Skip to content
anlyon.devby Anlyon

Money Reactor

dev.workers.makar52nn2016.money-reactor/x402-money-reactormoney-reactor.makar52nn2016.workers.devstreamable-httpv1.4.1Scanned

Crypto/stock prices, QR, DNS, RSS, URL reader, AI chat, weather, ENS, hashes. USDC Base $0.001+

35 tools: 15 change things and 20 only read.

Tools: 0 delete, 0 irreversible, 15 write, 20 read.
  • Reads private data · 0
  • Reads text others write · 6
  • Can send data out · 1
  • No findings

Anlyon alternative

15 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →
Compare with similar serversMarkdownJSONReport this listing

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

35 tools

Changes things 15Claude Code: ask
  • ai_chatPaid $0.01 (x402, USDC Base): LLM chat completion (Llama 3.1 8B, Cloudflare Workers AI).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Paid $0.01 (x402, USDC Base): LLM chat completion (Llama 3.1 8B, Cloudflare Workers AI). Args: prompt (string) OR messages (array of {role, content}), optional system, max_tokens. One-shot AI inference per call, no signup.
  • convert_colorPaid $0.10 (x402, USDC Base): color converter - HEX/RGB/HSL, WCAG luminance, contrast ratios, readable text suggestion.No findings

    Why it is in this group

    • The name "convert_color" says "convert": a word for a change.
    Description, as the server wrote it
    Paid $0.10 (x402, USDC Base): color converter - HEX/RGB/HSL, WCAG luminance, contrast ratios, readable text suggestion. Args: color (string).
  • convert_epochPaid $0.10 (x402, USDC Base): Epoch <-> ISO-8601 time converter with UTC parts and relative age.No findings

    Why it is in this group

    • The name "convert_epoch" says "convert": a word for a change.
    Description, as the server wrote it
    Paid $0.10 (x402, USDC Base): Epoch <-> ISO-8601 time converter with UTC parts and relative age. Args: ts (unix) or iso (string).
  • cron_nextPaid $0.10 (x402, USDC Base): cron solver - next N execution times (UTC) for a standard 5-field cron expression.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Paid $0.10 (x402, USDC Base): cron solver - next N execution times (UTC) for a standard 5-field cron expression. Args: expr (string), n (int, default 5).
  • decode_jwtPaid $0.10 (x402, USDC Base): JWT decoder - header + payload + expiry status, NO signature verification (inspection only).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Paid $0.10 (x402, USDC Base): JWT decoder - header + payload + expiry status, NO signature verification (inspection only). Args: token (string).
  • encode_base64Paid $0.10 (x402, USDC Base): Base64 encode/decode.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Paid $0.10 (x402, USDC Base): Base64 encode/decode. Args: text (string), op ('enc' default | 'dec').
  • gen_loremPaid $0.10 (x402, USDC Base): lorem ipsum generator, 1-20 randomized paragraphs.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Paid $0.10 (x402, USDC Base): lorem ipsum generator, 1-20 randomized paragraphs. Args: p (int, default 3).
  • gen_passwordPaid $0.10 (x402, USDC Base): CSPRNG password/API-secret generator, 8-128 chars, classes upper/lower/digits/symbols, entropy estimate.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Paid $0.10 (x402, USDC Base): CSPRNG password/API-secret generator, 8-128 chars, classes upper/lower/digits/symbols, entropy estimate. Args: length (int, default 20).
  • gen_randomPaid $0.10 (x402, USDC Base): CSPRNG random integers [min,max] or fair pick from list.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Paid $0.10 (x402, USDC Base): CSPRNG random integers [min,max] or fair pick from list. Args: min, max, n, from (comma list).
  • gen_uuidPaid $0.001 (x402, USDC Base): random UUID v4 — idempotency keys and x402 requestKeys on demand; also a canonical $0.001 target for testing x402 payment stacks.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Paid $0.001 (x402, USDC Base): random UUID v4 — idempotency keys and x402 requestKeys on demand; also a canonical $0.001 target for testing x402 payment stacks.
  • repo_verdictPaid $0.001 (x402, USDC Base): one-line GO / CAUTION / HONEYPOT_RISK verdict for a repo.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Paid $0.001 (x402, USDC Base): one-line GO / CAUTION / HONEYPOT_RISK verdict for a repo. Impulse-priced pre-flight check.
  • research_reportPaid $1.00 full / $0.10 preview (x402, USDC Base): LLM 70B writes a structured 7-section research report on your question — executive summary, market context, key data grounded in …No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Paid $1.00 full / $0.10 preview (x402, USDC Base): LLM 70B writes a structured 7-section research report on your question — executive summary, market context, key data grounded in LIVE prices + Fear & Greed + headlines, bull case, bear case, watchlist, bottom line. Optional arg address (0x...) grounds it in live Base token on-chain verdict. Always delivers a data-grounded report even if AI prose is unavailable. Args: topic (string), address (optional), lite (boolean = $0.10 preview).
  • score_repo_trustPaid $0.001 (x402, USDC Base): trust score 0-100 + GO/CAUTION/HONEYPOT_RISK verdict + reasons for a GitHub repo.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Paid $0.001 (x402, USDC Base): trust score 0-100 + GO/CAUTION/HONEYPOT_RISK verdict + reasons for a GitHub repo. Screen bounties before working them — one avoided rug pays for 1000 calls.
  • slugify_textPaid $0.10 (x402, USDC Base): Unicode-safe URL slug generator.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Paid $0.10 (x402, USDC Base): Unicode-safe URL slug generator. Args: text (string), sep (default '-'), max (default 80).
  • text_statsPaid $0.10 (x402, USDC Base): text analytics - chars, words, sentences, paragraphs, reading time, top keywords.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Paid $0.10 (x402, USDC Base): text analytics - chars, words, sentences, paragraphs, reading time, top keywords. Args: text (string).
Only reads 20Show 20 read-only tools
  • get_base_gasPaid $0.001 (x402, USDC Base): live Base gas — gas price, EIP-1559 base fee and suggested priority fee in Gwei.No findings

