Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

Sentinel

REMOTE · 448C.ORG

Pay-per-call safety checks for AI agents: screen a crypto address or URL before you transact.

Available components

0 this week 76 Trust /100

Last scanned (14 hours ago)

Scores higher than 66% of remote servers

Reachable. Last reached 5 Nov 2026.

Category Security

Recent critical change

Authorization (29 Oct 2026). See the changelog before you install this server.

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →

Endpoint Security57
Transport & Reachability100
Schema Quality & AI Usability64
  • AI-judged instruction clarity (excellent).Pass
  • Context-footprint check failed: tool/resource definitions use about 12686 tokens (~243/item across 52 items; 52 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
  • No destabilizing schema changes in the last 30 days.Pass
Tool Coverage100
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 100% of tool parameters carry a description.Pass
  • Structured output schemas are declared (4% of tools); any adoption earns full credit.Pass
Tool Safety90
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • 3 of 5 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "pay_requirements" implies "pay" and declares readOnlyHint instead, contradicting what its own name says it does. See how to fix → Partial
  • An AI judge read all 52 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 5 Nov 26 0
    • New tool “rpc_call” functional
  • 4 Nov 26 0
    • New tool “relay_usdc” functional
  • 30 Oct 26 0
    • A breaking change shipped without a version bump: still 0.1.0 ▼ security
    • Tool “free_inbox” was removed ▼ security
  • 29 Oct 26 −10
    • Authorization: partial → fail ▼ critical
    • The server changed its declared name: mcp-typescript server on vercel → agent-exec security
    • New tool “claim_release”, which the server declares destructive security
    • New tool “dns_release”, which the server declares destructive security
    • New tool “placement_cancel”, which the server declares destructive security
    • New tool “release_inbox”, which the server declares destructive security
    • New tool “storage_delete”, which the server declares destructive security
    • New tool “storage_replace”, which the server declares destructive security
    • Tool “check_address” rewrote its description, which is the text the model reads security
    • Tool “check_url” rewrote its description, which is the text the model reads security
    • Schema quality: pass → fail ▼ functional
    • The server now declares the “prompts” capability functional
    • The server now declares the “resources” capability functional
    • First check of Tool coverage: 4 functional
    • Destructive annotations: pass → 60 functional
    • New tool “attest_create” functional
    • New tool “attest_read” functional
    • New tool “claim_acquire” functional
    • New tool “claim_acquire_free” functional
    • New tool “claim_read” functional
    • New tool “claim_renew” functional
    • New tool “create_inbox” functional
    • New tool “deadman_confirm” functional
    • New tool “deadman_read” functional
    • New tool “deadman_register” functional
    • New tool “dns_lookup” functional
    • New tool “dns_renew” functional
    • New tool “dns_rent” functional
    • New tool “dns_rent_free” functional
    • New tool “dns_set_records” functional
    • New tool “drift_baseline” functional
    • New tool “drift_check” functional
    • New tool “drift_venues” functional
    • New tool “execute” functional
    • New tool “free_inbox” functional
    • New tool “handoff_deposit” functional
    • New tool “handoff_read” functional
    • New tool “inbox_status” functional
    • New tool “listing_promote” functional
    • New tool “pay_receipt” functional
    • New tool “pay_requirements” functional
    • New tool “pay_send” functional
    • New tool “placement_order” functional
    • New tool “placement_ready” functional
    • New tool “placement_status” functional
    • New tool “placement_venues” functional
    • New tool “read_inbox” functional
    • New tool “search_listings” functional
    • New tool “service_card” functional
    • New tool “storage_buy” functional
    • New tool “storage_list” functional
    • New tool “storage_read” functional
    • New tool “storage_renew” functional
    • New tool “storage_usage” functional
    • New tool “watch_read” functional
    • New tool “watch_register” functional
    • New tool “x402_supported” functional
    • New tool “x402_verify” functional
    • “check_address” reworded the description of “address” cosmetic
    • “check_address” reworded the description of “chain” cosmetic
    • “check_url” reworded the description of “url” cosmetic
    • Tool “check_address” changed its title: Check an EVM address against public risk feeds (paid, x402) cosmetic
    • Tool “check_url” changed its title: Check a URL against public risk feeds (paid, x402) cosmetic
  • 28 Sept 26 0
    • We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
  • 25 Sept 26 0
    • We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
  • 26 Aug 26 0
    • We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
  • 25 Aug 26 0
    • Stability: 0.97 → pass security
Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 5 Nov 2026 · Probed https://448c.org/mcp

TLS valid

Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .

Subject Issuer Valid from Valid until Key Signature Serial
CN=448c.org CN=YE1,O=Let's Encrypt,C=US 29 Oct 2026 27 Jan 2027 ECDSA 256 ECDSA-SHA384 59e5032cc568aee114bcc23674041144243
SANs: 448c.org
CN=YE1,O=Let's Encrypt,C=US (CA) CN=Root YE,O=ISRG,C=US 3 Sept 2025 2 Sept 2028 ECDSA 384 ECDSA-SHA384 5ddd70dd31f801c85c186a7a04b80afe
CN=Root YE,O=ISRG,C=US (CA) CN=ISRG Root X2,O=Internet Security Research Group,C=US 13 May 2026 2 Sept 2032 ECDSA 384 ECDSA-SHA384 872165fc34b6e5fba8add5b3705fb53a
CN=ISRG Root X2,O=Internet Security Research Group,C=US (CA) CN=ISRG Root X1,O=Internet Security Research Group,C=US 13 May 2026 2 Sept 2032 ECDSA 384 SHA256-RSA 6c8f1dc727c7117f7baf853ac980f9cd

Background: What to check on a remote MCP endpoint →

DNSSEC insecure

Validation of 448c.org. — Not signed

Zone DS Keys Algorithms Outcome
. trust_anchor 20326, 38696 8, 8 Verified
org. present 725, 26974 8, 8 Verified
448c.org. absent Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation
Authentication No authorisation required

The endpoint answered without asking for a token. Anyone who knows the URL can reach it.

Result No authorisation required
HTTP status 200

Background: How OAuth 2.1 works in the 2026 MCP spec →

Transports 2 probes
Transport URL Outcome Status Location
streamable-http https://448c.org/mcp Verified 200
http (plaintext) http://448c.org/mcp HTTPS enforced 308 https://448c.org/mcp
MCP tools · 52 exposed · ~12,686 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
attest_create ~257

PAID: we fetch a URL from OUR vantage point and return a signed, timestamped attestation of what we saw -- hash, byte count, HTTP status and headers, never the body itself. Read it back afterwards for free with attest_read, so the id can be cited to a THIRD PARTY who never paid us and who can verify the signature themselves. A fetch that fails to connect, times out, or is refused for safety is still billed and still signed: the observation is what is sold, not a guaranteed 200. Call it once without payment to receive the price as an x402 PaymentRequired (Base USDC, and Solana USDC where offered); call it again with a signed payment in _meta['x402/payment'] to complete it. The receipt comes back in _meta['x402/payment-response']. No account, no API key. Complaints, questions, quote requests, or a service you wish we had: POST /feedback on this host -- free, no account. Every report is read and analysed daily; there is no individual reply.

