Skip to content

SiteCheck Agent Intel & Dev

io.github.bck-stack/sitecheck-agent-intel-devbck-stackstreamable-httpv1.0.0Scanned

135 pay-per-call agent tools: agent intelligence, token risk, developer and AI data tools. x402

135 tools: 2 do something that can't be undone, 123 change things and 10 only read.

Tools: 0 delete, 2 irreversible, 123 write, 10 read.
  • Reads private data · 0
  • Reads text others write · 135
  • Can send data out · 9
  • 11 findings

Anlyon alternative

125 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

135 tools

Can't be undone 2Claude Code: ask
  • agent_intel_cross_chain_bridge_liquidityAcross bridge limits for USDC between two chains: the largest instant-fill amount the bridge can take right now, the largest deposit it accepts, and the smallest deposit.Reads text others writeCan send data out1 finding

    Why it is in this group

    • The input addresses people (input.to): what it sends cannot be taken back.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • outboundThe input takes a destination (input.to): what the tool writes goes there.

    Findings

    • Warn

      The server marks "agent_intel_cross_chain_bridge_liquidity" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

      Matched text

      annotations: {"readOnlyHint":true,"openWorldHint":true}; The input addresses people (input.to): what it sends cannot be taken back.

      What this check looks for
    Description, as the server wrote it
    Across bridge limits for USDC between two chains: the largest instant-fill amount the bridge can take right now, the largest deposit it accepts, and the smallest deposit. Across only (not Stargate, Hop or CCTP), USDC only, and the chain pair must be one the Across limits API accepts. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • agent_intel_ecb_institutional_fx_ratesEuropean Central Bank euro reference rates (published once per working day around 16:00 CET): the rate for one currency against the euro, and an optional conversion of an amount be…Reads text others writeCan send data out1 finding

    Why it is in this group

    • The input addresses people (input.to): what it sends cannot be taken back.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • outboundThe input takes a destination (input.to): what the tool writes goes there.

    Findings

    • Warn

      The server marks "agent_intel_ecb_institutional_fx_rates" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

      Matched text

      annotations: {"readOnlyHint":true,"openWorldHint":true}; The input addresses people (input.to): what it sends cannot be taken back.

      What this check looks for
    Description, as the server wrote it
    European Central Bank euro reference rates (published once per working day around 16:00 CET): the rate for one currency against the euro, and an optional conversion of an amount between two of the listed currencies. Rates are the ECB's daily reference, not a live market quote; the list has about 30 currencies. Price: $0.001 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
Changes things 123Claude Code: ask
  • agent_intel_agent_json_schema_guardChecks an agent's JSON output against a JSON Schema (draft 2020-12 keywords: type, properties, required, additionalProperties, items, enum, const, length, pattern, minimum/maximum,…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Checks an agent's JSON output against a JSON Schema (draft 2020-12 keywords: type, properties, required, additionalProperties, items, enum, const, length, pattern, minimum/maximum, item counts). Returns valid yes/no, each error with its path and the value with disallowed fields removed. $ref, allOf/anyOf/oneOf, if/then and format return an error instead of passing silently. Price: $0.001 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • agent_intel_anti_whale_limit_detectorStatic search of a VERIFIED Ethereum contract's Solidity source (Blockscout) for max-wallet, max-transaction and cooldown rules, with the matching lines.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Static search of a VERIFIED Ethereum contract's Solidity source (Blockscout) for max-wallet, max-transaction and cooldown rules, with the matching lines. Unverified contracts are reported as such, not guessed. Bytecode-only and non-Ethereum chains are not covered; a hit is a clue, not proof of a trap. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • agent_intel_api_sla_liveness_benchmarkLiveness and latency of one public HTTPS endpoint, measured from this server: three GET requests, returning each HTTP status and the time to the response headers, the median and th…Reads text others writeCan send data outNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.
    Description, as the server wrote it
    Liveness and latency of one public HTTPS endpoint, measured from this server: three GET requests, returning each HTTP status and the time to the response headers, the median and the worst time, and an UP/DEGRADED/DOWN level. One location only: it does not test other regions, and it does not measure the TLS handshake on its own. Price: $0.001 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • agent_intel_bundle_sniper_detectorLooks at the first Solana slot where a token mint appears (public RPC): if its history fits in 8 pages of signatures, it counts the distinct fee payers of the transactions in that …Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Looks at the first Solana slot where a token mint appears (public RPC): if its history fits in 8 pages of signatures, it counts the distinct fee payers of the transactions in that slot. Several different fee payers in one slot is a bundle-sniping signal, not proof. Mints with longer history return HISTORY_TOO_LONG; this tool cannot see Jito bundle metadata. Price: $0.003 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • agent_intel_cex_exchange_reserve_flowsEthereum native-ETH balance snapshot of up to 10 wallets that a community label dataset (brianleect/etherscan-labels, GitHub) tags as Binance, Coinbase or OKX.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Ethereum native-ETH balance snapshot of up to 10 wallets that a community label dataset (brianleect/etherscan-labels, GitHub) tags as Binance, Coinbase or OKX. It is a snapshot of a sample, not total exchange reserves: no token balances, no inflow or outflow history, and the labels are community-made and may be out of date. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • agent_intel_citation_verifierChecks up to 5 references against public registries: DOI through Crossref, arXiv ids through the arXiv API, ISBN-10/13 through Open Library (checksum first).Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Checks up to 5 references against public registries: DOI through Crossref, arXiv ids through the arXiv API, ISBN-10/13 through Open Library (checksum first). Returns title, year, venue and a BibTeX entry plus an APA-style string for each verified one; unknown ones come back as not_found. Authors are given for DOI and arXiv only. Price: $0.001 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • agent_intel_consumer_product_recallsRecent US recalls matching a keyword: CPSC consumer-product recalls (saferproducts.gov, by recall date and description text) and FDA food enforcement reports (openFDA, reason for r…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Recent US recalls matching a keyword: CPSC consumer-product recalls (saferproducts.gov, by recall date and description text) and FDA food enforcement reports (openFDA, reason for recall). Vehicle (NHTSA) and FDA drug/device recalls are not included. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • agent_intel_cors_security_misconfig_auditCORS check for a public HTTPS endpoint: three GET requests with a made-up origin, the null origin and no origin, reporting whether the server echoes the origin, allows null, return…Reads text others writeCan send data out1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.

