x402 MCP for agents: crypto prices, funding, DeFi yields, Polymarket, Base RPC + MCP security.
Déduit des transports déclarés par cette annonce (streamable-http). Un client absent de cette liste n’est pas écarté pour autant — c’est simplement quelque chose que Forge ne peut pas confirmer.
La vérification confirme l’identité de l’éditeur (la propriété du dépôt), pas la sûreté du code. L’analyse de sécurité couvre les CVE connues et les scripts d’installation suspects.
Lu depuis un véritable échange MCP initialize → tools/list contre l’endpoint déclaré. Aucun outil n’a été invoqué — tools/list est l’appel d’introspection en lecture seule que le protocole prévoit pour cela. Cela reflète ce que le serveur annonçait à cet instant ; un endpoint hébergé n’est figé sur aucune version et peut changer sans préavis.
https://x402-data-api.sigrunner.workers.dev/mcp22 outils · 622 msenrich_tech_riskSecurity enrichment: tech-stack fingerprint + CVE mapping + EPSS + CISA KEV + verdict (clear/review/block) for a domain. Cost: $0.005 USDC per call (x402 micropayment).Security enrichment: tech-stack fingerprint + CVE mapping + EPSS + CISA KEV + verdict (clear/review/block) for a domain. Cost: $0.005 USDC per call (x402 micropayment).
| Paramètre | Type | Description |
|---|---|---|
| domain | string | — |
| techstack | array | — |
enrich_domainFirmographic + tech-stack enrichment: RDAP registrant/registrar, DNS records, full subdomain enumeration + certificate-transparency history, tech-stack fingerprint, verdict (clear/review/block, based on domain age) for a domain. Cost: $0.005 USDC per call via the shared MCP payment gate (the direct…Firmographic + tech-stack enrichment: RDAP registrant/registrar, DNS records, full subdomain enumeration + certificate-transparency history, tech-stack fingerprint, verdict (clear/review/block, based on domain age) for a domain. Cost: $0.005 USDC per call via the shared MCP payment gate (the direct…
| Paramètre | Type | Description |
|---|---|---|
| domain* | string | — |
scan_mcp_serverSecurity-audit a target MCP server for prompt-injection / tool-poisoning. Fetches the server's advertised tools and statically analyzes each for hidden instructions, data-exfiltration hints, dangerous capabilities, cross-tool shadowing, and invisible-unicode payloads (OWASP LLM01/LLM08). Returns fi…Security-audit a target MCP server for prompt-injection / tool-poisoning. Fetches the server's advertised tools and statically analyzes each for hidden instructions, data-exfiltration hints, dangerous capabilities, cross-tool shadowing, and invisible-unicode payloads (OWASP LLM01/LLM08). Returns fi…
| Paramètre | Type | Description |
|---|---|---|
| url* | string | Target MCP server endpoint URL to audit |
scan_mcp_previewFREE preview scan of a target MCP server for tool-poisoning / prompt-injection. Returns issue count, severity breakdown, risk score, and verdict (clear/review/block) — but NOT which tools or the evidence. Use this to check any MCP server (including your own) at no cost; if issues are found, call th…FREE preview scan of a target MCP server for tool-poisoning / prompt-injection. Returns issue count, severity breakdown, risk score, and verdict (clear/review/block) — but NOT which tools or the evidence. Use this to check any MCP server (including your own) at no cost; if issues are found, call th…
| Paramètre | Type | Description |
|---|---|---|
| url* | string | Target MCP server endpoint URL to preview-scan (free) |
crypto_pricesLive spot token prices (price, change_24h, symbol, confidence, timestamp) for CoinGecko ids, sourced from DefiLlama. Cost: $0.005 USDC per call via x402.Live spot token prices (price, change_24h, symbol, confidence, timestamp) for CoinGecko ids, sourced from DefiLlama. Cost: $0.005 USDC per call via x402.