NameTypeReqDescription
urlstringyesAn absolute http:// or https:// URL, at most 2048 UTF-8 bytes. The body is never returned to you.

No output schema declared.

No examples provided.

attest_read ~126

FREE and unauthenticated: read a previously-created attestation back by id, with its signature. This is how what you bought with attest_create comes back over MCP -- and deliberately NOT wallet-scoped, because the whole point is that a third party who never paid can fetch it and check the signature. Complaints, questions, quote requests, or a service you wish we had: POST /feedback on this host -- free, no account. Every report is read and analysed daily; there is no individual reply.

NameTypeReqDescription
idstringyesThe attestation id returned by attest_create.

No output schema declared.

No examples provided.

check_address ~232

PAID: check an EVM address against public risk feeds (OFAC, community darklists, on-chain age) and get back a verdict, score and reasons in the same response the payment settles -- there is no separate read-back call. Charged only on success: if every risk feed is unreachable the request is refused for free (CHECK_SOURCES_UNAVAILABLE) rather than answered with an unsourced verdict. Call it once without payment to receive the price as an x402 PaymentRequired (Base USDC, and Solana USDC where offered); call it again with a signed payment in _meta['x402/payment'] to complete it. The receipt comes back in _meta['x402/payment-response']. No account, no API key. Complaints, questions, quote requests, or a service you wish we had: POST /feedback on this host -- free, no account. Every report is read and analysed daily; there is no individual reply.

NameTypeReqDescription
addressstringyesAn EVM 0x... address.
chainstring–"base" or "ethereum", default "base".

No output schema declared.

No examples provided.

check_url ~222

PAID: check a URL against public risk feeds (phishing lists, domain age, lexical signals) and get back a verdict, score and reasons in the same response the payment settles -- there is no separate read-back call. Charged only on success: if every risk feed is unreachable the request is refused for free (CHECK_SOURCES_UNAVAILABLE) rather than answered with an unsourced verdict. Call it once without payment to receive the price as an x402 PaymentRequired (Base USDC, and Solana USDC where offered); call it again with a signed payment in _meta['x402/payment'] to complete it. The receipt comes back in _meta['x402/payment-response']. No account, no API key. Complaints, questions, quote requests, or a service you wish we had: POST /feedback on this host -- free, no account. Every report is read and analysed daily; there is no individual reply.

NameTypeReqDescription
urlstringyesAn http(s) URL or bare domain, at most 2048 UTF-8 bytes.

No output schema declared.

No examples provided.

claim_acquire ~344

PAID: atomically win a caller-named key for your own fleet -- an accountless compare-and-set. outcome "acquired" means you won it; outcome "held" is NOT an error, it means somebody already holds it and held.mine says whether that somebody is you -- the signal that stops a crash-resume or a duplicated retry doing an irreversible action twice. Keys are scoped to the PAYING WALLET: one payer's keys are invisible to every other payer. Inspect it with claim_read, give it up early with claim_release, extend it with claim_renew. Call it once without payment to receive the price as an x402 PaymentRequired (Base USDC, and Solana USDC where offered); call it again with a signed payment in _meta['x402/payment'] to complete it. The receipt comes back in _meta['x402/payment-response']. No account, no API key. Complaints, questions, quote requests, or a service you wish we had: POST /feedback on this host -- free, no account. Every report is read and analysed daily; there is no individual reply.

NameTypeReqDescription
holderstringyes1..256 UTF-8 bytes -- an id identifying which of your own processes is acting. It is not signed; the signature proves the wallet, not the process.
keystringyes1..256 UTF-8 bytes, no '/' character -- the name you want to hold, scoped to your own wallet.
planstringyesWhich plan to buy; it sets both the hold duration and the price. See GET /pricing or the service_card tool for the live table.

No output schema declared.

No examples provided.

claim_acquire_free ~369

FREE: win a caller-named key for 300 seconds, or learn who already holds it. Unlimited distinct keys per wallet, renewable by calling again. A sibling of claim_acquire, not a discount on it: this lease is 12x shorter than the cheapest paid plan, so a lock that has to survive a deploy, a batch or a day is on the paid ladder from the first minute. The free-acquire signature has its OWN domain, distinct from the read and release domains, so neither of those can be replayed into an acquire. Ownership is proved by the paying wallet, with no account: send any placeholder signature once and the refusal returns details.expected -- the exact message to sign, in both forms (EIP-191 for a 0x wallet, ed25519 as 'solana:<base58 pubkey>:<base58 sig>'). Complaints, questions, quote requests, or a service you wish we had: POST /feedback on this host -- free, no account. Every report is read and analysed daily; there is no individual reply.

NameTypeReqDescription
holderstringyes1..256 UTF-8 bytes -- an id identifying which of your own processes is acting. It is not signed; the signature proves the wallet, not the process.
keystringyes1..256 UTF-8 bytes, no '/' character -- the name you want to hold, scoped to your own wallet.
noncestringyesA value you have not used before on this route; it stops your signature being replayed.
signaturestringyesYour ownership proof over the message the route names in details.expected.
signedAtintegeryesUnix timestamp in seconds at which you signed; the server accepts a short window around now.

No output schema declared.

No examples provided.

claim_read ~300

FREE: who currently holds this key, if anyone -- scoped to YOUR wallet, so a stranger cannot probe your namespace. Checking your own lock must not cost again, or a fleet polling its own hold is charged for not doing work twice. A key nobody holds answers with claim: null, never a not-found: "is this free?" is a legitimate question with a legitimate negative answer. The read signature cannot release the key. Ownership is proved by the paying wallet, with no account: send any placeholder signature once and the refusal returns details.expected -- the exact message to sign, in both forms (EIP-191 for a 0x wallet, ed25519 as 'solana:<base58 pubkey>:<base58 sig>'). Complaints, questions, quote requests, or a service you wish we had: POST /feedback on this host -- free, no account. Every report is read and analysed daily; there is no individual reply.

NameTypeReqDescription
keystringyes1..256 UTF-8 bytes, no '/' character -- the name you want to hold, scoped to your own wallet.
noncestringyesA value you have not used before on this route; it stops your signature being replayed.
signaturestringyesYour ownership proof over the message the route names in details.expected.
signedAtintegeryesUnix timestamp in seconds at which you signed; the server accepts a short window around now.

No output schema declared.

