# StealthGuard 402 (remote · stealthguard-402.onrender.com)

Stealth web extraction, Polymarket alpha, and on-chain pre-trade gating via x402 on Base.

- Trust score: 66/100 (medium)
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-10-17

## Components

- remote · `stealthguard-402.onrender.com`: 66/100 (this document), [markdown](https://verifymcp.io/servers/ak10082247-max-stealthguard-402/stealthguard-402.md), [page](https://verifymcp.io/servers/ak10082247-max-stealthguard-402/stealthguard-402)

## Channel facts

- Endpoint: `https://stealthguard-402.onrender.com/mcp`
- Transports: `streamable-http`
- Auth: `none`
- Version: `1.0.0`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-10-17.

- **Endpoint Security**: 74/100
  - The endpoint's TLS certificate is valid, in date, and uses a strong key.
  - No authorisation is required to call this server. Every tool declares its destructiveHint and none is destructive, so open access doesn't expose one.
  - HTTPS is enforced; there's no plaintext access path.
  - HSTS check failed: the Strict-Transport-Security header is absent.
  - DNSSEC check failed: this domain isn't protected by DNSSEC.
- **Transport & Reachability**: 100/100
  - Verified streamable-http transport via a live MCP handshake.
- **Schema Quality & AI Usability**: 67/100
  - AI-judged instruction clarity (good).
  - Tool/resource definitions use about 1021 tokens (~68/item across 15 items; 15 tools + 0 resources), lean.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 0/100
  - Stability check failed: schema churn in the 2 days we've observed: 9 tool removals, 2 breaking changes, 0 auth/transport breaks, 5 additions.
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
  - Structured output schemas are declared (100% of tools); any adoption earns full credit.
- **Tool Safety**: 100/100
  - No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.
  - We read all 15 captured tool definition(s), and no name or description among them implies an irreversible operation.
  - An AI judge read all 15 captured unit(s) of tool text and found none that tries to manipulate the model reading it.
- **Capabilities**: 20/100
  - Spec-recency check failed: implements MCP spec 2024-11-05; the latest is 2026-07-28.

## Install

### How do I install the StealthGuard 402 MCP server?

StealthGuard 402 is a hosted endpoint at https://stealthguard-402.onrender.com/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

### Claude

```bash
claude mcp add --transport http ak10082247-max-stealthguard-402 'https://stealthguard-402.onrender.com/mcp'
```

### Cursor

```json
{
  "mcpServers": {
    "ak10082247-max-stealthguard-402": {
      "url": "https://stealthguard-402.onrender.com/mcp"
    }
  }
}
```

### VS Code

```json
{
  "servers": {
    "ak10082247-max-stealthguard-402": {
      "type": "http",
      "url": "https://stealthguard-402.onrender.com/mcp"
    }
  }
}
```

### Codex

```toml
[mcp_servers.ak10082247-max-stealthguard-402]
url = "https://stealthguard-402.onrender.com/mcp"
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "ak10082247-max-stealthguard-402": {
      "type": "remote",
      "url": "https://stealthguard-402.onrender.com/mcp",
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add ak10082247-max-stealthguard-402 --url 'https://stealthguard-402.onrender.com/mcp' --transport streamable-http
```

### Hermes

```yaml
mcp_servers:
  ak10082247-max-stealthguard-402:
    url: "https://stealthguard-402.onrender.com/mcp"
```

### Netclaw

```json
{
  "McpServers": {
    "ak10082247-max-stealthguard-402": {
      "Transport": "http",
      "Url": "https://stealthguard-402.onrender.com/mcp"
    }
  }
}
```

### Vellum

```bash
assistant mcp add ak10082247-max-stealthguard-402 -t streamable-http -u 'https://stealthguard-402.onrender.com/mcp'
```

### Other

```json
{
  "mcpServers": {
    "ak10082247-max-stealthguard-402": {
      "type": "http",
      "url": "https://stealthguard-402.onrender.com/mcp"
    }
  }
}
```

