VerifyLite

Measured conclusion: Deep-tested. L2 outcome: tools_ok.

Add to your agent

Copy this into your MCP client config:

{
  "mcpServers": {
    "VerifyLite": {
      "url": "https://verifylite.hydratinghealingtouch.workers.dev/mcp",
      "transport": "streamable-http"
    }
  }
}

Measured tools (29)

• list_prices read-only

  Lists every VerifyLite tool and its current price. Free.

  Hints: read-only yes · destructive not declared · idempotent not declared · open-world no

• verify_url read-only

  URL syntax validator. Takes one absolute HTTP or HTTPS URL and returns its normalized form, or a specific error code: unparseable, unsupported scheme, embedded credentials, IP literal, or local/metadata hostname. Never contacts the destination, so it is fast and side-effect free. Useful for cleaning URLs from user input, scraped pages, or LLM output before fetching them. Paid via x402; see list_prices.

  Parameters:

  • url (required) — string — Absolute HTTP or HTTPS URL.

  Hints: read-only yes · destructive not declared · idempotent not declared · open-world yes

• check_site_safety read-only

  Website safety check for one URL. Passively fetches the site and returns a verdict (safe, caution, unsafe), a 0-100 score, and evidence-backed flags: TLS validity, HTTP-to-HTTPS redirect, redirect chain and offsite redirects, security headers, mixed content, insecure forms, and domain age from the official registry. Useful before visiting, linking to, buying from, or submitting data to an unfamiliar site. Not charged if the host cannot be checked. Paid via x402; see list_prices.

  Parameters:

  • url (required) — string — Absolute HTTP or HTTPS URL.

  Hints: read-only yes · destructive not declared · idempotent not declared · open-world yes

• check_site_safety_pro read-only

  Website safety check plus a Google Web Risk lookup for malware, phishing, and unwanted software. Includes the full /safe report: verdict (safe, caution, unsafe), 0-100 score, TLS, redirects, security headers, mixed content, insecure forms, and domain age. A blocklist hit makes the verdict unsafe. Useful for screening links before a payment, login, or download. Not charged if the blocklist cannot be reached. Paid via x402; see list_prices.

  Parameters:

  • url (required) — string — Absolute HTTP or HTTPS URL.

  Hints: read-only yes · destructive not declared · idempotent not declared · open-world yes

• check_sites_batch read-only

  Batch website safety check: the full /safe report for several URLs in one call, priced per site and cheaper than single checks. Each result has a verdict (safe, caution, unsafe), a 0-100 score, and evidence-backed flags for TLS, redirects, security headers, mixed content, insecure forms, and domain age, plus a summary count. Useful for screening every link in a search result, email, or document at once. Not charged if no site can be checked. Paid via x402; see list_prices.

  Parameters:

  • urls (required) — array — Absolute HTTP or HTTPS URLs. Priced per unique URL.

  Hints: read-only yes · destructive not declared · idempotent not declared · open-world yes

• transcribe_audio read-only

  Speech-to-text for one audio or video file by URL, using Whisper (turbo) on a GPU. Returns the full transcript, timed segments, ready-made SRT and WebVTT captions, and the detected language; optional translation to English. Files up to 25 MB (about 25 minutes of typical MP3). Useful for captioning videos, indexing podcasts, or reading meetings. Not charged if the file can't be fetched or transcribed. Paid via x402; see list_prices.

  Parameters:

  • url (required) — string — Absolute HTTP or HTTPS URL of an audio or video file, up to 25 MB.
  • language — string — Optional language code, e.g. 'en'. Detected if omitted.
  • translate — boolean — Also translate the speech to English.

  Hints: read-only yes · destructive not declared · idempotent not declared · open-world yes

• read_page read-only

  Web page reader: fetches one URL and returns its main content as clean markdown with the page title, description, language, and word count. Uses the site's own Markdown version when it offers one; otherwise strips navigation, footers, scripts, and styles. Includes a token estimate. Useful for feeding web pages to an LLM, summarizing articles, or extracting text for research. Not charged if the page can't be fetched or isn't text. Paid via x402; see list_prices.

  Parameters:

  • url (required) — string — Absolute HTTP or HTTPS URL of the page to read.

  Hints: read-only yes · destructive not declared · idempotent not declared · open-world yes

• link_preview read-only

  Link preview: returns the title, description, preview image, site name, favicon, canonical URL, and Open Graph/Twitter card details for one URL, like a chat app's link unfurl. Useful when an agent posts, shares, or summarizes links and needs clean metadata without reading the whole page. Not charged if the page can't be fetched. Paid via x402; see list_prices.