No examples provided.

claim_release ~361

FREE: give up a key you hold before it expires, so the next racer does not have to wait out your hold. Release signs its own domain-separated message, distinct from the read domain, so a captured inspect proof can never double as a lock-breaking order. The signature proves the WALLET and does not by itself authorize the release: holder is separate and unsigned, and the release is refused unless it names the CURRENT holder (CLAIM_NOT_YOURS) -- what stops one member of your fleet breaking a sibling's lock. Ownership is proved by the paying wallet, with no account: send any placeholder signature once and the refusal returns details.expected -- the exact message to sign, in both forms (EIP-191 for a 0x wallet, ed25519 as 'solana:<base58 pubkey>:<base58 sig>'). Complaints, questions, quote requests, or a service you wish we had: POST /feedback on this host -- free, no account. Every report is read and analysed daily; there is no individual reply.

NameTypeReqDescription
holderstringyes1..256 UTF-8 bytes -- an id identifying which of your own processes is acting. It is not signed; the signature proves the wallet, not the process.
keystringyes1..256 UTF-8 bytes, no '/' character -- the name you want to hold, scoped to your own wallet.
noncestringyesA value you have not used before on this route; it stops your signature being replayed.
signaturestringyesYour ownership proof over the message the route names in details.expected.
signedAtintegeryesUnix timestamp in seconds at which you signed; the server accepts a short window around now.

No output schema declared.

No examples provided.

claim_renew ~293

PAID: extend a hold you already have without losing your place in line -- the heartbeat that lets a lease be SHORT (so a crash frees it fast) while a live holder keeps it alive by paying again. Re-acquiring with claim_acquire deliberately does NOT extend, so a retry loop cannot hold a key indefinitely by accident. Call it once without payment to receive the price as an x402 PaymentRequired (Base USDC, and Solana USDC where offered); call it again with a signed payment in _meta['x402/payment'] to complete it. The receipt comes back in _meta['x402/payment-response']. No account, no API key. Complaints, questions, quote requests, or a service you wish we had: POST /feedback on this host -- free, no account. Every report is read and analysed daily; there is no individual reply.

NameTypeReqDescription
holderstringyes1..256 UTF-8 bytes -- an id identifying which of your own processes is acting. It is not signed; the signature proves the wallet, not the process.
keystringyes1..256 UTF-8 bytes, no '/' character -- the name you want to hold, scoped to your own wallet.
planstringyesWhich plan to buy; it sets both the hold duration and the price. See GET /pricing or the service_card tool for the live table.

No output schema declared.

No examples provided.

create_inbox ~263

PAID: get a throwaway email address on a domain we own, live for 24 hours, to receive the verification mail a signup demands. RECEIVE ONLY -- nothing is ever sent from it, ever. Returns the address, the inbox id and when it expires; read what arrives with read_inbox, which is free and never charges again for a code you already paid for. Pay again passing the same id to extend that same address from its current expiry, with no cap -- a repeated payment is never refused and never resets. Call it once without payment to receive the price as an x402 PaymentRequired (Base USDC, and Solana USDC where offered); call it again with a signed payment in _meta['x402/payment'] to complete it. The receipt comes back in _meta['x402/payment-response']. No account, no API key. Complaints, questions, quote requests, or a service you wish we had: POST /feedback on this host -- free, no account. Every report is read and analysed daily; there is no individual reply.

NameTypeReqDescription
idstring–An inbox id this same wallet already owns: extends it 24 h from its current expiry instead of issuing a new address. Omit for a new address.

No output schema declared.

No examples provided.

deadman_confirm ~160

FREE: the live caller closes the loop before the lease expires, so the probe never runs. Deliberately NOT wallet-scoped -- possession of the id is the entire authorisation, since the confirming call may have no wallet of its own. Refused, never a silent no-op, once the entry has left pending: confirming an already-resolved entry could otherwise overwrite a probe verdict with a claim from a caller who may not even be the process that registered it. Complaints, questions, quote requests, or a service you wish we had: POST /feedback on this host -- free, no account. Every report is read and analysed daily; there is no individual reply.

NameTypeReqDescription
idstringyesThe entry id returned by deadman_register.

No output schema declared.

No examples provided.

deadman_read ~141

FREE and unauthenticated: read an entry back by id, including its verdict and the raw probe response once resolved. This is how what you bought with deadman_register comes back over MCP. If the lease has lapsed and nobody has resolved it, the probe runs right here, synchronously, before answering -- each entry can trigger at most one live probe, ever. Complaints, questions, quote requests, or a service you wish we had: POST /feedback on this host -- free, no account. Every report is read and analysed daily; there is no individual reply.

NameTypeReqDescription
idstringyesThe entry id returned by deadman_register.

No output schema declared.

No examples provided.

deadman_register ~299

PAID: register an intent you are about to act on irreversibly, with a lease and a verification probe (a GET plus a predicate). Confirm before the lease expires with deadman_confirm, free -- otherwise, once the lease lapses, we run your probe and publish the verdict: confirmed-by-probe, refuted-by-probe, or unresolved (a first-class, honest outcome when the probe could not complete -- never guessed as refuted). The raw probe response is published beside the verdict via deadman_read, free, so you can re-run it and check our answer rather than simply believing it. Call it once without payment to receive the price as an x402 PaymentRequired (Base USDC, and Solana USDC where offered); call it again with a signed payment in _meta['x402/payment'] to complete it. The receipt comes back in _meta['x402/payment-response']. No account, no API key. Complaints, questions, quote requests, or a service you wish we had: POST /feedback on this host -- free, no account. Every report is read and analysed daily; there is no individual reply.

NameTypeReqDescription
descriptionstringyesWhat you are about to do.
leaseSecondsnumberyesHow long before an unconfirmed entry's probe runs. 1..604800 seconds.
probeobjectyesAt least one of expectedBodyContains / expectedStatus is required.

No output schema declared.

No examples provided.

dns_lookup ~118

FREE: what we serve for a name under 448c.net -- its records, its owner and when it expires. No signature and no account: the zone is public, so reading it is too. Complaints, questions, quote requests, or a service you wish we had: POST /feedback on this host -- free, no account. Every report is read and analysed daily; there is no individual reply.

NameTypeReqDescription
namestringyesThe full rented name, as returned when it was rented, e.g. example.448c.net.

No output schema declared.

No examples provided.

dns_release ~245

FREE: release a name you own before it expires. It stops resolving at once. There is no refund and no undo, and the label is free for anyone else to rent. Ownership is proved by the paying wallet, with no account: send any placeholder signature once and the refusal returns details.expected -- the exact message to sign, in both forms (EIP-191 for a 0x wallet, ed25519 as 'solana:<base58 pubkey>:<base58 sig>'). Complaints, questions, quote requests, or a service you wish we had: POST /feedback on this host -- free, no account. Every report is read and analysed daily; there is no individual reply.

