Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

QuickBuild agent tools (x402)

REMOTE · QUICKBUILD.QUYNGUYENBAC.WORKERS.DEV

Screenshot, TTS, image gen, translate, summarize, URL-to-Markdown, site audit. Pay per call (x402).

65 Trust /100

Last scanned (20 hours ago)

Scores higher than 48% of remote servers

Reachable. Last reached 22 Oct 2026.

Category AI and Machine Learning

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →

Endpoint Security63
Transport & Reachability100
Schema Quality & AI Usability62
  • AI-judged instruction clarity (excellent).Pass
  • Context-footprint check failed: tool/resource definitions use about 4436 tokens (~246/item across 18 items; 18 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management7
  • Stability observed for 2 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 100% of tool parameters carry a description.Pass
Tool Safety100
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • We read all 18 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
  • An AI judge read all 19 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 21 Oct 26 +1
    • Schema quality: 3782 → 4436 ▼ functional
    • Stability: unverified → 0.03 ▲ functional
    • New tool “crypto_price” functional
    • New tool “fx_rate” functional
  • 20 Oct 26 64

    First indexed and scored.

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 22 Oct 2026 · Probed https://quickbuild.quynguyenbac.workers.dev/mcp

TLS valid

Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .

Subject Issuer Valid from Valid until Key Signature Serial
CN=quynguyenbac.workers.dev CN=YE1,O=Let's Encrypt,C=US 12 Oct 2026 10 Jan 2027 ECDSA 256 ECDSA-SHA384 5dcf3556b33cfc557baef93fbf32c4cee4f
SANs: *.quynguyenbac.workers.dev, quynguyenbac.workers.dev
CN=YE1,O=Let's Encrypt,C=US (CA) CN=Root YE,O=ISRG,C=US 3 Sept 2025 2 Sept 2028 ECDSA 384 ECDSA-SHA384 5ddd70dd31f801c85c186a7a04b80afe
CN=Root YE,O=ISRG,C=US (CA) CN=ISRG Root X2,O=Internet Security Research Group,C=US 13 May 2026 2 Sept 2032 ECDSA 384 ECDSA-SHA384 872165fc34b6e5fba8add5b3705fb53a
CN=ISRG Root X2,O=Internet Security Research Group,C=US (CA) CN=ISRG Root X1,O=Internet Security Research Group,C=US 13 May 2026 2 Sept 2032 ECDSA 384 SHA256-RSA 6c8f1dc727c7117f7baf853ac980f9cd

Background: What to check on a remote MCP endpoint →

DNSSEC insecure

Validation of quickbuild.quynguyenbac.workers.dev. — Not signed

Zone DS Keys Algorithms Outcome
. trust_anchor 20326, 38696 8, 8 Verified
dev. present 60074 8 Verified
workers.dev. absent Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation
Authentication No authorisation required

The endpoint answered without asking for a token. Anyone who knows the URL can reach it.

Result No authorisation required
HTTP status 200

Background: How OAuth 2.1 works in the 2026 MCP spec →

Transports 2 probes
Transport URL Outcome Status Location
streamable-http https://quickbuild.quynguyenbac.workers.dev/mcp Verified 200
http (plaintext) http://quickbuild.quynguyenbac.workers.dev/mcp Inconclusive 405
MCP tools · 18 exposed · ~4,303 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
base_gas_price ~169

[PAID $0.001 USDC per call via x402 on Base; errors are free] Live gas snapshot for Base mainnet (chain 8453) read from public Base RPC: latest block number/time/utilization, base fee, eth_gasPrice, eth_maxPriorityFeePerGas, the last 10 blocks of base fees, slow/standard/fast EIP-1559 fee suggestions (10th/50th/90th percentile tips) in gwei and wei, and the estimated total cost (L2 execution + OP Stack L1 data-fee upper bound) of an ETH transfer, an ERC-20 transfer and a swap in ETH and USD (Chainlink ETH/USD on Base). No params. Cached 4 s. Errors are never charged.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

base_token_info ~227

[PAID $0.002 USDC per call via x402 on Base; errors are free] Inspect a token or any address on Base mainnet: contract vs EOA (incl. EIP-7702 delegation), bytecode size, ERC-20 name/symbol/decimals/totalSupply (raw and formatted; bytes32 symbols handled), proxy implementation (EIP-1967, beacon, ZeppelinOS/FiatToken), whether it is a well-known Base token (guards against spoofed symbols), and optionally the balance of `holder`. Read live from public Base RPC; metadata cached 1 h. All params optional: defaults to USDC on Base. Invalid input = 400, never charged.

