# dev.fly.obol-x402/obol (remote · obol-mcp.fly.dev)

Pre-trade safety verdicts for agents: token rug/honeypot, calldata guard, wallet risk — signed x402.

- Trust score: 55/100 (low)
- Change this week: 0
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-03

## Components

- remote · `obol-mcp.fly.dev`: 55/100 (this document), [markdown](https://verifymcp.io/servers/dev-fly-obol-x402-obol/obol-mcp.md), [page](https://verifymcp.io/servers/dev-fly-obol-x402-obol/obol-mcp)

## Channel facts

- Endpoint: `https://obol-mcp.fly.dev/mcp`
- Transports: `streamable-http`
- Auth: `none`
- Version: `1.29.0`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-03.

- **Endpoint Security**: 11/100
  - TLS not yet verified: we couldn't open a connection to check the certificate.
  - Authorisation not yet verified: we couldn't confirm whether this endpoint requires it.
  - HTTPS is enforced; there's no plaintext access path.
  - HSTS not yet verified: we couldn't read the response headers to check for it.
  - DNSSEC not yet verified: we couldn't validate it against a resolver.
- **Transport & Reachability**: 0/100
  - Transport check failed: declared streamable-http, but we couldn't connect to verify it.
- **Schema Quality & AI Usability**: 0/100
  - Schema not yet verified: we couldn't read the endpoint's schema.
- **Stability & Change Management**: 0/100
  - Stability not yet verified: not enough scan history yet (needs a 30-day window).
- **Tool Coverage**: 0/100
  - Tool coverage not yet verified: we couldn't read the endpoint's tools.
- **Capabilities**: 0/100
  - Capabilities not yet verified: we couldn't read the endpoint's capabilities.

**Unverified: 4 categories.** Categories scored 0 because we could not verify them: authentication we do not have, an unreachable endpoint, or not enough scan history. We only credit what we can confirm.

## Install

### Claude

```bash
claude mcp add --transport http dev-fly-obol-x402-obol https://obol-mcp.fly.dev/mcp
```

### Codex

```toml
[mcp_servers.dev-fly-obol-x402-obol]
url = "https://obol-mcp.fly.dev/mcp"
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "dev-fly-obol-x402-obol": {
      "type": "remote",
      "url": "https://obol-mcp.fly.dev/mcp",
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add dev-fly-obol-x402-obol --url https://obol-mcp.fly.dev/mcp --transport streamable-http
```

### Hermes

```yaml
mcp_servers:
  dev-fly-obol-x402-obol:
    url: "https://obol-mcp.fly.dev/mcp"
```

### Other

```json
{
  "mcpServers": {
    "dev-fly-obol-x402-obol": {
      "type": "http",
      "url": "https://obol-mcp.fly.dev/mcp"
    }
  }
}
```

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-07-31 (score 55, 0)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-30 (score 55, 0)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-28 (score 55, 0)

- [security regression] Endpoint reachability: reachable → unreachable

### 2026-07-27 (score 55, 0)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-26 (score 55)

First indexed and scored.

## MCP tools (21)

### `obol_catalog` (~51 tokens)

FREE. What OBOL sells and how to pay for it: every tool, its price in USDC, and the exact x402 payment shape. Call this first if a paid tool returned 'Payment Required'.

### `agent_counterparty_trust` (~107 tokens)

Is this x402 seller/agent REAL or a wash shell? Listing presence across Bazaar/PayAI/402index + recent Base USDC inflow forensics (distinct payers, concentration) → signed ESTABLISHED|ACTIVE_UNPROVEN|CONCENTRATED|GHOST verdict. ~50% of x402 volume is self-dealing — check before you pay. $0.10 USDC on Base via x402.

Input parameters:

- `payTo` (string, required)

### `validate_agent_output` (~112 tokens)

ERC-8004 Validator seat: submit a counterparty agent's output (+ Ed25519 attestation) → independent signed pass|fail (signature, coherence, integrity flags, freshness, self-claims) + ERC-8004 Validation-Registry-ready sha256 digests. Fail-closed: nothing checkable = withheld, no charge. $0.25 USDC on Base via x402.