NameTypeReqDescription
namestringyesThe full rented name, as returned when it was rented, e.g. example.448c.net.
noncestringyesA value you have not used before on this route; it stops your signature being replayed.
signaturestringyesYour ownership proof over the message the route names in details.expected.
signedAtintegeryesUnix timestamp in seconds at which you signed; the server accepts a short window around now.

No output schema declared.

No examples provided.

dns_renew ~196

PAID: push a name you own further out by another year. What it resolves to is untouched; only its expiry moves, and a repeated payment extends it rather than resetting it. The payer must be the owner. Returns the new and previous expiry. Call it once without payment to receive the price as an x402 PaymentRequired (Base USDC, and Solana USDC where offered); call it again with a signed payment in _meta['x402/payment'] to complete it. The receipt comes back in _meta['x402/payment-response']. No account, no API key. Complaints, questions, quote requests, or a service you wish we had: POST /feedback on this host -- free, no account. Every report is read and analysed daily; there is no individual reply.

NameTypeReqDescription
namestringyesThe full rented name, as returned when it was rented, e.g. example.448c.net.

No output schema declared.

No examples provided.

dns_rent ~278

PAID: rent <label>.448c.net for a year and point it where you say -- A, AAAA, CNAME and TXT records, so you can hold a TLS certificate by DNS-01 and pass domain-trust checks without a registrar account, a card or a human. The paying wallet owns the name. Returns the name, its owner and when it expires; repoint it with dns_set_records, extend it with dns_renew. Call it once without payment to receive the price as an x402 PaymentRequired (Base USDC, and Solana USDC where offered); call it again with a signed payment in _meta['x402/payment'] to complete it. The receipt comes back in _meta['x402/payment-response']. No account, no API key. Complaints, questions, quote requests, or a service you wish we had: POST /feedback on this host -- free, no account. Every report is read and analysed daily; there is no individual reply.

NameTypeReqDescription
labelstringyesThe label to rent, without the zone: it becomes <label>.448c.net. Lowercase letters, digits and hyphens; some labels are ours and refused.
recordsarrayyesWhat the name resolves to. The route states the record and TTL limits in details.expected on any refusal.

No output schema declared.

No examples provided.

dns_rent_free ~310

FREE: one 24-hour name per wallet, so you can try the zone before paying -- the same label rules and records as dns_rent. Rent a year with dns_rent when it works. The message you sign commits to the literal subject `free`, not to the label. Ownership is proved by the paying wallet, with no account: send any placeholder signature once and the refusal returns details.expected -- the exact message to sign, in both forms (EIP-191 for a 0x wallet, ed25519 as 'solana:<base58 pubkey>:<base58 sig>'). Complaints, questions, quote requests, or a service you wish we had: POST /feedback on this host -- free, no account. Every report is read and analysed daily; there is no individual reply.

NameTypeReqDescription
labelstringyesThe label to rent, without the zone: it becomes <label>.448c.net. Lowercase letters, digits and hyphens; some labels are ours and refused.
noncestringyesA value you have not used before on this route; it stops your signature being replayed.
recordsarrayyesWhat the name resolves to. The route states the record and TTL limits in details.expected on any refusal.
signaturestringyesYour ownership proof over the message the route names in details.expected.
signedAtintegeryesUnix timestamp in seconds at which you signed; the server accepts a short window around now.

No output schema declared.

No examples provided.

dns_set_records ~271

FREE: replace the whole record set of a name you own -- never merged. The rental window is untouched: repointing a name you already paid for costs nothing. Ownership is proved by the paying wallet, with no account: send any placeholder signature once and the refusal returns details.expected -- the exact message to sign, in both forms (EIP-191 for a 0x wallet, ed25519 as 'solana:<base58 pubkey>:<base58 sig>'). Complaints, questions, quote requests, or a service you wish we had: POST /feedback on this host -- free, no account. Every report is read and analysed daily; there is no individual reply.

NameTypeReqDescription
namestringyesThe full rented name, as returned when it was rented, e.g. example.448c.net.
noncestringyesA value you have not used before on this route; it stops your signature being replayed.
recordsarrayyesWhat the name resolves to. The route states the record and TTL limits in details.expected on any refusal.
signaturestringyesYour ownership proof over the message the route names in details.expected.
signedAtintegeryesUnix timestamp in seconds at which you signed; the server accepts a short window around now.

No output schema declared.

No examples provided.

drift_baseline ~141

FREE: the baseline snapshot we hold for one venue -- what a paid check would diff against, and when it was taken. Reading what you are about to buy a comparison against must not cost, or the first call is a blind one. Complaints, questions, quote requests, or a service you wish we had: POST /feedback on this host -- free, no account. Every report is read and analysed daily; there is no individual reply.

NameTypeReqDescription
venuestringyesA venue id we hold a baseline snapshot for; list them free with drift_venues. A venue we have never snapshotted is a free 404, never a charge.

No output schema declared.

No examples provided.

drift_check ~275

PAID: we re-fetch a venue we have snapshotted before, from OUR vantage point, and return what changed since the baseline -- the schema/rubric fields that moved, were added and were removed, not a byte diff. The answer to "did this venue quietly change its rules under me?" for an agent that cannot keep its own corpus. No drift is still an answer and is still billed: the comparison is what is sold. Aim it with drift_venues (which venues we hold) and drift_baseline (what we hold for one), both free. Call it once without payment to receive the price as an x402 PaymentRequired (Base USDC, and Solana USDC where offered); call it again with a signed payment in _meta['x402/payment'] to complete it. The receipt comes back in _meta['x402/payment-response']. No account, no API key. Complaints, questions, quote requests, or a service you wish we had: POST /feedback on this host -- free, no account. Every report is read and analysed daily; there is no individual reply.

NameTypeReqDescription
venuestringyesA venue id we hold a baseline snapshot for; list them free with drift_venues. A venue we have never snapshotted is a free 404, never a charge.

No output schema declared.

No examples provided.

drift_venues ~108

FREE: every venue id drift_check can be aimed at, with what we hold for each. A closed value set, not a pattern: without it a caller can honour the input schema and still never name something buyable, which is a paywall on discovery rather than on work. Complaints, questions, quote requests, or a service you wish we had: POST /feedback on this host -- free, no account. Every report is read and analysed daily; there is no individual reply.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

execute ~227

PAID: run code in an isolated, network-less sandbox and get stdout, stderr and exit code back. Call it once without payment to receive the price as an x402 PaymentRequired (Base USDC, and Solana USDC where offered); call it again with a signed payment in _meta['x402/payment'] to run. The receipt comes back in _meta['x402/payment-response']. No account, no API key. Complaints, questions, quote requests, or a service you wish we had: POST /feedback on this host -- free, no account. Every report is read and analysed daily; there is no individual reply.

