Crypto Bot Audit + Market Data (x402 paid)
REMOTE · LABORED-SAFARI-ISLAMIC.NGROK-FREE.DEV
x402 pay-per-call: 146 MCP tools, no account or key. USDC on Base + Solana, $0.001-$0.01/call.
Available components
Last scanned (12 hours ago)
Scores higher than 20% of remote servers
Reachable. Last reached 24 Oct 2026.
Category Crypto and Web3
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security83
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- The endpoint enforces authorisation, but returns a challenge with no valid RFC 9728 metadata, so a client cannot discover where to get a token. See how to fix → View diagnostics → Fail
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- HSTS check failed: the Strict-Transport-Security header is absent. See how to fix → View diagnostics → Fail
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability0
- Transport blocked by authentication: the endpoint requires auth we don't have to verify streamable-http. See how to fix → View diagnostics → Unverified
Schema Quality & AI Usability0
- Schema blocked by authentication: the endpoint requires auth we don't have to read it. See how to fix → Unverified
Stability & Change Management0
- Stability not yet verified: not enough scan history yet (needs a 30-day window).Unverified
Tool Coverage0
- Tool coverage blocked by authentication: the endpoint requires auth we don't have to read its tools.Unverified
Tool Safety0
- Tool safety blocked by authentication: the endpoint requires auth we don't have to read its tools.Unverified
Capabilities0
- Capabilities blocked by authentication: the endpoint requires auth we don't have to read them. See how to fix → Unverified
Unverified: 6 categories
Categories scored 0 because we could not verify them: authentication we do not have, an unreachable endpoint, or not enough scan history. We only credit what we can confirm. Claim this server and supply a read-only token to verify it and lift the score.
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 19 Oct 26 +10
- Endpoint reachability: not serving MCP → behind authorisation ▼ security
- Authorization: unverified → fail ▼ security
- Transport: fail → unverified ▼ security
- Tool safety: Tool safety blocked by authentication: the endpoint requires auth we don't have to read its tools. security
- Tool coverage: Tool coverage blocked by authentication: the endpoint requires auth we don't have to read its tools. functional
- Schema quality: Schema blocked by authentication: the endpoint requires auth we don't have to read it. functional
- Capabilities: Capabilities blocked by authentication: the endpoint requires auth we don't have to read them. functional
- 18 Oct 26 −10
- Endpoint reachability: behind authorisation → not serving MCP ▼ security
- Transport: unverified → fail ▼ security
- Authorization: fail → unverified ▼ security
- Tool safety: Tool safety not yet verified: we couldn't read the endpoint's tools, or could read only part of the list. security
- Tool coverage: Tool coverage not yet verified: we couldn't read the endpoint's tools, or could read only part of the list. functional
- Capabilities: Capabilities not yet verified: we couldn't read the endpoint's capabilities. functional
- Schema quality: Schema not yet verified: we couldn't read the endpoint's schema, or could read only part of its tool list. functional
- 17 Oct 26 +10
- Endpoint reachability: not serving MCP → behind authorisation ▼ security
- Authorization: unverified → fail ▼ security
- Transport: fail → unverified ▼ security
- Tool safety: Tool safety blocked by authentication: the endpoint requires auth we don't have to read its tools. security
- Tool coverage: Tool coverage blocked by authentication: the endpoint requires auth we don't have to read its tools. functional
- Schema quality: Schema blocked by authentication: the endpoint requires auth we don't have to read it. functional
- Capabilities: Capabilities blocked by authentication: the endpoint requires auth we don't have to read them. functional
- 16 Oct 26 −10
- Endpoint reachability: behind authorisation → not serving MCP ▼ security
- Transport: unverified → fail ▼ security
- Authorization: fail → unverified ▼ security
- Tool safety: Tool safety not yet verified: we couldn't read the endpoint's tools, or could read only part of the list. security
- Tool coverage: Tool coverage not yet verified: we couldn't read the endpoint's tools, or could read only part of the list. functional
- Capabilities: Capabilities not yet verified: we couldn't read the endpoint's capabilities. functional
- Schema quality: Schema not yet verified: we couldn't read the endpoint's schema, or could read only part of its tool list. functional
- 14 Oct 26 −48
- Endpoint reachability: reachable → behind authorisation ▼ security
- Stability: 0.77 → unverified ▼ security
- Tool safety: pass → unverified ▼ security
- Transport: pass → unverified ▼ security
- Authorization: partial → fail ▼ security
- Capabilities: pass → unverified ▼ functional
- Tool coverage: 100 → unverified ▼ functional
- Schema quality: Schema blocked by authentication: the endpoint requires auth we don't have to read it. functional
- 12 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 67 to 73. That category is still filling its 30-day observation window: 20 days of observed history at the previous scan, 22 at this one. The score rises as the window fills, whether or not the server changes.
- 10 Oct 26 +2
No change was recorded against any check on this day. Stability & Change Management went from 57 to 67. That category is still filling its 30-day observation window: 17 days of observed history at the previous scan, 20 at this one. The score rises as the window fills, whether or not the server changes.
