Diogenes Web3, DeFi & 402 Security MCP
REMOTE · DIOGENES-MICRO-GATEWAY.CORINTH.WORKERS.DEV
Smart contract audit oracles, Solana risk analysis, MEV defense & HTTP 402 verifiers.
Available components
Last scanned (3 hours ago)
Scores higher than 46% of remote servers
Reachable. Last reached 23 Oct 2026.
Category Crypto and Web3
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security63
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- No authorisation is required to call this server. Every tool declares its destructiveHint and none is destructive, so open access doesn't expose one. See how to fix → View diagnostics → Partial
- HTTPS check failed: the endpoint is reachable over plaintext HTTP. See how to fix → View diagnostics → Fail
- HSTS check failed: the Strict-Transport-Security header is absent. See how to fix → View diagnostics → Fail
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability68
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 2874 tokens (~191/item across 15 items; 15 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management0
- Stability check failed: schema churn in the 3 days we've observed: 13 tool removals, 0 breaking changes, 0 auth/transport breaks, 15 additions. See how to fix → Fail
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
- Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 15 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 15 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities20
- Spec-recency check failed: implements MCP spec 2024-11-05; the latest is 2026-07-28. See how to fix → Fail
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 22 Oct 26 +3
- Stability: 0.03 → fail ▼ security
- A breaking change shipped without a version bump: still 2.5.0 ▼ security
- Tool “contract_audit” was removed ▼ security
- Tool “crypto_address_poisoning_check” was removed ▼ security
- Tool “crypto_bridge_quote” was removed ▼ security
- Tool “crypto_eip712_permit_decoder” was removed ▼ security
- Tool “crypto_utxo_consolidation_planner” was removed ▼ security
- Tool “http402_challenge_verifier” was removed ▼ security
- Tool “mempool_fee” was removed ▼ security
- Tool “mev_risk” was removed ▼ security
- Tool “solana_risk” was removed ▼ security
- Tool “swap_rate” was removed ▼ security
- Tool “x402_solana_priority_fee_oracle” was removed ▼ security
- Tool “x402_token_meta” was removed ▼ security
- Tool “x402_whale_radar” was removed ▼ security
- Schema quality: pass → fail ▼ functional
- Tool coverage: 50% → 100% ▲ functional
- First check of Tool coverage: 100 functional
- Schema quality: fair → excellent functional
- New tool “audit_smart_contract_code” functional
- New tool “calculate_spot_swap_rate” functional
- New tool “compare_crosschain_bridge_routes” functional
- New tool “decode_eip712_permit_signature” functional
- New tool “detect_address_poisoning_scam” functional
- New tool “estimate_bitcoin_mempool_fees” functional
- New tool “estimate_solana_priority_fees” functional
- New tool “evaluate_dex_mev_risk” functional
- New tool “evaluate_solana_token_risk” functional
- New tool “inspect_solana_token_liquidity” functional
- New tool “plan_bitcoin_utxo_consolidation” functional
- New tool “scan_solana_cpi_reentrancy” functional
- New tool “simulate_evm_transaction_calldata” functional
- New tool “track_solana_whale_flows” functional
- New tool “verify_http402_payment_challenge” functional
- 21 Oct 26 0
- Stability: unverified → 0.03 ▲ functional
- 20 Oct 26 59
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 23 Oct 2026 · Probed https://diogenes-micro-gateway.corinth.workers.dev/mcp/web3-security
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=corinth.workers.dev | CN=YE2,O=Let's Encrypt,C=US | 17 Oct 2026 | 15 Jan 2027 | ECDSA 256 | ECDSA-SHA384 | 633c3321385182b27c585c86398dc860724 |
| SANs: *.corinth.workers.dev, corinth.workers.dev | ||||||
| CN=YE2,O=Let's Encrypt,C=US (CA) | CN=Root YE,O=ISRG,C=US | 3 Sept 2025 | 2 Sept 2028 | ECDSA 384 | ECDSA-SHA384 | 4df3b15dd6c0784c507cd37b58e6f115 |
