Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

dev.workers.kikoribera03.flat-rate-llm/x402-tools

REMOTE · FLAT-RATE-LLM.KIKORIBERA03.WORKERS.DEV · SCANNED SEP 20

61 x402 pay-per-call tools that chain: each answer names the next call. No API key, no account.

Available components

remote · flat-rate-llm.kikoribera03.workers.dev 65
+3 this week 65 Trust /100
Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →

Endpoint Security46
Transport & Reachability100
Schema Quality & AI Usability74
  • AI-judged instruction clarity (excellent).Pass
  • Context-footprint check failed: tool/resource definitions use about 8338 tokens (~126/item across 66 items; 66 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management37
  • Stability observed for 11 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 100% of tool parameters carry a description.Pass
Tool Safety100
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • We read all 66 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
  • An AI judge read all 67 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Install

How do I install the dev.workers.kikoribera03.flat-rate-llm/x402-tools MCP server?

dev.workers.kikoribera03.flat-rate-llm/x402-tools is a hosted endpoint at https://flat-rate-llm.kikoribera03.workers.dev/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

remote · flat-rate-llm.kikoribera03.workers.dev

# add to Claude Code
claude mcp add --transport http dev-workers-kikoribera03-flat-rate-llm-x402-tool 'https://flat-rate-llm.kikoribera03.workers.dev/mcp'
// .cursor/mcp.json
{
  "mcpServers": {
    "dev-workers-kikoribera03-flat-rate-llm-x402-tool": {
      "url": "https://flat-rate-llm.kikoribera03.workers.dev/mcp"
    }
  }
}
// .vscode/mcp.json
{
  "servers": {
    "dev-workers-kikoribera03-flat-rate-llm-x402-tool": {
      "type": "http",
      "url": "https://flat-rate-llm.kikoribera03.workers.dev/mcp"
    }
  }
}
# ~/.codex/config.toml
[mcp_servers.dev-workers-kikoribera03-flat-rate-llm-x402-tool]
url = "https://flat-rate-llm.kikoribera03.workers.dev/mcp"
// opencode.json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "dev-workers-kikoribera03-flat-rate-llm-x402-tool": {
      "type": "remote",
      "url": "https://flat-rate-llm.kikoribera03.workers.dev/mcp",
      "enabled": true
    }
  }
}
# add to OpenClaw
openclaw mcp add dev-workers-kikoribera03-flat-rate-llm-x402-tool --url 'https://flat-rate-llm.kikoribera03.workers.dev/mcp' --transport streamable-http
# ~/.hermes/config.yaml
mcp_servers:
  dev-workers-kikoribera03-flat-rate-llm-x402-tool:
    url: "https://flat-rate-llm.kikoribera03.workers.dev/mcp"
// ~/.netclaw/config/netclaw.json
{
  "McpServers": {
    "dev-workers-kikoribera03-flat-rate-llm-x402-tool": {
      "Transport": "http",
      "Url": "https://flat-rate-llm.kikoribera03.workers.dev/mcp"
    }
  }
}
# add to Vellum
assistant mcp add dev-workers-kikoribera03-flat-rate-llm-x402-tool -t streamable-http -u 'https://flat-rate-llm.kikoribera03.workers.dev/mcp'
// mcp.json
{
  "mcpServers": {
    "dev-workers-kikoribera03-flat-rate-llm-x402-tool": {
      "type": "http",
      "url": "https://flat-rate-llm.kikoribera03.workers.dev/mcp"
    }
  }
}

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 20 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 33 to 37. That category is still filling its 30-day observation window: 10 days of observed history at the previous scan, 11 at this one. The score rises as the window fills, whether or not the server changes.

  • 17 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 23 to 27. That category is still filling its 30-day observation window: 7 days of observed history at the previous scan, 8 at this one. The score rises as the window fills, whether or not the server changes.

  • 15 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 17 to 20. That category is still filling its 30-day observation window: 5 days of observed history at the previous scan, 6 at this one. The score rises as the window fills, whether or not the server changes.

