Skip to content

Genesis402 by UnyKorn (x402 pay-per-call)

by FTHTrading · remote · local (npm) · no sign-in to list tools · v0.3.10 · published by GitHub user FTHTrading

Counterparty checks, sanctions screening, company lookup and 360+ pay-per-call APIs over x402.

Final · 1Changes · 21

22 tools: 1 do something that can't be undone and 21 change things.

Scanned Oct 21, 2026

4 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http genesis402 https://twin.unykorn.org/mcp

Findings

Matches of fixed checks, with the text they matched.

4 warn
  • The server marks "genesis402_company_lookup" as not read-only (readOnlyHint: false), and its words say it reads.

    Matched text

    annotations: {"readOnlyHint":false,"openWorldHint":true}; The name "genesis402_company_lookup" says "lookup": a word for reading.

    What this check looks for
  • The server marks "genesis402_market_snapshot" as not read-only (readOnlyHint: false), and its words say it reads.

    Matched text

    annotations: {"readOnlyHint":false,"openWorldHint":true}; The name "genesis402_market_snapshot" says "snapshot": a word for reading.

    What this check looks for
  • The server marks "genesis402_summarize" as not read-only (readOnlyHint: false), and its words say it reads.

    Matched text

    annotations: {"readOnlyHint":false,"openWorldHint":true}; The name "genesis402_summarize" says "summarize": a word for reading.

    What this check looks for
  • The server marks "genesis402_paper_search" as not read-only (readOnlyHint: false), and its words say it reads.

    Matched text

    annotations: {"readOnlyHint":false,"openWorldHint":true}; The name "genesis402_paper_search" says "search": a word for reading.

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

22 tools

Can't be undone 1Claude Code: ask
  • genesis402_translatePaid ($0.006 USDC).Reads text others writeCan send data outNo findings

    Why it is in this group

    • The input addresses people (input.to): what it sends cannot be taken back.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • outboundThe input takes a destination (input.to): what the tool writes goes there.
    Description, as the server wrote it
    Paid ($0.006 USDC). Translate text into any major language while preserving names, numbers and formatting. Use for customer messages, documents or UI strings. To only identify a text's language call the language-detect endpoint through genesis402_call. Returns the translation as JSON. Payment: call once without payment_signature to get the exact price quote (nothing is charged or signed), then call again with the signed payment to receive the result and settlement details.

    Annotations the server declares

    • readOnlyHint: false
    • openWorldHint: true
Changes things 21Claude Code: ask
  • genesis402_answer_from_textPaid ($0.006 USDC).Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Paid ($0.006 USDC). Answer one question strictly from a document you supply, and return the verbatim quote that supports the answer. Use for contract, policy, filing or email questions where the answer must be traceable to the source. For an overview rather than one answer use genesis402_summarize; to pull many named fields at once use genesis402_extract_json. Returns the answer and a supporting quote that the rail verifies appears in the text. Payment: call once without payment_signature to get the exact price quote (nothing is charged or signed), then call again with the signed payment to receive the result and settlement details.

    Annotations the server declares

    • readOnlyHint: false
    • openWorldHint: true
  • genesis402_callCalls any of the 380 Genesis402 endpoints by name (DeFi, SEC filings, research, web/domain intel, AI text tools, multi-chain reads).Reads text others writeCan send data outNo findings

    Why it is in this group

    • The name "genesis402_call" says "call": a word for a change.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • outboundThe input takes a URL (input.endpoint): a request to a URL can carry data to whoever runs it.
    Description, as the server wrote it
    Calls any of the 380 Genesis402 endpoints by name (DeFi, SEC filings, research, web/domain intel, AI text tools, multi-chain reads). Prices $0.001-$0.25 USDC on Base. Use for any endpoint without a dedicated tool; look up the name and parameters with genesis402_catalog first. Parameters are validated for free before any quote. Without payment_signature (or a local payer) it returns the exact price quote and signs nothing; with payment it returns the result plus the settlement details.