| CN=Root YE,O=ISRG,C=US (CA) | CN=ISRG Root X2,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | ECDSA-SHA384 | 872165fc34b6e5fba8add5b3705fb53a |
| CN=ISRG Root X2,O=Internet Security Research Group,C=US (CA) | CN=ISRG Root X1,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | SHA256-RSA | 6c8f1dc727c7117f7baf853ac980f9cd |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of diogenes-micro-gateway.corinth.workers.dev. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| dev. | present | 60074 | 8 | Verified |
| workers.dev. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://diogenes-micro-gateway.corinth.workers.dev/mcp/web3-security | Verified | 200 | |
| http (plaintext) | http://diogenes-micro-gateway.corinth.workers.dev/mcp/web3-security | Served over HTTP | 200 |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
audit_smart_contract_code EVM & Move Smart Contract Honeypot, Tax & Reentrancy Auditor ~188
Statically audits Solidity, Vyper, or Move smart contract source code for honeypot transfer taxes, hidden mint backdoors, proxy upgrade traps, and reentrancy. Use when auditing smart contract source code or bytecode before deploying or interacting with a protocol; for scanning Solana Anchor/Rust programs specifically for Cross-Program Invocation (CPI) signer/account vulnerabilities, use scan_solana_cpi_reentrancy instead. Read-only edge call (32 KB, 60 RPM): accepts 'code_or_address' ('chain' defaults to 'evm_solidity'), uses '?demo=true' or L402 (250 sats); HTTP 400 if invalid.
| Name | Type | Req | Description |
|---|---|---|---|
| chain | string | – | Target blockchain VM architecture; defaults to 'evm_solidity' when omitted. |
| code_or_address | string | yes | Smart contract source code snippet, ABI, or contract address to audit. |
| Name | Type | Req | Description |
|---|---|---|---|
| is_honeypot | boolean | yes | True if transfer restrictions or excessive sell taxes (>10%) are present. |
| risk_level | string | yes | Severity classification ('LOW', 'MEDIUM', 'HIGH', or 'CRITICAL'). |
| security_score | integer | yes | Composite contract safety score from 0 (critical exploit) to 100 (verified safe). |
| vulnerabilities | array | yes | Specific vulnerability findings and line-level remediation advice. |
No examples provided.
calculate_spot_swap_rate Cross-Asset Spot Exchange Rate & Satoshi Conversion Calculator ~165
Calculates instantaneous spot exchange rates and equivalent USD, BTC, and satoshi values across BTC, ETH, SOL, SUI, and USDC. Use when converting a token amount into USD or satoshis for invoice pricing or accounting; for quoting executable non-KYC cross-chain bridge routes with bridge fees and settlement times, use compare_crosschain_bridge_routes instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'currency' ('amount' defaults to 'standard'), supports '?demo=true' or L402 (100 sats), and returns HTTP 400 if invalid.
| Name | Type | Req | Description |
|---|---|---|---|
| amount | number | – | Quantity of the source asset to convert; defaults to 100 when omitted. |
| currency | string | yes | Source asset ticker symbol to convert from. |
| Name | Type | Req | Description |
|---|---|---|---|
| equivalent_sats | integer | yes | Equivalent value denominated in Bitcoin satoshis. |
| source_amount | number | yes | Input asset quantity. |
| source_currency | string | yes | Input asset symbol converted. |
| total_usd_value | number | yes | Equivalent spot value in US Dollars (USD). |
No examples provided.
compare_crosschain_bridge_routes Non-KYC Cross-Chain Bridge Route & Settlement Fee Comparator ~204
Compares non-custodial, non-KYC cross-chain swap routes (THORChain native L1 swaps, Maya Protocol, Blockstream Liquid) by basis-point fee, net output sats, and settlement time. Use when routing cross-chain treasury settlements (e.g. Solana USDC or Base ETH into native Bitcoin); for calculating mid-market spot exchange rates without bridge routing fees, use calculate_spot_swap_rate instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'from_asset' ('to_asset' defaults to 'BTC_NATIVE'), supports '?demo=true' or L402 (100 sats), and returns HTTP 400 if invalid.
