Before you pay an endpoint you cannot vouch for: credit grade, drift and preflight.
Dedotto dai trasporti dichiarati da questo annuncio (streamable-http). Un client che non compare qui non è escluso — semplicemente Forge non è in grado di confermarlo.
La verifica conferma l’identità del publisher (la proprietà del repo), non la sicurezza del codice. L’analisi di sicurezza copre i CVE noti e gli script di installazione sospetti.
Letto da un vero handshake MCP initialize → tools/list verso l’endpoint dichiarato. Nessuno strumento è stato invocato — tools/list è la chiamata di introspezione in sola lettura che il protocollo prevede a questo scopo. Riflette ciò che il server annunciava in quel momento; un endpoint ospitato non è vincolato ad alcuna versione e può cambiare senza preavviso.
https://mcpfax-reliability.bowling-anthony.workers.dev/mcp7 strumenti · 199 msmcpfax_endpoint_credit_scoreCreditworthiness grade for one x402 endpoint or MCP server: letter grade A-E (or NR when unrated), a 0-1000 score, per-component subscores, a confidence level, flags, and the dated evidence each figure rests on. Use this before trusting or paying an unfamiliar endpoint. The grade ranks observed ris…Creditworthiness grade for one x402 endpoint or MCP server: letter grade A-E (or NR when unrated), a 0-1000 score, per-component subscores, a confidence level, flags, and the dated evidence each figure rests on. Use this before trusting or paying an unfamiliar endpoint. The grade ranks observed ris…
| Parametro | Tipo | Descrizione |
|---|---|---|
| endpoint* | string | Observatory listing id. Use 'host:<hostname>' for an x402 endpoint, e.g. 'host:api.example.com', or 'mcp:<publisher>/<name>' for a registry-listed MCP server,… |
mcpfax_integration_driftWhat changed under an x402 endpoint or MCP server you have ALREADY integrated: payTo rotations, price, asset and network changes, terms added or removed, and tool-schema changes. This is not a discovery tool and will not help you choose a server; it tells you whether the one you wired in still matc…What changed under an x402 endpoint or MCP server you have ALREADY integrated: payTo rotations, price, asset and network changes, terms added or removed, and tool-schema changes. This is not a discovery tool and will not help you choose a server; it tells you whether the one you wired in still matc…
subjects: Links to undeclared domain: x402.browserbase.com| Parametro | Tipo | Descrizione |
|---|---|---|
| subjects* | string | Comma-separated endpoint URLs or host identifiers to check, at most 50, e.g. 'https://x402.browserbase.com/browser/session/create,host:api.example.com'. |
| since | string | The watermark from your previous call (YYYY-MM-DD). Omit on a first call to receive the whole archive. |
mcpfax_wallet_authenticityPayer-concentration and wash-risk assessment for a receiving wallet: how concentrated its observed payers are, the measured coverage of that observation, an explicit wash-risk haircut ONLY when coverage is sufficient, how many listings declare the same address, and observed USDC inflow. Use this to…Payer-concentration and wash-risk assessment for a receiving wallet: how concentrated its observed payers are, the measured coverage of that observation, an explicit wash-risk haircut ONLY when coverage is sufficient, how many listings declare the same address, and observed USDC inflow. Use this to…
| Parametro | Tipo | Descrizione |
|---|---|---|
| wallet* | string | The receiving EVM wallet address, 0x followed by 40 hex characters, e.g. '0x1831f336585a6C67B6A954d28f3E07F44C4EEBbd'. |
mcpfax_endpoint_revenue_estimateObserved on-chain revenue signals for one listing: total USDC inflow, how many distinct payers, the modal transfer size, payment rate, 7- and 30-day trend windows, and where it sits in its cohort by percentile. Use this to size a seller's real traction. Inflow is observed on-chain and is not proven…Observed on-chain revenue signals for one listing: total USDC inflow, how many distinct payers, the modal transfer size, payment rate, 7- and 30-day trend windows, and where it sits in its cohort by percentile. Use this to size a seller's real traction. Inflow is observed on-chain and is not proven…
| Parametro | Tipo | Descrizione |
|---|---|---|
| endpoint* | string | Observatory listing id. Use 'host:<hostname>' for an x402 endpoint, e.g. 'host:api.example.com', or 'mcp:<publisher>/<name>' for a registry-listed MCP server,… |
