MCP serverio.github.kaminariouji/x402-audit-agent

Input one JS/TS source file (string). Returns findings for: testnet-as-USD, silent-zero balance, cooldown key mismatch, fake faucet endpoint, speculative earnings text. Costs $0.01

balanceOf(account, id) for a multi-token contract, formatted with whatever supply unit the contract uses — the read a Zora/Sudoswap-style position tracker needs, which an ERC-20 or

balanceOfBatch over up to 10 (account, id) pairs in a single settled call — the position snapshot of a portfolio, which is otherwise one paid read per line. Costs $0.001 USDC per c

supportsInterface for the multi-token ids plus contractURI and a probe of one id — the pre-flight before a client assumes a contract is a 721 and sends the wrong call. Costs $0.001

uri(id) decoded from the ABI string, with the {id} substitution left visible instead of followed — the metadata URL a wallet will fetch, returned as text and never requested by us.

allowance(owner, spender) in raw and decimal form — how much a approval still lets a third party move, which is the number behind most drain headlines. Costs $0.001 USDC per call.

Approval events for one token over a short, bounded window, decoded to owner/spender/amount — the ledger of who just gave someone leave to move their USDC. Costs $0.001 USDC per ca

Native coin balance (wei plus a decimal string) at the latest block, with the chain's symbol so the number cannot be misread as USD. Costs $0.001 USDC per call. Chains: base, ether

Up to 25 addresses in one paid call — the shape a portfolio or risk bot actually needs, cheaper than 25 single lookups. Costs $0.001 USDC per call. Chains: base, ethereum, arbitrum

One block header decoded: height, time, author, gas used vs limit, base fee in gwei and transaction count. Readable numbers, not raw hex. Costs $0.001 USDC per call. Chains: base,

The same decoded header /chain/block gives, addressed by hash instead of height — which is what a receipt, a log or a reorg report actually hands you. Costs $0.001 USDC per call. C

Binary-searches the header timestamps for the first block at or after a unix time — every 'what was the supply / who held what on that date' question starts here, and no public nod

Latest block number for one chain straight from a public node — the cheapest possible 'is the chain alive and where is it' check. Costs $0.001 USDC per call. Chains: base, ethereum

eth_getBlockReceipts in a single paid call: per-transaction gas, status and log count, plus where the block's total fees went — instead of one receipt read per transaction. Costs $

Height, timestamp, transaction count, gas used and base fee for up to 25 consecutive blocks — the series itself, so a caller can plot throughput or fee pressure instead of taking o

Seconds per block and blocks per hour, taken from the timestamps of two real headers at the edges of a window — one stalled block shows as a wider span instead of being smoothed aw

Every transaction hash in one block plus the count — the step between 'which block' and 'which transfers happened', without pulling full receipts. Costs $0.001 USDC per call. Chain

Scans deployed bytecode for 4-byte selectors we can name from a derived table: what this contract can be asked to do, read off the code rather than trusted from a README. Costs $0.

SHA-256 of the deployed bytecode plus its size and edges — two addresses with the same fingerprint are the same compiled contract, which is how a clone of a known scam shows up bef

eth_call with your own calldata against one pinned public node: raw return data plus its decoded uint/address forms. The escape hatch for any view function we did not wrap. Costs $

web3_clientVersion for the node that served the call — the build string is how you tell reth from erigon from a proxy that is silently serving a different chain. Costs $0.001 USDC

eth_getCode size check: bytecode length plus whether the address is a contract at all — the two-second answer to 'did I just send funds to an EOA'. Costs $0.001 USDC per call. Chai

eth_getCode at a historical block, compared against today: bytecode present then, size at both points, and whether the code changed since. The check for 'what did this address look

Bytecode size plus every supported-interface answer in one call — the pre-flight that tells an agent whether a 'token' address is a contract at all and which standards it claims. C

