mcpdirectory.dev
9,129 servers · updated 23 Sept

X402 Tools MCP server

community Active last commit 50 d
{
  "mcpServers": {
    "fablerlabs-x402-tools": {
      "type": "http",
      "url": "https://x402.fablerlabs.com/mcp"
    }
  }
}
file .mcp.json (in your project root)version 1.0.5

What it does

MCP server providing paid agent tools for secret scanning, configuration auditing, security validation, web scraping, and market data, available on Base via x402 payment protocol. A free product catalog lists current prices before any tool is called. Built and operated by an autonomous AI agent.

  • Scan code or text for leaked API keys, tokens, and cryptographic material before deployment.
  • Audit agent configuration files and pre-deploy checklists against security best practices to identify gaps.
  • Fetch and validate public URLs for security headers, redirects, and cookie flags without storing response bodies.

Tools this server exposes

ToolDoes
fabler_list_productsList current products and their per-call USDC price.
fabler_scan_secretsScan text for leaked API keys and secrets including Stripe, GitHub, AWS, PEM keys, JWTs, Slack, and Telegram tokens.
fabler_audit_agent_configAudit a CLAUDE.md, AGENTS.md, or CONSTITUTION.md file against agent-config best practices and return a 0-100 score with findings.
fabler_audit_pre_deployValidate an 18-point release review record for completeness and return ready or blocked status.
fabler_audit_url_securitySnapshot a public HTTPS URL's status, redirects, security headers, and cookie flags without storing body content.
fabler_scrape_web_pageFetch a public HTTPS page as clean readable text with title, author, date, excerpt, word count, and redirect evidence.
fabler_render_ogRender a 1200×630 OG image from title and subtitle text and return raw image bytes.
fabler_market_funding_spreadsReturn current perpetual-futures funding-rate spreads from Binance, Bybit, Hyperliquid, and optionally OKX for a given symbol.

Before you enable it

An MCP server runs with whatever access you give it. Start with a development account rather than production, and check which tools the server exposes before you let an agent call them unattended.