Wealth Agent
REMOTE · WEALTH-AGENT.WEALTHAGENT-APP.WORKERS.DEV
x402 pay-per-call tools for AI agents: code review, data clean, briefs, regex, diff, URL meta.
Available components
Last scanned (7 hours ago)
Scores higher than 45% of remote servers
Reachable. Last reached 19 Oct 2026.
Category Security
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security46
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- Authorisation not fully verified: no authorisation is required to call this server, and 2 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe. See how to fix → View diagnostics → Unverified
- HTTPS check failed: the endpoint is reachable over plaintext HTTP. See how to fix → View diagnostics → Fail
- HSTS check failed: the Strict-Transport-Security header is absent. See how to fix → View diagnostics → Fail
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability68
- AI-judged instruction clarity (good).Pass
- Context-footprint check failed: tool/resource definitions use about 2954 tokens (~140/item across 21 items; 21 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management3
- Stability observed for 1 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 21 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 22 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities60
- Spec-recency check failed: implements MCP spec 2025-06-18; the latest is 2026-07-28. See how to fix → Fail
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 19 Oct 26 0
- Stability: unverified → 0.03 ▲ functional
- 18 Oct 26 57
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 19 Oct 2026 · Probed https://wealth-agent.wealthagent-app.workers.dev/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=wealthagent-app.workers.dev | CN=YE1,O=Let's Encrypt,C=US | 12 Oct 2026 | 10 Jan 2027 | ECDSA 256 | ECDSA-SHA384 | 6074223dfac920e4f8b7fb387dd4f816566 |
| SANs: *.wealthagent-app.workers.dev, wealthagent-app.workers.dev | ||||||
| CN=YE1,O=Let's Encrypt,C=US (CA) | CN=Root YE,O=ISRG,C=US | 3 Sept 2025 | 2 Sept 2028 | ECDSA 384 | ECDSA-SHA384 | 5ddd70dd31f801c85c186a7a04b80afe |
| CN=Root YE,O=ISRG,C=US (CA) | CN=ISRG Root X2,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | ECDSA-SHA384 | 872165fc34b6e5fba8add5b3705fb53a |
| CN=ISRG Root X2,O=Internet Security Research Group,C=US (CA) | CN=ISRG Root X1,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | SHA256-RSA | 6c8f1dc727c7117f7baf853ac980f9cd |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of wealth-agent.wealthagent-app.workers.dev. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| dev. | present | 60074 | 8 | Verified |
| workers.dev. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://wealth-agent.wealthagent-app.workers.dev/mcp | Verified | 200 | |
| http (plaintext) | http://wealth-agent.wealthagent-app.workers.dev/mcp | Served over HTTP | 200 |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
agent_status ~74
このエージェントの収益ファネル（拾う→試す→生きていると確認→売り物→掲置→来訪→支払い）を実測値で返し、どこで詰まっているかと次に打つ手を示す。【無料】
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
buy_code_review ~187
Reviews source code and returns line-numbered findings with severity and a concrete fix, combining deterministic static rules (eval, SQL concat, secrets, shell injection) with an AI review. Call it before merging or running untrusted code. Input: {"code": "...", "language": "javascript"}. Paid per call via x402 (USDC on Base, no account, no API key). 【価格】0.75 USDC。【使い方】呼ぶと 402 と PAYMENT-REQUIRED（支払い条件）が返る。USDC で支払い、同じ引数に PAYMENT-SIGNATURE ヘッダを添えて再送すると結果が返る。
| Name | Type | Req | Description |
|---|---|---|---|
| code | string | yes | Source code to review (10-60,000 chars) |
| language | string | – | Optional language hint, e.g. javascript, python, go |
No output schema declared.