  • 14 Sept 26 0
    • The server rewrote its instructions, which are the text every model session reads security
    • Tool “catalog” rewrote its description, which is the text the model reads security
    • Tool “red_email_check” rewrote its description, which is the text the model reads security
    • New tool “ai_image” functional
    • New tool “ai_speech” functional
    • New tool “ai_transcribe” functional
  • 13 Sept 26 +1
    • The server rewrote its instructions, which are the text every model session reads security
    • Tool “catalog” rewrote its description, which is the text the model reads security
    • New tool “evm_token_price” functional
  • 12 Sept 26 0
    • The server rewrote its instructions, which are the text every model session reads security
    • Tool “catalog” rewrote its description, which is the text the model reads security
    • New tool “crypto_sanctions” functional
  • 11 Sept 26 0
    • The server rewrote its instructions, which are the text every model session reads security
    • Tool “content_advice” rewrote its description, which is the text the model reads security
    • Tool “content_fact” rewrote its description, which is the text the model reads security
    • Tool “content_horror_story” rewrote its description, which is the text the model reads security
    • Tool “content_joke” rewrote its description, which is the text the model reads security
    • Tool “content_riddle” rewrote its description, which is the text the model reads security
    • Tool “content_roast” rewrote its description, which is the text the model reads security
    • Tool “content_word_of_the_day” rewrote its description, which is the text the model reads security
    • Tool “evm_balance” rewrote its description, which is the text the model reads security
    • Tool “evm_block” rewrote its description, which is the text the model reads security
    • Tool “evm_call” rewrote its description, which is the text the model reads security
    • Tool “evm_chains” rewrote its description, which is the text the model reads security
    • Tool “evm_ens” rewrote its description, which is the text the model reads security
    • Tool “evm_erc20_allowance” rewrote its description, which is the text the model reads security
    • Tool “evm_erc20_balance” rewrote its description, which is the text the model reads security
    • Tool “evm_estimate_gas” rewrote its description, which is the text the model reads security
    • Tool “evm_fees” rewrote its description, which is the text the model reads security
    • Tool “evm_gas” rewrote its description, which is the text the model reads security
    • Tool “evm_is_contract” rewrote its description, which is the text the model reads security
    • Tool “evm_nft_owner” rewrote its description, which is the text the model reads security
    • Tool “evm_nonce” rewrote its description, which is the text the model reads security
    • Tool “evm_portfolio” rewrote its description, which is the text the model reads security
    • Tool “evm_receipt” rewrote its description, which is the text the model reads security
    • Tool “evm_storage” rewrote its description, which is the text the model reads security
    • Tool “evm_token_info” rewrote its description, which is the text the model reads security
    • Tool “evm_token_safety” rewrote its description, which is the text the model reads security
    • Tool “evm_tx” rewrote its description, which is the text the model reads security
    • Tool “fx_convert” rewrote its description, which is the text the model reads security
    • Tool “llm_completion” rewrote its description, which is the text the model reads security
    • Tool “random_coinflip” rewrote its description, which is the text the model reads security
    • Tool “random_dice” rewrote its description, which is the text the model reads security
    • Tool “random_number” rewrote its description, which is the text the model reads security
    • Tool “random_password” rewrote its description, which is the text the model reads security
    • Tool “random_pick” rewrote its description, which is the text the model reads security
    • Tool “random_shuffle” rewrote its description, which is the text the model reads security
    • Tool “red_asn” rewrote its description, which is the text the model reads security
    • Tool “red_dnsbl” rewrote its description, which is the text the model reads security
    • Tool “red_domain_check” rewrote its description, which is the text the model reads security
    • Tool “red_email_check” rewrote its description, which is the text the model reads security
    • Tool “red_ip” rewrote its description, which is the text the model reads security
    • Tool “red_whois” rewrote its description, which is the text the model reads security
    • Tool “time_convert” rewrote its description, which is the text the model reads security
    • Tool “time_now” rewrote its description, which is the text the model reads security
    • Tool “time_zones” rewrote its description, which is the text the model reads security
    • Tool “util_address” rewrote its description, which is the text the model reads security
    • Tool “util_base64” rewrote its description, which is the text the model reads security
    • Tool “util_hex” rewrote its description, which is the text the model reads security
    • Tool “util_iban” rewrote its description, which is the text the model reads security
    • Tool “util_keccak256” rewrote its description, which is the text the model reads security
    • Tool “util_phone” rewrote its description, which is the text the model reads security
    • Tool “util_selector” rewrote its description, which is the text the model reads security
    • Tool “util_sha256” rewrote its description, which is the text the model reads security
    • Tool “util_units” rewrote its description, which is the text the model reads security
    • Tool “util_uuid” rewrote its description, which is the text the model reads security
    • Tool “util_vat” rewrote its description, which is the text the model reads security
    • Tool “util_verify_signature” rewrote its description, which is the text the model reads security
    • Tool “web_read” rewrote its description, which is the text the model reads security
    • Tool “web_status” rewrote its description, which is the text the model reads security
    • Tool “catalog” rewrote its description, which is the text the model reads security
    • Schema quality: 5678 → 7488 ▼ functional
    • Schema quality: 5678 → 6998 ▼ functional
    • New tool “red_cert” functional
    • New tool “weather_forecast” functional
    • New tool “weather_now” functional
    • New tool “fx_convert” functional
    • New tool “red_asn” functional
    • New tool “red_dnsbl” functional
    • New tool “red_ip” functional
    • New tool “red_whois” functional
    • New tool “util_iban” functional
    • New tool “util_phone” functional
    • New tool “util_vat” functional
    • New tool “web_status” functional
  • 10 Sept 26 0
    • A breaking change shipped without a version bump: still 1.0.0 ▼ security
    • The server rewrote its instructions, which are the text every model session reads security
    • Tool “catalog” rewrote its description, which is the text the model reads security
    • Tool “evm_balance” rewrote its description, which is the text the model reads security
    • Tool “evm_block” rewrote its description, which is the text the model reads security
    • Tool “evm_chains” rewrote its description, which is the text the model reads security
    • Tool “evm_erc20_allowance” rewrote its description, which is the text the model reads security
    • Tool “evm_erc20_balance” rewrote its description, which is the text the model reads security
    • Tool “evm_estimate_gas” rewrote its description, which is the text the model reads security
    • Tool “evm_fees” rewrote its description, which is the text the model reads security
    • Tool “evm_gas” rewrote its description, which is the text the model reads security
    • Tool “evm_is_contract” rewrote its description, which is the text the model reads security
    • Tool “evm_nft_owner” rewrote its description, which is the text the model reads security
    • Tool “evm_nonce” rewrote its description, which is the text the model reads security
    • Tool “evm_portfolio” rewrote its description, which is the text the model reads security
    • Tool “evm_receipt” rewrote its description, which is the text the model reads security
    • Tool “evm_storage” rewrote its description, which is the text the model reads security
    • Tool “evm_token_info” rewrote its description, which is the text the model reads security
    • Tool “evm_tx” rewrote its description, which is the text the model reads security
    • Tool “llm_completion” rewrote its description, which is the text the model reads security
    • Schema quality: pass → fail ▼ functional
    • “random_pick” changed the type of “items”: array → string ▼ functional
    • “random_shuffle” changed the type of “items”: array → string ▼ functional
    • Stability: unverified → 0.03 ▲ functional
    • New tool “content_horror_story” functional
    • New tool “content_roast” functional
    • New tool “evm_token_safety” functional
    • New tool “red_domain_check” functional
    • New tool “red_email_check” functional
    • New tool “web_read” functional
    • New tool “content_advice” functional
    • New tool “content_fact” functional
    • New tool “content_joke” functional
    • New tool “content_riddle” functional
    • New tool “content_word_of_the_day” functional
    • New tool “random_coinflip” functional
    • New tool “random_dice” functional
    • New tool “random_number” functional
    • New tool “random_password” functional
    • New tool “random_pick” functional
    • New tool “random_shuffle” functional
    • New tool “time_convert” functional
    • New tool “time_now” functional
    • New tool “time_zones” functional
    • “random_pick” reworded the description of “items” cosmetic
    • “random_shuffle” reworded the description of “items” cosmetic
Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 20 Sept 2026 · Probed https://flat-rate-llm.kikoribera03.workers.dev/mcp

