Skip to content

Paddock

by paddock.finance · remote · no sign-in to list tools · v3.6.0 · published by finance.paddock

Pre-payment verification for AI agents.

Final · 1Changes · 1

13 tools: 1 do something that can't be undone, 1 change things and 11 only read.

Scanned Oct 21, 2026

2 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http paddock https://paddock.finance/api/mcp/mcp

Findings

Matches of fixed checks, with the text they matched.

1 warn1 info
  • The server marks "verify_before_pay" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"openWorldHint":true}; The name "verify_before_pay" says "pay": a word that usually means money moves, which cannot be taken back.

    What this check looks for
  • The description is 2,127 characters long, over the 2,000 this check looks for.

    Matched text

    description ends: "...and a URL a third party can verify independently against Paddock's published key."

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

13 tools

Can't be undone 1Claude Code: ask
  • verify_before_payShould my agent pay this endpoint right now?2 findings

    Why it is in this group

    • The name "verify_before_pay" says "pay": a word that usually means money moves, which cannot be taken back.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Info

      The description is 2,127 characters long, over the 2,000 this check looks for.

      Matched text

      description ends: "...and a URL a third party can verify independently against Paddock's published key."

      What this check looks for
    • Warn

      The server marks "verify_before_pay" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"openWorldHint":true}; The name "verify_before_pay" says "pay": a word that usually means money moves, which cannot be taken back.

      What this check looks for
    Description, as the server wrote it
    Should my agent pay this endpoint right now? Free key - a free pk_free_ key covers it against a shared 10 calls/day; $0.25 per call via x402 beyond it. Over MCP only, 1 free trial call/day is available without a key. CALL THIS BEFORE YOUR AGENT AUTHORIZES ANY x402 PAYMENT. An unpaid GET and POST at query time decode the 402 from the body AND the payment-required header; HTTP 200 is never treated as live. A contract mismatch is route:false and names the field (network, asset, seller, price). Includes independent paid-fulfillment results where available — whether a third party has actually paid this endpoint and got a valid response back, with the settlement hash. Test the result with route === true: the string "inconclusive" is truthy, and it is the one case where you must not pay on our say-so. The bias is deliberate: where evidence is incomplete, verify_before_pay favors inconclusive over a false pass — it will more often decline to clear a good endpoint than clear a bad one. route: true means the live contract matched your expectations — it is not an all-clear on every signal: stale settlement, a circular flag, a payTo divergence, and a failed request pre-flight can each coexist with it, so read the checks block rather than route alone. route_state carries the same verdict as route, always as a string ("true", "false", "inconclusive"), for clients that cannot type a boolean-or-string field. contract_and_request_ok is the narrower combined verdict: true only when route is true AND your own declared request passed pre-flight, false when either is bad, and the string "not_assessed" when a term was never established (usually because you passed no intended_params). Test it with === true; contract_and_request_ok_excludes names the risk categories it is silent on. No success-rate field is returned, deliberately: Paddock observes settlements, not failed calls, so recency and frequency are reported instead. Pass attest: true to also issue a signed, publicly fetchable record of this verdict — returns an attestation id and a URL a third party can verify independently against Paddock's published key.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
Changes things 1Claude Code: ask
  • check_payeeIs this the seller's wallet, before my agent pays it?No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Is this the seller's wallet, before my agent pays it? Fast payee check before an agent pays. Send the resource URL and the payment terms you are about to sign: payee wallet, network and amount. Paddock answers from its daily settlement record in one call, with no live probe, and returns pass, warn, fail or unknown. Only fail recommends blocking. Free without a key up to 25 checks a day, or 1000 a day with a free key. For a full check against the seller's live payment terms, use verify_before_pay. Past the free limits, $0.01 per call over x402.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
Only reads 11Claude Code: allow
  • get_best_value_providerWhich provider in this category should my agent pick?No findings

    Why it is in this group

    • The name "get_best_value_provider" says "get": a word for reading.
    Description, as the server wrote it
    Which provider in this category should my agent pick? Paid - $0.02 per call via x402, or a Builder / Pro Agent key. Over MCP only, 1 free trial call/day is available without a key. Ranks a category by reliability (7-day share of probes that succeeded), reputation (unique buyers), and price, returning every input so the score can be checked. The composite formula is published in the route and in the docs, and Paddock does not sell positions in this ranking. Valid categories: llm, data, search, infra, content, markets, payments, comms (aliases accepted).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_category_detailWho's selling in this category, and who's actually getting paid?No findings

    Why it is in this group

    • The name "get_category_detail" says "get": a word for reading.
    Description, as the server wrote it
    Who's selling in this category, and who's actually getting paid? Free key - a free pk_free_ key covers it against a shared 10 calls/day. Every service in a category with daily transactions, USDC volume, unique buyers, and reliability score, from the nightly snapshot. Valid categories: llm, data, search, infra, content, markets, payments, comms. Accepts common aliases (e.g. 'LLM inference' -> llm, 'scraping' -> data, 'trading' -> markets, 'defi' -> markets).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_changesWhat changed since a date I name?No findings

    Why it is in this group

    • The name "get_changes" says "get": a word for reading.
    Description, as the server wrote it
    What changed since a date I name? Paid - $0.10 per call via x402, or a Builder / Pro Agent key. Over MCP only, 1 free trial call/day is available without a key. Diffs today against any snapshot up to 90 days back — new services, retired services, category share shifts, top movers, with the figures on both sides.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_circular_signalIs this facilitator's volume real, or is it paying itself?No findings