    Findings

    • Info

      The description mentions "credentials".

      Matched text

      description: "...ws null, returns a wildcard, and allows credentials. Only reads response headers of GET req..."

      What this check looks for
    Description, as the server wrote it
    CORS check for a public HTTPS endpoint: three GET requests with a made-up origin, the null origin and no origin, reporting whether the server echoes the origin, allows null, returns a wildcard, and allows credentials. Only reads response headers of GET requests; it does not test preflight, methods or authentication. Price: $0.001 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • agent_intel_crosschain_gas_priority_feeCurrent base fee and priority-fee percentiles (10th, 50th, 99th) for Ethereum, Base or Arbitrum from public RPC nodes, with the next block's base fee projected from the last block'…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Current base fee and priority-fee percentiles (10th, 50th, 99th) for Ethereum, Base or Arbitrum from public RPC nodes, with the next block's base fee projected from the last block's fullness (EIP-1559 rule). Solana is not included here. Forecasts are a one-block projection, not a congestion model. Price: $0.001 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • agent_intel_deep_researchResearch starter: searches English Wikipedia (not the open web) for a query and returns the top articles with their summary text, description and last edit time.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Research starter: searches English Wikipedia (not the open web) for a query and returns the top articles with their summary text, description and last edit time. No AI synthesis; the caller reads and combines the sources. Price: $0.005 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • agent_intel_defi_yield_risk_optimizerRanks DeFi pools by total APY from DefiLlama's public yields data, filtered by chain, minimum TVL and optional stablecoin-only, with each pool's TVL, 7-day impermanent loss, reward…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Ranks DeFi pools by total APY from DefiLlama's public yields data, filtered by chain, minimum TVL and optional stablecoin-only, with each pool's TVL, 7-day impermanent loss, reward share of APY and IL-risk flag. Ranking is by APY, not by safety: there is no audit or exploit-history score (none is in this free source). Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • agent_intel_deployer_rug_forensicsContracts created by a deployer wallet on Ethereum, from its most recent 50 transactions (Blockscout public API): creation hash, time and new contract address.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Contracts created by a deployer wallet on Ethereum, from its most recent 50 transactions (Blockscout public API): creation hash, time and new contract address. Only that recent page is read, so older launches are missing. No rug-pull or abandoned-pool judgement: liquidity history is not included. Price: $0.003 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • agent_intel_dex_depth_slippage_calculatorEstimated output, price impact and minimum output for a swap in one DEX pair, using the pair's reserves from DexScreener and a constant-product (x*y=k) model with a fee.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Estimated output, price impact and minimum output for a swap in one DEX pair, using the pair's reserves from DexScreener and a constant-product (x*y=k) model with a fee. Exact for constant-product pools (for example Aerodrome volatile pools, Uniswap V2 style); for concentrated-liquidity pools (labelled v3 or v4) it is only an approximation. Raydium is not covered. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • agent_intel_dnssec_trust_chain_validatorDNSSEC status for a domain using Cloudflare's public resolver (1.1.1.1 DNS-over-HTTPS): whether the resolver validated the answer (AD flag), the DS records in the parent zone, and …Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    DNSSEC status for a domain using Cloudflare's public resolver (1.1.1.1 DNS-over-HTTPS): whether the resolver validated the answer (AD flag), the DS records in the parent zone, and the DNSKEY records with key-signing keys. The validation is done by Cloudflare's resolver, not by this tool walking the chain to the root. Price: $0.001 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • agent_intel_domain_authority_credibilityRegistration facts for a domain from the public RDAP directory: registration date, age in days, expiry, registrar, lock status.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Registration facts for a domain from the public RDAP directory: registration date, age in days, expiry, registrar, lock status. No authority score, backlink or spam index: no free public source for those was found (Tranco rank API needs a key; DNS-over-HTTPS was unreachable from the test network). Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • agent_intel_eu_vies_vat_batch_validatorChecks up to 5 EU VAT numbers (country code + number, e.g.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Checks up to 5 EU VAT numbers (country code + number, e.g. DE143208032) with the European Commission's VIES service and returns valid yes/no, the registered name and address when the member state releases them, and any member-state error. Some member states do not release names or addresses, and VIES can be unavailable for one country at a time. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • agent_intel_fact_brief_synthesizerEntity brief for a statement: finds up to 3 capitalised names or phrases in it and looks each up in Wikidata (public knowledge graph), returning the Wikidata ID, label, short descr…Reads text others write1 finding