NameTypeReqDescription
addressstring–Token / contract address on Base (0x + 40 hex). Optional: defaults to USDC 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913.
holderstring–Optional address whose balance of this token to include.

No output schema declared.

No examples provided.

base_tx_status ~219

[PAID $0.002 USDC per call via x402 on Base; errors are free] Look up one transaction on Base mainnet by hash: status (success, failed or pending), block, timestamp, confirmations, from/to, value, method id, gas used, effective gas price, fee split into L2 execution and L1 data fee (ETH and USD), contract created, and decoded ERC-20 Transfer events (token, symbol, from, to, amount; up to 20). Useful to confirm a payment landed. Read live from public Base RPC. All params optional: defaults to a confirmed USDC x402 payment. Unknown hash = 404, invalid hash = 400, never charged.

NameTypeReqDescription
hashstring–Transaction hash (0x + 64 hex). Optional: defaults to 0x20215b4a54f0a39995f3afbd748d7b52c3a1922685ddf08e5f694ea1e89b52bf.

No output schema declared.

No examples provided.

base_wallet_balances ~286

[PAID $0.002 USDC per call via x402 on Base; errors are free] Balances of one address on Base mainnet in a single call: native ETH, the well-known tokens USDC, USDT, USDbC, DAI, WETH, cbETH, wstETH, AERO (non-zero only, or all with includeZero=true), plus up to 10 extra ERC-20 contracts you pass in `tokens` (symbol/name/decimals read on-chain). Also nonce, account type (EOA, EIP-7702 delegated EOA, or contract) and a USD total for ETH/WETH (Chainlink) and stablecoins. Read live from public Base RPC via Multicall3; cached 10 s. All params optional: defaults to a well-known public address. Invalid input = 400, never charged.

NameTypeReqDescription
addressstring–Base address (0x + 40 hex). Optional: defaults to 0xd8dA6BF26964aF9D7eEd9e03E53415D37aA96045 (vitalik.eth).
includeZeroboolean–Also list well-known tokens with zero balance (default false).
tokensstring–Optional comma-separated extra ERC-20 contract addresses on Base (max 10).

No output schema declared.

No examples provided.

crypto_price ~347

[PAID $0.001 USDC per call via x402 on Base; errors are free] Live crypto prices for up to 25 coins per call: pass tickers in `symbols` (BTC,ETH,SOL,AERO,...; common tickers built in, others resolved by CoinGecko search to the largest coin with that ticker), CoinGecko `ids`, or one token `address` + `chain` (base default; ethereum, arbitrum, optimism, polygon, bsc, avalanche, solana). Returns price, market cap, 24h volume and 24h % change in each `vs` currency (usd default; up to 5, e.g. usd,eur,btc) plus last-updated time. Data: CoinGecko public API, cached 30 s; falls back to Coinbase spot rates (price only) if CoinGecko is unavailable. All params optional: with none it returns BTC and ETH in USD. Unknown coins = 404, invalid input = 400, never charged.

NameTypeReqDescription
addressstring–Optional token contract address; returns that token price (overrides symbols/ids).
chainstring–Chain of `address` (default base).
idsstring–Comma-separated CoinGecko coin ids, e.g. bitcoin,aerodrome-finance (optional).
symbolsstring–Comma-separated tickers, e.g. BTC,ETH,SOL (max 25). Optional: defaults to BTC,ETH.
vsstring–Comma-separated quote currencies (max 5), e.g. usd,eur,btc. Default usd.

No output schema declared.

No examples provided.

free_site_check ~83

[FREE, 10 calls/hour per IP] Quick check of one public website: homepage meta/OG/canonical, security headers, HTTPS, and up to 20 links tested for breakage. For the deeper 3-page audit with leaked-key scan use website_audit (paid).

NameTypeReqDescription
urlstringyesPublic http(s) URL or hostname to check.

No output schema declared.

