io.github.rezearcher/tech-risk

Measured conclusion: Deep-tested. L2 outcome: tools_ok.

x402 MCP for agents: crypto prices, funding, DeFi yields, Polymarket, Base RPC + MCP security.

Add to your agent

Copy this into your MCP client config:

{
  "mcpServers": {
    "tech-risk": {
      "url": "https://x402-data-api.sigrunner.workers.dev/mcp",
      "transport": "streamable-http"
    }
  }
}

Measured tools (26)

• enrich_tech_risk

  Security enrichment: tech-stack fingerprint + CVE mapping + EPSS + CISA KEV + verdict (clear/review/block) for a domain. Cost: $0.005 USDC per call (x402 micropayment).

  Parameters:

  • domain — string
  • techstack — array

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• enrich_domain

  Firmographic + tech-stack enrichment: RDAP registrant/registrar, DNS records, full subdomain enumeration + certificate-transparency history, tech-stack fingerprint, verdict (clear/review/block, based on domain age) for a domain. Cost: $0.005 USDC per call via the shared MCP payment gate (the direct HTTP endpoint GET /enrich/domain is $0.01 — MCP tools/call is gated at a flat $0.005 per request).

  Parameters:

  • domain (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• scan_mcp_server

  Security-audit a target MCP server for prompt-injection / tool-poisoning. Fetches the server's advertised tools and statically analyzes each for hidden instructions, data-exfiltration hints, dangerous capabilities, cross-tool shadowing, and invisible-unicode payloads (OWASP LLM01/LLM08). Returns findings + a 0-100 risk score + verdict (clear/review/block). Cost: $0.005 USDC per scan via x402 (GET /scan/mcp HTTP variant is $0.05).

  Parameters:

  • url (required) — string — Target MCP server endpoint URL to audit

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• scan_mcp_preview

  FREE preview scan of a target MCP server for tool-poisoning / prompt-injection. Returns issue count, severity breakdown, risk score, and verdict (clear/review/block) — but NOT which tools or the evidence. Use this to check any MCP server (including your own) at no cost; if issues are found, call the paid scan_mcp_server for the itemized findings + remediation. No payment required.

  Parameters:

  • url (required) — string — Target MCP server endpoint URL to preview-scan (free)

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• crypto_prices

  Live spot token prices (price, change_24h, symbol, confidence, timestamp) for CoinGecko ids, sourced from DefiLlama. Cost: $0.005 USDC per call via x402.

  Parameters:

  • coins — string — Comma-separated CoinGecko ids, e.g. "bitcoin,ethereum,solana" (default; max 25)

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• crypto_funding

  Live cross-venue perpetual-futures funding rates from Hyperliquid+OKX+dYdX (per-venue rate, arb spread in bps, cheapest-long/richest-short venue, premium/basis, annualized_hl, annualized_okx, LONGS_PAY/SHORTS_PAY/NEUTRAL signal, next_funding_ts, mark/oracle price, open interest, day volume), ranked by volume. Venues that are unreachable or don't list a given coin are omitted per-coin — Hyperliquid is always present. Cost: $0.005 USDC per call via x402.

  Parameters:

  • limit — number — Number of results, default 20, max 100

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• defi_yields

  Live DeFi lending/LP yield pools (project, chain, symbol, pool id, APY breakdown incl. 1d/7d/30d trend + apyBase7d/apyMean30d, IL risk incl. il7d, exposure, reward/underlying tokens, outlier flag, mu/sigma, DefiLlama stability forecast, TVL, stablecoin flag) from DefiLlama, ranked by TVL (or risk-adjusted APY = apy/sigma). Cost: $0.005 USDC per call via x402.

  Parameters:

  • sort — string — Sort order: 'tvl' (default) or 'risk_adjusted' (apy/sigma)
  • chain — string — Filter by chain name
  • limit — number — Number of results, default 20, max 100
  • stable — boolean — Only stablecoin pools
  • project — string — Filter by DefiLlama project slug

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• pm_markets

  Live Polymarket prediction-market data — question, outcomes, outcome prices, bestBid/bestAsk/spread, volume24hr/volume1wk, oneDayPriceChange, clobTokenIds, conditionId, category tags, liquidity, end date — ranked by volume24hr. Cost: $0.005 USDC per call via x402.

  Parameters:

  • limit — number — Number of results, default 20, max 100
  • query — string — Case-insensitive keyword filter on the market question

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• crypto_prices_preview

  FREE 1-item sample of live token prices. No payment required.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• crypto_funding_preview

  FREE 1-item sample of live cross-venue funding rates. No payment required.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• defi_yields_preview

  FREE 1-item sample of live DeFi yield pools. No payment required.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• pm_markets_preview

  FREE top-1 sample of live Polymarket prediction markets, ranked by volume24hr. No payment required.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• chain_block_number

  Current Base mainnet block number via multi-provider JSON-RPC (automatic failover across 4 providers, never fails on one provider's rate limit). Cost: $0.005 USDC per call via x402.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• chain_gas_price

  Current Base mainnet gas price (wei/gwei), EIP-1559 base_fee_gwei/priority_fee_gwei, and gas_price_usd (ETH price cross-call — no price oracle on ETH-only competitors) via multi-provider JSON-RPC. Cost: $0.005 USDC per call via x402.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• chain_balance

  Native ETH balance of a Base mainnet address, incl. balance_usd (ETH price cross-call — no price oracle on ETH-only competitors), via multi-provider JSON-RPC. Cost: $0.005 USDC per call via x402.