    Why it is in this group

    • The input takes a statement or command to run (input.statement), which can change anything it can reach.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.

    Findings

    • Warn

      The server marks "agent_intel_fact_brief_synthesizer" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"openWorldHint":true}; The input takes a statement or command to run (input.statement), which can change anything it can reach.

      What this check looks for
    Description, as the server wrote it
    Entity brief for a statement: finds up to 3 capitalised names or phrases in it and looks each up in Wikidata (public knowledge graph), returning the Wikidata ID, label, short description and link. It confirms the entities exist; it does NOT judge whether the claim is true, and it finds no numbers or dates. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • agent_intel_gleif_corporate_lei_registryLegal entity identifier (LEI) records from GLEIF's public database: search by legal name (up to 5 matches) or look up one 20-character LEI.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Legal entity identifier (LEI) records from GLEIF's public database: search by legal name (up to 5 matches) or look up one 20-character LEI. Returns legal name, country, city, entity and registration status. Parent companies are not expanded here (a second request per entity would be needed). Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • agent_intel_hallucination_claim_checkerChecks the named entities in an AI answer (up to 5 capitalised names) against Wikidata: each name is marked found or not found, with its Wikidata ID and description, and sentences …Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Checks the named entities in an AI answer (up to 5 capitalised names) against Wikidata: each name is marked found or not found, with its Wikidata ID and description, and sentences containing a year are listed for review. It checks that entities exist, not that claims about them are true, so a found entity can still have a wrong fact. Price: $0.003 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • agent_intel_highres_qr_code_generatorMakes a QR code as scalable SVG (21x21 modules, version 1) for up to 17 bytes at level L, 14 at M, 11 at Q or 7 at H, with the mask chosen by the standard penalty rules.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Makes a QR code as scalable SVG (21x21 modules, version 1) for up to 17 bytes at level L, 14 at M, 11 at Q or 7 at H, with the mask chosen by the standard penalty rules. Returns the SVG and a base64 copy. Larger versions are not supported; longer text returns 400. Price: $0.001 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • agent_intel_holder_cluster_analyzerHolder concentration for an EVM token (Ethereum, BSC, Base, Arbitrum, Polygon): share of supply held by the top 1, top 3 and top 10 holders, total holder count, and how much of the…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Holder concentration for an EVM token (Ethereum, BSC, Base, Arbitrum, Polygon): share of supply held by the top 1, top 3 and top 10 holders, total holder count, and how much of the top 10 are contracts. GoPlus gives only the top 10 holders, so the top-20 view and funding-source clustering are NOT provided. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • agent_intel_honeypot_trap_detectorTrap flags for an EVM token (Ethereum, BSC, Base, Arbitrum, Polygon) from GoPlus token security, which simulates buy and sell: honeypot result, buy/sell/transfer tax, blacklist, pa…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Trap flags for an EVM token (Ethereum, BSC, Base, Arbitrum, Polygon) from GoPlus token security, which simulates buy and sell: honeypot result, buy/sell/transfer tax, blacklist, pausable transfers, hidden owner, mintable, anti-whale and slippage modifiers. The tool reports GoPlus's flags; it runs no simulation of its own. Price: $0.003 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • agent_intel_html_dom_to_clean_markdownConverts raw HTML you send (up to 500 KB) to GitHub-flavoured Markdown: headings, paragraphs, links, images, lists, code blocks, quotes, bold and italic.Reads text others write1 finding