No examples provided.
buy_data_clean ~189
Cleans a CSV/TSV/JSON table: removes duplicate and empty rows, trims whitespace, and returns the cleaned CSV with before/after quality checks and per-column stats. Call it before analysing or importing messy tabular data. Input: {"data": "<csv text>"}. Paid per call via x402 (USDC on Base, no account, no API key). 【価格】0.50 USDC。【使い方】呼ぶと 402 と PAYMENT-REQUIRED（支払い条件）が返る。USDC で支払い、同じ引数に PAYMENT-SIGNATURE ヘッダを添えて再送すると結果が返る。
| Name | Type | Req | Description |
|---|---|---|---|
| data | string | yes | Table as CSV / TSV text or a JSON array of objects (max 60,000 chars) |
| format | string | – | Optional input format; auto-detected when omitted |
No output schema declared.
No examples provided.
buy_rea_report ~331
Full-surface analysis of a target: a website, an API, a shipped JS bundle, or (as a prepared runbook) a local artifact such as an ELF/PE/.NET/Mach-O binary, an Electron app.asar, an APK or a jar. Returns a capability map where every claim carries its evidence, the entry points found, feature flags and client-side secret shapes (shapes only, never values), and an explicit list of what could not be determined. Read-only: the target is never executed, a 401/403 is recorded as auth_required and never bypassed, and the response is never resold. Use it to plan an integration, document an undocumented API, or triage a vendor before you build on it. Paid per call via x402 (USDC on Base, no account, no API key). 【価格】0.50 USDC。【使い方】呼ぶと 402 と PAYMENT-REQUIRED（支払い条件）が返る。USDC で支払い、同じ引数に PAYMENT-SIGNATURE ヘッダを添えて再送すると結果が返る。
| Name | Type | Req | Description |
|---|---|---|---|
| focus | string | – | Optional: what you want to learn, e.g. "how do I call their API" |
| target | string | – | Alternative: a local file path (app.asar, *.exe, *.so, *.apk). The analysis cannot run server-side, so a ready-to-run runbook is returned instead |
| url | string | – | Public https URL to analyze (website, API or MCP server) |
No output schema declared.
No examples provided.
buy_research_brief ~163
Returns a one-page research brief with cited source URLs, key findings and open gaps for a question. Call it when an agent needs a sourced answer instead of an unsourced guess. Input: {"question": "..."} (5-400 chars, any language). Paid per call via x402 (USDC on Base, no account, no API key). 【価格】0.25 USDC。【使い方】呼ぶと 402 と PAYMENT-REQUIRED（支払い条件）が返る。USDC で支払い、同じ引数に PAYMENT-SIGNATURE ヘッダを添えて再送すると結果が返る。
| Name | Type | Req | Description |
|---|---|---|---|
| question | string | yes | The question to research (5-400 chars, any language) |
No output schema declared.
No examples provided.
buy_surface_report ~228
Inspect one publicly reachable website or API and return a machine-readable capability report: the entry points it exposes (endpoints, forms, feeds, MCP tools), the evidence behind every finding, and an explicit list of what could not be determined. Only public responses are read; a 401/403 is recorded as auth_required and never bypassed. Use it to plan an integration, document an undocumented API, or triage a vendor before you build on it. Paid per call via x402 (USDC on Base, no account, no API key). 【価格】0.25 USDC。【使い方】呼ぶと 402 と PAYMENT-REQUIRED（支払い条件）が返る。USDC で支払い、同じ引数に PAYMENT-SIGNATURE ヘッダを添えて再送すると結果が返る。
| Name | Type | Req | Description |
|---|---|---|---|
| focus | string | – | Optional: what you want to learn, e.g. "how do I call their API" |
| url | string | yes | Public https URL to inspect (site root or any public page on it) |
No output schema declared.
