Cybercentry Verification

Measured conclusion: Deep-tested. L2 outcome: tools_ok.

Twelve tools: token, wallet, contract and site security. Two free, the rest $1 in USDC over x402.

Add to your agent

Copy this into your MCP client config:

{
  "mcpServers": {
    "Cybercentry Verification": {
      "url": "https://centry.cybercentry.co.uk/api/mcp",
      "transport": "streamable-http"
    }
  }
}

Measured tools (14)

• list_services

  List every Cybercentry verification service with its price, inputs and SLA. Free.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• recent_exploits

  Recent real-world web3 exploits from the live feed, with loss amounts, attack vectors and the Cybercentry service that addresses each. Free.

  Parameters:

  • limit — number — Max incidents to return (default 10).

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• base_token_verification

  Check a Base token contract before buying: detects honeypots, armed freeze-and-seize, a live pause, fake B20s and ticker-impersonation copycats, and separately discloses issuer controls (admin centralisation, supply cap, transfer policy, rebase) so a legitimate token is not mistaken for a scam. Costs $1.00 per call, paid in USDC over x402.

  Parameters:

  • contract_address (required) — string — B20 token contract address
  • chain — string — base for mainnet (default), or base-sepolia to check a token before you launch it
  • subscription_token — string — Optional Cybercentry subscription token. Uses your plan quota instead of paying per call.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• cyber_security_consultant

  Ask a cyber security question and get an expert answer backed by real-time threat intelligence, covering current threats, best practice and compliance. Costs $1.00 per call, paid in USDC over x402.

  Parameters:

  • query (required) — string — Question (e.g., What should an incident response capability include?).
  • subscription_token — string — Optional Cybercentry subscription token. Uses your plan quota instead of paying per call.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• ethereum_token_verification

  Check an Ethereum or EVM token contract before buying: rug pull, hidden tax, liquidity legitimacy and holder concentration risk. Token due diligence returned as a scan report. Costs $1.00 per call, paid in USDC over x402.

  Parameters:

  • contract_address (required) — string — Token contract address
  • chain — string — Chain name or EVM chain ID: ethereum (1), base (8453), arc (5042), robinhood (4663), optimism (10), polygon (137), arbitrum (42161), bsc (56), avalanche (43114), gnosis (100), blast (81457). Defaults to ethereum.
  • chain_id — number — Legacy: network, 1 mainnet or 2 testnet. Use chain instead.
  • platform_id — number — Legacy: 1 Ethereum or 17 Base. Use chain instead.
  • subscription_token — string — Optional Cybercentry subscription token. Uses your plan quota instead of paying per call.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• media_content_verification

  Check whether an image or video is authentic and where it came from: C2PA content credentials, provenance and metadata extraction, with an avatar and logo impersonation check. Detect AI-generated or tampered media before trusting it. Costs $1.00 per call, paid in USDC over x402.

  Parameters:

  • image_uri (required) — string — Avatar/logo image URI: HTTPS URL or IPFS path
  • media_file_path (required) — string — URL or path to the media file to verify
  • extract_metadata — boolean — Extract file metadata (default: true)
  • subscription_token — string — Optional Cybercentry subscription token. Uses your plan quota instead of paying per call.
  • verify_authenticity — boolean — Verify content authenticity / C2PA provenance (default: true)

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• openclaw_ai_agent_verification

  Audit an AI agent configuration for security holes: prompt injection exposure, missing authentication, over-broad tool permissions and unsafe gateway settings. Check an agent before you trust it or connect to it. Costs $1.00 per call, paid in USDC over x402.

  Parameters:

  • config (required) — string — Agent configuration as a JSON string
  • tool — string — Tool to validate, as a JSON string
  • skills — string — Skills
  • message — string — Message
  • sessionId — string — Session ID
  • subscription_token — string — Optional Cybercentry subscription token. Uses your plan quota instead of paying per call.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• post_launch_screening

  Score a live token launch under ERC-8376, the token launch abuse standard we co-authored. The twelve-signal vector is assembled from chain state and scored against the eleven deployer abuse patterns into an abuse score of 0 to 100, with confidence reported separately so a high score on thin evidence cannot read as a certainty. Signals that could not be computed are named rather than scored clean. Price decline is excluded by rule, so a launch that locked liquidity, sold nothing and fell 95 per cent still scores clean: falling is not fraud. Name the creator, because at most venues the token was deployed by the venue's own factory and the creating address is the launchpad rather than the applicant. A screening, not a bonded on-chain report. Costs $1.00 per call, paid in USDC over x402.