  Parameters:

  • address (required) — string — 0x-prefixed 20-byte Base address

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• chain_token_balance

  ERC-20 token balance of a Base mainnet address via multi-provider JSON-RPC, incl. symbol/decimals/balance_formatted (per-token-contract cached in-isolate). Cost: $0.005 USDC per call via x402.

  Parameters:

  • address (required) — string — 0x-prefixed 20-byte holder address
  • token (required) — string — 0x-prefixed 20-byte ERC-20 contract address

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• chain_tx

  Transaction details by hash on Base mainnet via multi-provider JSON-RPC. Cost: $0.005 USDC per call via x402.

  Parameters:

  • hash (required) — string — 0x-prefixed 32-byte transaction hash

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• chain_wallet

  Wallet screening bundle (balance, activity, contract vs EOA check): ETH balance + balance_usd (ETH price cross-call) + tx count + contract-code check (EIP-7702 delegated-EOA aware) for a Base mainnet address, in one call. Cost: $0.005 USDC per call via x402.

  Parameters:

  • address (required) — string — 0x-prefixed 20-byte Base address

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• chain_token_security

  Token security / honeypot detector for a Base mainnet ERC-20: EIP-1967/1822 proxy + upgradeability detection, bytecode dispatcher scan for mint/pause/blacklist/fee-setter/ownership selectors, owner() renouncement check, and a live eth_call state-override simulation testing whether a synthetic wallet can actually transfer() the token. Returns risk_score (0-100) + verdict (clear/review/block) + human-readable flags. Real compute an agent can't trivially self-serve. Cost: $0.005 USDC per call via x402.

  Parameters:

  • token (required) — string — 0x-prefixed 20-byte ERC-20 contract address on Base mainnet

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• chain_block_number_preview

  FREE live sample of the current Base mainnet block number — identical data to the paid chain_block_number tool. No payment required.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• chain_gas_price_preview

  FREE live sample of the current Base mainnet gas price — identical data to the paid chain_gas_price tool. No payment required.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• chain_token_report

  Token security check (honeypot detector + rug-pull risk score) for a Base ERC-20 in one call, decision-grade trade-safety verdict: SAFE | CAUTION | AVOID plus risk_score (0-100) and reasons, bundling honeypot/sellability simulation, owner-renounced + mint/pause/blacklist/fee-setter/upgradeable-proxy checks, token symbol/name/decimals, and Uniswap v3 WETH-pool liquidity (USD). Replaces many RPC calls and prevents a bad trade. Cost: $0.005 USDC per call via the shared MCP payment gate (the direct HTTP endpoint GET /chain/token-report is $0.01 — MCP tools/call is gated at a flat $0.005 per request).

  Parameters:

  • token (required) — string — 0x-prefixed 20-byte ERC-20 contract address on Base mainnet

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• gate_swap

  Pre-trade GO / HOLD / BLOCK gate for a Base ERC-20 swap: honeypot/sellability + admin-control checks + Uniswap v3 liquidity vs. your trade size. Returns a top-level `sized_verdict` one-liner (decision + pool-depth % + max-safe size + round-trip breakeven + exit recovery, read in one shot) AND the full decision-grade sizing — per $100 / $1k / $10k / $50k (and your exact notional_usd): entry-slippage + exit-simulation (net USD recovered vs lost to slippage), round-trip breakeven move %, and max_safe_notional_usd. Cost: $0.005 USDC per call via the shared MCP payment gate (the direct HTTP endpoint GET /gate/swap is $0.008 — MCP tools/call is gated at a flat $0.005 per request).

  Parameters:

  • token (required) — string — 0x-prefixed ERC-20 contract on Base mainnet
  • side — string — default buy
  • notional_usd — number — intended trade size in USD (default 100)

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• gate_swap_preview

  FREE live sample of the gate_swap pre-trade GO/HOLD/BLOCK decision for a demo Base token (usdc|weth|cbbtc|aero|degen), same shape as the paid gate_swap tool. The paid gate_swap tool additionally returns a top-level `sized_verdict` one-liner plus the full `sizing` object (entry/exit slippage simulation + round-trip breakeven + max_safe_notional_usd); the `paid_adds` block here names those fields. No payment required.

  Parameters:

  • side — string — default buy
  • token — string — demo token, default usdc
  • notional_usd — number — trade size in USD (default 100)

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• chain_token_report_preview

  FREE full real trade-safety report (SAFE/CAUTION/AVOID verdict) for Base USDC, same depth as the paid chain_token_report tool. No payment required.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• chain_token_security_preview

  FREE full real analysis of a fixed well-known token (Base WETH) via the token security / honeypot detector — same depth as the paid chain_token_security tool, so you can see the real product before paying. To analyze an arbitrary token, use the paid chain_token_security tool. No payment required.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

Publisher website

Measured by MCPYP probing. Untested fields are omitted, never estimated. Listing is always free; MCPYP never proxies calls or stores user tokens.