallet_networth`). The agent reads the MCP's own tool catalog at runtime; the +live service list is also at `https://402.com.tr/.well-known/x402`. + +## Installation + +Add the MCP server to the host config (Claude Desktop / Cursor / any MCP client): + +```json +{ + "mcpServers": { + "x402-bazaar": { + "command": "npx", + "args": ["-y", "x402-bazaar-mcp"], + "env": { "AGENT_PRIVATE_KEY": "0xYOUR_BASE_WALLET_KEY" } + } + } +} +``` + +The wallet needs only USDC on Base. Package: `x402-bazaar-mcp` (npm) · +registry `io.github.sukrutkrdg/x402-bazaar-mcp`. + +## Surface Routing + +| Capability | Surface | Execution path | +|---|---|---| +| Any read (token/wallet/compliance/AI report) | MCP client (Claude Desktop, Cursor, Code) | `x402-bazaar` MCP tool → pays x402 → returns JSON | +| Same | chat-only host without the MCP server | Not available — instruct the user to add `x402-bazaar-mcp` (see Installation) | + +Shell-less fallback: none required — all access is via the MCP server's tools. + +## Orchestration + +1. Confirm the `x402-bazaar` MCP server is connected (Detection); if not, point the user to Installation. +2. Pick the tool matching the user's intent (e.g. `ai_token_report` for "is this token safe?", `wallet_networth` for "what's in this wallet?", `sanctions` for OFAC screening). +3. Call the tool with the address/params; the server settles the x402 USDC micro-payment and returns JSON. +4. Use the returned data in the answer. If the user then wants to act (swap, send), hand that off to Base MCP separately — this plugin does not transact. + +## Submission + +Tool: `none`. This plugin is read-only; it returns data and never calls a Base +MCP submission tool (`send_calls`/`swap`/`sign`). + +## Example Prompts + +1. "Is `0x…` a safe token to buy on Base?" → call `ai_token_report` (or `token_risk` + `token_price`), summarize the verdict and risks. +2. "Screen `0x…` for OFAC sanctions before I send funds." → call `sanctions` (or `compliance_check`); report blocked/clear. +3. "Profile wallet `0x…` — net worth, age, what can drain it." → call `wallet_networth`, `wallet_summary`, `token_approvals`; summarize. +4. "What's the 24h price & momentum of `0x…`?" → call `token_momentum`; report price and 1h/6h/24h change. From dd295532a9b29c93b619747401449116ace3d404 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=C5=9E=C3=BCkr=C3=BC=20K=C3=9C=C3=87=C3=9CK?= Date: Wed, 24 Jun 2026 19:05:12 +0300 Subject: [PATCH 2/3] Add x402 Bazaar plugin information to SKILL.md --- skills/base-mcp/SKILL.md | 1 + 1 file changed, 1 insertion(+) diff --git a/skills/base-mcp/SKILL.md b/skills/base-mcp/SKILL.md index 6f4831f..0706593 100644 --- a/skills/base-mcp/SKILL.md +++ b/skills/base-mcp/SKILL.md @@ -83,6 +83,7 @@ Plugins currently maintained alongside this skill (the **native plugins**). Use | [Uniswap](plugins/uniswap.md) | Swap tokens or manage Uniswap liquidity positions. | Token swaps, approval checks, V2/V3/V4 LP create/increase/decrease/collect flows. | Base only. Quotes can move; confirm slippage and token/position details before writes. | | [Venice](plugins/venice.md) | Run private AI inference or media generation on Venice, optionally funded with x402. | Text and media inference via the Venice API, optional Base x402 wallet funding. | Base only. Requires SIWE login; inference handles personal data and paid calls are irreversible. | | [Virtuals](plugins/virtuals.md) | Create or operate Virtuals AI agents, payment cards, or agent email. | Agent management, card setup and limits, email inbox/thread actions, SIWE login. | Requires the Virtuals MCP and a signed login. Handles personal data; avoid exposing tokens, OTPs, card details, or email contents unnecessarily. | +| [x402 Bazaar](plugins/x402-bazaar.md) | Get onchain data or AI reports on Base — token risk/safety, wallet net worth & activity, OFAC sanctions, prices, NFTs. | Token