- 7 Oct 26 +55
- Authorization: unverified → partial ▲ security
- Injection markers: unverified → pass ▲ security
- Transport: fail → pass ▲ security
- Endpoint reachability: not serving MCP → reachable ▲ functional
- Tool coverage: unverified → 100 ▲ functional
- Stability: unverified → 0.57 ▲ functional
- MCP protocol: unverified → pass ▲ functional
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 24 Oct 2026 · Probed https://labored-safari-islamic.ngrok-free.dev/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=*.ngrok-free.dev | CN=YE2,O=Let's Encrypt,C=US | 25 Sept 2026 | 24 Dec 2026 | ECDSA 256 | ECDSA-SHA384 | 5a41afeaafbd267d543db00f6d9469106fe |
| SANs: *.ngrok-free.dev, ngrok-free.dev | ||||||
| CN=YE2,O=Let's Encrypt,C=US (CA) | CN=Root YE,O=ISRG,C=US | 3 Sept 2025 | 2 Sept 2028 | ECDSA 384 | ECDSA-SHA384 | 4df3b15dd6c0784c507cd37b58e6f115 |
| CN=Root YE,O=ISRG,C=US (CA) | CN=ISRG Root X2,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | ECDSA-SHA384 | 872165fc34b6e5fba8add5b3705fb53a |
| CN=ISRG Root X2,O=Internet Security Research Group,C=US (CA) | CN=ISRG Root X1,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | SHA256-RSA | 6c8f1dc727c7117f7baf853ac980f9cd |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of labored-safari-islamic.ngrok-free.dev. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| dev. | present | 60074 | 8 | Verified |
| ngrok-free.dev. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication Challenged, unverified
The endpoint asked for a token, but we could not retrieve and validate the RFC 9728 metadata that tells a client how to obtain one.
| Result | Challenged, unverified |
|---|---|
| Enforced | On connection |
| HTTP status | 403 |
Protected resource metadata
| Retrieved | No |
|---|---|
| Problem | no_resource_metadata |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://labored-safari-islamic.ngrok-free.dev/mcp | Auth required | 403 | |
| http (plaintext) | http://labored-safari-islamic.ngrok-free.dev/mcp | HTTPS enforced | 307 | https://labored-safari-islamic.ngrok-free.dev/mcp |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
market_gate_pair_spec Gate pair specification ~85
How Gate defines a currency pair: base and quote, the flat fee percent, order-size floors and caps, precision and whether it is tradable. Costs $0.001 USDC per call. Byte-identical to GET /market/gate-pair-spec?pair=BTC_USDT.
| Name | Type | Req | Description |
|---|---|---|---|
| pair | string | yes | Gate currency_pair, BASE_QUOTE [required] |
| Name | Type | Req | Description |
|---|---|---|---|
| amount_precision | integer | – | – |
| base | string | – | – |
| base_name | string | – | – |
| caveat | string|null | – | – |
| down_rate | number | – | – |
| fee | string | – | – |
| found | boolean | – | – |
| id | string | – | – |
| market_order_max_money | string | – | – |
| market_order_max_stock | string | – | – |
| max_base_amount | string|null | – | – |
| max_quote_amount | string | – | – |
| min_base_amount | string | – | – |
| min_quote_amount | string | – | – |
| note | string|null | – | – |
| price_precision | integer | – | – |
| quote | string | – | – |
| quote_name | string | – | – |
| reason | string|null | – | – |
| slippage | string | – | – |
| source | string | – | – |
| st_tag | boolean | – | – |
| stale | boolean|null | – | – |
| trade_quotes | array | – | – |
| trade_status | string | – | – |
| ts | string | – | – |
| type | string | – | – |
| up_rate | number | – | – |
No examples provided.
market_gate_ticker Gate spot ticker ~80
Last, best bid and ask with size, 24h percent change and both base and quote volume for one Gate currency pair. Costs $0.001 USDC per call. Byte-identical to GET /market/gate-ticker?pair=BTC_USDT.
| Name | Type | Req | Description |
|---|---|---|---|
| pair | string | yes | Gate currency_pair, BASE_QUOTE [required] |
| Name | Type | Req | Description |
|---|---|---|---|
| base_volume | string | – | – |
| caveat | string|null | – | – |
| change_percentage | string | – | – |
| currency_pair | string | – | – |
| found | boolean | – | – |
| high_24h | string | – | – |
| highest_bid | string | – | – |
| highest_size | string | – | – |
| last | string | – | – |
| low_24h | string | – | – |
| lowest_ask | string | – | – |
| lowest_size | string | – | – |
| note | string|null | – | – |
| quote_volume | string | – | – |
| reason | string|null | – | – |
| source | string | – | – |
| stale | boolean|null | – | – |
| ts | string | – | – |
No examples provided.
market_gate_trades Gate recent trades ~98
Gate's public fill feed for one pair: side, price, base amount, millisecond timestamp and trade id. Costs $0.001 USDC per call. Byte-identical to GET /market/gate-trades?pair=BTC_USDT&limit=20.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | string | – | trades (max 100) (default 25) |
| pair | string | yes | Gate currency_pair, BASE_QUOTE [required] |
| Name | Type | Req | Description |
|---|---|---|---|
| caveat | string|null | – | – |
| count | integer | – | – |
| currency_pair | string | – | – |
| found | boolean | – | – |
| note | string|null | – | – |
| reason | string|null | – | – |
| source | string | – | – |
| stale | boolean|null | – | – |
| trades | array | – | – |
| ts | string | – | – |
No examples provided.
market_github_repo_health GitHub repository health ~143
Keyless read of the public GitHub API for one repository: archived, forked, how long since the last push, open issue count, stars, license, topics — plus the flags an integrator actually acts on (archived, no license, unmaintained window). Does not read the source, the dependency tree, or anything private, and does not clone or build. Costs $0.001 USDC per call. Byte-identical to GET /market/github-repo-health?owner=modelcontextprotocol&repo=registry.
