# DeriveAI x402 APIs (remote · x402-apis-eta.vercel.app)

25 pay-per-request intelligence APIs for AI agents via x402 micropayments (USDC/Base)

- Trust score: 64/100 (medium)
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-20

## Components

- remote · `x402-apis-eta.vercel.app`: 64/100 (this document), [markdown](https://verifymcp.io/servers/deriveit33z-ship-it-x402-apis/api-mcp.md), [page](https://verifymcp.io/servers/deriveit33z-ship-it-x402-apis/api-mcp)

## Channel facts

- Endpoint: `https://x402-apis-eta.vercel.app/api/mcp`
- Transports: `streamable-http`
- Auth: `none`
- Version: `2.0.0`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-20.

- **Endpoint Security**: 63/100
  - The endpoint's TLS certificate is valid, in date, and uses a strong key.
  - Authorisation not fully verified: no authorisation is required to call this server, and 25 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.
  - HTTPS is enforced; there's no plaintext access path.
  - The HSTS (Strict-Transport-Security) header is present.
  - DNSSEC check failed: this domain isn't protected by DNSSEC.
- **Transport & Reachability**: 100/100
  - Verified streamable-http transport via a live MCP handshake.
- **Schema Quality & AI Usability**: 80/100
  - AI-judged instruction clarity (excellent).
  - Tool/resource definitions use about 2134 tokens (~85/item across 25 items; 25 tools + 0 resources), lean.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 3/100
  - Stability observed for 1 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
- **Capabilities**: 40/100
  - Spec-recency check failed: implements MCP spec 2025-03-26; the latest is 2026-07-28.

## Install

### Claude

```bash
claude mcp add --transport http deriveit33z-ship-it-x402-apis https://x402-apis-eta.vercel.app/api/mcp
```

### Codex

```toml
[mcp_servers.deriveit33z-ship-it-x402-apis]
url = "https://x402-apis-eta.vercel.app/api/mcp"
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "deriveit33z-ship-it-x402-apis": {
      "type": "remote",
      "url": "https://x402-apis-eta.vercel.app/api/mcp",
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add deriveit33z-ship-it-x402-apis --url https://x402-apis-eta.vercel.app/api/mcp --transport streamable-http
```

### Hermes

```yaml
mcp_servers:
  deriveit33z-ship-it-x402-apis:
    url: "https://x402-apis-eta.vercel.app/api/mcp"
```

### Other

```json
{
  "mcpServers": {
    "deriveit33z-ship-it-x402-apis": {
      "type": "http",
      "url": "https://x402-apis-eta.vercel.app/api/mcp"
    }
  }
}
```

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-20 (score 64, +1)

- [functional improvement] Stability: unverified → 0.03

### 2026-08-19 (score 63)

First indexed and scored.

## MCP tools (25)

### `arabic_sentiment` (~92 tokens)

Analyze sentiment in Arabic text. Supports Gulf/Khaleeji, Egyptian, Levantine, and MSA dialects. Returns sentiment (positive/negative/neutral), confidence score, detected dialect, and keywords. Global LLMs hit ~45% accuracy on Gulf dialect — this tool is purpose-built for it.

Input parameters:

- `text` (string, required): Arabic text to analyze (max 10,000 characters)

### `arabizi_translate` (~102 tokens)

Convert Arabizi (Latin-script Arabic like '7abibi', 'shlonk', '3aysh') to Arabic script (حبيبي، شلونك، عايش). Gulf dialect optimized. Handles number-to-letter mappings (3=ع, 7=ح, 5=خ, 8=ق, 9=ص).

Input parameters:

- `text` (string, required): Arabizi text to transliterate (max 5,000 characters)

### `web_scrape` (~63 tokens)

Extract text content, links, title, and metadata from any URL. Returns cleaned text (scripts/styles removed), page title, meta description, and up to 50 links.

Input parameters:

- `url` (string, required): Full URL to scrape (e.g., https://example.com)

### `text_summarize` (~74 tokens)

Extractive text summarization. Scores sentences by keyword frequency and returns the most important ones in original order, plus top 10 keywords.

Input parameters:

- `max_sentences` (number): Number of key sentences to extract (default: 5)
- `text` (string, required): Text to summarize (max 50,000 characters)

### `crypto_data` (~78 tokens)

Real-time cryptocurrency market data: price, 24h volume, market cap, and 24h price change percentage. Supports thousands of coins via CoinGecko IDs.