NameTypeReqDescription
filesarray–Optional extra files, as POST /execute takes them.
limitsobject–Optional limits (timeoutMs, memoryMb, ...); they set the price.
runtimestringyesRuntime name, e.g. python3 or node -- see GET /quote or the service_card tool for the list.
sourcestringyesThe program to run.
stdinstring–Optional standard input.

No output schema declared.

No examples provided.

handoff_deposit ~351

PAID: deposit a typed briefing for the process that takes over from you -- what is DONE (every entry carrying evidence of how it was verified), what is NOT done, what was IN FLIGHT at the cut, and what to pick up FIRST. Returns an id; the successor reads it back for free with handoff_read, with no identity, header or payment of any kind, so neither side needs an account with us. Retained 3 days. The done section is structurally forbidden from holding an unverified claim: a briefing cannot assert something is finished on intent alone. Call it once without payment to receive the price as an x402 PaymentRequired (Base USDC, and Solana USDC where offered); call it again with a signed payment in _meta['x402/payment'] to complete it. The receipt comes back in _meta['x402/payment-response']. No account, no API key. Complaints, questions, quote requests, or a service you wish we had: POST /feedback on this host -- free, no account. Every report is read and analysed daily; there is no individual reply.

NameTypeReqDescription
donearrayyesWhat is DONE. EVERY entry must have confidence 'measured' with non-null evidence; otherwise this is refused, free, as HANDOFF_DONE_REQUIRES_MEASURED.
inFlightarrayyesWhat was IN FLIGHT at the cut -- neither finished nor abandoned.
notDonearrayyesWhat is NOT done. May be measured or unverified.
pickUpFirststringyesWhat the successor should do FIRST. Mandatory and non-empty: a briefing with no next action is not a handoff.

No output schema declared.

No examples provided.

handoff_read ~153

FREE and unauthenticated: read a briefing back by id. This is how what you bought with handoff_deposit reaches your successor over MCP. Deliberately needs no signature -- the successor is by construction a DIFFERENT process and may hold no wallet at all, so demanding proof of the payer would make the product undeliverable. Possession of the id is the entire authorisation; treat it as a secret. Complaints, questions, quote requests, or a service you wish we had: POST /feedback on this host -- free, no account. Every report is read and analysed daily; there is no individual reply.

NameTypeReqDescription
idstringyesThe briefing id returned by handoff_deposit.

No output schema declared.

No examples provided.

inbox_status ~232

FREE: the address, when it expires and how much mail is waiting in an inbox you own. Signed under its own domain, separate from the one read_inbox uses. Ownership is proved by the paying wallet, with no account: send any placeholder signature once and the refusal returns details.expected -- the exact message to sign, in both forms (EIP-191 for a 0x wallet, ed25519 as 'solana:<base58 pubkey>:<base58 sig>'). Complaints, questions, quote requests, or a service you wish we had: POST /feedback on this host -- free, no account. Every report is read and analysed daily; there is no individual reply.

NameTypeReqDescription
idstringyesThe inbox id returned when it was created.
noncestringyesA value you have not used before on this route; it stops your signature being replayed.
signaturestringyesYour ownership proof over the message the route names in details.expected.
signedAtintegeryesUnix timestamp in seconds at which you signed; the server accepts a short window around now.

No output schema declared.

No examples provided.

listing_promote ~292

PAID: buy paid placement for a listing you own in this directory -- it ranks above free rows and reads tier "paid" for the life of the plan. Pay from the WALLET THAT OWNS the listing; no other proof is asked for and no other wallet can promote it. Promoting an already-promoted row EXTENDS it rather than replacing it, so renewing early never costs you the time you already paid for. Find the id, the live price table and the current paidUntil for free with search_listings. Call it once without payment to receive the price as an x402 PaymentRequired (Base USDC, and Solana USDC where offered); call it again with a signed payment in _meta['x402/payment'] to complete it. The receipt comes back in _meta['x402/payment-response']. No account, no API key. Complaints, questions, quote requests, or a service you wish we had: POST /feedback on this host -- free, no account. Every report is read and analysed daily; there is no individual reply.

NameTypeReqDescription
durationstringyesWhich placement plan to buy; it sets both the placement window and the price. See GET /pricing or the service_card tool for the live table.
idstringyesThe listing to promote. It must already exist and be owned by the paying wallet -- create it free with POST /listings.

No output schema declared.

No examples provided.

pay_receipt ~123

FREE and unauthenticated: read a pay_send receipt back by id -- what the seller answered, when, and what the chain says became of your authorization. Deliberately NOT wallet-scoped: the point is that the seller you are arguing with can fetch it without holding your wallet. Complaints, questions, quote requests, or a service you wish we had: POST /feedback on this host -- free, no account. Every report is read and analysed daily; there is no individual reply.

NameTypeReqDescription
idstringyesThe receipt id returned by pay_send.

No output schema declared.

No examples provided.

pay_requirements ~206

FREE: ask a seller, unpaid, what it charges, and get back the accepts[] of its own 402 -- the exact PaymentRequirements you have to sign before pay_send can deliver anything. No payment is sent to the seller and none is taken from you. Every seller outcome answers: a 402 returns accepts[], a seller that wants no payment returns accepts null, and a seller that never answered says so. Complaints, questions, quote requests, or a service you wish we had: POST /feedback on this host -- free, no account. Every report is read and analysed daily; there is no individual reply.

NameTypeReqDescription
bodystring–Optional request body for the seller.
headersobject–Optional request headers for the seller, at most 20.
methodstring–GET, POST, PUT, PATCH or DELETE -- default POST.
sellerUrlstringyesThe seller endpoint to ask, an absolute http:// or https:// URL.

No output schema declared.

No examples provided.

pay_send ~341

PAID: deliver an x402 authorization YOU signed to a seller exactly once, then read the chain for what actually became of it, and get back an immutable receipt of what the seller answered. Read the price to sign with pay_requirements first; we never sign on your behalf. A seller 402, 4xx, 5xx or refused connection is a delivered, billable answer -- what you buy is the truth about what the seller did with your authorization. The receipt is free to re-read with pay_receipt, so a seller who says they were never paid can be shown it. Call it once without payment to receive the price as an x402 PaymentRequired (Base USDC, and Solana USDC where offered); call it again with a signed payment in _meta['x402/payment'] to complete it. The receipt comes back in _meta['x402/payment-response']. No account, no API key. Complaints, questions, quote requests, or a service you wish we had: POST /feedback on this host -- free, no account. Every report is read and analysed daily; there is no individual reply.

NameTypeReqDescription
authorizationobjectyesThe authorization you already signed for the seller. This is NOT the payment that pays us -- that one goes in _meta.
bodystring–Optional request body for the seller.
headersobject–Optional request headers for the seller, at most 20.
methodstringyesGET, POST, PUT, PATCH or DELETE.
sellerUrlstringyesThe seller endpoint to deliver the authorization to, an absolute http:// or https:// URL.

