Paddock
REMOTE · PADDOCK.FINANCE
Pre-payment verification for AI agents.
Available components
Last scanned (1 hour ago)
Scores higher than 86% of remote servers
Reachable. Last reached 25 Oct 2026.
Category Finance and Payments
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security80
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- No authorisation is required to call this server. Every tool declares its destructiveHint and none is destructive, so open access doesn't expose one. See how to fix → View diagnostics → Partial
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- The HSTS (Strict-Transport-Security) header is present. View diagnostics → Pass
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability64
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 3465 tokens (~266/item across 13 items; 13 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management77
- Stability observed for 23 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Tool Safety75
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- 0 of 1 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "verify_before_pay" implies "pay" and declares readOnlyHint instead, contradicting what its own name says it does. See how to fix → Fail
- An AI judge read all 14 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 25 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 73 to 77. That category is still filling its 30-day observation window: 22 days of observed history at the previous scan, 23 at this one. The score rises as the window fills, whether or not the server changes.
- 23 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 67 to 70. That category is still filling its 30-day observation window: 20 days of observed history at the previous scan, 21 at this one. The score rises as the window fills, whether or not the server changes.
- 21 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 60 to 63. That category is still filling its 30-day observation window: 18 days of observed history at the previous scan, 19 at this one. The score rises as the window fills, whether or not the server changes.
- 19 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 53 to 57. That category is still filling its 30-day observation window: 16 days of observed history at the previous scan, 17 at this one. The score rises as the window fills, whether or not the server changes.
- 16 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 43 to 47. That category is still filling its 30-day observation window: 13 days of observed history at the previous scan, 14 at this one. The score rises as the window fills, whether or not the server changes.
- 14 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 37 to 40. That category is still filling its 30-day observation window: 11 days of observed history at the previous scan, 12 at this one. The score rises as the window fills, whether or not the server changes.
- 12 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 27 to 33. That category is still filling its 30-day observation window: 8 days of observed history at the previous scan, 10 at this one. The score rises as the window fills, whether or not the server changes.
- 10 Oct 26 +2
No change was recorded against any check on this day. Stability & Change Management went from 17 to 27. That category is still filling its 30-day observation window: 5 days of observed history at the previous scan, 8 at this one. The score rises as the window fills, whether or not the server changes.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 25 Oct 2026 · Probed https://paddock.finance/api/mcp/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=paddock.finance | CN=WE1,O=Google Trust Services,C=US | 13 Oct 2026 | 11 Jan 2027 | ECDSA 256 | ECDSA-SHA256 | fcd5209aadb519f713716527b9352ef1 |
| SANs: paddock.finance, *.paddock.finance | ||||||
| CN=WE1,O=Google Trust Services,C=US (CA) | CN=GTS Root R4,O=Google Trust Services LLC,C=US | 13 Dec 2023 | 20 Feb 2029 | ECDSA 256 | ECDSA-SHA384 | 7ff31977972c224a76155d13b6d685e3 |
| CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) | CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE | 15 Nov 2023 | 28 Jan 2028 | ECDSA 384 | SHA256-RSA | 7fe530bf331343bedd821610493d8a1b |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of paddock.finance. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| finance. | present | 28624 | 8 | Verified |
| paddock.finance. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
| Header | Value |
|---|---|
| strict-transport-security | max-age=63072000 |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://paddock.finance/api/mcp/mcp | Verified | 200 | |
| http (plaintext) | http://paddock.finance/api/mcp/mcp | HTTPS enforced | 308 | https://paddock.finance/api/mcp/mcp |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
check_payee Check Payee ~281
Is this the seller's wallet, before my agent pays it? Fast payee check before an agent pays. Send the resource URL and the payment terms you are about to sign: payee wallet, network and amount. Paddock answers from its daily settlement record in one call, with no live probe, and returns pass, warn, fail or unknown. Only fail recommends blocking. Free without a key up to 25 checks a day, or 1000 a day with a free key. For a full check against the seller's live payment terms, use verify_before_pay. Past the free limits, $0.01 per call over x402.
| Name | Type | Req | Description |
|---|---|---|---|
| amount_atomic | string | – | Amount in atomic units |
| api_key | string | – | Paddock API key. A free key (pk_free_) is enough for this tool — POST an email to paddock.finance/api/keys/free to get one. Builder/Pro Agent keys also work. |
| asset | string | – | Token address. Echoed back, not checked |
| network | string | yes | CAIP-2 or x402 friendly name, e.g. eip155:8453, base, solana |
| pay_to | string | yes | The payee wallet from the payment requirements |
| url | string | yes | The resource URL the agent is about to pay |
No output schema declared.
