Open merchant discovery schema and x402 MCP inspector for buyer agents
Drift inferred · capture-to-capture
No drift recorded — single capability capture; advisories appear once its surface changes.
transport streamable-http · http
verified
reported
listed in the official MCP registry counts 0 tools · 0 res
· 0 prompts
permission surface via code analysis
No tools enumerated yet for this server.
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit 82b7e9e · analyzer v30 · 2w ago
skills & prompt files 1
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 24
filesystem 2
- fs (weak) ihint-merchant-context-82b7e9e/worker/scripts/deploy.mjs :4
import { readFileSync, writeFileSync } from "node:fs"; - fs (weak) ihint-merchant-context-82b7e9e/worker/test/wrangler-config.test.js :1
import { readFileSync } from "node:fs";
shell / exec 1
- shell (weak) ihint-merchant-context-82b7e9e/worker/scripts/deploy.mjs :3
import { spawnSync } from "node:child_process";
network 3
- net (weak) ihint-merchant-context-82b7e9e/worker/scripts/deploy.mjs :145
const healthResponse = await fetch(new URL("/health", endpoint), { - net ihint-merchant-context-82b7e9e/worker/src/index.ts :44
async fetch( - net (weak) ihint-merchant-context-82b7e9e/worker/test/index.test.ts :53
const response = await worker.fetch(
declared dependencies 13
- @modelcontextprotocol/sdk@^1.30.0
- @coinbase/x402@^2.1.0
- @x402/core@^2.0.0
- @x402/evm@^2.0.0
- @x402/extensions@^2.21.0
- agents@^0.20.1
- viem@^2.55.10
- zod@^4.4.3
- @cloudflare/workers-types@^5.20260801.1
- prettier@^3.9.6
- typescript@^5.9.3
- vitest@^4.1.0
- wrangler@^4.118.0