    Why it is in this group

    • The name "get_circular_signal" says "get": a word for reading.
    Description, as the server wrote it
    Is this facilitator's volume real, or is it paying itself? Paid - $0.99 per call via x402, or a Builder / Pro Agent key. Over MCP only, 1 free trial call/day is available without a key. Wash/circular-settlement signal per facilitator: flagged clusters, flagged volume and share, self-funding percentage, detection date. Methodology public (v0.1). Patterns attach to the facilitator only — no seller wallet addresses, operator identity, or per-wallet rows are ever returned.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_livenessWas this domain up at last night's probe, per someone who isn't the seller?No findings

    Why it is in this group

    • The name "get_liveness" says "get": a word for reading.
    Description, as the server wrote it
    Was this domain up at last night's probe, per someone who isn't the seller? Free key - a free pk_free_ key covers it against a shared 10 calls/day; $0.001 per call via x402 beyond it. Over MCP only, 1 free trial call/day is available without a key. Per-domain 7-day share of probes that succeeded, latency p50/p95, sample counts, and last-probe time — including domains with no payment history at all. Sourced from an independent third-party monitoring feed, captured NIGHTLY: this is a daily series, not a live probe — for a check taken at query time use verify_before_pay. up is 7-day share of probes that succeeded >= 0.95 across every probed endpoint on the domain.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_market_summaryHow big is agent commerce today?No findings

    Why it is in this group

    • The name "get_market_summary" says "get": a word for reading.
    Description, as the server wrote it
    How big is agent commerce today? (The citation number.) Keyless - no key, no payment, no rate limit. Returns daily transactions, USDC spend, unique buyer agents, live providers, and top categories by share. Each category's share_of_transactions is its share of CATEGORIZED (attributed) transactions — named categories only, NOT a share of the full-ecosystem daily_transactions total; only the top 6 are returned, so the shown shares sum to <100% by design.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_niche_gapsWhere is demand outrunning supply?No findings

    Why it is in this group

    • The name "get_niche_gaps" says "get": a word for reading.
    Description, as the server wrote it
    Where is demand outrunning supply? Free key - a free pk_free_ key covers it against a shared 10 calls/day; $0.01 per call via x402 beyond it. Over MCP only, 1 free trial call/day is available without a key. Every category ranked by opportunity score (high volume, few providers), with concentration and an Open/Tightening/Consolidating/Mature signal, and the published thresholds behind that label.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_provider_revenueWho earns the most, and how much of the market can that answer see?No findings

    Why it is in this group

    • The name "get_provider_revenue" says "get": a word for reading.
    Description, as the server wrote it
    Who earns the most, and how much of the market can that answer see? Paid - $0.99 per call via x402, or a Builder / Pro Agent key. Over MCP only, 1 free trial call/day is available without a key. Resolved by payTo wallet attribution, not by counting events. ATTRIBUTED universe only, never the full-ecosystem census: facilitator pass-through and circular-flagged wallets are excluded from the leaderboard; unresolved wallets are not dropped — they surface as one explicit unattributed row (transaction share only, no dollar figure exists for them). Also reports whether the recipient list was complete on every aggregated day, and flags (retroactive_exclusion_caveat) any day before 2026-07-28 where a wallet added to the exclusion lists afterward could not be retroactively re-checked.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_report_dataWhat are the numbers behind the monthly report?No findings

    Why it is in this group

    • The name "get_report_data" says "get": a word for reading.
    Description, as the server wrote it
    What are the numbers behind the monthly report? Paid - $0.99 per call via x402, or a Builder / Pro Agent key. Metadata is free. No free trial on this tool. The monthly State of Agent Commerce as structured JSON: every figure with its universe label and methodology version, plus trends, category breakdowns, protocol comparison and reliability. Any Agent Commerce Index (ACI) block is a retained historical print — the index is suspended (ADR 0006) and no new prints are computed. Free metadata (title, TOC, executive summary excerpt) is available without payment at /api/mcp/report-data.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_token_metricsIs today's number a real move or ordinary noise?No findings

    Why it is in this group

    • The name "get_token_metrics" says "get": a word for reading.
    Description, as the server wrote it
    Is today's number a real move or ordinary noise? Free key - a free pk_free_ key covers it against a shared 10 calls/day; $0.01 per call via x402 beyond it. Over MCP only, 1 free trial call/day is available without a key. Paddock's own first-party series — the same chart data the public /charts page reads — queryable by metric and date range. Metrics: spend_share_over_time, daily_transactions, category_concentration, new_services, liveness_score, aci. The aci metric returns the Agent Commerce Index series, which is SUSPENDED (ADR 0006): existing prints are retained and served, no new prints are computed, so that series does not advance. This is Paddock's series, not token prices; third-party token market data is deliberately not resold here.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_whale_activityWhere did the large settlements go?No findings

    Why it is in this group

    • The name "get_whale_activity" says "get": a word for reading.
    Description, as the server wrote it
    Where did the large settlements go? Paid - $0.99 per call via x402, or a Builder / Pro Agent key. Over MCP only, 1 free trial call/day is available without a key. Large settlements over a window, aggregated by facilitator, category and size band, plus per-category mover counts. Size and where, never who — no individual seller identity is returned.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 3.6.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http paddock https://paddock.finance/api/mcp/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__paddock__get_market_summary",
      "mcp__paddock__get_liveness",
      "mcp__paddock__get_circular_signal",
      "mcp__paddock__get_best_value_provider",
      "mcp__paddock__get_category_detail",
      "mcp__paddock__get_niche_gaps",
      "mcp__paddock__get_changes",
      "mcp__paddock__get_whale_activity",
      "mcp__paddock__get_token_metrics",
      "mcp__paddock__get_provider_revenue",
      "mcp__paddock__get_report_data"
    ],
    "ask": [
      "mcp__paddock__verify_before_pay",
      "mcp__paddock__check_payee"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as paddock. Review it before you use it.