x402 Agent Hub
REMOTE · X402-AGENT-HUB.X402-AGENT-HUB.WORKERS.DEV
Onchain reads, SEC company financials, company & people enrichment, token verdicts via x402 USDC
Available components
Last scanned (5 hours ago)
Scores higher than 43% of remote servers
Reachable. Last reached 5 Nov 2026.
Category Finance and Payments
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security46
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- Authorisation not fully verified: no authorisation is required to call this server, and 26 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe. See how to fix → View diagnostics → Unverified
- HTTPS enforcement could not be verified: the plaintext port answered with HTTP 405, which proves neither a plaintext path nor enforcement. View diagnostics → Unverified
- HSTS check failed: the Strict-Transport-Security header is absent. See how to fix → View diagnostics → Fail
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability64
- AI-judged instruction clarity (good).Pass
- Context-footprint check failed: tool/resource definitions use about 3958 tokens (~152/item across 26 items; 26 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management20
- Stability observed for 6 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage96
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 88% of tool parameters carry a description.Partial
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 26 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 26 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Checks we ran (11)
- TLS certificate
- HSTS header
- DNSSEC
- Transport
- Schema quality
- Stability
- Tool coverage
- Injection markers
- Destructive annotations
- Judged manipulation
- MCP protocol
Checks we could not complete (2)
These are gaps on our side, not findings about this hosted endpoint. We only credit what we can confirm, so a category made up entirely of them scores 0.
- Authorization in Endpoint SecurityAuthorisation not fully verified: no authorisation is required to call this server, and 26 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.
- HTTPS in Endpoint SecurityHTTPS enforcement could not be verified: the plaintext port answered with HTTP 405, which proves neither a plaintext path nor enforcement.
Does not apply to this hosted endpoint (2)
- Supply Chain SecurityScored on package channels only. This is a hosted endpoint, so there is nothing to install or inspect.
- Provenance & TransparencyScored on package channels only. This is a hosted endpoint, so there is nothing to install or inspect.
The score does not measure everything. What the score does not measure →
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 4 Nov 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 13 to 17. That category is still filling its 30-day observation window: 4 days of observed history at the previous scan, 5 at this one. The score rises as the window fills, whether or not the server changes.
- 1 Nov 26 +1
- Tool “token_verdict” rewrote its description, which is the text the model reads security
- 31 Oct 26 0
- Stability: unverified → 0.03 ▲ functional
- Server version: 1.5.0 → 1.6.0 functional
- New tool “token_verdict” functional
- 30 Oct 26 58
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 5 Nov 2026 · Probed https://x402-agent-hub.x402-agent-hub.workers.dev/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=x402-agent-hub.workers.dev | CN=YE2,O=Let's Encrypt,C=US | 30 Oct 2026 | 28 Jan 2027 | ECDSA 256 | ECDSA-SHA384 | 6b4eaf0792d9857fa53bdab66a9c7348af9 |
| SANs: *.x402-agent-hub.workers.dev, x402-agent-hub.workers.dev | ||||||
| CN=YE2,O=Let's Encrypt,C=US (CA) | CN=Root YE,O=ISRG,C=US | 3 Sept 2025 | 2 Sept 2028 | ECDSA 384 | ECDSA-SHA384 | 4df3b15dd6c0784c507cd37b58e6f115 |
| CN=Root YE,O=ISRG,C=US (CA) | CN=ISRG Root X2,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | ECDSA-SHA384 | 872165fc34b6e5fba8add5b3705fb53a |
| CN=ISRG Root X2,O=Internet Security Research Group,C=US (CA) | CN=ISRG Root X1,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | SHA256-RSA | 6c8f1dc727c7117f7baf853ac980f9cd |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of x402-agent-hub.x402-agent-hub.workers.dev. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | Trust anchor | 20326, 38696 | 8, 8 | Verified |
| dev. | DS published | 60074 | 8 | Verified |
| workers.dev. | No DS | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://x402-agent-hub.x402-agent-hub.workers.dev/mcp | Verified | 200 | |
| http (plaintext) | http://x402-agent-hub.x402-agent-hub.workers.dev/mcp | Inconclusive | 405 |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
audit_crypto_token ~217
Audit any Base, Ethereum, Arbitrum, Optimism, Polygon, BSC, Avalanche, or Solana token contract for honeypots, buy/sell taxes, hidden ownership, whale concentration, LP locks, live DEX liquidity depth, and AMM slippage impact for an intended USD order size. On Base, Ethereum, BSC, Arbitrum, Optimism and Polygon it also simulates a real buy -> sell round trip to measure actual taxes and confirm the token can be sold ($0.01 USDC on Base).
