Install
$ agentstack add mcp-carboncashmere-x402-mcp ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.2.2 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.2.2. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
@carbon-cashmere/x402-mcp
MCP server that exposes Carbon & Cashmere's 177 crypto market intelligence endpoints to your AI agent — with automatic x402 USDC micropayments from your wallet.
What you get
When this MCP is installed, your AI agent can call tools like:
get_v1_news— analyzed crypto news with sentiment + market impactget_v1_stablecoins— total market cap, per-coin supply, chain distributionget_v1_onchain_btc— Bitcoin on-chain metrics (hash-rate, mempool, miner flows)get_v1_bittensor_leaderboard— top-100 Bittensor miners by emissionget_v1_mantis_realized_accuracy— MANTIS subnet (UID 253) realized accuracy track-recordget_v1_intel_snapshot— aggregated market intel snapshot- … plus subscriptions ($10/day, $50/week, $200/month), sponsor tiers ($500–$50000), and 170+ research endpoints priced $0.003 – $0.50 per call
177 paid endpoints total. Default exposes top 100 (curated by revenue + popularity). Set X402_TOOL_LIMIT=177 to expose all incl. per-coin variants.
Each tool invocation triggers a single USDC micropayment from your configured wallet. No subscription. No API key. Pay only for what you use.
Install
Claude Desktop
Add to ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows):
{
"mcpServers": {
"carbon-cashmere": {
"command": "npx",
"args": ["-y", "@carbon-cashmere/x402-mcp"],
"env": {
"EVM_PRIVATE_KEY": "0x_your_evm_private_key_here",
"SVM_PRIVATE_KEY": "your_base58_solana_private_key_here_optional"
}
}
}
}
Restart Claude Desktop. The top 100 Carbon & Cashmere tools (curated by revenue + popularity) appear in your tool palette.
Cursor / Cline / Continue
Same JSON config, paste into your MCP settings panel.
Wallet setup
> Security: use a dedicated spending wallet, not your main wallet. > Your EVM_PRIVATE_KEY sits in plaintext in your Claude Desktop config. Any > process on the host with read access to that file gets the key. Treat it as > a hot wallet you would not mind losing: fund it with the small amount you > plan to spend ($10–$50 in USDC), never with your main holdings.
- EVMPRIVATEKEY (required for Base / Polygon / Arbitrum / World / Avalanche payments)
- 0x-prefixed hex string (e.g.
0xac0974bec39a17e36ba4a6b4d238ff944bacb478cbed5efcae784d7bf4f2ff80) - Fund with USDC on Base mainnet (cheapest, fastest, ~$0.0001 gas per call)
- One-time cost: ~$10 USDC covers 200+ tool calls
- Hard cap = wallet balance. A runaway agent loop can spend the funded
amount but no more; signing is bounded by USDC available on the chain.
- SVMPRIVATEKEY (optional, for Solana payments)
- base58-encoded Solana keypair bytes
- Only needed if a tool routes Solana-only
Network whitelist. The MCP server only signs payments for networks that appear in the API's 402-response accepts[] array (currently Base, Polygon, Arbitrum, World Chain, Solana, Algorand, Stellar). Requests routed to any other chain are rejected at the signing layer — your key cannot be tricked into signing for an arbitrary network.
Keys never leave your machine. They live only in your Claude Desktop config and the MCP process running locally. Payment signing happens on your device; only the signed EIP-712 / SIWS payload travels to Carbon & Cashmere.
Discovery-only mode (no keys set)
If you start the MCP server without EVM_PRIVATE_KEY and without SVM_PRIVATE_KEY, it runs in discovery-only mode: tool registration works, free endpoints work, paid tool invocations surface a 402 error to the agent. Useful for: evaluating the tool catalog, MCP marketplace introspection (Glama, npm scrapers), or running in a CI/test environment without funding a wallet.
How it works
Claude Desktop @carbon-cashmere/x402-mcp api.carbon-cashmere.de
| (your machine) (our server)
| call get_v1_news | |
|------------------------->| GET /v1/news |
| |-------------------------------->|
| | 402 + PAYMENT-REQUIRED |
| ||
| | 200 OK + data |
| |
- x402 protocol:
- MCP protocol:
## Source & license
This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.
- **Author:** [CarbonCashmere](https://github.com/CarbonCashmere)
- **Source:** [CarbonCashmere/x402-mcp](https://github.com/CarbonCashmere/x402-mcp)
- **License:** MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.2.2 Imported from the upstream source.