    Why it is in this group

    • The name "get_base_gas" says "get": a word for reading.
    Description, as the server wrote it
    Paid $0.001 (x402, USDC Base): live Base gas — gas price, EIP-1559 base fee and suggested priority fee in Gwei. Tx cost planning for agents.
  • get_bounty_demoFree: top-3 funded bounties + honeypot sample + ROI pitch — rich preview of the paid feed.No findings

    Why it is in this group

    • The name "get_bounty_demo" says "get": a word for reading.
    Description, as the server wrote it
    Free: top-3 funded bounties + honeypot sample + ROI pitch — rich preview of the paid feed.
  • get_bounty_feedPaid $0.001 (x402, USDC Base): multi-source bounty feed, hourly-refreshed — live Superteam Earn listings (USDC/USDG, $500-$10k), LIVE GitHub bounty radar (top open issues by reacti…Reads text others writeNo findings

    Why it is in this group

    • The name "get_bounty_feed" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe description's first sentence says "issue": it reads issues, which other people can write.
    Description, as the server wrote it
    Paid $0.001 (x402, USDC Base): multi-source bounty feed, hourly-refreshed — live Superteam Earn listings (USDC/USDG, $500-$10k), LIVE GitHub bounty radar (top open issues by reactions with trust scores, anonymous search) + GitLab bounty projects, trust >= 50. Send X-PAYMENT header to settle; without it returns the 402 challenge.
  • get_btc_halvingPaid $0.003 (x402, USDC Base): next Bitcoin halving — current height, blocks left, ETA, post-halving reward.Reads text others writeNo findings

    Why it is in this group

    • The name "get_btc_halving" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe description's first sentence says "post": it reads posts, which other people can write.
    Description, as the server wrote it
    Paid $0.003 (x402, USDC Base): next Bitcoin halving — current height, blocks left, ETA, post-halving reward. Evergreen countdown.
  • get_coin_convertPaid $0.002 (x402, USDC Base): convert an amount between assets at live USD spot (Coinbase) — e.g.No findings