    Why it is in this group

    • The description's first verb is "convert": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.

    Findings

    • Warn

      The server marks "agent_intel_html_dom_to_clean_markdown" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"openWorldHint":true}; The description's first verb is "convert": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Converts raw HTML you send (up to 500 KB) to GitHub-flavoured Markdown: headings, paragraphs, links, images, lists, code blocks, quotes, bold and italic. Scripts, styles, navigation, footers, forms and comments are removed; tables are flattened to text. Relative links need a base URL to become absolute. Price: $0.001 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • agent_intel_invoice_document_ocrExtracts vendor name, tax ID, line items, net subtotal, VAT rates and payment details (IBAN, BIC) from an invoice image (PNG or JPEG, base64, up to 4 MB) with a Cloudflare Workers …Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Extracts vendor name, tax ID, line items, net subtotal, VAT rates and payment details (IBAN, BIC) from an invoice image (PNG or JPEG, base64, up to 4 MB) with a Cloudflare Workers AI vision model. Model output is parsed as JSON and checked for the expected keys; unparseable output is an error, not a guess. Requires the env.AI binding. Price: $0.004 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • agent_intel_ip_fraud_reputation_scoreIP type check: country, ISP and ASN, whether the address is a known Tor exit (Tor Project's public list), a proxy or VPN and a hosting/datacenter address (ip-api.com flags), and a …Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    IP type check: country, ISP and ASN, whether the address is a known Tor exit (Tor Project's public list), a proxy or VPN and a hosting/datacenter address (ip-api.com flags), and a LOW/MEDIUM/HIGH level from those flags. It is not a threat score: no abuse-report or spam history is included. ip-api's free tier is for non-commercial use only. Price: $0.001 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • agent_intel_known_scams_blacklist_dbIs this address or domain on the ScamSniffer community blacklist (public GitHub scam-database: wallet addresses, or phishing domains with their linked addresses)?Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Is this address or domain on the ScamSniffer community blacklist (public GitHub scam-database: wallet addresses, or phishing domains with their linked addresses)? Returns listed yes or no and the list size. A 'no' does not prove safety, and the list is not updated in real time. Price: $0.001 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • agent_intel_leverage_liquidation_levelsFor one perpetual on Hyperliquid (public info API): mark price, open interest (in coins and USD), funding rate, and estimated liquidation prices for longs and shorts at 5x, 10x, 20…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    For one perpetual on Hyperliquid (public info API): mark price, open interest (in coins and USD), funding rate, and estimated liquidation prices for longs and shorts at 5x, 10x, 20x and 50x. The estimates are formula-based from the mark price and the asset's maximum leverage, not observed positions: the public API does not show which price each trader is liquidated at. Price: $0.003 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • agent_intel_liquidity_lock_inspectorShare of a token's LP tokens that are burned (dead or zero address) or locked, from GoPlus lp_holders on Ethereum, BSC, Base, Arbitrum or Polygon.Reads text others write1 finding

    Why it is in this group

    • The name "agent_intel_liquidity_lock_inspector" says "lock": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.

