Skip to content
anlyon.devby Anlyon

SingIt x402

app.singitai/singitsingitai.appstreamable-httpv0.1.1Scanned

Web search, page reading, prices and market data for agents via x402, in USDC on Base or Solana.

14 tools: 14 only read.

Tools: 0 delete, 0 irreversible, 0 write, 14 read.
  • Reads private data · 1
  • Reads text others write · 12
  • Can send data out · 1
  • No findings

Anlyon alternative

Run the operations that matter as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →
Compare with similar serversMarkdownJSONReport this listing

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

14 tools

Only reads 14Show 14 read-only tools
  • get_crypto_newsReal-time crypto market news with sentiment analysis and top headlines.Reads text others writeNo findings

    Why it is in this group

    • The name "get_crypto_news" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Real-time crypto market news with sentiment analysis and top headlines. Paid per call from your SingIt limits (Base USDC).

    Annotations the server declares

    • title: Get crypto news
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • get_funding_ratesCross-venue funding rates, open interest, long/short ratios, whale positions, and liquidations.Reads text others writeNo findings

    Why it is in this group

    • The name "get_funding_rates" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Cross-venue funding rates, open interest, long/short ratios, whale positions, and liquidations. Paid per call from your SingIt limits (Base USDC).

    Annotations the server declares

    • title: Get funding rates
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • get_hyperliquid_marketHyperliquid perpetuals market data: price, funding, open interest, leverage, and size specs.Reads text others writeNo findings

    Why it is in this group

    • The name "get_hyperliquid_market" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Hyperliquid perpetuals market data: price, funding, open interest, leverage, and size specs. Paid per call from your SingIt limits (Base USDC).

    Annotations the server declares

    • title: Get Hyperliquid market
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • get_priceA crypto, metal or fx price.No findings

    Why it is in this group

    • The name "get_price" says "get": a word for reading.
    Description, as the server wrote it
    A crypto, metal or fx price. Free.

    Annotations the server declares

    • title: Get price
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_sign402_reportLocal Sign402 paid report settled through official x402 on Base Mainnet.Reads text others writeNo findings

    Why it is in this group

    • The name "get_sign402_report" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Local Sign402 paid report settled through official x402 on Base Mainnet. Paid per call from your SingIt limits (Base USDC).

    Annotations the server declares

    • title: Get Sign402 report
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • get_singit_risk_checkSign402 risk analysis endpoint paid with SINGIT on Base through Bankr x402 Cloud.Reads text others writeNo findings

    Why it is in this group

    • The name "get_singit_risk_check" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Sign402 risk analysis endpoint paid with SINGIT on Base through Bankr x402 Cloud. Paid per call from your SingIt limits (Base USDC).

    Annotations the server declares

    • title: SingIt risk check
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • get_token_priceUSD price for a major token by symbol.Reads text others writeNo findings

    Why it is in this group

    • The name "get_token_price" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    USD price for a major token by symbol. Paid per call from your SingIt limits (Base USDC).

    Annotations the server declares

    • title: Get token price
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • get_weatherPaid weather forecast API exposed through official x402 on Algorand.Reads text others writeNo findings

    Why it is in this group

    • The name "get_weather" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Paid weather forecast API exposed through official x402 on Algorand. Paid per call from your SingIt limits (Base USDC).

    Annotations the server declares

    • title: Get weather
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • get_x_profileLook up a Twitter/X profile by username through a Base USDC x402 endpoint.Reads text others writeNo findings

    Why it is in this group

    • The name "get_x_profile" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Look up a Twitter/X profile by username through a Base USDC x402 endpoint. Paid per call from your SingIt limits (Base USDC).

    Annotations the server declares

    • title: Get X profile
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • list_modelsModels this key can ask for chat, images or audio, with their SingIt prices.Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "list_models" says "list": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "chat": it reads messages.
    • untrusted-inputThe description's first sentence says "chat": it reads messages, which other people can write.
    Description, as the server wrote it
    Models this key can ask for chat, images or audio, with their SingIt prices. Free.