| Name | Type | Req | Description |
|---|---|---|---|
| chain | string | – | Target chain (defaults to 'base' for 0x addresses or 'solana' for Base58) |
| intendedOrderUsd | number | – | Intended swap size in USD to estimate AMM pool price impact (default 1000) |
| paymentSignature | string | – | Optional x402 v2 base64 PAYMENT-SIGNATURE |
| tokenAddress | string | yes | 0x-prefixed EVM token contract address or Base58 Solana mint address |
No output schema declared.
No examples provided.
audit_technical_seo ~70
Run an instant 0-100 Technical SEO & Website Modernization Audit scorecard with prioritized fixes ($0.02 USDC on Base).
| Name | Type | Req | Description |
|---|---|---|---|
| paymentSignature | string | – | Optional x402 v2 base64 PAYMENT-SIGNATURE |
| url | string | yes | Target website URL to audit |
No output schema declared.
No examples provided.
calculate_prop_firm_risk ~213
Calculate exact CFD/Forex lot size factoring ECN spread+commission friction and prop-firm daily/max drawdown auto-lock status ($0.01 USDC on Base).
| Name | Type | Req | Description |
|---|---|---|---|
| accountBalanceUsd | number | yes | Starting prop-firm account balance in USD (e.g. 100000) |
| currentEquityUsd | number | – | Current live account equity in USD |
| dailyDrawdownLimitPercent | number | – | – |
| maxTotalDrawdownLimitPercent | number | – | – |
| paymentSignature | string | – | Optional x402 v2 base64 PAYMENT-SIGNATURE |
| riskPercent | number | yes | Risk percentage per trade (e.g. 0.5 for 0.5%) |
| stopLossPriceDistance | number | yes | Stop-loss distance in raw price units (e.g. 4.5 on XAUUSD, 25 on NAS100) |
| symbol | string | yes | Instrument symbol, e.g. XAUUSD, NAS100, BTCUSD, EURUSD |
No output schema declared.
No examples provided.
chain_address_info ~172
Classify any address on 7 EVM chains before interacting with it: EOA, EIP-7702-delegated EOA or contract, code size, nonce, native balance, and proxy detection (EIP-1967 implementation/admin/beacon slots, legacy ZeppelinOS proxies such as USDC, and EIP-1167 minimal proxies). You only pay for successful reads: invalid input, not-found and upstream errors cancel settlement. ($0.003 USDC on Base)
| Name | Type | Req | Description |
|---|---|---|---|
| address | string | yes | 0x-prefixed wallet or contract address. |
| chain | string | – | base (default), ethereum, arbitrum, optimism, polygon, bsc or avalanche. Chain IDs also accepted. |
| paymentSignature | string | – | Optional x402 v2 base64 PAYMENT-SIGNATURE |
No output schema declared.
No examples provided.
chain_ens_resolve ~137
Resolve an ENS name to an address, or an address to its primary ENS name, via the Ethereum mainnet Universal Resolver (CCIP-read / offchain names supported). Pass exactly one of 'name' or 'address'. You only pay for successful reads: invalid input, not-found and upstream errors cancel settlement. ($0.002 USDC on Base)
| Name | Type | Req | Description |
|---|---|---|---|
| address | string | – | Address to reverse-resolve to its primary ENS name. |
| name | string | – | ENS name to resolve, e.g. vitalik.eth. |
| paymentSignature | string | – | Optional x402 v2 base64 PAYMENT-SIGNATURE |
No output schema declared.