    Findings

    • Warn

      The server marks "agent_intel_liquidity_lock_inspector" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "agent_intel_liquidity_lock_inspector" says "lock": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Share of a token's LP tokens that are burned (dead or zero address) or locked, from GoPlus lp_holders on Ethereum, BSC, Base, Arbitrum or Polygon. Lists the top 10 LP holders with GoPlus's lock flag and tag (a locker's name only when GoPlus gives it). Does not query Uncx, Team.Finance or Streamflow directly. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • agent_intel_marine_weather_tide_forecastCurrent wave height and period at a coordinate (Open-Meteo Marine), and, when a US NOAA tide station id is given, the next high and low tide predictions for the next 24 hours.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Current wave height and period at a coordinate (Open-Meteo Marine), and, when a US NOAA tide station id is given, the next high and low tide predictions for the next 24 hours. Tide predictions exist only for NOAA stations; no wind or pressure forecast is included. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • agent_intel_mev_sandwich_risk_analyzerTheoretical sandwich-attack profit for a swap of a given size in one DEX pool, at the pool's current reserves (DexScreener) and the swap's slippage tolerance: the largest front-run…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Theoretical sandwich-attack profit for a swap of a given size in one DEX pool, at the pool's current reserves (DexScreener) and the swap's slippage tolerance: the largest front-run that still lets the victim's trade succeed, and the profit it would give. Constant-product pools only, no mempool view, no competing bots: a worst-case estimate, not a prediction. Suggests a slippage tolerance. Price: $0.003 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • agent_intel_multilingual_voice_ttsTurns text (up to 1000 characters) into speech with a Cloudflare Workers AI TTS model, in English, Spanish, French or Japanese.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Turns text (up to 1000 characters) into speech with a Cloudflare Workers AI TTS model, in English, Spanish, French or Japanese. Returns base64 audio as the model gives it. German and Turkish are not offered: the model used here does not list them. Requires the env.AI binding. Price: $0.003 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • agent_intel_news_radarLatest BBC News headlines from one section feed (world, business, technology, science_and_environment, health, politics) with summary, link and publication time, optionally filtere…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Latest BBC News headlines from one section feed (world, business, technology, science_and_environment, health, politics) with summary, link and publication time, optionally filtered by a keyword. BBC only: no other publishers, no entity tags and no trust rating (no free source for those was found). Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • agent_intel_ofac_sanctions_preflightName screening against the US OFAC SDN list (with aliases, sanctions programs, type and addresses, via the US Consolidated Screening List API) and the UN Security Council consolida…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Name screening against the US OFAC SDN list (with aliases, sanctions programs, type and addresses, via the US Consolidated Screening List API) and the UN Security Council consolidated list, returning matching entries. Optional fuzzy matching for the SDN part. It does NOT screen crypto addresses and does NOT check the EU list. A match is a lead for a human reviewer, not a legal decision. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • agent_intel_onchain_mvrv_valuationDaily MVRV ratio (market cap / realized cap) for BTC or ETH from CoinMetrics' free community data, with the latest value, the window mean and standard deviation, and its z-score.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Daily MVRV ratio (market cap / realized cap) for BTC or ETH from CoinMetrics' free community data, with the latest value, the window mean and standard deviation, and its z-score. Labels are plain statistics (HIGH_Z, LOW_Z, MID), not buy or sell calls. Realized cap in USD is not in the free tier, so only the ratio is returned. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • agent_intel_options_implied_volatilityDeribit option market summary for BTC, ETH or SOL: put/call open-interest and volume ratios, max-pain strike and ATM mark implied volatility for the nearest expiries.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Deribit option market summary for BTC, ETH or SOL: put/call open-interest and volume ratios, max-pain strike and ATM mark implied volatility for the nearest expiries. Computed from Deribit's public book summary. No 25-delta skew (needs per-option greeks, not fetched) and no order flow. Price: $0.003 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • agent_intel_perp_funding_rate_heatmapCurrent perpetual-futures funding rate for one coin (USDT-margined) on Binance, OKX and Bybit, with each rate annualised (3 payments a day), mark price, and from Bybit: open intere…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Current perpetual-futures funding rate for one coin (USDT-margined) on Binance, OKX and Bybit, with each rate annualised (3 payments a day), mark price, and from Bybit: open interest value and the long/short account ratio. A table of exchanges, not a time-series heatmap; funding history is not included. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • agent_intel_pii_credentials_redactionMasks likely secrets and personal data in agent logs or chat text: 0x private keys (64 hex), labelled base58 private keys, JWTs, AWS access key ids, common API token prefixes (sk-,…Reads text others write1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.

