Skip to content
anlyon.devby Anlyon

GhOsT77 crypto data jobs

com.onrender.ghost77-agent/ghost77ghost77-agent.onrender.comstreamable-httpv1.0.0Scanned

Read-only crypto data tools: Hyperliquid, token and contract risk, DeFi. Each call paid via x402.

21 tools: 19 change things and 2 only read.

Tools: 0 delete, 0 irreversible, 19 write, 2 read.
  • Reads private data · 0
  • Reads text others write · 21
  • Can send data out · 1
  • 22 findings

Anlyon alternative

19 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →
Compare with similar serversMarkdownJSONReport this listing

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

21 tools

Changes things 19Claude Code: ask
  • acp_agent_repair_checkWhy is a Virtuals ACP agent not getting jobs?Reads text others write1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.

    Findings

    • Warn

      The description contains a 42-character base64 string.

      Matched text

      description: "...the GHOST77 token (0xC43411421790a07BedC29cBD9924626410d6Ec8A). Verified identity..."

      What this check looks for
    Description, as the server wrote it
    Why is a Virtuals ACP agent not getting jobs? A 0-100 health score and ranked issues with likely causes and exact acp CLI fixes: profile, search rank, offering audit (schemas, SLA, pricing, requiredFunds), ERC-8004 identity and activity. Input: agent id or wallet, optional symptom, e.g. {"agent":"0x...","symptom":"no jobs"}. Under a minute. Public data; inferences labelled. Includes a 10% fee set aside to support the GHOST77 token (0xC43411421790a07BedC29cBD9924626410d6Ec8A). Verified identity: ERC-8004 agent #348263 on Base (https://8004scan.io/agents/base/348263) and Virtuals ACP agent GhOsT77 (https://app.virtuals.io/acp/agent/01a159d2-7272-743d-884d-6850bcebf031); both use payout wallet 0x659d...88e3, the same payTo as this endpoint. Paid per call: 1.1 USDC on Base via x402 at POST https://ghost77-agent.onrender.com/x402/acp_agent_repair_check.

    Annotations the server declares

    • openWorldHint: true
    • readOnlyHint: true
  • base_protocol_healthIs Base congested or expensive right now?Reads text others write1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.

    Findings

    • Warn

      The description contains a 42-character base64 string.

      Matched text

      description: "...the GHOST77 token (0xC43411421790a07BedC29cBD9924626410d6Ec8A). Verified identity..."

      What this check looks for
    Description, as the server wrote it
    Is Base congested or expensive right now? TPS, Mgas/s, block fullness vs gas target, base-fee trend, sequencer liveness, L1 data cost, typical user fee and a public-RPC latency check, with a plain-English summary. Input: chain "base", blocks 10-500, e.g. {"chain":"base","blocks":100}. Seconds. Read-only public RPC data; not an official Base status page. Includes a 10% fee set aside to support the GHOST77 token (0xC43411421790a07BedC29cBD9924626410d6Ec8A). Verified identity: ERC-8004 agent #348263 on Base (https://8004scan.io/agents/base/348263) and Virtuals ACP agent GhOsT77 (https://app.virtuals.io/acp/agent/01a159d2-7272-743d-884d-6850bcebf031); both use payout wallet 0x659d...88e3, the same payTo as this endpoint. Paid per call: 0.55 USDC on Base via x402 at POST https://ghost77-agent.onrender.com/x402/base_protocol_health.

    Annotations the server declares

    • openWorldHint: true
    • readOnlyHint: true
  • bridge_route_checkPick a cheaper, safer bridge route before moving funds: live LI.FI and Across quotes ranked by cost (incl.Reads text others write1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.

    Findings

    • Warn

      The description contains a 42-character base64 string.

      Matched text

      description: "...the GHOST77 token (0xC43411421790a07BedC29cBD9924626410d6Ec8A). Verified identity..."

      What this check looks for
    Description, as the server wrote it
    Pick a cheaper, safer bridge route before moving funds: live LI.FI and Across quotes ranked by cost (incl. gas) and ETA, bridge TVL trends, past incidents and hacks, canonical-bridge timing and L2BEAT risks. Input: from_chain, to_chain, bridge_token, optional bridge_amount, e.g. {"from_chain":"ethereum","to_chain":"base","bridge_token":"USDC"}. Seconds. Read-only; nothing executed. Includes a 10% fee set aside to support the GHOST77 token (0xC43411421790a07BedC29cBD9924626410d6Ec8A). Verified identity: ERC-8004 agent #348263 on Base (https://8004scan.io/agents/base/348263) and Virtuals ACP agent GhOsT77 (https://app.virtuals.io/acp/agent/01a159d2-7272-743d-884d-6850bcebf031); both use payout wallet 0x659d...88e3, the same payTo as this endpoint. Paid per call: 0.55 USDC on Base via x402 at POST https://ghost77-agent.onrender.com/x402/bridge_route_check.

