Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

Conclave Agent-Rails

REMOTE · CONCLAVEX402.PYTHONANYWHERE.COM

Pay-per-call x402 data tools on Base: Solana snapshots, prices, package metadata.

60 Trust /100

Last scanned (2 hours ago)

Scores higher than 45% of remote servers

Reachable. Last reached 17 Oct 2026.

Category Crypto and Web3

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →

Endpoint Security46
Transport & Reachability100
Schema Quality & AI Usability72
  • AI-judged instruction clarity (good).Pass
  • Context-footprint check failed: tool/resource definitions use about 2701 tokens (~117/item across 23 items; 23 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management13
  • Stability observed for 4 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage99
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 96% of tool parameters carry a description.Partial
Tool Safety100
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • We read all 23 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
  • An AI judge read all 24 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities60
  • Spec-recency check failed: implements MCP spec 2025-06-18; the latest is 2026-07-28. See how to fix → Fail
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 17 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 10 to 13. That category is still filling its 30-day observation window: 3 days of observed history at the previous scan, 4 at this one. The score rises as the window fills, whether or not the server changes.

  • 16 Oct 26 0
    • The server rewrote its instructions, which are the text every model session reads security
    • Tool “token_snapshot” rewrote its description, which is the text the model reads security
    • Schema quality: 2043 → 2701 ▼ functional
    • New tool “listing_watch” functional
    • New tool “sec_enforcement” functional
    • New tool “u_iban” functional
    • New tool “u_time” functional
    • “token_snapshot” reworded the description of “mint” cosmetic
    • Tool “token_snapshot” changed its title: Call before trading or pricing a Solana token: normalized live onchain snapshot (price, 24h change, liquidity, 24h volume, top DEX pair). → Call before trading or pricing a token: normalized live onchain snapshot (price, 24h change, liquidity, 24h volume, top DEX pair) plus a transparent buy-side verdict, for a Solana mint (base58) or a Base/EVM token address (0x...). cosmetic
  • 15 Oct 26 +1
    • Tool “x402_integrity” rewrote its description, which is the text the model reads security
    • Tool “x402_integrity” changed its title: Call before trusting or paying a third-party x402 seller: catalog-vs-live integrity -- verify an x402 listing (payee, price, network, service, tags, bazaar block) against the live 402; an endpoint preflight for x402 catalog vs live offers, seller trust and listing consistency so an agent can skip dead or mismatched endpoints (JSON). → Call before trusting or paying a third-party x402 seller: checks an x402 listing's price, network and bazaar presence against our latest sampled snapshot, and probes endpoint reachability - flagging dead or mismatched endpoints and prices so an agent can skip them before paying (JSON). cosmetic
  • 14 Oct 26 +1
    • Tool “package_metadata” rewrote its description, which is the text the model reads security
    • Tool “price_quote” rewrote its description, which is the text the model reads security
    • Tool “rail_status” rewrote its description, which is the text the model reads security
    • Tool “solana_snapshot” rewrote its description, which is the text the model reads security
    • Tool “token_snapshot” rewrote its description, which is the text the model reads security
    • Tool “u_address_check” rewrote its description, which is the text the model reads security
    • Tool “u_base58” rewrote its description, which is the text the model reads security
    • Tool “u_base64” rewrote its description, which is the text the model reads security
    • Tool “u_date_diff” rewrote its description, which is the text the model reads security
    • Tool “u_hex” rewrote its description, which is the text the model reads security
    • Tool “u_json” rewrote its description, which is the text the model reads security
    • Tool “u_jwt” rewrote its description, which is the text the model reads security
    • Tool “u_sha256” rewrote its description, which is the text the model reads security
    • Tool “u_urlcode” rewrote its description, which is the text the model reads security