TLS valid

Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .

Subject Issuer Valid from Valid until Key Signature Serial
CN=kikoribera03.workers.dev CN=WE1,O=Google Trust Services,C=US 8 Sept 2026 7 Dec 2026 ECDSA 256 ECDSA-SHA256 9e9a4a2d2a49facd13f6a9a565df5132
SANs: kikoribera03.workers.dev, *.kikoribera03.workers.dev
CN=WE1,O=Google Trust Services,C=US (CA) CN=GTS Root R4,O=Google Trust Services LLC,C=US 13 Dec 2023 20 Feb 2029 ECDSA 256 ECDSA-SHA384 7ff31977972c224a76155d13b6d685e3
CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE 15 Nov 2023 28 Jan 2028 ECDSA 384 SHA256-RSA 7fe530bf331343bedd821610493d8a1b

Background: What to check on a remote MCP endpoint →

DNSSEC insecure

Validation of flat-rate-llm.kikoribera03.workers.dev. — Not signed

Zone DS Keys Algorithms Outcome
. trust_anchor 20326, 38696 8, 8 Verified
dev. present 60074 8 Verified
workers.dev. absent Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation
Authentication No authorisation required

The endpoint answered without asking for a token. Anyone who knows the URL can reach it.

Result No authorisation required
HTTP status 200

Background: How OAuth 2.1 works in the 2026 MCP spec →

Transports 2 probes
Transport URL Outcome Status Location
streamable-http https://flat-rate-llm.kikoribera03.workers.dev/mcp Verified 200
http (plaintext) http://flat-rate-llm.kikoribera03.workers.dev/mcp Inconclusive 405
MCP tools · 66 exposed · ~8,266 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
ai_image ~174

Generates a 1024x1024 JPEG from a text prompt with FLUX.1 [schnell] in about 2 seconds. Returns a hosted image URL valid for 24 hours that you can hand straight to the next tool; add inline=true to also get the base64. Choose 1-8 diffusion steps (default 4). You are only charged if the image is delivered. No API key, no account. $0.01 per call, paid over x402 (USDC).

NameTypeReqDescription
inlineboolean–Also return the JPEG as base64. Default false.
promptstringyesWhat to draw, up to 2048 characters. English works best.
stepsnumber–Diffusion steps, 1-8. More is sharper and slower. Default 4.

No output schema declared.

No examples provided.

ai_speech ~156

Turns text into natural speech with MeloTTS in English, Spanish, French, Chinese, Japanese or Korean, in about a second. Returns a hosted WAV URL valid for 24 hours plus its size; add inline=true to also get the base64. Up to 2000 characters per call. You are only charged if the audio is delivered. No API key, no account. $0.005 per call, paid over x402 (USDC).

NameTypeReqDescription
inlineboolean–Also return the WAV as base64. Default false.
langstring–en, es, fr, zh, ja or ko. Default en.
textstringyesWhat to say, up to 2000 characters.

No output schema declared.

