MCP Observatory
github analyzed 5e13fdb

0xAxiom/axiom-agentic-tools

github

x402-paid Base agent tools (USDC). 5 deterministic JSON-output MCP tools for builders shipping agentic services. No API keys, no accounts.

maintainer
0xAxiom
license
MIT
first seen
2026-06-03
last seen
2026-06-13
releases · 30d
0
short id

Drift inferred · capture-to-capture

  1. HIGH code analysis flagged committed secret, dynamic code execution in 0xAxiom/axiom-agentic-tools
  2. HIGH code analysis flagged committed secret ×2, dynamic code execution in 0xAxiom/axiom-agentic-tools
capabilities 0 tools
transport streamable-http · http verified reported listed in the official MCP registry counts 0 tools · 0 res · 0 prompts permission surface via code analysis

no tools enumerated yet for this server.

skills & danger signals github-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 5e13fdb · analyzer v18 · 3h ago

skills & prompt files 1

code evidence vHEAD · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

filesystem 7

  • fs 0xAxiom-axiom-agentic-tools-5e13fdb/api/_lib/registry.mjs :19 import { readdirSync, existsSync, statSync } from "node:fs";
  • fs 0xAxiom-axiom-agentic-tools-5e13fdb/api/manifest.mjs :1 import { readFileSync } from "fs";
  • fs 0xAxiom-axiom-agentic-tools-5e13fdb/scripts/generate-manifest.mjs :10 import { readdirSync, writeFileSync, mkdirSync, existsSync, statSync } from "node:fs";
  • fs 0xAxiom-axiom-agentic-tools-5e13fdb/scripts/hopper-settle.mjs :29 import { writeFileSync, mkdirSync, existsSync, readFileSync } from "node:fs";
  • fs 0xAxiom-axiom-agentic-tools-5e13fdb/scripts/report.mjs :20 import { readFileSync, existsSync } from "node:fs";
  • fs 0xAxiom-axiom-agentic-tools-5e13fdb/scripts/self-pay-first-settle.mjs :41 import { readFileSync, writeFileSync, existsSync, mkdirSync } from "node:fs";
  • fs 0xAxiom-axiom-agentic-tools-5e13fdb/scripts/validate.mjs :17 import { readdirSync, readFileSync, existsSync, statSync } from "node:fs";

shell / exec 1

  • shell 0xAxiom-axiom-agentic-tools-5e13fdb/tools/mcp-security-scanner/handler.mjs :28 { regex: /\bexec\s*\(/, title: "exec() reference in description", severity: "medium" },

network 13

  • net 0xAxiom-axiom-agentic-tools-5e13fdb/agentkit/index.mjs :160 const res = await fetch(url, {
  • net 0xAxiom-axiom-agentic-tools-5e13fdb/api/_lib/code-samples.mjs :45 `# Pay with @x402/fetch (below).`,
  • net 0xAxiom-axiom-agentic-tools-5e13fdb/api/_lib/x402.mjs :336 const r = await fetch(`${FACILITATOR_URL}${path}`, {
  • net 0xAxiom-axiom-agentic-tools-5e13fdb/scripts/check-bazaar-indexing.mjs :24 const r = await fetch(url, { headers: { accept: "application/json" } });
  • net 0xAxiom-axiom-agentic-tools-5e13fdb/scripts/hopper-settle.mjs :32 import { Agent, setGlobalDispatcher } from "undici";
  • net 0xAxiom-axiom-agentic-tools-5e13fdb/scripts/migrate-agent-uri-to-ipfs.mjs :65 const srcResp = await fetch(AGENT_URL, { headers: { "cache-control": "no-cache" } });
  • net 0xAxiom-axiom-agentic-tools-5e13fdb/scripts/refresh-agent-hash.mjs :100 const resp = await fetch(AGENT_URI, { headers: { "user-agent": "axiom-agent-hash-refresher/1", "cache-control": "no-cache" } });
  • net 0xAxiom-axiom-agentic-tools-5e13fdb/scripts/report.mjs :44 const r = await fetch(url, { signal: ctrl.signal, headers: { accept: "application/json" } });
  • net 0xAxiom-axiom-agentic-tools-5e13fdb/scripts/republish-agent-uri.mjs :55 const srcResp = await fetch(AGENT_URL, { headers: { "cache-control": "no-cache" } });
  • net 0xAxiom-axiom-agentic-tools-5e13fdb/scripts/self-pay-first-settle.mjs :44 import { Agent, setGlobalDispatcher } from "undici";
  • net 0xAxiom-axiom-agentic-tools-5e13fdb/tools/agent-revenue-optimizer/handler.mjs :9 import net from "node:net";
  • net 0xAxiom-axiom-agentic-tools-5e13fdb/tools/mcp-security-scanner/handler.mjs :66 const resp = await fetch(url, {
  • net 0xAxiom-axiom-agentic-tools-5e13fdb/tools/repo-health-for-agents/handler.mjs :22 const res = await globalThis.fetch(url, {

secrets 8

  • secrets 0xAxiom-axiom-agentic-tools-5e13fdb/api/_lib/opensea-reporter.mjs :20 const key = process.env.TOOL_REPORTER_KEY;
  • secrets 0xAxiom-axiom-agentic-tools-5e13fdb/api/_lib/x402.mjs :46 const CDP_KEY_ID = process.env.CDP_API_KEY_ID || null;
  • secrets 0xAxiom-axiom-agentic-tools-5e13fdb/scripts/hopper-settle.mjs :56 const treasuryKey = process.env.NET_PRIVATE_KEY;
  • secrets 0xAxiom-axiom-agentic-tools-5e13fdb/scripts/migrate-agent-uri-to-ipfs.mjs :52 const pk = process.env.NET_PRIVATE_KEY;
  • secrets 0xAxiom-axiom-agentic-tools-5e13fdb/scripts/refresh-agent-hash.mjs :70 const pk = process.env.NET_PRIVATE_KEY;
  • secrets 0xAxiom-axiom-agentic-tools-5e13fdb/scripts/republish-agent-uri.mjs :44 const pk = process.env.NET_PRIVATE_KEY;
  • secrets 0xAxiom-axiom-agentic-tools-5e13fdb/scripts/swap-eth-to-usdc.mjs :53 const pk = process.env.NET_PRIVATE_KEY;
  • secrets 0xAxiom-axiom-agentic-tools-5e13fdb/scripts/update-agent-uri.mjs :45 const pk = process.env.NET_PRIVATE_KEY;

declared dependencies 8

  • @coinbase/x402@^2.1.0
  • @opensea/tool-sdk@^0.13.0
  • @x402/core@^2.14.0
  • @x402/fetch@^2.14.0
  • viem@^2.21.0
  • undici@^8.3.0
  • x402@^1.2.0
  • x402-fetch@^1.2.0