    • Tool “u_uuid” rewrote its description, which is the text the model reads security
    • Tool “x402_integrity” rewrote its description, which is the text the model reads security
    • Schema quality: pass → fail ▼ functional
    • Stability: unverified → 0.03 ▲ functional
    • Tool “package_metadata” changed its title: Developer / package data: package-registry metadata for one package (PyPI or npm): latest version, summary, license, dependency count; PyPI also returns 30-day downloads. → Call before adding or upgrading a dependency: package-registry metadata for one package (PyPI or npm): latest version, summary, license, dependency count; PyPI also returns 30-day downloads. cosmetic
    • Tool “price_quote” changed its title: Crypto price / market data: live spot prices for one or more coins by CoinGecko id (USD price, 24h change, market cap) from a keyless multi-source chain that never returns an upstream 429. → Call before pricing or settling a crypto payment: live spot prices for one or more coins by CoinGecko id (USD price, 24h change, market cap) from a keyless multi-source chain that never returns an upstream 429. cosmetic
    • Tool “rail_status” changed its title: Multi-rail status snapshot: facilitator / settlement / market health across x402 rails (JSON) → Call before routing or accepting an x402 payment: multi-rail health (facilitators, settlement, market) across x402 rails (JSON). cosmetic
    • Tool “solana_snapshot” changed its title: Onchain data: decision-grade Solana account snapshot: kind (wallet/mint/program/token-account/unknown), SOL balance, owner program, executable, mint supply/authorities, recent activity (JSON) → Call before moving funds on Solana: decision-grade account snapshot — kind; mint decimals/supply/authority; whole-account balance and recent signatures — keyless solana-public-rpc. cosmetic
    • Tool “token_snapshot” changed its title: Market data for one Solana token: normalized live onchain token snapshot (crypto price, 24h change, liquidity, 24h volume, top DEX pair). → Call before trading or pricing a Solana token: normalized live onchain snapshot (price, 24h change, liquidity, 24h volume, top DEX pair). cosmetic
    • Tool “u_address_check” changed its title: FREE: EVM address format check → FREE: EVM address checksum and validation — check an Ethereum/Base address format before sending funds. cosmetic
    • Tool “u_base58” changed its title: FREE: Base58 encode/decode → FREE: Base58 encode or decode bytes/hex (Solana-style base58). cosmetic
    • Tool “u_base64” changed its title: FREE: Base64 encode/decode → FREE: Base64 encode or decode a string — base64 encoder/decoder (body {mode:encode|decode,input}). cosmetic
    • Tool “u_date_diff” changed its title: FREE: Difference between two ISO-8601 timestamps → FREE: Difference between two ISO-8601 timestamps in days/seconds (date diff). cosmetic
    • Tool “u_hex” changed its title: FREE: Hex encode/decode → FREE: Hex encode or decode text — hex string encoder/decoder. cosmetic
    • Tool “u_json” changed its title: FREE: Validate + pretty-print JSON → FREE: Validate, pretty-print (0-8 spaces), or minify JSON — json formatter/validator. cosmetic
    • Tool “u_jwt” changed its title: FREE: Decode a JWT header/payload (no signature verification) → FREE: Decode a JWT — parse header and payload claims without a key (no signature verification). cosmetic
    • Tool “u_sha256” changed its title: FREE: Hash text (sha256/sha512/sha3_256) → FREE: SHA-256 hash/digest of a text string — also sha512 and sha3-256; returns hex. cosmetic
    • Tool “u_urlcode” changed its title: FREE: URL percent encode/decode → FREE: URL encode or decode a string (percent-encoding) for query, path or fragment. cosmetic
    • Tool “u_uuid” changed its title: FREE: Generate a v4 UUID → FREE: Generate a random UUID (uuid v4, RFC 9562) — 1..100 per call; format uuid|urn|hex|int. cosmetic
    • Tool “x402_integrity” changed its title: Ecosystem integrity: x402 catalog-vs-live market data integrity snapshot (JSON) → Call before trusting or paying a third-party x402 seller: catalog-vs-live integrity -- verify an x402 listing (payee, price, network, service, tags, bazaar block) against the live 402; an endpoint preflight for x402 catalog vs live offers, seller trust and listing consistency so an agent can skip dead or mismatched endpoints (JSON). cosmetic
  • 13 Oct 26 57

    First indexed and scored.

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 17 Oct 2026 · Probed https://conclavex402.pythonanywhere.com/mcp

TLS valid

Negotiated TLS 1.3 with TLS_AES_256_GCM_SHA384 .