No output schema declared.

No examples provided.

placement_cancel ~246

FREE and owner-signed: stop the weekly rechecks and drop the order. There is no refund for the remaining window, and entries already in a catalogue are the venue's to keep or drop -- we simply stop watching them. Ownership is proved by the paying wallet, with no account: send any placeholder signature once and the refusal returns details.expected -- the exact message to sign, in both forms (EIP-191 for a 0x wallet, ed25519 as 'solana:<base58 pubkey>:<base58 sig>'). Complaints, questions, quote requests, or a service you wish we had: POST /feedback on this host -- free, no account. Every report is read and analysed daily; there is no individual reply.

NameTypeReqDescription
idstringyesThe order id, as returned when it was paid for.
noncestringyesA value you have not used before on this route; it stops your signature being replayed.
signaturestringyesYour ownership proof over the message the route names in details.expected.
signedAtintegeryesUnix timestamp in seconds at which you signed; the server accepts a short window around now.

No output schema declared.

No examples provided.

placement_order ~362

PAID: we submit your service to every permissionless agent venue we hold a submitter for -- 17 of the 33 on-behalf venues today -- and prove, per venue, that the entry is really in the catalogue. The rest stay `queued` on your order and are submitted the hour their submitter lands, for as long as the order is open: coverage only grows, never costs more. Venues that need a human (form, signup, captcha, editorial review) are reported with the reason and never charged for; a venue that charges for an entry is reported as 'unfunded' until you pay that venue's own fee yourself -- we never front it. The paying wallet owns the order, which is rechecked weekly for 90 days; paying again for the same url EXTENDS it rather than starting a second one. Read it back with placement_status, stop it with placement_cancel. Call it once without payment to receive the price as an x402 PaymentRequired (Base USDC, and Solana USDC where offered); call it again with a signed payment in _meta['x402/payment'] to complete it. The receipt comes back in _meta['x402/payment-response']. No account, no API key. Complaints, questions, quote requests, or a service you wish we had: POST /feedback on this host -- free, no account. Every report is read and analysed daily; there is no individual reply.

NameTypeReqDescription
idstring–The order id, as returned when it was paid for.
urlstring–The absolute http(s) URL of YOUR service -- the one a venue should list. It must be publicly reachable: a loopback or private address is one no venue can verify.

No output schema declared.

No examples provided.

placement_ready ~162

FREE and honest: does your own service publish a document a venue can read (/.well-known/x402, an agent card)? If it publishes none, no amount of submission work can list you anywhere, and you should not pay us until it does. At most three outbound GETs; we read the status of each document, never the body. Complaints, questions, quote requests, or a service you wish we had: POST /feedback on this host -- free, no account. Every report is read and analysed daily; there is no individual reply.

NameTypeReqDescription
urlstringyesThe absolute http(s) URL of YOUR service -- the one a venue should list. It must be publicly reachable: a loopback or private address is one no venue can verify.

No output schema declared.

No examples provided.

placement_status ~267

FREE and owner-signed: every venue of your order with its state (queued, submitted, listed, human-only, unfunded, failed), the evidence a landing was verified by, when it was last checked and, where it is impossible, why. 'listed' is only ever written by a catalogue read that found your host. Ownership is proved by the paying wallet, with no account: send any placeholder signature once and the refusal returns details.expected -- the exact message to sign, in both forms (EIP-191 for a 0x wallet, ed25519 as 'solana:<base58 pubkey>:<base58 sig>'). Complaints, questions, quote requests, or a service you wish we had: POST /feedback on this host -- free, no account. Every report is read and analysed daily; there is no individual reply.

NameTypeReqDescription
idstringyesThe order id, as returned when it was paid for.
noncestringyesA value you have not used before on this route; it stops your signature being replayed.
signaturestringyesYour ownership proof over the message the route names in details.expected.
signedAtintegeryesUnix timestamp in seconds at which you signed; the server accepts a short window around now.

No output schema declared.

No examples provided.

placement_venues ~200

FREE: the lane table -- every agent venue we have evaluated, which of the 3 lanes a submission takes (on-behalf, owner-proof, human-only), the VENUE's own fee, the catalogue a landing is verified against, and for every dead one the reason it is dead. This is the list placement_order works from, published before you pay so you can decide whether it is worth anything to you. A dated snapshot of our own ledger, not a live read. Complaints, questions, quote requests, or a service you wish we had: POST /feedback on this host -- free, no account. Every report is read and analysed daily; there is no individual reply.

NameTypeReqDescription
lanestring–Only venues in one lane: on-behalf, owner-proof, human-only.
statestring–Only venues in one of OUR OWN states for our own placement: todo, submitted, listed, blocked-build, dead.

No output schema declared.

No examples provided.

read_inbox ~292

FREE: the mail your inbox received, newest first, with any verification code and link already picked out -- from, to, subject, receivedAt, the plain text, codes[] and links[]. This is how what you bought with create_inbox comes back to you. Poll it with since to see only what arrived after a timestamp; reading never costs, however many times you poll. Ownership is proved by the paying wallet, with no account: send any placeholder signature once and the refusal returns details.expected -- the exact message to sign, in both forms (EIP-191 for a 0x wallet, ed25519 as 'solana:<base58 pubkey>:<base58 sig>'). Complaints, questions, quote requests, or a service you wish we had: POST /feedback on this host -- free, no account. Every report is read and analysed daily; there is no individual reply.

NameTypeReqDescription
idstringyesThe inbox id returned when it was created.
noncestringyesA value you have not used before on this route; it stops your signature being replayed.
signaturestringyesYour ownership proof over the message the route names in details.expected.
signedAtintegeryesUnix timestamp in seconds at which you signed; the server accepts a short window around now.
sinceinteger–Unix seconds: return only messages received after this moment.

No output schema declared.

No examples provided.

relay_usdc ~523

PAID: send USDC from a wallet that holds no ETH. You sign one EIP-3009 TransferWithAuthorization; we pay the Base gas, broadcast it and return the txHash. $0.0200 an order, ceiling 100000000 atomic USDC ($100). We never hold or need a key of yours -- we hold only the ETH that pays for the write. Every refusal (bad signature, closed window, value over the ceiling, self-send) is free and before the paywall: we never charge for a transaction we did not send, and a box whose gas key cannot fund one broadcast refuses free rather than taking your fee. A repeated payment buys another broadcast -- there is nothing to extend, and each order needs its own unused nonce. Call it once without payment to receive the price as an x402 PaymentRequired (Base USDC, and Solana USDC where offered); call it again with a signed payment in _meta['x402/payment'] to complete it. The receipt comes back in _meta['x402/payment-response']. No account, no API key. Complaints, questions, quote requests, or a service you wish we had: POST /feedback on this host -- free, no account. Every report is read and analysed daily; there is no individual reply.

