aegis-x402-mcp 1.0.0 → 1.0.2

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Antigravity Autonomous Systems & Goatincrypto
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -114,13 +114,14 @@ Add to `~/.codeium/windsurf/mcp_config.json`:
 ## Publishing & Registry Registration
 
 ### Official Model Context Protocol Registry
-Submit PR to: [modelcontextprotocol/servers](https://github.com/modelcontextprotocol/servers)
+Published on the official MCP Registry: [registry.modelcontextprotocol.io](https://registry.modelcontextprotocol.io) via `mcp-publisher`.
 
-### Community Registries
-- **Smithery:** Run `npx -y @smithery/cli install aegis-x402-mcp`
-- **mcp.so:** Submit package `aegis-x402-mcp`
+### Community Registries & Discovery
+- **NPM:** [https://www.npmjs.com/package/aegis-x402-mcp](https://www.npmjs.com/package/aegis-x402-mcp)
+- **GitHub:** [https://github.com/Goatincrypto/aegis-x402-mcp](https://github.com/Goatincrypto/aegis-x402-mcp)
 - **Glama:** [glama.ai/mcp/servers](https://glama.ai/mcp/servers)
 - **PulseMCP:** [pulsemcp.com](https://pulsemcp.com)
+- **Smithery:** `npx -y @smithery/cli install aegis-x402-mcp`
 
 ---
 

package/dist/index.js

@@ -3,6 +3,7 @@ import { Server } from '@modelcontextprotocol/sdk/server/index.js';
 import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
 import { CallToolRequestSchema, ListToolsRequestSchema, } from '@modelcontextprotocol/sdk/types.js';
 import { privateKeyToAccount } from 'viem/accounts';
+import { getAddress } from 'viem';
 import { randomBytes } from 'crypto';
 const GATEWAY_URL = process.env.AEGIS_GATEWAY_URL || 'https://aegis-audit-x402.project-easy-x.workers.dev';
 const API_KEY = process.env.AEGIS_API_KEY || process.env.AEGIS_CREDIT_TOKEN || '';
@@ -15,7 +16,7 @@ const BASE_USDC = '0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913'.toLowerCase();
  * Keys never leave the local machine.
  * Protected by strict recipient allowlist guard: only signs toward official Aegis address.
  */
-async function signEip3009Payment(privateKeyHex, accepts) {
+async function signEip3009Payment(privateKeyHex, accepts, resource) {
     const cleanKey = privateKeyHex.trim().startsWith('0x')
         ? privateKeyHex.trim()
         : `0x${privateKeyHex.trim()}`;
@@ -25,14 +26,18 @@ async function signEip3009Payment(privateKeyHex, accepts) {
         throw new Error(`SECURITY_RECIPIENT_GUARD: Recipient ${recipient} is not official Aegis receiver (${ALLOWED_PAYTO}). Signing refused.`);
     }
     const nonce = `0x${randomBytes(32).toString('hex')}`;
-    const validAfter = 0n;
-    const validBefore = BigInt(Math.floor(Date.now() / 1000) + 3600);
-    const value = BigInt(accepts.amount || '10000');
+    const validAfterStr = '0';
+    const maxTimeout = typeof accepts.maxTimeoutSeconds === 'number' ? accepts.maxTimeoutSeconds : 300;
+    const validBeforeStr = String(Math.floor(Date.now() / 1000) + maxTimeout);
+    const valueStr = String(accepts.amount || '10000');
+    const fromChecksum = getAddress(account.address);
+    const toChecksum = getAddress(accepts.payTo || accepts.recipient);
+    const assetChecksum = getAddress(accepts.asset || BASE_USDC);
     const domain = {
         name: accepts.extra?.name || 'USD Coin',
         version: accepts.extra?.version || '2',
         chainId: 8453,
-        verifyingContract: (accepts.asset || BASE_USDC),
+        verifyingContract: assetChecksum,
     };
     const types = {
         TransferWithAuthorization: [
@@ -49,29 +54,33 @@ async function signEip3009Payment(privateKeyHex, accepts) {
         types,
         primaryType: 'TransferWithAuthorization',
         message: {
-            from: account.address,
-            to: accepts.payTo,
-            value,
-            validAfter,
-            validBefore,
+            from: fromChecksum,
+            to: toChecksum,
+            value: BigInt(valueStr),
+            validAfter: BigInt(validAfterStr),
+            validBefore: BigInt(validBeforeStr),
             nonce,
         },
     });
+    const authorization = {
+        from: fromChecksum,
+        to: toChecksum,
+        value: valueStr,
+        validAfter: validAfterStr,
+        validBefore: validBeforeStr,
+        nonce,
+    };
     const paymentPayload = {
         x402Version: 2,
-        scheme: 'exact',
-        network: 'eip155:8453',
-        asset: accepts.asset || BASE_USDC,
         payload: {
-            from: account.address,
-            to: accepts.payTo,
-            value: value.toString(),
-            validAfter: Number(validAfter),
-            validBefore: Number(validBefore),
-            nonce,
+            authorization,
             signature,
         },
+        accepted: accepts,
     };
+    if (resource) {
+        paymentPayload.resource = resource;
+    }
     return Buffer.from(JSON.stringify(paymentPayload)).toString('base64');
 }
 /**
@@ -101,7 +110,7 @@ async function fetchFromAegis(endpoint, options = {}) {
         // Tier 3: If user provided a local private key, sign and retry in-flight
         if (PRIVATE_KEY && accepts) {
             try {
-                const signedHeader = await signEip3009Payment(PRIVATE_KEY, accepts);
+                const signedHeader = await signEip3009Payment(PRIVATE_KEY, accepts, paymentReq?.resource);
                 const retryHeaders = {
                     ...headers,
                     'X-PAYMENT': signedHeader,
@@ -136,7 +145,7 @@ async function fetchFromAegis(endpoint, options = {}) {
 }
 const server = new Server({
     name: 'aegis-x402-mcp',
-    version: '1.0.0',
+    version: '1.0.2',
 }, {
     capabilities: {
         tools: {},

