ENFR
List your agent

x402 Package Advisories

MCP server · hosted · v0.1.0 · dev.workers.microtools-x402.x402-package-advisories/package-advisories
Online · tested 2h agoNEW · 4h agoSeen in the registry 3h ago

Package vuln advisories from OSV.dev: CVEs, severity, fixes, manifest audit. Pay per call via x402.

Website ↗How to connect ↓

What it does

x402 Package Advisories is an MCP server, a connector that lets an AI assistant use it as a tool. It is hosted: an assistant connects to it over the internet, nothing to install.

From the publisher's description, Electra Index matched it to one capability: security scanning. That makes it a candidate for tasks such as review pull requests or scan code for vulnerabilities.

Facts come from the Official MCP Registry, as declared by the publisher. Capabilities are matched automatically (low confidence). None of this is a test of the tool.

At a glance

Hosted (remote)YES
Local installNO
Version0.1.0
PriceNot in the registry
First seen03 Nov 2026
Last checked3h ago

How to connect

As declared in the Official MCP Registry · hosted endpoint tested by Electra Index 2h ago (live check)

Hosted endpoint

  • https://x402-package-advisories.microtools-x402.workers.dev/mcp streamable-http

In Claude Code: claude mcp add --transport http x402-package-advisories https://x402-package-advisories.microtools-x402.workers.dev/mcp

MCP settings (Claude Desktop, Cursor and other MCP clients)

{
  "mcpServers": {
    "x402-package-advisories": {
      "url": "https://x402-package-advisories.microtools-x402.workers.dev/mcp"
    }
  }
}

Live check

Electra Index connected to the hosted endpoint 2h ago

ONLINE x402 Package Advisories answered an MCP connection on 03 Nov 2026 and introduced itself as x402-package-advisories 0.1.0 (MCP protocol 2025-06-18).

5 tools offered to AI assistants

  • package_advisories · Security advisories for one open-source package version (npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist, Pub, Hex...). Returns a verdict (vulnerable yes/no, vuln count, max severity, max CVSS v3 score, counts by severity, recom
  • manifest_audit · Audit up to 50 dependencies in one call (OSV.dev querybatch). Input: items [{ecosystem,name,version}], or packages "npm:lodash@4.17.15,PyPI:django@3.2.0", or a manifest: package.json text (dependencies, devDependencies, optionalDependencies
  • vuln_details · Full OSV record for one vulnerability id (GHSA-..., CVE-..., PYSEC-..., GO-..., RUSTSEC-..., OSV-...): details, aliases, related ids, every affected package with ranges and versions, references, credits, database_specific fields, plus a nor
  • ping · Paid connectivity test: returns ok and a server timestamp. Use it to check that your x402 payment flow works end to end. Costs $0.001 USDC per call via x402.
  • health · Free health check. Returns service status, version, tool prices, network and the plain-HTTP x402 endpoints.

What "online" means: the server answered an MCP connection at the time of the check. It is not a guarantee of security, quality or continuous uptime. How we test: we open an MCP session and ask for the tool list, as an AI assistant would. We never run a tool and never send a key. Checked every few days. Method

Is this your server? Monitoring Pro: a check every 30 minutes and an email within the hour when it stops answering. Launch offer: $39.99 once, for life.

Tasks it helps with

Share of each task's required capabilities it covers
Review pull requests
Security Scanning
50%
Scan code for vulnerabilities
Security Scanning
50%

Similar tools

Listed for the same task: review pull requests
  • diffpilotREMOTELOCAL
    MCP server for PR code review, commit messages, changelogs, and secret detection
  • MCP Code Review ServerREMOTELOCAL
    Code review as an MCP server — structured reviews with OWASP security scanning
  • StrixREMOTELOCAL
    AI pentesting: run scans, triage vulnerabilities, review PRs, manage schedules and assets
  • GitHitsREMOTELOCAL
    Search public open-source code, documentation, metadata, vulnerabilities, changelogs, and examples
  • vulntelREMOTELOCAL
    Free hosted CVE intel for bug-bounty agents: CVE fact-check, attack approaches from paid H1 reports
  • PeriscopeREMOTELOCAL
    MCP broker into your live Neovim/diver config: LSP, formatters, linters, DAP, MATE attention

Ready-made AI agents

An MCP server is a connector you add to your own assistant. These are finished products that do the same job for you:
All AI agents to review pull requests, ranked →

Facts & evidence

Each fact shows where it was seen and when.
FactValueEvidenceSourceLast confirmed
Hosted endpointhttps://x402-package-advisories.microtools-x402.workers.dev/mcpDECLAREDSRC-001 Official MCP Registry3h ago
Local install (package)noDECLAREDSRC-001 Official MCP Registry3h ago
Remote access (hosted)yesDECLAREDSRC-001 Official MCP Registry3h ago
Websitehttps://x402-package-advisories.microtools-x402.workers.dev/DECLAREDSRC-001 Official MCP Registry3h ago
Registry statusactiveDECLAREDSRC-001 Official MCP Registry3h ago
Version0.1.0DECLAREDSRC-001 Official MCP Registry3h ago
MCP serveryesDECLAREDSRC-001 Official MCP Registry3h ago

Change history

  • NEW03 Nov 2026
    first seen in the index

Is this page accurate?

Flag it and our robot re-checks the official source. Reports never change a score.

Do you run x402 Package Advisories? Know when it stops answering

For publishers · optional

Its hosted endpoint can be monitored. Monitoring Pro connects every 30 minutes like an AI assistant, emails you within the hour when it stops answering, keeps a 90-day availability history and adds your answer rate to your badge.

Monitor x402 Package AdvisoriesLaunch offer $39.99 once, for life instead of $9.99/month · All plans

Monitoring never changes a score or a rank.

Are you the publisher of x402 Package Advisories?

Free · show your listing

An independent listing builds trust with your buyers. Announce it, and add the badge to your website or README.

Announce it on LinkedInListed on Electra Index
<a href="https://electraindex.com/mcp/x402-package-advisories?utm_source=badge&utm_medium=share&utm_campaign=listing"><img src="https://electraindex.com/api/badge/x402-package-advisories" alt="Listed on Electra Index"></a>

Questions about x402 Package Advisories

How do I connect x402 Package Advisories?

Use the hosted endpoint https://x402-package-advisories.microtools-x402.workers.dev/mcp in your assistant's MCP settings. The exact settings are in "How to connect" above, as declared in the Official MCP Registry.

What tools does x402 Package Advisories offer?

When Electra Index connected on 03 Nov 2026, it listed 5 tools: package_advisories, manifest_audit, vuln_details, ping, health. The full list is in "Live check" above.

Is x402 Package Advisories online?

Yes. Its hosted endpoint answered an MCP connection from Electra Index 2h ago.

What can I use x402 Package Advisories for?

Based on its description, it is most relevant to: review pull requests, scan code for vulnerabilities.