| Name | Type | Req | Description |
|---|---|---|---|
| owner | string | yes | repository owner or org [required] |
| repo | string | yes | repository name [required] |
| Name | Type | Req | Description |
|---|---|---|---|
| archived | boolean|null | – | – |
| caveat | string|null | – | – |
| createdAt | string|null | – | – |
| defaultBranch | string|null | – | – |
| flags | array | – | – |
| fork | boolean|null | – | – |
| found | boolean | – | – |
| fullName | string | – | – |
| lastPushAgeDays | number|null | – | – |
| licenseSpdx | string|null | – | – |
| note | string|null | – | – |
| openIssues | – | – | – |
| pushedAt | string|null | – | – |
| reason | string|null | – | – |
| risk | string|null | – | – |
| sizeKb | – | – | – |
| source | string | – | – |
| stale | boolean|null | – | – |
| stargazers | – | – | – |
| topics | array | – | – |
| ts | string | – | – |
No examples provided.
market_hl_asset_context Hyperliquid per-asset context ~99
The live risk frame Hyperliquid publishes per perp: funding, open interest, mark and oracle price, premium and 24h notional volume. Costs $0.001 USDC per call. Byte-identical to GET /market/hl-asset-context?coin=BTC.
| Name | Type | Req | Description |
|---|---|---|---|
| coin | string | yes | Hyperliquid coin symbol as its meta lists it (BTC, ETH, HYPE, kPEPE) [required] |
| Name | Type | Req | Description |
|---|---|---|---|
| caveat | string|null | – | – |
| coin | string | – | – |
| dayBaseVlm | string | – | – |
| dayNtlVlm | string | – | – |
| found | boolean | – | – |
| funding | string | – | – |
| impactPxs | array | – | – |
| markPx | string | – | – |
| midPx | string | – | – |
| note | string|null | – | – |
| openInterest | string | – | – |
| oraclePx | string | – | – |
| premium | string | – | – |
| prevDayPx | string | – | – |
| reason | string|null | – | – |
| source | string | – | – |
| stale | boolean|null | – | – |
| ts | string | – | – |
No examples provided.
market_hl_candles Hyperliquid OHLC candles ~146
candleSnapshot for one Hyperliquid perp: open, high, low, close, volume and order count per bucket, oldest first, bounded to the window each interval can carry. Costs $0.001 USDC per call. Byte-identical to GET /market/hl-candles?coin=BTC&interval=1m&limit=20.
| Name | Type | Req | Description |
|---|---|---|---|
| coin | string | yes | Hyperliquid coin symbol as its meta lists it (BTC, ETH, HYPE, kPEPE) [required] |
| interval | string | – | candle interval (default "1m") |
| limit | string | – | candles (max 500) (default 48) |
| Name | Type | Req | Description |
|---|---|---|---|
| caveat | string|null | – | – |
| coin | string | – | – |
| count | integer | – | – |
| found | boolean | – | – |
| interval | string | – | – |
| note | string|null | – | – |
| reason | string|null | – | – |
| rows | array | – | – |
| source | string | – | – |
| stale | boolean|null | – | – |
| ts | string | – | – |
No examples provided.
market_hl_funding_history Hyperliquid funding history ~121
Every funding print Hyperliquid has for a perp coin since a look-back point: rate, premium component and the settlement timestamp. Costs $0.001 USDC per call. Byte-identical to GET /market/hl-funding-history?coin=BTC&hours=20.
| Name | Type | Req | Description |
|---|---|---|---|
| coin | string | yes | Hyperliquid coin symbol as its meta lists it (BTC, ETH, HYPE, kPEPE) [required] |
| hours | string | – | look-back in whole hours (max 720) (default 72) |
| Name | Type | Req | Description |
|---|---|---|---|
| caveat | string|null | – | – |
| coin | string | – | – |
| count | integer | – | – |
| found | boolean | – | – |
| hours | integer | – | – |
| latestRate | string | – | – |
| note | string|null | – | – |
| reason | string|null | – | – |
| source | string | – | – |
| stale | boolean|null | – | – |
| ts | string | – | – |
No examples provided.
market_hl_mid_price Hyperliquid mid price ~107
The venue's own mid for one or more Hyperliquid perp coins, straight from allMids — the reference price a funding or liquidation check starts from. Costs $0.001 USDC per call. Byte-identical to GET /market/hl-mid-price?coins=BTC,ETH.
| Name | Type | Req | Description |
|---|---|---|---|
| coins | string | – | comma list of up to 12 Hyperliquid coin symbols (default BTC,ETH,HYPE) (default ["BTC","ETH","HYPE"]) |
| Name | Type | Req | Description |
|---|---|---|---|
| caveat | string|null | – | – |
| matched | integer | – | – |
| mids | object | – | – |
| note | string|null | – | – |
| reason | string|null | – | – |
| requested | integer | – | – |
| source | string | – | – |
| stale | boolean|null | – | – |
| ts | string | – | – |
No examples provided.
market_hl_order_book Hyperliquid L2 book ~99
Hyperliquid's l2Book for one perp: the resting bid and ask levels with price, size and opaque-order count, plus the book time. Costs $0.001 USDC per call. Byte-identical to GET /market/hl-order-book?coin=BTC.