package/dist/test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/test.js

@@ -0,0 +1,10 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+test('aegis-x402-mcp package configuration', () => {
+    assert.ok(true, 'Test harness operates correctly');
+});
+test('official payTo allowlist contains official Aegis node', () => {
+    const officialPayTo = '0x111ef680B6EFdd859FbEc473b907aCe95F0D1acB'.toLowerCase();
+    assert.equal(officialPayTo.length, 42);
+    assert.ok(officialPayTo.startsWith('0x111ef'));
+});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aegis-x402-mcp",
-  "version": "1.0.0",
+  "version": "1.0.2",
   "description": "Model Context Protocol (MCP) server for AegisAudit x402 Security Intelligence, PreFlight Bundles, KYA, and Grounded AI on Base",
   "type": "module",
   "main": "dist/index.js",
@@ -9,13 +9,23 @@
   },
   "files": [
     "dist",
-    "README.md"
+    "README.md",
+    "LICENSE"
   ],
   "scripts": {
     "build": "tsc",
     "start": "node dist/index.js",
+    "test": "node --test dist/test.js",
     "prepublishOnly": "npm run build"
   },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Goatincrypto/aegis-x402-mcp.git"
+  },
+  "homepage": "https://github.com/Goatincrypto/aegis-x402-mcp#readme",
+  "bugs": {
+    "url": "https://github.com/Goatincrypto/aegis-x402-mcp/issues"
+  },
   "keywords": [
     "mcp",
     "model-context-protocol",
@@ -32,5 +42,9 @@
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.29.0",
     "viem": "^2.21.0"
+  },
+  "devDependencies": {
+    "@types/node": "^20.11.0",
+    "typescript": "^5.4.5"
   }
 }