# Freysa Security (remote · economic-agent-369.freysa.dev)

Security intelligence for AI agents. 27 x402 endpoints: honeypot, forensics, CAPTCHA, preflight.

- Trust score: 0/100 (low)
- Change this week: −23
- Registry status: active
- Liveness: dead
- Owner verified: no
- Last scored: 2026-09-03

> **Dead**: every channel of this server has been unreachable for long enough to be marked dead. Its trust score is pinned to 0 and does not recover automatically.

## Components

- remote · `economic-agent-369.freysa.dev`: 0/100 (this document), [markdown](https://verifymcp.io/servers/dev-freysa-economic-agent-369-freysa-intelligence/economic-agent-369.md), [page](https://verifymcp.io/servers/dev-freysa-economic-agent-369-freysa-intelligence/economic-agent-369)

## Channel facts

- Endpoint: `https://economic-agent-369.freysa.dev/mcp`
- Transports: `streamable-http`
- Auth: `none`
- Version: `1.1.1`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-09-03.

- **Endpoint Security**: 11/100
  - TLS not yet verified: we couldn't open a connection to check the certificate.
  - Authorisation not yet verified: we couldn't confirm whether this endpoint requires it.
  - HTTPS is enforced; there's no plaintext access path.
  - HSTS not yet verified: we couldn't read the response headers to check for it.
  - DNSSEC not yet verified: we couldn't validate it against a resolver.
- **Transport & Reachability**: 0/100
  - Transport check failed: declared streamable-http, but we couldn't connect to verify it.
- **Schema Quality & AI Usability**: 0/100
  - Schema not yet verified: we couldn't read the endpoint's schema.
- **Stability & Change Management**: 0/100
  - Stability not yet verified: not enough scan history yet (needs a 30-day window).
- **Tool Coverage**: 0/100
  - Tool coverage not yet verified: we couldn't read the endpoint's tools.
- **Tool Safety**: 0/100
  - Tool safety not yet verified: we couldn't read the endpoint's tools.
- **Capabilities**: 0/100
  - Capabilities not yet verified: we couldn't read the endpoint's capabilities.

**Unverified: 5 categories.** Categories scored 0 because we could not verify them: authentication we do not have, an unreachable endpoint, or not enough scan history. We only credit what we can confirm.

## Install

### How do I install the Freysa Security MCP server?

Freysa Security is a hosted endpoint at https://economic-agent-369.freysa.dev/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

### Claude

```bash
claude mcp add --transport http dev-freysa-economic-agent-369-freysa-intelligenc 'https://economic-agent-369.freysa.dev/mcp'
```

### Cursor

```json
{
  "mcpServers": {
    "dev-freysa-economic-agent-369-freysa-intelligenc": {
      "url": "https://economic-agent-369.freysa.dev/mcp"
    }
  }
}
```

### VS Code

```json
{
  "servers": {
    "dev-freysa-economic-agent-369-freysa-intelligenc": {
      "type": "http",
      "url": "https://economic-agent-369.freysa.dev/mcp"
    }
  }
}
```

### Codex

```toml
[mcp_servers.dev-freysa-economic-agent-369-freysa-intelligenc]
url = "https://economic-agent-369.freysa.dev/mcp"
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "dev-freysa-economic-agent-369-freysa-intelligenc": {
      "type": "remote",
      "url": "https://economic-agent-369.freysa.dev/mcp",
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add dev-freysa-economic-agent-369-freysa-intelligenc --url 'https://economic-agent-369.freysa.dev/mcp' --transport streamable-http
```

### Hermes

```yaml
mcp_servers:
  dev-freysa-economic-agent-369-freysa-intelligenc:
    url: "https://economic-agent-369.freysa.dev/mcp"
```

### Netclaw

```json
{
  "McpServers": {
    "dev-freysa-economic-agent-369-freysa-intelligenc": {
      "Transport": "http",
      "Url": "https://economic-agent-369.freysa.dev/mcp"
    }
  }
}
```

### Vellum

```bash
assistant mcp add dev-freysa-economic-agent-369-freysa-intelligenc -t streamable-http -u 'https://economic-agent-369.freysa.dev/mcp'
```

### Other

```json
{
  "mcpServers": {
    "dev-freysa-economic-agent-369-freysa-intelligenc": {
      "type": "http",
      "url": "https://economic-agent-369.freysa.dev/mcp"
    }
  }
}
```

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-09-03 (score 0, −5)

The score moved with no change recorded against any check. We would rather say so than guess.

### 2026-09-02 (score 5, −4)

The score moved with no change recorded against any check. We would rather say so than guess.

### 2026-09-01 (score 9, −5)

The score moved with no change recorded against any check. We would rather say so than guess.

### 2026-08-31 (score 14, −4)

The score moved with no change recorded against any check. We would rather say so than guess.

### 2026-08-30 (score 18, −5)

The score moved with no change recorded against any check. We would rather say so than guess.