No examples provided.

fx_rate ~307

[PAID $0.002 USDC per call via x402 on Base; errors are free] Foreign-exchange rates from one base currency (`from`, default USD) to a list of currencies (`to`, comma-separated, or "all"; default 14 majors incl. EUR, GBP, JPY, CNY, INR, KRW, VND), with `amount` converted. Live mode uses Coinbase public exchange rates (updated about every minute, 160+ ISO 4217 currencies plus XAU/XAG), falling back to exchangerate-api daily rates. With `date=YYYY-MM-DD` it returns the ECB reference rates for that day (Frankfurter, ~30 major currencies, back to 1999-01-04). All params optional: with none it returns USD to 14 major currencies. Invalid codes = 400, never charged.

NameTypeReqDescription
amountnumber–Amount in `from` to convert (default 1).
datestring–Optional YYYY-MM-DD for historical ECB reference rates (since 1999-01-04). Omit for live rates.
fromstring–Base currency, ISO 4217 code (default USD).
tostring–Comma-separated target codes (max 50) or "all". Default: EUR,GBP,JPY,CNY,CHF,CAD,AUD,INR,KRW,SGD,HKD,MXN,BRL,VND.

No output schema declared.

No examples provided.

generate_image ~175

[PAID $0.01 USDC per call via x402 on Base; errors are free] Generate an original 1024x1024 image from a text prompt with FLUX.1 [schnell] on Workers AI (about 2-5 s). Returns JSON with image_base64 + mimeType, or the raw image bytes with format=jpeg. Content policy: no sexual/nude, gore, hate, real or famous people, or ID documents/currency; such prompts get HTTP 400 and are not charged. All params optional: with no prompt a sample watercolor lighthouse is drawn.

NameTypeReqDescription
promptstring–What to draw (max 1000 chars). Optional: defaults to a watercolor lighthouse.
stepsinteger–Diffusion steps, more = more detail (default 4).

No output schema declared.

No examples provided.

llm_chat ~277

[PAID $0.003 USDC per call via x402 on Base; errors are free] One-shot LLM completion on Cloudflare Workers AI with a minimal interface: give `prompt` (and optionally `system`, or OpenAI-style `messages`), get {text, model, finish_reason, usage}. Models: llama-3.1-8b (default), llama-3.2-3b, llama-3.2-1b, mistral-7b, granite-4.0-micro. max_tokens capped at 512, input up to 24000 chars, Llama Guard 3 safety check, 503 "capacity" when the daily budget is used up. Errors are never charged. All params optional: with none it answers a short sample question. For the OpenAI wire format use POST /v1/chat/completions.

NameTypeReqDescription
max_tokensinteger–Max output tokens (default/cap 512).
messagesarray–Optional OpenAI-style history (POST JSON).
modelstring–Model alias (default llama-3.1-8b).
promptstring–User message. Optional: defaults to a short sample question.
systemstring–Optional system instruction.
temperaturenumber–Sampling temperature.

No output schema declared.

No examples provided.

page_metadata ~129

[PAID $0.005 USDC per call via x402 on Base; errors are free] Fetch one public web page and return structured metadata: title, meta description, canonical, lang, robots, Open Graph and Twitter card tags, favicon, RSS/Atom feeds, JSON-LD @types, and internal/external links (up to 100 each). Good for link previews, unfurling and quick site triage.

NameTypeReqDescription
urlstring–Public http(s) URL (hostname, not IP). Private/reserved addresses are refused. Optional: defaults to https://example.com.

No output schema declared.

No examples provided.

rerank_documents ~281

[PAID $0.002 USDC per call via x402 on Base; errors are free] Cohere/Jina-style rerank: POST {query, documents: string[] | {text}[], top_n, return_documents} and get {results: [{index, relevance_score, document?}]} sorted by relevance. Models (Cloudflare Workers AI): bge-reranker-base (cross-encoder, English/Chinese, scores 0..1); bge-m3 (multilingual similarity scoring) (default bge-reranker-base; other names map to it). Up to 100 documents, each scored on its first 4000 chars; one fixed price per call. Use after vector search to pick the best passages for an LLM. Errors are never charged. All params optional: with none it ranks a small sample.

NameTypeReqDescription
documentsarray–Documents to rank: strings or {text} objects (max 100).
modelstring–Rerank model (default bge-reranker-base).
querystring–Search query (max 2000 chars). Optional with documents omitted: a sample is ranked.
return_documentsboolean–Include the document text in each result (default false).
top_ninteger–Return only the best N (default all).