    Annotations the server declares

    • openWorldHint: true
    • readOnlyHint: true
  • contract_researchWhat is publicly known about a contract address: project overview, social and transaction signals, risk summary, source URLs and observation time; missing evidence is marked unknow…Reads text others write1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.

    Findings

    • Warn

      The description contains a 42-character base64 string.

      Matched text

      description: "...the GHOST77 token (0xC43411421790a07BedC29cBD9924626410d6Ec8A). Verified identity..."

      What this check looks for
    Description, as the server wrote it
    What is publicly known about a contract address: project overview, social and transaction signals, risk summary, source URLs and observation time; missing evidence is marked unknown. Input: chain and contractAddress, e.g. {"chain":"base","contractAddress":"0x9401...8631"}. Under a minute. Public-source research only: not a source-code audit or a guarantee of safety. Includes a 10% fee set aside to support the GHOST77 token (0xC43411421790a07BedC29cBD9924626410d6Ec8A). Verified identity: ERC-8004 agent #348263 on Base (https://8004scan.io/agents/base/348263) and Virtuals ACP agent GhOsT77 (https://app.virtuals.io/acp/agent/01a159d2-7272-743d-884d-6850bcebf031); both use payout wallet 0x659d...88e3, the same payTo as this endpoint. Paid per call: 2.2 USDC on Base via x402 at POST https://ghost77-agent.onrender.com/x402/contract_research.

    Annotations the server declares

    • openWorldHint: true
    • readOnlyHint: true
  • contract_security_scanSpot dangerous admin powers: verified-source status, proxy pattern with implementation and admin, owner type (EOA, Safe, timelock), privileged functions (mint, pause, blacklist, up…Reads text others write1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.

    Findings

    • Warn

      The description contains a 42-character base64 string.

      Matched text

      description: "...the GHOST77 token (0xC43411421790a07BedC29cBD9924626410d6Ec8A). Verified identity..."

      What this check looks for
    Description, as the server wrote it
    Spot dangerous admin powers: verified-source status, proxy pattern with implementation and admin, owner type (EOA, Safe, timelock), privileged functions (mint, pause, blacklist, upgrade, fees) and token risk flags, with a verdict and risk level. Input: network, contract_address, e.g. {"network":"base","contract_address":"0x..."}. Seconds. Automated read-only scan, not a full audit. Includes a 10% fee set aside to support the GHOST77 token (0xC43411421790a07BedC29cBD9924626410d6Ec8A). Verified identity: ERC-8004 agent #348263 on Base (https://8004scan.io/agents/base/348263) and Virtuals ACP agent GhOsT77 (https://app.virtuals.io/acp/agent/01a159d2-7272-743d-884d-6850bcebf031); both use payout wallet 0x659d...88e3, the same payTo as this endpoint. Paid per call: 0.55 USDC on Base via x402 at POST https://ghost77-agent.onrender.com/x402/contract_security_scan.

    Annotations the server declares

    • openWorldHint: true
    • readOnlyHint: true
  • crypto_news_digestCatch up on crypto news in one short read: a summarized digest of the key headlines for your window, optionally filtered by topic or tokens, each with its source link.Reads text others write1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.

    Findings

    • Warn

      The description contains a 42-character base64 string.

      Matched text

      description: "...the GHOST77 token (0xC43411421790a07BedC29cBD9924626410d6Ec8A). Verified identity..."

      What this check looks for
    Description, as the server wrote it
    Catch up on crypto news in one short read: a summarized digest of the key headlines for your window, optionally filtered by topic or tokens, each with its source link. Input: timeframe (1h/6h/24h/7d), optional topic, tokens, e.g. {"timeframe":"24h","topic":"Base ecosystem"}. Under a minute. Public news feeds only; coverage is limited. Not financial advice. Includes a 10% fee set aside to support the GHOST77 token (0xC43411421790a07BedC29cBD9924626410d6Ec8A). Verified identity: ERC-8004 agent #348263 on Base (https://8004scan.io/agents/base/348263) and Virtuals ACP agent GhOsT77 (https://app.virtuals.io/acp/agent/01a159d2-7272-743d-884d-6850bcebf031); both use payout wallet 0x659d...88e3, the same payTo as this endpoint. Paid per call: 0.09 USDC on Base via x402 at POST https://ghost77-agent.onrender.com/x402/crypto_news_digest.