    Annotations the server declares

    • readOnlyHint: false
    • openWorldHint: true
  • genesis402_catalogFree, no payment, read-only.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Free, no payment, read-only. Lists Genesis402 endpoints with name, HTTP path, USD price, title and parameter schema, read from the rail's live /.well-known/x402 manifest (refreshed every 10 minutes). Use it to find an endpoint that has no dedicated genesis402_* tool, then pass its exact name and parameters to genesis402_call. Filter by keyword to keep the list short (e.g. "defi", "sec", "wiki"); with no filter it returns every endpoint, up to 400. Returns the rail origin, total endpoint count, number matched, the current payer mode (QUOTE_ONLY, HOSTED or LIVE with its cap) and the matching endpoints.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • genesis402_company_lookupPaid ($0.01 USDC).Reads text others write1 finding

    Why it is in this group

    • The name "genesis402_company_lookup" says "lookup": a word for reading.
    • The server marks it as not read-only (readOnlyHint: false).

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.

    Findings

    • Warn

      The server marks "genesis402_company_lookup" as not read-only (readOnlyHint: false), and its words say it reads.

      Matched text

      annotations: {"readOnlyHint":false,"openWorldHint":true}; The name "genesis402_company_lookup" says "lookup": a word for reading.

      What this check looks for
    Description, as the server wrote it
    Paid ($0.01 USDC). Look up one company worldwide in the official registers: GLEIF (Legal Entity Identifiers, every country) and US SEC EDGAR. By LEI: legal name, status, jurisdiction, addresses, registration authority, renewal dates and its registered direct and ultimate parent. By name: ranked matches, live registrations first, with legal forms understood across languages and names in their own script. By SEC CIK: filer profile, tickers and latest filings. Registry data only: not KYC, not a compliance determination, not legal advice. Payment: call once without payment_signature to get the exact price quote (nothing is charged or signed), then call again with the signed payment to receive the result and settlement details.

    Annotations the server declares

    • readOnlyHint: false
    • openWorldHint: true
  • genesis402_counterparty_reportPaid ($0.25 USDC).Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Paid ($0.25 USDC). Check one company before you deal with it. Resolves the company in the GLEIF register (name or 20-character LEI), follows its registered direct and ultimate parent, and screens every name in that group against the UN, US OFAC SDN, EU and UK sanctions lists. Returns one verdict (clear, review or stop) with every reason sourced, the registry record, the group screened, the list versions used, an Ed25519-signed receipt, a private link to a branded PDF (7 days) and a public verify page. A vague name (e.g. a bare brand) returns review and names the entity it assumed. Screening and registry signals only: not KYC, not a compliance determination, not legal advice. Payment: call once without payment_signature to get the exact price quote (nothing is charged or signed), then call again with the signed payment to receive the result and settlement details.

    Annotations the server declares

    • readOnlyHint: false
    • openWorldHint: true
  • genesis402_defi_yieldsPaid ($0.01 USDC).Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Paid ($0.01 USDC). Ranked DeFi yield pools from DefiLlama (15,000+ pools), filterable by chain, protocol, token, stablecoin-only and minimum TVL. Use to answer 'where is the best yield for X'. For other DeFi or market data search genesis402_catalog and call the endpoint through genesis402_call. All filters are optional and combine with AND; with none set it returns the top pools above $1M TVL. Returns up to limit pools, each with protocol, chain, symbol, TVL, base APY vs reward APY, 30-day mean APY, impermanent-loss risk, exposure and DefiLlama's outlook class. APYs are variable and backward-looking; not investment advice. Payment: call once without payment_signature to get the exact price quote (nothing is charged or signed), then call again with the signed payment to receive the result and settlement details.