Subject Issuer Valid from Valid until Key Signature Serial
CN=*.pythonanywhere.com CN=YE2,O=Let's Encrypt,C=US 21 Sept 2026 20 Dec 2026 ECDSA 256 ECDSA-SHA384 5f42705e4274c8eb2b24a997abb8ecba729
SANs: *.pythonanywhere.com
CN=YE2,O=Let's Encrypt,C=US (CA) CN=Root YE,O=ISRG,C=US 3 Sept 2025 2 Sept 2028 ECDSA 384 ECDSA-SHA384 4df3b15dd6c0784c507cd37b58e6f115
CN=Root YE,O=ISRG,C=US (CA) CN=ISRG Root X2,O=Internet Security Research Group,C=US 13 May 2026 2 Sept 2032 ECDSA 384 ECDSA-SHA384 872165fc34b6e5fba8add5b3705fb53a
CN=ISRG Root X2,O=Internet Security Research Group,C=US (CA) CN=ISRG Root X1,O=Internet Security Research Group,C=US 13 May 2026 2 Sept 2032 ECDSA 384 SHA256-RSA 6c8f1dc727c7117f7baf853ac980f9cd

Background: What to check on a remote MCP endpoint →

DNSSEC insecure

Validation of conclavex402.pythonanywhere.com. — Not signed

Zone DS Keys Algorithms Outcome
. trust_anchor 20326, 38696 8, 8 Verified
com. present 19718 13 Verified
pythonanywhere.com. absent Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation
Authentication No authorisation required

The endpoint answered without asking for a token. Anyone who knows the URL can reach it.

Result No authorisation required
HTTP status 200

Background: How OAuth 2.1 works in the 2026 MCP spec →

Transports 2 probes
Transport URL Outcome Status Location
streamable-http https://conclavex402.pythonanywhere.com/mcp Verified 200
http (plaintext) http://conclavex402.pythonanywhere.com/mcp Inconclusive 405
MCP tools · 23 exposed · ~2,370 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
list_services ~55

FREE. Catalog of this seller's pay-per-call x402 data endpoints with prices (USDC on Base) and how to pay. NOTE: the /u/* micro-utilities are free over MCP and paid per-request over HTTP.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

listing_watch ~183

PAID $0.005000 USDC via x402. Call before trusting or paying a third-party x402 seller: snapshot one listing from a fixed public directory (payapi, cdp, payai, bazaar) by its id/payTo, or pass ?since= to get told whether it changed since you last saw it. Reads public directories only - never a caller-supplied URL - and returns already-public fields (JSON).

NameTypeReqDescription
directorystring–bazaar|cdp|payai|payapi
idstring–UUID or 0x...40 payTo
paymentstring–Base64 x402 payment header (PAYMENT-SIGNATURE v2, or legacy X-PAYMENT v1). Omit to receive the 402 payment requirement.
sincestring–Optional prior snapshot_token.

No output schema declared.

No examples provided.

package_metadata ~136

PAID $0.010000 USDC via x402. Call before adding or upgrading a dependency: package-registry metadata for one package (PyPI or npm): latest version, summary, license, dependency count; PyPI also returns 30-day downloads.

NameTypeReqDescription
ecosystemstring–pypi or npm (default pypi).
namestring–Package name (default requests pypi / express npm).
paymentstring–Base64 x402 payment header (PAYMENT-SIGNATURE v2, or legacy X-PAYMENT v1). Omit to receive the 402 payment requirement.

No output schema declared.

No examples provided.

ping ~22

FREE. Liveness handshake: returns service name, version and server time.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

price_quote ~141

PAID $0.005000 USDC via x402. Call before pricing or settling a crypto payment: live spot prices for one or more coins by CoinGecko id (USD price, 24h change, market cap) from a keyless multi-source chain that never returns an upstream 429.

NameTypeReqDescription
idsstring–Comma-separated CoinGecko ids (default bitcoin,ethereum).
paymentstring–Base64 x402 payment header (PAYMENT-SIGNATURE v2, or legacy X-PAYMENT v1). Omit to receive the 402 payment requirement.
vsstring–Quote currency (default usd).

No output schema declared.

No examples provided.

rail_status ~91

PAID $0.020000 USDC via x402. Call before routing or accepting an x402 payment: multi-rail health (facilitators, settlement, market) across x402 rails (JSON).

NameTypeReqDescription
paymentstring–Base64 x402 payment header (PAYMENT-SIGNATURE v2, or legacy X-PAYMENT v1). Omit to receive the 402 payment requirement.

No output schema declared.

No examples provided.

sec_enforcement ~209

PAID $0.005000 USDC via x402. Call before onboarding, screening or paying a counterparty: full-text search of SEC EDGAR filings for an enforcement/regulatory phrase; returns matching filings (company, CIK, form, filed/period, state, SIC, accession + official sec.gov deep-link). Phrase search: quote your term, filter by form/date.