    Annotations the server declares

    • openWorldHint: true
    • readOnlyHint: true
  • ghost_web_scraperTurn a public web page into the answer you need: a structured summary or extraction plus source URL, evidence, timestamp and limitations.Reads text others writeCan send data out1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.

    Findings

    • Warn

      The description contains a 42-character base64 string.

      Matched text

      description: "...the GHOST77 token (0xC43411421790a07BedC29cBD9924626410d6Ec8A). Verified identity..."

      What this check looks for
    Description, as the server wrote it
    Turn a public web page into the answer you need: a structured summary or extraction plus source URL, evidence, timestamp and limitations. Input: url (https), request, optional output_format, e.g. {"url":"https://docs.base.org/","request":"List the main sections"}. Under a minute. Public pages only: no sign-in walls, blocked content, forms or account actions. Includes a 10% fee set aside to support the GHOST77 token (0xC43411421790a07BedC29cBD9924626410d6Ec8A). Verified identity: ERC-8004 agent #348263 on Base (https://8004scan.io/agents/base/348263) and Virtuals ACP agent GhOsT77 (https://app.virtuals.io/acp/agent/01a159d2-7272-743d-884d-6850bcebf031); both use payout wallet 0x659d...88e3, the same payTo as this endpoint. Paid per call: 0.02 USDC on Base via x402 at POST https://ghost77-agent.onrender.com/x402/ghost_web_scraper.

    Annotations the server declares

    • openWorldHint: true
    • readOnlyHint: true
  • hl_liquidation_mapWhere liquidations may cluster around a Hyperliquid perp's price: estimated long and short liquidation levels in % buckets around mark, biggest clusters highlighted.Reads text others write1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.

    Findings

    • Warn

      The description contains a 42-character base64 string.

      Matched text

      description: "...the GHOST77 token (0xC43411421790a07BedC29cBD9924626410d6Ec8A). Verified identity..."

      What this check looks for
    Description, as the server wrote it
    Where liquidations may cluster around a Hyperliquid perp's price: estimated long and short liquidation levels in % buckets around mark, biggest clusters highlighted. Input: asset, optional rangePct and bucketPct, e.g. {"asset":"BTC","rangePct":20}. Under a minute. Estimate from live positions of ~420 large accounts, not every position. Not financial advice. Includes a 10% fee set aside to support the GHOST77 token (0xC43411421790a07BedC29cBD9924626410d6Ec8A). Verified identity: ERC-8004 agent #348263 on Base (https://8004scan.io/agents/base/348263) and Virtuals ACP agent GhOsT77 (https://app.virtuals.io/acp/agent/01a159d2-7272-743d-884d-6850bcebf031); both use payout wallet 0x659d...88e3, the same payTo as this endpoint. Paid per call: 1.1 USDC on Base via x402 at POST https://ghost77-agent.onrender.com/x402/hl_liquidation_map.

    Annotations the server declares

    • openWorldHint: true
    • readOnlyHint: true
  • hl_quick_trade_ideaOne rules-based setup for a Hyperliquid perp: side, entry zone, stop-loss, TP1/TP2 and risk:reward from live 1h/4h trend, ATR and swing structure, plus funding and caution flags.Reads text others write1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.

    Findings

    • Warn

      The description contains a 42-character base64 string.

      Matched text

      description: "...the GHOST77 token (0xC43411421790a07BedC29cBD9924626410d6Ec8A). Verified identity..."

      What this check looks for
    Description, as the server wrote it
    One rules-based setup for a Hyperliquid perp: side, entry zone, stop-loss, TP1/TP2 and risk:reward from live 1h/4h trend, ATR and swing structure, plus funding and caution flags. Input: coin, e.g. {"coin":"BTC"}. Seconds. One coin per job, no discretionary or news input; advisory only, no orders placed. Not financial advice. Includes a 10% fee set aside to support the GHOST77 token (0xC43411421790a07BedC29cBD9924626410d6Ec8A). Verified identity: ERC-8004 agent #348263 on Base (https://8004scan.io/agents/base/348263) and Virtuals ACP agent GhOsT77 (https://app.virtuals.io/acp/agent/01a159d2-7272-743d-884d-6850bcebf031); both use payout wallet 0x659d...88e3, the same payTo as this endpoint. Paid per call: 0.28 USDC on Base via x402 at POST https://ghost77-agent.onrender.com/x402/hl_quick_trade_idea.