| Name | Type | Req | Description |
|---|---|---|---|
| amount | number | – | Input asset amount to quote; defaults to 100.0 when omitted. |
| from_asset | string | yes | Origin chain asset identifier to bridge from. |
| to_asset | string | – | Destination chain asset identifier; defaults to 'BTC_NATIVE' when omitted. |
| Name | Type | Req | Description |
|---|---|---|---|
| best_route | string | yes | Optimal non-KYC bridge protocol selected (e.g. 'THORCHAIN_NATIVE_SWAP'). |
| estimated_output_sats | integer | yes | Net settled output denominated in Bitcoin satoshis. |
| fee_bps | integer | yes | Total protocol and slip fee in basis points. |
| kyc_required | boolean | yes | Always false; only non-custodial permissionless routes are returned. |
No examples provided.
decode_eip712_permit_signature EIP-712 Typed Data & Uniswap Permit2 Phishing Signature Decoder ~205
Decodes EIP-712 and Uniswap Permit2 off-chain typed-data payloads to verify spender identity, detect unlimited (uint256.max) token approvals, and flag expired deadlines. Use when inspecting an off-chain eth_signTypedData_v4 or Permit2 payload before signing; for decoding raw on-chain hex transaction calldata (0x...) for eth_sendTransaction, use simulate_evm_transaction_calldata instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'typed_data_json' ('chain_id' defaults to '1'), supports '?demo=true' or L402 (100 sats), and returns HTTP 400 if invalid.
| Name | Type | Req | Description |
|---|---|---|---|
| chain_id | string | – | EVM chain ID used to verify canonical router spender addresses; defaults to '8453' (Base) when omitted. |
| typed_data_json | string | yes | JSON string or object containing the EIP-712 / Permit2 message (spender, amount, deadline). |
| Name | Type | Req | Description |
|---|---|---|---|
| signing_verdict | string | yes | Safety recommendation ('SAFE_BOUNDED_PERMIT' or 'CRITICAL_UNLIMITED_APPROVAL_UNVERIFIED_SPENDER'). |
| spender_address | string | yes | Normalized lowercase EVM address of the permit spender. |
| spender_identity | string | yes | Identified protocol router label or 'Unknown Third-Party Spender'. |
| unlimited_approval_detected | boolean | yes | True if the approval value equals uint256.max / uint160.max. |
No examples provided.
detect_address_poisoning_scam Counterparty Address Poisoning & Vanity Prefix/Suffix Spoof Detector ~171
Compares a target recipient wallet address against recent transaction history to detect vanity prefix/suffix lookalike spoofing and zero-value dusting attacks. Use when verifying a recipient EVM or Solana wallet address before sending funds; for decoding hex smart contract calldata payloads, use simulate_evm_transaction_calldata instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'target_address' ('address_standard' defaults to 'auto_detect'), supports '?demo=true' or L402 (100 sats), and returns HTTP 400 if invalid.
| Name | Type | Req | Description |
|---|---|---|---|
| address_standard | string | – | Address encoding format; defaults to 'auto_detect' when omitted. |
| target_address | string | yes | Candidate recipient EVM (0x...) or Solana Base58 wallet address to verify. |
| Name | Type | Req | Description |
|---|---|---|---|
| poisoning_detected | boolean | yes | True if a prefix/suffix collision with a different middle body is found. |
| prefix_suffix_collision_score | number | yes | Similarity score (0.0 to 1.0) against known counterparty addresses. |
| target_address | string | yes | Audited recipient address. |
| verdict | string | yes | Transfer safety decision ('SAFE_VERIFIED' or 'DANGER_POISONING_ATTACK'). |
No examples provided.
