Autonomous x402 payment schema-escrow arbiter, spend firewall, failover & ERC-8004 Sybil oracle
Nothing to run from here
x402 Checker (AI Nock) is installed from its publisher's own source and answers where it runs, so this marketplace is not in the path of a single call. There is no address here to send one to, and a panel that pretended otherwise would be showing you an answer we made up. Install it and call it from your own client — the Installation tab has the entry for each one.
90/100
tool-list score
43
tools declared
remote
at its publisher
—
calls last 7d
What it does
Free check/board/name; paid bid/report 0.05, 1c fx/wx/lookups, news 0.001.
Quickstart
# 1 — add it to Claude Code
claude mcp add --scope user --transport http x402-checker-ai-nock-mcp https://x402-checker.nock-for-mak.workers.dev/mcp
# 2 — ask your agent for something these tools do
# check, check_batch, report and 40 more
x402 Checker (AI Nock) costs nothing on mcprush: there is no plan to choose here, no cap to set and nothing mcprush can bill you for.
Publishernot claimed
NFAll 1 server
nock-for-mak1 server
1 category
Collected from a public index. Nobody has claimed this account, so nothing here was written by its author — claim it if it is yours.
Installation
Where are you running it?
Every route below installs the same thing and ends at the same approval screen. Nothing here runs on your machine and nothing runs on ours: this server answers at its publisher’s own address, and what you install is the connection straight to it.
Claude Codedeclared by this listing
This is a public server: it answers at its publisher’s own address and this marketplace is not in the path. Claude Code registers it in one command; --scope user makes it available in every project. The transport below is http, as the publisher's own manifest declares it.
claude mcp add --scope user --transport http x402-checker-ai-nock-mcp https://x402-checker.nock-for-mak.workers.dev/mcpReconnect, or start a new session, and the tools appear in the model’s tool list.
Free on mcprush, and it answers at its publisher’s own address: this marketplace is not in the path, so there is no key of ours to hold and no card to add.
What it writes
One config entry pointing straight at the publisher’s own address — this marketplace is not in the path, and nothing from this listing executes on your machine.
What you approve
43 tools, with what each one reads, writes and reaches shown before you agree — the same list on every route above. Read the tool surface.
Tool surface
What the model actually sees. Descriptions are diffed on every release — see version history.
FREE x402 wash/honesty probe by AI Nock. Fetches an http(s) 402 URL with no payment headers. Returns payTo, amount, network, asset, facilitator if present, payToKind, a short risk note, and JSON next always: report $0.05, bid $0.05, name $0.05, board free, check_batch $0.01, quote $0.01; when has402, report/bid URLs are prefilled and next.sanctions $0.01. Use before paying any x402 resource. Does
| Parameter | Type | Required | Notes |
|---|---|---|---|
| url | string | yes | http(s) URL to inspect. No payment headers are sent to the target. |
Paid $0.01 USDC exact on Base: batch x402 honesty probes (max 10 URLs). Each result is the same shape as free check (next.report $0.05, next.bid $0.05, next.name $0.05, next.board free, next.check_batch $0.01; when has402 also next.sanctions $0.01). GET /check stays free for one URL. payTo 0x3903F05a17676566958B0a3E0c21E0bd49B66ea0. REST POST /check/batch is the same SKU.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| urls | array | yes | 1-10 public http(s) URLs. Same SSRF-safe rules as check. No payment headers are sent to the targets. |
