XGuard Universal Paid AI Agent + Secretless Gateway

XGuard operates ONE remote MCP server at https://api.xguardgate.com/mcp, on the same host as its OpenAPI, its A2A JSON-RPC endpoint and its x402 facilitator relay. It is Streamable HTTP, speaks MCP protocol version 2026-07-28, identifies itself as serverInfo {xguard-universal-paid-secretless-gateway, 5.1.0}, and answers initialize and tools/list anonymously with exactly three tools, each carrying a real JSON Schema inputSchema and MCP tool annotations (readOnlyHint / destructiveHint / idempotentHint / openWorldHint). The initialize instructions and the provider's README both say the live tools/list is deliberately small: the paid-outcome chokepoint is xguard_execute, and the older explicit tool names that llms-install.md still lists (xguard.web.fetch, xguard_secretless_egress, xguard_proofrail, ...) are "compatibility references, not the default catalog". A paid tool call returns an HTTP 200 JSON-RPC result with isError: true and the x402 PaymentRequired challenge in both structuredContent and content[0].text; a funded x402 MCP client retries the identical arguments with params._meta["x402/payment"] and receives settlement in result._meta["x402/payment-response"]. Authorship is not in question: the tool names, the serverInfo name, the canonical-identity block in every response header set (x-xguard-canonical-mcp) and the MCP Registry entry io.github.moelayyan90/xguard-control-plane all name this provider.

One-click install for Cursor, VS Code, Claude, and 20+ other MCP clients, powered by API Commons MCP Install — visit install.apicommons.org for more information.