NameTypeReqDescription
fromstringyesThe USDC holder who signed. The signature must recover to exactly this address, e.g. 0x2222222222222222222222222222222222222222.
noncestringyes32 bytes of hex, unused before: USDC itself rejects a reused one, so each order needs its own.
signaturestringyesYour EIP-712 TransferWithAuthorization signature over chainId 8453, verifyingContract 0x833589fcd6edb6e08f4c7c32d4f71b54bda02913 (Base USDC). A refusal returns details.expected with the exact struct…
tostringyesRecipient of the USDC. Must differ from `from` -- a self-send is a free 400.
validAfterstringyesUnix seconds, as a string; must already have passed.
validBeforestringyesUnix seconds, as a string; at least 30s out, so the broadcast lands inside your window.
valuestringyesAtomic USDC (6 decimals) as a decimal string, 1..100000000 ($100 ceiling an order).

No output schema declared.

No examples provided.

release_inbox ~255

FREE: give up an inbox you own before it expires. Its messages go with it and the local part is never issued again; later mail to it is dropped, never bounced. There is no refund and no undo. Signed under its OWN domain, not the one the reads use. Ownership is proved by the paying wallet, with no account: send any placeholder signature once and the refusal returns details.expected -- the exact message to sign, in both forms (EIP-191 for a 0x wallet, ed25519 as 'solana:<base58 pubkey>:<base58 sig>'). Complaints, questions, quote requests, or a service you wish we had: POST /feedback on this host -- free, no account. Every report is read and analysed daily; there is no individual reply.

NameTypeReqDescription
idstringyesThe inbox id returned when it was created.
noncestringyesA value you have not used before on this route; it stops your signature being replayed.
signaturestringyesYour ownership proof over the message the route names in details.expected.
signedAtintegeryesUnix timestamp in seconds at which you signed; the server accepts a short window around now.

No output schema declared.

No examples provided.

rpc_call ~437

PAID: one JSON-RPC call on base, base-sepolia, ethereum, solana for $0.0020. You name the chain and the method, NEVER an endpoint URL: we pick the node and absorb its IP rate limit, which is the whole product. No signup, no API key, no provider account, and no key of yours is held here. Chain reads, fee queries and raw-transaction broadcast only. You get the node's own JSON-RPC object back with YOUR id echoed; an upstream error object ("execution reverted") is a paid answer, because it is what you paid to learn. Every refusal (unknown chain, method off the allowlist, batch array, oversized params) is free and before the paywall. A repeated payment buys another call -- there is nothing to extend. Call it once without payment to receive the price as an x402 PaymentRequired (Base USDC, and Solana USDC where offered); call it again with a signed payment in _meta['x402/payment'] to complete it. The receipt comes back in _meta['x402/payment-response']. No account, no API key. Complaints, questions, quote requests, or a service you wish we had: POST /feedback on this host -- free, no account. Every report is read and analysed daily; there is no individual reply.

NameTypeReqDescription
chainstringyesWhich chain to ask: one of base, base-sepolia, ethereum, solana. You never name a URL -- we pick the endpoint, e.g. base.
id––Your own call id, echoed back: a string of at most 64 chars or a safe integer. Omitted means we supply one.
methodstringyesThe JSON-RPC method, e.g. eth_blockNumber. Reads, fee queries and raw-transaction broadcast only: 19 EVM methods, 14 Solana. Anything else is refused free.
paramsarray–The method's params, as the node takes them; at most 8192 serialized bytes. Omit for a method that takes none.

No output schema declared.

No examples provided.

search_listings ~100

FREE: unauthenticated search over agent-exec's directory of paid agent-facing services (same data as GET https://448c.org/listings). Returns a page of listings and an opaque cursor for the next page.

NameTypeReqDescription
cursorstring–Opaque pagination cursor from a previous call's nextCursor.
limitinteger–Max listings to return (server-bounded regardless).
tagstring–Filter to listings carrying this tag.
NameTypeReqDescription
errorobject––
listingsarray––
nextCursorstring|null––

No examples provided.

service_card ~110

FREE: what agent-exec sells, what it costs, and exactly where to pay for it. This tool call itself is free and moves no money. Code execution can be bought right here, with the paid execute tool (x402 over MCP), or over plain HTTP at the URLs this returns. Complaints, questions, quote requests, or a service you wish we had: POST /feedback on this host -- free, no account. Every report is read and analysed daily; there is no individual reply.

Input schema present but exposes no named parameters.

NameTypeReqDescription
descriptionstringyes–
directoryobjectyes–
executeobjectyes–
llmsTxtstringyes–
networkstringyes–
openapistringyes–
paymentobjectyes–
quoteobjectyes–
resourcesarrayyes–
servicestringyes–

No examples provided.

storage_buy ~248

PAID: store opaque bytes for the life of the plan you buy, owned by the wallet that pays, readable with no account. Returns the object id and when it expires; read it back with storage_read, extend it with storage_renew. Call it once without payment to receive the price as an x402 PaymentRequired (Base USDC, and Solana USDC where offered); call it again with a signed payment in _meta['x402/payment'] to complete it. The receipt comes back in _meta['x402/payment-response']. No account, no API key. Complaints, questions, quote requests, or a service you wish we had: POST /feedback on this host -- free, no account. Every report is read and analysed daily; there is no individual reply.

NameTypeReqDescription
contentBase64stringyesThe bytes to store, base64-encoded. Decoded size must fit the plan.
labelstring–Optional caller-chosen label, up to 256 characters, no control characters.
planstringyesStorage plan; it sets both the size limit and the price. See GET /pricing or the service_card tool for the live table.

No output schema declared.

No examples provided.

storage_delete ~221

FREE: delete an object you own before it expires, and free its bytes. There is no refund and no undo. Ownership is proved by the paying wallet, with no account: send any placeholder signature once and the refusal returns details.expected -- the exact message to sign, in both forms (EIP-191 for a 0x wallet, ed25519 as 'solana:<base58 pubkey>:<base58 sig>'). Complaints, questions, quote requests, or a service you wish we had: POST /feedback on this host -- free, no account. Every report is read and analysed daily; there is no individual reply.

NameTypeReqDescription
idstringyesThe object id returned when it was bought.
noncestringyesA value you have not used before on this route; it stops your signature being replayed.
signaturestringyesYour ownership proof over the message the route names in details.expected.
signedAtintegeryesUnix timestamp in seconds at which you signed; the server accepts a short window around now.

No output schema declared.

No examples provided.

storage_list ~229

FREE: list the objects your wallet owns -- id, label, size, when each was created and when it expires -- one page at a time. Ownership is proved by the paying wallet, with no account: send any placeholder signature once and the refusal returns details.expected -- the exact message to sign, in both forms (EIP-191 for a 0x wallet, ed25519 as 'solana:<base58 pubkey>:<base58 sig>'). Complaints, questions, quote requests, or a service you wish we had: POST /feedback on this host -- free, no account. Every report is read and analysed daily; there is no individual reply.