No examples provided.
chain_native_balance ~139
Native coin balance of any address on Base, Ethereum, Arbitrum, Optimism, Polygon, BSC or Avalanche, with raw wei and formatted units plus the block it was read at. You only pay for successful reads: invalid input, not-found and upstream errors cancel settlement. ($0.002 USDC on Base)
| Name | Type | Req | Description |
|---|---|---|---|
| address | string | yes | 0x-prefixed wallet or contract address. |
| chain | string | – | base (default), ethereum, arbitrum, optimism, polygon, bsc or avalanche. Chain IDs also accepted. |
| paymentSignature | string | – | Optional x402 v2 base64 PAYMENT-SIGNATURE |
No output schema declared.
No examples provided.
chain_portfolio ~164
One call returns an address's native coin, USDC and USDT balances on Base, Ethereum, Arbitrum, Optimism, Polygon, BSC and Avalanche (or a 'chains' subset), plus a total stablecoin USD figure, instead of 21 separate reads. Chains whose RPC fails are listed in chainsFailed. You only pay for successful reads: invalid input, not-found and upstream errors cancel settlement. ($0.005 USDC on Base)
| Name | Type | Req | Description |
|---|---|---|---|
| address | string | yes | 0x-prefixed wallet or contract address. |
| chains | string | – | Optional comma-separated subset, e.g. base,arbitrum. Defaults to all 7 chains. |
| paymentSignature | string | – | Optional x402 v2 base64 PAYMENT-SIGNATURE |
No output schema declared.
No examples provided.
chain_token_balance ~161
ERC-20 token balance of any address on 7 EVM chains, returned raw and decimal-formatted with the token symbol, so agents never mis-scale USDC (6) vs 18-decimal tokens. You only pay for successful reads: invalid input, not-found and upstream errors cancel settlement. ($0.002 USDC on Base)
| Name | Type | Req | Description |
|---|---|---|---|
| address | string | yes | 0x-prefixed wallet or contract address. |
| chain | string | – | base (default), ethereum, arbitrum, optimism, polygon, bsc or avalanche. Chain IDs also accepted. |
| paymentSignature | string | – | Optional x402 v2 base64 PAYMENT-SIGNATURE |
| token | string | yes | 0x-prefixed ERC-20 token contract address. |
No output schema declared.
No examples provided.
chain_token_info ~127
ERC-20 token metadata on 7 EVM chains: name, symbol, decimals and formatted total supply in one call. You only pay for successful reads: invalid input, not-found and upstream errors cancel settlement. ($0.002 USDC on Base)
| Name | Type | Req | Description |
|---|---|---|---|
| chain | string | – | base (default), ethereum, arbitrum, optimism, polygon, bsc or avalanche. Chain IDs also accepted. |
| paymentSignature | string | – | Optional x402 v2 base64 PAYMENT-SIGNATURE |
| token | string | yes | 0x-prefixed ERC-20 token contract address. |
No output schema declared.
No examples provided.
chain_transaction_status ~157
Status of any transaction on 7 EVM chains: pending / success / reverted, confirmations, block time, from/to, value and the all-in fee (including the OP-stack L1 data fee on Base and Optimism). Use it to confirm a payment or deployment landed. You only pay for successful reads: invalid input, not-found and upstream errors cancel settlement. ($0.002 USDC on Base)
| Name | Type | Req | Description |
|---|---|---|---|
| chain | string | – | base (default), ethereum, arbitrum, optimism, polygon, bsc or avalanche. Chain IDs also accepted. |
| hash | string | yes | 0x-prefixed 32-byte transaction hash. |
| paymentSignature | string | – | Optional x402 v2 base64 PAYMENT-SIGNATURE |
No output schema declared.
No examples provided.
company_filings ~209
A company's most recent SEC filings, optionally filtered by form type (e.g. 10-K,8-K) and date, with filing/report dates, 8-K item numbers and direct links to the document and filing index. You only pay for successful reads: invalid input, not-found and upstream errors cancel settlement. ($0.002 USDC on Base)
| Name | Type | Req | Description |
|---|---|---|---|
| cik | string | – | SEC Central Index Key, e.g. 320193 (alternative to ticker). |
| form | string | – | Comma-separated form types, e.g. 10-K,10-Q,8-K. |
| limit | string | – | Max filings, 1-50 (default 10). |
| paymentSignature | string | – | Optional x402 v2 base64 PAYMENT-SIGNATURE |
| since | string | – | Only filings on/after this date (YYYY-MM-DD). |
| ticker | string | – | US stock ticker, e.g. AAPL or BRK.B. Provide ticker or cik. |
No output schema declared.