estimate_bitcoin_mempool_fees Bitcoin Mainnet Mempool Feerate Estimator (sat/vB) ~162
Fetches real-time Bitcoin mainnet mempool feerate recommendations in satoshis per virtual byte (sat/vB) across fastest, half-hour, hour, and economy confirmation tiers. Use when checking current Bitcoin L1 network congestion before broadcasting an on-chain BTC transaction; for calculating exact SegWit/Taproot UTXO batch consolidation vByte weights and dust thresholds, use plan_bitcoin_utxo_consolidation instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'confirmation_target', supports '?demo=true' or L402 (50 sats), and returns HTTP 400 if invalid.
| Name | Type | Req | Description |
|---|---|---|---|
| confirmation_target | string | – | Target confirmation speed tier; defaults to 'half_hour' when omitted. |
| Name | Type | Req | Description |
|---|---|---|---|
| economyFee | integer | yes | Low-priority feerate in sat/vB for non-urgent batch sweeps. |
| fastestFee | integer | yes | Recommended feerate in sat/vB for next-block (~10 min) inclusion. |
| halfHourFee | integer | yes | Recommended feerate in sat/vB for ~30-minute confirmation. |
| hourFee | integer | yes | Recommended feerate in sat/vB for ~60-minute confirmation. |
No examples provided.
estimate_solana_priority_fees Solana Compute-Unit Priority Fee & Jito MEV Tip Estimator ~177
Calculates optimal Solana compute-unit (CU) microlamport priority fees and Jito bundle tip lamports to achieve target block-inclusion probability. Use when setting SetComputeUnitPrice and Jito tips before broadcasting a Solana transaction; for querying Bitcoin L1 sat/vB mempool fee rates, use estimate_bitcoin_mempool_fees instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'priority_level' ('tx_type' defaults to 'simple_transfer'), supports '?demo=true' or x402 (50 sats), and returns HTTP 400 if invalid.
| Name | Type | Req | Description |
|---|---|---|---|
| priority_level | string | yes | Target inclusion urgency tier on Solana mainnet-beta. |
| tx_type | string | – | Transaction category used to estimate compute unit limit; defaults to 'dex_swap' when omitted. |
| Name | Type | Req | Description |
|---|---|---|---|
| estimated_landing_probability | number | yes | Projected next-block inclusion probability (0.0 to 1.0). |
| recommended_compute_unit_limit | integer | yes | Suggested ComputeBudget compute unit ceiling. |
| recommended_jito_tip_lamports | integer | yes | Recommended Jito block-engine tip in lamports for MEV-protected landing. |
| recommended_micro_lamports_per_cu | integer | yes | Recommended priority fee in microlamports per compute unit. |
No examples provided.
evaluate_dex_mev_risk Pre-Swap DEX MEV Sandwich & Frontrunning Risk Evaluator ~193
Evaluates decentralized exchange (DEX) swap parameters against pool depth and mempool visibility to quantify MEV sandwich risk and compute optimal slippage tolerance in basis points. Use when configuring slippage tolerance and private-RPC routing before executing an on-chain DEX token swap; for comparing cross-chain bridge settlement routes across different L1 blockchains, use compare_crosschain_bridge_routes instead. Read-only edge call (32 KB, 60 RPM): accepts 'pair' ('execution_venue' defaults to 'uniswap_v3_public'), uses '?demo=true' or L402 (150 sats); HTTP 400 if invalid.
| Name | Type | Req | Description |
|---|---|---|---|
| execution_venue | string | – | Target DEX protocol or RPC relay; defaults to 'uniswap_v3_public' when omitted. |
| pair | string | yes | Trading pair symbol or pool identifier (e.g. 'ETH/USDC' or 'SOL/USDC'). |
| Name | Type | Req | Description |
|---|---|---|---|
| frontrunning_detected | boolean | yes | True if public mempool broadcast exposes the swap to predatory bots. |
| optimal_slippage_bps | integer | yes | Recommended maximum slippage tolerance in basis points (1 bps = 0.01%). |
| recommended_rpc | string | yes | Suggested MEV-protected broadcast endpoint. |
| sandwich_risk | string | yes | Assessed MEV extraction risk tier ('LOW', 'MEDIUM', or 'HIGH'). |
No examples provided.