No examples provided.
csv-json ~177
Convert tabular data between CSV/TSV and a JSON array of objects, in either direction, with detected delimiter and typed columns. Use it when a tool returns CSV but your pipeline needs JSON (or the reverse) and you do not want to run a parser yourself. Paid per call via x402 (USDC on Base, no account, no API key). 【価格】0.02 USDC。【使い方】呼ぶと 402 と PAYMENT-REQUIRED（支払い条件）が返る。USDC で支払い、同じ引数に PAYMENT-SIGNATURE ヘッダを添えて再送すると結果が返る。
| Name | Type | Req | Description |
|---|---|---|---|
| data | string | yes | CSV/TSV text or a JSON array of objects |
| to | string | – | Target format (optional; inferred when omitted) |
No output schema declared.
No examples provided.
diff ~150
Return the line-level diff between two texts as added/removed/unified hunks with counts. Use it to review a patch, compare two API responses, or decide whether two documents actually differ before spending tokens on them. Paid per call via x402 (USDC on Base, no account, no API key). 【価格】0.01 USDC。【使い方】呼ぶと 402 と PAYMENT-REQUIRED（支払い条件）が返る。USDC で支払い、同じ引数に PAYMENT-SIGNATURE ヘッダを添えて再送すると結果が返る。
| Name | Type | Req | Description |
|---|---|---|---|
| a | string | yes | Original text |
| b | string | yes | Changed text |
No output schema declared.
No examples provided.
improve_round ~78
全般の改善ループをその場で回す（無料）。lane を指定しなければカーソル順に n レーン回す。
| Name | Type | Req | Description |
|---|---|---|---|
| lane | string | – | fx / funnel / playbook / perks / rea / discovery / catalog |
| n | number | – | 回すレーン数（既定1） |
No output schema declared.
No examples provided.
improve_status ~42
全般の改善ループの状態（無料）。レーンごとの壁・打ち手・判定と、直近の記録を返す。
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
lab_loop ~109
FX論理の試行錯誤ループ（無料）。状態では「今ぶつかっている壁」と「次の打ち手」を返し、run:true でその場で1ラウンド回して結果を記録する。
| Name | Type | Req | Description |
|---|---|---|---|
| mode | string | – | own=自己資金 / e8=E8チャレンジ（既定 own） |
| run | boolean | – | true で1ラウンド実行（既定は状態のみ） |
No output schema declared.
No examples provided.
list_services ~27
販売中の有料サービスと価格・支払い条件の一覧（無料）
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
perk_deadlines ~122
日本のお得情報（特典・ポイント還元・キャンペーン）を締切が近い順に返す。実額・期限・出典URLつき。【無料】最大5件。全件と条件・手順・人の操作が必要な部分は /api/perks（オーナー向け）。
| Name | Type | Req | Description |
|---|---|---|---|
| limit | number | – | 件数（既定5・最大5） |
| within_days | number | – | 何日以内の締切を返すか（既定7・最大60） |
No output schema declared.
No examples provided.
perk_search ~81
日本のお得情報を本文から検索して返す（実額・期限・出典URLつき）。【無料】最大5件。
| Name | Type | Req | Description |
|---|---|---|---|
| limit | number | – | 件数（既定5・最大5） |
| q | string | yes | 検索語（例: Google Play, ローソン, ポイント還元） |
No output schema declared.
No examples provided.
rea_inspect ~171
REA: 対象の「表面」を解析し、できること（根拠つき）と入口の候補と、分からなかったことを返す。URL ならサイト/API/MCP を、ローカルのパス（.asar/.exe/.so/.apk 等）なら実行手順を返す。【無料】要約版。全件＋根拠の全文は buy_rea_report（0.5 USDC）。認証回避・課金回避・DRM解除はしない。
| Name | Type | Req | Description |
|---|---|---|---|
| target | string | – | ローカルのパス。Worker では実行できないので手順を返す |
| url | string | – | 公開URL（サイト・API・MCP） |
No output schema declared.
No examples provided.
rea_plan ~90
REA: ローカルのファイル種別（elf / pe / macho / asar / apk / jar / js）ごとの解析手順を、実行せずに返す。【無料】実行するのは手元の tools/rea-cli.mjs。
| Name | Type | Req | Description |
|---|---|---|---|
| kind | string | – | elf / pe / macho / asar / apk / jar / js / unknown |
No output schema declared.