No examples provided.
company_financials ~216
Reported fundamentals for US-GAAP filers from SEC XBRL data: revenue, operating income, net income, diluted EPS, operating cash flow, capex, free cash flow, total assets/liabilities, equity, cash, margins and YoY revenue growth for the last 1-12 annual or quarterly periods. Q4 and quarterly cash flows are derived from year-to-date filings and flagged. You only pay for successful reads: invalid input, not-found and upstream errors cancel settlement. ($0.005 USDC on Base)
| Name | Type | Req | Description |
|---|---|---|---|
| cik | string | – | SEC Central Index Key, e.g. 320193 (alternative to ticker). |
| limit | string | – | Number of periods, 1-12 (default 4). |
| paymentSignature | string | – | Optional x402 v2 base64 PAYMENT-SIGNATURE |
| period | string | – | annual (default) or quarterly. |
| ticker | string | – | US stock ticker, e.g. AAPL or BRK.B. Provide ticker or cik. |
No output schema declared.
No examples provided.
company_insider_trades ~195
Parsed SEC Form 4 insider filings for a company: insider name and role (director, officer title, 10% owner), transaction code (open-market buy/sell, award, exercise, tax withholding...), shares, price, USD value, holdings after, 10b5-1 plan flag, plus a buy/sell summary. You only pay for successful reads: invalid input, not-found and upstream errors cancel settlement. ($0.005 USDC on Base)
| Name | Type | Req | Description |
|---|---|---|---|
| cik | string | – | SEC Central Index Key, e.g. 320193 (alternative to ticker). |
| limit | string | – | Number of recent Form 4 filings, 1-20 (default 10). |
| paymentSignature | string | – | Optional x402 v2 base64 PAYMENT-SIGNATURE |
| ticker | string | – | US stock ticker, e.g. AAPL or BRK.B. Provide ticker or cik. |
No output schema declared.
No examples provided.
company_profile ~150
Official SEC profile of a US public company: legal name, tickers, exchanges, SIC industry, state of incorporation, fiscal year end, website, business address, former names, and direct links to its latest annual, quarterly and current reports. You only pay for successful reads: invalid input, not-found and upstream errors cancel settlement. ($0.002 USDC on Base)
| Name | Type | Req | Description |
|---|---|---|---|
| cik | string | – | SEC Central Index Key, e.g. 320193 (alternative to ticker). |
| paymentSignature | string | – | Optional x402 v2 base64 PAYMENT-SIGNATURE |
| ticker | string | – | US stock ticker, e.g. AAPL or BRK.B. Provide ticker or cik. |
No output schema declared.
No examples provided.
company_search ~124
Search ~10,000 SEC-registered US public companies by ticker or name and get the ticker, legal name and CIK to use with the other company tools. You only pay for successful reads: invalid input, not-found and upstream errors cancel settlement. ($0.002 USDC on Base)
| Name | Type | Req | Description |
|---|---|---|---|
| limit | string | – | Max results, 1-25 (default 10). |
| paymentSignature | string | – | Optional x402 v2 base64 PAYMENT-SIGNATURE |
| q | string | yes | Ticker or company name fragment, e.g. nvidia. |
No output schema declared.
No examples provided.
enrich_business_lead ~124
Enrich a business URL for SDR/sales outreach: sanitize brand names, detect phantom wa.me/linktr.ee/marketplace links, extract normalized E.164 WhatsApp/mobile phones (rejecting office PSTN landlines), find emails/socials, and detect CMS/analytics pixels ($0.015 USDC on Base).
| Name | Type | Req | Description |
|---|---|---|---|
| businessName | string | – | Optional raw business title to sanitize |
| paymentSignature | string | – | Optional x402 v2 base64 PAYMENT-SIGNATURE |
| url | string | yes | Business website, social bio, or marketplace URL |
No output schema declared.