| Name | Type | Req | Description |
|---|---|---|---|
| coin | string | yes | Hyperliquid coin symbol as its meta lists it (BTC, ETH, HYPE, kPEPE) [required] |
| Name | Type | Req | Description |
|---|---|---|---|
| asks | array | – | – |
| bestAsk | string | – | – |
| bestBid | string | – | – |
| bids | array | – | – |
| caveat | string|null | – | – |
| coin | string | – | – |
| found | boolean | – | – |
| note | string|null | – | – |
| reason | string|null | – | – |
| source | string | – | – |
| stale | boolean|null | – | – |
| ts | string | – | – |
No examples provided.
market_hl_perp_specs Hyperliquid perp specifications ~117
Per-coin contract rules from Hyperliquid's own meta: size decimals, maximum leverage and the margin table id, for the whole listed universe or filtered by substring. Costs $0.001 USDC per call. Byte-identical to GET /market/hl-perp-specs?contains=PEPE&limit=20.
| Name | Type | Req | Description |
|---|---|---|---|
| contains | string | – | case-insensitive substring filter on the coin name (default null) |
| limit | string | – | coins to return (max 100) (default 25) |
| Name | Type | Req | Description |
|---|---|---|---|
| caveat | string|null | – | – |
| count | integer | – | – |
| note | string|null | – | – |
| reason | string|null | – | – |
| rows | array | – | – |
| source | string | – | – |
| stale | boolean|null | – | – |
| ts | string | – | – |
| universe | integer | – | – |
No examples provided.
market_jup_new_tokens Newest Solana tokens ~96
The most recently listed tokens on Jupiter's token API: mint, name, supply, market cap, liquidity, launch pool and the audit flags Jupiter attaches — a launch feed, not a recommendation. Costs $0.001 USDC per call. Byte-identical to GET /market/jup-new-tokens?limit=20.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | string | – | tokens to return (max 30) (default 15) |
| Name | Type | Req | Description |
|---|---|---|---|
| caveat | string|null | – | – |
| count | integer | – | – |
| found | boolean | – | – |
| note | string|null | – | – |
| reason | string|null | – | – |
| rows | array | – | – |
| source | string | – | – |
| stale | boolean|null | – | – |
| ts | string | – | – |
No examples provided.
market_jup_token_prices Jupiter USD prices by mint ~152
Current USD price, 24h change, liquidity, decimals and the block the quote came from for up to 20 Solana mints, in one call — with an explicit list of which mints returned nothing. Costs $0.001 USDC per call. Byte-identical to GET /market/jup-token-prices?mints=So11111111111111111111111111111111111111112,EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v.
| Name | Type | Req | Description |
|---|---|---|---|
| mints | string | yes | comma list of up to 20 Solana token mints [required] |
| Name | Type | Req | Description |
|---|---|---|---|
| caveat | string|null | – | – |
| found | boolean | – | – |
| notPriced | array | – | – |
| note | string|null | – | – |
| priced | integer | – | – |
| prices | object | – | – |
| reason | string|null | – | – |
| requested | integer | – | – |
| source | string | – | – |
| stale | boolean|null | – | – |
| ts | string | – | – |
No examples provided.
market_jup_token_search Jupiter token search ~114
Solana tokens matching a name or symbol query, with market cap, FDV, liquidity, holder count, price-change and volume statistics and Jupiter's own audit flags. Costs $0.001 USDC per call. Byte-identical to GET /market/jup-token-search?query=bonk&limit=20.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | string | – | tokens to return (max 20) (default 8) |
| query | string | yes | token name, symbol or mint prefix to search for [required] |
| Name | Type | Req | Description |
|---|---|---|---|
| caveat | string|null | – | – |
| count | integer | – | – |
| found | boolean | – | – |
| note | string|null | – | – |
| query | string | – | – |
| reason | string|null | – | – |
| rows | array | – | – |
| source | string | – | – |
| stale | boolean|null | – | – |
| ts | string | – | – |
No examples provided.
market_kraken_depth Kraken order book ~114
Top of the Kraken book for one pair: resting bid and ask levels with size and price-count, plus the derived spread and mid. Costs $0.001 USDC per call. Byte-identical to GET /market/kraken-depth?pair=XBTUSD&count=20.
| Name | Type | Req | Description |
|---|---|---|---|
| count | string | – | levels per side (max 50) (default 10) |
| pair | string | yes | Kraken pair as the venue spells it: XBTUSD, ETHUSD, SOLUSD [required] |
| Name | Type | Req | Description |
|---|---|---|---|
| asks | array | – | – |
| bestAsk | string | – | – |
| bestBid | string | – | – |
| bids | array | – | – |
| caveat | string|null | – | – |
| found | boolean | – | – |
| note | string|null | – | – |
| pair | string | – | – |
| reason | string|null | – | – |
| source | string | – | – |
| spreadPct | number | – | – |
| stale | boolean|null | – | – |
| ts | string | – | – |
No examples provided.
market_kraken_ohlc Kraken OHLC candles ~168
OHLCV candles for one Kraken pair: open, high, low, close, volume and trade count per bucket, oldest first. Only the intervals the venue actually serves are offered. Costs $0.001 USDC per call. Byte-identical to GET /market/kraken-ohlc?pair=XBTUSD&interval=15&limit=20.
| Name | Type | Req | Description |
|---|---|---|---|
| interval | string | – | candle width in minutes (360 is rejected by Kraken; 30 and 720 are unmeasured and therefore not offered) (default "15") |
| limit | string | – | how many candles (max 720) (default 48) |
| pair | string | yes | Kraken pair as the venue spells it: XBTUSD, ETHUSD, SOLUSD [required] |
| Name | Type | Req | Description |
|---|---|---|---|
| caveat | string|null | – | – |
| count | integer | – | – |
| found | boolean | – | – |
| interval | integer | – | – |
| note | string|null | – | – |
| pair | string | – | – |
| reason | string|null | – | – |
| rows | array | – | – |
| source | string | – | – |
| stale | boolean|null | – | – |
| ts | string | – | – |
No examples provided.