Input parameters:

- `coin` (string, required): CoinGecko coin ID (e.g., bitcoin, ethereum, solana)
- `currency` (string): Fiat currency code (default: usd)

### `weather_data` (~55 tokens)

Current weather conditions for any city worldwide. Returns temperature, feels-like, humidity, precipitation, wind speed/direction, and weather condition description.

Input parameters:

- `city` (string, required): City name (e.g., Dubai, Abu Dhabi, London)

### `domain_enrich` (~75 tokens)

Domain enrichment: returns company name, description, detected tech stack (React, WordPress, Shopify, etc.), social media links (Twitter, LinkedIn, GitHub), email addresses, and redirect info for any domain.

Input parameters:

- `domain` (string, required): Domain name to enrich (e.g., google.com, aramco.com)

### `scrape_structured` (~72 tokens)

Smart structured web scraper. Unlike basic scrapers that return raw text, this extracts and LABELS structured data: emails, phone numbers, prices, dates, tables, links, headings, and metadata. Returns agent-ready JSON — no further parsing needed.

Input parameters:

- `url` (string, required): Full URL to scrape and structure

### `verify_email` (~60 tokens)

Email verification: validates format, checks domain exists, verifies MX records, detects disposable emails, free providers (Gmail, Yahoo), and role-based addresses (info@, admin@). Returns risk score.

Input parameters:

- `email` (string, required): Email address to verify

### `prayer_times` (~106 tokens)

Islamic prayer times for any city worldwide: Fajr, Dhuhr, Asr, Maghrib, Isha. Includes sunrise, Hijri date, and multiple calculation methods (Umm Al-Qura, ISNA, MWL).

Input parameters:

- `city` (string, required): City name (e.g., Dubai, London, Jakarta)
- `country` (string): Country name (optional)
- `date` (string): Date in DD-MM-YYYY format (optional, defaults to today)

### `profanity_filter` (~98 tokens)

Multilingual profanity and toxicity detection. Supports English, Arabic (Gulf dialect aware), Spanish, and French. Returns toxicity score, flagged words with categories (hate/sexual/violence/slur), severity rating, and cleaned text.

Input parameters:

- `language` (string): Language code: en, ar, es, fr (auto-detected if not provided)
- `text` (string, required): Text to check for profanity (max 10,000 chars)

### `legal_simplifier` (~68 tokens)

Legal jargon simplifier. Takes contract clauses, terms of service, or privacy policy text and returns: plain English explanations of legal terms, red flags, key obligations, complexity score, and risk level.

Input parameters:

- `text` (string, required): Legal text to analyze (max 20,000 chars)

### `gold_price` (~131 tokens)

Current retail gold prices per gram in 24K/22K/21K/18K across 10 currencies (USD, AED, EUR, GBP, INR, SAR, PKR, PHP, BDT, EGP). Consumer retail pricing.

Input parameters:

- `currency` (string): Currency code: USD, AED, EUR, GBP, INR, SAR, PKR, PHP, BDT, EGP (default: USD)
- `karat` (string): Gold karat: 24K, 22K, 21K, 18K, or 'all' (default: all)

### `detect_language` (~81 tokens)

Detects language, script type, and Arabic dialect from any text. Supports Arabic (MSA, Gulf, Egyptian, Levantine, Maghrebi), English, French, Spanish, Turkish, Hindi. Also detects Arabizi (Latin-script Arabic) and mixed-language text.

Input parameters:

- `text` (string, required): Text to analyze (max 10,000 chars)

### `currency_convert` (~100 tokens)

Currency conversion with real-time rates. Supports 150+ currencies including fiat (USD, EUR, GBP, AED, SAR, INR, PKR, PHP) and crypto (BTC, ETH). Returns rate, converted amount, and inverse rate.

Input parameters:

- `amount` (string): Amount to convert (default: 1)
- `from` (string, required): Source currency code (default: USD)
- `to` (string, required): Target currency code (default: AED)

### `screenshot` (~80 tokens)

Captures a website screenshot as PNG/JPEG with performance metrics. Returns base64 image, Lighthouse performance score, First Contentful Paint, Largest Contentful Paint, and Total Blocking Time.