Paid $0.05 USDC exact on Base: structured honesty report for this 402 (well-known payTo match, header vs body 402, bytecode snippet hash, accepts[] list). payTo 0x3903F05a17676566958B0a3E0c21E0bd49B66ea0. REST GET /report is the same SKU.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| url | string | yes | http(s) URL to inspect. No payment headers are sent to the target. |
Paid $0.01 USDC exact on Base: isContract, ETH balance, USDC balance, tx count for an address. payTo 0x3903F05a17676566958B0a3E0c21E0bd49B66ea0.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| address | string | yes | 0x-prefixed 20-byte EVM address on Base (or Solana/base58 for sanctions). |
Paid $0.01 USDC exact on Base: fetch a public http(s) URL and return simple HTML-to-text markdown. payTo 0x3903F05a17676566958B0a3E0c21E0bd49B66ea0.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| url | string | yes | http(s) URL to inspect. No payment headers are sent to the target. |
Paid $0.01 USDC exact on Base: raw HTTP header dump of a public URL (not an honesty probe, not markdown). payTo 0x3903F05a17676566958B0a3E0c21E0bd49B66ea0.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| url | string | yes | http(s) URL to inspect. No payment headers are sent to the target. |
Paid $0.01 USDC exact on Base: validate JSON data against a JSON Schema (tiny built-in subset, no $ref). payTo 0x3903F05a17676566958B0a3E0c21E0bd49B66ea0.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| schema | yes | JSON Schema object or JSON text | |
| data | yes | JSON instance object or JSON text |
Paid $0.01 USDC exact on Base: OFAC SDN digital-currency screen for an EVM 0x or Solana/base58 address. Fail closed. Not legal advice. payTo 0x3903F05a17676566958B0a3E0c21E0bd49B66ea0.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| address | string | yes | 0x-prefixed 20-byte EVM address on Base (or Solana/base58 for sanctions). |
Paid $0.01 USDC exact on Base: DNS/RDAP/TLS/SPF/DMARC dossier for a public hostname. payTo 0x3903F05a17676566958B0a3E0c21E0bd49B66ea0.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| host | string | yes | Public DNS hostname (not a URL, not an IP). |
Paid $0.01 USDC exact on Base: resolve an ENS or Basename (must end in .eth, including foo.base.eth). Public HTTP resolvers. Unresolved names return resolved:false after payment. Not POST /name (that is this origin's 30-day agent registrar). payTo 0x3903F05a17676566958B0a3E0c21E0bd49B66ea0.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| name | string | yes | ENS name ending in .eth (vitalik.eth, foo.base.eth). |
Paid $0.01 USDC exact on Base: follow Location redirects for a public http(s) URL (manual, max 8 hops, SSRF-safe). Returns chain, finalUrl, hopCount. No meta-refresh. No payment headers. Not /headers. payTo 0x3903F05a17676566958B0a3E0c21E0bd49B66ea0.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| url | string | yes | Public http(s) URL to unwrap. |
Paid $0.01 USDC exact on Base: live Base gas oracle via public RPC (gasPrice, maxPriorityFee, feeHistory). Optional chain=base. Returns gwei fields + suggestedMaxFee. Read-only. No API keys. payTo 0x3903F05a17676566958B0a3E0c21E0bd49B66ea0.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| chain | string | no | Chain short name. Optional; only base for now. |
Paid $0.01 USDC exact on Base: spot USD quotes via public DeFiLlama. Default ids=ETH,USDC,BTC. Optional ids= aliases (ETH,USDC,BTC,SOL,WETH,LINK,AAVE,UNI,DAI) and/or token= Base 0x (max 8). Cache ~45s. Not investment advice. payTo 0x3903F05a17676566958B0a3E0c21E0bd49B66ea0.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| ids | string | no | Comma-separated symbols. Default ETH,USDC,BTC. Max 8. |
| token | string | no | Optional Base ERC-20 0x address. |
Paid $0.01 USDC exact on Base: transaction + receipt for a 0x hash via public RPC. Returns found, from, to, valueEth, status, gasUsed, logsCount, pending. Unknown hash is paid 200 with found:false. inputLen only. Not a mempool tip. payTo 0x3903F05a17676566958B0a3E0c21E0bd49B66ea0.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| hash | string | yes | 0x-prefixed 32-byte transaction hash on Base. |