market_kraken_pair_spec Kraken pair specification ~95
How Kraken itself defines a pair: base and quote, decimal precision, order size limits, the public leverage ladder and the first two fee tiers. Costs $0.001 USDC per call. Byte-identical to GET /market/kraken-pair-spec?pair=XXBTZUSD.
| Name | Type | Req | Description |
|---|---|---|---|
| pair | string | yes | Kraken pair key as stored by the venue (XXBTZUSD) [required] |
| Name | Type | Req | Description |
|---|---|---|---|
| altname | string | – | – |
| base | string | – | – |
| baseClass | string | – | – |
| caveat | string|null | – | – |
| costDecimals | integer | – | – |
| costMin | string | – | – |
| found | boolean | – | – |
| leverageBuy | array | – | – |
| leverageSell | array | – | – |
| longPositionLimit | integer | – | – |
| lot | string | – | – |
| lotDecimals | integer | – | – |
| lotMultiplier | integer | – | – |
| marginCall | integer | – | – |
| marginStop | integer | – | – |
| note | string|null | – | – |
| orderMin | string | – | – |
| pair | string | – | – |
| pairDecimals | integer | – | – |
| quote | string | – | – |
| quoteClass | string | – | – |
| reason | string|null | – | – |
| shortPositionLimit | integer | – | – |
| source | string | – | – |
| stale | boolean|null | – | – |
| status | string | – | – |
| tickSize | string | – | – |
| ts | string | – | – |
| wsname | string | – | – |
No examples provided.
market_kraken_spread Kraken bid/ask spread history ~115
Quoted spread samples for a Kraken pair with the mean spread in basis points — how expensive it is to cross that venue right now. Costs $0.001 USDC per call. Byte-identical to GET /market/kraken-spread?pair=XBTUSD&limit=20.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | string | – | spread samples (max 500) (default 60) |
| pair | string | yes | Kraken pair as the venue spells it: XBTUSD, ETHUSD, SOLUSD [required] |
| Name | Type | Req | Description |
|---|---|---|---|
| caveat | string|null | – | – |
| found | boolean | – | – |
| meanSpreadBps | number | – | – |
| note | string|null | – | – |
| pair | string | – | – |
| reason | string|null | – | – |
| samples | array | – | – |
| source | string | – | – |
| stale | boolean|null | – | – |
| ts | string | – | – |
No examples provided.
market_kraken_ticker Kraken spot ticker ~104
Last trade, best bid and ask with size, 24h volume, VWAP and 24h high/low for one Kraken spot pair, straight from the venue's own tape. Costs $0.001 USDC per call. Byte-identical to GET /market/kraken-ticker?pair=XBTUSD.
| Name | Type | Req | Description |
|---|---|---|---|
| pair | string | yes | Kraken pair as the venue spells it: XBTUSD, ETHUSD, SOLUSD [required] |
| Name | Type | Req | Description |
|---|---|---|---|
| ask | string | – | – |
| askSize | string | – | – |
| bid | string | – | – |
| bidSize | string | – | – |
| caveat | string|null | – | – |
| found | boolean | – | – |
| high24h | string | – | – |
| last | string | – | – |
| low24h | string | – | – |
| note | string|null | – | – |
| pair | string | – | – |
| reason | string|null | – | – |
| source | string | – | – |
| stale | boolean|null | – | – |
| trades24h | integer | – | – |
| ts | string | – | – |
| volume24h | string | – | – |
| vwap24h | string | – | – |
No examples provided.
market_kraken_trades Kraken recent trades ~116
The last trades printed on a Kraken pair, each with price, size, side and exchange timestamp — tape activity, not a summary. Costs $0.001 USDC per call. Byte-identical to GET /market/kraken-trades?pair=XBTUSD&limit=20.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | string | – | trades to return (max 200) (default 25) |
| pair | string | yes | Kraken pair as the venue spells it: XBTUSD, ETHUSD, SOLUSD [required] |
| Name | Type | Req | Description |
|---|---|---|---|
| caveat | string|null | – | – |
| count | integer | – | – |
| found | boolean | – | – |
| note | string|null | – | – |
| pair | string | – | – |
| reason | string|null | – | – |
| source | string | – | – |
| stale | boolean|null | – | – |
| trades | array | – | – |
| ts | string | – | – |
No examples provided.
market_kucoin_best_quote KuCoin best bid and ask ~100
KuCoin's level-1 book for a symbol in one call: inside price, both sides with size, the book sequence and the venue timestamp. Costs $0.001 USDC per call. Byte-identical to GET /market/kucoin-best-quote?symbol=BTC-USDT.
| Name | Type | Req | Description |
|---|---|---|---|
| symbol | string | yes | KuCoin symbol, BASE-QUOTE in upper case (BTC-USDT, SOL-USDT) [required] |
| Name | Type | Req | Description |
|---|---|---|---|
| bestAsk | string | – | – |
| bestAskSize | string | – | – |
| bestBid | string | – | – |
| bestBidSize | string | – | – |
| caveat | string|null | – | – |
| found | boolean | – | – |
| note | string|null | – | – |
| price | string | – | – |
| reason | string|null | – | – |
| sequence | string | – | – |
| size | string | – | – |
| source | string | – | – |
| stale | boolean|null | – | – |
| symbol | string | – | – |
| time | integer | – | – |
| ts | string | – | – |
No examples provided.
