registry / x402-facilitator-proxy / 1.0.1

x402-facilitator-proxy@1.0.1

Multi-tenant payment gateway for API monetization with autonomous agent settlement on Base L2. Implements HTTP 402 protocol with USDC micropayments and programmatic fee routing.

AI Security Review

scanned 10h ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason

No blocking static signals were detected.

Trigger

Explicit `npm run mcp:start` followed by an MCP `route_x402_payment` call, or explicit `npm run sweep`.

Impact

An agent or user that supplies a private key can authorize requested transfers, including the fixed 1% fee; the explicit sweeper can move its configured hot-wallet balance.

Mechanism

User-invoked signing and routing of Base USDC transfers.

Rationale

Source inspection found no lifecycle execution, exfiltration, stealth persistence, or hidden remote payload execution. The explicit MCP and sweep features nevertheless provide high-impact cryptocurrency transfer capability using private keys and fixed recipient routing.

Evidence

package.jsonx402-client-sdk/src/mcp-server.tsx402-client-sdk/src/index.tssrc/backend/automation/sweeper.tsmcp-publisher.exe

Network endpoints2

mainnet.base.orgx402-facilitator-proxy.seob5285.workers.dev/api/v1/verify-and-settle

x402-facilitator-proxy@1.0.1

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code