### 2026-08-28 (score 23, 0)

- [security regression] Endpoint reachability: not serving MCP → unreachable
- [security regression] DNSSEC: fail → unverified
- [security regression] HSTS header: fail → unverified
- [security regression] TLS certificate: pass → unverified
- [security] Authorization: Authorisation not yet verified: we couldn't confirm whether this endpoint requires it.
- [security] Transport: Transport check failed: declared streamable-http, but we couldn't connect to verify it.

### 2026-08-27 (score 23, −46)

- [security regression] Endpoint reachability: reachable → not serving MCP
- [security regression] Stability: fail → unverified
- [security regression] Tool safety: pass → unverified
- [security regression] Authorization: partial → unverified
- [security regression] Transport: pass → fail
- [functional regression] Capabilities: fail → unverified
- [functional regression] Tool coverage: 100 → unverified
- [functional] First check of Schema quality: unverified

### 2026-08-26 (score 69, +17)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

## MCP tools (11)

### `security.trial` (~90 tokens)

Free trial - 3 security/reasoning calls per day. No payment needed. Try security_score, honeypot_check, or address_risk.

Input parameters:

- `action` (string, required): Which tool to try for free
- `chain` (string): Blockchain network
- `prompt` (string, required): Token address or question for the free trial
- `wallet` (string, required): Your wallet address for rate limiting

Output parameters:

- `result` (object): Tool result

### `captcha.solve` (~146 tokens)

Solve CAPTCHA challenges. Supports image CAPTCHAs, reCAPTCHA v2, and Turnstile. Submit base64 image or image URL. Returns solved text in seconds. 99% accuracy. Power your web automation agents with CAPTCHA bypass. $0.01 per solve.

Input parameters:

- `captcha_type` (string): Type of CAPTCHA to solve: text (image text), recaptcha_v2 (Google reCAPTCHA), or turnstile (Cloudflare)
- `image_base64` (string): Base64-encoded CAPTCHA image data (alternative to image_url)
- `image_url` (string): URL of CAPTCHA image to solve. Example: https://example.com/captcha.png

Output parameters:

- `captcha_type` (string): Type of CAPTCHA solved
- `confidence` (number): Confidence score 0.0 to 1.0
- `method` (string): Method used capsolver or tesseract-ocr
- `solved` (string): Solved CAPTCHA text or token

### `security.score` (~108 tokens)

Quick token security score 0-100. Returns SAFE_CAUTION_DANGER decision plus risk flags. Fastest decision at $0.01. For agents that need one number before trading.

Input parameters:

- `chain` (string): Blockchain network. Options: base, ethereum, polygon
- `token_address` (string, required): Token contract address to evaluate. Example: 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913

Output parameters:

- `decision` (string): Trading decision
- `evidence` (array): Evidence chain supporting the decision
- `flags` (array): Risk flags e.g. cannot_sell has_mint_function
- `score` (number): Security score 0-100 higher is safer
- `time_ms` (number): Response time in milliseconds

### `security.honeypot` (~86 tokens)

Check if a token is a honeypot using real eth_call sell simulation. Detects if you can actually sell the token. Returns sell restrictions buy_sell tax blacklist status and evidence with block number. Deterministic no AI hallucination.

Input parameters:

- `chain` (string): Blockchain network
- `token_address` (string, required): Token contract address to check for honeypot characteristics

Output parameters:

- `block_number` (number): Block number at analysis time
- `buy_tax` (number): Buy tax percentage 0 if none
- `can_sell` (boolean): Whether sell simulation passed
- `evidence` (array): Evidence chain
- `is_honeypot` (boolean): Whether the token is a honeypot
- `risk` (string): Risk level safe_low_medium_high_critical
- `risk_score` (number): Numeric risk score 0 to 100
- `sell_tax` (number): Sell tax percentage 0 if none

### `security.address` (~69 tokens)

Check if a wallet address is safe. Returns scam indicators risk score 0 to 100 and recommendation. Checks sanction lists phishing links and suspicious patterns. Used by trading agents before sending funds.

Input parameters:

- `address` (string, required): Wallet address to analyze for scam indicators
- `chain` (string): Blockchain network

Output parameters:

- `eth_balance` (string): ETH balance
- `is_contract` (boolean): Whether address is a contract
- `recommendation` (string): safe_caution_block
- `risk_score` (number): Risk score 0 to 100
- `scam_indicators` (array): Suspicious patterns found
- `tx_count` (number): Transaction count

### `security.contract` (~64 tokens)

Smart contract risk assessment. Checks if verified upgradeable has dangerous functions proxy patterns owner privileges and known exploit vectors. Deterministic on-chain analysis no LLM hallucination.

Input parameters:

- `chain` (string): Blockchain network
- `contract_address` (string, required): Smart contract address to audit

Output parameters:

- `has_dangerous_functions` (boolean): Whether dangerous functions exist
- `is_upgradeable` (boolean): Whether contract is upgradeable
- `is_verified` (boolean): Whether contract source is verified
- `recommendation` (string): safe_caution_block
- `risk_score` (number): Risk score 0 to 100

### `security.buy_decision` (~77 tokens)

BUY_AVOID_CAUTION decision for any token. Combines honeypot check contract risk liquidity analysis and holder concentration. Returns structured decision with confidence score and evidence.