    Annotations the server declares

    • readOnlyHint: false
    • openWorldHint: true
  • genesis402_email_checkPaid ($0.003 USDC).Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Paid ($0.003 USDC). Deliverability and trust check for an email address or domain. Use to vet a signup email or an inbound sender. For the domain's registration age and registrar use genesis402_whois. Returns whether it can receive mail (MX), the hosting provider, SPF and DMARC records and policy, a disposable-domain flag and a 0-5 trust score. DNS-only: no SMTP probe, no email sent, the mailbox is never contacted. Payment: call once without payment_signature to get the exact price quote (nothing is charged or signed), then call again with the signed payment to receive the result and settlement details.

    Annotations the server declares

    • readOnlyHint: false
    • openWorldHint: true
  • genesis402_extract_jsonPaid ($0.006 USDC).Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Paid ($0.006 USDC). Pull the fields you define out of unstructured text as JSON. Anything the text does not state comes back null, never invented. Use to turn emails, invoices, contracts or listings into structured data. To get a web page's text first use genesis402_web_extract. The field descriptions steer the extraction, so include units and formats (e.g. "ISO date", "number in USD"). Returns one JSON object with exactly your keys, each holding the extracted value or null. Payment: call once without payment_signature to get the exact price quote (nothing is charged or signed), then call again with the signed payment to receive the result and settlement details.

    Annotations the server declares

    • readOnlyHint: false
    • openWorldHint: true
  • genesis402_market_snapshotPaid ($0.004 USDC).Reads text others write1 finding

    Why it is in this group

    • The name "genesis402_market_snapshot" says "snapshot": a word for reading.
    • The server marks it as not read-only (readOnlyHint: false).

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.

    Findings

    • Warn

      The server marks "genesis402_market_snapshot" as not read-only (readOnlyHint: false), and its words say it reads.

      Matched text

      annotations: {"readOnlyHint":false,"openWorldHint":true}; The name "genesis402_market_snapshot" says "snapshot": a word for reading.

      What this check looks for
    Description, as the server wrote it
    Paid ($0.004 USDC). USD price with 24-hour and 7-day change for the major crypto assets in a single call, or for up to 25 coins you name. Use when you need more than one price at once: one payment instead of one per coin. For a single coin, or for a token by contract address, search genesis402_catalog and call the endpoint through genesis402_call. Returns one row per coin with price, both changes, timestamp and pricing confidence, plus how many coins rose and fell over 24 hours. Coins with no live price are marked unavailable, never priced at zero. Third-party market data from DefiLlama, as published: not investment advice and no recommendation. Payment: call once without payment_signature to get the exact price quote (nothing is charged or signed), then call again with the signed payment to receive the result and settlement details.

    Annotations the server declares

    • readOnlyHint: false
    • openWorldHint: true
  • genesis402_multi_chain_scanPaid ($0.008 USDC).Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Paid ($0.008 USDC). Sweeps one address across 10 EVM chains at once and reports where it is actually active. Use to find which networks an address uses before drilling into one chain. No risk scoring or sanctions check: for that use genesis402_wallet_brief. Returns, per chain, the native balance, the number of transactions sent and whether contract bytecode is deployed; chains whose RPC did not answer are listed separately, never counted as inactive. Activity is inferred from nonce, balance and code, so an address that only ever received tokens can show a zero nonce; check its balance field. Public on-chain data with sources and an evidence hash. Payment: call once without payment_signature to get the exact price quote (nothing is charged or signed), then call again with the signed payment to receive the result and settlement details.

    Annotations the server declares

    • readOnlyHint: false
    • openWorldHint: true
  • genesis402_provePaid ($0.25 USDC).Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Paid ($0.25 USDC). Issue one Ed25519-signed, hash-chained receipt recording that a SHA-256 digest existed at the time of payment. Use as a cheap timestamped proof that you held a document or statement. To look the receipt up later use genesis402_receipt (free). Send text (hashed by the rail, labelled OBSERVED) or a sha256 you computed yourself (labelled ATTESTED; keeps the content private), not both. Returns the receipt bound to your payment transaction, with its truth labels and limitations. It verifies offline with the open verifier at github.com/FTHTrading/402-truth. The rail stores the receipt, never your bytes. Not externally anchored on a public blockchain yet. Payment: call once without payment_signature to get the exact price quote (nothing is charged or signed), then call again with the signed payment to receive the result and settlement details.