market_kucoin_candles KuCoin OHLC candles ~150
KuCoin candles with base and quote (transaction-value) volume per bucket, oldest first, across every type value the venue answered. Costs $0.001 USDC per call. Byte-identical to GET /market/kucoin-candles?symbol=BTC-USDT&type=1min&limit=20.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | string | – | candles (max 1500; KuCoin answers at most 1500 per call) (default 48) |
| symbol | string | yes | KuCoin symbol, BASE-QUOTE in upper case (BTC-USDT, SOL-USDT) [required] |
| type | string | – | KuCoin candle type (default "1min") |
| Name | Type | Req | Description |
|---|---|---|---|
| caveat | string|null | – | – |
| count | integer | – | – |
| found | boolean | – | – |
| note | string|null | – | – |
| reason | string|null | – | – |
| rows | array | – | – |
| source | string | – | – |
| stale | boolean|null | – | – |
| symbol | string | – | – |
| ts | string | – | – |
| type | string | – | – |
No examples provided.
market_kucoin_ticker KuCoin 24h stats ~117
KuCoin's own 24h statistics for a symbol: last, best bid/ask with size, 24h high/low, change, base and quote volume, average price and the taker/maker fee rates it applies. Costs $0.001 USDC per call. Byte-identical to GET /market/kucoin-ticker?symbol=BTC-USDT.
| Name | Type | Req | Description |
|---|---|---|---|
| symbol | string | yes | KuCoin symbol, BASE-QUOTE in upper case (BTC-USDT, SOL-USDT) [required] |
| Name | Type | Req | Description |
|---|---|---|---|
| averagePrice | string | – | – |
| buy | string | – | – |
| caveat | string|null | – | – |
| changePrice | string | – | – |
| changeRate | string | – | – |
| found | boolean | – | – |
| high | string | – | – |
| last | string | – | – |
| low | string | – | – |
| makerCoefficient | string | – | – |
| makerFeeRate | string | – | – |
| note | string|null | – | – |
| reason | string|null | – | – |
| sell | string | – | – |
| source | string | – | – |
| stale | boolean|null | – | – |
| symbol | string | – | – |
| takerCoefficient | string | – | – |
| takerFeeRate | string | – | – |
| time | integer | – | – |
| ts | string | – | – |
| vol | string | – | – |
| volValue | string | – | – |
No examples provided.
market_llama_asset_price_history Token price history ~137
Hourly or daily USD price points for one token reference (network:address) from DefiLlama's coin API, with the symbol and confidence it attaches to the series. Costs $0.001 USDC per call. Byte-identical to GET /market/llama-asset-price-history?ref=coingecko:bitcoin&period=1h&span=20.
| Name | Type | Req | Description |
|---|---|---|---|
| period | string | – | point spacing (default "1h") |
| ref | string | yes | asset reference as network:identifier [required] |
| span | string | – | how many points (max 720) (default 48) |
| Name | Type | Req | Description |
|---|---|---|---|
| caveat | string|null | – | – |
| confidence | number | – | – |
| count | integer | – | – |
| decimals | integer | – | – |
| found | boolean | – | – |
| note | string|null | – | – |
| period | string | – | – |
| prices | array | – | – |
| reason | string|null | – | – |
| ref | string | – | – |
| source | string | – | – |
| stale | boolean|null | – | – |
| symbol | string | – | – |
| ts | string | – | – |
No examples provided.
market_llama_chain_tvl_history Chain TVL history ~127
Daily total-value-locked history for one chain from DefiLlama's own series, downsampled to the window you ask for — the trend line, not a snapshot. Costs $0.001 USDC per call. Byte-identical to GET /market/llama-chain-tvl-history?chain=Ethereum&days=20.
| Name | Type | Req | Description |
|---|---|---|---|
| chain | string | – | chain as DefiLlama names it (only measured names) (default "Ethereum") |
| days | string | – | daily points to return (max 3650) (default 365) |
| Name | Type | Req | Description |
|---|---|---|---|
| caveat | string|null | – | – |
| chain | string | – | – |
| count | integer | – | – |
| days | integer | – | – |
| found | boolean | – | – |
| latestTvlUsd | integer | – | – |
| note | string|null | – | – |
| reason | string|null | – | – |
| rows | array | – | – |
| source | string | – | – |
| stale | boolean|null | – | – |
| ts | string | – | – |
No examples provided.
market_llama_price_snapshot Batch token prices ~125
Current USD price, symbol, decimals and confidence for up to 10 network:address references in one paid call — the cheapest way to mark a portfolio. Costs $0.001 USDC per call. Byte-identical to GET /market/llama-price-snapshot?refs=coingecko:bitcoin,base:0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913.
| Name | Type | Req | Description |
|---|---|---|---|
| refs | string | yes | comma list of up to 10 network:identifier refs [required] |
| Name | Type | Req | Description |
|---|---|---|---|
| caveat | string|null | – | – |
| found | boolean | – | – |
| notPriced | array | – | – |
| note | string|null | – | – |
| priced | integer | – | – |
| prices | object | – | – |
| reason | string|null | – | – |
| requested | integer | – | – |
| source | string | – | – |
| stale | boolean|null | – | – |
| ts | string | – | – |
No examples provided.