Input parameters:

- `capital` (number): Capital in USD for impact calculation
- `chain` (string): Blockchain network
- `token_address` (string, required): Token address to evaluate

Output parameters:

- `confidence` (number): Confidence score 0 to 100 percent
- `decision` (string): Trading decision
- `evidence` (array): Supporting evidence
- `risk_score` (number): Risk score 0 to 100

### `security.pre_trade` (~89 tokens)

Full pre-trade risk check. Checks token contract wallet liquidity slippage and price impact in one call. Includes amount-based impact calculation. For agents that need to know if a trade is safe.

Input parameters:

- `capital` (number): Capital amount in USD
- `chain` (string): Blockchain network
- `token_address` (string, required): Token address
- `trader_wallet` (string): Trader wallet address

Output parameters:

- `decision` (string): PROCEED_CAUTION_ABORT
- `flags` (array): Risk flags
- `price_impact_pct` (number): Estimated price impact percentage
- `risk_score` (number): Composite risk score 0 to 100

### `security.approval` (~79 tokens)

Check if a token approval is safe. Detects dangerous spenders unlimited allowance risks and malicious patterns. Every output cites block evidence. Use before signing any approve transaction.

Input parameters:

- `chain` (string): Blockchain network
- `spender_address` (string, required): Spender address to check for approval risk
- `token_address` (string, required): Token contract address

Output parameters:

- `evidence` (array): Evidence supporting recommendation
- `is_dangerous` (boolean): Whether approval is dangerous
- `recommendation` (string): safe_caution_block
- `risk_score` (number): Approval risk score 0 to 100

### `security.wallet` (~70 tokens)

Deep wallet forensic audit. Traces on-chain history flags suspicious patterns identifies scam links MEV activity and money flow patterns. Returns structured risk score with evidence chain. For security agents doing due diligence.

Input parameters:

- `chain` (string): Blockchain network
- `wallet_address` (string, required): Wallet address for deep forensic analysis

Output parameters:

- `evidence` (array): Evidence chain for findings
- `recommendation` (string): safe_caution_block
- `risk_score` (number): Overall risk score 0 to 100
- `scam_indicators` (array): Suspicious patterns detected

### `security.preflight` (~121 tokens)

One-call comprehensive safety check for AI agents. Checks target contract token and wallet together. Returns PROCEED_CAUTION_ABORT decision with evidence. Designed for autonomous agents executing complex workflows. Most thorough analysis at $0.50.

Input parameters:

- `chain` (string): Blockchain network
- `interaction_type` (string): Type of interaction: swap_buy_sell_approve_stake
- `target_address` (string, required): Target contract or token address to evaluate
- `trader_wallet` (string): Wallet address performing the interaction
- `value` (number): Transaction value in ETH

Output parameters:

- `decision` (string): Safety decision
- `evidence` (array): Evidence chain
- `risk_score` (number): Overall risk score 0 to 100
- `warnings` (array): Specific warnings

## Diagnostics

Captured diagnostic sections: TLS, DNSSEC, Authorisation, Transports. The full working is on the page: https://verifymcp.io/servers/dev-freysa-economic-agent-369-freysa-intelligence/economic-agent-369#diagnostics

## Score history

- 2026-09-03: 0
- 2026-09-02: 5
- 2026-09-01: 9
- 2026-08-31: 14
- 2026-08-30: 18
- 2026-08-29: 23
- 2026-08-28: 23
- 2026-08-27: 23
- 2026-08-26: 69
- 2026-08-25: 52
- 2026-08-24: 52

## Common questions

### What is the Freysa Security MCP server?

Freysa Security is an MCP server listed in the public MCP registry as dev.freysa.economic-agent-369/freysa-intelligence. Security intelligence for AI agents. 27 x402 endpoints: honeypot, forensics, CAPTCHA, preflight. This page covers its hosted endpoint (https://economic-agent-369.freysa.dev/mcp).

### Is the Freysa Security MCP server safe to use?

Freysa Security scores 0 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

### What tools does the Freysa Security MCP server expose?

Freysa Security exposes 11 tools: security.trial, captcha.solve, security.score, security.honeypot, security.address, and 6 more. Their descriptions and schemas cost roughly 999 tokens of context every time the server is loaded.

### Does the Freysa Security MCP server require authentication?

Its publisher declares no required credentials for Freysa Security. We have not been able to confirm that against the live endpoint, and a server can require authorisation without declaring it here.

### Is the Freysa Security MCP server still maintained?

Freysa Security has been unreachable for long enough that we treat it as dead, and its score is pinned to zero. We last reached this channel on 27 August 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

## Links

- Remote endpoint: https://economic-agent-369.freysa.dev/mcp
- Changelog RSS feed: https://verifymcp.io/servers/dev-freysa-economic-agent-369-freysa-intelligence/economic-agent-369.xml
- Changelog JSON feed: https://verifymcp.io/servers/dev-freysa-economic-agent-369-freysa-intelligence/economic-agent-369.json
- HTML version of this page: https://verifymcp.io/servers/dev-freysa-economic-agent-369-freysa-intelligence/economic-agent-369