Search arXiv papers, download full text, semantic search, citation graphs, and alerts via MCP.
Nothing to run from here
zFinia Intelligence is installed from its publisher's own source and answers where it runs, so this marketplace is not in the path of a single call. There is no address here to send one to, and a panel that pretended otherwise would be showing you an answer we made up. Install it and call it from your own client — the Installation tab has the entry for each one.
93/100
tool-list score
21
tools declared
remote
at its publisher
—
calls last 7d
What it does
Machine-economy newswire and paid changes-since for agents. MCP is challenge-handoff, not a wallet.
Quickstart
# 1 — add it to Claude Code
claude mcp add --scope user --transport http zfinia-intelligence-mcp https://api.zfinia.com/mcp
# 2 — ask your agent for something these tools do
# company_evidence_pack, machine_economy_changes_since, foundry_outcome_router and 18 more
zFinia Intelligence costs nothing on mcprush: there is no plan to choose here, no cap to set and nothing mcprush can bill you for.
Publishernot claimed
ZFAll 1 server
zfinia1 server
1 category
Collected from a public index. Nobody has claimed this account, so nothing here was written by its author — claim it if it is yours.
Installation
Where are you running it?
Every route below installs the same thing and ends at the same approval screen. Nothing here runs on your machine and nothing runs on ours: this server answers at its publisher’s own address, and what you install is the connection straight to it.
Claude Codedeclared by this listing
This is a public server: it answers at its publisher’s own address and this marketplace is not in the path. Claude Code registers it in one command; --scope user makes it available in every project. The transport below is http, as the publisher's own manifest declares it.
claude mcp add --scope user --transport http zfinia-intelligence-mcp https://api.zfinia.com/mcpReconnect, or start a new session, and the tools appear in the model’s tool list.
Free on mcprush, and it answers at its publisher’s own address: this marketplace is not in the path, so there is no key of ours to hold and no card to add.
What it writes
One config entry pointing straight at the publisher’s own address — this marketplace is not in the path, and nothing from this listing executes on your machine.
What you approve
21 tools, with what each one reads, writes and reaches shown before you agree — the same list on every route above. Read the tool surface.
Tool surface
What the model actually sees. Descriptions are diffed on every release — see version history.
Company enrichment and KYB data for due diligence by domain: verify a counterparty, supplier or vendor before outreach, onboarding or payment. Returns firmographics (legal name, LEI, SEC CIK, industry, HQ, founded, employees), domain intelligence (age, email provider, SPF/DMARC), public role emails, socials, plus OFAC SDN and EU sanctions screening. Source-cited; unknowns null. Company data only,
| Parameter | Type | Required | Notes |
|---|---|---|---|
| domain | string | yes | Company website domain or URL, e.g. "stripe.com" or "https://www.stripe.com/about". |
Return curated machine-economy developments covering x402 and agent commerce after a supplied cursor or since value. This delta feed includes material additions, corrections and retractions with provenance and nextCursor for caller-managed polling; an empty result is valid. No transaction feed, built-in scheduler, generic web search or exhaustive ecosystem monitoring. Pay 10000 atomic USDC on Base
| Parameter | Type | Required | Notes |
|---|---|---|---|
| cursor | string | no | Previous nextCursor (opaque or ISO-8601). Required for the paid delta unless since is set. Pass this back on the next poll. |
| since | string | no | Alias of cursor. Use the previous nextCursor so only later material changes are returned. |
| include_high_resolution | boolean | no | When true, paid items include full evidence fields already present on the public newswire item. |
| maxItems | integer | no | — |