evaluate_solana_token_risk Solana SPL Token Mint/Freeze Authority & Rug-Pull Risk Evaluator ~191
Evaluates a Solana SPL token's rug-pull probability by checking active mint authority, freeze authority, mutable metadata, and top-holder concentration. Use when making a pre-trade security decision on whether a Solana SPL token is safe to buy; for retrieving SPL token symbol, decimals, and DEX liquidity pool metadata via x402, use inspect_solana_token_liquidity instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'token_address' ('risk_profile' defaults to 'strict_decentralized'), supports '?demo=true' or L402 (100 sats), and returns HTTP 400 if invalid.
| Name | Type | Req | Description |
|---|---|---|---|
| risk_profile | string | – | Tolerance policy for centralized freeze authorities; defaults to 'strict_decentralized' when omitted. |
| token_address | string | yes | Base58-encoded Solana SPL token mint address (32–44 characters). |
| Name | Type | Req | Description |
|---|---|---|---|
| freeze_authority_present | boolean | yes | True if an active authority can freeze holder token accounts. |
| risk_score | number | yes | Rug-pull risk score from 0.0 (renounced/safe) to 1.0 (critical danger). |
| should_transact | boolean | yes | True when the token passes authority and concentration safety checks. |
| valid_base58 | boolean | yes | True when the provided address is a valid Base58 Solana public key. |
No examples provided.
inspect_solana_token_liquidity Solana SPL Token Metadata, Decimals & Authority Registry Lookup ~204
Retrieves canonical Solana SPL token metadata including name, ticker symbol, decimal precision, and current mint/freeze authority addresses. Use when resolving SPL token decimals, ticker symbols, and registry metadata for portfolio or swap formatting; for computing a composite security risk score and binary should_transact verdict, use evaluate_solana_token_risk instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'mint' ('network' defaults to 'mainnet-beta'), supports '?demo=true' or x402 (200 sats), and returns HTTP 400 if invalid.
| Name | Type | Req | Description |
|---|---|---|---|
| mint | string | yes | Base58-encoded Solana SPL token mint address (e.g. 'EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v'). |
| network | string | – | Solana cluster to query; defaults to 'mainnet-beta' when omitted. |
| Name | Type | Req | Description |
|---|---|---|---|
| authorities_renounced | boolean | yes | True when both mint_authority and freeze_authority are null. |
| decimals | integer | yes | Token decimal precision used for raw lamport/atomic unit conversion. |
| mint | string | yes | Queried Base58 SPL token mint address. |
| symbol | string | yes | Canonical token ticker symbol (e.g. 'USDC', 'SOL', 'JUP'). |
No examples provided.
plan_bitcoin_utxo_consolidation Bitcoin SegWit/Taproot UTXO Dust Consolidation & Fee-Window Planner ~234
Analyzes a set of Bitcoin UTXO balances in satoshis to compute exact vByte transaction weight, identify uneconomical dust inputs, and recommend whether to consolidate now or hold. Use when optimizing on-chain Bitcoin treasury UTXO sets to minimize long-term miner fee drag; for fetching current live Bitcoin mempool sat/vB feerates alone, use estimate_bitcoin_mempool_fees instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'utxos_sats_json' ('script_type' defaults to 'p2wpkh_segwit'), supports '?demo=true' or L402 (80 sats), and returns HTTP 400 if invalid.
| Name | Type | Req | Description |
|---|---|---|---|
| script_type | string | – | Bitcoin input script type determining vByte weight per input; defaults to 'p2wpkh_segwit' when omitted. |
| utxos_sats_json | string | yes | JSON array or comma-separated list of UTXO values in satoshis (e.g. '[1200, 45000, 85000]'). |
| Name | Type | Req | Description |
|---|---|---|---|
| estimated_consolidation_vbytes | integer | yes | Total virtual byte (vB) size of the consolidation transaction. |
| high_fee_dust_utxos | integer | yes | Count of UTXOs whose input weight costs more than 3% of their value. |
| recommended_action | string | yes | Execution timing advice ('CONSOLIDATE_NOW' or 'HOLD_UNTIL_SUB_15_SAT_VB'). |
| utxo_count | integer | yes | Number of UTXO inputs analyzed. |
No examples provided.