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-10-17 (score 66, −1)

- [security regression] Stability: 0.03 → fail
- [security regression] Tool “arxiv_agent_papers” was removed
- [security regression] Tool “base_new_pools” was removed
- [security regression] Tool “crypto_sentiment_pulse” was removed
- [security regression] Tool “github_trending_agents” was removed
- [security regression] Tool “health_and_sample” was removed
- [security regression] Tool “polymarket_macro_fed” was removed
- [security regression] Tool “security_evm_calldata_firewall” was removed
- [security regression] Tool “security_url_threat_check” was removed
- [security regression] Tool “solana_trending_safe” was removed
- [security] Tool “base_trending_tokens” rewrote its description, which is the text the model reads
- [security] Tool “defi_yield_radar” rewrote its description, which is the text the model reads
- [security] Tool “hackernews_ai_digest” rewrote its description, which is the text the model reads
- [security] Tool “polymarket_alpha_divergence” rewrote its description, which is the text the model reads
- [security] Tool “polymarket_crypto_odds” rewrote its description, which is the text the model reads
- [security] Tool “polymarket_top_whales” rewrote its description, which is the text the model reads
- [security] Tool “pre_trade_agent_gate” rewrote its description, which is the text the model reads
- [security] Tool “security_prompt_firewall” rewrote its description, which is the text the model reads
- [security] Tool “security_x402_endpoint_verifier” rewrote its description, which is the text the model reads
- [security] Tool “stealth_scrape_and_sanitize” rewrote its description, which is the text the model reads
- [functional regression] Schema quality: 56 → 68
- [functional regression] “security_prompt_firewall” made “text” required, so existing callers break
- [functional regression] “security_x402_endpoint_verifier” made “endpoint_url” required, so existing callers break
- [functional] Server version: 1.1.0 → 1.2.0
- [functional] New tool “alpha_polymarket_whale_orderflow”
- [functional] New tool “oracle_perp_funding_and_basis”
- [functional] New tool “research_deep_web_dossier”
- [functional] New tool “research_topic_news_scanner”
- [functional] New tool “security_attestation_bundle”
- [cosmetic] “base_trending_tokens” added an optional parameter “chain”
- [cosmetic] “defi_yield_radar” added an optional parameter “asset”
- [cosmetic] “hackernews_ai_digest” added an optional parameter “limit”
- [cosmetic] “polymarket_crypto_odds” added an optional parameter “asset”
- [cosmetic] “polymarket_top_whales” added an optional parameter “limit”
- [cosmetic] “security_prompt_firewall” reworded the description of “text”
- [cosmetic] “security_x402_endpoint_verifier” reworded the description of “endpoint_url”

### 2026-10-16 (score 67, +2)

- [security] The server changed its declared name: StealthGuard-402 → stealthguard-402
- [functional improvement] Tool coverage: 73% → 100%
- [functional improvement] Stability: unverified → 0.03
- [functional improvement] Tool “arxiv_agent_papers” now declares an output schema
- [functional improvement] Tool “base_new_pools” now declares an output schema
- [functional improvement] Tool “base_trending_tokens” now declares an output schema
- [functional improvement] Tool “crypto_sentiment_pulse” now declares an output schema
- [functional improvement] Tool “defi_yield_radar” now declares an output schema
- [functional improvement] Tool “github_trending_agents” now declares an output schema
- [functional improvement] Tool “hackernews_ai_digest” now declares an output schema
- [functional improvement] Tool “health_and_sample” now declares an output schema
- [functional improvement] Tool “polymarket_alpha_divergence” now declares an output schema
- [functional improvement] Tool “polymarket_crypto_odds” now declares an output schema
- [functional improvement] Tool “polymarket_macro_fed” now declares an output schema
- [functional improvement] Tool “polymarket_top_whales” now declares an output schema
- [functional improvement] Tool “pre_trade_agent_gate” now declares an output schema
- [functional improvement] Tool “security_evm_calldata_firewall” now declares an output schema
- [functional improvement] Tool “security_prompt_firewall” now declares an output schema
- [functional improvement] Tool “security_url_threat_check” now declares an output schema
- [functional improvement] Tool “security_x402_endpoint_verifier” now declares an output schema
- [functional improvement] Tool “solana_trending_safe” now declares an output schema
- [functional improvement] Tool “stealth_scrape_and_sanitize” now declares an output schema
- [functional] The server now declares the “prompts” capability
- [functional] The server now declares the “resources” capability
- [functional] First check of Tool coverage: 100
- [cosmetic] “health_and_sample” reworded the description of “include_samples”
- [cosmetic] “polymarket_alpha_divergence” reworded the description of “strict_mode”
- [cosmetic] “pre_trade_agent_gate” reworded the description of “chain”
- [cosmetic] “pre_trade_agent_gate” reworded the description of “strict_mode”