| Paramètre | Type | Description |
|---|---|---|
| coins | string | Comma-separated CoinGecko ids, e.g. "bitcoin,ethereum,solana" (default; max 25) |
crypto_fundingLive cross-venue perpetual-futures funding rates from Hyperliquid+OKX+dYdX (per-venue rate, arb spread in bps, cheapest-long/richest-short venue, premium/basis, annualized_hl, annualized_okx, LONGS_PAY/SHORTS_PAY/NEUTRAL signal, next_funding_ts, mark/oracle price, open interest, day volume), ranked…Live cross-venue perpetual-futures funding rates from Hyperliquid+OKX+dYdX (per-venue rate, arb spread in bps, cheapest-long/richest-short venue, premium/basis, annualized_hl, annualized_okx, LONGS_PAY/SHORTS_PAY/NEUTRAL signal, next_funding_ts, mark/oracle price, open interest, day volume), ranked…
| Paramètre | Type | Description |
|---|---|---|
| limit | number | Number of results, default 20, max 100 |
defi_yieldsLive DeFi lending/LP yield pools (project, chain, symbol, pool id, APY breakdown incl. 1d/7d/30d trend + apyBase7d/apyMean30d, IL risk incl. il7d, exposure, reward/underlying tokens, outlier flag, mu/sigma, DefiLlama stability forecast, TVL, stablecoin flag) from DefiLlama, ranked by TVL (or risk-a…Live DeFi lending/LP yield pools (project, chain, symbol, pool id, APY breakdown incl. 1d/7d/30d trend + apyBase7d/apyMean30d, IL risk incl. il7d, exposure, reward/underlying tokens, outlier flag, mu/sigma, DefiLlama stability forecast, TVL, stablecoin flag) from DefiLlama, ranked by TVL (or risk-a…
| Paramètre | Type | Description |
|---|---|---|
| limit | number | Number of results, default 20, max 100 |
| project | string | Filter by DefiLlama project slug |
| chain | string | Filter by chain name |
| stable | boolean | Only stablecoin pools |
| sort | string | Sort order: 'tvl' (default) or 'risk_adjusted' (apy/sigma) |
pm_marketsLive Polymarket prediction-market data — question, outcomes, outcome prices, bestBid/bestAsk/spread, volume24hr/volume1wk, oneDayPriceChange, clobTokenIds, conditionId, category tags, liquidity, end date — ranked by volume24hr. Cost: $0.005 USDC per call via x402.Live Polymarket prediction-market data — question, outcomes, outcome prices, bestBid/bestAsk/spread, volume24hr/volume1wk, oneDayPriceChange, clobTokenIds, conditionId, category tags, liquidity, end date — ranked by volume24hr. Cost: $0.005 USDC per call via x402.
| Paramètre | Type | Description |
|---|---|---|
| query | string | Case-insensitive keyword filter on the market question |
| limit | number | Number of results, default 20, max 100 |
crypto_prices_previewFREE 1-item sample of live token prices. No payment required.FREE 1-item sample of live token prices. No payment required.
Aucun schéma d’entrée n’a été publié pour cet outil.
crypto_funding_previewFREE 1-item sample of live cross-venue funding rates. No payment required.FREE 1-item sample of live cross-venue funding rates. No payment required.
Aucun schéma d’entrée n’a été publié pour cet outil.
defi_yields_previewFREE 1-item sample of live DeFi yield pools. No payment required.FREE 1-item sample of live DeFi yield pools. No payment required.
Aucun schéma d’entrée n’a été publié pour cet outil.
pm_markets_previewFREE top-1 sample of live Polymarket prediction markets, ranked by volume24hr. No payment required.FREE top-1 sample of live Polymarket prediction markets, ranked by volume24hr. No payment required.
Aucun schéma d’entrée n’a été publié pour cet outil.
chain_block_numberCurrent Base mainnet block number via multi-provider JSON-RPC (automatic failover across 4 providers, never fails on one provider's rate limit). Cost: $0.005 USDC per call via x402.Current Base mainnet block number via multi-provider JSON-RPC (automatic failover across 4 providers, never fails on one provider's rate limit). Cost: $0.005 USDC per call via x402.
Aucun schéma d’entrée n’a été publié pour cet outil.
chain_gas_priceCurrent Base mainnet gas price (wei/gwei), EIP-1559 base_fee_gwei/priority_fee_gwei, and gas_price_usd (ETH price cross-call — no price oracle on ETH-only competitors) via multi-provider JSON-RPC. Cost: $0.005 USDC per call via x402.Current Base mainnet gas price (wei/gwei), EIP-1559 base_fee_gwei/priority_fee_gwei, and gas_price_usd (ETH price cross-call — no price oracle on ETH-only competitors) via multi-provider JSON-RPC. Cost: $0.005 USDC per call via x402.