No examples provided.

ai_transcribe ~188

Transcribes an audio file with Whisper large v3 turbo: pass an https URL (mp3, wav, flac, m4a, ogg, up to 10 MB) or base64 audio in a POST. Returns the text, the detected language with its probability, the duration, and timed segments; add words=true for word-level timestamps. Around 100 languages. You are only charged if the transcript is delivered. No API key, no account. $0.01 per call, paid over x402 (USDC).

NameTypeReqDescription
audiostring–Alternative to url: the audio as base64 (POST only).
languagestring–Optional ISO code to skip detection, e.g. es.
urlstring–https URL of the audio file, up to 10 MB.
wordsboolean–Include word-level timestamps. Default false.

No output schema declared.

No examples provided.

catalog ~56

FREE, no payment needed. Lists all 65 tools with a real example of the input and of the output each one returns, plus what a call costs and how to pay for it. Call this first if a tool answered HTTP 402.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

content_advice ~133

One piece of practical advice about work, life or money, in English or Spanish. Short, concrete and usable - not a fortune cookie. Filterable by topic, with an id to avoid repeats and a seed for reproducibility. $0.0025 per call, paid over x402 (USDC).

NameTypeReqDescription
excludearray–Ids already seen, comma-separated in a GET.
languagestring–en | es. Defaults to en.
seedstring–Same seed always returns the same advice.
topicstring–work | life | money. Omit for any.

No output schema declared.

No examples provided.

content_fact ~136

One curious but true fact, in English or Spanish, filtered by topic: science, computing, history or nature. Takes parameters, returns an id so you can avoid repeats across a session, and accepts a seed for a reproducible answer. $0.0025 per call, paid over x402 (USDC).

NameTypeReqDescription
excludearray–Ids already seen, comma-separated in a GET.
languagestring–en | es. Defaults to en.
seedstring–Same seed always returns the same fact.
topicstring–science | computing | history | nature. Omit for any.

No output schema declared.

No examples provided.

content_horror_story ~164

One two-sentence horror story, in English or Spanish, by theme: domestic, technological, cosmic or folk. Returned SPLIT into setup and payoff as well as joined, so a narrating agent can deliver the first line, pause, and then land the second. Takes parameters, returns an id to avoid repeats, and accepts a seed for a reproducible answer. $0.0025 per call, paid over x402 (USDC).

NameTypeReqDescription
excludearray–Ids already seen, comma-separated in a GET.
languagestring–en | es. Defaults to en.
seedstring–Same seed always returns the same story.
themestring–domestic | technological | cosmic | folk. Omit for any.

No output schema declared.

No examples provided.

content_joke ~141

One random joke, in English or Spanish, filtered by category: programming, crypto or general. Unlike the usual one-liner endpoints this one takes parameters, returns an id so you can exclude what you have already seen, and accepts a seed for a reproducible answer. $0.0025 per call, paid over x402 (USDC).

NameTypeReqDescription
categorystring–programming | crypto | general. Omit for any.
excludearray–Ids already seen, comma-separated in a GET.
languagestring–en | es. Defaults to en.
seedstring–Same seed always returns the same joke.

No output schema declared.

No examples provided.

content_riddle ~144

One riddle by difficulty, in English or Spanish, with the answer AND the SHA-256 of the answer in lowercase. The hash is the point: an agent can check whether its guess is right without reading the solution first, which no other riddle endpoint lets you do. $0.0025 per call, paid over x402 (USDC).

NameTypeReqDescription
difficultystring–easy | medium | hard. Omit for any.
excludearray–Ids already seen, comma-separated in a GET.
languagestring–en | es. Defaults to en.
seedstring–Same seed always returns the same riddle.

No output schema declared.

No examples provided.

content_roast ~188

One lighthearted developer roast aimed at a target YOU choose - javascript, python, css, git, regex, kubernetes, agile or legacy code - and at the severity you ask for. Every other roast endpoint returns something generic; this one lets a code-review agent roast the actual stack in front of it. Bilingual, seedable and repeat-free. $0.0025 per call, paid over x402 (USDC).

NameTypeReqDescription
excludearray–Ids already seen, comma-separated in a GET.
languagestring–en | es. Defaults to en.
seedstring–Same seed always returns the same roast.
severitystring–mild | medium | savage. Omit for any.
targetstring–javascript | python | css | git | regex | kubernetes | agile | legacy. Omit for any.

No output schema declared.

No examples provided.

content_word_of_the_day ~138

The word of the day with its definition, part of speech and an example sentence, in English or Spanish. Genuinely of the day: it is picked deterministically from the UTC date, so everyone gets the same word and you can reproduce any past day by passing it. The usual endpoints just return a random word and call it the word of the day. $0.0025 per call, paid over x402 (USDC).

NameTypeReqDescription
datestring–YYYY-MM-DD in UTC. Defaults to today, and any past date is reproducible.
languagestring–en | es. Defaults to en.

No output schema declared.

No examples provided.

crypto_sanctions ~137

Checks one crypto address against the OFAC SDN list published by the US Treasury, across 16 currencies including Ethereum, Bitcoin, Tron and USDT. A hit returns the actual list entry - sanctioned entity, its type and its sanctions programmes - not a risk score. Exact matching only, never fuzzy. Every answer carries the publication date of the list snapshot. No API key, no account. $0.01 per call, paid over x402 (USDC).

