npm JavaScript analyzed 0.5.3

agora402

v0.5.3
npm

Escrow protection for autonomous agent payments on Base. USDC held in smart contract until the job is done. PayPal for AI agents via x402.

maintainer
michu5696
licence
MIT
first seen
2026-08-14
last seen
2026-08-14
releases · 30d
0
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 7 tools
transport stdio · streamable-http · http verified reported listed in the official MCP registry counts 7 tools · 0 res · 0 prompts permission surface via code analysis

tools

  • escrow_create
  • escrow_dispute
  • escrow_release
  • escrow_status
  • trust_onchain_quick
  • trust_score_query
  • x402_protected_call
code evidence v0.5.3 · npm-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 8

network 2

  • net package/dist/chunk-UGUYVCKL.js :112 const searchRes = await fetch(`${MOLTBOOK_BASE_URL}/agents/search?q=${encodeURIComponent(addressOrName)}&limit=1`, { headers, signal: AbortSignal.timeout(5e3) });
  • net package/dist/x402-FYOWIY5K.js :126 apiResponse = await fetch(url, {

secrets 4

  • secrets package/dist/chunk-EGC4JYLO.js :669 const privateKey = process.env.PRIVATE_KEY;
  • secrets package/dist/chunk-UGUYVCKL.js :180 const key = apiKey ?? process.env.BASESCAN_API_KEY ?? "";
  • secrets package/dist/index.js :42 basescanApiKey: process.env.BASESCAN_API_KEY,
  • secrets package/dist/trust-IEWRH47R.js :75 basescanApiKey: process.env.BASESCAN_API_KEY,

tool registrations 8

  • trust_score_query package/dist/chunk-UGUYVCKL.js :598
  • escrow_create package/dist/escrow-CAQTZQFL.js :12
  • escrow_release package/dist/escrow-CAQTZQFL.js :59
  • escrow_dispute package/dist/escrow-CAQTZQFL.js :85
  • escrow_status package/dist/escrow-CAQTZQFL.js :113
  • trust_score_query package/dist/trust-IEWRH47R.js :62
  • trust_onchain_quick package/dist/trust-IEWRH47R.js :102
  • x402_protected_call package/dist/x402-FYOWIY5K.js :78

install hooks 1

  • prepublishOnly package/package.json :44 tsup

declared dependencies 13

  • @modelcontextprotocol/sdk@^1.12.0
  • ajv@^8.17.0
  • viem@^2.46.3
  • zod@^3.24.0
  • @agora402/core@workspace:*
  • @agora402/escrow-client@workspace:*
  • @agora402/trust@workspace:*
  • @agora402/verification@workspace:*
  • @types/node@^25.3.3
  • tsup@^8.5.1
  • tsx@^4.19.0
  • typescript@^5.7.0
show 1 more
  • vitest@^3.1.0