    Annotations the server declares

    • openWorldHint: true
    • readOnlyHint: true
  • hl_smart_moneyHow Hyperliquid's most profitable traders are positioned now: live long/short totals and per-coin bias for the top 60 traders by 30-day PnL (profitable all-time, $50k+ accounts).Reads text others write1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.

    Findings

    • Warn

      The description contains a 42-character base64 string.

      Matched text

      description: "...the GHOST77 token (0xC43411421790a07BedC29cBD9924626410d6Ec8A). Verified identity..."

      What this check looks for
    Description, as the server wrote it
    How Hyperliquid's most profitable traders are positioned now: live long/short totals and per-coin bias for the top 60 traders by 30-day PnL (profitable all-time, $50k+ accounts). Input: scope "all" or a coin, e.g. {"scope":"BTC"}. Seconds. Positions read live; trader list refreshed hourly from the public HL leaderboard. Data only, not financial advice. Includes a 10% fee set aside to support the GHOST77 token (0xC43411421790a07BedC29cBD9924626410d6Ec8A). Verified identity: ERC-8004 agent #348263 on Base (https://8004scan.io/agents/base/348263) and Virtuals ACP agent GhOsT77 (https://app.virtuals.io/acp/agent/01a159d2-7272-743d-884d-6850bcebf031); both use payout wallet 0x659d...88e3, the same payTo as this endpoint. Paid per call: 1.1 USDC on Base via x402 at POST https://ghost77-agent.onrender.com/x402/hl_smart_money.

    Annotations the server declares

    • openWorldHint: true
    • readOnlyHint: true
  • hl_top_moversWhat is moving on Hyperliquid at a glance: top 24h gainers and losers, volume leaders and funding extremes across perps with $1M+ daily volume, plus breadth and the BTC move.Reads text others write1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.

    Findings

    • Warn

      The description contains a 42-character base64 string.

      Matched text

      description: "...the GHOST77 token (0xC43411421790a07BedC29cBD9924626410d6Ec8A). Verified identity..."

      What this check looks for
    Description, as the server wrote it
    What is moving on Hyperliquid at a glance: top 24h gainers and losers, volume leaders and funding extremes across perps with $1M+ daily volume, plus breadth and the BTC move. Input: window "24h", optional limit 3-25, e.g. {"window":"24h","limit":10}. Seconds. Live public HL API data with timestamp; market data only, not financial advice. Includes a 10% fee set aside to support the GHOST77 token (0xC43411421790a07BedC29cBD9924626410d6Ec8A). Verified identity: ERC-8004 agent #348263 on Base (https://8004scan.io/agents/base/348263) and Virtuals ACP agent GhOsT77 (https://app.virtuals.io/acp/agent/01a159d2-7272-743d-884d-6850bcebf031); both use payout wallet 0x659d...88e3, the same payTo as this endpoint. Paid per call: 0.28 USDC on Base via x402 at POST https://ghost77-agent.onrender.com/x402/hl_top_movers.

    Annotations the server declares

    • openWorldHint: true
    • readOnlyHint: true
  • hl_trader_copy_checkIs a Hyperliquid trader worth copying?Reads text others write2 findings

    Why it is in this group

    • The name "hl_trader_copy_check" says "copy": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.

    Findings

    • Warn

      The description contains a 42-character base64 string.

      Matched text

      description: "...the GHOST77 token (0xC43411421790a07BedC29cBD9924626410d6Ec8A). Verified identity..."

      What this check looks for
    • Warn

      The server marks "hl_trader_copy_check" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "hl_trader_copy_check" says "copy": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Is a Hyperliquid trader worth copying? Account value, positions and leverage, realized PnL net of fees, win rate, avg win/loss, largest loss, trades/day, median hold, top markets, drawdown and a 0-100 copy-ability score. Input: address, e.g. {"address":"0x..."}. Seconds. Public HL data, up to 10,000 recent fills; read-only, not financial advice. Includes a 10% fee set aside to support the GHOST77 token (0xC43411421790a07BedC29cBD9924626410d6Ec8A). Verified identity: ERC-8004 agent #348263 on Base (https://8004scan.io/agents/base/348263) and Virtuals ACP agent GhOsT77 (https://app.virtuals.io/acp/agent/01a159d2-7272-743d-884d-6850bcebf031); both use payout wallet 0x659d...88e3, the same payTo as this endpoint. Paid per call: 1.1 USDC on Base via x402 at POST https://ghost77-agent.onrender.com/x402/hl_trader_copy_check.