Use when you need an outcome and do not already know which zFinia utility to call. Send objective (aliases: goal, task, outcome, query) plus inputs. Top-level colour/field/html/cursor keys fold into inputs. tools/call quotes first and returns PAYMENT_REQUIRED for an already-live x402 resource at that resource's unchanged price (contrast 1000, DCC 3000, catalog-offer 100000, changes-since 10000). B
| Parameter | Type | Required | Notes |
|---|---|---|---|
| objective | string | yes | Outcome the buyer needs. Foundry chooses the execution plan; do not describe supplier topology. goal, task, outcome, and query are accepted aliases. Product names, service IDs, and live routes are val |
| inputs | object | no | Caller-supplied facts required to produce the outcome. Do not send secrets or ask Foundry to fetch URLs. |
| required_output | object | no | Optional desired output shape or fields. |
| freshness | string | no | — |
| latency | string | no | — |
| evidence | string | no | — |
| max_price | string | no | Optional maximum USDC atomic units the buyer will pay. |
| preferred_protocol | string | no | — |
| buyer_metadata | object | no | Optional non-secret buyer hints. Secret-like keys are stripped and never persisted. |
Find out what an x402 endpoint will charge before you pay it. Probes the endpoint, reads the challenge from the header or the body, and returns the decoded price, network, asset and payTo plus the declared input and output schemas. Never sends a payment. Only reviewed origins are reachable, and a redirect is refused rather than followed. Pay 4000 atomic USDC on Base via exact x402. MCP does not pa
| Parameter | Type | Required | Notes |
|---|---|---|---|
| url | string | yes | HTTPS URL of an x402 endpoint on a reviewed origin. Credentials, ports and fragments are refused. |
| method | string | no | Method to probe with. Defaults to GET. |
| body | object | no | Optional JSON body to send with a POST probe. |
Is this paid endpoint answering right now? Returns whether it serves a payment challenge, how many well-formed priced offers it carries, which warnings would actually break a payment as opposed to merely making the call harder to construct, and a single payable_now flag. Reports only what was observed; it makes no judgement about the seller. Pay 4000 atomic USDC on Base via exact x402. MCP does no
| Parameter | Type | Required | Notes |
|---|---|---|---|
| url | string | yes | HTTPS URL of an x402 endpoint on a reviewed origin. Credentials, ports and fragments are refused. |
| method | string | no | Method to probe with. Defaults to GET. |
| body | object | no | Optional JSON body to send with a POST probe. |
Did this paid endpoint change its terms since you last looked? Give it a previous challenge as the baseline and it returns every difference: price changes with old and new amounts, offers added or removed, a protocol version change, and a payee_changed flag when a new recipient address appears. Never pays the endpoint. Pay 6000 atomic USDC on Base via exact x402. MCP does not pay; it provides a ch
| Parameter | Type | Required | Notes |
|---|---|---|---|
| url | string | yes | HTTPS URL of an x402 endpoint on a reviewed origin. Credentials, ports and fragments are refused. |
| method | string | no | Method to probe with. Defaults to GET. |
| body | object | no | Optional JSON body to send with a POST probe. |
| baseline | object | yes | A challenge object from an earlier preflight or decode, used as the comparison point. |
Is Base ready to transact right now? One call returns the current block height, gas price in wei and how many seconds old the chain head is, all read at the same block. Refuses before payment if the endpoint is on the wrong chain or its head is stale, so you are never charged for a reading that is quietly out of date. Pay 4000 atomic USDC on Base via exact x402. MCP does not pay; it provides a cha
No parameter schema on file.
How settled is Base right now? Returns the latest and finalized block heights, how many confirmations the finalized head trails by, and both timestamps. Lets an agent decide whether a transaction is safe to treat as done, instead of guessing a confirmation count. Pay 4000 atomic USDC on Base via exact x402. MCP does not pay; it provides a challenge handoff.
No parameter schema on file.
