DropEngine x402 Agent Services

Pay-per-call Base USDC x402 endpoints for autonomous AI agents covering security checks, invoice validation, transaction and wallet risk, web extraction…

CommunityOnlineNo sign-inGlobalFreeRead-only

What it can do

  • Invoice Preflight Quote: FREE, no wallet or document upload: choose the lowest priced Invoice Preflight tool from document type, PDF page count, and optional byte size. Call this before a paid invoice
  • Mcp Server Inspect: MCP server health check ($0.01 USDC on Base): connect to any public MCP endpoint over HTTPS, confirm it is reachable, list its tool names and input-schema summaries, compare agains
  • Check Url: Paid Agent Preflight URL check ($0.005 USDC on Base). Call before an agent opens, follows, downloads from, or trusts an unknown URL. Performs deterministic checks, safely inspects HTTPS red

What data it sees

Do you need an account

No: the server works without sign-in

Pay-per-call Base USDC x402 endpoints for autonomous AI agents covering security checks, invoice validation, transaction and wallet risk, web extraction, crypto intelligence, and tool routing.

How to connect

How to connect DropEngine x402 Agent Services to Claude

The server address to paste into Claude settings:

https://dropengine-x402-agent-services--ahmetkoymen8.run.tools

  1. Open Claude (claude.ai or the desktop app).
  2. Go to Settings → Connectors.
  3. Click Add custom connector.
  4. Paste the server address copied below into Remote MCP server URL and click Add.
  5. In a chat, click + → Connectors and switch the new connector on.

Custom connectors are available on Free, Pro, Max, Team and Enterprise plans (Free is limited to one). On Team and Enterprise an organization Owner adds the connector first under Organization settings → Connectors.

Authorization

After you click Add, a sign-in window for the service opens. Sign in with your own account and approve access. Claude never sees your password.

How to connect DropEngine x402 Agent Services to ChatGPT

The server address to paste into ChatGPT settings:

https://dropengine-x402-agent-services--ahmetkoymen8.run.tools

  1. Open ChatGPT in a browser (chatgpt.com). A Plus, Pro, Business, Enterprise or Edu plan is required.
  2. Turn on developer mode once: Settings → Apps → Advanced settings → Developer mode.
  3. Open Settings → Connectors and click Create.
  4. Fill in the form: Name (anything), Description (one line about what the service does), MCP server URL (copy it below).
  5. Under Authentication choose OAuth if the service requires sign-in, otherwise None. Click Create.
  6. In a new chat open + → Apps/Connectors and enable the connector.

OpenAI has renamed this section before (Connectors → Apps/Plugins). If the label differs, search settings for "developer mode". On Business/Enterprise workspaces an admin must allow custom connectors first.

Authorization

On first use ChatGPT opens the service's sign-in window. Sign in and approve access.

How to connect DropEngine x402 Agent Services to Cursor

The server address to paste into Cursor settings:

https://dropengine-x402-agent-services--ahmetkoymen8.run.tools

Fastest: click Open in Cursor below and confirm the prompt.

Manually:

  1. In Cursor open Settings → Cursor Settings → MCP and click Add new global MCP server.
  2. Paste the JSON copied below into ~/.cursor/mcp.json (per project: .cursor/mcp.json in the repo root).
  3. Save the file. The server appears in the MCP list; authorize it there if asked.

Authorization

If the service needs sign-in, an authorize button appears next to the server in the MCP list.

Server tool list (20)

Raw names from tools/list. Only developers need these.