    Annotations the server declares

    • openWorldHint: true
    • readOnlyHint: true
  • market_scan_reportA quick read of Hyperliquid's perp market: mark prices, funding, open interest and 24h volume for active markets, up to three funding watchlist candidates, sources, timestamp and l…Reads text others write1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.

    Findings

    • Warn

      The description contains a 42-character base64 string.

      Matched text

      description: "...the GHOST77 token (0xC43411421790a07BedC29cBD9924626410d6Ec8A). Verified identity..."

      What this check looks for
    Description, as the server wrote it
    A quick read of Hyperliquid's perp market: mark prices, funding, open interest and 24h volume for active markets, up to three funding watchlist candidates, sources, timestamp and limits. Input: optional focus (major, altcoins, funding-arb, all), e.g. {"focus":"major"}. Seconds. Read-only snapshot; no historical OI or liquidations, no orders. Not financial advice. Includes a 10% fee set aside to support the GHOST77 token (0xC43411421790a07BedC29cBD9924626410d6Ec8A). Verified identity: ERC-8004 agent #348263 on Base (https://8004scan.io/agents/base/348263) and Virtuals ACP agent GhOsT77 (https://app.virtuals.io/acp/agent/01a159d2-7272-743d-884d-6850bcebf031); both use payout wallet 0x659d...88e3, the same payTo as this endpoint. Paid per call: 0.55 USDC on Base via x402 at POST https://ghost77-agent.onrender.com/x402/market_scan_report.

    Annotations the server declares

    • openWorldHint: true
    • readOnlyHint: true
  • position_health_checkHow close a Hyperliquid account is to trouble: open positions, margin utilization, liquidation distance and observed trigger orders, with sources, timestamp and limits.Reads text others write1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.

    Findings

    • Warn

      The description contains a 42-character base64 string.

      Matched text

      description: "...the GHOST77 token (0xC43411421790a07BedC29cBD9924626410d6Ec8A). Verified identity..."

      What this check looks for
    Description, as the server wrote it
    How close a Hyperliquid account is to trouble: open positions, margin utilization, liquidation distance and observed trigger orders, with sources, timestamp and limits. Input: walletAddress, optional tokens, e.g. {"walletAddress":"0x..."}. Seconds. Read-only snapshot: no PnL history, cannot guarantee stop coverage, changes nothing. Includes a 10% fee set aside to support the GHOST77 token (0xC43411421790a07BedC29cBD9924626410d6Ec8A). Verified identity: ERC-8004 agent #348263 on Base (https://8004scan.io/agents/base/348263) and Virtuals ACP agent GhOsT77 (https://app.virtuals.io/acp/agent/01a159d2-7272-743d-884d-6850bcebf031); both use payout wallet 0x659d...88e3, the same payTo as this endpoint. Paid per call: 0.28 USDC on Base via x402 at POST https://ghost77-agent.onrender.com/x402/position_health_check.

    Annotations the server declares

    • openWorldHint: true
    • readOnlyHint: true
  • project_research_reportUnderstand a crypto project fast: a concise report on what it does, team/backers, tokenomics, on-chain and market snapshot, recent news, risks and a summary verdict.Reads text others write1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.

    Findings

    • Warn

      The description contains a 42-character base64 string.

      Matched text

      description: "...the GHOST77 token (0xC43411421790a07BedC29cBD9924626410d6Ec8A). Verified identity..."

      What this check looks for
    Description, as the server wrote it
    Understand a crypto project fast: a concise report on what it does, team/backers, tokenomics, on-chain and market snapshot, recent news, risks and a summary verdict. Input: project name, ticker or token address, optional chain, e.g. {"project":"Aerodrome","chain":"base"}. About a minute. Automated from public sources; gaps are flagged. Informational only, not financial advice. Includes a 10% fee set aside to support the GHOST77 token (0xC43411421790a07BedC29cBD9924626410d6Ec8A). Verified identity: ERC-8004 agent #348263 on Base (https://8004scan.io/agents/base/348263) and Virtuals ACP agent GhOsT77 (https://app.virtuals.io/acp/agent/01a159d2-7272-743d-884d-6850bcebf031); both use payout wallet 0x659d...88e3, the same payTo as this endpoint. Paid per call: 0.83 USDC on Base via x402 at POST https://ghost77-agent.onrender.com/x402/project_research_report.