Paid $0.01 USDC exact on Base: block header via public RPC. Default n=latest. Accepts latest|earliest|safe|finalized, a decimal, 0x number, or hash=. Rejects pending. Returns number, hash, timestamp, miner, txCount, gasUsed, gasLimit, baseFee. Unknown id is paid 200 with found:false. No full txs. Not a mempool tip. payTo 0x3903F05a17676566958B0a3E0c21E0bd49B66ea0.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| n | string | no | Block tag or number. Default latest. |
| hash | string | no | Optional 0x-prefixed 32-byte block hash. |
Paid $0.01 USDC exact on Base: TLS cert facts (public CT + live HTTPS HEAD) for a public hostname. Returns issuer, dates, SANs, daysRemaining, currentlyValid, liveHttps. Not the full /domain dossier. payTo 0x3903F05a17676566958B0a3E0c21E0bd49B66ea0.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| host | string | yes | Public DNS hostname (not a URL, not an IP). |
Paid $0.01 USDC exact on Base: ERC-20 metadata via public RPC (name, symbol, decimals, totalSupply). address= required. EOA/empty code is paid 200 with found:false. Not a spot price (use /price). Not a wallet balance (use /who). payTo 0x3903F05a17676566958B0a3E0c21E0bd49B66ea0.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| address | string | yes | 0x-prefixed 20-byte ERC-20 contract address on Base. |
Paid $0.01 USDC exact on Base: 4-byte function selector lookup via public openchain.xyz (4byte.directory fallback). hex= / selector= / data= (first 4 bytes). Unknown selector is paid 200 with found:false. Complements /tx (inputLen only). Not a full ABI decoder. payTo 0x3903F05a17676566958B0a3E0c21E0bd49B66ea0.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| hex | string | yes | 0x-prefixed 4-byte selector, or longer calldata (first 4 bytes used). |
Paid $0.01 USDC exact on Base: Polymarket market odds via public gamma-api. q= search or slug= event/market slug (not both). Optional limit=1..5. Unknown is paid 200 with found:false. Read-only. No trading. Not investment advice. payTo 0x3903F05a17676566958B0a3E0c21E0bd49B66ea0.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| q | string | no | Search query (max 80). Use q or slug, not both. |
| slug | string | no | Exact Polymarket event or market slug (lowercase [a-z0-9-]). |
| limit | integer | no | Max markets 1-5 (default 5). |
Paid $0.01 USDC exact on Base: Crypto Fear & Greed Index via public alternative.me. Optional limit=1..30 (default 1). Not investment advice. payTo 0x3903F05a17676566958B0a3E0c21E0bd49B66ea0.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| limit | integer | no | History length 1-30 (default 1 = current). |
Paid $0.01 USDC exact on Base: token security snapshot via public honeypot.is + DexScreener. address=0x required. Optional chain=base|eth|bsc (default base). Not a full audit. Not investment advice. payTo 0x3903F05a17676566958B0a3E0c21E0bd49B66ea0.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| address | string | yes | Token contract 0x + 40 hex. |
| chain | string | no | base, eth, or bsc (default base). |
Paid $0.01 USDC exact on Base: DexScreener pairs by token address=0x or search q=. Optional chain= filter. Ranked by liquidityUsd (max 5). Not investment advice. payTo 0x3903F05a17676566958B0a3E0c21E0bd49B66ea0.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| address | string | no | Token contract 0x + 40 hex (token mode). |
| q | string | no | Search query (search mode). |
| chain | string | no | Optional chain filter (default base for address mode). |
Paid $0.01 USDC exact on Base: UTC clock (unix, ms, iso). No params. Alias of REST GET /now and /time. For IANA zones use tool tz. payTo 0x3903F05a17676566958B0a3E0c21E0bd49B66ea0.
No parameter schema on file.