  Parameters:

  • url (required) — string — Absolute HTTP or HTTPS URL to preview.

  Hints: read-only yes · destructive not declared · idempotent not declared · open-world yes

• domain_report read-only

  Domain report: registration date, expiry, registrar, status, and name servers from the official registry (RDAP), plus DNS records (A, AAAA, MX, NS, CAA) and email security (SPF, DMARC policy), with flags for new, expiring, or misconfigured domains. Useful for vetting a company, vendor, or link before trusting it. Not charged for invalid or reserved domain names. Paid via x402; see list_prices.

  Parameters:

  • domain (required) — string — Domain name (example.com) or a URL.

  Hints: read-only yes · destructive not declared · idempotent not declared · open-world yes

• check_email read-only

  Email check: validates the address format, confirms the domain exists and accepts mail (MX), and flags disposable providers, role accounts (info@, support@), and free providers. Returns deliverable_likely, risky, undeliverable, or invalid with a reason. No message is sent. Useful for cleaning sign-up lists and lead data before outreach. Paid via x402; see list_prices.

  Parameters:

  • email (required) — string — Email address to check.

  Hints: read-only yes · destructive not declared · idempotent not declared · open-world yes

• seo_check read-only

  SEO check for one page: whether search engines can index it (meta robots, X-Robots-Tag, robots.txt rules), title and meta description length, canonical URL, H1 headings, viewport, language, Open Graph tags, sitemap, HTTPS, and redirects, with a 0-100 score and a list of issues by severity. Useful for site audits and pre-launch checks. Not charged if the page can't be fetched. Paid via x402; see list_prices.

  Parameters:

  • url (required) — string — Absolute HTTP or HTTPS URL of the page to audit.

  Hints: read-only yes · destructive not declared · idempotent not declared · open-world yes

• chain_balance read-only

  Base mainnet balance for one address: ETH and USDC (human-readable and raw), plus up to 10 ERC-20 tokens you list (with symbol and decimals), transaction count, and whether it is a wallet or a contract. One price for 0 to 10 tokens. Useful for checking a wallet is funded before a payment, confirming a payout or airdrop landed, tracking agent or treasury wallets, or screening a counterparty. Read-only. Not charged for invalid addresses or when Base can't be reached. Paid via x402; see list_prices.

  Parameters:

  • address (required) — string — 0x address on Base (40 hex characters).
  • tokens — array — Optional: up to 10 ERC-20 token contract addresses on Base to also return balances for (an array, or one comma-separated string). ETH and USDC are always included.

  Hints: read-only yes · destructive not declared · idempotent not declared · open-world yes

• chain_tx read-only

  Base mainnet transaction lookup by hash: status (success, failed, or pending), block, timestamp, confirmations, from, to, ETH value, total fee including the L1 data fee, method id, and every USDC transfer in the transaction decoded to sender, recipient, and amount. Useful for confirming that a USDC or x402 payment really settled before delivering goods. Read-only. Not charged for an invalid hash, a hash not found on Base, or when Base can't be reached. Paid via x402; see list_prices.

  Parameters:

  • hash (required) — string — 0x transaction hash (64 hex characters).

  Hints: read-only yes · destructive not declared · idempotent not declared · open-world yes

• chain_token read-only

  ERC-20 token metadata for one contract on Base mainnet: name, symbol, decimals, and total supply (human-readable and raw), with a flag for whether it behaves like an ERC-20 at all and whether it is native USDC. Handles older tokens that return bytes32 names. Useful for formatting token amounts correctly and spotting look-alike tokens. Read-only. Not charged for an invalid address or an address with no contract. Paid via x402; see list_prices.

  Parameters:

  • address (required) — string — Token contract 0x address on Base.

  Hints: read-only yes · destructive not declared · idempotent not declared · open-world yes

• chain_contract read-only

  Inspects one Base mainnet address: whether it holds contract code and how large, whether it is an EIP-1967 upgradeable proxy (and its implementation address), EIP-7702 delegation, and which standards it reports or behaves like (ERC-165, ERC-721 NFT, ERC-1155, ERC-20). Useful for knowing what kind of contract an agent is about to interact with or approve. Read-only. Not charged for an invalid address or when Base can't be reached. Paid via x402; see list_prices.