    Annotations the server declares

    • openWorldHint: true
    • readOnlyHint: true
  • sentiment_alphaCheck whether public evidence supports a bullish or bearish story.Reads text others write1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.

    Findings

    • Warn

      The description contains a 42-character base64 string.

      Matched text

      description: "...the GHOST77 token (0xC43411421790a07BedC29cBD9924626410d6Ec8A). Verified identity..."

      What this check looks for
    Description, as the server wrote it
    Check whether public evidence supports a bullish or bearish story. You get qualified sentiment, observed catalysts, source URLs, timestamp and coverage limits, or an explicit insufficient-evidence result. Input: query, e.g. {"query":"HYPE"}; includeX adds public X results when available. Under a minute. Public web/news search only; no private feeds. Not financial advice. Includes a 10% fee set aside to support the GHOST77 token (0xC43411421790a07BedC29cBD9924626410d6Ec8A). Verified identity: ERC-8004 agent #348263 on Base (https://8004scan.io/agents/base/348263) and Virtuals ACP agent GhOsT77 (https://app.virtuals.io/acp/agent/01a159d2-7272-743d-884d-6850bcebf031); both use payout wallet 0x659d...88e3, the same payTo as this endpoint. Paid per call: 2.2 USDC on Base via x402 at POST https://ghost77-agent.onrender.com/x402/sentiment_alpha.

    Annotations the server declares

    • openWorldHint: true
    • readOnlyHint: true
  • token_due_diligenceScreen a token for red flags before you touch it: security-provider risk flags, reported DEX liquidity, social/web evidence, sources, timestamp and a CAUTION or ALERT verdict.Reads text others write1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.

    Findings

    • Warn

      The description contains a 42-character base64 string.

      Matched text

      description: "...the GHOST77 token (0xC43411421790a07BedC29cBD9924626410d6Ec8A). Verified identity..."

      What this check looks for
    Description, as the server wrote it
    Screen a token for red flags before you touch it: security-provider risk flags, reported DEX liquidity, social/web evidence, sources, timestamp and a CAUTION or ALERT verdict. Input: chain (ethereum, base, arbitrum, solana) and tokenAddress, e.g. {"chain":"base","tokenAddress":"0x9401...8631"}. Under a minute. Partial automated screen; cannot certify safety or audit status. Includes a 10% fee set aside to support the GHOST77 token (0xC43411421790a07BedC29cBD9924626410d6Ec8A). Verified identity: ERC-8004 agent #348263 on Base (https://8004scan.io/agents/base/348263) and Virtuals ACP agent GhOsT77 (https://app.virtuals.io/acp/agent/01a159d2-7272-743d-884d-6850bcebf031); both use payout wallet 0x659d...88e3, the same payTo as this endpoint. Paid per call: 3.3 USDC on Base via x402 at POST https://ghost77-agent.onrender.com/x402/token_due_diligence.

    Annotations the server declares

    • openWorldHint: true
    • readOnlyHint: true
  • token_technical_analysisA clean technical read on a token: trend, support/resistance, RSI, MACD, moving averages, volume and a short bias summary.Reads text others write1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.

    Findings

    • Warn

      The description contains a 42-character base64 string.

      Matched text

      description: "...the GHOST77 token (0xC43411421790a07BedC29cBD9924626410d6Ec8A). Verified identity..."

      What this check looks for
    Description, as the server wrote it
    A clean technical read on a token: trend, support/resistance, RSI, MACD, moving averages, volume and a short bias summary. Input: token symbol or address, timeframe (15m, 1h, 4h, 1d, 1w), optional chain, e.g. {"token":"ETH","timeframe":"4h"}. Under a minute. Indicators only (no order-book or on-chain flow); thin markets may lack data. Not financial advice. Includes a 10% fee set aside to support the GHOST77 token (0xC43411421790a07BedC29cBD9924626410d6Ec8A). Verified identity: ERC-8004 agent #348263 on Base (https://8004scan.io/agents/base/348263) and Virtuals ACP agent GhOsT77 (https://app.virtuals.io/acp/agent/01a159d2-7272-743d-884d-6850bcebf031); both use payout wallet 0x659d...88e3, the same payTo as this endpoint. Paid per call: 0.55 USDC on Base via x402 at POST https://ghost77-agent.onrender.com/x402/token_technical_analysis.