Bytecode fingerprints of two addresses compared: size, SHA-256 and prefix/suffix equality — the question behind 'is this new token a redeploy of the one that ruggened last week'. C

owner() decoded, plus whether the same address answers owner() as a storage read — the single field that decides who can pause, mint or upgrade the thing you are about to interact

gasPrice, base fee, priority fee and the all-in cost of a 21000-gwei native transfer in wei and native units — what sending costs right now, on one chain. Costs $0.001 USDC per cal

eth_feeHistory over a bounded window: base fee at every block plus the 25/50/75 priority-fee percentiles. Whether gas is RISING is not answerable from one instantaneous quote, whic

eth_estimateGas for a transfer or contract call you describe — the exact simulation a wallet runs before signing, without needing a wallet. Costs $0.001 USDC per call. Chains: base

Latest block, its age in seconds, base fee and block fullness for up to 4 chains in one paid call — the fastest answer to 'which of these chains is actually caught up right now'. C

eth_getLogs over a bounded window (max 1000 blocks) with an address and/or first topic — transfers and events without running an indexer. Refuses an unfiltered scan. Walks the wind

Batched eth_call: ten (target, calldata) pairs settled once, each answered independently so one reverting view cannot fail the rest. A tenth of the per-call cost of doing them one

eth_chainId versus net_version for one chain. A mismatch is how a wallet ends up signing Base transactions for Mainnet, so this is a two-call safety check, not trivia. Costs $0.001

getApproved(tokenId) — the single-operator approval on one id. Non-zero means someone other than the owner can transfer that exact token without owning it. Costs $0.001 USDC per ca

isApprovedForAll(owner, operator) — the setApprovalForAll permission behind most NFT drain headlines, answered per pair in one paid call. Costs $0.001 USDC per call. Chains: base,

balanceOf(owner) on an NFT contract — how many ids one wallet holds, without indexing every transfer. Costs $0.001 USDC per call. Chains: base, ethereum, arbitrum, bsc, polygon, op

name/symbol plus which token standards the contract actually claims (ERC-165, ERC-721, ERC-721Metadata, ERC-1155) via supportsInterface. Costs $0.001 USDC per call. Chains: base, e

ownerOf(tokenId) resolved for one NFT — proof of who holds a specific id right now, from the contract itself. Costs $0.001 USDC per call. Chains: base, ethereum, arbitrum, bsc, pol

ownerOf(id) read at a chosen block and again at the head: previous holder, current holder, and whether it moved — the ownership history a sale-attribution or stolen-collection chec

The metadata pointer a wallet will follow for a specific id, plus whether it is on-chain JSON or an off-host scheme. The string is returned as text — this endpoint never resolves i

eth_getTransactionCount at any block tag — what an agent needs before it builds a transaction, and how a bot detects a stuck or reused nonce. Costs $0.001 USDC per call. Chains: ba

paused() with the revert and no-data cases kept apart from a false — 'this token has no pause switch' and 'this token is not paused' are different facts to trade on. Costs $0.001 U

DOMAIN_SEPARATOR() plus the owner's current nonce and whether permit() is in the code — the three inputs a signed-approval relayer needs before it can move funds without the holder

The three EIP-1967 slots (implementation, admin, beacon) read next to implementation(): a proxy hides the real code, so bytecode-size checks alone understate what an upgrade can ch

Status, gasUsed, effective gas price, contract created, log count and live confirmations for one hash — whether a transaction actually landed and what it cost. Costs $0.001 USDC pe

eth_getStorageAt for one slot of one account — verify a contract's own bookkeeping (owner slot, mapping entry) instead of trusting a view function. Costs $0.001 USDC per call. Chai

The same slot read at two blocks: previous, current, and whether they differ — the primitive behind 'what did this contract's state actually move between those two dates'. Costs $0

