agent402-mcp 0.12.10 → 0.12.12

package/README.md

@@ -1,6 +1,6 @@
 # agent402-mcp
 
-MCP server for [Agent402](https://agent402.tools), the applied layer of [Agentic Finance (AIFI)](https://agent402.tools/agentic-finance) - a catalog of **500+: 400+ pay-per-call web tools + 100+ curated multi-tool skill packs** for AI agents (every one tested, priced, and settled on-chain; every one earns its place), paid per call in USDC via the [x402 protocol](https://www.x402.org), or **with compute (proof-of-work)** when no wallet is configured. (The hosted API is dual-stack: it also accepts [MPP](https://agent402.tools/what-is-mpp) clients on the same 402, settling on Base/Celo or natively on Tempo; this package pays via x402.) Built by [Havok Holdings LLC](https://github.com/MikeyPetrillo/Agent402).
+MCP server for [Agent402](https://agent402.tools), the applied layer of [Agentic Finance](https://agent402.tools/agentic-finance) - a catalog of **500+: 400+ pay-per-call web tools + 100+ curated multi-tool skill packs** for AI agents (every one tested, priced, and settled on-chain; every one earns its place), paid per call in USDC via the [x402 protocol](https://www.x402.org), or **with compute (proof-of-work)** when no wallet is configured. (The hosted API is dual-stack: it also accepts [MPP](https://agent402.tools/what-is-mpp) clients on the same 402, settling on Base/Celo or natively on Tempo; this package pays via x402.) Built by [Havok Holdings LLC](https://github.com/MikeyPetrillo/Agent402).
 
 Your agent gets browser rendering, screenshots, PDF text extraction, URL→markdown, live web search **+ web answers with citations**, live **financial/crypto/macro data** (Yahoo stock quotes, CoinGecko, FRED, ECB FX, World Bank, yield curve), **SEC EDGAR filings** (10-K/10-Q text, XBRL, insider, 13F, IPO calendar), **deterministic stats & forecasting** (Pearson correlation, OLS, Holt-Winters), **compression** (gzip/brotli), DNS/TLS/WHOIS + email-deliverability checks, wallet-keyed shared memory, and 200+ deterministic pure-CPU utilities - plus 100+ **skill packs** like `security-audit`, `trend-analysis`, `structured-scrape`, `decode-blob`, and `forecasting-bake-off` callable as MCP prompts. Payment handled invisibly underneath the MCP calls. No signup, no API key.
 

package/index.js

@@ -617,7 +617,7 @@ server.setRequestHandler(CallToolRequestSchema, async (req) => {
           npm: "npx -y agent402-mcp",
           maintainer: "Havok Holdings LLC",
         },
-        positioning: `Deterministic tools layer beside LLM gateways: flagship search/answer first, 500+ long-tail tools via catalog.find / catalog.search / catalog.call. Agent402 is the applied layer of Agentic Finance (AIFI): agents that pay and get paid per request over x402 or MPP (Machine Payments Protocol), both on the same 402 - ${BASE}/agentic-finance, ${BASE}/glossary.`,
+        positioning: `Deterministic tools layer beside LLM gateways: flagship search/answer first, 500+ long-tail tools via catalog.find / catalog.search / catalog.call. Agent402 is the applied layer of Agentic Finance: agents that pay and get paid per request over x402 or MPP (Machine Payments Protocol), both on the same 402 - ${BASE}/agentic-finance, ${BASE}/glossary.`,
         ecosystem: "Call sellers.list to see which x402 sellers (any wallet, not just this host) are settling the most USDC (primarily on Base) in the last 24h, or sellers.list with wire=mpp for MPP sellers ranked by on-chain USDC.e transfers on Tempo - discovers the live economy beyond this catalog.",
       });
     }
@@ -626,7 +626,7 @@ server.setRequestHandler(CallToolRequestSchema, async (req) => {
         service: BASE,
         connector: "stdio npm package (agent402-mcp)",
         maintainer: "Havok Holdings LLC",
-        positioning: `Agent402 is the applied layer of Agentic Finance (AIFI): software agents that pay and get paid on their own, per request, over x402 or MPP (Machine Payments Protocol) - both answered on the same 402. ${BASE}/agentic-finance, ${BASE}/glossary.`,
+        positioning: `Agent402 is the applied layer of Agentic Finance: software agents that pay and get paid on their own, per request, over x402 or MPP (Machine Payments Protocol) - both answered on the same 402. ${BASE}/agentic-finance, ${BASE}/glossary.`,
         startHere: {
           firstJob: "Search the web and answer questions. Call web.search or web.answer directly, or catalog.find with your task.",
           mode: HAS_WALLET ? "usdc" : "proof-of-work",
@@ -671,6 +671,10 @@ server.setRequestHandler(CallToolRequestSchema, async (req) => {
         payersWindow: r.payers,
         volumeUsdc7d: Math.round((r.d7?.volumeUsdc || 0) * 10000) / 10000,
         routable: !!r.routable,
+        // Seller names/homepages are self-reported third-party content (same
+        // F09 rule as the hosted connector): never let a downstream agent read
+        // seller copy as an instruction.
+        ...(r.self ? {} : { untrustedContent: true }),
       }));
       return mcpJsonResult({
         wire: "mpp",
@@ -680,6 +684,7 @@ server.setRequestHandler(CallToolRequestSchema, async (req) => {
         sort, include,
         totalSellers: Array.isArray(lb.rows) ? lb.rows.length : 0,
         results: rows,
+        ...(rows.some((r) => r.untrustedContent) ? { containsUntrustedContent: true } : {}),
         ...(lb.stale ? { note: "Leaderboard is stale or still warming - retry in a few minutes." } : {}),
         source: `${BASE}/api/mpp-leaderboard`,
       });
@@ -703,6 +708,9 @@ server.setRequestHandler(CallToolRequestSchema, async (req) => {
       // Trim to the same compact row shape the hosted MCP connector returns —
       // cross-surface agents see one mental model. Full row (origins,
       // endpoints, scan metadata) stays accessible at /api/leaderboard.
+      // Same untrusted-content marking as the hosted connector: a seller's
+      // name/homepage is self-reported external content. `snap.self` (or a
+      // row flagged self) is this host's own wallet when the API says so.
       const rows = (snap.leaderboard || []).map((r) => ({
         rank: r.rank,
         name: r.name,
@@ -712,8 +720,10 @@ server.setRequestHandler(CallToolRequestSchema, async (req) => {
         callsSettled: r.callsSettled || 0,
         totalUsd: Math.round((r.totalUsd || 0) * 10000) / 10000,
         uniqueBuyers: r.uniqueBuyers || 0,
+        ...(r.self ? {} : { untrustedContent: true }),
       }));
       return mcpJsonResult({
+        ...(rows.some((r) => r.untrustedContent) ? { containsUntrustedContent: true } : {}),
         window: snap.windowLabel || snap.windowServed || "24h",
         asOf: snap.asOf,
         sort: snap.sortServed || sort,

