registry / @hpp-io/x402-mcp-bridge / 0.1.7

@hpp-io/x402-mcp-bridge@0.1.7

MCP stdio bridge that lets Claude Desktop / OpenClaw / other MCP hosts make x402 payments on HPP — autoTopup from a Safe via AllowanceModule, signs EIP-3009 with a delegate EOA.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 11 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsFilesystemNativeBindingsNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 33 file(s), 185 KB of source, external domains: facilitator-sepolia.hpp.io, github.com, mainnet.hpp.io, seller.example.com, sepolia.hpp.io, x402-discovery.hpp.io

Source & flagged code

3 flagged

package.jsonView file

Lines 25-65json

25 "main": "./dist/index.js",

26 "bin": {

27 "x402-mcp-bridge": "bin/x402-mcp-bridge.js",

28 "hpp-x402": "bin/hpp-x402.js"

29 },

30 "files": [

Source & flagged code

3 flagged · loading source

package.jsonView file

•scripts.postinstall = patch-package || true

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = patch-package || true

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/cli/hpp-x402.jsView file

389process.argv = [process.argv[0], label, ...subArgs]; L390: const m = (await import(modPath)); L391: await m.run();

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/cli/hpp-x402.jsView on unpkg · L389

Findings

1 High5 Medium5 Low

HighInstall Time Lifecycle Scriptspackage.json

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumDynamic Requiredist/cli/hpp-x402.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

dist/cli/hpp-x402.jsView file

Lines 369-409javascript

369 const t = setTimeout(() => ac.abort(), 4000);

370 const res = await fetch(origin, { signal: ac.signal }).catch(() => null);

371 clearTimeout(t);

372 if (res)

373 srv = String(res.status);

374 }

375 catch {

376 /* keep unreachable */

377 }

378 console.log(`server : ${o.resourceServerUrl} → ${srv}`);

379});

380// Absorbed per-tool scripts — shown in --help; actually dispatched below.

381program.command("policy").description("manage the x402_http_call host policy (show/set/list/unset/defaults)").allowUnknownOption();

382program.command("channel").description("inspect/manage batch-settlement channels (ls/status/refund)").allowUnknownOption();

383program.command("safe").description("Safe (governance) wallet: setup | revoke").allowUnknownOption();

384program.command("serve").description("run a lightweight x402 seller — a paid HTTP endpoint (--pay-to, --handler)").allowUnknownOption();

385// Passthrough groups delegate to the existing scripts, which parse process.argv

386// themselves. Intercept BEFORE commander so their flags aren't consumed, and

387// rewrite argv so each script sees its sub-args starting at index 2.

388async function runPassthrough(modPath, label, subArgs) {

389 process.argv = [process.argv[0], label, ...subArgs];

390 const m = (await import(modPath));

391 await m.run();

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/cli/hpp-x402.jsView on unpkg · L389

392}

393const PASSTHROUGH = {

394 policy: { mod: "./policy.js", label: "hpp-x402-policy" },

395 channel: { mod: "./channel.js", label: "hpp-x402-channel" },

396 serve: { mod: "./serve.js", label: "hpp-x402-serve" },

397};

398const sub = process.argv[2];

399if (sub && sub in PASSTHROUGH) {

400 const { mod, label } = PASSTHROUGH[sub];

401 runPassthrough(mod, label, process.argv.slice(3)).catch((e) => {

402 console.error(`${label} error:`, e?.message ?? e);

403 process.exit(1);

404 });

405}

406else if (sub === "safe") {

407 const action = process.argv[3];

408 const map = { setup: "./setup.js", revoke: "./revoke.js" };

409 if (!action || !(action in map)) {