### 2026-10-15 (score 65)

First indexed and scored.

## MCP tools (15)

### `stealth_scrape_and_sanitize` (~90 tokens)

Bypasses Cloudflare anti-bot via Scrapling, extracts clean DOM to LLM Markdown, and runs CanaryGuard deterministic sanitization. Price: 0.015 USDC on Base.

Input parameters:

- `render_js` (boolean): Enable stealth headless browser rendering
- `strict_mode` (boolean): Deterministic sanitization strictness
- `url` (string, required): Target destination URL

Output parameters:

- `content` (array): Structured text or data content returned to the LLM agent
- `data` (object): Sanitized domain data payload or verification metrics
- `payment` (object): x402 protocol payment settlement and settlement receipt details
- `status` (string): Execution status (success or error)

### `polymarket_alpha_divergence` (~93 tokens)

Scans Polymarket CLOB orderbooks for volume spikes and smart-money spread divergence, returning CanaryGuard sanitized alpha. Price: 0.02 USDC on Base.

Input parameters:

- `category` (string): Category filter (crypto, politics, fed, ai)
- `limit` (integer): Max markets to analyze
- `strict_mode` (boolean): Deterministic prompt-injection sanitization strictness

Output parameters:

- `content` (array): Structured text or data content returned to the LLM agent
- `data` (object): Sanitized domain data payload or verification metrics
- `payment` (object): x402 protocol payment settlement and settlement receipt details
- `status` (string): Execution status (success or error)

### `pre_trade_agent_gate` (~108 tokens)

Deterministic TRUST or BLOCK gate combining on-chain Base RPC liquidity and honeypot checks with CanaryGuard injection scrubbing. Price: 0.01 USDC on Base.

Input parameters:

- `chain` (string): Blockchain ecosystem to audit (base or solana)
- `strict_mode` (boolean): Deterministic prompt-injection sanitization strictness
- `target_url` (string): Optional associated project URL
- `token_or_service_address` (string, required): EVM or Solana address

Output parameters:

- `content` (array): Structured text or data content returned to the LLM agent
- `data` (object): Sanitized domain data payload or verification metrics
- `payment` (object): x402 protocol payment settlement and settlement receipt details
- `status` (string): Execution status (success or error)

### `polymarket_top_whales` (~57 tokens)

Top Polymarket whale orderbook imbalances and CLOB skew right now, pre-sanitized with CanaryGuard. Price: 0.01 USDC on Base.

Input parameters:

- `limit` (integer): Max whales to analyze

Output parameters:

- `content` (array): Structured text or data content returned to the LLM agent
- `data` (object): Sanitized domain data payload or verification metrics
- `payment` (object): x402 protocol payment settlement and settlement receipt details
- `status` (string): Execution status (success or error)

### `polymarket_crypto_odds` (~57 tokens)

Sanitized BTC, ETH, and SOL Polymarket probability spreads and liquidity depth in basis points. Price: 0.01 USDC on Base.