NameTypeReqDescription
endstring–Optional YYYY-MM-DD upper bound.
formsstring–Optional form filter, e.g. 8-K or a comma list.
limitinteger–1..100 (default 20).
paymentstring–Base64 x402 payment header (PAYMENT-SIGNATURE v2, or legacy X-PAYMENT v1). Omit to receive the 402 payment requirement.
querystring–EDGAR full-text phrase, e.g. cease-and-desist.
startstring–Optional YYYY-MM-DD lower bound.

No output schema declared.

No examples provided.

solana_snapshot ~116

PAID $0.020000 USDC via x402. Call before moving funds on Solana: decision-grade account snapshot — kind; mint decimals/supply/authority; whole-account balance and recent signatures — keyless solana-public-rpc.

NameTypeReqDescription
addressstring–Base58 Solana address (32-44 chars).
paymentstring–Base64 x402 payment header (PAYMENT-SIGNATURE v2, or legacy X-PAYMENT v1). Omit to receive the 402 payment requirement.

No output schema declared.

No examples provided.

token_snapshot ~150

PAID $0.020000 USDC via x402. Call before trading or pricing a token: normalized live onchain snapshot (price, 24h change, liquidity, 24h volume, top DEX pair) plus a transparent buy-side verdict, for a Solana mint (base58) or a Base/EVM token address (0x...).

NameTypeReqDescription
mintstring–Optional token id: Solana base58 mint or Base/EVM 0x address (default: SOL).
paymentstring–Base64 x402 payment header (PAYMENT-SIGNATURE v2, or legacy X-PAYMENT v1). Omit to receive the 402 payment requirement.

No output schema declared.

No examples provided.

u_address_check ~87

FREE (no payment). EVM address checksum and validation — check an Ethereum/Base address format before sending funds. Deterministic micro-utility; use over MCP or POST /u/address-check over HTTP.

NameTypeReqDescription
addressstring–e.g. '0x2F2E1f54109B2525137EedA4A892600Ee956D42a'

No output schema declared.

No examples provided.

u_base58 ~74

FREE (no payment). Base58 encode or decode bytes/hex (Solana-style base58). Deterministic micro-utility; use over MCP or POST /u/base58 over HTTP.

NameTypeReqDescription
hexstring–e.g. 'deadbeef'
opstring–e.g. 'encode'

No output schema declared.

No examples provided.

u_base64 ~80

FREE (no payment). Base64 encode or decode a string — base64 encoder/decoder (body {mode:encode|decode,input}). Deterministic micro-utility; use over MCP or POST /u/base64 over HTTP.

NameTypeReqDescription
opstring–e.g. 'encode'
textstring–e.g. 'hello'

No output schema declared.

No examples provided.

u_date_diff ~98

FREE (no payment). Difference between two ISO-8601 timestamps in days/seconds (date diff). Deterministic micro-utility; use over MCP or POST /u/date-diff over HTTP.

NameTypeReqDescription
fromstring–e.g. '2026-01-01T00:00:00Z'
tostring–e.g. '2026-01-02T00:00:00Z'

No output schema declared.

No examples provided.

u_hex ~68

FREE (no payment). Hex encode or decode text — hex string encoder/decoder. Deterministic micro-utility; use over MCP or POST /u/hex over HTTP.

NameTypeReqDescription
opstring–e.g. 'encode'
textstring–e.g. 'hi'

No output schema declared.

No examples provided.

u_iban ~86

FREE (no payment). Validate an IBAN (international bank account number) — check the country, length and ISO 13616 mod-97 checksum; returns validity, country and check digits. Deterministic micro-utility; use over MCP or POST /u/iban over HTTP.

NameTypeReqDescription
ibanstring–e.g. 'DE89370400440532013000'

No output schema declared.

No examples provided.

u_json ~65

FREE (no payment). Validate, pretty-print (0-8 spaces), or minify JSON — json formatter/validator. Deterministic micro-utility; use over MCP or POST /u/json over HTTP.

NameTypeReqDescription
datastring–e.g. '{"a":1}'

No output schema declared.

No examples provided.

u_jwt ~83

FREE (no payment). Decode a JWT — parse header and payload claims without a key (no signature verification). Deterministic micro-utility; use over MCP or POST /u/jwt over HTTP.