Read a Base wallet native ETH balance and up to five ERC20 token balances at one pinned block. Separate balance lookups each answer at whatever height they happened to see, so they cannot be compared; these are all read at the same block and the block is in the response. Replaces six calls with one. Pay 8000 atomic USDC on Base via exact x402. MCP does not pay; it provides a challenge handoff.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| wallet | string | yes | Wallet address to read. |
| tokens | array | no | Up to five ERC20 contract addresses to read balances for. |
Read a Base token name, symbol, decimals and total supply in one call. Handles tokens that return a bytes32 name or symbol instead of a string, which is the case that breaks naive decoders. Fields the contract does not implement come back null and are listed, rather than guessed at. Refuses an address with no contract. Pay 6000 atomic USDC on Base via exact x402. MCP does not pay; it provides a ch
| Parameter | Type | Required | Notes |
|---|---|---|---|
| token | string | yes | Token contract address. |
Did my Base transaction work and what did it cost? One call returns success or reverted, gas used, effective gas price, the fee in wei and in exact decimal ETH, confirmations behind the head, sender, recipient, value and log count. Pending and unknown hashes get a definite answer rather than an error. Pay 6000 atomic USDC on Base via exact x402. MCP does not pay; it provides a challenge handoff.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| hash | string | yes | Transaction hash. |
Who owns this Base ERC721 token right now? Returns the current owner address at a pinned block. A token with no owner is refused before payment rather than returned as the zero address, which a caller could otherwise mistake for a real holder. Pay 4000 atomic USDC on Base via exact x402. MCP does not pay; it provides a challenge handoff.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| contract | string | yes | ERC721 contract address. |
| token_id | string | yes | Token id as a decimal string. |
Fetch a reviewed public page and return its title, every meta and Open Graph tag, and the canonical URL. No JavaScript is executed and no script content is read. Returns the licence and creator for the content alongside it, so reuse terms travel with the result. Pay 4000 atomic USDC on Base via exact x402. MCP does not pay; it provides a challenge handoff.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| url | string | yes | HTTPS URL on a reviewed public origin. Permitted origins: https://docs.python.org, https://developer.mozilla.org, https://en.wikipedia.org, https://www.cisa.gov, https://www.sec.gov, https://home.trea |
Fetch a reviewed public page and return every JSON-LD structured-data block it declares, parsed. No script is executed. A block that is malformed is reported as a named warning rather than being silently dropped, so a caller can tell an empty page from a broken one. Pay 5000 atomic USDC on Base via exact x402. MCP does not pay; it provides a challenge handoff.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| url | string | yes | HTTPS URL on a reviewed public origin. Permitted origins: https://docs.python.org, https://developer.mozilla.org, https://en.wikipedia.org, https://www.cisa.gov, https://www.sec.gov, https://home.trea |
Fetch a reviewed public page and return its HTML tables as arrays of rows and cells. Bounded to ten tables, fifty rows each and twenty cells per row, and every bound that is reached is named in the warnings so a truncated table is never mistaken for a short one. Pay 6000 atomic USDC on Base via exact x402. MCP does not pay; it provides a challenge handoff.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| url | string | yes | HTTPS URL on a reviewed public origin. Permitted origins: https://docs.python.org, https://developer.mozilla.org, https://en.wikipedia.org, https://www.cisa.gov, https://www.sec.gov, https://home.trea |
Fetch a reviewed public page and return its links with resolved absolute URLs and anchor text, the canonical URL, the declared meta robots directive, and how many links leave the host. Relative hrefs are resolved against the page, so a caller never has to guess a base. Pay 4000 atomic USDC on Base via exact x402. MCP does not pay; it provides a challenge handoff.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| url | string | yes | HTTPS URL on a reviewed public origin. Permitted origins: https://docs.python.org, https://developer.mozilla.org, https://en.wikipedia.org, https://www.cisa.gov, https://www.sec.gov, https://home.trea |