NameTypeReqDescription
addressstringyesThe crypto address to check. Any chain: EVM, Bitcoin, Tron, Litecoin, Monero and the rest of the list.

No output schema declared.

No examples provided.

evm_balance ~104

Native coin balance (ETH, MATIC...) for any address, on Base, Ethereum, Polygon, Arbitrum or Optimism. Flat price, no rate limits, no API key. Via eth_getBalance. $0.005 per call, paid over x402 (USDC).

NameTypeReqDescription
addressstringyes0x-prefixed address to look up.
chainstring–base | ethereum | polygon | arbitrum | optimism. Defaults to base.

No output schema declared.

No examples provided.

evm_block ~79

Latest block height and timestamp of any supported chain, plus how old the chain head is in seconds. Tells an agent whether a node is in sync. Via eth_getBlockByNumber. $0.005 per call, paid over x402 (USDC).

NameTypeReqDescription
chainstring–base | ethereum | polygon | arbitrum | optimism.

No output schema declared.

No examples provided.

evm_call ~150

Runs any read-only contract call (eth_call) with your own calldata and returns the raw result, on five chains, with no API key and no rate limit. The escape hatch for anything the typed endpoints do not cover. $0.005 per call, paid over x402 (USDC).

NameTypeReqDescription
blockstring–Block tag or number. Defaults to latest.
chainstring–base | ethereum | polygon | arbitrum | optimism.
datastringyes0x-prefixed calldata: 4-byte selector plus encoded arguments.
fromstring–Optional caller address, for calls that check msg.sender.
tostringyesContract address to call.

No output schema declared.

No examples provided.

evm_chains ~65

Live health of every supported chain in one call: chain id, block height and how stale the head is. Use it to pick a chain that is actually responding. Via eth_getBlockByNumber. $0.005 per call, paid over x402 (USDC).

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

evm_ens ~96

Resolves an ENS name to its address, or an address back to its primary ENS name, reading Ethereum mainnet directly. Names are what humans paste and addresses are what chains need. $0.005 per call, paid over x402 (USDC).

NameTypeReqDescription
addressstring–Address to reverse-resolve. Use instead of name.
namestring–ENS name to resolve, such as vitalik.eth.

No output schema declared.

No examples provided.

evm_erc20_allowance ~128

How much of a token a spender is still allowed to move on an owner's behalf, and whether that approval is unlimited. The check to run before an approve, and the one that finds forgotten infinite approvals. Via eth_call (allowance). $0.005 per call, paid over x402 (USDC).

NameTypeReqDescription
chainstring–base | ethereum | polygon | arbitrum | optimism.
ownerstringyesAddress that owns the tokens.
spenderstringyesAddress allowed to spend them.
tokenstringyesERC20 contract address.

No output schema declared.

No examples provided.

evm_erc20_balance ~110

ERC20 token balance for any wallet - USDC, USDT, DAI or any token - via balanceOf. Returns the raw amount and the decimals so you can format it. Via eth_call (balanceOf). $0.005 per call, paid over x402 (USDC).

NameTypeReqDescription
addressstringyesWallet to look up.
chainstring–base | ethereum | polygon | arbitrum | optimism.
tokenstringyesERC20 contract address.

No output schema declared.

No examples provided.

evm_estimate_gas ~130

Estimates the gas a transaction would need and prices it at the current gas price, before you sign anything. Also the cheapest way to find out that a call would revert. Via eth_estimateGas. $0.005 per call, paid over x402 (USDC).

NameTypeReqDescription
chainstring–base | ethereum | polygon | arbitrum | optimism.
datastring–Optional 0x calldata.
fromstring–Sender address.
tostringyesDestination address.
valuestring–Optional value in wei, as a decimal string.

No output schema declared.

No examples provided.

evm_fees ~91

Suggested maxFeePerGas and maxPriorityFeePerGas from the last 20 blocks of real fee history, at slow, normal and fast percentiles. Beats guessing a gas price and getting stuck in the mempool. Via eth_feeHistory. $0.005 per call, paid over x402 (USDC).

NameTypeReqDescription
chainstring–base | ethereum | polygon | arbitrum | optimism.

No output schema declared.

No examples provided.

evm_gas ~80

Current gas price and base fee for any supported chain, in wei and gwei, plus the cost estimate of a plain transfer. For agents planning a transaction. Via eth_gasPrice. $0.005 per call, paid over x402 (USDC).

NameTypeReqDescription
chainstring–base | ethereum | polygon | arbitrum | optimism.

No output schema declared.

No examples provided.

evm_is_contract ~87

Tells whether an address is a smart contract or a plain wallet, and how big its bytecode is. A cheap safety check before sending funds. Via eth_getCode. $0.005 per call, paid over x402 (USDC).

NameTypeReqDescription
addressstringyesAddress to inspect.
chainstring–base | ethereum | polygon | arbitrum | optimism.

No output schema declared.

No examples provided.

evm_nft_owner ~110

Who owns a given ERC721 token id, plus its tokenURI and collection name in the same call. Answers is this NFT still theirs without an indexer or an API key. Via eth_call (ownerOf). $0.005 per call, paid over x402 (USDC).