No examples provided.
get_best_value_provider Get Best-Value Provider ~203
Which provider in this category should my agent pick? Paid - $0.02 per call via x402, or a Builder / Pro Agent key. Over MCP only, 1 free trial call/day is available without a key. Ranks a category by reliability (7-day share of probes that succeeded), reputation (unique buyers), and price, returning every input so the score can be checked. The composite formula is published in the route and in the docs, and Paddock does not sell positions in this ranking. Valid categories: llm, data, search, infra, content, markets, payments, comms (aliases accepted).
| Name | Type | Req | Description |
|---|---|---|---|
| api_key | string | – | Optional Paddock API key (Builder/Pro Agent subscription). Omit to use the free trial (1 call/day) or to see x402 pay-per-query payment details. |
| category | string | yes | Category name, e.g. 'llm', 'data', 'markets' |
No output schema declared.
No examples provided.
get_category_detail Get Category Detail ~196
Who's selling in this category, and who's actually getting paid? Free key - a free pk_free_ key covers it against a shared 10 calls/day. Every service in a category with daily transactions, USDC volume, unique buyers, and reliability score, from the nightly snapshot. Valid categories: llm, data, search, infra, content, markets, payments, comms. Accepts common aliases (e.g. 'LLM inference' -> llm, 'scraping' -> data, 'trading' -> markets, 'defi' -> markets).
| Name | Type | Req | Description |
|---|---|---|---|
| api_key | string | – | Paddock API key. A free key (pk_free_) is enough for this tool — POST an email to paddock.finance/api/keys/free to get one. Builder/Pro Agent keys also work. |
| category | string | yes | Category name, e.g. 'llm', 'data', 'markets' |
No output schema declared.
No examples provided.
get_changes Get Changes ~154
What changed since a date I name? Paid - $0.10 per call via x402, or a Builder / Pro Agent key. Over MCP only, 1 free trial call/day is available without a key. Diffs today against any snapshot up to 90 days back — new services, retired services, category share shifts, top movers, with the figures on both sides.
| Name | Type | Req | Description |
|---|---|---|---|
| api_key | string | – | Optional Paddock API key (Builder/Pro Agent subscription). Omit to use the free trial (1 call/day) or to see x402 pay-per-query payment details. |
| since | string | yes | Comparison date in YYYY-MM-DD format, earlier than today (UTC), max 90 days back. |
No output schema declared.
No examples provided.
get_circular_signal Get Circular Signal ~177
Is this facilitator's volume real, or is it paying itself? Paid - $0.99 per call via x402, or a Builder / Pro Agent key. Over MCP only, 1 free trial call/day is available without a key. Wash/circular-settlement signal per facilitator: flagged clusters, flagged volume and share, self-funding percentage, detection date. Methodology public (v0.1). Patterns attach to the facilitator only — no seller wallet addresses, operator identity, or per-wallet rows are ever returned.
| Name | Type | Req | Description |
|---|---|---|---|
| api_key | string | – | Optional Paddock API key (Builder/Pro Agent subscription). Omit to use the free trial (1 call/day) or to see x402 pay-per-query payment details. |
| window | string | – | Reporting window for the trend context (default 30d). |
No output schema declared.
No examples provided.
get_liveness Get Liveness ~231
Was this domain up at last night's probe, per someone who isn't the seller? Free key - a free pk_free_ key covers it against a shared 10 calls/day; $0.001 per call via x402 beyond it. Over MCP only, 1 free trial call/day is available without a key. Per-domain 7-day share of probes that succeeded, latency p50/p95, sample counts, and last-probe time — including domains with no payment history at all. Sourced from an independent third-party monitoring feed, captured NIGHTLY: this is a daily series, not a live probe — for a check taken at query time use verify_before_pay. up is 7-day share of probes that succeeded >= 0.95 across every probed endpoint on the domain.
| Name | Type | Req | Description |
|---|---|---|---|
| api_key | string | – | Optional Paddock API key (Builder/Pro Agent subscription). Omit to use the free trial (1 call/day) or to see x402 pay-per-query payment details. |
| domain | string | yes | Service domain to look up, e.g. 'api.example.com' |
No output schema declared.