mcpfax_payer_wallet_profileKnow-your-agent profile for a paying wallet: how many distinct services it pays, total observed spend, whether the address is a contract or an externally owned account, and coverage-gated screening signals. Use this to vet a counterparty that is paying you. Screening signals are withheld with statu…Know-your-agent profile for a paying wallet: how many distinct services it pays, total observed spend, whether the address is a contract or an externally owned account, and coverage-gated screening signals. Use this to vet a counterparty that is paying you. Screening signals are withheld with statu…
| Parametro | Tipo | Descrizione |
|---|---|---|
| address* | string | The paying EVM wallet address, 0x followed by 40 hex characters. |
mcpfax_payto_change_feedChronological feed of rating actions since a date: grade upgrades and downgrades, payTo wallet changes (a seller redirecting payment), listing removals, and returns. Use this to monitor a portfolio of endpoints for adverse changes rather than re-scoring each one. The feed cannot return events from…Chronological feed of rating actions since a date: grade upgrades and downgrades, payTo wallet changes (a seller redirecting payment), listing removals, and returns. Use this to monitor a portfolio of endpoints for adverse changes rather than re-scoring each one. The feed cannot return events from…
| Parametro | Tipo | Descrizione |
|---|---|---|
| since | string | Inclusive UTC start date in YYYY-MM-DD form, e.g. '2026-07-01'. Defaults to 30 days ago, but the feed cannot return events from before the archive start report… |
mcpfax_preflight_checkCheck that an endpoint is live and that its terms have not changed, BEFORE you send it an expensive request. A $15 call with a hypothetical 2% loss rate carries $0.30 of expected loss; a reachability check cannot promise to prevent it. Compare the quoted fee with the value of the pending call and t…Check that an endpoint is live and that its terms have not changed, BEFORE you send it an expensive request. A $15 call with a hypothetical 2% loss rate carries $0.30 of expected loss; a reachability check cannot promise to prevent it. Compare the quoted fee with the value of the pending call and t…
target: Links to undeclared domain: api.example.com| Parametro | Tipo | Descrizione |
|---|---|---|
| target* | string | The endpoint you are about to call. Preferred form is the absolute https:// URL of the exact resource you will pay for, e.g. 'https://api.example.com/v1/search… |
| expected_price | string | What you believe the call costs. A decimal such as '0.01' is read as USD; a bare integer such as '10000' is read as atomic units. |
| expected_payto | string | The payment destination you believe you are paying — an EVM address or a base58 Solana address. A mismatch is the strongest signal this tool produces. |
| expected_schema_hash | string | The schema hash a previous call to this tool returned in live.schema_hash. It covers tool names and input/output schemas, not titles or descriptions. |
| max_age_seconds | integer | Your freshness bar, default 300. A stored observation older than this is still reported but may not support an ALLOW verdict. A stored observation newer than t… |
| probe_method | string | HTTP method for the unpaid probe of a non-MCP endpoint, default GET. Only side-effect-free methods are accepted; this tool never sends a request that could cha… |
7 strumenti su 7 hanno pubblicato una descrizione.
I nomi e le descrizioni degli strumenti sono scritti dal publisher e mostrati alla lettera come testo inerte. Sono le stringhe che un client MCP passa a un modello, quindi Forge vi cerca schemi di prompt injection — ogni rilievo compare insieme all’analisi di sicurezza qui sopra. «Privilegiato» è una corrispondenza di parola chiave sul nome dello strumento, non una verifica di ciò che fa: un nome innocuo può comunque fare qualsiasi cosa.
Before you pay an endpoint you cannot vouch for: credit grade, drift and preflight.
I nomi collegati aprono l’indice Forge di tutte le voci osservate esporre quello strumento. Sfoglia tutti gli strumenti indicizzati.
Questa voce non pubblica alcun pacchetto npm, quindi Forge non ha un albero delle dipendenze per essa. È una lacuna di copertura, non l'affermazione che non abbia dipendenze.