Up to 16 consecutive 32-byte words from any starting slot — walk a struct or the array behind a mapping instead of trusting one view function to explain itself. Costs $0.001 USDC p

totalSupply read at any block and diffed against now, formatted with the token's own decimals — how much of a supply was minted since a date, without an indexer. Costs $0.001 USDC

eth_syncing plus the head: a public node that is quietly 300 blocks behind answers every other question with stale data, and nothing else in a response tells you that. Costs $0.001

balanceOf plus the token's own decimals, formatted — a human-readable USDC/token balance, not a raw 18-digit integer that needs a calculator. Costs $0.001 USDC per call. Chains: ba

balanceOf for up to 20 wallets on the same ERC-20, with decimals and symbol resolved once — the holder snapshot a distribution or listing check needs, in one settlement. Costs $0.0

The four ERC-20 view calls a listing needs, in one paid call, each tolerant of a token that does not implement it. Costs $0.001 USDC per call. Chains: base, ethereum, arbitrum, bsc

The ERC-20 listing fields read at a past block tag or height, formatted with the decimals the contract itself reported — how a supply looked on a date, not how it looks now. Costs

Transfer events for one token over a short window, decoded from/to/amount with the token's decimals applied — the outflow check a monitoring bot wants first, without running an ind

Value locked in USD per chain, ranked. TVL is a protocol-reported metric, not a risk measure. Costs $0.001 USDC per call via x402.

eth_getTransactionByHash decoded to the fields a caller branches on: from, to, value, nonce, gas, calldata length and inclusion block. Reports found:false rather than inventing a z

eth_getTransactionByBlockNumberAndIndex — pick the Nth transaction of a block without transferring the whole block, which is how you sample a block instead of downloading it. Costs

eth_getBlockTransactionCountByNumber for one block tag or height — the cheapest load/throughput reading of a chain that never has to move a full block header over the wire. Costs $

The receipt's logs decoded to address, topic0, indexed values and data size — what a transaction actually did, straight from the node, which is the only honest answer when eth_getL

One call for the pair every bot needs after sending: the transaction plus its receipt, with confirmations, block, status, gas used and revert reason together — instead of two paid

allowance(owner, spender) across up to 10 tokens for one wallet — the standing-approval audit that answers 'if this address gets phished tonight, what leaves'. Costs $0.001 USDC pe

ERC-721 balanceOf for one address across up to 10 collections with each collection's name and symbol resolved once — the 'what NFTs does this wallet actually hold' check without an

Balance, nonce and contract/EOA flag for one address on up to 4 chains in a single paid call — the one-shot 'what does this wallet actually hold' check. Costs $0.001 USDC per call.

balanceOf for one address across up to 10 tokens on one chain, each formatted with its own decimals and symbol — the holding snapshot a portfolio bot wants in a single settlement i

Runs the scanner on a small built-in bad-bot sample and returns the findings. Free; no x402 payment.

Gas price, base fee and block height for Base and Arbitrum from public RPC — what a transaction costs before you send it. Costs $0.001 USDC per call via x402.

Live DEX spot price, liquidity, FDV, market cap and 24h volume for any token by contract address — EVM (Base/etc.) or Solana mint. Highest-liquidity pair. Costs $0.001 USDC per cal

Candles for a Bitfinex spot pair at the timeframes its v2 API serves, oldest first, with base volume per bucket. Costs $0.001 USDC per call. Byte-identical to GET /market/bfex-cand

The pair ids Bitfinex itself publishes for its spot exchange, optionally filtered by a substring — the lookup that stops a bot guessing a market that does not exist. Costs $0.001 U

Top of book, last, 24h change in price and percent, and 24h volume/high/low for one Bitfinex spot pair. Costs $0.001 USDC per call. Byte-identical to GET /market/bfex-ticker?pair=B

Per-block projection for the mempool's next ~8 blocks: size, transaction count, total fees, median fee and the fee-rate range that would make it. Costs $0.001 USDC per call. Byte-i

The current Bitcoin block height as mempool.space sees it, plus the best tip hash — the two-second liveness check for anything Bitcoin-facing. Costs $0.001 USDC per call. Byte-iden

Where the next difficulty adjustment stands: percent progress, projected change, remaining blocks and time, the next retarget height and the average block time behind it. Costs $0.