NameTypeReqDescription
chainstring–base | ethereum | polygon | arbitrum | optimism.
contractstringyesERC721 contract address.
tokenIdstringyesToken id, in decimal.

No output schema declared.

No examples provided.

evm_nonce ~82

Next transaction nonce for any address, and whether the address is a contract. What an agent needs before signing a transaction. Via eth_getTransactionCount. $0.005 per call, paid over x402 (USDC).

NameTypeReqDescription
addressstringyesAddress to look up.
chainstring–base | ethereum | polygon | arbitrum | optimism.

No output schema declared.

No examples provided.

evm_portfolio ~112

Native balance plus the balance of every token you list, on one chain, in a single paid call - each with symbol and decimals already applied. One request instead of one per token. Via eth_getBalance + eth_call. $0.005 per call, paid over x402 (USDC).

NameTypeReqDescription
addressstringyesWallet to inspect.
chainstring–base | ethereum | polygon | arbitrum | optimism.
tokensarray–Up to 20 ERC20 contract addresses.

No output schema declared.

No examples provided.

evm_receipt ~94

Receipt of a transaction: whether it succeeded or reverted, gas used, fee actually paid, and how many logs it emitted. The call that answers did my transaction work. Via eth_getTransactionReceipt. $0.005 per call, paid over x402 (USDC).

NameTypeReqDescription
chainstring–base | ethereum | polygon | arbitrum | optimism.
hashstringyes32-byte transaction hash.

No output schema declared.

No examples provided.

evm_storage ~119

Reads a raw storage slot of any contract, decoded as hex, integer and address. How you inspect proxy implementation slots, owners and paused flags that have no public getter. Via eth_getStorageAt. $0.005 per call, paid over x402 (USDC).

NameTypeReqDescription
addressstringyesContract to read.
chainstring–base | ethereum | polygon | arbitrum | optimism.
slotstring–Slot number in decimal, or a 0x slot key such as an EIP-1967 hash.

No output schema declared.

No examples provided.

evm_token_info ~87

Name, symbol, decimals and total supply of any ERC20 contract in one call. Useful to label a token address before showing it to a user. Via eth_call. $0.005 per call, paid over x402 (USDC).

NameTypeReqDescription
chainstring–base | ethereum | polygon | arbitrum | optimism.
tokenstringyesERC20 contract address.

No output schema declared.

No examples provided.

evm_token_price ~157

Spot price of any ERC20 read straight from the deepest Uniswap V3 pool against USDC, on Base, Ethereum, Polygon, Arbitrum or Optimism. Returns the pool address, fee tier, liquidity, sqrtPriceX96, tick and block, so the number can be audited instead of trusted. No aggregator and no API key: the source is the chain itself. Via eth_call. $0.005 per call, paid over x402 (USDC).

NameTypeReqDescription
chainstring–base | ethereum | polygon | arbitrum | optimism.
quotestring–Token to price it against. Defaults to the chain's native USDC.
tokenstringyesERC20 contract address to price.

No output schema declared.

No examples provided.

evm_token_safety ~157

Pre-trade risk check for any ERC20 on Base, Ethereum, Polygon, Arbitrum or Optimism, straight from the deployed bytecode and live state. Detects mint, pause, blacklist, upgradeable proxy and mutable buy/sell tax powers, and reports whether ownership is renounced. Unlike LLM-written verdicts this returns the EVIDENCE - the exact selector found and its byte offset - so an agent can apply its own policy. Deterministic: same contract, same answer. $0.01 per call, paid over x402 (USDC).

NameTypeReqDescription
chainstring–base | ethereum | polygon | arbitrum | optimism.
tokenstringyesERC20 contract address to check.

No output schema declared.

No examples provided.

evm_tx ~87

Full transaction details by hash, merged with its receipt: from, to, value, gas used, status and block. One call instead of two. Via eth_getTransactionByHash. $0.005 per call, paid over x402 (USDC).

NameTypeReqDescription
chainstring–base | ethereum | polygon | arbitrum | optimism.
hashstringyesTransaction hash.

No output schema declared.

No examples provided.

fx_convert ~186

Converts an amount between any two of the ~30 currencies in the European Central Bank's official reference rates, on today's publication or on a past date within the last 90 days. Returns the rate used, its publication date and whether it was crossed through the euro. This is the auditable rate accounting and customs ask for, not a live market quote: it is published once a day and it is reproducible. $0.005 per call, paid over x402 (USDC).

NameTypeReqDescription
amountnumber–Amount to convert. Defaults to 1.
datestring–Optional publication date, YYYY-MM-DD, within the last 90 days. Defaults to the latest publication.
fromstringyesSource currency, ISO 4217, e.g. USD.
tostringyesTarget currency, ISO 4217, e.g. EUR.

No output schema declared.

No examples provided.

llm_completion ~161

LLM inference at a flat $1.00 per call, with no account, no API key and no token metering. POST a prompt, get the completion: the same price for 10 tokens or 4000, while metered gateways scale with usage. Automatic failover across several large models; typical response under 1s. Pay per call in USDC over x402 - nothing to sign up for. $1.00 per call, paid over x402 (USDC).

