Pre-fetch SSRF & URL safety validator.

Block loopback, RFC1918, cloud metadata IPs, and obfuscated URLs before fetch — $0.002 Base USDC.

{
  "input": {
    "url": "http://[::ffff:169.254.169.254]/latest/meta-data/iam/"
  },
  "output": {
    "ok": true,
    "safe": false,
    "ssrfDetected": true,
    "riskScore": 100,
    "reasons": [
      "ipv6_ipv4_mapped",
      "ssrf_cloud_metadata"
    ]
  }
}

import { wrapFetchWithPaymentFromConfig } from "@x402/fetch";
import { ExactEvmScheme } from "@x402/evm";
import { privateKeyToAccount } from "viem/accounts";
const acct = privateKeyToAccount(process.env.PRIVATE_KEY);
const payFetch = wrapFetchWithPaymentFromConfig(fetch, { schemes: [{ network: "eip155:8453", client: new ExactEvmScheme(acct) }] });
const res = await payFetch("https://aso-x402-screen.asostudio.workers.dev/v1/screen/url?url=https%3A%2F%2Fdevelopers.cloudflare.com%2F");

{
  "mcpServers": {
    "edgescreen": {
      "url": "https://aso-x402-screen.asostudio.workers.dev/mcp"
    }
  },
  "tool": "screen_url",
  "arguments": {
    "url": "http://[::ffff:169.254.169.254]/latest/meta-data/iam/"
  }
}

Base USDC wallet · Free MCP tools need no wallet