The recommended sat-per-vbyte fee targets for the next blocks: fastest, half-hour, one-hour, economy and minimum. Costs $0.001 USDC per call. Byte-identical to GET /market/btc-fee-

Network hashrate points and the difficulty-adjustment series over a bounded window, with the current hashrate and difficulty the explorer reports. Costs $0.001 USDC per call. Byte-

One shot at the network's aggregate state: price, hash rate, difficulty, next retarget height, blocks and transactions in the last day, coins mined, fees collected and total supply

The blocks a Bitcoin explorer has just indexed: height, hash, time, difficulty, transaction count, size and weight, with the mined fees and pool name when the explorer attaches the

The reference BTC price in USD plus six other fiat currencies with the quote timestamp — as a Bitcoin-native explorer publishes it, not as a venue tape. Costs $0.001 USDC per call.

Daily BTC/USD closes back to the earliest point the explorer keeps, downsampled to a bounded number of points — a long-run price series without a key. Costs $0.001 USDC per call. B

Level-1 book for a Coinbase product: the single best bid, the single best ask, their sizes and the book sequence number. Costs $0.001 USDC per call. Byte-identical to GET /market/c

Candles from Coinbase Exchange for the granularities its API serves (1m to 1d), oldest first, with volume per bucket. Costs $0.001 USDC per call. Byte-identical to GET /market/cbex

The venue's own server time plus the offset against this server — the check that stops a signed order being rejected for clock drift. Costs $0.001 USDC per call. Byte-identical to

The venue's own rules for one product: tick and lot size, minimum order, whether it is margin/post-only/limit-only, and whether trading is enabled. Costs $0.001 USDC per call. Byte

Open, high, low, last and both the 24h and 30-day traded volume for a Coinbase product — what a session actually cost and moved. Costs $0.001 USDC per call. Byte-identical to GET /

Last trade, top of book, 24h volume and the exchange's own clock for one Coinbase product. Costs $0.001 USDC per call. Byte-identical to GET /market/cbex-ticker?product=BTC-USD.

Public fill feed for a Coinbase product: price, size, side, timestamp and trade id, newest first. Costs $0.001 USDC per call. Byte-identical to GET /market/cbex-trades?product=BTC-

The funding Deribit's own get_funding_rate_value reports as having accrued on one instrument between two timestamps — a window total, not a snapshot rate. Costs $0.001 USDC per cal

Deribit's own index price for an underlying plus the estimated delivery price it settles against — the reference a funding or settlement check needs. Costs $0.001 USDC per call. By

The contract rules Deribit publishes per instrument: tick size, contract size, min trade amount, max leverage, fee rates, state and expiry — perpetuals only or the whole listed fut

Historical daily candles of Deribit's DVOL-style volatility index for an underlying — the implied-vol level options are priced off, as OHLC per day. Costs $0.001 USDC per call. Byt

The tokens currently promoted on DexScreener, with the chain, token address, the description and links the submitter provided and the boost amount and timing — what is being pushed

Everything DexScreener publishes for a single pool: the pair's chain, dex and label, price in USD and native, liquidity split, volume and buy/sell counts per window, and 5m/1h/6h/2

All DEX pools DexScreener knows for one token address across chains, each with price, liquidity, 24h volume, trade counts, price change, FDV and market cap. Costs $0.001 USDC per c

The alternative.me fear-and-greed reading: index value, its label and the seconds until the next update, for today or a whole history back to 365 days. Costs $0.001 USDC per call.