Input parameters:

- `attestation_json`
- `payload_json` (string, required)
- `pubkey_b64`

### `evm_trade_verdict` (~129 tokens)

ONE call, one decision: should this exact EVM trade go through? Composes token risk report + honeypot sell-sim (+ calldata guard with to/data, + wallet risk) → signed PROCEED|PROCEED_WITH_CAPS|ABORT, 90s TTL. The only bundle with a pre-sign calldata leg. $0.25 USDC on Base via x402.

Input parameters:

- `chain` (string)
- `data`
- `notional_usd`
- `to`
- `token` (string, required)
- `wallet`

### `obol_trading_tick` (~63 tokens)

OBOL trading tick — poll EVERY agent cycle: Bitcoin market REGIME + broadcast-timing pulse + multi-asset spots + machine action policy (ok_to_act / hold / wait / recheck). One settle per loop. $0.20 USDC.

### `obol_risk_ritual` (~161 tokens)

OBOL risk ritual — pre-action JUDGE pack, MULTI-CHAIN (base, ethereum, arbitrum, optimism, polygon, bnb, robinhood): token safety and/or address risk and/or tx preflight + calldata drain decode. Args: token, address, to, data, frm, value, chain (provide ≥1 of token/address/to). Returns policy allow/caution/deny. $0.30 USDC on Base. Call before buy, send, or sign.

Input parameters:

- `address` (string)
- `chain` (string)
- `data` (string)
- `frm` (string)
- `to` (string)
- `token` (string)
- `value` (string)

### `obol_whale_watch` (~57 tokens)

OBOL whale watch: Bitcoin market REGIME + PLEXUS address behavioral fingerprint for a BTC address. Who is this counterparty under current market stress? $0.20 USDC.

Input parameters:

- `btc_address` (string, required)

### `get_obol_intel_pack` (~56 tokens)

OBOL flagship intelligence pack: Bitcoin market REGIME + broadcast-timing pulse + tip anomaly scan + multi-asset spots in ONE payment. Maximum decision density. $0.25 USDC on Base via x402.

### `bitcoin_market_intelligence` (~58 tokens)

Bitcoin market-intelligence digest: current BTC market REGIME (calm/active-stress/mixed) from cross-exchange spot integrity, fee/congestion regime, and block-anomaly state. $0.10 USDC on Base.

### `get_bitcoin_mempool_fees` (~62 tokens)

Bitcoin broadcast-timing pulse: next-block fee sat/vB, trend, broadcast verdict, mempool congestion, fee-spike, tip, spot. Should I broadcast BTC now? $0.05 USDC on Base via x402.

### `bitcoin_tx_intelligence` (~63 tokens)

Bitcoin tx structural intelligence (PLEXUS): classify money-movement role (consolidation/fan-out/payment), whale-tier, value-homophily. Not raw RPC. $0.10 USDC on Base.

Input parameters:

- `txid` (string, required)

### `bitcoin_address_intelligence` (~62 tokens)

Bitcoin address behavioral fingerprint (PLEXUS): vault, exchange, consolidator, distributor, whale, or ordinary — with balance/throughput. Counterparty screening before sending BTC. $0.10 USDC on Base.

Input parameters:

- `address` (string, required)

### `bitcoin_patoshi_provenance` (~53 tokens)

Bitcoin Patoshi-era provenance: is this early block from the Patoshi-dominant fingerprint period? TIMECHAIN forensic IP. $0.10 USDC on Base.

Input parameters:

- `height` (integer, required)

### `check_evm_token` (~102 tokens)

Token safety / rug-risk report for any EVM token on base, ethereum, arbitrum, optimism, polygon, bnb, or robinhood chain: ownership, proxy, mint, ERC-20 conformance, composite risk verdict. Call before buy/approve. Args: address, chain (default base). Payment is always $0.10 USDC on Base regardless of chain analyzed.