Paid $0.01 USDC exact on Base: search this origin's free + paid catalog by keyword q=. Optional limit=1..20. House discovery (board/bid/name + SKUs). Not a global index. payTo 0x3903F05a17676566958B0a3E0c21E0bd49B66ea0.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| q | string | yes | Search keywords (e.g. gas, token security, board). |
| limit | integer | no | Max results 1..20 (default 8). |
Paid $0.01 USDC exact on Base: forward geocode with q= or reverse with lat=&lon= via public Nominatim (OpenStreetMap). Attribution required. payTo 0x3903F05a17676566958B0a3E0c21E0bd49B66ea0.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| q | string | no | Place name for forward geocode (e.g. Denver, CO). |
| lat | number | no | Latitude -90..90 for reverse geocode. |
| lon | number | no | Longitude -180..180 for reverse geocode. |
Paid $0.01 USDC exact on Base: fiat FX via Frankfurter/ECB. from= (default USD), to= comma list (default EUR), amount= (default 1). Fiat only — use /price for crypto. Not investment advice. payTo 0x3903F05a17676566958B0a3E0c21E0bd49B66ea0.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| from | string | no | Base ISO currency (default USD). |
| to | string | no | Quote ISO currencies, comma-separated (default EUR). |
| amount | number | no | Amount of from-currency (default 1). |
Paid $0.01 USDC exact on Base: current weather via public Open-Meteo. q= place and/or lat=&lon=. Optional units=metric|us. Attribution required. Complements /geo /tz. payTo 0x3903F05a17676566958B0a3E0c21E0bd49B66ea0.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| q | string | no | Place name (e.g. Denver, CO). |
| lat | number | no | Latitude -90..90. |
| lon | number | no | Longitude -180..180. |
| units | string | no | metric (default) or us. |
Paid $0.01 USDC exact on Base: equity/index/FX/crypto quote via public Yahoo Finance chart. symbol= (AAPL, ^GSPC, EURUSD=X, BTC-USD). Complements /price /fx. Not investment advice. payTo 0x3903F05a17676566958B0a3E0c21E0bd49B66ea0.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| symbol | string | yes | Ticker: equity (AAPL), index (^GSPC), FX (EURUSD=X), crypto (BTC-USD). |
Paid $0.01 USDC exact on Base: Hacker News search via public Algolia HN API. q= required. Optional tags=story|comment|ask_hn|show_hn|poll|job|front_page|all, sort=relevance|date, hits=1..8. Complements /crypto-news. payTo 0x3903F05a17676566958B0a3E0c21E0bd49B66ea0.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| q | string | yes | Search phrase (aliases query= search=). |
| tags | string | no | story (default), comment, ask_hn, show_hn, poll, job, front_page, or all. |
| sort | string | no | relevance (default) or date. |
| hits | integer | no | 1..8 results (default 5). |
Paid $0.01 USDC exact on Base: academic paper search via public arXiv Atom API. q= required (or id=2605.11781). Optional cat=cs.CR, sort=relevance|date|updated, hits=1..8. Metadata only; no PDF fetch. Complements /hn. payTo 0x3903F05a17676566958B0a3E0c21E0bd49B66ea0.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| q | string | no | Search phrase (aliases query= search=). Required unless id=. |
| id | string | no | arXiv id (2605.11781 or arXiv:2605.11781). |
| cat | string | no | arXiv category, e.g. cs.CR or cs.AI. |
| sort | string | no | relevance (default), date, or updated. |
| hits | integer | no | 1..8 results (default 5). |
Paid $0.01 USDC exact on Base: Stack Overflow Q&A search via public Stack Exchange API. q= required (or id= question id). Optional tagged=javascript, sort=relevance|votes|activity|creation, hits=1..8. Stack Overflow only. Complements /hn and /arxiv. payTo 0x3903F05a17676566958B0a3E0c21E0bd49B66ea0.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| q | string | no | Search phrase (aliases query= search=). Required unless id=. |
| id | string | no | Stack Overflow question id (digits). |
| tagged | string | no | Up to 3 tags, comma-separated. |
| sort | string | no | relevance (default), votes, activity, or creation. |
| hits | integer | no | 1..8 results (default 5). |
