io.github.rezearcher/tech-risk

MCPcomunidaden línea
v1.2.0io.github.rezearcherUnknownActualizado hace 2 m

x402 MCP for agents: crypto prices, funding, DeFi yields, Polymarket, Base RPC + MCP security.

Estado del endpointen línea
comprobado hace 11 días · 606 ms
100 % de las últimas 6 comprobaciones llegaron a este endpoint
Funciona en
ClaudeCursorCopilotChatGPTGemini

Inferido de los transportes que declara este listado (streamable-http). Que un cliente no aparezca aquí no significa que se haya descartado: simplemente Forge no puede confirmarlo.

Indexado automáticamente desde fuentes públicas. Aún sin verificar por su desarrollador en Forge.Reclamar este listado →
hace 2 mÚltima actualización
Paquete
Autorio.github.rezearcher
LicenciaUnknown
Versión1.2.0
Fuentemcp-registry
Estado de confianza
B
60/100Bueno
Solo endpoint alojado: esta evaluación cubre quién lo publica y si responde, no el código que hay detrás. No se aplica análisis de CVE, dependencias ni código fuente, así que nada de lo que aparece aquí certifica que ese código esté limpio.
✓Listado en el índice de Forge+10/10
—Identidad del publicador verificada+0/30
→ Publicador: este listado no tiene ningún repositorio registrado, así que `forge publish` no puede verificar la propiedad de forma automática. Usa «Reclamar este listado» arriba — en Forge lo revisamos a mano.
—Verificación de dominio+0/10
→ Ahora mismo no está disponible para este tipo de listado: hoy la comprobación de dominio solo se ejecuta para paquetes publicados en npm, así que esta fila todavía no se puede conseguir aquí, sea lo que sea lo que haya alojado en el dominio.
✓Análisis de inyección de prompts · limpio+30/30
✓Análisis de ofuscación / exfiltración · limpio+20/20
EstadoIndexado por la comunidad
PublicadorSin verificar
FirmaSin firmar
Dominio—
Procedencia—
DependenciasSin auditar
Superficie de herramientas22 herramientas · ninguna privilegiada
Análisis de seguridad✓ Limpiovlive · hace 1 m¿Qué tan bien funciona este análisis?
EvaluacionesNinguna
Indexado9 jul 2026

La verificación confirma la identidad del publicador (la propiedad del repo), no la seguridad del código. El análisis de seguridad cubre los CVE conocidos y los scripts de instalación sospechosos.

Herramientas

22 herramientas · ninguna privilegiada
Observado en vivo desde el endpoint del proveedor1mo ago

Leído de un handshake MCP real initialize → tools/list contra el endpoint declarado. No se invocó ninguna herramienta: tools/list es la llamada de introspección de solo lectura que el protocolo define para esto. Refleja lo que el servidor anunciaba en ese momento; un endpoint alojado no está fijado a ninguna versión y puede cambiar sin avisar.

  • https://x402-data-api.sigrunner.workers.dev/mcp22 herramientas · 622 ms
enrich_tech_riskSecurity enrichment: tech-stack fingerprint + CVE mapping + EPSS + CISA KEV + verdict (clear/review/block) for a domain. Cost: $0.005 USDC per call (x402 micropayment).

Security enrichment: tech-stack fingerprint + CVE mapping + EPSS + CISA KEV + verdict (clear/review/block) for a domain. Cost: $0.005 USDC per call (x402 micropayment).

ParámetroTipoDescripción
domainstring—
techstackarray—
enrich_domainFirmographic + tech-stack enrichment: RDAP registrant/registrar, DNS records, full subdomain enumeration + certificate-transparency history, tech-stack fingerprint, verdict (clear/review/block, based on domain age) for a domain. Cost: $0.005 USDC per call via the shared MCP payment gate (the direct…

Firmographic + tech-stack enrichment: RDAP registrant/registrar, DNS records, full subdomain enumeration + certificate-transparency history, tech-stack fingerprint, verdict (clear/review/block, based on domain age) for a domain. Cost: $0.005 USDC per call via the shared MCP payment gate (the direct…

ParámetroTipoDescripción
domain*string—
scan_mcp_serverSecurity-audit a target MCP server for prompt-injection / tool-poisoning. Fetches the server's advertised tools and statically analyzes each for hidden instructions, data-exfiltration hints, dangerous capabilities, cross-tool shadowing, and invisible-unicode payloads (OWASP LLM01/LLM08). Returns fi…

Security-audit a target MCP server for prompt-injection / tool-poisoning. Fetches the server's advertised tools and statically analyzes each for hidden instructions, data-exfiltration hints, dangerous capabilities, cross-tool shadowing, and invisible-unicode payloads (OWASP LLM01/LLM08). Returns fi…

ParámetroTipoDescripción
url*stringTarget MCP server endpoint URL to audit
scan_mcp_previewFREE preview scan of a target MCP server for tool-poisoning / prompt-injection. Returns issue count, severity breakdown, risk score, and verdict (clear/review/block) — but NOT which tools or the evidence. Use this to check any MCP server (including your own) at no cost; if issues are found, call th…

FREE preview scan of a target MCP server for tool-poisoning / prompt-injection. Returns issue count, severity breakdown, risk score, and verdict (clear/review/block) — but NOT which tools or the evidence. Use this to check any MCP server (including your own) at no cost; if issues are found, call th…

ParámetroTipoDescripción
url*stringTarget MCP server endpoint URL to preview-scan (free)
crypto_pricesLive spot token prices (price, change_24h, symbol, confidence, timestamp) for CoinGecko ids, sourced from DefiLlama. Cost: $0.005 USDC per call via x402.