No output schema declared.

No examples provided.

screenshot_url ~337

[PAID $0.008 USDC per call via x402 on Base; errors are free] Render a public web page in a real headless Chrome (JavaScript executed, waits for network idle) and return a screenshot: viewport (default 1280x800) or full page (up to 8000 px tall), PNG or JPEG, optional dark mode and extra wait. JSON with image_base64 + finalUrl/status/title, or raw image bytes with format=png|jpeg. Typically 2-6 s (up to ~25 s when busy). Use it for visual QA, link previews, archiving, checking what a page really shows, or feeding a vision model. Adult/malware domains (Cloudflare family DNS) and private addresses are refused. All params optional: with none it captures https://example.com. Errors are never charged.

NameTypeReqDescription
darkModeboolean–Emulate prefers-color-scheme: dark (default false).
fullPageboolean–Capture the whole scrollable page, capped at 8000 px tall (default false).
heightinteger–Viewport height in px (default 800).
qualityinteger–JPEG quality (default 80; jpeg only).
typestring–Image type (default png).
urlstring–Public http(s) URL to capture (hostname, not IP). Optional: defaults to https://example.com.
waitMsinteger–Extra wait after load before capturing, ms (default 0).
widthinteger–Viewport width in px (default 1280).

No output schema declared.

No examples provided.

summarize ~365

[PAID $0.02 USDC per call via x402 on Base; errors are free] Fetch a public web page (or take raw text) and return a structured JSON brief made by Llama 3.3 70B: title, language, contentType, summary, keyPoints, named entities with types, topic tags, concrete facts (prices, dates, versions, limits) as label/value pairs, sentiment and audience. Grounded in the page only, no invented facts. Reads up to 24,000 chars of main content (2 MB HTML, 10 s fetch timeout). All params optional: with none it summarizes https://example.com. GET with query params, or POST a JSON body for long text (up to 200,000 chars accepted, first 24,000 analyzed).

NameTypeReqDescription
focusstring–Optional aspect to emphasize, e.g. "pricing", "API limits", "risks" (max 200 chars).
langstring–Optional output language for summary/keyPoints (ISO 639-1, e.g. "en"). Default: same as the content.
lengthstring–Summary length: short = 1-2 sentences, medium = 3-4 (default), long = 5-8.
maxPointsinteger–Max number of keyPoints (default 5).
textstring–Raw text or Markdown to summarize instead of a URL (optional, max 200000 chars, first 24000 analyzed). Prefer POST for long text.
urlstring–Public http(s) URL to read (hostname, not IP; private addresses refused). Optional: defaults to https://example.com. Ignored when `text` is given.

No output schema declared.

No examples provided.

text_embeddings ~350

[PAID $0.001 USDC per call via x402 on Base; errors are free] Drop-in OpenAI Embeddings endpoint: POST {input: string | string[], model, encoding_format: float|base64, dimensions} and get {object: "list", data: [{embedding, index}], model, usage}. Models (Cloudflare Workers AI): bge-m3 (1024-d, multilingual (100+ languages), 8192-token context); bge-large-en-v1.5 (1024-d, English); bge-base-en-v1.5 (768-d, English); bge-small-en-v1.5 (384-d, English, fastest); embeddinggemma-300m (768-d, multilingual (Google EmbeddingGemma)). Any other model name (e.g. text-embedding-3-small) maps to bge-m3; the actual model is in the response. `dimensions` truncates and re-normalizes. Up to 100 inputs per call, 8000 chars each, 60000 chars total, one fixed price per call. For RAG, semantic search, clustering and dedupe. Errors are never charged. GET ?input= also works; with no params it embeds a sample sentence.

NameTypeReqDescription
dimensionsinteger–Optional output size; vectors are truncated and re-normalized.
encoding_formatstring–float (default) or base64 (little-endian float32).
inputstring|array–Text or array of texts to embed (max 100). Optional: defaults to a sample sentence.
modelstring–Embedding model alias (default bge-m3).

No output schema declared.