Paid $0.01 USDC exact on Base: CVE / NVD vulnerability lookup via public NIST NVD 2.0. id=CVE-2021-44228 or q=log4j. Optional severity=low|medium|high|critical, hits=1..8. NVD-only metadata; no exploit/PoC. Complements /sanctions /tsec. payTo 0x3903F05a17676566958B0a3E0c21E0bd49B66ea0.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| id | string | no | CVE id (CVE-YYYY-NNNN). Aliases cve= cve_id=. Required unless q=. |
| q | string | no | Keyword search (aliases query= search= keyword=). Required unless id=. |
| severity | string | no | low, medium, high, or critical. |
| hits | integer | no | 1..8 results (default 5). |
Paid $0.01 USDC exact on Base: GitHub public REST lookup via api.github.com (keyless). mode=search|repo|user (default search). search: q=. repo: owner=&repo= or full=owner/repo. user: user= or login=. Public metadata only; no token, no private repos. payTo 0x3903F05a17676566958B0a3E0c21E0bd49B66ea0.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| mode | string | no | search (default), repo, or user. |
| q | string | no | Repo search query (aliases query= search=). Required for mode=search. |
| owner | string | no | GitHub owner/org. Use with repo=. |
| repo | string | no | GitHub repository name. Use with owner=. |
| full | string | no | owner/repo or github.com/owner/repo URL. |
| user | string | no | GitHub login (aliases login=). For mode=user. |
| hits | integer | no | 1..8 results (default 5). |
Paid $0.01 USDC exact on Base: Wikipedia lead summary via public Wikimedia REST + MediaWiki search. q= search or title= page title (wikipedia.org URLs ok). Optional lang=en|simple, hits=1..8. Lead extract only, CC BY-SA. payTo 0x3903F05a17676566958B0a3E0c21E0bd49B66ea0.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| q | string | no | Search query (aliases query= search=). Required unless title=. |
| title | string | no | Direct page title or wikipedia.org/wiki/Title URL. Alias page=. |
| lang | string | no | en (default) or simple. |
| hits | integer | no | 1..8 search results (default 5). |
Paid $0.01 USDC exact on Base: email syntax + MX via DoH (no SMTP). Disposable domains and MX-absent = invalid. Fail closed on lookup errors. payTo 0x3903F05a17676566958B0a3E0c21E0bd49B66ea0.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| addr | string | yes | Email address (local@public-hostname). Max 254 chars. |
Paid $0.01 USDC exact on Base: US federal business-day calendar. date=YYYY-MM-DD (default today UTC) or start=&end= range (cap 366). Holidays 2025-2027 baked in, observed weekday rules. No API keys. payTo 0x3903F05a17676566958B0a3E0c21E0bd49B66ea0.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| date | string | no | YYYY-MM-DD. Optional; default today UTC. |
| start | string | no | Range start YYYY-MM-DD (inclusive). Requires end. |
| end | string | no | Range end YYYY-MM-DD (inclusive). Requires start. Cap 366 days. |
| tz | string | no | IANA timezone. Default America/Denver. |
Paid $0.01 USDC exact on Base: IANA timezone clock. name=America/Denver (default). Returns now, UTC offset, DST. No API keys. payTo 0x3903F05a17676566958B0a3E0c21E0bd49B66ea0.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| name | string | no | IANA timezone name. Optional; default America/Denver. |
Paid $0.01 USDC exact on Base: unix cron parser. expr required. Optional tz (default UTC) and n (1-20, default 5). Returns next fire times in UTC and America/Denver. No API keys. payTo 0x3903F05a17676566958B0a3E0c21E0bd49B66ea0.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| expr | string | yes | Unix crontab 5-field (minute hour day-of-month month day-of-week). |
| tz | string | no | IANA timezone the cron is interpreted in. Default UTC. |
| n | integer | no | Next fire count 1-20. Default 5. |
Paid $0.001 USDC exact on Base: public crypto RSS recap (CoinDesk, The Block, Decrypt, Base blog). Optional topic filter. Cache ~15 minutes. No API keys. payTo 0x3903F05a17676566958B0a3E0c21E0bd49B66ea0.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| topic | string | no | Optional case-insensitive filter on title/summary/source. Max 80 chars. |
FREE pay-to-rank board by AI Nock. Rank listings by USDC bid total in the last 24 hours. Empty JSON still sells: how/next point at unpaid POST /bid $0.05, POST /name $0.05, free GET /check (listing gate), GET /find $0.01. payTo on the JSON. No self-pay. Does not spend money. REST GET /board is the same SKU.
