PulseFeed

Verify before you pay or install. **Before you pay an x402 endpoint** — liveness, a 0–100 trust score, scam flags (payTo hijack, bait-and-switch pricing, honeypot receiver) and a pay/avoid verdict, with on-chain proof links on Base. **Before you trust an MCP server or npm package** — what changed *after* people adopted it: install script added in a later version, ownership swapped, repository removed, package unpublished, build provenance lost. Static scanners answer whether a package is safe today. This answers the other question, and it needs yesterday's snapshot to exist. PulseFeed diffs the entire MCP registry against the previous day's snapshot every night, and re-probes the x402 endpoint population daily. The series runs from 2026-07-30 and cannot be reconstructed after the fact. Open data: [drift feed](https://pulsefeed.dev/mcp/drift) · [correction page](https://pulsefeed.dev/correction) · [dataset](https://huggingface.co/datasets/Nikolife/pulsefeed-x402-security)

First seen 2 Oct 2026. Evidence as of 5 Oct 2026.