No examples provided.
rea_queue ~60
REA の自動投入キュー（X / Reddit / scout / perks から拾った解析対象）の件数と直近の結果を返す。【無料】
| Name | Type | Req | Description |
|---|---|---|---|
| limit | number | – | 件数（既定10・最大20） |
No output schema declared.
No examples provided.
rea_runs ~62
REA: 直近の解析の状態遷移（queued → fetching → parsing → probing → evidence → done/blocked）を返す。【無料】観測用。
| Name | Type | Req | Description |
|---|---|---|---|
| limit | number | – | 件数（既定20・最大50） |
No output schema declared.
No examples provided.
regex ~188
Apply one regular expression to a text blob on the server and return every match with its index and capture groups. Deterministic, so the same input always returns the same answer. Useful for log triage, field extraction and validation at scale. Paid per call via x402 (USDC on Base, no account, no API key). 【価格】0.01 USDC。【使い方】呼ぶと 402 と PAYMENT-REQUIRED（支払い条件）が返る。USDC で支払い、同じ引数に PAYMENT-SIGNATURE ヘッダを添えて再送すると結果が返る。
| Name | Type | Req | Description |
|---|---|---|---|
| flags | string | – | g, i, m, s, u, y (optional) |
| pattern | string | yes | Regular expression (max 200 chars) |
| text | string | yes | Text to search (max 20,000 chars) |
No output schema declared.
No examples provided.
surface_inspect ~98
公開URLを解析し、そのサービスが公開している入口（エンドポイント候補・フォーム・フィード・MCPツール）と根拠、そして分からなかったことを返す。【無料】要約版。全件＋根拠の全文は buy_surface_report（0.25 USDC）。認証回避はしない。
| Name | Type | Req | Description |
|---|---|---|---|
| url | string | yes | 公開 https URL |
No output schema declared.
No examples provided.
url-meta ~169
Fetch one public URL and return machine-readable page metadata: HTTP status, title, meta/og description, canonical URL, language, link count and a short text sample. Honest 4xx/5xx statuses are returned as data, not as errors. Use it for link previews, source triage and citation checks. Paid per call via x402 (USDC on Base, no account, no API key). 【価格】0.03 USDC。【使い方】呼ぶと 402 と PAYMENT-REQUIRED（支払い条件）が返る。USDC で支払い、同じ引数に PAYMENT-SIGNATURE ヘッダを添えて再送すると結果が返る。
| Name | Type | Req | Description |
|---|---|---|---|
| url | string | yes | Absolute http(s) URL of a public page |
No output schema declared.
No examples provided.
How do I install the Wealth Agent MCP server?
Wealth Agent is a hosted endpoint at https://wealth-agent.wealthagent-app.workers.dev/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · wealth-agent.wealthagent-app.workers.dev
claude mcp add --transport http jukky-source-wealth-agent 'https://wealth-agent.wealthagent-app.workers.dev/mcp'
What is the Wealth Agent MCP server?
Wealth Agent is an MCP server listed in the public MCP registry as io.github.jukky-source/wealth-agent. x402 pay-per-call tools for AI agents: code review, data clean, briefs, regex, diff, URL meta. This page covers its hosted endpoint (https://wealth-agent.wealthagent-app.workers.dev/mcp).
Is the Wealth Agent MCP server safe to use?
Wealth Agent scores 57 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the Wealth Agent MCP server expose?
Wealth Agent exposes 21 tools: buy_research_brief, buy_data_clean, buy_code_review, url-meta, csv-json, and 16 more. Their descriptions and schemas cost roughly 2,796 tokens of context every time the server is loaded.
Does the Wealth Agent MCP server require authentication?
No. We connected to Wealth Agent without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the Wealth Agent MCP server still maintained?
Wealth Agent is still listed as active in the MCP registry. We last reached this channel on 19 October 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.