Input parameters:

- `asset` (string): Crypto asset (BTC, ETH, SOL)

Output parameters:

- `content` (array): Structured text or data content returned to the LLM agent
- `data` (object): Sanitized domain data payload or verification metrics
- `payment` (object): x402 protocol payment settlement and settlement receipt details
- `status` (string): Execution status (success or error)

### `base_trending_tokens` (~52 tokens)

Top trending Base DEX pairs pre-screened for honeypots, malicious taxes, and prompt injections. Price: 0.01 USDC on Base.

Input parameters:

- `chain` (string): Target blockchain network

Output parameters:

- `content` (array): Structured text or data content returned to the LLM agent
- `data` (object): Sanitized domain data payload or verification metrics
- `payment` (object): x402 protocol payment settlement and settlement receipt details
- `status` (string): Execution status (success or error)

### `defi_yield_radar` (~58 tokens)

Live top stablecoin and ETH APY yields on Base, pre-sanitized for autonomous AI agent execution. Price: 0.01 USDC on Base.

Input parameters:

- `asset` (string): Target asset (USDC, ETH)

Output parameters:

- `content` (array): Structured text or data content returned to the LLM agent
- `data` (object): Sanitized domain data payload or verification metrics
- `payment` (object): x402 protocol payment settlement and settlement receipt details
- `status` (string): Execution status (success or error)

### `hackernews_ai_digest` (~49 tokens)

Top HackerNews AI and autonomous agent stories converted to clean, injection-free LLM Markdown. Price: 0.01 USDC on Base.

Input parameters:

- `limit` (integer): Number of stories

Output parameters:

- `content` (array): Structured text or data content returned to the LLM agent
- `data` (object): Sanitized domain data payload or verification metrics
- `payment` (object): x402 protocol payment settlement and settlement receipt details
- `status` (string): Execution status (success or error)

### `security_prompt_firewall` (~53 tokens)

Ultra-fast deterministic prompt-injection and wallet-drainer scrubber for agent context windows. Price: 0.01 USDC on Base.

Input parameters:

- `text` (string, required): Raw text context to scrub for prompt injections

Output parameters:

- `content` (array): Structured text or data content returned to the LLM agent
- `data` (object): Sanitized domain data payload or verification metrics
- `payment` (object): x402 protocol payment settlement and settlement receipt details
- `status` (string): Execution status (success or error)

### `security_x402_endpoint_verifier` (~61 tokens)

Audits target x402 endpoints for authentic payTo wallet, pricing, challenge headers, and schema hijack risks. Price: 0.01 USDC on Base.

Input parameters:

- `endpoint_url` (string, required): Target x402 endpoint URL to audit

Output parameters:

- `content` (array): Structured text or data content returned to the LLM agent
- `data` (object): Sanitized domain data payload or verification metrics
- `payment` (object): x402 protocol payment settlement and settlement receipt details
- `status` (string): Execution status (success or error)

### `research_deep_web_dossier` (~60 tokens)

Multi-source stealth web synthesis + CanaryGuard injection firewall + structured markdown intelligence dossier. Price: 0.02 USDC on Base.

Input parameters:

- `depth` (string): Research depth
- `topic` (string, required): Research topic or target entity

Output parameters:

- `content` (array): Structured text or data content returned to the LLM agent
- `data` (object): Sanitized domain data payload or verification metrics
- `payment` (object): x402 protocol payment settlement and settlement receipt details
- `status` (string): Execution status (success or error)

### `oracle_perp_funding_and_basis` (~70 tokens)

Cross-exchange BTC/ETH/SOL perpetual funding rate skew, basis spread, and spot-futures arbitrage signals. Price: 0.02 USDC on Base.

