argon-x402-mcp-bridge
# Argon x402 MCP Bridge (`argon-x402-mcp-bridge`)
Zero-dependency Node.js (`>=20`) `stdio`-to-Streamable-HTTP Model Context Protocol bridge connecting desktop & IDE agents (Claude Desktop, Cursor, Windsurf, Cline, Roo, Official MCP Registry, Glama, Smithery) to **`argon-x402-mcp-gateway`**.
---
## Exposed Tools (`tools/list`)
1. **`telegram_osint_pulse`** — Live public Telegram channel scraper (`t.me/s/`) + DexScreener social/token velocity analyzer (`3` free calls/UTC day/IP; `$0.008` Base USDC thereafter).
2. **`token_forensics_preflight`** — Multi-chain (`solana`, `base`, `ethereum`) honeypot, Mint/Freeze authority, LP lock, and deployer risk preflight (`3` free calls/UTC day/IP; `$0.05` Base USDC thereafter).
3. **`polymarket_slippage_preflight`** — Live Polymarket Gamma + CLOB orderbook VWAP slippage simulator & UMA Optimistic Oracle resolution-rule analyzer (`3` free calls/UTC day/IP; `$0.01` Base USDC thereafter).
4. **`threat_intel_batch_lookup`** — Privacy-preserving batch SHA-256 indicator reputation lookup for MCP configs, `.cursorrules`, and `.vsix` artifacts (`3` free calls/UTC day/IP; `$0.01` Base USDC thereafter).
---
## Quick Start (`mcp.json` / `claude_desktop_config.json`)
```json
{
"mcpServers": {
"argon-intelligence": {
"command": "npx",
"args": ["-y", "argon-x402-mcp-bridge@1.0.0"],
"env": {
"ARGON_GATEWAY_URL": "https://argon-x402-mcp-gateway.workers.dev",
"ARGON_X402_PAYMENT_SIGNATURE": "${env:ARGON_X402_PAYMENT_SIGNATURE}"
}
}
}
}
```
---
## Security & x402 Settlement Guarantees
- **Zero Runtime Dependencies:** Built strictly on Node.js native `fetch` and `Buffer` streams (`0` third-party `npm` dependencies).
- **Dual-Mode Framing:** Auto-detects both standard MCP newline-delimited JSON-RPC (`2024-11-05` / `2025-03-26` / `2025-06-18`) and LSP-style `Content-Length` byte framing with a `4 MB` safety cap.
- **TLS & `payTo` Cryptographic Pinning:** Rejects cleartext non-loopback `http://` gateway URLs by default and verifies every `x402` challenge against canonical Base Mainnet (`eip155:8453`) USDC (`0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913`) recipient **`0xcbEDbeCC127a32217075Ff40f16Ec804aa1E0533`** before surfacing payment instructions.
---
## License
MIT © Argon Security
TDQS
Scored across 4 tools
Each tool targets a completely different domain: Telegram OSINT, token contract forensics, Polymarket slippage simulation, and threat-intel hash lookup. There is no realistic scenario where an agent would confuse one for another, and the descriptions reinforce the distinct resource/action.
All four names use consistent snake_case with a domain_topic_suffix structure (pulse/preflight/lookup), which reads predictably. The only minor deviation is that the suffix varies rather than following a strict verb_noun pattern, but the style is uniform.
Four tools is on the lean side, but each represents a genuinely distinct paid x402 service with its own purpose and pricing, so none feel padded. A slightly broader surface might be warranted, but the scope is respected.
Each tool appears to be a self-contained analysis endpoint, so per-tool lifecycle coverage looks adequate. Minor gaps exist around payment/credit status checks or combined multi-service workflows, but agents can work around these.