No examples provided.

text_to_speech ~193

[PAID $0.005 USDC per call via x402 on Base; errors are free] Turn text (up to 2000 chars) into spoken audio with MeloTTS on Cloudflare Workers AI, in English, Spanish, French, Chinese, Japanese or Korean. Returns JSON with audio_base64 + mimeType (audio/wav, 44.1 kHz mono), or the raw audio bytes with format=wav. Good for voice replies, narration, accessibility and language practice. Text with sexual, hateful or violent content is refused (HTTP 400, not charged). All params optional: with none it speaks a short English sample. GET with query params or POST a JSON body.

NameTypeReqDescription
langstring–Language of the text / voice (default en).
textstring–Text to speak (max 2000 chars). Optional: defaults to a short English sample.

No output schema declared.

No examples provided.

translate ~305

[PAID $0.005 USDC per call via x402 on Base; errors are free] LLM translation (Meta Llama 4 Scout on Workers AI, M2M100 fallback). Give `text`, or a `url` whose main content is extracted as Markdown and translated in blocks, preserving Markdown formatting, URLs and code blocks. Source language auto-detected (or set `from`). Up to 20,000 chars per call (default 8,000). All params optional: with none it translates a short Spanish sample to English. Languages: en,es,fr,de,it,pt,nl,ru,uk,pl,cs,ro,hu,el,bg,sv,da,no,fi,tr,ar,he,fa,hi,bn,ur,ta,zh,ja,ko,vi,th,id,ms,tl,sw.

NameTypeReqDescription
fromstring–Source language code, or "auto" (default: auto-detect).
maxCharsinteger–Max source chars to translate (default 8000).
textstring–Text or Markdown to translate (optional). If omitted and no url, a short Spanish sample is used.
tostring–Target language, ISO 639-1 code or English name (default "en").
urlstring–Public http(s) URL whose main content is translated (optional; used when `text` is absent).

No output schema declared.

No examples provided.

url_to_markdown ~142

[PAID $0.005 USDC per call via x402 on Base; errors are free] Fetch one public web page and return its main content (article/main/body, scripts/nav/footer stripped) as clean Markdown with absolute links, plus title and length. Up to 2 MB HTML, 10 s timeout; optional maxChars (default 50000, max 200000).

NameTypeReqDescription
maxCharsinteger–Truncate markdown to this many characters (default 50000)
urlstring–Public http(s) URL (hostname, not IP). Private/reserved addresses are refused. Optional: defaults to https://example.com.

No output schema declared.

No examples provided.

website_audit ~111

[PAID $0.05 USDC per call via x402 on Base; errors are free] Pre-launch website audit: up to 3 pages crawled, 30 links checked, meta/OG/canonical, security headers, HTTPS, 404 handling, sitemap, and leaked-secret patterns in client JS (masked). Read-only.

NameTypeReqDescription
urlstring–Public http(s) URL (hostname, not IP). Private/reserved addresses are refused. Optional: defaults to https://example.com.

No output schema declared.

No examples provided.

Install

How do I install the QuickBuild agent tools (x402) MCP server?

QuickBuild agent tools (x402) is a hosted endpoint at https://quickbuild.quynguyenbac.workers.dev/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

remote · quickbuild.quynguyenbac.workers.dev

# add to Claude Code
claude mcp add --transport http dev-workers-quynguyenbac-quickbuild-agent-tools 'https://quickbuild.quynguyenbac.workers.dev/mcp'
Common questions

What is the QuickBuild agent tools (x402) MCP server?

QuickBuild agent tools (x402) is an MCP server listed in the public MCP registry as dev.workers.quynguyenbac.quickbuild/agent-tools. Screenshot, TTS, image gen, translate, summarize, URL-to-Markdown, site audit. Pay per call (x402). This page covers its hosted endpoint (https://quickbuild.quynguyenbac.workers.dev/mcp).

Is the QuickBuild agent tools (x402) MCP server safe to use?

QuickBuild agent tools (x402) scores 65 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the QuickBuild agent tools (x402) MCP server expose?

QuickBuild agent tools (x402) exposes 18 tools: website_audit, page_metadata, url_to_markdown, summarize, translate, and 13 more. Their descriptions and schemas cost roughly 4,303 tokens of context every time the server is loaded.

Does the QuickBuild agent tools (x402) MCP server require authentication?

No. We connected to QuickBuild agent tools (x402) without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.

Is the QuickBuild agent tools (x402) MCP server still maintained?

QuickBuild agent tools (x402) is still listed as active in the MCP registry. We last reached this channel on 22 October 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.