    Why it is in this group

    • The name "get_coin_convert" says "get": a word for reading.
    Description, as the server wrote it
    Paid $0.002 (x402, USDC Base): convert an amount between assets at live USD spot (Coinbase) — e.g. 1 BTC = ? ETH. Rate + result in one call.
  • get_crypto_newsPaid $0.001 (x402, USDC Base): top crypto headlines aggregated from Cointelegraph/Decrypt/NewsBTC RSS with per-article source links and publish times.Reads text others writeNo findings

    Why it is in this group

    • The name "get_crypto_news" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe description's first sentence says "rss": it reads web pages, which anyone can write.
    Description, as the server wrote it
    Paid $0.001 (x402, USDC Base): top crypto headlines aggregated from Cointelegraph/Decrypt/NewsBTC RSS with per-article source links and publish times. Daily brief for trading and research agents.
  • get_crypto_pricePaid $0.001 (x402, USDC Base): live crypto spot price in USD for a pair like BTC-USD / ETH-USD / SOL-USD.No findings

    Why it is in this group

    • The name "get_crypto_price" says "get": a word for reading.
    Description, as the server wrote it
    Paid $0.001 (x402, USDC Base): live crypto spot price in USD for a pair like BTC-USD / ETH-USD / SOL-USD. Sourced from Coinbase public price APIs, edge-cached up to 30s.
  • get_day_passDay Pass: one $0.02 payment (x402, USDC Base) unlocks 24h of unlimited calls on every $0.001 route.No findings

    Why it is in this group

    • The name "get_day_pass" says "get": a word for reading.
    Description, as the server wrote it
    Day Pass: one $0.02 payment (x402, USDC Base) unlocks 24h of unlimited calls on every $0.001 route. Buy once via tools/call settle, then send the returned dp_ token as X-DAY-PASS header. For agents making 20+ calls/day.
  • get_erc20_balancePaid $0.001 (x402, USDC Base): on-chain ERC20 token balance for any Base address via eth_call balanceOf on public Base RPC.No findings

    Why it is in this group

    • The name "get_erc20_balance" says "get": a word for reading.
    Description, as the server wrote it
    Paid $0.001 (x402, USDC Base): on-chain ERC20 token balance for any Base address via eth_call balanceOf on public Base RPC. Returns raw + human balance, decimals, symbol.
  • get_fear_greedPaid $0.001 (x402, USDC Base): crypto Fear & Greed index — today + yesterday + week ago + 10-day history (0=extreme fear, 100=extreme greed).No findings

    Why it is in this group

    • The name "get_fear_greed" says "get": a word for reading.
    Description, as the server wrote it
    Paid $0.001 (x402, USDC Base): crypto Fear & Greed index — today + yesterday + week ago + 10-day history (0=extreme fear, 100=extreme greed). Market sentiment signal for trading agents.
  • get_hashPaid $0.10 (x402, USDC Base): cryptographic hash of any text via WebCrypto.Reads text others writeNo findings

    Why it is in this group

    • The name "get_hash" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe description's first sentence says "web": it reads web pages, which anyone can write.
    Description, as the server wrote it
    Paid $0.10 (x402, USDC Base): cryptographic hash of any text via WebCrypto. Args: text (string), algo (sha256 default | sha1 | sha384 | sha512).
  • get_latest_blockPaid $0.001 (x402, USDC Base): latest Base mainnet block height (eth_blockNumber via public RPC).No findings

    Why it is in this group

    • The name "get_latest_block" says "get": a word for reading.
    Description, as the server wrote it
    Paid $0.001 (x402, USDC Base): latest Base mainnet block height (eth_blockNumber via public RPC). Cheapest chain-tip probe for agents.
  • get_market_pulsePaid $0.01 (x402, USDC Base): full market snapshot in ONE call — batch USD prices (default BTC/ETH/SOL/XRP/DOGE, optional symbols arg) + Fear & Greed sentiment + latest Base block.No findings

