mcp-manifest-lint
Linter di manifest MCP: valida un server.json del registro MCP (schema ufficiale 2025-12-11: nome DNS inverso, descrizione di 100 caratteri, versioni fissate, packages registryType/transport, remotes, variabili d’ambiente, isSecret, fileSha256, additionalProperties) o una configurazione host (mcpServers/servers: command vs url, args, env, segreti in chiaro). JSON in linea o URL.
Endpoint
GET|POST https://forge-tools.dentreprise.workers.dev/api/mcp-manifest-lint
Parametri
| Nome | Obbligatorio | Tipo | Descrizione |
|---|---|---|---|
url | Facoltativo | string | URL of server.json or config |
manifest | Facoltativo | object | Inline server.json or host config (POST) |
kind | Facoltativo | string | server_json or host_config (auto-detected) |
Esempio di richiesta (non pagata — attendi 402)
curl -sS -D - "https://forge-tools.dentreprise.workers.dev/api/mcp-manifest-lint?manifest=%5Bobject+Object%5D"
Esempio di challenge 402
Lo stesso oggetto è inviato anche come intestazione PAYMENT-REQUIRED in base64. Gli importi sono unità USDC atomiche (6 decimali).
{
"x402Version": 2,
"error": "Payment required",
"resource": {
"url": "https://forge-tools.dentreprise.workers.dev/api/mcp-manifest-lint",
"description": "MCP manifest linter: validates an MCP registry server.json (official schema 2025-12-11: reverse-DNS name, 100-char description, pinned versions, packages registryType/transport, remotes, env vars, isSecret, fileSha256, additionalProperties) or a host config (mcpServers/servers: command vs url, args, env, hard-coded secrets). Inline JSON or URL.",
"mimeType": "application/json"
},
"accepts": [
{
"scheme": "exact",
"network": "eip155:8453",
"amount": "2000",
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"payTo": "0x7B8bf45ac6AcbA6D4CFB626b57D3f5fF3C9C89F7",
"maxTimeoutSeconds": 120,
"extra": {
"name": "USD Coin",
"version": "2"
}
}
]
}Riprova con pagamento
curl -sS "https://forge-tools.dentreprise.workers.dev/api/mcp-manifest-lint?manifest=%5Bobject+Object%5D" \ -H "PAYMENT-SIGNATURE: $PAYMENT"
Esempio di risposta
{
"kind": "server_json",
"valid": true,
"errors": 0,
"warnings": 1,
"registry_ready": false,
"issues": [
{
"level": "warning",
"path": "$schema"
}
]
}Demo / campione gratuito
Questo tool è sul worker della wave 1. ?demo=1 restituisce un campione o un estratto etichettato con HTTP 200 e senza pagamento. Il body non sono dati live. Anche le prime 3 chiamate reali riuscite per IP e giorno UTC sono gratuite.
curl -sS "https://forge-tools.dentreprise.workers.dev/api/mcp-manifest-lint?manifest=%5Bobject+Object%5D&demo=1"
Risposta demo etichettata
{
"demo": true,
"demo_label": "DEMO / SAMPLE — not live data. This is a labelled example response and was not charged.",
"charged": false,
"tool": "/api/mcp-manifest-lint",
"docs": "https://agent-hub.dentreprise.workers.dev/tools/mcp-manifest-lint/",
"how_to_get_live_data": "Call the same URL without demo=1. The first 3 successful real calls per IP per UTC day are free; after that attach an x402 v2 PAYMENT-SIGNATURE (USDC on Base).",
"sample": {
"kind": "server_json",
"valid": true,
"errors": 0,
"warnings": 1,
"registry_ready": false,
"issues": [
{
"level": "warning",
"path": "$schema"
}
]
}
}JavaScript — @x402/fetch
Client ufficiale x402 v2. Installa @x402/fetch e @x402/evm. Il vecchio nome di pacchetto x402-fetch è la linea v1 deprecata e non va usato per questi endpoint.
import { wrapFetchWithPaymentFromConfig } from "@x402/fetch";
import { ExactEvmScheme } from "@x402/evm";
import { privateKeyToAccount } from "viem/accounts";
// Official x402 v2 client. The older package name "x402-fetch" is the deprecated v1 line.