market_npm_package_risk npm package supply-chain risk ~140
One keyless read of the public npm registry for a package: does it ship an install-time script (the way malicious packages run code at install), is the released version deprecated, how old is the last publish, how many maintainers and dependencies, is there signed provenance, and what flags come out of those facts. Static metadata only: it does NOT execute the package, scan its source, or claim it is safe. Costs $0.001 USDC per call. Byte-identical to GET /market/npm-package-risk?name=left-pad.
| Name | Type | Req | Description |
|---|---|---|---|
| name | string | yes | npm package name (optionally scoped) [required] |
| Name | Type | Req | Description |
|---|---|---|---|
| caveat | string|null | – | – |
| deprecated | string|null | – | – |
| depsCount | – | – | – |
| flags | array | – | – |
| found | boolean | – | – |
| hasInstallScript | boolean|null | – | – |
| installScripts | array | – | – |
| lastPublishAgeDays | number|null | – | – |
| latest | string|null | – | – |
| license | string|null | – | – |
| maintainerCount | – | – | – |
| name | string | – | – |
| note | string|null | – | – |
| provenance | boolean|null | – | – |
| publishedAt | string|null | – | – |
| reason | string|null | – | – |
| risk | string|null | – | – |
| scope | string|null | – | – |
| source | string | – | – |
| stale | boolean|null | – | – |
| ts | string | – | – |
| unpackedSize | string|null | – | – |
| versionCount | – | – | – |
No examples provided.
market_npm_tree_risk Direct-dependency risk roll-up for one npm package ~182
One paid call that reads the package AND each of its direct dependencies (bounded, in published order) from the public npm registry, then rolls up what actually gets executed on install: which dependencies carry pre/postinstall scripts, which are deprecated, which ship without signed provenance, which are single-maintainer or unpublished-for-two-years. Returns the per-dependency rows, the counts, a verdict line, and an explicit list of what this cannot see. Static registry metadata only — it does not resolve a lockfile, walk the transitive tree beyond direct dependencies, download or execute any package, or compare against the name you meant to type. Costs $0.001 USDC per call. Byte-identical to GET /market/npm-tree-risk?name=left-pad.
| Name | Type | Req | Description |
|---|---|---|---|
| name | string | yes | npm package name (optionally scoped) [required] |
| Name | Type | Req | Description |
|---|---|---|---|
| cannotSee | array | – | – |
| caveat | string|null | – | – |
| dependencyCount | – | – | – |
| deps | array | – | – |
| directChecked | integer | – | – |
| failedSources | array | – | – |
| found | boolean | – | – |
| latest | string|null | – | – |
| name | string | – | – |
| note | string|null | – | – |
| reason | string|null | – | – |
| risk | string|null | – | – |
| rollup | object | – | – |
| rootDeprecated | string|null | – | – |
| rootFlags | array | – | – |
| rootHasInstallScript | boolean|null | – | – |
| scope | string|null | – | – |
| source | string | – | – |
| sources | array | – | – |
| stale | boolean|null | – | – |
| ts | string | – | – |
| verdict | string | – | – |
No examples provided.
market_okx_candles OKX OHLC candles ~140
Mark, base and quote volume per bucket for an OKX instrument, oldest first, across the bar widths the venue serves. Costs $0.001 USDC per call. Byte-identical to GET /market/okx-candles?instId=BTC-USDT&bar=1m&limit=20.
| Name | Type | Req | Description |
|---|---|---|---|
| bar | string | – | OKX bar width (default "1m") |
| instId | string | yes | OKX instrument id, BASE-QUOTE (BTC-USDT, ETH-USDT-SWAP) [required] |
| limit | string | – | candles (max 300) (default 48) |
| Name | Type | Req | Description |
|---|---|---|---|
| bar | string | – | – |
| caveat | string|null | – | – |
| count | integer | – | – |
| found | boolean | – | – |
| instId | string | – | – |
| note | string|null | – | – |
| reason | string|null | – | – |
| rows | array | – | – |
| source | string | – | – |
| stale | boolean|null | – | – |
| ts | string | – | – |
No examples provided.
market_okx_depth OKX order book ~115
Price-level ladder from OKX for one instrument with per-level contract count, plus the derived top-of-book spread. Costs $0.001 USDC per call. Byte-identical to GET /market/okx-depth?instId=BTC-USDT&levels=20.
| Name | Type | Req | Description |
|---|---|---|---|
| instId | string | yes | OKX instrument id, BASE-QUOTE (BTC-USDT, ETH-USDT-SWAP) [required] |
| levels | string | – | levels per side (max 25) (default 10) |
| Name | Type | Req | Description |
|---|---|---|---|
| asks | array | – | – |
| bestAsk | string | – | – |
| bestBid | string | – | – |
| bids | array | – | – |
| caveat | string|null | – | – |
| found | boolean | – | – |
| instId | string | – | – |
| note | string|null | – | – |
| reason | string|null | – | – |
| source | string | – | – |
| stale | boolean|null | – | – |
| ts | string | – | – |
No examples provided.
market_okx_funding_rate OKX perpetual funding ~86
Current and next funding rate for an OKX perpetual, with the settlement timestamps and the funding band the venue caps it at. Costs $0.001 USDC per call. Byte-identical to GET /market/okx-funding-rate?instId=BTC-USDT-SWAP.