Input parameters:

- `assets` (array): Assets to analyze (e.g. ['BTC', 'ETH', 'SOL'])

Output parameters:

- `content` (array): Structured text or data content returned to the LLM agent
- `data` (object): Sanitized domain data payload or verification metrics
- `payment` (object): x402 protocol payment settlement and settlement receipt details
- `status` (string): Execution status (success or error)

### `alpha_polymarket_whale_orderflow` (~84 tokens)

Deep CLOB orderbook imbalance, smart-money wallet tracking, and Limitless/Polymarket cross-venue arbitrage spread matrix. Price: 0.02 USDC on Base.

Input parameters:

- `include_cross_venue` (boolean): Include cross-venue arbitrage matrix
- `min_order_usd` (number): Minimum order size in USD

Output parameters:

- `content` (array): Structured text or data content returned to the LLM agent
- `data` (object): Sanitized domain data payload or verification metrics
- `payment` (object): x402 protocol payment settlement and settlement receipt details
- `status` (string): Execution status (success or error)

### `security_attestation_bundle` (~73 tokens)

Cryptographic prompt-safety + URL threat + token contract verification bundle for autonomous AI agent workflows. Price: 0.02 USDC on Base.

Input parameters:

- `prompt_text` (string, required): Prompt text to attest
- `target_url` (string): Target URL
- `token_address` (string): Token contract address

Output parameters:

- `content` (array): Structured text or data content returned to the LLM agent
- `data` (object): Sanitized domain data payload or verification metrics
- `payment` (object): x402 protocol payment settlement and settlement receipt details
- `status` (string): Execution status (success or error)

### `research_topic_news_scanner` (~56 tokens)

Real-time sanitized news, HackerNews, and ArXiv intelligence scanner for any target keyword or protocol. Price: 0.02 USDC on Base.

Input parameters:

- `query` (string, required): Target search topic or protocol keyword

Output parameters:

- `content` (array): Structured text or data content returned to the LLM agent
- `data` (object): Sanitized domain data payload or verification metrics
- `payment` (object): x402 protocol payment settlement and settlement receipt details
- `status` (string): Execution status (success or error)

## Diagnostics

Captured diagnostic sections: TLS, DNSSEC, Authorisation, Transports. The full working is on the page: https://verifymcp.io/servers/ak10082247-max-stealthguard-402/stealthguard-402#diagnostics

## Score history

- 2026-10-17: 66
- 2026-10-16: 67
- 2026-10-15: 65

## Common questions

### What is the StealthGuard 402 MCP server?

StealthGuard 402 is an MCP server listed in the public MCP registry as io.github.ak10082247-max/stealthguard-402. Stealth web extraction, Polymarket alpha, and on-chain pre-trade gating via x402 on Base. This page covers its hosted endpoint (https://stealthguard-402.onrender.com/mcp).

### Is the StealthGuard 402 MCP server safe to use?

StealthGuard 402 scores 66 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

### What tools does the StealthGuard 402 MCP server expose?

StealthGuard 402 exposes 15 tools: stealth_scrape_and_sanitize, polymarket_alpha_divergence, pre_trade_agent_gate, polymarket_top_whales, polymarket_crypto_odds, and 10 more. Their descriptions and schemas cost roughly 1,021 tokens of context every time the server is loaded.

### Does the StealthGuard 402 MCP server require authentication?

No. We connected to StealthGuard 402 without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.

### Is the StealthGuard 402 MCP server still maintained?

StealthGuard 402 is still listed as active in the MCP registry. We last reached this channel on 17 October 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

## Links

- Remote endpoint: https://stealthguard-402.onrender.com/mcp
- Repository: https://github.com/ak10082247-max/stealthguard-402
- Website: https://stealthguard-402.onrender.com/
- Changelog RSS feed: https://verifymcp.io/servers/ak10082247-max-stealthguard-402/stealthguard-402.xml
- Changelog JSON feed: https://verifymcp.io/servers/ak10082247-max-stealthguard-402/stealthguard-402.json
- HTML version of this page: https://verifymcp.io/servers/ak10082247-max-stealthguard-402/stealthguard-402