NameTypeReqDescription
maxTokensnumber–Output token cap, up to 4000. Does not change the price.
promptstringyesThe request for the model. Up to 24000 characters.
sistemastring–Optional system instruction.

No output schema declared.

No examples provided.

random_coinflip ~88

Flip one or more fair coins and get heads or tails, with the tally. Cryptographically random, not Math.random. For tie-breaks and A/B splits an agent has to decide on its own. $0.0025 per call, paid over x402 (USDC).

NameTypeReqDescription
countnumber–How many coins to flip, 1-100. Defaults to 1.

No output schema declared.

No examples provided.

random_dice ~121

Roll dice with any number of faces and get every roll plus the total. Uses the platform CSPRNG with rejection sampling, so every face is equally likely - a plain modulo is biased. Standard dice notation: 3d6, 1d20. $0.0025 per call, paid over x402 (USDC).

NameTypeReqDescription
countnumber–How many dice to roll, 1-100. Defaults to 1.
facesnumber–Faces per die, 2-1000000. Defaults to 6.

No output schema declared.

No examples provided.

random_number ~133

Uniform random integers in any range you give, with or without repeats. Rejection sampling, so the ends of the range are not slightly less likely - which is what happens with modulo. $0.0025 per call, paid over x402 (USDC).

NameTypeReqDescription
countnumber–How many to draw, 1-100. Defaults to 1.
maxnumber–Highest value, inclusive. Defaults to 100.
minnumber–Lowest value, inclusive. Defaults to 1.
uniqueboolean–No repeats. Needs a range at least as wide as count.

No output schema declared.

No examples provided.

random_password ~129

Generate strong random secrets from the platform CSPRNG, with the entropy in bits so you can judge them. Four alphabets, including one with no look-alike characters for anything a human has to read back. $0.0025 per call, paid over x402 (USDC).

NameTypeReqDescription
alphabetstring–alnum | legible | hex | completo. Defaults to legible.
countnumber–How many to generate, 1-50. Defaults to 1.
lengthnumber–Characters per secret, 8-256. Defaults to 20.

No output schema declared.

No examples provided.

random_pick ~131

Pick one or more items at random from a list you send, with or without repeats. The list is yours, so this is the unbiased chooser an agent needs when it has options and no reason to prefer any. $0.0025 per call, paid over x402 (USDC).

NameTypeReqDescription
countnumber–How many to pick, 1-100. Defaults to 1.
itemsstringyesThe options, comma-separated. A JSON array of strings is also accepted in a POST body.
repeatboolean–Allow the same item more than once. Defaults to false.

No output schema declared.

No examples provided.

random_shuffle ~87

Shuffle a list into a uniformly random order with Fisher-Yates over the platform CSPRNG. Every permutation is equally likely, which sorting by a random key does not give you. $0.0025 per call, paid over x402 (USDC).

NameTypeReqDescription
itemsstringyesThe list to shuffle, comma-separated. A JSON array of strings is also accepted in a POST body.

No output schema declared.

No examples provided.

red_asn ~156

Everything the authoritative public sources say about one autonomous system number: the RDAP registry record via the ARIN-to-RIR referral chain (holder, status, allocation dates, abuse contact), the AS name, country and RIR from Team Cymru's DNS service, and the prefixes it is announcing right now in the global routing table, from RIPEstat, split into IPv4 and IPv6 with a sample. Keyless and free at the source. The natural second call after /v1/red/ip gives you an origin ASN. $0.005 per call, paid over x402 (USDC).

NameTypeReqDescription
asnstringyesThe AS number, with or without the AS prefix: 15169 or AS15169.

No output schema declared.

No examples provided.

red_cert ~141

Every currently valid TLS certificate publicly issued for one domain, read from the Certificate Transparency logs: issuer, validity window, days to expiry, revocation status and every hostname each certificate covers. It reports what was ISSUED, which is how you find certificates you did not know existed - not what the server is serving today. No API key, no account. $0.005 per call, paid over x402 (USDC).

NameTypeReqDescription
domainstringyesThe domain to look up. A full URL or an email address is accepted and reduced to its host.
subdomainsboolean–Also return certificates issued for subdomains. Defaults to false.

No output schema declared.

No examples provided.

red_dnsbl ~153

Checks one IPv4 address against nine public DNS blocklists at once — SpamCop, UCEPROTECT, PSBL, Barracuda, DroneBL and four more — and returns each list's raw return code plus the reason text the list itself publishes, not a score. Every list is re-checked on each call with its RFC 5782 test entry, so a dead list or one that refuses queries comes back as unavailable instead of reading as clean. Includes the delisting URL for each hit. $0.005 per call, paid over x402 (USDC).

NameTypeReqDescription
ipstringyesThe IPv4 address to check. IPv6 is not accepted: these nine lists are IPv4 zones.

No output schema declared.

No examples provided.

red_domain_check ~116

Everything DNS says about one domain in a single call: whether it is registered, its A and AAAA addresses, nameservers, MX servers, SPF and DMARC, DNSSEC, and whether it looks parked. Built for going through a list of domains one at a time. Live DNS, no API key, no account. $0.005 per call, paid over x402 (USDC).