  Parameters:

  • address (required) — string — 0x address on Base.

  Hints: read-only yes · destructive not declared · idempotent not declared · open-world yes

• chain_gas read-only

  Current Base mainnet gas: gas price, base fee, and priority fee in gwei, plus estimated execution cost in ETH for an ETH transfer, a USDC transfer, and a typical swap, from the latest block. Useful for timing transactions and budgeting fees before sending. No input needed. Not charged when Base can't be reached. Paid via x402; see list_prices.

  Hints: read-only yes · destructive not declared · idempotent not declared · open-world yes

• chain_block read-only

  Base mainnet block details for the latest block or a given block number: number, hash, timestamp, transaction count, gas used and limit, and base fee. Useful for checking chain head and freshness, timestamping events, and counting confirmations. Read-only. Not charged for an invalid or future block number or when Base can't be reached. Paid via x402; see list_prices.

  Parameters:

  • number — string — Block number, or "latest" (default).

  Hints: read-only yes · destructive not declared · idempotent not declared · open-world yes

• token_safety_check read-only

  Risk check for an ERC-20 token on Base before buying, accepting, or holding it: reads the contract and its proxy implementation for owner powers (minting, pausing, blacklisting wallets, changing buy/sell taxes, trade limits, trading switches, burning others' tokens, upgrades), checks whether ownership was renounced and how much supply the owner holds. Returns a verdict, 0-100 risk score, and plain-language flags. Read-only. Not charged for invalid addresses or non-tokens. Paid via x402; see list_prices.

  Parameters:

  • address (required) — string — Token contract 0x address on Base.

  Hints: read-only yes · destructive not declared · idempotent not declared · open-world yes

• token_allowance_check read-only

  Approval check for one wallet and one ERC-20 token on Base: how much each spender (up to 10 app or router addresses) is allowed to move, flagging unlimited approvals and approvals covering the full balance, plus approvals made through Uniswap Permit2 with their expiry. Defaults to checking Permit2 itself. Useful before signing, for wallet hygiene, and for spotting approvals to revoke. Read-only. Not charged for invalid addresses or non-tokens. Paid via x402; see list_prices.

  Parameters:

  • owner (required) — string — Wallet 0x address on Base.
  • token (required) — string — Token contract 0x address on Base.
  • spenders — array — Optional: up to 10 spender addresses (array or comma-separated). Defaults to Uniswap Permit2.

  Hints: read-only yes · destructive not declared · idempotent not declared · open-world yes

• name_lookup read-only

  Resolves Basenames (name.base.eth, on Base) and ENS names (name.eth, on Ethereum) to wallet addresses, including a Base-specific address and profile records (avatar, description, url, X, GitHub). Or give an 0x address to get its primary name, verified by resolving the name back to the same address. A bare name like jesse means jesse.base.eth. Useful before sending funds to a name or labeling counterparties. Read-only. Not charged for invalid or unregistered names. Paid via x402; see list_prices.

  Parameters:

  • name (required) — string — A name (jesse.base.eth, vitalik.eth, or just jesse) or an 0x address.

  Hints: read-only yes · destructive not declared · idempotent not declared · open-world yes

• crypto_price read-only

  Current prices in USD from Chainlink Data Feeds on Base mainnet: ETH, BTC, cbBTC, SOL, USDC, DAI, and EUR. One pair or all at once, each with the feed's last update time, age in seconds, and a stale flag, read straight from the oracle contracts (the same prices DeFi protocols use). Useful for valuing balances, converting USDC amounts, and checking a stablecoin peg. Not charged for an unknown pair or when the feeds can't be read. Paid via x402; see list_prices.

  Parameters:

  • pair — string — Optional pair, e.g. "ETH/USD" or "BTC". Omit for all: ETH/USD, BTC/USD, CBBTC/USD, SOL/USD, USDC/USD, DAI/USD, EUR/USD.

  Hints: read-only yes · destructive not declared · idempotent not declared · open-world yes

• check_prompt_injection read-only

  Prompt-injection screen for text or a web page an agent is about to read: finds instruction overrides (many languages and obfuscated spellings), fake system or role markers, jailbreak personas, data-exfiltration links, requests for keys or seed phrases, tool, shell, or payment hijacks, and hidden content (invisible Unicode smuggling, zero-width and bidi characters, HTML comments, hidden elements, base64). Returns a verdict, 0-100 risk score, findings, and cleaned text. Not charged on bad input. Paid via x402; see list_prices.

