com.402oracle/402oracle

MCPcommunitylive
v1.3.0com.402oracleUnknownUpdated 2mo ago

Signed verification attestations for agent decisions: business, price, freshness, claim checks.

Endpoint healthlive
checked 4 days ago · 114ms
100% of the last 4 checks reached this endpoint
Works in
ClaudeCursorCopilotChatGPTGemini

Inferred from the transports this listing declares (streamable-http). A client not listed here hasn’t been ruled out — it just isn’t something Forge can confirm.

Automatically indexed from public sources. Not yet verified by the developer on Forge.Claim this listing →
2mo agoLast update
Package
Authorcom.402oracle
LicenseUnknown
Version1.3.0
Sourcemcp-registry
Trust Status
B
60/100Good
Listed in Forge index+10/10
Publisher identity verified+0/30
Publisher: this listing has no repository on file, so `forge publish` cannot verify ownership automatically. Use "Claim this listing" above — Forge reviews these by hand.
Domain verification+0/10
Not currently available for this listing type — the domain-verification check only runs for npm-backed packages today, so this row cannot be earned here yet regardless of what's hosted at the domain.
Prompt-injection scan · clean+30/30
Obfuscation / exfil scan · clean+20/20
StatusCommunity-indexed
PublisherUnverified
SignatureUnsigned
Domain
Provenance
DependenciesNot audited
Tool surface4 tools · none privileged
Security scan✓ Cleanvlive · 4d agoHow well does this scan work?
EvalsNone
IndexedJul 14, 2026

Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.

Tools

4 tools · none privileged
Observed live from the vendor's endpoint4d ago

Read from a real MCP initialize → tools/list handshake against the declared endpoint. No tool was ever invoked — tools/list is the read-only introspection call the protocol defines for this. It reflects what the server advertised at that moment; a hosted endpoint is not pinned to any version and can change without notice.

  • https://402oracle.com/mcp4 tools · 114ms
verify_businessVerify a business or domain is real and established before your agent pays an invoice, onboards a vendor, or trusts it. A business-verification oracle for KYB, vendor screening, and fraud checks: RDAP registration age, DNS (A/MX/NS), email posture (SPF/DMARC), and HTTPS reachability. Returns a sign…

Verify a business or domain is real and established before your agent pays an invoice, onboards a vendor, or trusts it. A business-verification oracle for KYB, vendor screening, and fraud checks: RDAP registration age, DNS (A/MX/NS), email posture (SPF/DMARC), and HTTPS reachability. Returns a sign…

ParameterTypeDescription
domain*stringDomain to verify, e.g. example.com
verify_priceConfirm a crypto asset's price before your agent trades, quotes, or settles on it. A signed price oracle: cross-checks Coinbase, Kraken, and OKX for a median and flags divergence when sources disagree. Returns a signed attestation your agent can cite. Free tier is unsigned and rate-limited. For a c…

Confirm a crypto asset's price before your agent trades, quotes, or settles on it. A signed price oracle: cross-checks Coinbase, Kraken, and OKX for a median and flags divergence when sources disagree. Returns a signed attestation your agent can cite. Free tier is unsigned and rate-limited. For a c…

ParameterTypeDescription
symbol*stringTicker symbol, e.g. BTC, ETH, SOL
verify_freshnessCheck that a URL is live and its data is fresh before your agent acts on its contents. A freshness oracle: returns HTTP status, Last-Modified/ETag, a content SHA-256, and whether the content changed versus a prior hash. Returns a signed attestation. Free tier is unsigned and rate-limited. For a cry…

Check that a URL is live and its data is fresh before your agent acts on its contents. A freshness oracle: returns HTTP status, Last-Modified/ETag, a content SHA-256, and whether the content changed versus a prior hash. Returns a signed attestation. Free tier is unsigned and rate-limited. For a cry…

ParameterTypeDescription
url*stringFull URL including https://
prior_hashstringOptional prior SHA-256 hex to compare against
verify_claimFact-check a single factual claim against web evidence before your agent relies on it. A fact-checking oracle and hallucination guard: returns a verdict (supported / contradicted / insufficient), a confidence score, and citations, as a signed attestation. Free tier is unsigned and rate-limited. For…

Fact-check a single factual claim against web evidence before your agent relies on it. A fact-checking oracle and hallucination guard: returns a verdict (supported / contradicted / insufficient), a confidence score, and citations, as a signed attestation. Free tier is unsigned and rate-limited. For…

ParameterTypeDescription
claim*stringA single factual claim, 8-600 characters

4 of 4 tools published a description.

Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.

About

Signed verification attestations for agent decisions: business, price, freshness, claim checks.

Keywords
mcp
Alternatives
Comparing tool surfaces…

No dependency coverage

This entry publishes no npm package, so Forge has no dependency tree for it. That is a gap in coverage — not a statement that it has no dependencies.