Before you pay an endpoint you cannot vouch for: credit grade, drift and preflight.
Inferido de los transportes que declara este listado (streamable-http). Que un cliente no aparezca aquí no significa que se haya descartado: simplemente Forge no puede confirmarlo.
La verificación confirma la identidad del publicador (la propiedad del repo), no la seguridad del código. El análisis de seguridad cubre los CVE conocidos y los scripts de instalación sospechosos.
Leído de un handshake MCP real initialize → tools/list contra el endpoint declarado. No se invocó ninguna herramienta: tools/list es la llamada de introspección de solo lectura que el protocolo define para esto. Refleja lo que el servidor anunciaba en ese momento; un endpoint alojado no está fijado a ninguna versión y puede cambiar sin avisar.
https://mcpfax-reliability.bowling-anthony.workers.dev/mcp7 herramientas · 199 msmcpfax_endpoint_credit_scoreCreditworthiness grade for one x402 endpoint or MCP server: letter grade A-E (or NR when unrated), a 0-1000 score, per-component subscores, a confidence level, flags, and the dated evidence each figure rests on. Use this before trusting or paying an unfamiliar endpoint. The grade ranks observed ris…Creditworthiness grade for one x402 endpoint or MCP server: letter grade A-E (or NR when unrated), a 0-1000 score, per-component subscores, a confidence level, flags, and the dated evidence each figure rests on. Use this before trusting or paying an unfamiliar endpoint. The grade ranks observed ris…
| Parámetro | Tipo | Descripción |
|---|---|---|
| endpoint* | string | Observatory listing id. Use 'host:<hostname>' for an x402 endpoint, e.g. 'host:api.example.com', or 'mcp:<publisher>/<name>' for a registry-listed MCP server,… |
mcpfax_integration_driftWhat changed under an x402 endpoint or MCP server you have ALREADY integrated: payTo rotations, price, asset and network changes, terms added or removed, and tool-schema changes. This is not a discovery tool and will not help you choose a server; it tells you whether the one you wired in still matc…What changed under an x402 endpoint or MCP server you have ALREADY integrated: payTo rotations, price, asset and network changes, terms added or removed, and tool-schema changes. This is not a discovery tool and will not help you choose a server; it tells you whether the one you wired in still matc…
subjects: Links to undeclared domain: x402.browserbase.com| Parámetro | Tipo | Descripción |
|---|---|---|
| subjects* | string | Comma-separated endpoint URLs or host identifiers to check, at most 50, e.g. 'https://x402.browserbase.com/browser/session/create,host:api.example.com'. |
| since | string | The watermark from your previous call (YYYY-MM-DD). Omit on a first call to receive the whole archive. |
mcpfax_wallet_authenticityPayer-concentration and wash-risk assessment for a receiving wallet: how concentrated its observed payers are, the measured coverage of that observation, an explicit wash-risk haircut ONLY when coverage is sufficient, how many listings declare the same address, and observed USDC inflow. Use this to…Payer-concentration and wash-risk assessment for a receiving wallet: how concentrated its observed payers are, the measured coverage of that observation, an explicit wash-risk haircut ONLY when coverage is sufficient, how many listings declare the same address, and observed USDC inflow. Use this to…
| Parámetro | Tipo | Descripción |
|---|---|---|
| wallet* | string | The receiving EVM wallet address, 0x followed by 40 hex characters, e.g. '0x1831f336585a6C67B6A954d28f3E07F44C4EEBbd'. |
mcpfax_endpoint_revenue_estimateObserved on-chain revenue signals for one listing: total USDC inflow, how many distinct payers, the modal transfer size, payment rate, 7- and 30-day trend windows, and where it sits in its cohort by percentile. Use this to size a seller's real traction. Inflow is observed on-chain and is not proven…Observed on-chain revenue signals for one listing: total USDC inflow, how many distinct payers, the modal transfer size, payment rate, 7- and 30-day trend windows, and where it sits in its cohort by percentile. Use this to size a seller's real traction. Inflow is observed on-chain and is not proven…
| Parámetro | Tipo | Descripción |
|---|---|---|
| endpoint* | string | Observatory listing id. Use 'host:<hostname>' for an x402 endpoint, e.g. 'host:api.example.com', or 'mcp:<publisher>/<name>' for a registry-listed MCP server,… |