    Annotations the server declares

    • readOnlyHint: false
    • openWorldHint: true
  • genesis402_receiptFree, no payment, read-only and idempotent.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Free, no payment, read-only and idempotent. Fetches one receipt by id from the rail's public receipts feed (twin.unykorn.org/receipts) to confirm that a paid call was settled and delivered. Use after any paid call, or to check a genesis402_prove receipt, using the receipt id returned with that result. It does not list or search receipts; you need the exact id. Returns the receipt exactly as published: the task called, amount in USD, payment rail, settlement transaction hash, settler, payer and timestamp. An unknown id returns an error with HTTP status 404; nothing is charged either way.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • genesis402_sanctions_name_screenPaid ($0.02 USDC).Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Paid ($0.02 USDC). Screen one person or organisation name against the UN, US OFAC SDN, EU and UK consolidated sanctions lists, including aliases and transliterations. Returns match, possible match or no match, each hit with list, list id, matched name and score, and the published date and SHA-256 of every list version used. For a company and its parents in one call use genesis402_counterparty_report; for a wallet address use genesis402_screen_sanctions. Screening signal only: not KYC, not a compliance determination, not legal advice. Payment: call once without payment_signature to get the exact price quote (nothing is charged or signed), then call again with the signed payment to receive the result and settlement details.

    Annotations the server declares

    • readOnlyHint: false
    • openWorldHint: true
  • genesis402_screen_sanctionsPaid ($0.008 USDC).Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Paid ($0.008 USDC). List lookup for one address on any chain against OFAC SDN digital-currency entries, community scam-address blocklists and the Blockchain Fraud case registry. Use as a fast, cheap first gate on a counterparty address. For balances plus sanctions plus a summary on an EVM address use genesis402_wallet_brief. Returns whether any list matched, and for every list consulted its dataset name, fetch URL and entry count, plus an evidence hash. A hit means the address appears on a published list; absence from every list is not a clearance. Not a compliance decision, not a finding about any person, not legal advice. Payment: call once without payment_signature to get the exact price quote (nothing is charged or signed), then call again with the signed payment to receive the result and settlement details.

    Annotations the server declares

    • readOnlyHint: false
    • openWorldHint: true
  • genesis402_sec_financialsPaid ($0.01 USDC).Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Paid ($0.01 USDC). As-reported fundamentals for one SEC filer from XBRL company facts. Use for quick fundamentals without a data vendor. For other SEC data search genesis402_catalog for "sec" and use genesis402_call. Give ticker or cik; one is required. Returns the latest annual and latest quarterly values for revenue, net income, operating income, total assets, liabilities, equity, cash, operating cash flow and diluted EPS, each with period end and filing date. Missing tags are marked unavailable, never estimated. Not investment advice. Payment: call once without payment_signature to get the exact price quote (nothing is charged or signed), then call again with the signed payment to receive the result and settlement details.

    Annotations the server declares

    • readOnlyHint: false
    • openWorldHint: true
  • genesis402_summarizePaid ($0.006 USDC).Reads text others write1 finding

    Why it is in this group

    • The name "genesis402_summarize" says "summarize": a word for reading.
    • The server marks it as not read-only (readOnlyHint: false).

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.

    Findings

    • Warn

      The server marks "genesis402_summarize" as not read-only (readOnlyHint: false), and its words say it reads.

      Matched text

      annotations: {"readOnlyHint":false,"openWorldHint":true}; The name "genesis402_summarize" says "summarize": a word for reading.

      What this check looks for
    Description, as the server wrote it
    Paid ($0.006 USDC). Summarize long text you already have (a report, transcript, filing, thread) as a paragraph, bullet list or one-line TL;DR, within a word limit, on UnyKorn's own GPU. Use when the text is in hand; to summarize a live web page by URL instead, call the summarize-url endpoint through genesis402_call. To answer one specific question from the text use genesis402_answer_from_text. Returns the summary in the requested style as JSON. Works only from the supplied text. Payment: call once without payment_signature to get the exact price quote (nothing is charged or signed), then call again with the signed payment to receive the result and settlement details.