No parameter schema on file.
FREE ENS-style agent name lookup by AI Nock. n= lowercase [a-z0-9-] 3-32. If unset/unclaimed: taken false plus how/next pointing at unpaid POST /name $0.05 (HTTP 402), free GET /board, free GET /check (origin gate), GET /find $0.01. payTo + noSelfPay + TTL 30d. If set: origin, ownerHint?, expiresAt. Does not spend money. REST GET /name is the same SKU.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| n | string | no | Agent name to look up (lowercase [a-z0-9-] 3-32). |
| name | string | no | Alias of n. |
Paid $0.05 USDC exact on Base: bid on the pay-to-rank board. Each verified bid ADDS to that origin's 24h total. Listing URL must return HTTP 402 (or be this origin). http(s) only. No telegram/discord/whatsapp. payTo 0x3903F05a17676566958B0a3E0c21E0bd49B66ea0. REST POST /bid is the same SKU.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| url | string | yes | http(s) listing URL that returns HTTP 402, or this origin. |
| name | string | no | Optional short name. Max 80 chars. |
| description | string | no | Optional one-line description. Max 200 chars. |
| topic | string | no | Optional topic. Max 40 chars. |
| slot | string | no | Optional slot. Max 40 chars. |
Paid $0.05 USDC exact on Base: register or extend an ENS-style agent name for 30 days. origin must be https and return HTTP 402 (or be this origin). Re-register from anyone after payment overwrites/extends. payTo 0x3903F05a17676566958B0a3E0c21E0bd49B66ea0. REST POST /name is the same SKU.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| name | string | yes | lowercase [a-z0-9-] 3-32 chars, no leading/trailing hyphen. |
| origin | string | yes | https URL that returns HTTP 402, or this origin. |
| ownerHint | string | no | Optional short owner hint. Max 80 chars. |
Free
$0 forever
- Every tool — any call limit is its publisher’s, not ours
- No card, and mcprush charges nothing for it
- Runs at its publisher’s own address — this marketplace is not in the path
- Nothing to cap, because mcprush bills nothing
What counts against your monthly calls
| Tool | Unit | Calls used | Out of the allowance |
|---|
Nothing here is billable: mcprush charges nothing to install x402 Checker (AI Nock) or to call it, at any volume.
Call allowance · this installenforced at the gateway
Monthly allowance, in calls
—
—
Alert at 80% · then the tool returns a normal MCP error
Used this month: —
ATool-list grade · score 90 / 100
Release 1.34.0 · scanned 20 Oct 2026
Graded from the tools this server lists, not from its source code.
Two independent axes, because powerful and malicious are different questions. The grade is threat only. The capability level is blast radius, and it is never a penalty on the grade — it is priced as one subtract-only term in the score, where you can see it.