Fetch a reviewed public page and return SHA-256 hashes of both the raw HTML and the visible text, with byte and character counts. Two hashes because they answer different questions: the HTML hash moves when anything at all changes, the text hash moves only when the content a reader would notice does. Pay 4000 atomic USDC on Base via exact x402. MCP does not pay; it provides a challenge handoff.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| url | string | yes | HTTPS URL on a reviewed public origin. Permitted origins: https://docs.python.org, https://developer.mozilla.org, https://en.wikipedia.org, https://www.cisa.gov, https://www.sec.gov, https://home.trea |
Fetch a reviewed public page and return its readable content as Markdown, with headings and list structure preserved. Script, style and template content is removed, and nav and aside elements plus anything marked role="navigation" are excluded from the text. Returns the licence and creator, because this content is reusable only on those terms. Truncation at any bound is reported, never silent. Pay
| Parameter | Type | Required | Notes |
|---|---|---|---|
| url | string | yes | HTTPS URL on a reviewed public origin. Permitted origins: https://docs.python.org, https://developer.mozilla.org, https://en.wikipedia.org, https://www.cisa.gov, https://www.sec.gov, https://home.trea |
Everything a reviewed public page declares, in one call and one fetch: title, meta and Open Graph, canonical, robots directive, JSON-LD with its schema.org types, resolved links with an external count, tables, content fingerprints, and readable Markdown. Replaces six separate extraction calls, and adds the cross-checks none of them can make alone — a canonical that disagrees with the URL you asked
| Parameter | Type | Required | Notes |
|---|---|---|---|
| url | string | yes | HTTPS URL on a reviewed public origin. Permitted origins: https://docs.python.org, https://developer.mozilla.org, https://en.wikipedia.org, https://www.cisa.gov, https://www.sec.gov, https://home.trea |
| include_markdown | boolean | no | Set false to omit the Markdown body and keep the response small. Defaults to true. |
Watch up to ten reviewed public pages in one call. Supply the previous text hashes and it returns which pages actually changed, not ten hashes for you to compare. Hashes both the raw HTML and the visible text, so markup churn can be told from a real content change. A page that cannot be fetched is named individually and does not fail the batch. Pay 60000 atomic USDC on Base via exact x402. MCP doe
| Parameter | Type | Required | Notes |
|---|---|---|---|
| urls | array | yes | Up to 10 URLs on reviewed public origins. |
| baseline | object | no | Optional map of url to the text_sha256 you last saw. Without it every page reports no_baseline. |
Is this merchant safe to depend on? Audits up to ten x402 endpoints in one call and returns a verdict — ready, partially ready or not ready — with the specific blockers. Checks each endpoint serves a payable challenge with well-formed terms and a declared input schema, and adds the cross-endpoint check no single probe can make: whether every endpoint pays the same recipient. Never pays anything. P
| Parameter | Type | Required | Notes |
|---|---|---|---|
| endpoints | array | yes | Up to 10 endpoints. Give a descriptor with the request that endpoint actually needs — probing a paid API with an empty POST reports it unpayable when it is merely undocumented here. |
| expected_pay_to | string | no | Optional. The recipient you expect every endpoint to pay; a difference becomes a blocker. |
Free
$0 forever
- Every tool — any call limit is its publisher’s, not ours
- No card, and mcprush charges nothing for it
- Runs at its publisher’s own address — this marketplace is not in the path
- Nothing to cap, because mcprush bills nothing
What counts against your monthly calls
| Tool | Unit | Calls used | Out of the allowance |
|---|
Nothing here is billable: mcprush charges nothing to install zFinia Intelligence or to call it, at any volume.
Call allowance · this installenforced at the gateway
Monthly allowance, in calls
—
—
Alert at 80% · then the tool returns a normal MCP error
Used this month: —
ATool-list grade · score 93 / 100
Release 1.0.0 · scanned 20 Oct 2026
Graded from the tools this server lists, not from its source code.
Two independent axes, because powerful and malicious are different questions. The grade is threat only. The capability level is blast radius, and it is never a penalty on the grade — it is priced as one subtract-only term in the score, where you can see it.