No examples provided.
entity_company ~199
Enrich any company worldwide (private, startup or listed; not just US) by name, website domain or Wikidata ID: website, founding date, headquarters, countries, industries, current CEO, founders, employee count, revenue, stock listings and tickers, LEI/ISIN, legal form, parent and subsidiaries, official X/LinkedIn/GitHub/Instagram accounts, logo and the Wikipedia summary. You only pay for successful reads: invalid input, not-found and upstream errors cancel settlement. ($0.003 USDC on Base)
| Name | Type | Req | Description |
|---|---|---|---|
| domain | string | – | Company website or domain, e.g. stripe.com (matched to its official website). |
| id | string | – | Wikidata item ID, e.g. Q7624104 (skips name matching). |
| name | string | – | Company name, e.g. Stripe. |
| paymentSignature | string | – | Optional x402 v2 base64 PAYMENT-SIGNATURE |
No output schema declared.
No examples provided.
entity_person ~153
Professional profile of a notable person (founders, executives, public figures) from Wikidata and Wikipedia: description, occupations, current employers and positions, education, citizenship, birth year, website and public X/LinkedIn/GitHub accounts. No family, residence or full birth dates are returned. You only pay for successful reads: invalid input, not-found and upstream errors cancel settlement. ($0.003 USDC on Base)
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | – | Wikidata item ID, e.g. Q305177 (skips name matching). |
| name | string | – | Person's name, e.g. Jensen Huang. |
| paymentSignature | string | – | Optional x402 v2 base64 PAYMENT-SIGNATURE |
No output schema declared.
No examples provided.
entity_search ~136
Search Wikidata for companies, notable people or anything else by name and get IDs, short descriptions and Wikipedia links, so you can pick the right entity before enriching it. You only pay for successful reads: invalid input, not-found and upstream errors cancel settlement. ($0.002 USDC on Base)
| Name | Type | Req | Description |
|---|---|---|---|
| limit | string | – | Max results, 1-20 (default 5). |
| paymentSignature | string | – | Optional x402 v2 base64 PAYMENT-SIGNATURE |
| q | string | yes | Name to search, e.g. grab. |
| type | string | – | company, person or any (default any). |
No output schema declared.
No examples provided.
extract_clean_markdown ~90
Fetch any public webpage and convert it into clean, token-efficient LLM Markdown with metadata and token count ($0.005 USDC on Base).
| Name | Type | Req | Description |
|---|---|---|---|
| maxChars | number | – | Maximum Markdown characters (500-50000) |
| paymentSignature | string | – | Optional x402 v2 base64 PAYMENT-SIGNATURE |
| url | string | yes | Public http/https URL to convert to Markdown |
No output schema declared.
No examples provided.
generate_outreach_dossier ~149
Generate a complete B2B SDR Outreach Dossier in 1 call: Brand Sanitizer, Phantom Lead Shield, E.164 WhatsApp/email contacts, CMS/pixel stack, 0-100 Technical SEO revenue-leak audit, and ready-to-send personalized WhatsApp & Cold Email scripts ($0.05 USDC on Base).
| Name | Type | Req | Description |
|---|---|---|---|
| agencyOffer | string | – | Optional description of your product/agency offer to weave into the scripts |
| businessName | string | – | Optional raw business title to sanitize |
| paymentSignature | string | – | Optional x402 v2 base64 PAYMENT-SIGNATURE |
| url | string | yes | Target business website, social bio, or marketplace URL |
No output schema declared.
No examples provided.
get_cfd_microstructure ~146
Get institutional ECN calibrated spreads, round-turn commissions, M1 ATR, spread-to-ATR execution cost ratios across M1-H1, scalping suitability, and live MT5 FVGs for XAUUSD, BTCUSD, NAS100, US30, US500, GER40, JPN225, USOUSD, EURUSD, GBPUSD, USDJPY ($0.01 USDC on Base).
| Name | Type | Req | Description |
|---|---|---|---|
| paymentSignature | string | – | Optional x402 v2 base64 PAYMENT-SIGNATURE |
| symbol | string | – | Optional ticker like XAUUSD, NAS100, BTCUSD, US30, GER40, USOUSD, EURUSD |
No output schema declared.