    Why it is in this group

    • The name "get_market_pulse" says "get": a word for reading.
    Description, as the server wrote it
    Paid $0.01 (x402, USDC Base): full market snapshot in ONE call — batch USD prices (default BTC/ETH/SOL/XRP/DOGE, optional symbols arg) + Fear & Greed sentiment + latest Base block. One poll replaces three calls; ideal for monitoring loops.
  • get_timePaid $0.001 (x402, USDC Base): current server time in UTC ISO-8601 with unix seconds.No findings

    Why it is in this group

    • The name "get_time" says "get": a word for reading.
    Description, as the server wrote it
    Paid $0.001 (x402, USDC Base): current server time in UTC ISO-8601 with unix seconds. Cheapest liveness/time probe.
  • get_token_verdictPaid $0.02 (x402, USDC Base): onchain safety verdict for a Base token — grade GREEN/MID/YELLOW/RED from liquidity, pair age, turnover, buy/sell flow and volatility (DexScreener dat…No findings

    Why it is in this group

    • The name "get_token_verdict" says "get": a word for reading.
    Description, as the server wrote it
    Paid $0.02 (x402, USDC Base): onchain safety verdict for a Base token — grade GREEN/MID/YELLOW/RED from liquidity, pair age, turnover, buy/sell flow and volatility (DexScreener data) with reasons. Screen tokens before interacting.
  • get_usd_pricePaid $0.001 (x402, USDC Base): multi-asset USD price snapshot in ONE call — up to 25 pairs (default 10 majors: BTC/ETH/SOL/DOGE/XRP/ADA/AVAX/LINK/LTC/USDC).No findings

    Why it is in this group

    • The name "get_usd_price" says "get": a word for reading.
    Description, as the server wrote it
    Paid $0.001 (x402, USDC Base): multi-asset USD price snapshot in ONE call — up to 25 pairs (default 10 majors: BTC/ETH/SOL/DOGE/XRP/ADA/AVAX/LINK/LTC/USDC). Batch beats per-pair calls for portfolio and dashboard agents.
  • get_wallet_profilePaid $0.01 (x402, USDC Base): on-chain wallet profile on Base — ETH balance, tx count (nonce), USDC balance, activity tier (fresh/new/active/veteran).No findings

    Why it is in this group

    • The name "get_wallet_profile" says "get": a word for reading.
    Description, as the server wrote it
    Paid $0.01 (x402, USDC Base): on-chain wallet profile on Base — ETH balance, tx count (nonce), USDC balance, activity tier (fresh/new/active/veteran). Pre-flight counterparty check.
  • get_weatherPaid $0.002 (x402, USDC Base): current weather for any city worldwide (temperature, feels-like, humidity, wind, conditions) via Open-Meteo with city geocoding.No findings

    Why it is in this group

    • The name "get_weather" says "get": a word for reading.
    Description, as the server wrote it
    Paid $0.002 (x402, USDC Base): current weather for any city worldwide (temperature, feels-like, humidity, wind, conditions) via Open-Meteo with city geocoding.
  • reactor_statusFree: Money Reactor live base URL, health, prices, receiver wallet.Reads text others writeNo findings

    Why it is in this group

    • The name "reactor_status" says "status": a word for reading.

    What it can reach

    • untrusted-inputThe description's first sentence says "url": it reads web pages, which anyone can write.
    Description, as the server wrote it
    Free: Money Reactor live base URL, health, prices, receiver wallet. Call this first.
  • read_url_textPaid $0.01 (x402, USDC Base): fetch any http(s) web page and return clean plain text (title + visible body, scripts/styles stripped, up to 8000 chars).Reads text others writeCan send data outNo findings

    Why it is in this group

    • The name "read_url_text" says "read": a word for reading.

    What it can reach

    • untrusted-inputThe name "read_url_text" says "read" and "url": it reads web pages, which anyone can write.
    • untrusted-inputThe description's first sentence says "http": it reads web pages, which anyone can write.
    • untrusted-inputThe input takes a URL (input.url), and the tool reads it: it reads web pages, which anyone can write.
    • outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.

    Claude Code: ask, because it is tagged outbound.