Aucun schéma d’entrée n’a été publié pour cet outil.
chain_balanceNative ETH balance of a Base mainnet address, incl. balance_usd (ETH price cross-call — no price oracle on ETH-only competitors), via multi-provider JSON-RPC. Cost: $0.005 USDC per call via x402.Native ETH balance of a Base mainnet address, incl. balance_usd (ETH price cross-call — no price oracle on ETH-only competitors), via multi-provider JSON-RPC. Cost: $0.005 USDC per call via x402.
| Paramètre | Type | Description |
|---|---|---|
| address* | string | 0x-prefixed 20-byte Base address |
chain_token_balanceERC-20 token balance of a Base mainnet address via multi-provider JSON-RPC, incl. symbol/decimals/balance_formatted (per-token-contract cached in-isolate). Cost: $0.005 USDC per call via x402.ERC-20 token balance of a Base mainnet address via multi-provider JSON-RPC, incl. symbol/decimals/balance_formatted (per-token-contract cached in-isolate). Cost: $0.005 USDC per call via x402.
| Paramètre | Type | Description |
|---|---|---|
| address* | string | 0x-prefixed 20-byte holder address |
| token* | string | 0x-prefixed 20-byte ERC-20 contract address |
chain_txTransaction details by hash on Base mainnet via multi-provider JSON-RPC. Cost: $0.005 USDC per call via x402.Transaction details by hash on Base mainnet via multi-provider JSON-RPC. Cost: $0.005 USDC per call via x402.
| Paramètre | Type | Description |
|---|---|---|
| hash* | string | 0x-prefixed 32-byte transaction hash |
chain_walletWallet bundle: ETH balance + balance_usd (ETH price cross-call) + tx count + contract-code check (EIP-7702 delegated-EOA aware) for a Base mainnet address, in one call. Cost: $0.005 USDC per call via x402.Wallet bundle: ETH balance + balance_usd (ETH price cross-call) + tx count + contract-code check (EIP-7702 delegated-EOA aware) for a Base mainnet address, in one call. Cost: $0.005 USDC per call via x402.
| Paramètre | Type | Description |
|---|---|---|
| address* | string | 0x-prefixed 20-byte Base address |
chain_token_securityToken security / honeypot detector for a Base mainnet ERC-20: EIP-1967/1822 proxy + upgradeability detection, bytecode dispatcher scan for mint/pause/blacklist/fee-setter/ownership selectors, owner() renouncement check, and a live eth_call state-override simulation testing whether a synthetic walle…Token security / honeypot detector for a Base mainnet ERC-20: EIP-1967/1822 proxy + upgradeability detection, bytecode dispatcher scan for mint/pause/blacklist/fee-setter/ownership selectors, owner() renouncement check, and a live eth_call state-override simulation testing whether a synthetic walle…
| Paramètre | Type | Description |
|---|---|---|
| token* | string | 0x-prefixed 20-byte ERC-20 contract address on Base mainnet |
chain_block_number_previewFREE live sample of the current Base mainnet block number — identical data to the paid chain_block_number tool. No payment required.FREE live sample of the current Base mainnet block number — identical data to the paid chain_block_number tool. No payment required.
Aucun schéma d’entrée n’a été publié pour cet outil.
chain_gas_price_previewFREE live sample of the current Base mainnet gas price — identical data to the paid chain_gas_price tool. No payment required.FREE live sample of the current Base mainnet gas price — identical data to the paid chain_gas_price tool. No payment required.
Aucun schéma d’entrée n’a été publié pour cet outil.
chain_token_security_previewFREE full real analysis of a fixed well-known token (Base WETH) via the token security / honeypot detector — same depth as the paid chain_token_security tool, so you can see the real product before paying. To analyze an arbitrary token, use the paid chain_token_security tool. No payment required.FREE full real analysis of a fixed well-known token (Base WETH) via the token security / honeypot detector — same depth as the paid chain_token_security tool, so you can see the real product before paying. To analyze an arbitrary token, use the paid chain_token_security tool. No payment required.
Aucun schéma d’entrée n’a été publié pour cet outil.
22 outils sur 22 ont publié une description.
Les noms et descriptions d’outils sont écrits par l’éditeur et affichés tels quels, comme du texte inerte. Ce sont les chaînes qu’un client MCP transmet à un modèle, alors Forge y recherche des motifs d’injection de prompt — tout constat apparaît avec l’analyse de sécurité ci-dessus. « Privilégié » est une correspondance de mot-clé sur le nom de l’outil, pas un audit de ce qu’il fait : un nom anodin peut tout de même tout faire.
x402 MCP for agents: crypto prices, funding, DeFi yields, Polymarket, Base RPC + MCP security.
Les noms cliquables ouvrent l’index Forge de toutes les entrées observées exposant cet outil. Parcourir tous les outils indexés.
Cette entrée ne publie aucun paquet npm : Forge n'a donc pas d'arbre de dépendances pour elle. C'est une lacune de couverture — pas une affirmation qu'elle n'a aucune dépendance.