No examples provided.
get_hub_catalog ~45
FREE ($0.00): Inspect the live x402 Agent Hub service catalog, supported CFD/Forex tickers, per-call Base USDC pricing, and OpenAPI URL.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_ict_sessions ~99
Get live ICT Killzones (Asian, London Open, NY Open, London Close), 60m Silver Bullet FVG windows, CFD rollover spread-danger alerts, and Wednesday/Friday triple-swap flags ($0.005 USDC on Base).
| Name | Type | Req | Description |
|---|---|---|---|
| at | string | – | Optional ISO-8601 UTC timestamp (defaults to live current UTC time) |
| paymentSignature | string | – | Optional x402 v2 base64 PAYMENT-SIGNATURE |
No output schema declared.
No examples provided.
render_visual_card ~159
Render a deterministic, typo-free 1200x630 OpenGraph banner, 1080x1350 social KPI slide, or trading signal sparkline card as SVG + data URI ($0.025 USDC on Base).
| Name | Type | Req | Description |
|---|---|---|---|
| accentColor | string | – | – |
| badge | string | – | – |
| brandName | string | – | – |
| metricDelta | string | – | – |
| metricLabel | string | – | – |
| metricValue | string | – | – |
| paymentSignature | string | – | Optional x402 v2 base64 PAYMENT-SIGNATURE |
| sparkline | array | – | – |
| subtitle | string | – | – |
| template | string | – | – |
| theme | string | – | – |
| title | string | yes | Primary card headline |
No output schema declared.
No examples provided.
token_verdict ~207
Token rug check: is this token safe? Get an A-F grade, safety score, one-line verdict and plain-language take on any token on Base, Ethereum, BSC, Arbitrum, Optimism, Polygon, Avalanche or Solana. Built on the included full audit (live buy/sell simulation on 6 EVM chains, taxes, owner powers, liquidity, holders); the grade never comes from the AI. Plus a share page and card PNG. Risk screen, not financial advice. $0.015 USDC on Base. Failed calls are not charged. ($0.015 USDC on Base)
| Name | Type | Req | Description |
|---|---|---|---|
| chain | string | – | base (default), ethereum, bsc, arbitrum, optimism, polygon, avalanche or solana. |
| paymentSignature | string | – | Optional x402 v2 base64 PAYMENT-SIGNATURE |
| token | string | yes | Token contract address: 0x-prefixed on EVM chains, base58 mint on Solana. |
No output schema declared.
No examples provided.
How do I install the x402 Agent Hub MCP server?
x402 Agent Hub is a hosted endpoint at https://x402-agent-hub.x402-agent-hub.workers.dev/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · x402-agent-hub.x402-agent-hub.workers.dev
claude mcp add --transport http blackcat-cyber-creator-x402-agent-hub 'https://x402-agent-hub.x402-agent-hub.workers.dev/mcp'
What is the x402 Agent Hub MCP server?
x402 Agent Hub is an MCP server listed in the public MCP registry as io.github.BlackCat-cyber-creator/x402-agent-hub. Onchain reads, SEC company financials, company & people enrichment, token verdicts via x402 USDC. This page covers its hosted endpoint (https://x402-agent-hub.x402-agent-hub.workers.dev/mcp).
Is the x402 Agent Hub MCP server safe to use?
x402 Agent Hub scores 60 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the x402 Agent Hub MCP server expose?
x402 Agent Hub exposes 26 tools: get_hub_catalog, get_ict_sessions, get_cfd_microstructure, calculate_prop_firm_risk, extract_clean_markdown, and 21 more. Their descriptions and schemas cost roughly 3,958 tokens of context every time the server is loaded.
Does the x402 Agent Hub MCP server require authentication?
No. We connected to x402 Agent Hub without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the x402 Agent Hub MCP server still maintained?
x402 Agent Hub is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What did VerifyMCP test on the x402 Agent Hub MCP server?
VerifyMCP ran 11 checks on x402 Agent Hub, covering TLS certificate, HSTS header, DNSSEC, Transport and 7 more. 2 items could not be completed, a gap on our side rather than a finding about x402 Agent Hub: Authorization and HTTPS. Supply Chain Security and Provenance & Transparency do not apply to a hosted endpoint, so they were not tested. The score does not measure everything, and the scoring documentation lists what it leaves out.