NameTypeReqDescription
domainstringyesThe domain to check. A full URL or an email address is accepted and reduced to its host.

No output schema declared.

No examples provided.

red_email_check ~142

Scores one email address 0-100 with a verdict (ok, risky, disposable, undeliverable, invalid) and the evidence under it: every point lost is itemised with the field that proves it. 12,141 disposable domains from two maintained open lists pinned to a commit, 4,897 free providers, 1,018 role names, typo fix (gmial.com > gmail.com), live MX/SPF/DMARC. No SMTP probe, no API key. $0.005 per call, paid over x402 (USDC).

NameTypeReqDescription
emailstringyesThe address to check, e.g. someone@example.com.

No output schema declared.

No examples provided.

red_ip ~139

Looks up one IPv4 or IPv6 address against the two authoritative, keyless public sources: RDAP registry data (who holds the block, in which country, since when, abuse contact) via the ARIN-to-RIR referral chain, and the origin ASN from Team Cymru's DNS service. No city-level geolocation and no VPN/proxy detection — those need a licensed commercial database this endpoint deliberately does not use. Built for going through a list of IPs one at a time. $0.005 per call, paid over x402 (USDC).

NameTypeReqDescription
ipstringyesThe IPv4 or IPv6 address to look up.

No output schema declared.

No examples provided.

red_whois ~141

Registration data for one domain, read from the registry's own RDAP service through the IANA bootstrap — not scraped from port-43 whois text. Returns creation, expiry and last-change dates, age and days to expiry, registrar, EPP status codes, nameservers, DNSSEC and the abuse contact. TLDs with no RDAP server say so instead of reporting the domain as unregistered. No API key, no account. $0.005 per call, paid over x402 (USDC).

NameTypeReqDescription
domainstringyesThe domain to look up. A full URL or an email address is accepted and reduced to its host.

No output schema declared.

No examples provided.

time_convert ~193

Convert a time between any two IANA time zones, with daylight saving applied from the runtime's own tz database. Returns both sides with their UTC offset, abbreviation and DST flag, plus the UTC instant and the difference in hours. Warns when the time you asked for does not exist or happens twice because the clocks change that day: the two cases that quietly make a hand-made conversion wrong. $0.0025 per call, paid over x402 (USDC).

NameTypeReqDescription
fromstringyesSource IANA time zone, e.g. "Europe/Madrid". Required.
timestring–Wall clock as YYYY-MM-DD HH:MM in the "from" zone, or an ISO string with Z or an offset, or a unix timestamp, or "now". Defaults to now.
tostringyesTarget IANA time zone, e.g. "Asia/Tokyo". Required.

No output schema declared.

No examples provided.

time_now ~120

The current time in any IANA time zone, in every form an agent needs at once: ISO with offset, 24-hour, 12-hour, weekday, unix timestamp and UTC. It also says whether daylight saving is active right now and what the zone's standard offset is, so a shifted clock can be told apart from a permanent one. $0.0025 per call, paid over x402 (USDC).

NameTypeReqDescription
zonestringyesIANA time zone, e.g. "Asia/Tokyo" or "UTC". Required.

No output schema declared.

No examples provided.

time_zones ~154

Search the full IANA time zone list and get each zone's current UTC offset, abbreviation, local time and DST state. Use it to turn a city or a country into the exact zone name the other endpoints expect, or to find every zone sitting at a given offset right now. $0.0025 per call, paid over x402 (USDC).

NameTypeReqDescription
limitnumber–Maximum zones returned, 1-500. Defaults to 50.
offsetstring–Keep only zones at this current UTC offset, e.g. "+09:00" or "-5".
searchstring–Substring matched against the zone name, case-insensitive. Omit to list them all.

No output schema declared.

No examples provided.

Common questions

What is the dev.workers.kikoribera03.flat-rate-llm/x402-tools MCP server?

dev.workers.kikoribera03.flat-rate-llm/x402-tools is an MCP server listed in the public MCP registry as dev.workers.kikoribera03.flat-rate-llm/x402-tools. 61 x402 pay-per-call tools that chain: each answer names the next call. No API key, no account. This page covers its hosted endpoint (https://flat-rate-llm.kikoribera03.workers.dev/mcp).

Is the dev.workers.kikoribera03.flat-rate-llm/x402-tools MCP server safe to use?

dev.workers.kikoribera03.flat-rate-llm/x402-tools scores 65 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the dev.workers.kikoribera03.flat-rate-llm/x402-tools MCP server expose?

dev.workers.kikoribera03.flat-rate-llm/x402-tools exposes 66 tools: catalog, llm_completion, evm_balance, evm_erc20_balance, evm_token_info, and 61 more. Their descriptions and schemas cost roughly 8,266 tokens of context every time the server is loaded.

Does the dev.workers.kikoribera03.flat-rate-llm/x402-tools MCP server require authentication?

No. We connected to dev.workers.kikoribera03.flat-rate-llm/x402-tools without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.

Is the dev.workers.kikoribera03.flat-rate-llm/x402-tools MCP server still maintained?

dev.workers.kikoribera03.flat-rate-llm/x402-tools is still listed as active in the MCP registry. We last reached this channel on 20 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.