MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/aff5e4a2-936e-42b6-a7e4-e8eecc0e9b9f/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "dev.tanod/x402-check"
title: "x402 Endpoint Check (Tanod)"
description: "Check an x402 endpoint before you pay it, then test a payment and follow it to settlement."
version: "0.1.1"
homepage_url: "https://tanod.dev"
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "dev.tanod"
display_name: "dev.tanod"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository{5}
url: "https://github.com/tanod-labs/tanod-mcp"
provider: "github"
owner: "tanod-labs"
name: "tanod-mcp"
verified: false
packages[0]
transports[1]
0{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://tanod.dev/mcp/x402-check"
endpoint_host: "tanod.dev"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "modern"
negotiated_version: "2026-07-28"
supported_versions[0]
transport_type: "streamable-http"
tools[3]
0{9}
name: "check_x402_endpoint_before_paying"
title: "agentscan: should my agent pay this x402 endpoint? pay, caution or avoid with reasons and evidence"
effect: "READ"
effect_confidence: 0.827
capabilities[2]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.931
1{2}
capability: "PAYMENT"
confidence: 0.827
risk_severity: "LOW"
fingerprint: "3abefc33168a9ebe3454fbfea4d58e1276ce82cc7beaee0803edb8a889f937ba"
input_schema_fingerprint: "b6d3f26afbe3ea4dab35b78c3739334f97ccb4d64d5deca65d831334dfe8524e"
annotations{5}
title: "agentscan: should my agent pay this x402 endpoint? pay, caution or avoid with reasons and evidence"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
1{9}
name: "test_x402_payment"
title: "agentscan: test an x402 payment and get a signed receipt of what the gate saw (health ping)"
effect: "READ"
effect_confidence: 0.703
capabilities[2]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.509
1{2}
capability: "PAYMENT"
confidence: 0.859
risk_severity: "LOW"
fingerprint: "c32b42bc7b9b10f78551c5224e7b647bdff0c352cdaf50e8f9114dfc282ee6fe"
input_schema_fingerprint: "b330eb2855024c062250229e7f43f8d6ac31d4a129dee04db2fdc236b0bc663f"
annotations{5}
title: "agentscan: test an x402 payment and get a signed receipt of what the gate saw (health ping)"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: true
2{9}
name: "x402_payment_status"
title: "chainpeek: was an x402 payment authorization used on-chain, and can it still settle"
effect: "READ"
effect_confidence: 0.32
capabilities[1]
0{2}
capability: "PAYMENT"
confidence: 0.88
risk_severity: "MEDIUM"
fingerprint: "7e20a9a2544cd140b4ffc1da1a910fbae24abd1d4560428ff0c20f5ecd3ff01d"
input_schema_fingerprint: "92a2fb02cd1bf48dd27971ce97139ce8e03d7ffefc0ae1bd0ccd47056c3af700"
annotations{5}
title: "chainpeek: was an x402 payment authorization used on-chain, and can it still settle"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
resources[0]
prompts[0]
extensions[0]
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "tanod.dev"
registrable_domain: "tanod.dev"
source: "transport"
findings[1]
0{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "x402_payment_status"
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "unverified"
source_provenance: "unknown"
security_scan: "no_critical_findings"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "dev.tanod/x402-check"
registry_content_sha256: "5081b7fa74d09bfcb1da377f47a577b8011535e6a67115bb87a35b24c9986469"
scan_snapshot_fingerprint: "9612558ac2d61bdaa7724e55fb5924583127f0ffd674f6bf2f6d39e0a62459b5"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T05:39:03.884Z"
observed_at: "2026-11-09T14:57:05.098+00:00"
registry_published_at: "2026-11-09T13:39:39.499015+00:00"
registry_updated_at: null