    Findings

    Description, as the server wrote it
    Masks likely secrets and personal data in agent logs or chat text: 0x private keys (64 hex), labelled base58 private keys, JWTs, AWS access key ids, common API token prefixes (sk-, ghp_, xoxb-), payment card numbers that pass the Luhn check, and email addresses. Returns the redacted text and counts. Pattern-based: it can miss unusual formats and does not detect seed phrases or names. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • agent_intel_prompt_injection_firewallScreens one text for prompt-injection patterns in English (instruction override, role or system-prompt extraction, jailbreak personas, hidden or encoded instructions) using a fixed…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Screens one text for prompt-injection patterns in English (instruction override, role or system-prompt extraction, jailbreak personas, hidden or encoded instructions) using a fixed rule list based on OWASP LLM01 categories. Returns HIGH/MEDIUM/LOW/NONE, each match, and the text with matches removed. A rule list misses rewording and other languages: treat NONE as no known pattern, not as safe. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • agent_intel_reader_markdown_extractReader view of one public https page: its <title> and the <main> or <article> content (else <body>) as Markdown, with links and images resolved.Reads text others writeCan send data outNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.
    Description, as the server wrote it
    Reader view of one public https page: its <title> and the <main> or <article> content (else <body>) as Markdown, with links and images resolved. Removes scripts, styles, navigation, footers, forms and iframes. Cookie banners built as plain divs are NOT removed. Pages that block automated requests return a 503. Price: $0.001 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • agent_intel_scam_phishing_message_filterScreens one message (DM, email or chat text) for common crypto and phishing scam signals in English: urgency, fake support or giveaway, wallet-connect or seed-phrase requests, guar…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Screens one message (DM, email or chat text) for common crypto and phishing scam signals in English: urgency, fake support or giveaway, wallet-connect or seed-phrase requests, guaranteed returns, and suspicious links. Returns HIGH/MEDIUM/LOW/NONE with each matched phrase. A fixed rule list: it misses new wording and other languages, and it never sees the sender's account. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • agent_intel_smart_contract_linter_auditHeuristic Solidity linter for a snippet or file (up to 60000 characters): unchecked low-level call/send/delegatecall, value-sending external calls before a storage write (possible …Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Heuristic Solidity linter for a snippet or file (up to 60000 characters): unchecked low-level call/send/delegatecall, value-sending external calls before a storage write (possible reentrancy), arithmetic under pragma below 0.8.0 (overflow risk), and public or external state-changing functions without a visible owner or sender check, with line numbers. Not an audit; misses most real bugs. Price: $0.004 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • agent_intel_social_signal_aggregatorKeyword discussion velocity on Hacker News (Algolia HN Search, public): stories in the last 24 hours, stories in the last 7 days, velocity (24h count vs.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Keyword discussion velocity on Hacker News (Algolia HN Search, public): stories in the last 24 hours, stories in the last 7 days, velocity (24h count vs. 7-day daily average) and the top 24h stories with points and comments. Only Hacker News: Reddit and Bluesky blocked automated requests in testing, and no sentiment score is given. Price: $0.003 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • agent_intel_solana_authority_auditSolana SPL token mint audit from the public Solana RPC: is the mint authority revoked (no more minting), is the freeze authority revoked, supply and decimals.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Solana SPL token mint audit from the public Solana RPC: is the mint authority revoked (no more minting), is the freeze authority revoked, supply and decimals. Metadata immutability is NOT checked (it needs a separate Metaplex lookup this tool does not do). Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • agent_intel_sopr_profit_taking_ratioBitcoin Spent Output Profit Ratio (SOPR) daily series for all holders, short-term holders (sth) or long-term holders (lth) from the free bitcoin-data.com (BGeometrics) API, with th…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Bitcoin Spent Output Profit Ratio (SOPR) daily series for all holders, short-term holders (sth) or long-term holders (lth) from the free bitcoin-data.com (BGeometrics) API, with the latest value, 7/30-day averages and days spent in profit (>1) vs loss (<1). The free feed is delayed about 7 days. Statistics only, not a trading signal. Bitcoin only. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • agent_intel_speech_to_text_transcribe_turboTranscribes an audio file (base64, up to 6 MB; WAV, MP3, M4A or OGG as the model accepts them) to text with a Cloudflare Workers AI Whisper model, returning the text and any timest…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Transcribes an audio file (base64, up to 6 MB; WAV, MP3, M4A or OGG as the model accepts them) to text with a Cloudflare Workers AI Whisper model, returning the text and any timestamped segments the model gives. Requires the env.AI binding. Price: $0.004 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • agent_intel_ssl_certificate_transparencyRecent TLS certificates logged for a domain (Certificate Transparency via Cert Spotter's public index): issuer, validity dates, names on the certificate, and any name outside the d…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Recent TLS certificates logged for a domain (Certificate Transparency via Cert Spotter's public index): issuer, validity dates, names on the certificate, and any name outside the domain. Shows the 10 newest; does not check revocation or the live server's certificate chain. Price: $0.001 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • agent_intel_stablecoin_peg_integrity_radarCurrent USD price and deviation from the $1 peg for USDT, USDC, DAI, FDUSD and PYUSD (CoinGecko public price data).Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Current USD price and deviation from the $1 peg for USDT, USDC, DAI, FDUSD and PYUSD (CoinGecko public price data). Flags MICRO_DEPEG at 0.15% or more and DEPEG at 1% or more. A single snapshot of CoinGecko's aggregate price: no per-pool Curve imbalance and no redemption-liquidity data. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • agent_intel_subdomain_takeover_monitorSubdomain takeover check: lists up to 10 subdomains seen in certificate transparency logs for a domain (Cert Spotter), fetches each over HTTPS, and flags pages that show a known 'u…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Subdomain takeover check: lists up to 10 subdomains seen in certificate transparency logs for a domain (Cert Spotter), fetches each over HTTPS, and flags pages that show a known 'unclaimed service' message (GitHub Pages, S3, Heroku, Fastly). Looks at the page text only, not DNS records, so it can miss dangling records that show no such message. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • agent_intel_sybil_airdrop_farmer_checkChecks 2 to 10 Ethereum wallets for shared counterparties: addresses that several of them sent to or received from in their most recent 50 transactions (Blockscout).Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Checks 2 to 10 Ethereum wallets for shared counterparties: addresses that several of them sent to or received from in their most recent 50 transactions (Blockscout). Reports the shared addresses and a POSSIBLE_CLUSTER signal. Recent-page only, no funding-source trace, so it finds some clusters and misses others. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • agent_intel_token_composite_safety_scoreFixed-weight 0-100 safety score for an EVM token (Base, Ethereum, BSC, Arbitrum, Polygon): contract (40 pts: honeypot, taxes, verified source, proxy), liquidity (30 pts: deepest DE…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Fixed-weight 0-100 safety score for an EVM token (Base, Ethereum, BSC, Arbitrum, Polygon): contract (40 pts: honeypot, taxes, verified source, proxy), liquidity (30 pts: deepest DEX pair) and holder spread (30 pts: top-10 holder share). Shows each part. It is a heuristic from two public sources, not a security audit. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • agent_intel_token_verdict_enginePASS / CAUTION / AVOID verdict for an EVM token (Base, Ethereum, BSC, Arbitrum, Polygon) from GoPlus token security (honeypot flag, buy/sell tax, open source, proxy, top holder sha…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    PASS / CAUTION / AVOID verdict for an EVM token (Base, Ethereum, BSC, Arbitrum, Polygon) from GoPlus token security (honeypot flag, buy/sell tax, open source, proxy, top holder share) and DexScreener (deepest pair liquidity, 24h volume). Rules are fixed and listed in the answer. Not financial advice; Solana is not covered. Price: $0.003 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • agent_intel_typosquat_phishing_domain_radarFor a brand domain (e.g.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    For a brand domain (e.g. paypal.com), builds up to 15 look-alike variants (omitted, doubled and swapped letters, 0/1 homoglyphs, hyphen and login additions, other TLDs) and checks which are registered, using the public RDAP directory. Registered means taken, not malicious: each one needs a content check. Unicode homoglyphs (IDN) are not generated. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • agent_intel_wallet_forensic_profilerEthereum wallet profile from Blockscout: ETH balance, contract or EOA, ENS name, Blockscout scam flag and reputation, public tags, and activity over its most recent 50 transactions…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Ethereum wallet profile from Blockscout: ETH balance, contract or EOA, ENS name, Blockscout scam flag and reputation, public tags, and activity over its most recent 50 transactions. NOT included: OFAC sanctions screening (the SDN list is 78 MB, too large per request), mixer (Tornado Cash) checks, and full wallet age. Price: $0.003 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • agent_intel_wallet_pnl_performance_auditEstimated current value of the token amounts a wallet received minus sent in its most recent 50 ERC-20 transfers (Blockscout), priced at current DefiLlama prices.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Estimated current value of the token amounts a wallet received minus sent in its most recent 50 ERC-20 transfers (Blockscout), priced at current DefiLlama prices. It is NOT profit and loss: there is no cost basis, no historical prices, no realised gains, win rate or Sharpe ratio, and transfers older than the latest 50 are missing. Price: $0.003 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • agent_intel_wash_trading_volume_filterVolume plausibility check for an EVM token's DEX pairs (DexScreener): 24h volume against liquidity, average trade size from 24h trade counts, and buy/sell balance, for the 3 deepes…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Volume plausibility check for an EVM token's DEX pairs (DexScreener): 24h volume against liquidity, average trade size from 24h trade counts, and buy/sell balance, for the 3 deepest pairs. A heuristic that flags suspicious volume (for example volume 20x liquidity); it cannot see wallets, so it does not prove wash trading. Price: $0.003 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • agent_intel_whale_transaction_monitorLarge transfers on Ethereum in the latest 1 to 10 blocks (default 5, about one minute of chain time): native ETH transfers valued at the current ETH price, and USDT and USDC token …Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Large transfers on Ethereum in the latest 1 to 10 blocks (default 5, about one minute of chain time): native ETH transfers valued at the current ETH price, and USDT and USDC token transfers, each at least a USD threshold (default $100,000), with asset, amount, USD value, hash, block, sender and recipient. Ethereum only; other tokens are not included; a snapshot, not a live stream. Price: $0.003 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • agent_intel_x402_endpoint_health_vettingChecks an x402 (HTTP 402 payment) endpoint before you pay: one unpaid GET, then the HTTP status, whether a 402 challenge with an accepts list is present, the payment networks, asse…Reads text others writeCan send data outNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.
    Description, as the server wrote it
    Checks an x402 (HTTP 402 payment) endpoint before you pay: one unpaid GET, then the HTTP status, whether a 402 challenge with an accepts list is present, the payment networks, asset, price and pay-to address format, CORS header and response time. Does not pay, does not verify the seller's identity or reputation, and gives one sample, not uptime. Price: $0.001 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • dev_academy_sports_outdoorsAcademy Sports + Outdoors products on one category page (for example fan-shop): product name, brand, price in USD, product link, image and manufacturer part number, read from the p…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Academy Sports + Outdoors products on one category page (for example fan-shop): product name, brand, price in USD, product link, image and manufacturer part number, read from the page's schema.org product list. First page of the category only. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • dev_action_networkUS sports betting lines from Action Network's scoreboard: games for a league and date (NFL, NBA, MLB, NHL, college, WNBA, soccer) with teams, start time, status, broadcast, total b…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    US sports betting lines from Action Network's scoreboard: games for a league and date (NFL, NBA, MLB, NHL, college, WNBA, soccer) with teams, start time, status, broadcast, total bets tracked and full-game odds from each sportsbook feed (moneyline, spread with juice, total over/under, team totals), as published by Action Network. Books are identified by Action Network's book ID. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • dev_apple_app_store_iphoneApp Store iPhone app metadata from Apple's public iTunes Lookup API by App Store id: name, seller, version, price, average rating and rating count, genre and release info.Reads text others write1 finding