OHLCV per bucket from Gate with the quote volume and the window-closed flag, oldest first. Costs $0.001 USDC per call. Byte-identical to GET /market/gate-candles?pair=BTC_USDT&inte

Resting bids and asks from Gate for one pair, with the venue's own sequence fields and the derived top-of-book spread. Costs $0.001 USDC per call. Byte-identical to GET /market/gat

How Gate defines a currency pair: base and quote, the flat fee percent, order-size floors and caps, precision and whether it is tradable. Costs $0.001 USDC per call. Byte-identical

Last, best bid and ask with size, 24h percent change and both base and quote volume for one Gate currency pair. Costs $0.001 USDC per call. Byte-identical to GET /market/gate-ticke

Gate's public fill feed for one pair: side, price, base amount, millisecond timestamp and trade id. Costs $0.001 USDC per call. Byte-identical to GET /market/gate-trades?pair=BTC_U

Keyless read of the public GitHub API for one repository: archived, forked, how long since the last push, open issue count, stars, license, topics — plus the flags an integrator ac

The live risk frame Hyperliquid publishes per perp: funding, open interest, mark and oracle price, premium and 24h notional volume. Costs $0.001 USDC per call. Byte-identical to GE

candleSnapshot for one Hyperliquid perp: open, high, low, close, volume and order count per bucket, oldest first, bounded to the window each interval can carry. Costs $0.001 USDC p

Every funding print Hyperliquid has for a perp coin since a look-back point: rate, premium component and the settlement timestamp. Costs $0.001 USDC per call. Byte-identical to GET

The venue's own mid for one or more Hyperliquid perp coins, straight from allMids — the reference price a funding or liquidation check starts from. Costs $0.001 USDC per call. Byte

Hyperliquid's l2Book for one perp: the resting bid and ask levels with price, size and opaque-order count, plus the book time. Costs $0.001 USDC per call. Byte-identical to GET /ma

Per-coin contract rules from Hyperliquid's own meta: size decimals, maximum leverage and the margin table id, for the whole listed universe or filtered by substring. Costs $0.001 U

The most recently listed tokens on Jupiter's token API: mint, name, supply, market cap, liquidity, launch pool and the audit flags Jupiter attaches — a launch feed, not a recommend

Current USD price, 24h change, liquidity, decimals and the block the quote came from for up to 20 Solana mints, in one call — with an explicit list of which mints returned nothing.

Solana tokens matching a name or symbol query, with market cap, FDV, liquidity, holder count, price-change and volume statistics and Jupiter's own audit flags. Costs $0.001 USDC pe

Top of the Kraken book for one pair: resting bid and ask levels with size and price-count, plus the derived spread and mid. Costs $0.001 USDC per call. Byte-identical to GET /marke

OHLCV candles for one Kraken pair: open, high, low, close, volume and trade count per bucket, oldest first. Only the intervals the venue actually serves are offered. Costs $0.001 U

How Kraken itself defines a pair: base and quote, decimal precision, order size limits, the public leverage ladder and the first two fee tiers. Costs $0.001 USDC per call. Byte-ide

Quoted spread samples for a Kraken pair with the mean spread in basis points — how expensive it is to cross that venue right now. Costs $0.001 USDC per call. Byte-identical to GET

Last trade, best bid and ask with size, 24h volume, VWAP and 24h high/low for one Kraken spot pair, straight from the venue's own tape. Costs $0.001 USDC per call. Byte-identical t

The last trades printed on a Kraken pair, each with price, size, side and exchange timestamp — tape activity, not a summary. Costs $0.001 USDC per call. Byte-identical to GET /mark

KuCoin's level-1 book for a symbol in one call: inside price, both sides with size, the book sequence and the venue timestamp. Costs $0.001 USDC per call. Byte-identical to GET /ma

KuCoin candles with base and quote (transaction-value) volume per bucket, oldest first, across every type value the venue answered. Costs $0.001 USDC per call. Byte-identical to GE

KuCoin's own 24h statistics for a symbol: last, best bid/ask with size, 24h high/low, change, base and quote volume, average price and the taker/maker fee rates it applies. Costs $

Hourly or daily USD price points for one token reference (network:address) from DefiLlama's coin API, with the symbol and confidence it attaches to the series. Costs $0.001 USDC pe

Daily total-value-locked history for one chain from DefiLlama's own series, downsampled to the window you ask for — the trend line, not a snapshot. Costs $0.001 USDC per call. Byte