  Parameters:

  • token (required) — string — Token contract address
  • chain — string — Chain name or EVM chain ID. base (8453) only for now, since the scoring contracts are deployed there.
  • creator — string — Wallet of the party who requested the launch, as connected at your venue. Without it the launch is unattributed and the signals about the deployer come back unavailable.
  • subscription_token — string — Optional Cybercentry subscription token. Uses your plan quota instead of paying per call.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• pre_launch_screening

  Screen who is asking to launch, before you deploy anything for them. At most venues the launchpad creates the token, so the only thing in front of you beforehand is a connected wallet: this screens that wallet, and it includes the full wallet verification rather than a summary of one. OFAC SDN sanctions screening, the funding chain walked to depth across 33 chains, mixer contact including the Tornado Cash pools, dusting, control clusters and exchange reuse, with a risk score. Then the launch-specific half: allocations this wallet has taken from contracts before and whether it still holds them or sold them, and whether the ticker it wants collides with a token it already touched. Says what it could not establish rather than reporting it clean. Eight of the twelve ERC-8376 signals describe conduct during or after a sale and cannot exist yet, so this reports on the party and not on the launch. Costs $1.00 per call, paid in USDC over x402.

  Parameters:

  • creator (required) — string — Wallet address of the party requesting the launch, as connected at your venue
  • chain — string — Chain name or EVM chain ID. Defaults to base (8453).
  • ticker — string — Ticker or name they want, to check for collision with an existing project
  • subscription_token — string — Optional Cybercentry subscription token. Uses your plan quota instead of paying per call.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• private_data_verification

  Prove a fact about private data without revealing the data: validates text integrity and returns a zero-knowledge proof (ZKP) with a verification ID and URL. Costs $1.00 per call, paid in USDC over x402.

  Parameters:

  • cpdv_data (required) — string — Data (e.g., Test Data)
  • subscription_token — string — Optional Cybercentry subscription token. Uses your plan quota instead of paying per call.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• quantum_cryptography_verification

  Encrypt text with quantum-resistant (post-quantum) cryptography, for secrets that must outlast classical encryption. Returns a record ID and a decrypt URL. Costs $1.00 per call, paid in USDC over x402.

  Parameters:

  • cqcv_data (required) — string — Any text data you want to encrypt and verify
  • subscription_token — string — Optional Cybercentry subscription token. Uses your plan quota instead of paying per call.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• solidity_code_verification

  Audit Solidity smart contract source for vulnerabilities before you deploy or call it. Returns findings with a clear risk level. Costs $1.00 per call, paid in USDC over x402.

  Parameters:

  • solidity_code (required) — string — Solidity Code
  • subscription_token — string — Optional Cybercentry subscription token. Uses your plan quota instead of paying per call.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• wallet_verification

  Screen a wallet address for sanctions and risk: OFAC SDN sanctions screening, risk scoring and suspicious-activity detection across 33 EVM chains. Check a counterparty before you transact with it. Costs $1.00 per call, paid in USDC over x402.

  Parameters:

  • wallet_address (required) — string — Wallet Address
  • subscription_token — string — Optional Cybercentry subscription token. Uses your plan quota instead of paying per call.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• web_application_verification

  Scan a website or dApp frontend for vulnerabilities using OWASP checks, before connecting a wallet to it or trusting it with user data. Costs $1.00 per call, paid in USDC over x402.

  Parameters:

  • target_url (required) — string — Target URL
  • subscription_token — string — Optional Cybercentry subscription token. Uses your plan quota instead of paying per call.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

Publisher website Repository

Measured by MCPYP probing. Untested fields are omitted, never estimated. Listing is always free; MCPYP never proxies calls or stores user tokens.