invoice_preflight_quoteFREE, no wallet or document upload: choose the lowest priced Invoice Preflight tool from document type, PDF page count, and optional byte size. Call this before a paid invoice tool when the tier is uncertain. It does not inspect or validate the document.
mcp_server_inspectMCP server health check ($0.01 USDC on Base): connect to any public MCP endpoint over HTTPS, confirm it is reachable, list its tool names and input-schema summaries, compare against expected tool names, and flag risky or misleading tool descriptions. Read-only: inspected tools are never called. Use it before wiring an unknown MCP server into an agent, or to verify your own deployment. Pair with check_url to pre-screen a suspicious endpoint.
check_urlPaid Agent Preflight URL check ($0.005 USDC on Base). Call before an agent opens, follows, downloads from, or trusts an unknown URL. Performs deterministic checks, safely inspects HTTPS redirects without loading page content, blocks localhost/private addresses, and optionally queries Google Web Risk when configured. No LLM is used. A clean result is not a guarantee of safety.
scan_contentPaid Untrusted Content Security Layer ($0.005 USDC on Base). Scan untrusted text, HTML, Markdown, email, document text, API responses, and tool outputs before your agent adds them to context, follows their instructions, or acts. Returns risk score, risk categories, recommendation, and sanitized plain text when possible. Bounded deterministic local scanning; no external LLM or provider call. Maximum 100000 characters.
simulate_transactionPaid Transaction Preflight ($0.02 USDC on Base). Simulates an unsigned Base transaction before an autonomous agent signs or broadcasts it. Returns RPC execution/revert status, gas estimate, known top-level method decoding, direct ERC-20 transfer/approval calldata, unlimited approval warnings, and machine-readable risk. Standard JSON-RPC does not expose full internal token state changes; do not treat calldata decoding as a complete state diff. Never send a private key or seed phrase. This tool never signs, holds keys, or broadcasts.
check_walletPaid Wallet Risk Check ($0.02 USDC on Base). Call before an agent sends funds to, accepts value from, grants an approval to, or interacts with an unfamiliar address. Checks whether the address is a wallet or contract and reads basic on-chain metadata. Sanctions, scam, drainer, mixer, and malicious-address intelligence are unknown unless a trusted provider is configured; without one, the result is cautious and low-confidence, not a safety certification. Never send private keys or seed phrases.
check_packagePaid Package Safety Gate ($0.005 USDC on Base). Call before a coding agent installs, imports, or adds an unfamiliar npm dependency. Checks resolved package/version, OSV vulnerabilities and malware advisories, popular-name typosquatting, and install lifecycle scripts using static analysis only. Package code is never executed. Checks up to 10 direct dependencies when their versions can be resolved; it does not traverse transitive dependencies or assess maintainer history. Unknown coverage returns caution.
route_toolPaid Agent Tool Router ($0.002 USDC on Base). Finds and ranks machine-payable MCP services and x402 HTTP endpoints before your agent chooses or pays a provider. Uses structured capability matching, hard constraints, price, observed latency/reliability, and cold-start trust confidence; no LLM call is required. Returns the best tool, confidence, reason, price, relevant workflow, next-best option, and a context-aware recommended_next when useful. This is recommendation metadata only: it never invokes the selected provider or makes a second payment. Without X402_BAZAAR_DISCOVERY_URLS, results come only from this platform's local service registry and are marked degraded.
get_live_quotePaid Live Product Quote ($0.01 USDC). Retrieves explicitly published product price and stock from a public HTTPS product page before an agent buys; shipping, tax and unknown values remain null. Never purchases.
extract_structuredPaid Fresh Structured Extract ($0.01 USDC). Extracts a fresh webpage into a simple agent-defined typed JSON shape, with validation and per-field provenance. Uses static page data only; never executes page JavaScript and never fabricates missing fields.
check_changePaid Change / Diff Check ($0.001 USDC). Checks normalized text on a public HTTPS page against a previous SHA-256 hash, returning a compact diff when a prior snapshot is available.
verify_claimPaid Freshness / Claim Verifier ($0.02 USDC). Checks a factual claim against fresh web search evidence and returns supported/contradicted/mixed/insufficient/stale with sources. Requires TAVILY_API_KEY. If the key is missing, returns a provider-unavailable error before requesting payment. Claim text is sent to the configured search provider.
analyze_whale_activityPaid Whale Intelligence ($0.02 USDC). Summarizes large public GeckoTerminal-indexed DEX trades for a token address on a supported chain. Large-trader labels are size-based heuristics, not verified whale identities; data is not chain-wide. Wallet mode uses Helius (Solana) or Etherscan API V2 (EVM) when configured, returning recent indexed transactions only; it does not claim complete balances or whale labels.
scan_arbitragePaid Arbitrage Intelligence ($0.03 USDC). Compares Binance and Coinbase public spot order books at a requested trade size and applies caller- or server-configured taker fee assumptions. Rejects stale books. Excludes transfers, inventory rebalancing, and guaranteed execution; does not place orders.
backtest_strategyPaid Strategy Backtest ($0.10 USDC). Tests built-in long-only spot strategies against bounded public Binance OHLCV history. Signals form at candle close and execute at the next candle open. Applies configured fees/slippage; accepts declarative parameters only and never executes user code. Historical results are not predictions.
preflight_actionAgent Action Gate ($0.02 USDC flat; stable MCP tool name preflight_action). Use before an AI agent performs an external action. Evaluates the required safety, trust, spending and transaction checks and returns ALLOW, REVIEW, REQUIRE_APPROVAL or DENY. Use before opening an untrusted URL, installing a dependency, calling an unfamiliar MCP/tool, spending funds, submitting a transaction, or consuming untrusted external content. Do not use for pure local deterministic computation or when no external action/risk exists. Does not assess seller reputation. Missing or skipped relevant checks cannot produce ALLOW. REQUIRE_APPROVAL is a recommendation only; use /api/financial/authorize-spend separately for actual spend-policy authorization and owner approval. It does not sign, route payment, or broadcast. No private keys, seed phrases, or secrets are accepted. Typical latency depends on selected checks/providers; there is no uniform SLA. Recommended workflows: agent-safety-gate, safe-transaction-preflight, tool-discovery-trust.
token_security_auditPaid Token Security Audit ($0.01 USDC). Normalizes GoPlus token-security flags and public EVM RPC metadata for supported EVM tokens. Configure GOPLUS_ACCESS_TOKEN or explicitly enable the bounded public API with GOPLUS_PUBLIC_TOKEN_API_ENABLED=1; if neither is available, no payment is requested. Missing provider fields remain unknown and incomplete coverage returns caution. Reports provider findings separately from deterministic internal scoring. Does not trade or guarantee token safety.
invoice_preflightPaid invoice check ($0.065 USDC on Base): UBL XML or complete PDF/image invoices up to 3 pages. Compares expected purchase fields and line items; returns evidence, amount checks and match/discrepancy/needs_review. No payment or bookkeeping action is taken.
invoice_preflight_10_pagesPaid invoice OCR ($0.13 USDC on Base): process complete PDF/image invoices up to 10 pages. Oversized PDFs are rejected before OCR.
invoice_preflight_50_pagesPaid invoice OCR ($0.475 USDC on Base): process complete PDF/image invoices up to 50 pages. Oversized PDFs are rejected before OCR.