Pay-per-call agent security (x402): injection, tools, shell/SQL, memory, leaks, docs, safe web reads
Connect Runs on your machine
claude mcp add grindfree-agent-security -e X402_PRIVATE_KEY=<X402_PRIVATE_KEY> -- npx -y @grindfree/[email protected]{
"mcpServers": {
"grindfree-agent-security": {
"command": "npx",
"args": [
"-y",
"@grindfree/[email protected]"
],
"env": {
"X402_PRIVATE_KEY": "<X402_PRIVATE_KEY>"
}
}
}
}{
"mcpServers": {
"grindfree-agent-security": {
"command": "npx",
"args": [
"-y",
"@grindfree/[email protected]"
],
"env": {
"X402_PRIVATE_KEY": "<X402_PRIVATE_KEY>"
}
}
}
}{
"servers": {
"grindfree-agent-security": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@grindfree/[email protected]"
],
"env": {
"X402_PRIVATE_KEY": "<X402_PRIVATE_KEY>"
}
}
}
}Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.
Tools
This server runs locally, so its tools are listed by your MCP client once it starts.
Environment variables
| Name | Description |
|---|---|
X402_PRIVATE_KEYRequired, secret | Caller's own Base USDC EVM private key (0x…). Used only by the local MCP host to settle x402 payments. Never a GrindFree key; never commit this value. |
Details
| Package | @grindfree/[email protected] (NPM, stdio) |
| First published | 12 Nov 2026 |
| Last updated | 12 Nov 2026 |
| Registry name | io.github.ronin93/grindfree-agent-security |
More ai and media servers See all
Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.