const account = privateKeyToAccount(process.env.EVM_PRIVATE_KEY);
const fetchWithPayment = wrapFetchWithPaymentFromConfig(fetch, {
schemes: [{ network: "eip155:8453", client: new ExactEvmScheme(account) }],
});
const res = await fetchWithPayment(
"https://forge-tools.dentreprise.workers.dev/api/mcp-manifest-lint?manifest=%5Bobject+Object%5D"
);
console.log(await res.json());Python — x402
Pacchetto ufficiale PyPI x402. Usa x402HttpxClient (async) o x402_requests (sync) dopo register_exact_evm_client con EthAccountSigner.
import asyncio
import os
from eth_account import Account
from x402 import x402Client
from x402.http.clients import x402HttpxClient
from x402.mechanisms.evm import EthAccountSigner
from x402.mechanisms.evm.exact.register import register_exact_evm_client
# Official PyPI package: x402
account = Account.from_key(os.environ["EVM_PRIVATE_KEY"])
client = x402Client()
register_exact_evm_client(client, EthAccountSigner(account))
async def main():
async with x402HttpxClient(client) as http:
res = await http.get("https://forge-tools.dentreprise.workers.dev/api/mcp-manifest-lint?manifest=%5Bobject+Object%5D")
print(res.json())
asyncio.run(main())
# Sync alternative:
# from x402 import x402ClientSync
# from x402.http.clients import x402_requests
# client = x402ClientSync()
# register_exact_evm_client(client, EthAccountSigner(account))
# with x402_requests(client) as session:
# print(session.get("https://forge-tools.dentreprise.workers.dev/api/mcp-manifest-lint?manifest=%5Bobject+Object%5D").json())Server MCP — forge-agent-mcp
stdio copre l’intero catalogo (entrambi gli host API). Clona forge-agent-mcp e punta il client MCP a src/server.mjs. Il remote Streamable HTTP ospitato sul gateway originale espone ancora solo i tool di quel gateway.
{
"mcpServers": {
"forge-agent-hub": {
"command": "node",
"args": ["/path/to/forge-agent-mcp/src/server.mjs"]
},
"forge-agent-api": {
"url": "https://x402-gateway.forge-x402.workers.dev/mcp",
"transport": "streamable-http"
}
}
}Wrapper di strumento LangChain
Avvolgi gli stessi client x402 come strumento LangChain con DynamicStructuredTool (@langchain/core) o @tool (langchain_core).
import { DynamicStructuredTool } from "@langchain/core/tools";
import { z } from "zod";
import { wrapFetchWithPaymentFromConfig } from "@x402/fetch";
import { ExactEvmScheme } from "@x402/evm";
import { privateKeyToAccount } from "viem/accounts";
const account = privateKeyToAccount(process.env.EVM_PRIVATE_KEY);
const fetchWithPayment = wrapFetchWithPaymentFromConfig(fetch, {
schemes: [{ network: "eip155:8453", client: new ExactEvmScheme(account) }],
});
export const mcp_manifest_lint = new DynamicStructuredTool({
name: "mcp_manifest_lint",
description: "MCP manifest linter: validates an MCP registry server.",
schema: z.object({}),
func: async (input) => {
const res = await fetchWithPayment("https://forge-tools.dentreprise.workers.dev/api/mcp-manifest-lint" + "?" + new URLSearchParams(input));
return JSON.stringify(await res.json());
},
});import os
from langchain_core.tools import tool
from eth_account import Account
from x402 import x402ClientSync
from x402.http.clients import x402_requests
from x402.mechanisms.evm import EthAccountSigner
from x402.mechanisms.evm.exact.register import register_exact_evm_client
account = Account.from_key(os.environ["EVM_PRIVATE_KEY"])
client = x402ClientSync()
register_exact_evm_client(client, EthAccountSigner(account))
@tool
def mcp_manifest_lint() -> str:
"""MCP manifest linter: validates an MCP registry server."""
with x402_requests(client) as session:
return session.get("https://forge-tools.dentreprise.workers.dev/api/mcp-manifest-lint").textEndpoint correlati
mcp-inspect
Ispettore di server MCP remoto (Streamable HTTP): handshake di initialize, versione del protocollo, serverInfo, capacità, sessione, latenza, tools/list con controlli per strumento (schema del nome, descrizione, oggetto inputSchema, parametri richiesti non documentati o mancanti), conteggi di resources/prompts.
openapi-to-mcp
Converte una specifica OpenAPI (JSON/YAML, URL o in linea) in definizioni di strumenti MCP: nomi unici sicuri per gli LLM, descrizioni, inputSchema JSON Schema (parametri query/path/header + body JSON), annotazioni MCP (readOnly/destructive/idempotent), più indicazioni di inoltro HTTP e una risposta tools/list pronta.