    Annotations the server declares

    • readOnlyHint: false
    • openWorldHint: true
  • genesis402_token_briefPaid ($0.03 USDC).Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Paid ($0.03 USDC). Pre-trade check for one ERC-20 token contract in a single call: name, symbol, decimals and supply, current USD price, top-holder concentration, source-verification status and a sanctions-list check on the contract address. Use before buying, listing or accepting an unfamiliar token. For a wallet rather than a token use genesis402_wallet_brief. Returns each part with its sources (unreadable parts are marked unavailable, never zeroed) and an evidence hash. Signals only, not investment advice. Payment: call once without payment_signature to get the exact price quote (nothing is charged or signed), then call again with the signed payment to receive the result and settlement details.

    Annotations the server declares

    • readOnlyHint: false
    • openWorldHint: true
  • genesis402_wallet_briefPaid ($0.03 USDC).Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Paid ($0.03 USDC). Full risk brief for one EVM wallet in a single call: sanctions-list check (OFAC SDN digital-currency entries), native balance and activity scan across 10 EVM chains, recent activity on the chosen chain and a plain-language summary. Use before sending funds to, or accepting funds from, an unknown address. For a sanctions check alone use genesis402_screen_sanctions (cheaper, any chain); for balances without risk signals use genesis402_multi_chain_scan; for a token contract use genesis402_token_brief. Returns each part with its own sources (a part that cannot be read is marked unavailable with the reason, never zeroed) and an evidence hash over all parts. Heuristic signals from public data: not KYC, not a compliance determination, not legal advice. Payment: call once without payment_signature to get the exact price quote (nothing is charged or signed), then call again with the signed payment to receive the result and settlement details.

    Annotations the server declares

    • readOnlyHint: false
    • openWorldHint: true
  • genesis402_web_extractPaid ($0.004 USDC).Reads text others writeCan send data outNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.
    Description, as the server wrote it
    Paid ($0.004 USDC). Server-side fetch of one public web page, returned as clean readable text. Use when you need a page's actual content. To pull specific fields out of the result use genesis402_extract_json; for domain registration facts use genesis402_whois. Returns the title, meta description, readable text with markdown-style headings (capped at max_chars), up to 40 headings, up to 50 absolute links, the final URL after redirects and a SHA-256 of the fetched bytes. No JavaScript is executed, so client-rendered pages may come back thin. Private or internal addresses are refused, and pages behind a login or paywall are not accessible. Payment: call once without payment_signature to get the exact price quote (nothing is charged or signed), then call again with the signed payment to receive the result and settlement details.

    Annotations the server declares

    • readOnlyHint: false
    • openWorldHint: true
  • genesis402_whoisPaid ($0.003 USDC).Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Paid ($0.003 USDC). Registry data for one domain via RDAP. Young domains are a common phishing and fraud signal. Use to vet a website or counterparty domain. For mail setup (MX, SPF, DMARC) use genesis402_email_check; for page content use genesis402_web_extract. Returns registrar, registration and expiry dates, domain age in days, days to expiry, status codes, nameservers and DNSSEC state. Payment: call once without payment_signature to get the exact price quote (nothing is charged or signed), then call again with the signed payment to receive the result and settlement details.

    Annotations the server declares

    • readOnlyHint: false
    • openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged private-data.

Reads private data0
Reads files, mail, messages, databases, secrets, calendars or repositories.
Can send data out3
Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Remote posture

What anyone on the internet sees at the remote endpoint: an anonymous initialize and tools/list, and the public OAuth metadata.

Looked at Oct 22, 2026, 14:51 UTC, unchanged since Oct 22, 2026. No credentials were sent and no tool was called. What is looked at.

