npm JavaScript analyzed 0.5.3

agora402

v0.5.3
npm

Escrow protection for autonomous agent payments on Base. USDC held in smart contract until the job is done. PayPal for AI agents via x402.

maintainer
michu5696
licence
MIT
first seen
2026-08-14
last seen
2026-08-14
releases · 30d
0
short id

agora402 is an MCP server distributed on npm, maintained by michu5696, tracked here since August 2026. It has shipped 8 releases (currently 0.5.3) and exposes 7 tools. Tools include escrow_create, escrow_dispute, escrow_release, escrow_status, trust_onchain_quick, trust_score_query, and 1 more. Its composite risk grade is B — an inferred review prompt computed from observed signals, not a verdict.

what we found

Its 7 tools appear to reach network and secrets, inferred from tool names, descriptions and input schemas rather than from observed behaviour.

Since the previous scan on 2026-08-15: 6 tools added.

full security breakdown →
tools 7
  • escrow_create
  • escrow_dispute
  • escrow_release
  • escrow_status
  • trust_onchain_quick
  • trust_score_query
  • x402_protected_call
release cadence · 90d 0 releases

No releases yet.

recent releases last 8
version date src
0.5.3 2026-03-04 npm
0.5.2 2026-03-04 npm
0.5.1 2026-03-03 npm
0.5.0 2026-03-03 npm
0.4.0 2026-03-03 npm
0.3.0 2026-03-03 npm
0.2.0 2026-03-03 npm
0.1.0 2026-03-03 npm

view all →