    Annotations the server declares

    • title: List models
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • list_price_symbolsEvery symbol get_price knows.No findings

    Why it is in this group

    • The name "list_price_symbols" says "list": a word for reading.
    Description, as the server wrote it
    Every symbol get_price knows. Free.

    Annotations the server declares

    • title: List price symbols
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • read_pageRead a web page's text (Exa).Reads text others writeCan send data outNo findings

    Why it is in this group

    • The name "read_page" says "read": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • untrusted-inputThe description's first sentence says "read" and "web": it reads web pages, which anyone can write.
    • untrusted-inputThe input takes a URL (input.url), and the tool reads it: it reads web pages, which anyone can write.
    • outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.

    Claude Code: ask, because it is tagged outbound.

    Description, as the server wrote it
    Read a web page's text (Exa). Paid per call from your SingIt limits (Base USDC); needs the key's "search" scope.

    Annotations the server declares

    • title: Read page
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • resolve_ensResolve a .eth name into an address, or an address into its primary .eth name.Reads text others writeNo findings

    Why it is in this group

    • The name "resolve_ens" says "resolve": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Resolve a .eth name into an address, or an address into its primary .eth name. Paid per call from your SingIt limits (Base USDC).

    Annotations the server declares

    • title: Resolve ENS name
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

12 paths in this server alone from private data, through text someone else wrote, to a way out. Denying 1 outbound tool breaks every one.

Reads private data1
Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write12
Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
Can send data out1
Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.
deny to break every path
{
  "permissions": {
    "deny": [
      "mcp__singit__read_page"
    ]
  }
}

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

No check matched anything in these tool definitions. That is not a safety guarantee.

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 0.1.1. Values in angle brackets are yours to fill in.

claude mcp add --transport http singit https://app.singitai.app/mcp
claude mcp add --transport http singit https://app.singitai.app/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__singit__get_price",
      "mcp__singit__list_price_symbols",
      "mcp__singit__list_models",
      "mcp__singit__web_search",
      "mcp__singit__get_weather",
      "mcp__singit__get_sign402_report",
      "mcp__singit__get_singit_risk_check",
      "mcp__singit__get_x_profile",
      "mcp__singit__get_crypto_news",
      "mcp__singit__get_hyperliquid_market",
      "mcp__singit__get_funding_rates",
      "mcp__singit__resolve_ens",
      "mcp__singit__get_token_price"
    ],
    "ask": [
      "mcp__singit__read_page"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as singit. Review it before you use it.

Capability tags behind 12 rules
  • mcp__singit__list_models private-data, untrusted-input
  • mcp__singit__web_search untrusted-input
  • mcp__singit__read_page untrusted-input, outbound
  • mcp__singit__get_weather untrusted-input
  • mcp__singit__get_sign402_report untrusted-input
  • mcp__singit__get_singit_risk_check untrusted-input
  • mcp__singit__get_x_profile untrusted-input
  • mcp__singit__get_crypto_news untrusted-input
  • mcp__singit__get_hyperliquid_market untrusted-input
  • mcp__singit__get_funding_rates untrusted-input
  • mcp__singit__resolve_ens untrusted-input
  • mcp__singit__get_token_price untrusted-input

Pin

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/app.singitai/singit/verify?hash=2873c95ab0ed947fee2fb0eae85a2677a3f254f9daaf2922c0dfd0555e6d5d00" | jq -e '.changed == false'

Pinned hash 2873c95ab0ed, from Oct 25, 2026, 14:25 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/app.singitai/singit/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

anlyon.dev badge for app.singitai/singit
[![anlyon.dev](https://anlyon.dev/badge/app.singitai/singit.svg)](https://anlyon.dev/servers/app.singitai/singit)

Source: MCP Registry · repository. Synced Oct 25, 2026, 15:17 UTC.