Threat score100
Client score90
Findings0 threat · 10 capability
Capabilityhigh
Coveragemanifest
Verificationnot in this report
Surface digest3e1670f2564d6ce7126c3dab0b70ec9dd59cf66c4b82680617294a844620f1ca
Score vectorthreat 100 → client 90
| Term | Level | What it prices | Points |
|---|---|---|---|
| capability-exposure | high | capability blast radius (high) — client exposure if the model is manipulated | −6 |
| coverage-honesty | manifest | inspection depth (manifest) — how much of the target the scan could see | −4 |
score = clamp(round(threatScore − E_cap − E_ver − E_cov), 0, 100). No model, no opinion, no network call at scoring time: the same methodology version against the same bytes always produces this number, and every line above is a field of the report rather than a summary of it.
What the scan could actually read
A grade is only as meaningful as its coverage, so the scanner publishes its own depth before it publishes its result.
The scan read each tool’s name, description, input schema and annotations exactly as the server listed them the last time it answered us; no code was reviewed. We ask the server again about once a month, and a list that changed is graded again.
Tool surfaceread
Implementation sourcenot available
Package metadatanot available
Live transportnot available
The implementation source was not read — this reflects the declared tool metadata only.
Capability — what it could do if the model were manipulated
Tags derived from each tool’s schema and the implementation, not from what the tool calls itself. high is the level these add up to.
| Tool | Capability tags | Why the tag was assigned |
|---|---|---|
| check | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| check_batch | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| report | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| who | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| md | untrusted-input | untrusted-input: keyword "fetch", declares openWorldHint: true (interacts with entities outside the server) |
| headers | sensitive-sourceuntrusted-input | sensitive-source: keyword "dump"; untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| json | no tags | |
| sanctions | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| domain | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| ens | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| redirect | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| gas | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| price | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| tx | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| block | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| ssl | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| token | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| sig | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| pm | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| fng | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| tsec | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| dex | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| now | no tags | |
| find | no tags | |
| geo | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| fx | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| wx | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| quote | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| hn | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| arxiv | untrusted-input | untrusted-input: keyword "fetch", declares openWorldHint: true (interacts with entities outside the server) |
| so | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| cve | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| gh | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| wiki | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) | |
| bizdays | no tags | |
| tz | no tags | |
| cron | no tags | |
| crypto_news | untrusted-input | untrusted-input: keyword "rss", declares openWorldHint: true (interacts with entities outside the server) |
| board | no tags | |
| name_lookup | no tags | |
| bid | external-sink | external-sink: declares readOnlyHint: false, openWorldHint: true |
| name_register | external-sink | external-sink: declares readOnlyHint: false, openWorldHint: true |
Toxic-flow graph
The lethal trifecta, checked as a graph rather than as a checklist: untrusted input, a sensitive source and an external sink have to meet before there is a path worth worrying about.
arxiv → headers → bid
A cross-tool exfiltration chain exists: arxiv ⇒ headers ⇒ bid.
Supply chain and provenance
Integrityfirst-seen
Surface digest3e1670f2564d6ce7
Scanned2026-10-20
This is the first scan of this surface here, so there is nothing yet to compare it against.
Every result on this tab comes from one deterministic pass over the published package — offline, rule by rule, and auditable line by line above. Same methodology version, same bytes, same score.
Release history
This is an address its publisher runs: which release it serves is theirs to choose, so there is nothing here to pin. The history below is for reading; the current release on file is 1.34.0.
1.34.0
undated
latestNo release note was published with this version.
—
no reviews yet
Who can review
One review per account, from a signed-in account that does not publish this listing. Nothing else is asked — you can say what you think before you install it. Publishers can reply once per review, and a review can be edited or deleted by whoever wrote it.
Sign in to write one
Any signed-in account that does not publish x402 Checker (AI Nock) can review it, once — before installing it or after. A review from an account that has installed it is marked as one.
No reviews yet
Nobody has reviewed this listing. The rating on the card is the mean of the reviews written here and nothing else, so there is no rating until somebody writes the first — which takes a signed-in account that does not publish it, and nothing else.