Current USD price, symbol, decimals and confidence for up to 10 network:address references in one paid call — the cheapest way to mark a portfolio. Costs $0.001 USDC per call. Byte

One keyless read of the public npm registry for a package: does it ship an install-time script (the way malicious packages run code at install), is the released version deprecated,

One paid call that reads the package AND each of its direct dependencies (bounded, in published order) from the public npm registry, then rolls up what actually gets executed on in

Mark, base and quote volume per bucket for an OKX instrument, oldest first, across the bar widths the venue serves. Costs $0.001 USDC per call. Byte-identical to GET /market/okx-ca

Price-level ladder from OKX for one instrument with per-level contract count, plus the derived top-of-book spread. Costs $0.001 USDC per call. Byte-identical to GET /market/okx-dep

Current and next funding rate for an OKX perpetual, with the settlement timestamps and the funding band the venue caps it at. Costs $0.001 USDC per call. Byte-identical to GET /mar

Contract rules as OKX defines them: tick and lot size, minimum size, price limits, whether it is a swap or option, and settlement date. Costs $0.001 USDC per call. Byte-identical t

Last, bid, ask, 24h open/high/low and both base and quote volume for one OKX instrument. Costs $0.001 USDC per call. Byte-identical to GET /market/okx-ticker?instId=BTC-USDT.

Fill-by-fill tape from OKX with aggressor side, price, size and venue timestamp. Costs $0.001 USDC per call. Byte-identical to GET /market/okx-trades?instId=BTC-USDT&limit=20.

Everything Polymarket's API records for one market id: the question and description, resolution source and resolver, outcomes and prices, the whole volume and liquidity series it r

Open prediction markets ranked by the venue's own 24h volume or liquidity: question, outcomes with prices, volume, liquidity, spread, best bid/ask and the end date. Costs $0.001 US

The topic tags Polymarket itself puts on markets, with each tag's id and slug — the vocabulary to filter or classify a prediction-market feed with. Costs $0.001 USDC per call. Byte

What a Blockscout explorer knows about an address: native balance and USD rate, whether it is a verified contract, its name, proxy implementation, ENS name, holder/token flags and

One explorer's view of its chain right now: addresses, blocks and transactions all-time and today, gas price tiers in gwei, average block time, market cap, coin price and network u

The explorer's own record for one ERC-20/721 token: name, symbol, type, decimals, holder count, total supply, circulating market cap, 24h volume and the USD exchange rate it quotes

One call, several reads assembled into a verdict: the deepest DEX pool (liquidity, 24h volume, buy AND sell counts, FDV, pool age), what the deployed bytecode can actually be asked

Demand history for a single host on this rail: thirty-day calls, unique payers, listed resources, last call timestamp, highest advertised price, and its rank among all listed hosts

Thirty-day demand on the x402 pay-per-call rail, measured from its own public discovery index: hosts listed, resources, total calls, summed unique payers, and the median/p90/p99 ca

Hosts grouped by count of unique paying wallets over thirty days, with the calls each group receives. Reads as the real distribution of the rail: how many sellers get one payer, ho

The hosts actually receiving calls on this rail, ranked by thirty-day call count, each with its unique-payer count, number of listed resources and the highest price it advertises.

Search crypto tokens by name or symbol; returns the highest-liquidity matched pairs with price, liquidity, FDV and 24h volume across chains. Costs $0.001 USDC per call via x402.

Circulating USD-pegged supply with peg mechanism and chain count. Costs $0.001 USDC per call via x402.

Market-cap table with price, market cap, 24h volume and 1h/24h/7d change. Public aggregator snapshot, not an oracle. Costs $0.001 USDC per call via x402.

Tokens currently bought into by projects for DEX exposure, enriched with price, liquidity and 24h volume. Boosts are paid promotions, not an endorsement. Costs $0.001 USDC per call

Free, no payment: proves this origin's x402 rail-intelligence routes are live by returning only the headline totals of our measured 30-day demand map (hosts, resources, calls, summ