Reachable
yes
HTTP status of an anonymous initialize
200
tools/list served without credentials
yes
Tools that change things, listed without credentials
22
Protocol version
2025-06-18
WWW-Authenticate on 401
not observed
resource_metadata in WWW-Authenticate
none
RFC 9728 protected resource metadata
none
Authorization servers
none
Legacy HTTP+SSE transport
no
Dynamic client registration
not observed
Client ID metadata documents
not observed
  • HighThe whole server

    The endpoint served tools/list without credentials, and the list has 22 tools that change things (1 irreversible, 21 write). Whether a call also works without credentials was not tested: tools are never called.

    Matched text

    https://twin.unykorn.org/mcp: tools/list returned 22 tools to an anonymous client, including genesis402_translate (irreversible), genesis402_catalog (write), genesis402_receipt (write), genesis402_call (write), genesis402_counterparty_report (write) and 17 more

    What this check looks for

Install

Pinned to version 0.3.10. Values in angle brackets are yours to fill in.

claude mcp add --transport http genesis402 https://twin.unykorn.org/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [],
    "ask": [
      "mcp__genesis402__genesis402_catalog",
      "mcp__genesis402__genesis402_receipt",
      "mcp__genesis402__genesis402_call",
      "mcp__genesis402__genesis402_counterparty_report",
      "mcp__genesis402__genesis402_sanctions_name_screen",
      "mcp__genesis402__genesis402_company_lookup",
      "mcp__genesis402__genesis402_wallet_brief",
      "mcp__genesis402__genesis402_token_brief",
      "mcp__genesis402__genesis402_screen_sanctions",
      "mcp__genesis402__genesis402_multi_chain_scan",
      "mcp__genesis402__genesis402_defi_yields",
      "mcp__genesis402__genesis402_market_snapshot",
      "mcp__genesis402__genesis402_sec_financials",
      "mcp__genesis402__genesis402_email_check",
      "mcp__genesis402__genesis402_whois",
      "mcp__genesis402__genesis402_extract_json",
      "mcp__genesis402__genesis402_web_extract",
      "mcp__genesis402__genesis402_prove",
      "mcp__genesis402__genesis402_summarize",
      "mcp__genesis402__genesis402_answer_from_text",
      "mcp__genesis402__genesis402_translate",
      "mcp__genesis402__genesis402_paper_search"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as genesis402. Review it before you use it.

Capability tags behind 22 rules
  • mcp__genesis402__genesis402_catalog untrusted-input
  • mcp__genesis402__genesis402_receipt untrusted-input
  • mcp__genesis402__genesis402_call untrusted-input, outbound
  • mcp__genesis402__genesis402_counterparty_report untrusted-input
  • mcp__genesis402__genesis402_sanctions_name_screen untrusted-input
  • mcp__genesis402__genesis402_company_lookup untrusted-input
  • mcp__genesis402__genesis402_wallet_brief untrusted-input
  • mcp__genesis402__genesis402_token_brief untrusted-input
  • mcp__genesis402__genesis402_screen_sanctions untrusted-input
  • mcp__genesis402__genesis402_multi_chain_scan untrusted-input
  • mcp__genesis402__genesis402_defi_yields untrusted-input
  • mcp__genesis402__genesis402_market_snapshot untrusted-input
  • mcp__genesis402__genesis402_sec_financials untrusted-input
  • mcp__genesis402__genesis402_email_check untrusted-input
  • mcp__genesis402__genesis402_whois untrusted-input
  • mcp__genesis402__genesis402_extract_json untrusted-input
  • mcp__genesis402__genesis402_web_extract untrusted-input, outbound
  • mcp__genesis402__genesis402_prove untrusted-input
  • mcp__genesis402__genesis402_summarize untrusted-input
  • mcp__genesis402__genesis402_answer_from_text untrusted-input
  • mcp__genesis402__genesis402_translate untrusted-input, outbound
  • mcp__genesis402__genesis402_paper_search untrusted-input