risk & rug score, AI token/wallet reports, OFAC screening, net worth, approvals, transfers, prices, NFT floor. | Base only. Read-only (no transactions); paid per call in USDC over x402 via the x402-bazaar-mcp server. | | [YO](plugins/yo.md) | View YO vaults, check positions, deposit, or request redeem on YO yield vaults. | ERC-4626 vault reads via `chain_rpc_request`, deposit, request redeem via `send_calls`. | Multi-chain (Base, Ethereum, Arbitrum). Deposits and redeems are irreversible; confirm amounts and vault before writes. | Load a plugin reference only once the user has named the platform it covers (per the routing rule above), following the same local-first, web-fallback rule as references (see [Loading referenced files](#loading-referenced-files) above). For a plugin's own external tools, defer to the plugin file first, then to any CLI help, API schema, or MCP tool descriptions it explicitly tells you to use. From 887bf83fadcc6a9051a6fda89ca089341ad792ed Mon Sep 17 00:00:00 2001 From: sukrutkrdg Date: Wed, 8 Jul 2026 16:54:16 +0300 Subject: [PATCH 3/3] x402 Bazaar plugin: add B20 token safety (first B20-aware freeze/seize check) --- skills/base-mcp/plugins/x402-bazaar.md | 13 +++++++++---- 1 file changed, 9 insertions(+), 4 deletions(-) diff --git a/skills/base-mcp/plugins/x402-bazaar.md b/skills/base-mcp/plugins/x402-bazaar.md index 8c808fa..6c4877b 100644 --- a/skills/base-mcp/plugins/x402-bazaar.md +++ b/skills/base-mcp/plugins/x402-bazaar.md @@ -1,7 +1,7 @@ --- title: "x402 Bazaar Plugin" -description: "Read-only onchain data & AI reports for Base (token risk, wallet intelligence, OFAC sanctions, prices, NFTs) via the x402-bazaar-mcp server; paid per call in USDC over x402. Returns data only — makes no Base MCP transaction." -tags: [data, token-risk, wallet-intel, compliance, x402] +description: "Read-only onchain data & AI reports for Base (token risk, B20 token safety, wallet intelligence, OFAC sanctions, prices, NFTs) via the x402-bazaar-mcp server; paid per call in USDC over x402. Returns data only — makes no Base MCP transaction." +tags: [data, token-risk, b20, wallet-intel, compliance, x402] name: x402-bazaar version: 0.1.0 integration: external-mcp @@ -23,10 +23,14 @@ risk: [] ## Overview -x402 Bazaar is a pay-per-call API marketplace on Base exposing 40+ read-only +x402 Bazaar is a pay-per-call API marketplace on Base exposing 60+ read-only services — token safety (risk, honeypot, rug score), wallet intelligence (net worth, age/activity, approvals, transfers, NFTs), OFAC sanctions screening, -prices/momentum/pools, and Claude-written AI token & wallet reports. It is +prices/momentum/pools, and Claude-written AI token & wallet reports. It also +ships the first **B20-aware** safety check: B20 is Base's native token standard +(live 2026-07-08), and unlike ERC-20 a B20 issuer can freeze or seize a holder's +balance at the protocol level (Policy Registry / `burnBlocked`) — `b20_safety` +reads those powers into one hold/caution/avoid verdict. It is reached through the **`x402-bazaar-mcp`** server. Each call settles a tiny USDC micro-payment over **x402** on Base (gasless for the payer; the wallet key never leaves the caller's machine). It complements Base MCP: Base MCP lets an agent @@ -86,3 +90,4 @@ MCP submission tool (`send_calls`/`swap`/`sign`). 2. "Screen `0x…` for OFAC sanctions before I send funds." → call `sanctions` (or `compliance_check`); report blocked/clear. 3. "Profile wallet `0x…` — net worth, age, what can drain it." → call `wallet_networth`, `wallet_summary`, `token_approvals`; summarize. 4. "What's the 24h price & momentum of `0x…`?" → call `token_momentum`; report price and 1h/6h/24h change. +5. "Is `0x…` a B20 token that can freeze or seize my funds?" → call `b20_safety`; report the hold/caution/avoid verdict and which issuer powers (freeze / seize / pause / rebase) are live.