No examples provided.
get_market_summary Get Market Summary ~111
How big is agent commerce today? (The citation number.) Keyless - no key, no payment, no rate limit. Returns daily transactions, USDC spend, unique buyer agents, live providers, and top categories by share. Each category's share_of_transactions is its share of CATEGORIZED (attributed) transactions — named categories only, NOT a share of the full-ecosystem daily_transactions total; only the top 6 are returned, so the shown shares sum to <100% by design.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_niche_gaps Get Niche Gaps ~167
Where is demand outrunning supply? Free key - a free pk_free_ key covers it against a shared 10 calls/day; $0.01 per call via x402 beyond it. Over MCP only, 1 free trial call/day is available without a key. Every category ranked by opportunity score (high volume, few providers), with concentration and an Open/Tightening/Consolidating/Mature signal, and the published thresholds behind that label.
| Name | Type | Req | Description |
|---|---|---|---|
| api_key | string | – | Optional Paddock API key (Builder/Pro Agent subscription). Omit to use the free trial (1 call/day) or to see x402 pay-per-query payment details. |
| top | integer | – | Optional: return only the top N categories by opportunity_score (1-50). |
No output schema declared.
No examples provided.
get_provider_revenue Get Provider Revenue ~268
Who earns the most, and how much of the market can that answer see? Paid - $0.99 per call via x402, or a Builder / Pro Agent key. Over MCP only, 1 free trial call/day is available without a key. Resolved by payTo wallet attribution, not by counting events. ATTRIBUTED universe only, never the full-ecosystem census: facilitator pass-through and circular-flagged wallets are excluded from the leaderboard; unresolved wallets are not dropped — they surface as one explicit unattributed row (transaction share only, no dollar figure exists for them). Also reports whether the recipient list was complete on every aggregated day, and flags (retroactive_exclusion_caveat) any day before 2026-07-28 where a wallet added to the exclusion lists afterward could not be retroactively re-checked.
| Name | Type | Req | Description |
|---|---|---|---|
| api_key | string | – | Optional Paddock API key (Builder/Pro Agent subscription). Omit to use the free trial (1 call/day) or to see x402 pay-per-query payment details. |
| top | integer | – | Return only the top N providers by revenue_usd (1-100, default 20). |
| window | integer | – | Days to aggregate (1-90, default 7). |
No output schema declared.
No examples provided.
get_report_data Get Report Data ~209
What are the numbers behind the monthly report? Paid - $0.99 per call via x402, or a Builder / Pro Agent key. Metadata is free. No free trial on this tool. The monthly State of Agent Commerce as structured JSON: every figure with its universe label and methodology version, plus trends, category breakdowns, protocol comparison and reliability. Any Agent Commerce Index (ACI) block is a retained historical print — the index is suspended (ADR 0006) and no new prints are computed. Free metadata (title, TOC, executive summary excerpt) is available without payment at /api/mcp/report-data.
| Name | Type | Req | Description |
|---|---|---|---|
| api_key | string | – | Optional Paddock API key (Builder/Pro Agent subscription). Omit to use the free trial (1 call/day) or to see x402 pay-per-query payment details. |
| month | string | – | Optional report month in YYYY-MM format (e.g. 2026-06). Defaults to the latest published month. |
No output schema declared.
No examples provided.
get_token_metrics Get Token Metrics ~312
Is today's number a real move or ordinary noise? Free key - a free pk_free_ key covers it against a shared 10 calls/day; $0.01 per call via x402 beyond it. Over MCP only, 1 free trial call/day is available without a key. Paddock's own first-party series — the same chart data the public /charts page reads — queryable by metric and date range. Metrics: spend_share_over_time, daily_transactions, category_concentration, new_services, liveness_score, aci. The aci metric returns the Agent Commerce Index series, which is SUSPENDED (ADR 0006): existing prints are retained and served, no new prints are computed, so that series does not advance. This is Paddock's series, not token prices; third-party token market data is deliberately not resold here.
| Name | Type | Req | Description |
|---|---|---|---|
| api_key | string | – | Optional Paddock API key (Builder/Pro Agent subscription). Omit to use the free trial (1 call/day) or to see x402 pay-per-query payment details. |
| category | string | – | Category id for category_concentration (e.g. 'llm'). |
| days | integer | – | Lookback window in days for the chart series (1-730, default 90). |
| from | string | – | Start month YYYY-MM (aci metric only). |
| metric | string | yes | Which series to return. |
| to | string | – | End month YYYY-MM (aci metric only). |
No output schema declared.
No examples provided.
get_whale_activity Get Whale Activity ~172
Where did the large settlements go? Paid - $0.99 per call via x402, or a Builder / Pro Agent key. Over MCP only, 1 free trial call/day is available without a key. Large settlements over a window, aggregated by facilitator, category and size band, plus per-category mover counts. Size and where, never who — no individual seller identity is returned.
| Name | Type | Req | Description |
|---|---|---|---|
| api_key | string | – | Optional Paddock API key (Builder/Pro Agent subscription). Omit to use the free trial (1 call/day) or to see x402 pay-per-query payment details. |
| min_usd | number | – | Large-settlement threshold in USD (default 1000). |
| window | integer | – | Mover comparison window in days (1-90, default 7). |
No output schema declared.