    Annotations the server declares

    • openWorldHint: true
    • readOnlyHint: true
  • trade_strategy_consultTurn your market view into a risk-sized perp plan: ENTER/WAIT/NO_TRADE, entry zone, stop, TP1/TP2 with R:R, size at 0.5/1/2% risk, leverage cap, liquidation estimate and invalidati…Reads text others write1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.

    Findings

    • Warn

      The description contains a 42-character base64 string.

      Matched text

      description: "...the GHOST77 token (0xC43411421790a07BedC29cBD9924626410d6Ec8A). Verified identity..."

      What this check looks for
    Description, as the server wrote it
    Turn your market view into a risk-sized perp plan: ENTER/WAIT/NO_TRADE, entry zone, stop, TP1/TP2 with R:R, size at 0.5/1/2% risk, leverage cap, liquidation estimate and invalidation, from live HL candles, funding and OI. Input: marketThesis, capitalUsdc, riskTolerance, optional market, horizon, direction. About a minute. Advice only, no execution; not financial advice. Includes a 10% fee set aside to support the GHOST77 token (0xC43411421790a07BedC29cBD9924626410d6Ec8A). Verified identity: ERC-8004 agent #348263 on Base (https://8004scan.io/agents/base/348263) and Virtuals ACP agent GhOsT77 (https://app.virtuals.io/acp/agent/01a159d2-7272-743d-884d-6850bcebf031); both use payout wallet 0x659d...88e3, the same payTo as this endpoint. Paid per call: 3.3 USDC on Base via x402 at POST https://ghost77-agent.onrender.com/x402/trade_strategy_consult.

    Annotations the server declares

    • openWorldHint: true
    • readOnlyHint: true
Only reads 2Show 2 read-only tools
  • hl_funding_snapshotWhat holding a Hyperliquid perp costs now: hourly and annualized funding, who pays, 24h/7d averages, predicted funding (HL, Binance, Bybit where listed), OI, 24h volume, mark vs or…Reads text others write1 finding

    Why it is in this group

    • The name "hl_funding_snapshot" says "snapshot": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.

    Findings

    • Warn

      The description contains a 42-character base64 string.

      Matched text

      description: "...the GHOST77 token (0xC43411421790a07BedC29cBD9924626410d6Ec8A). Verified identity..."

      What this check looks for
    Description, as the server wrote it
    What holding a Hyperliquid perp costs now: hourly and annualized funding, who pays, 24h/7d averages, predicted funding (HL, Binance, Bybit where listed), OI, 24h volume, mark vs oracle premium and a plain-language read. Input: market, e.g. {"market":"ETH"} (default BTC). Seconds. Public HL API data with sources and timestamp; read-only, not financial advice. Includes a 10% fee set aside to support the GHOST77 token (0xC43411421790a07BedC29cBD9924626410d6Ec8A). Verified identity: ERC-8004 agent #348263 on Base (https://8004scan.io/agents/base/348263) and Virtuals ACP agent GhOsT77 (https://app.virtuals.io/acp/agent/01a159d2-7272-743d-884d-6850bcebf031); both use payout wallet 0x659d...88e3, the same payTo as this endpoint. Paid per call: 1.1 USDC on Base via x402 at POST https://ghost77-agent.onrender.com/x402/hl_funding_snapshot.

    Annotations the server declares

    • openWorldHint: true
    • readOnlyHint: true
  • protocol_stats_snapshotA DeFi protocol's health in one snapshot: TVL with 1d/7d/30d change and top chains, fees and revenue (24h/7d/30d) with trends, fees/TVL, revenue share, mcap/revenue and past hacks.Reads text others write1 finding

    Why it is in this group

    • The name "protocol_stats_snapshot" says "snapshot": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.

    Findings

    • Warn

      The description contains a 42-character base64 string.

      Matched text

      description: "...the GHOST77 token (0xC43411421790a07BedC29cBD9924626410d6Ec8A). Verified identity..."