    Description, as the server wrote it
    Paid $0.01 (x402, USDC Base): fetch any http(s) web page and return clean plain text (title + visible body, scripts/styles stripped, up to 8000 chars). Gives text-only agents web reading. Private/internal hosts blocked.

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged private-data.

Reads private data0
Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write6
Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
Can send data out1
Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

No check matched anything in these tool definitions. That is not a safety guarantee.

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 1.4.1. Values in angle brackets are yours to fill in.

claude mcp add --transport http x402-money-reactor https://money-reactor.makar52nn2016.workers.dev/mcp2
claude mcp add --transport http x402-money-reactor https://money-reactor.makar52nn2016.workers.dev/mcp2

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__x402-money-reactor__reactor_status",
      "mcp__x402-money-reactor__get_bounty_demo",
      "mcp__x402-money-reactor__get_day_pass",
      "mcp__x402-money-reactor__get_bounty_feed",
      "mcp__x402-money-reactor__get_crypto_price",
      "mcp__x402-money-reactor__get_crypto_news",
      "mcp__x402-money-reactor__get_usd_price",
      "mcp__x402-money-reactor__get_fear_greed",
      "mcp__x402-money-reactor__get_market_pulse",
      "mcp__x402-money-reactor__get_weather",
      "mcp__x402-money-reactor__get_erc20_balance",
      "mcp__x402-money-reactor__get_token_verdict",
      "mcp__x402-money-reactor__get_latest_block",
      "mcp__x402-money-reactor__get_hash",
      "mcp__x402-money-reactor__get_time",
      "mcp__x402-money-reactor__get_base_gas",
      "mcp__x402-money-reactor__get_wallet_profile",
      "mcp__x402-money-reactor__get_coin_convert",
      "mcp__x402-money-reactor__get_btc_halving"
    ],
    "ask": [
      "mcp__x402-money-reactor__score_repo_trust",
      "mcp__x402-money-reactor__repo_verdict",
      "mcp__x402-money-reactor__read_url_text",
      "mcp__x402-money-reactor__encode_base64",
      "mcp__x402-money-reactor__gen_password",
      "mcp__x402-money-reactor__gen_random",
      "mcp__x402-money-reactor__slugify_text",
      "mcp__x402-money-reactor__convert_epoch",
      "mcp__x402-money-reactor__text_stats",
      "mcp__x402-money-reactor__decode_jwt",
      "mcp__x402-money-reactor__cron_next",
      "mcp__x402-money-reactor__convert_color",
      "mcp__x402-money-reactor__gen_lorem",
      "mcp__x402-money-reactor__gen_uuid",
      "mcp__x402-money-reactor__ai_chat",
      "mcp__x402-money-reactor__research_report"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as x402-money-reactor. Review it before you use it.

Capability tags behind 6 rules
  • mcp__x402-money-reactor__reactor_status untrusted-input
  • mcp__x402-money-reactor__get_bounty_feed untrusted-input
  • mcp__x402-money-reactor__read_url_text untrusted-input, outbound
  • mcp__x402-money-reactor__get_crypto_news untrusted-input
  • mcp__x402-money-reactor__get_hash untrusted-input
  • mcp__x402-money-reactor__get_btc_halving untrusted-input

Pin

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/dev.workers.makar52nn2016.money-reactor/x402-money-reactor/verify?hash=b26cf4b8994a879e458e3a52aaa76f0c9453fcd0eedd7aa0c1df34e939b9fa4f" | jq -e '.changed == false'

Pinned hash b26cf4b8994a, from Oct 26, 2026, 15:18 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/dev.workers.makar52nn2016.money-reactor/x402-money-reactor/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

anlyon.dev badge for dev.workers.makar52nn2016.money-reactor/x402-money-reactor
[![anlyon.dev](https://anlyon.dev/badge/dev.workers.makar52nn2016.money-reactor/x402-money-reactor.svg)](https://anlyon.dev/servers/dev.workers.makar52nn2016.money-reactor/x402-money-reactor)

Source: MCP Registry. Synced Oct 26, 2026, 15:17 UTC.