mcpfax_payer_wallet_profileKnow-your-agent profile for a paying wallet: how many distinct services it pays, total observed spend, whether the address is a contract or an externally owned account, and coverage-gated screening signals. Use this to vet a counterparty that is paying you. Screening signals are withheld with statu…Know-your-agent profile for a paying wallet: how many distinct services it pays, total observed spend, whether the address is a contract or an externally owned account, and coverage-gated screening signals. Use this to vet a counterparty that is paying you. Screening signals are withheld with statu…
| Parámetro | Tipo | Descripción |
|---|---|---|
| address* | string | The paying EVM wallet address, 0x followed by 40 hex characters. |
mcpfax_payto_change_feedChronological feed of rating actions since a date: grade upgrades and downgrades, payTo wallet changes (a seller redirecting payment), listing removals, and returns. Use this to monitor a portfolio of endpoints for adverse changes rather than re-scoring each one. The feed cannot return events from…Chronological feed of rating actions since a date: grade upgrades and downgrades, payTo wallet changes (a seller redirecting payment), listing removals, and returns. Use this to monitor a portfolio of endpoints for adverse changes rather than re-scoring each one. The feed cannot return events from…
| Parámetro | Tipo | Descripción |
|---|---|---|
| since | string | Inclusive UTC start date in YYYY-MM-DD form, e.g. '2026-07-01'. Defaults to 30 days ago, but the feed cannot return events from before the archive start report… |
mcpfax_preflight_checkCheck that an endpoint is live and that its terms have not changed, BEFORE you send it an expensive request. A $15 call with a hypothetical 2% loss rate carries $0.30 of expected loss; a reachability check cannot promise to prevent it. Compare the quoted fee with the value of the pending call and t…Check that an endpoint is live and that its terms have not changed, BEFORE you send it an expensive request. A $15 call with a hypothetical 2% loss rate carries $0.30 of expected loss; a reachability check cannot promise to prevent it. Compare the quoted fee with the value of the pending call and t…
target: Links to undeclared domain: api.example.com| Parámetro | Tipo | Descripción |
|---|---|---|
| target* | string | The endpoint you are about to call. Preferred form is the absolute https:// URL of the exact resource you will pay for, e.g. 'https://api.example.com/v1/search… |
| expected_price | string | What you believe the call costs. A decimal such as '0.01' is read as USD; a bare integer such as '10000' is read as atomic units. |
| expected_payto | string | The payment destination you believe you are paying — an EVM address or a base58 Solana address. A mismatch is the strongest signal this tool produces. |
| expected_schema_hash | string | The schema hash a previous call to this tool returned in live.schema_hash. It covers tool names and input/output schemas, not titles or descriptions. |
| max_age_seconds | integer | Your freshness bar, default 300. A stored observation older than this is still reported but may not support an ALLOW verdict. A stored observation newer than t… |
| probe_method | string | HTTP method for the unpaid probe of a non-MCP endpoint, default GET. Only side-effect-free methods are accepted; this tool never sends a request that could cha… |
7 de 7 herramientas publicaron una descripción.
Los nombres y descripciones de las herramientas los escribe el publicador y se muestran literalmente como texto inerte. Son las cadenas que un cliente MCP pasa al modelo, así que Forge las analiza en busca de patrones de inyección de prompts — cualquier hallazgo aparece junto al análisis de seguridad de arriba. «Privilegiada» es una coincidencia de palabra clave en el nombre de la herramienta, no una auditoría de lo que hace: un nombre inofensivo puede hacer cualquier cosa.
Before you pay an endpoint you cannot vouch for: credit grade, drift and preflight.
Los nombres enlazados abren el índice de Forge con todas las entradas que se observó que exponen esa herramienta. Ver todas las herramientas indexadas.
Esta entrada no publica ningún paquete de npm, así que Forge no tiene un árbol de dependencias para ella. Es una carencia de cobertura, no una afirmación de que no tenga dependencias.