No examples provided.
verify_before_pay Verify Before Pay ~904
Should my agent pay this endpoint right now? Free key - a free pk_free_ key covers it against a shared 10 calls/day; $0.25 per call via x402 beyond it. Over MCP only, 1 free trial call/day is available without a key. CALL THIS BEFORE YOUR AGENT AUTHORIZES ANY x402 PAYMENT. An unpaid GET and POST at query time decode the 402 from the body AND the payment-required header; HTTP 200 is never treated as live. A contract mismatch is route:false and names the field (network, asset, seller, price). Includes independent paid-fulfillment results where available — whether a third party has actually paid this endpoint and got a valid response back, with the settlement hash. Test the result with route === true: the string "inconclusive" is truthy, and it is the one case where you must not pay on our say-so. The bias is deliberate: where evidence is incomplete, verify_before_pay favors inconclusive over a false pass — it will more often decline to clear a good endpoint than clear a bad one. route: true means the live contract matched your expectations — it is not an all-clear on every signal: stale settlement, a circular flag, a payTo divergence, and a failed request pre-flight can each coexist with it, so read the checks block rather than route alone. route_state carries the same verdict as route, always as a string ("true", "false", "inconclusive"), for clients that cannot type a boolean-or-string field. contract_and_request_ok is the narrower combined verdict: true only when route is true AND your own declared request passed pre-flight, false when either is bad, and the string "not_assessed" when a term was never established (usually because you passed no intended_params). Test it with === true; contract_and_request_ok_excludes names the risk categories it is silent on. No success-rate field is returned, deliberately: Paddock observes settlements, not failed calls, so recency and frequency are reported instead. Pass attest: true to also issue a signed, publicly fetchable reco…
| Name | Type | Req | Description |
|---|---|---|---|
| api_key | string | – | Paddock API key. A free key (pk_free_) is enough for this tool — POST an email to paddock.finance/api/keys/free to get one. Builder/Pro Agent keys also work. |
| attest | boolean | – | Also issue a signed, publicly fetchable record of this verdict. Returns an attestation id and a URL a third party can verify independently against Paddock's published key. |
| endpoint_url | string | – | The resource URL your agent is about to pay, e.g. 'https://api.example.com/x402/search'. This is what gets probed. |
| expect_asset | string | – | Asset contract address you expect, e.g. Base USDC. A mismatch returns route:false. |
| expect_network | string | – | Network you expect, e.g. 'eip155:8453' or 'base'. A mismatch returns route:false. |
| expect_price_usdc | number | – | Price in dollars you expect to pay, e.g. 0.01. Any difference returns route:false and names the field. |
| expect_seller | string | – | Seller domain you expect, e.g. 'api.example.com'. A mismatch returns route:false. |
| intended_params | string | – | Parameter NAMES your request will carry, comma-separated or as a query string, e.g. 'slug,limit' or '?slug=amazon-us'. Values are discarded. Checked against the schema the 402 declares; a missing req… |
| intended_params_empty | boolean | – | Set true if your paid request will carry NO parameters at all. That is an assertion and it is checked: against a challenge that declares anything required, an empty request fails pre-flight. Omitting… |
| pay_to | string | – | The recipient wallet from the 402 you are about to settle. CHECKED against the live challenge: if this endpoint is not currently asking to be paid at that wallet, route is false. Give this, endpoint_… |
No output schema declared.
No examples provided.
How do I install the Paddock MCP server?
Paddock is a hosted endpoint at https://paddock.finance/api/mcp/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · paddock.finance
claude mcp add --transport http finance-paddock-paddock 'https://paddock.finance/api/mcp/mcp'
What is the Paddock MCP server?
Paddock is an MCP server listed in the public MCP registry as finance.paddock/paddock. Pre-payment verification for AI agents. This page covers its hosted endpoint (https://paddock.finance/api/mcp/mcp).
Is the Paddock MCP server safe to use?
Paddock scores 81 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the Paddock MCP server expose?
Paddock exposes 13 tools: verify_before_pay, check_payee, get_market_summary, get_liveness, get_circular_signal, and 8 more. Their descriptions and schemas cost roughly 3,385 tokens of context every time the server is loaded.
Does the Paddock MCP server require authentication?
No. We connected to Paddock without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the Paddock MCP server still maintained?
Paddock is still listed as active in the MCP registry. We last reached this channel on 25 October 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.