Threat score100
Client score93
Findings0 threat · 6 capability
Capabilitymoderate
Coveragemanifest
Verificationnot in this report
Surface digest5aac75e944ba905e1040ae8a52253f990c0d634f04ad9731d1c65aa1ae9100a0
Score vectorthreat 100 → client 93
| Term | Level | What it prices | Points |
|---|---|---|---|
| capability-exposure | moderate | capability blast radius (moderate) — client exposure if the model is manipulated | −3 |
| coverage-honesty | manifest | inspection depth (manifest) — how much of the target the scan could see | −4 |
score = clamp(round(threatScore − E_cap − E_ver − E_cov), 0, 100). No model, no opinion, no network call at scoring time: the same methodology version against the same bytes always produces this number, and every line above is a field of the report rather than a summary of it.
What the scan could actually read
A grade is only as meaningful as its coverage, so the scanner publishes its own depth before it publishes its result.
The scan read each tool’s name, description, input schema and annotations exactly as the server listed them the last time it answered us; no code was reviewed. We ask the server again about once a month, and a list that changed is graded again.
Tool surfaceread
Implementation sourcenot available
Package metadatanot available
Live transportnot available
The implementation source was not read — this reflects the declared tool metadata only.
Capability — what it could do if the model were manipulated
Tags derived from each tool’s schema and the implementation, not from what the tool calls itself. moderate is the level these add up to.
| Tool | Capability tags | Why the tag was assigned |
|---|---|---|
| company_evidence_pack | no tags | |
| machine_economy_changes_since | untrusted-input | untrusted-input: keyword "web_search" |
| foundry_outcome_router | no tags | |
| x402_endpoint_preflight | no tags | |
| x402_endpoint_health | no tags | |
| x402_metadata_drift | no tags | |
| base_network_snapshot | no tags | |
| base_finality_snapshot | no tags | |
| base_wallet_snapshot | no tags | |
| base_token_metadata | no tags | |
| base_transaction_outcome | no tags | |
| base_nft_owner | no tags | |
| page_metadata | untrusted-input | untrusted-input: keyword "fetch", parameter "url" with "fetch" in the description |
| page_json_ld | untrusted-input | untrusted-input: keyword "fetch", parameter "url" with "fetch" in the description |
| page_tables | untrusted-input | untrusted-input: keyword "fetch", parameter "url" with "fetch" in the description |
| page_links | untrusted-input | untrusted-input: keyword "fetch", parameter "url" with "fetch" in the description |
| page_fingerprint | untrusted-input | untrusted-input: keyword "fetch", parameter "url" with "fetch" in the description |
| page_markdown | untrusted-input | untrusted-input: keyword "fetch", parameter "url" with "fetch" in the description |
| website_evidence_pack | no tags | |
| batch_page_fingerprint | no tags | |
| x402_merchant_readiness_audit | no tags |
Toxic-flow graph
The lethal trifecta, checked as a graph rather than as a checklist: untrusted input, a sensitive source and an external sink have to meet before there is a path worth worrying about.
The public result for this release does not print the flow graph, so there is nothing to show here. That is not the same as "no paths were found": what the scan did read is above, under coverage.
Supply chain and provenance
Integrityfirst-seen
Surface digest5aac75e944ba905e
Scanned2026-10-20
This is the first scan of this surface here, so there is nothing yet to compare it against.
Every result on this tab comes from one deterministic pass over the published package — offline, rule by rule, and auditable line by line above. Same methodology version, same bytes, same score.
Release history
This is an address its publisher runs: which release it serves is theirs to choose, so there is nothing here to pin. The history below is for reading; the current release on file is 1.0.0.
1.0.0
undated
latestNo release note was published with this version.
—
no reviews yet
Who can review
One review per account, from a signed-in account that does not publish this listing. Nothing else is asked — you can say what you think before you install it. Publishers can reply once per review, and a review can be edited or deleted by whoever wrote it.
Sign in to write one
Any signed-in account that does not publish zFinia Intelligence can review it, once — before installing it or after. A review from an account that has installed it is marked as one.
No reviews yet
Nobody has reviewed this listing. The rating on the card is the mean of the reviews written here and nothing else, so there is no rating until somebody writes the first — which takes a signed-in account that does not publish it, and nothing else.