NameTypeReqDescription
afterstring–Opaque cursor from a previous call's nextCursor.
noncestringyesA value you have not used before on this route; it stops your signature being replayed.
signaturestringyesYour ownership proof over the message the route names in details.expected.
signedAtintegeryesUnix timestamp in seconds at which you signed; the server accepts a short window around now.

No output schema declared.

No examples provided.

storage_read ~226

FREE: read back an object you own, as base64. This is how what you bought with storage_buy comes back to you over MCP. Ownership is proved by the paying wallet, with no account: send any placeholder signature once and the refusal returns details.expected -- the exact message to sign, in both forms (EIP-191 for a 0x wallet, ed25519 as 'solana:<base58 pubkey>:<base58 sig>'). Complaints, questions, quote requests, or a service you wish we had: POST /feedback on this host -- free, no account. Every report is read and analysed daily; there is no individual reply.

NameTypeReqDescription
idstringyesThe object id returned when it was bought.
noncestringyesA value you have not used before on this route; it stops your signature being replayed.
signaturestringyesYour ownership proof over the message the route names in details.expected.
signedAtintegeryesUnix timestamp in seconds at which you signed; the server accepts a short window around now.

No output schema declared.

No examples provided.

storage_renew ~201

PAID: push an object you own further out, by buying it another plan term. The object is untouched; only its expiry moves. Returns the new and previous expiry. Call it once without payment to receive the price as an x402 PaymentRequired (Base USDC, and Solana USDC where offered); call it again with a signed payment in _meta['x402/payment'] to complete it. The receipt comes back in _meta['x402/payment-response']. No account, no API key. Complaints, questions, quote requests, or a service you wish we had: POST /feedback on this host -- free, no account. Every report is read and analysed daily; there is no individual reply.

NameTypeReqDescription
idstringyesThe object id returned when it was bought.
planstringyesStorage plan; it sets both the size limit and the price. See GET /pricing or the service_card tool for the live table.

No output schema declared.

No examples provided.

storage_replace ~257

PAID: overwrite the contents of an object you own, keeping its id, and buy it a fresh plan term at the same time. Omit label to keep the current one, pass an empty string to clear it. Call it once without payment to receive the price as an x402 PaymentRequired (Base USDC, and Solana USDC where offered); call it again with a signed payment in _meta['x402/payment'] to complete it. The receipt comes back in _meta['x402/payment-response']. No account, no API key. Complaints, questions, quote requests, or a service you wish we had: POST /feedback on this host -- free, no account. Every report is read and analysed daily; there is no individual reply.

NameTypeReqDescription
contentBase64stringyesThe replacement bytes, base64-encoded. Decoded size must fit the plan.
idstringyesThe object id returned when it was bought.
labelstring–Optional caller-chosen label, up to 256 characters, no control characters.
planstringyesStorage plan; it sets both the size limit and the price. See GET /pricing or the service_card tool for the live table.

No output schema declared.

No examples provided.

storage_usage ~198

FREE: how many objects your wallet is storing and how many bytes they occupy. Ownership is proved by the paying wallet, with no account: send any placeholder signature once and the refusal returns details.expected -- the exact message to sign, in both forms (EIP-191 for a 0x wallet, ed25519 as 'solana:<base58 pubkey>:<base58 sig>'). Complaints, questions, quote requests, or a service you wish we had: POST /feedback on this host -- free, no account. Every report is read and analysed daily; there is no individual reply.

NameTypeReqDescription
noncestringyesA value you have not used before on this route; it stops your signature being replayed.
signaturestringyesYour ownership proof over the message the route names in details.expected.
signedAtintegeryesUnix timestamp in seconds at which you signed; the server accepts a short window around now.

No output schema declared.

No examples provided.

watch_read ~128

FREE: the current state of a watch you registered -- active, matched or expired, with the observation that matched. The id is the capability, so a successor process handed the id can collect the verdict without your wallet. Reading never triggers a poll and is never charged: polling your own pending answer must not cost again. Complaints, questions, quote requests, or a service you wish we had: POST /feedback on this host -- free, no account. Every report is read and analysed daily; there is no individual reply.

NameTypeReqDescription
idstringyesThe watch id returned by watch_register.

No output schema declared.

No examples provided.

watch_register ~385

PAID: we poll a URL from OUR vantage point on your interval until your predicate matches or the ttl runs out, and keep the verdict for you to collect -- a wait that survives your own process dying, which is what an agent cannot do for itself. Price is a function of intervalSeconds x ttlSeconds (interval 60..86400s, ttl 60..604800s), so a first unpaid call quotes YOUR request rather than a fixed plan. The reply carries the id: read it back any time, free and as often as you like, with watch_read. Call it once without payment to receive the price as an x402 PaymentRequired (Base USDC, and Solana USDC where offered); call it again with a signed payment in _meta['x402/payment'] to complete it. The receipt comes back in _meta['x402/payment-response']. No account, no API key. Complaints, questions, quote requests, or a service you wish we had: POST /feedback on this host -- free, no account. Every report is read and analysed daily; there is no individual reply.

NameTypeReqDescription
intervalSecondsintegeryesSeconds between polls, 60..86400. Shorter costs more.
predicateobjectyesThe condition that ends the watch.
storageKeystring–Optional: on a match, the result is also written to /storage under this key for the paying wallet, so a successor process can collect it without knowing the watch id.
ttlSecondsintegeryesHow long to keep watching, 60..604800. Must exceed intervalSeconds, or the watch expires before a second sample exists.
urlstringyesAbsolute http:// or https:// URL, at most 2048 UTF-8 bytes. We GET it; the body is never returned to you, only the verdict.

No output schema declared.

No examples provided.

Install

How do I install the Sentinel MCP server?

Sentinel is a hosted endpoint at https://448c.org/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

remote · 448c.org

# add to Claude Code
claude mcp add --transport http org-448c-sentinel 'https://448c.org/mcp'
Common questions

What is the Sentinel MCP server?

Sentinel is an MCP server listed in the public MCP registry as org.448c/sentinel. Pay-per-call safety checks for AI agents: screen a crypto address or URL before you transact. This page covers its hosted endpoint (https://448c.org/mcp).

Is the Sentinel MCP server safe to use?

Sentinel scores 76 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the Sentinel MCP server expose?

Sentinel exposes 52 tools: execute, storage_buy, storage_renew, storage_replace, storage_read, and 47 more. Their descriptions and schemas cost roughly 12,686 tokens of context every time the server is loaded.

Does the Sentinel MCP server require authentication?

No. We connected to Sentinel without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.

Is the Sentinel MCP server still maintained?

Sentinel is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.