Live spot token prices (price, change_24h, symbol, confidence, timestamp) for CoinGecko ids, sourced from DefiLlama. Cost: $0.005 USDC per call via x402.

ParámetroTipoDescripción
coinsstringComma-separated CoinGecko ids, e.g. "bitcoin,ethereum,solana" (default; max 25)
crypto_fundingLive cross-venue perpetual-futures funding rates from Hyperliquid+OKX+dYdX (per-venue rate, arb spread in bps, cheapest-long/richest-short venue, premium/basis, annualized_hl, annualized_okx, LONGS_PAY/SHORTS_PAY/NEUTRAL signal, next_funding_ts, mark/oracle price, open interest, day volume), ranked…

Live cross-venue perpetual-futures funding rates from Hyperliquid+OKX+dYdX (per-venue rate, arb spread in bps, cheapest-long/richest-short venue, premium/basis, annualized_hl, annualized_okx, LONGS_PAY/SHORTS_PAY/NEUTRAL signal, next_funding_ts, mark/oracle price, open interest, day volume), ranked…

ParámetroTipoDescripción
limitnumberNumber of results, default 20, max 100
defi_yieldsLive DeFi lending/LP yield pools (project, chain, symbol, pool id, APY breakdown incl. 1d/7d/30d trend + apyBase7d/apyMean30d, IL risk incl. il7d, exposure, reward/underlying tokens, outlier flag, mu/sigma, DefiLlama stability forecast, TVL, stablecoin flag) from DefiLlama, ranked by TVL (or risk-a…

Live DeFi lending/LP yield pools (project, chain, symbol, pool id, APY breakdown incl. 1d/7d/30d trend + apyBase7d/apyMean30d, IL risk incl. il7d, exposure, reward/underlying tokens, outlier flag, mu/sigma, DefiLlama stability forecast, TVL, stablecoin flag) from DefiLlama, ranked by TVL (or risk-a…

ParámetroTipoDescripción
limitnumberNumber of results, default 20, max 100
projectstringFilter by DefiLlama project slug
chainstringFilter by chain name
stablebooleanOnly stablecoin pools
sortstringSort order: 'tvl' (default) or 'risk_adjusted' (apy/sigma)
pm_marketsLive Polymarket prediction-market data — question, outcomes, outcome prices, bestBid/bestAsk/spread, volume24hr/volume1wk, oneDayPriceChange, clobTokenIds, conditionId, category tags, liquidity, end date — ranked by volume24hr. Cost: $0.005 USDC per call via x402.

Live Polymarket prediction-market data — question, outcomes, outcome prices, bestBid/bestAsk/spread, volume24hr/volume1wk, oneDayPriceChange, clobTokenIds, conditionId, category tags, liquidity, end date — ranked by volume24hr. Cost: $0.005 USDC per call via x402.

ParámetroTipoDescripción
querystringCase-insensitive keyword filter on the market question
limitnumberNumber of results, default 20, max 100
crypto_prices_previewFREE 1-item sample of live token prices. No payment required.

FREE 1-item sample of live token prices. No payment required.

No se publicó ningún esquema de entrada para esta herramienta.

crypto_funding_previewFREE 1-item sample of live cross-venue funding rates. No payment required.

FREE 1-item sample of live cross-venue funding rates. No payment required.

No se publicó ningún esquema de entrada para esta herramienta.

defi_yields_previewFREE 1-item sample of live DeFi yield pools. No payment required.

FREE 1-item sample of live DeFi yield pools. No payment required.

No se publicó ningún esquema de entrada para esta herramienta.

pm_markets_previewFREE top-1 sample of live Polymarket prediction markets, ranked by volume24hr. No payment required.

FREE top-1 sample of live Polymarket prediction markets, ranked by volume24hr. No payment required.

No se publicó ningún esquema de entrada para esta herramienta.

chain_block_numberCurrent Base mainnet block number via multi-provider JSON-RPC (automatic failover across 4 providers, never fails on one provider's rate limit). Cost: $0.005 USDC per call via x402.

Current Base mainnet block number via multi-provider JSON-RPC (automatic failover across 4 providers, never fails on one provider's rate limit). Cost: $0.005 USDC per call via x402.

No se publicó ningún esquema de entrada para esta herramienta.

chain_gas_priceCurrent Base mainnet gas price (wei/gwei), EIP-1559 base_fee_gwei/priority_fee_gwei, and gas_price_usd (ETH price cross-call — no price oracle on ETH-only competitors) via multi-provider JSON-RPC. Cost: $0.005 USDC per call via x402.