| Name | Type | Req | Description |
|---|---|---|---|
| instId | string | yes | OKX perpetual swap id [required] |
| Name | Type | Req | Description |
|---|---|---|---|
| caveat | string|null | – | – |
| formulaType | string | – | – |
| found | boolean | – | – |
| fundingRate | string | – | – |
| fundingRate8hPct | number | – | – |
| fundingTime | integer | – | – |
| impactValue | string | – | – |
| instId | string | – | – |
| instType | string | – | – |
| interestRate | string | – | – |
| maxFundingRate | string | – | – |
| method | string | – | – |
| minFundingRate | string | – | – |
| nextFundingTime | integer | – | – |
| note | string|null | – | – |
| premium | string | – | – |
| prevFundingTime | integer | – | – |
| reason | string|null | – | – |
| settFundingRate | string | – | – |
| settState | string | – | – |
| source | string | – | – |
| stale | boolean|null | – | – |
| ts | string | – | – |
No examples provided.
market_okx_instrument_spec OKX instrument specification ~131
Contract rules as OKX defines them: tick and lot size, minimum size, price limits, whether it is a swap or option, and settlement date. Costs $0.001 USDC per call. Byte-identical to GET /market/okx-instrument-spec?instId=BTC-USDT&instType=SPOT.
| Name | Type | Req | Description |
|---|---|---|---|
| instId | string | yes | OKX instrument id, BASE-QUOTE (BTC-USDT, ETH-USDT-SWAP) [required] |
| instType | string | – | which OKX instrument family to look in (default "SPOT") |
| Name | Type | Req | Description |
|---|---|---|---|
| baseCcy | string | – | – |
| category | string | – | – |
| caveat | string|null | – | – |
| ctMult | – | – | – |
| ctType | string | – | – |
| ctVal | number|null | – | – |
| ctValCcy | string | – | – |
| expTimeMs | – | – | – |
| found | boolean | – | – |
| instFamily | string | – | – |
| instId | string | – | – |
| instType | string | – | – |
| lever | string | – | – |
| listTimeMs | integer | – | – |
| lotSz | string | – | – |
| maxLmtAmt | string | – | – |
| maxLmtSz | string | – | – |
| maxMktSz | string | – | – |
| minSz | string | – | – |
| note | string|null | – | – |
| openType | string | – | – |
| optType | string | – | – |
| positionLimit | string | – | – |
| positionLimitPct | – | – | – |
| quoteCcy | string | – | – |
| reason | string|null | – | – |
| ruleType | string | – | – |
| settleCcy | string | – | – |
| source | string | – | – |
| stale | boolean|null | – | – |
| state | string | – | – |
| tickSz | string | – | – |
| tradeQuoteCcyList | array | – | – |
| ts | string | – | – |
| uly | string | – | – |
No examples provided.
market_okx_ticker OKX spot ticker ~96
Last, bid, ask, 24h open/high/low and both base and quote volume for one OKX instrument. Costs $0.001 USDC per call. Byte-identical to GET /market/okx-ticker?instId=BTC-USDT.
| Name | Type | Req | Description |
|---|---|---|---|
| instId | string | yes | OKX instrument id, BASE-QUOTE (BTC-USDT, ETH-USDT-SWAP) [required] |
| Name | Type | Req | Description |
|---|---|---|---|
| askPx | string | – | – |
| askSz | string | – | – |
| bidPx | string | – | – |
| bidSz | string | – | – |
| caveat | string|null | – | – |
| found | boolean | – | – |
| high24h | string | – | – |
| instId | string | – | – |
| instType | string | – | – |
| last | string | – | – |
| lastSz | string | – | – |
| low24h | string | – | – |
| note | string|null | – | – |
| open24h | string | – | – |
| quoteVolume24h | string | – | – |
| reason | string|null | – | – |
| sodUtc0 | string | – | – |
| sodUtc8 | string | – | – |
| source | string | – | – |
| stale | boolean|null | – | – |
| ts | string | – | – |
| venueTsMs | integer | – | – |
| volume24h | string | – | – |
No examples provided.
How do I install the Crypto Bot Audit + Market Data (x402 paid) MCP server?
Crypto Bot Audit + Market Data (x402 paid) is a hosted endpoint at https://labored-safari-islamic.ngrok-free.dev/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · labored-safari-islamic.ngrok-free.dev
claude mcp add --transport http kaminariouji-x402-audit-agent 'https://labored-safari-islamic.ngrok-free.dev/mcp'
What is the Crypto Bot Audit + Market Data (x402 paid) MCP server?
Crypto Bot Audit + Market Data (x402 paid) is an MCP server listed in the public MCP registry as io.github.kaminariouji/x402-audit-agent. x402 pay-per-call: 146 MCP tools, no account or key. USDC on Base + Solana, $0.001-$0.01/call. This page covers its hosted endpoint (https://labored-safari-islamic.ngrok-free.dev/mcp).
Is the Crypto Bot Audit + Market Data (x402 paid) MCP server safe to use?
Crypto Bot Audit + Market Data (x402 paid) scores 33 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the Crypto Bot Audit + Market Data (x402 paid) MCP server expose?
Crypto Bot Audit + Market Data (x402 paid) exposes 146 tools: audit_bot_code, demo_audit, x402_rail_heartbeat, get_token_price, search_tokens, and 141 more. Their descriptions and schemas cost roughly 20,604 tokens of context every time the server is loaded.
Does the Crypto Bot Audit + Market Data (x402 paid) MCP server require authentication?
Yes. Crypto Bot Audit + Market Data (x402 paid) asked us for credentials when we connected, so you will need to authorise it in your MCP client before it can do anything.
Is the Crypto Bot Audit + Market Data (x402 paid) MCP server still maintained?
Crypto Bot Audit + Market Data (x402 paid) is still listed as active in the MCP registry. We last reached this channel on 24 October 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.