package/output-schemas.js

@@ -99,7 +99,7 @@ export const FLAGSHIP_WRITERS = new Set(["memory-write"]);
 
 /** initialize.serverInfo description (MCP Implementation.description). */
 export const MCP_SERVER_DESCRIPTION =
-  "Agentic Finance (AIFI) applied layer - deterministic pay-per-call tools for AI agents: live web search and cited answers, news, browser render, market data, speech-to-text, wallet-keyed memory, plus 500+ long-tail tools via catalog.find. Settle in USDC via x402 or MPP (Machine Payments Protocol) on the same 402, or free via proof-of-work. Maintained by Havok Holdings LLC.";
+  "Agent402 - deterministic pay-per-call tools for AI agents: live web search and cited answers, news, browser render, market data, speech-to-text, wallet-keyed memory, plus 500+ long-tail tools via catalog.find. Settle in USDC via x402 or MPP (Machine Payments Protocol) on the same 402, or free via proof-of-work. The applied layer of Agentic Finance. Maintained by Havok Holdings LLC.";
 
 /** initialize.serverInfo.websiteUrl */
 export const MCP_SERVER_WEBSITE = "https://agent402.tools";
@@ -507,7 +507,7 @@ export function mcpInitializeInstructions(baseUrl) {
   const install = mcpInstallHints(baseUrl);
   const hosted = install.hostedUrl;
   return [
-    "Agent402 is a deterministic tools layer for AI agents (Havok Holdings LLC) - the applied layer of Agentic Finance (AIFI): agents that pay and get paid per request over x402 or MPP, or free via proof-of-work.",
+    "Agent402 is a deterministic tools layer for AI agents (Havok Holdings LLC) - the applied layer of Agentic Finance: agents that pay and get paid per request over x402 or MPP, or free via proof-of-work.",
     "Front door: call web.search or web.answer for live web search and cited answers.",
     "Also listed: web.news, browser.render, market.quote, audio.transcribe, memory.read, memory.write.",
     "Long catalog (500+ tools): call catalog.find with your task, or catalog.search then catalog.call.",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent402-mcp",
-  "version": "0.12.10",
+  "version": "0.12.12",
   "mcpName": "io.github.MikeyPetrillo/agent402",
   "author": "Havok Holdings LLC <mike@agent402.tools> (https://agent402.tools)",
   "homepage": "https://agent402.tools",
@@ -8,7 +8,7 @@
     "type": "git",
     "url": "git+https://github.com/MikeyPetrillo/Agent402.git"
   },
-  "description": "Agentic Finance (AIFI) MCP server for Agent402.Tools: 500+ pay-per-call tools + 100+ skill packs for AI agents, paid per call over x402 (USDC on 12 chains) or free via proof-of-work; the hosted API also answers MPP (Machine Payments Protocol) on the same 402. Catalog: browser, web search + cited answers, PDFs, OCR, images, LLM inference, image generation, code execution, STT, embeddings, live financial/crypto/macro data, SEC EDGAR filings, deterministic stats & forecasting, compression, payments (security-audit, trend-analysis, structured-scrape, decode-blob, forecasting-bake-off packs). Open source, self-hostable.",
+  "description": "Agent402 MCP server: 500+ pay-per-call tools + skill packs for AI agents over x402 (USDC on 12 chains) or MPP on the same 402, or free via proof-of-work - the applied layer of Agentic Finance. Catalog: browser, web search + cited answers, PDFs, OCR, images, LLM inference, image generation, code execution, STT, embeddings, live financial/crypto/macro data, SEC EDGAR filings, deterministic stats & forecasting, compression, payments. Open source, self-hostable.",
   "type": "module",
   "bin": {
     "agent402-mcp": "index.js"