x402-validator 0.3.0

x402 strict-v2 conformance engine: CLI, MCP server, batch auditor

x402-validator

Audit, monitor, and protect endpoints against the x402 strict-v2 standard.

pip install x402-validator

Quick examples

CLI:

x402-validate https://observer.137-184-67-179.sslip.io

Batch audit:

x402-validate endpoints.txt --output html --parallel 20

MCP server (Claude / Cursor / any MCP client):

echo '{"jsonrpc":"2.0","id":1,"method":"tools/list"}' | x402-mcp

Python:

import asyncio
from x402_validator._engine import run_audit

async def main():
    report = await run_audit("https://example.com")
    print(report.summary)

asyncio.run(main())

What it checks

Four core checks plus marketplace mode:

Check	Purpose
manifest_discovery	GET /.well-known/x402 returns a valid JSON manifest
caip2_compliance	A payment header carries a valid CAIP-2 network
json_resilience	HTTP 402 body is a JSON object, not a primitive
bazaar_compliance	The 402 body has a valid extensions.bazaar block

For multi-product catalogs, use mode="marketplace" (see API.md).

Extended tools (separate repo)

Dashboard, API server, Stripe monetization, and proxy middleware: MSSATANASS/x402-validator-tools

Documentation

• API Reference — every public function and result type
• Design — architecture and design choices
• Validation Report — 27 endpoints audited in 5.2 s
• Contributing — how to add checks without breaking stability

License

Apache-2.0.