Current Base mainnet gas price (wei/gwei), EIP-1559 base_fee_gwei/priority_fee_gwei, and gas_price_usd (ETH price cross-call — no price oracle on ETH-only competitors) via multi-provider JSON-RPC. Cost: $0.005 USDC per call via x402.

No se publicó ningún esquema de entrada para esta herramienta.

chain_balanceNative ETH balance of a Base mainnet address, incl. balance_usd (ETH price cross-call — no price oracle on ETH-only competitors), via multi-provider JSON-RPC. Cost: $0.005 USDC per call via x402.

Native ETH balance of a Base mainnet address, incl. balance_usd (ETH price cross-call — no price oracle on ETH-only competitors), via multi-provider JSON-RPC. Cost: $0.005 USDC per call via x402.

ParámetroTipoDescripción
address*string0x-prefixed 20-byte Base address
chain_token_balanceERC-20 token balance of a Base mainnet address via multi-provider JSON-RPC, incl. symbol/decimals/balance_formatted (per-token-contract cached in-isolate). Cost: $0.005 USDC per call via x402.

ERC-20 token balance of a Base mainnet address via multi-provider JSON-RPC, incl. symbol/decimals/balance_formatted (per-token-contract cached in-isolate). Cost: $0.005 USDC per call via x402.

ParámetroTipoDescripción
address*string0x-prefixed 20-byte holder address
token*string0x-prefixed 20-byte ERC-20 contract address
chain_txTransaction details by hash on Base mainnet via multi-provider JSON-RPC. Cost: $0.005 USDC per call via x402.

Transaction details by hash on Base mainnet via multi-provider JSON-RPC. Cost: $0.005 USDC per call via x402.

ParámetroTipoDescripción
hash*string0x-prefixed 32-byte transaction hash
chain_walletWallet bundle: ETH balance + balance_usd (ETH price cross-call) + tx count + contract-code check (EIP-7702 delegated-EOA aware) for a Base mainnet address, in one call. Cost: $0.005 USDC per call via x402.

Wallet bundle: ETH balance + balance_usd (ETH price cross-call) + tx count + contract-code check (EIP-7702 delegated-EOA aware) for a Base mainnet address, in one call. Cost: $0.005 USDC per call via x402.

ParámetroTipoDescripción
address*string0x-prefixed 20-byte Base address
chain_token_securityToken security / honeypot detector for a Base mainnet ERC-20: EIP-1967/1822 proxy + upgradeability detection, bytecode dispatcher scan for mint/pause/blacklist/fee-setter/ownership selectors, owner() renouncement check, and a live eth_call state-override simulation testing whether a synthetic walle…

Token security / honeypot detector for a Base mainnet ERC-20: EIP-1967/1822 proxy + upgradeability detection, bytecode dispatcher scan for mint/pause/blacklist/fee-setter/ownership selectors, owner() renouncement check, and a live eth_call state-override simulation testing whether a synthetic walle…

ParámetroTipoDescripción
token*string0x-prefixed 20-byte ERC-20 contract address on Base mainnet
chain_block_number_previewFREE live sample of the current Base mainnet block number — identical data to the paid chain_block_number tool. No payment required.

FREE live sample of the current Base mainnet block number — identical data to the paid chain_block_number tool. No payment required.

No se publicó ningún esquema de entrada para esta herramienta.

chain_gas_price_previewFREE live sample of the current Base mainnet gas price — identical data to the paid chain_gas_price tool. No payment required.

FREE live sample of the current Base mainnet gas price — identical data to the paid chain_gas_price tool. No payment required.

No se publicó ningún esquema de entrada para esta herramienta.

chain_token_security_previewFREE full real analysis of a fixed well-known token (Base WETH) via the token security / honeypot detector — same depth as the paid chain_token_security tool, so you can see the real product before paying. To analyze an arbitrary token, use the paid chain_token_security tool. No payment required.

FREE full real analysis of a fixed well-known token (Base WETH) via the token security / honeypot detector — same depth as the paid chain_token_security tool, so you can see the real product before paying. To analyze an arbitrary token, use the paid chain_token_security tool. No payment required.

No se publicó ningún esquema de entrada para esta herramienta.

22 de 22 herramientas publicaron una descripción.

Los nombres y descripciones de las herramientas los escribe el publicador y se muestran literalmente como texto inerte. Son las cadenas que un cliente MCP pasa al modelo, así que Forge las analiza en busca de patrones de inyección de prompts — cualquier hallazgo aparece junto al análisis de seguridad de arriba. «Privilegiada» es una coincidencia de palabra clave en el nombre de la herramienta, no una auditoría de lo que hace: un nombre inofensivo puede hacer cualquier cosa.

Acerca de

x402 MCP for agents: crypto prices, funding, DeFi yields, Polymarket, Base RPC + MCP security.

Palabras clave
mcp
Alternativas
Comparando superficies de herramientas…

Sin cobertura de dependencias

Esta entrada no publica ningún paquete de npm, así que Forge no tiene un árbol de dependencias para ella. Es una carencia de cobertura, no una afirmación de que no tenga dependencias.