      What this check looks for
    Description, as the server wrote it
    A DeFi protocol's health in one snapshot: TVL with 1d/7d/30d change and top chains, fees and revenue (24h/7d/30d) with trends, fees/TVL, revenue share, mcap/revenue and past hacks. Input: protocol (DefiLlama name or slug), e.g. {"protocol":"aave"}. Under a minute. Only protocols DefiLlama tracks; read-only, not financial advice. Includes a 10% fee set aside to support the GHOST77 token (0xC43411421790a07BedC29cBD9924626410d6Ec8A). Verified identity: ERC-8004 agent #348263 on Base (https://8004scan.io/agents/base/348263) and Virtuals ACP agent GhOsT77 (https://app.virtuals.io/acp/agent/01a159d2-7272-743d-884d-6850bcebf031); both use payout wallet 0x659d...88e3, the same payTo as this endpoint. Paid per call: 0.28 USDC on Base via x402 at POST https://ghost77-agent.onrender.com/x402/protocol_stats_snapshot.

    Annotations the server declares

    • openWorldHint: true
    • readOnlyHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged private-data.

Reads private data0
Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write21
Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
Can send data out1
Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

22 warn
Show 16 more findings

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http ghost77 https://ghost77-agent.onrender.com/mcp
claude mcp add --transport http ghost77 https://ghost77-agent.onrender.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__ghost77__hl_funding_snapshot",
      "mcp__ghost77__protocol_stats_snapshot"
    ],
    "ask": [
      "mcp__ghost77__crypto_news_digest",
      "mcp__ghost77__sentiment_alpha",
      "mcp__ghost77__ghost_web_scraper",
      "mcp__ghost77__hl_top_movers",
      "mcp__ghost77__token_due_diligence",
      "mcp__ghost77__base_protocol_health",
      "mcp__ghost77__market_scan_report",
      "mcp__ghost77__bridge_route_check",
      "mcp__ghost77__project_research_report",
      "mcp__ghost77__contract_research",
      "mcp__ghost77__hl_smart_money",
      "mcp__ghost77__hl_quick_trade_idea",
      "mcp__ghost77__hl_liquidation_map",
      "mcp__ghost77__position_health_check",
      "mcp__ghost77__hl_trader_copy_check",
      "mcp__ghost77__token_technical_analysis",
      "mcp__ghost77__trade_strategy_consult",
      "mcp__ghost77__acp_agent_repair_check",
      "mcp__ghost77__contract_security_scan"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as ghost77. Review it before you use it.

Capability tags behind 21 rules
  • mcp__ghost77__crypto_news_digest untrusted-input
  • mcp__ghost77__hl_funding_snapshot untrusted-input
  • mcp__ghost77__sentiment_alpha untrusted-input
  • mcp__ghost77__protocol_stats_snapshot untrusted-input
  • mcp__ghost77__ghost_web_scraper untrusted-input, outbound
  • mcp__ghost77__hl_top_movers untrusted-input
  • mcp__ghost77__token_due_diligence untrusted-input
  • mcp__ghost77__base_protocol_health untrusted-input
  • mcp__ghost77__market_scan_report untrusted-input
  • mcp__ghost77__bridge_route_check untrusted-input
  • mcp__ghost77__project_research_report untrusted-input
  • mcp__ghost77__contract_research untrusted-input
  • mcp__ghost77__hl_smart_money untrusted-input
  • mcp__ghost77__hl_quick_trade_idea untrusted-input
  • mcp__ghost77__hl_liquidation_map untrusted-input
  • mcp__ghost77__position_health_check untrusted-input
  • mcp__ghost77__hl_trader_copy_check untrusted-input
  • mcp__ghost77__token_technical_analysis untrusted-input
  • mcp__ghost77__trade_strategy_consult untrusted-input
  • mcp__ghost77__acp_agent_repair_check untrusted-input
  • mcp__ghost77__contract_security_scan untrusted-input

Pin

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/com.onrender.ghost77-agent/ghost77/verify?hash=fbc116449777f83d7f704b5c31224a11b80025added18dfb5e1163c031d11003" | jq -e '.changed == false'

Pinned hash fbc116449777, from Nov 1, 2026, 00:18 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/com.onrender.ghost77-agent/ghost77/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

anlyon.dev badge for com.onrender.ghost77-agent/ghost77
[![anlyon.dev](https://anlyon.dev/badge/com.onrender.ghost77-agent/ghost77.svg)](https://anlyon.dev/servers/com.onrender.ghost77-agent/ghost77)

Source: MCP Registry. Synced Nov 1, 2026, 00:17 UTC.