  Parameters:

  • url — string — Or a web page URL to fetch and check, including its hidden parts.
  • text — string — Text to check, up to 50,000 characters.

  Hints: read-only yes · destructive not declared · idempotent not declared · open-world yes

• repair_json read-only

  Turns messy LLM output into valid JSON: strips Markdown code fences and surrounding prose, fixes trailing commas, single quotes, unquoted keys, comments, Python True/None, cut-off brackets, and stringified JSON. Optionally validates the result against a JSON Schema (draft 4 to 2020-12) and lists each error with its location. Returns the parsed data, the JSON text, and what was changed. Not charged if no JSON can be recovered or the input is invalid. Paid via x402; see list_prices.

  Parameters:

  • text (required) — string — The broken JSON or LLM reply, up to 30,000 characters.
  • schema — object — Optional JSON Schema to validate the repaired data against.

  Hints: read-only yes · destructive not declared · idempotent not declared · open-world yes

• read_feed read-only

  RSS and Atom reader: give a feed URL or any news site, blog, or podcast page and get its latest items as clean JSON: title, link, published date, author, a plain-text summary, and media (podcast audio) links. Finds the feed automatically from the page when needed. Useful for news monitoring, research digests, and tracking competitors or releases. Not charged if no feed is found or it can't be fetched. Paid via x402; see list_prices.

  Parameters:

  • url (required) — string — Feed URL, or any site or page that has a feed.
  • limit — integer — How many items, 1 to 50 (default 20).

  Hints: read-only yes · destructive not declared · idempotent not declared · open-world yes

• get_time read-only

  Current time from a reliable server clock: UTC ISO timestamp, Unix seconds and milliseconds, and optionally the local date, time, weekday, and UTC offset in any IANA time zone (daylight saving handled). Useful because language models don't know the current date or time. Not charged for an unknown time zone. Paid via x402; see list_prices.

  Parameters:

  • tz — string — Optional IANA time zone, e.g. America/Chicago.

  Hints: read-only yes · destructive not declared · idempotent not declared · open-world yes

• new_uuid read-only

  Generates standards-compliant UUIDs from a cryptographic random source: version 4 (random) or version 7 (time-ordered, sorts by creation time, good for database keys), one or up to 100 per call. Useful for idempotency keys, record IDs, and correlation IDs. Not charged for invalid options. Paid via x402; see list_prices.

  Parameters:

  • count — integer — How many, 1 to 100 (default 1).
  • version — string — "v4" (default) or "v7".

  Hints: read-only yes · destructive not declared · idempotent not declared · open-world yes

• random_number read-only

  Cryptographically secure, unbiased randomness: whole numbers between min and max (default 1 to 100), or random picks from a list of choices, one or up to 100 per call. Useful because language models are bad at being random: fair draws, sampling, shuffling decisions, and A/B assignment. Not charged for invalid options. Paid via x402; see list_prices.

  Parameters:

  • max — integer — Highest value (default 100).
  • min — integer — Lowest value (default 1).
  • count — integer — How many, 1 to 100 (default 1).
  • choices — array — Optional list to pick from instead of a number range.

  Hints: read-only yes · destructive not declared · idempotent not declared · open-world yes

• ip_info read-only

  Classifies an IPv4 or IPv6 address: family, canonical form, and whether it is public, private (RFC 1918 or unique local), loopback, link-local, carrier-grade NAT, multicast, documentation, or reserved, including IPv4-mapped IPv6. With no input over HTTP, returns the caller's own public IP and country. Useful for validating network input and filtering internal addresses. Not charged for an invalid address. Paid via x402; see list_prices.

  Parameters:

  • ip — string — IPv4 or IPv6 address. Omit (HTTP only) to get your own IP.

  Hints: read-only yes · destructive not declared · idempotent not declared · open-world yes

• ping read-only

  Returns pong with the server time and an optional echo string, after a real x402 USDC payment on Base. Useful for testing that an agent's x402 payment client, wallet, and budget limits work end to end before using costlier services, and for monitoring. The cheapest paid call VerifyLite offers. Paid via x402; see list_prices.

  Parameters:

  • echo — string — Optional text to echo back (up to 256 characters).

  Hints: read-only yes · destructive not declared · idempotent not declared · open-world yes

Measured by MCPYP probing. Untested fields are omitted, never estimated. Listing is always free; MCPYP never proxies calls or stores user tokens.