Input parameters:

- `address` (string, required)
- `chain` (string)

### `check_evm_address` (~91 tokens)

Address risk profile for any EVM address on base, ethereum, arbitrum, optimism, polygon, bnb, or robinhood chain: EOA vs contract, activity, dormancy, proxy, risk score. Screen before send/approve. Args: address, chain (default base). $0.10 USDC on Base.

Input parameters:

- `address` (string, required)
- `chain` (string)

### `simulate_evm_tx` (~106 tokens)

Simulate an EVM tx BEFORE signing on base, ethereum, arbitrum, optimism, polygon, bnb, or robinhood chain: succeed/revert, reason, gas estimate. Args: to, data, frm, value, chain (default base). $0.10 USDC on Base.

Input parameters:

- `chain` (string)
- `data` (string)
- `frm` (string)
- `to` (string, required)
- `value` (string)

### `obol_calldata_guard` (~124 tokens)

PRE-SIGN calldata guard: decode what a transaction ACTUALLY does before signing — detects unlimited approve(), setApprovalForAll, EIP-2612/Permit2 grants, and drains hidden inside multicall batches. Returns decoded intent + flags + policy ALLOW|CONFIRM|BLOCK. Args: to, data, frm, value. $0.05 USDC on Base.

Input parameters:

- `chain` (string)
- `data` (string, required)
- `frm` (string)
- `to` (string, required)
- `value` (string)

### `obol_evm_sell_sim` (~152 tokens)

EVM honeypot / sell-simulation — if you BUY this token, can you SELL it back? The dynamic two-way tradability gate the static rug check cannot answer: KyberSwap two-way round-trip FUSED with a sellability simulation on every chain (honeypot.is fork sim on base/ethereum/bnb, GoPlus on arbitrum/optimism/polygon). Buyable-but-not-sellable = honeypot BLOCK; verdict ALLOW|CAUTION|BLOCK, never ALLOW from a partial result. Args: address, chain (default base). $0.15 USDC on Base.

Input parameters:

- `address` (string, required)
- `chain` (string)

### `obol_launch_feed` (~125 tokens)

Fresh token launches with a SAFETY VERDICT overlaid — the habit feed for trading/sniper agents: dexscreener launch attention (boosts + new profiles) enriched with best-pair liquidity/fdv and OBOL's GoPlus-fused token verdict per token. Covers base, ROBINHOOD CHAIN (no rival feed has a safety overlay there), ethereum, arbitrum, optimism, polygon, bnb. Empty list is never charged. Args: chain (default base). $0.05 USDC on Base.

Input parameters:

- `chain` (string)

### `get_crypto_prices` (~47 tokens)

USD spot prices for BTC ETH SOL USDC USDT in ONE call — Coinbase+Kraken cross-exchange with divergence flag. $0.01 USDC on Base via x402.

### `get_bitcoin_signal` (~60 tokens)

Validation-gated Bitcoin block anomaly detector for a height: fee-exceeds-subsidy, empty block, retarget, timestamp inversion, long gap, coinbase message. $0.01 USDC on Base.

Input parameters:

- `height` (integer, required)

## Diagnostics

Captured diagnostic sections: TLS, DNSSEC, Authorisation, Transports. The full working is on the page: https://verifymcp.io/servers/dev-fly-obol-x402-obol/obol-mcp#diagnostics

## Score history

- 2026-08-03: 55
- 2026-08-02: 55
- 2026-08-01: 55
- 2026-07-31: 55
- 2026-07-30: 55
- 2026-07-29: 55
- 2026-07-28: 55
- 2026-07-27: 55
- 2026-07-26: 55

## Links

- Remote endpoint: https://obol-mcp.fly.dev/mcp
- Changelog RSS feed: https://verifymcp.io/servers/dev-fly-obol-x402-obol/obol-mcp/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/dev-fly-obol-x402-obol/obol-mcp/changelog.json
- HTML version of this page: https://verifymcp.io/servers/dev-fly-obol-x402-obol/obol-mcp