Input parameters:

- `format` (string): 'json' for base64+metrics, 'image' for raw image (default: json)
- `url` (string, required): URL to screenshot

### `due_diligence` (~131 tokens)

Entity due diligence report. One call replaces 10+ separate lookups. Pass a domain or company name, get: WHOIS data, SSL certificate analysis, sanctions screening (OpenSanctions), web archive history, web presence audit, social links, contact info, risk signals, and a confidence-scored trust verdict (0-100). Costs $0.50 because it runs 5+ parallel checks and cross-references the results.

Input parameters:

- `company` (string): Company name to screen (e.g., Google LLC)
- `domain` (string): Domain to investigate (e.g., google.com)

### `site_audit` (~103 tokens)

Website security and SEO audit. Runs 5 parallel checks: security headers (HSTS, CSP, X-Frame-Options), SSL certificate grade, DNS configuration (DNSSEC, SPF), SEO analysis (title, meta, OG tags, headings, images), and Lighthouse performance metrics. Returns scored report (0-100) with actionable findings. $0.50 per audit.

Input parameters:

- `url` (string, required): URL to audit (e.g., https://example.com)

### `email_audit` (~73 tokens)

Email infrastructure audit. Checks SPF, DKIM (10 selectors), DMARC, MX records, blacklist status (8 DNSBLs), and DNSSEC. Returns deliverability score (0-100). All DNS-based, zero API keys.

Input parameters:

- `domain` (string, required): Domain to audit (e.g., gmail.com)

### `ip_intel` (~74 tokens)

IP address threat intelligence. Geolocation, ASN/ISP, reverse DNS, blacklist status (8 DNSBLs), VPN/proxy/Tor detection, abuse history. Cross-referenced risk score (0-100).

Input parameters:

- `ip` (string, required): IPv4 address (e.g., 8.8.8.8)

### `username_osint` (~64 tokens)

Username OSINT report. Checks 25+ platforms (GitHub, Reddit, Twitter, Instagram, npm, Steam, etc.) for a username. Categorizes by type, enriches GitHub profile, checks domain availability.

Input parameters:

- `username` (string, required): Username to investigate

### `domain_infra` (~71 tokens)

Domain infrastructure map. Full DNS records (A, AAAA, MX, NS, TXT, SOA, CAA), hosting provider, CDN detection, subdomain discovery via DNS brute-force and Certificate Transparency, IP geolocation.

Input parameters:

- `domain` (string, required): Domain to map (e.g., google.com)

### `brand_scout` (~60 tokens)

Brand availability scout. Checks domain availability across 12 TLDs, social handle availability on 15+ platforms, trademark conflicts, and alternative name suggestions. Scored report (0-100).

Input parameters:

- `name` (string, required): Brand/business name to check

### `competitor_analysis` (~107 tokens)

Competitive analysis report ($1.00). Pass two domains, get a head-to-head comparison across 8 dimensions: security headers, SEO quality, Lighthouse performance, SSL health, email security (SPF/DMARC), social presence, infrastructure (CDN/IPv6), and domain maturity. Returns winner per category and overall verdict.

Input parameters:

- `domain1` (string, required): First domain (e.g., google.com)
- `domain2` (string, required): Second domain (e.g., bing.com)

### `company_report` (~116 tokens)

Full company report ($1.00). The mega-report: 25+ parallel checks in one call. WHOIS/domain age, SSL certificate, sanctions screening, web archive history, security headers (7 types), email infrastructure (SPF/DKIM/DMARC/blacklists), full DNS records, CDN detection, subdomain discovery, SEO analysis, social presence, tech stack, Lighthouse performance, legal pages. Returns scored verdict (0-100).

Input parameters:

- `domain` (string, required): Company domain to investigate (e.g., stripe.com)

## Diagnostics

Captured diagnostic sections: TLS, DNSSEC, Authorisation, Transports. The full working is on the page: https://verifymcp.io/servers/deriveit33z-ship-it-x402-apis/api-mcp#diagnostics

## Score history

- 2026-08-20: 64
- 2026-08-19: 63

## Links

- Remote endpoint: https://x402-apis-eta.vercel.app/api/mcp
- Repository: https://github.com/deriveit33z-ship-it/x402-apis
- Website: https://x402-apis-eta.vercel.app/
- Changelog RSS feed: https://verifymcp.io/servers/deriveit33z-ship-it-x402-apis/api-mcp.xml
- Changelog JSON feed: https://verifymcp.io/servers/deriveit33z-ship-it-x402-apis/api-mcp.json
- HTML version of this page: https://verifymcp.io/servers/deriveit33z-ship-it-x402-apis/api-mcp