NameTypeReqDescription
tokenstring–e.g. 'eyJhbGciOiJub25lIn0.eyJzdWIiOiIxIn0.'

No output schema declared.

No examples provided.

u_sha256 ~82

FREE (no payment). SHA-256 hash/digest of a text string — also sha512 and sha3-256; returns hex. Deterministic micro-utility; use over MCP or POST /u/sha256 over HTTP.

NameTypeReqDescription
algostring–e.g. 'sha256'
textstring–e.g. 'hello'

No output schema declared.

No examples provided.

u_time ~135

FREE (no payment). World clock and timezone converter — convert timezones (timezone convert) for the current time or any instant (`at`) in IANA zones (`tzs`, e.g. Europe/London,Asia/Tokyo) or a fixed utc_offset (+05:30); returns local time, UTC offset, weekday and DST. Deterministic micro-utility; use over MCP or POST /u/time over HTTP.

NameTypeReqDescription
atstring–e.g. '2026-01-01T00:00:00Z'
zones––e.g. ["UTC", "America/New_York"]

No output schema declared.

No examples provided.

u_urlcode ~76

FREE (no payment). URL encode or decode a string (percent-encoding) for query, path or fragment. Deterministic micro-utility; use over MCP or POST /u/urlcode over HTTP.

NameTypeReqDescription
opstring–e.g. 'encode'
textstring–e.g. 'a b'

No output schema declared.

No examples provided.

u_uuid ~63

FREE (no payment). Generate a random UUID (uuid v4, RFC 9562) — 1..100 per call; format uuid|urn|hex|int. Deterministic micro-utility; use over MCP or POST /u/uuid over HTTP.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

validate ~150

FREE (no payment). Decide accepted/rejected for a delivered brick.blue task result against the task's published acceptance rules. Returns {decision, accepted, verdict, reason}.

NameTypeReqDescription
acceptanceobject–Optional task acceptance rules ({"kind":"fields","checks":[...]}) supplied inline; used instead of fetching the task.
attemptIdstringyesAttempt id under arbitration.
descriptionstring––
input––Task input as published (opaque).
result––Delivered result to validate (opaque).
taskobject–Optional full task object (with `acceptance`) supplied inline.
taskIdstringyesbrick.blue task id.
titlestring––

No output schema declared.

No examples provided.

x402_integrity ~120

PAID $0.009000 USDC via x402. Call before trusting or paying a third-party x402 seller: checks an x402 listing's price, network and bazaar presence against our latest sampled snapshot, and probes endpoint reachability - flagging dead or mismatched endpoints and prices so an agent can skip them before paying (JSON).

NameTypeReqDescription
paymentstring–Base64 x402 payment header (PAYMENT-SIGNATURE v2, or legacy X-PAYMENT v1). Omit to receive the 402 payment requirement.

No output schema declared.

No examples provided.

Install

How do I install the Conclave Agent-Rails MCP server?

Conclave Agent-Rails is a hosted endpoint at https://conclavex402.pythonanywhere.com/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

remote · conclavex402.pythonanywhere.com

# add to Claude Code
claude mcp add --transport http com-pythonanywhere-conclavex402-conclave-agent-r 'https://conclavex402.pythonanywhere.com/mcp'
Common questions

What is the Conclave Agent-Rails MCP server?

Conclave Agent-Rails is an MCP server listed in the public MCP registry as com.pythonanywhere.conclavex402/conclave-agent-rails. Pay-per-call x402 data tools on Base: Solana snapshots, prices, package metadata. This page covers its hosted endpoint (https://conclavex402.pythonanywhere.com/mcp).

Is the Conclave Agent-Rails MCP server safe to use?

Conclave Agent-Rails scores 60 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the Conclave Agent-Rails MCP server expose?

Conclave Agent-Rails exposes 23 tools: list_services, ping, u_sha256, u_uuid, u_base64, and 18 more. Their descriptions and schemas cost roughly 2,370 tokens of context every time the server is loaded.

Does the Conclave Agent-Rails MCP server require authentication?

No. We connected to Conclave Agent-Rails without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.

Is the Conclave Agent-Rails MCP server still maintained?

Conclave Agent-Rails is still listed as active in the MCP registry. We last reached this channel on 17 October 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.