scan_solana_cpi_reentrancy Solana Anchor & Rust Cross-Program Invocation (CPI) Vulnerability Scanner ~190
Scans Solana Anchor and native Rust program instructions for unverified Cross-Program Invocation (CPI) program IDs, missing signer checks, and PDA bump seed canonicalization bugs. Use when auditing Solana Rust/Anchor source code or instruction account structs for CPI privilege escalation; for checking live SPL token mint/freeze authorities and rug-pull risk by mint address, use evaluate_solana_token_risk instead. Read-only edge call (32 KB, 60 RPM): accepts 'rust_source_or_idl' ('framework' defaults to 'anchor'), uses '?demo=true' or L402 (160 sats); HTTP 400 if invalid.
| Name | Type | Req | Description |
|---|---|---|---|
| framework | string | – | Solana program framework used; defaults to 'anchor' when omitted. |
| rust_source_or_idl | string | yes | Solana Rust/Anchor source code or IDL JSON string to scan for CPI vulnerabilities. |
| Name | Type | Req | Description |
|---|---|---|---|
| arbitrary_cpi_detected | boolean | yes | True if invoke/invoke_signed is called without validating the target program account. |
| audit_verdict | string | yes | Overall Solana program verdict ('SAFE_ANCHOR_PROGRAM' or 'CRITICAL_CPI_VULNERABILITY'). |
| missing_signer_checks | array | yes | Accounts mutated without enforcing Signer<'info> or has_one constraints. |
| pda_bump_safe | boolean | yes | True when canonical bump seeds are enforced on all PDA derivations. |
No examples provided.
simulate_evm_transaction_calldata Pre-Sign EVM Hex Calldata Selector Decoder & Drain Simulator ~216
Decodes raw EVM hexadecimal transaction calldata (0x...) by 4-byte function selector to expose hidden ERC-20 approve/transferFrom calls, setApprovalForAll drains, and multicall bundles. Use when auditing raw hex transaction data (to, value, data) before broadcasting an on-chain EVM transaction; for inspecting off-chain EIP-712 JSON typed-data signatures, use decode_eip712_permit_signature instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'calldata_hex' ('network' defaults to 'base_mainnet'), supports '?demo=true' or L402 (90 sats), and returns HTTP 400 if invalid.
| Name | Type | Req | Description |
|---|---|---|---|
| calldata_hex | string | yes | Hexadecimal EVM transaction data string starting with '0x' (e.g. '0x095ea7b3000000000000000000000000...'). |
| network | string | – | Target EVM network for simulation context; defaults to 'base_mainnet' when omitted. |
| Name | Type | Req | Description |
|---|---|---|---|
| approval_or_drain_risk | boolean | yes | True if the call grants token/NFT allowances or transfers assets to an untrusted target. |
| decoded_method | string | yes | Human-readable ABI function signature matched to the selector. |
| selector_hex | string | yes | Extracted 4-byte function selector (e.g. '0x095ea7b3'). |
| simulation_verdict | string | yes | Pre-sign safety recommendation ('SAFE_CALLDATA' or 'HIGH_RISK_APPROVAL_DETECTED'). |
No examples provided.
track_solana_whale_flows Solana Whale Wallet Net-Flow & Insider Cluster Tracker ~172
Tracks 24-hour net accumulation or distribution flows across top Solana whale wallets and flags coordinated insider wallet clusters for a given SPL token. Use when analyzing on-chain smart-money order flow and holder clustering on Solana; for checking static SPL contract mint/freeze authority permissions, use evaluate_solana_token_risk instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'token' ('window' defaults to '1h'), supports '?demo=true' or x402 (500 sats), and returns HTTP 400 if invalid.
| Name | Type | Req | Description |
|---|---|---|---|
| token | string | yes | Base58 Solana SPL token mint address or ticker symbol to track whale flows for. |
| window | string | – | Aggregation lookback window for net whale flow; defaults to '24h' when omitted. |
| Name | Type | Req | Description |
|---|---|---|---|
| insider_cluster_detected | boolean | yes | True if synchronized funding patterns indicate an insider wallet cluster. |
| net_flow_24h_usd | string | yes | Signed 24-hour net whale flow denominated in USD. |
| signal | string | yes | Order-flow classification ('ACCUMULATION' or 'DISTRIBUTION'). |
| token | string | yes | Tracked Solana token identifier. |
No examples provided.
verify_http402_payment_challenge Pre-Payment HTTP 402 (L402 / x402 / MPP) Invoice & Macaroon Fraud Verifier ~202
Decodes inbound HTTP 402 Payment Required challenges (L402 BOLT11 + Macaroon, x402 Solana USDC, MPP Base intents) to verify cryptographic payment-hash binding and block overcharge fraud. Use when auditing a 402 challenge header before an autonomous agent pays a Lightning invoice or USDC transfer; for checking on-chain Bitcoin L1 mempool feerates, use estimate_bitcoin_mempool_fees instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'www_authenticate' ('protocol_hint' defaults to 'L402'), supports '?demo=true' or L402 (60 sats), and returns HTTP 400 if invalid.
| Name | Type | Req | Description |
|---|---|---|---|
| protocol_hint | string | – | Expected HTTP 402 payment protocol; defaults to 'L402' when omitted. |
| www_authenticate | string | yes | Raw WWW-Authenticate or Payment-Required HTTP header string from a 402 response. |
| Name | Type | Req | Description |
|---|---|---|---|
| macaroon_payment_hash_matches_bolt11 | boolean | yes | True when the macaroon caveat hash matches the BOLT11 invoice payment hash. |
| overcharge_detected | boolean | yes | True if the invoice amount exceeds the declared endpoint price ceiling. |
| payment_safety_verdict | string | yes | Authorization recommendation ('SAFE_TO_PAY' or 'REJECT_HASH_MISMATCH'). |
| protocol_detected | string | yes | Identified 402 settlement protocol ('L402', 'x402', or 'MPP'). |
No examples provided.
How do I install the Diogenes Web3, DeFi & 402 Security MCP server?
Diogenes Web3, DeFi & 402 Security MCP is a hosted endpoint at https://diogenes-micro-gateway.corinth.workers.dev/mcp/web3-security, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · diogenes-micro-gateway.corinth.workers.dev
claude mcp add --transport http stand-out-of-my-sun-diogenes-web3-security-mcp 'https://diogenes-micro-gateway.corinth.workers.dev/mcp/web3-security'
What is the Diogenes Web3, DeFi & 402 Security MCP server?
Diogenes Web3, DeFi & 402 Security MCP is listed in the public MCP registry as io.github.stand-out-of-my-sun/diogenes-web3-security-mcp. Smart contract audit oracles, Solana risk analysis, MEV defense & HTTP 402 verifiers. This page covers its hosted endpoint (https://diogenes-micro-gateway.corinth.workers.dev/mcp/web3-security).
Is the Diogenes Web3, DeFi & 402 Security MCP server safe to use?
Diogenes Web3, DeFi & 402 Security MCP scores 62 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the Diogenes Web3, DeFi & 402 Security MCP server expose?
Diogenes Web3, DeFi & 402 Security MCP exposes 15 tools: audit_smart_contract_code, scan_solana_cpi_reentrancy, evaluate_solana_token_risk, inspect_solana_token_liquidity, track_solana_whale_flows, and 10 more. Their descriptions and schemas cost roughly 2,874 tokens of context every time the server is loaded.
Does the Diogenes Web3, DeFi & 402 Security MCP server require authentication?
No. We connected to Diogenes Web3, DeFi & 402 Security MCP without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the Diogenes Web3, DeFi & 402 Security MCP server still maintained?
Diogenes Web3, DeFi & 402 Security MCP is still listed as active in the MCP registry. We last reached this channel on 23 October 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.