    Why it is in this group

    • The name "dev_apple_app_store_iphone" says "store": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.

    Findings

    • Warn

      The server marks "dev_apple_app_store_iphone" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "dev_apple_app_store_iphone" says "store": a word for a change.

      What this check looks for
    Description, as the server wrote it
    App Store iPhone app metadata from Apple's public iTunes Lookup API by App Store id: name, seller, version, price, average rating and rating count, genre and release info. iPhone and universal apps. Ratings are Apple's counts for the chosen country. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • dev_baseball_referenceMLB player season statistics, sorted leaderboard (default home runs): per player team, position, batting (G, AB, R, H, 2B, 3B, HR, RBI, BB, SO, SB, AVG, OBP, SLG, OPS, WAR), pitchi…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    MLB player season statistics, sorted leaderboard (default home runs): per player team, position, batting (G, AB, R, H, 2B, 3B, HR, RBI, BB, SO, SB, AVG, OBP, SLG, OPS, WAR), pitching (GS, W, L, SV, HLD, IP, ERA, WHIP, K/9, WAR) and fielding. Regular season or postseason, 2002 to now. ERA and WHIP sort lowest first. Data from ESPN's public stats API (Baseball-Reference blocks automated access). Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • dev_blockchair_multichain_statsBlockchair chain statistics for one blockchain (bitcoin, ethereum, litecoin, dogecoin, bitcoin-cash, dash, zcash, groestlcoin): block and transaction counts, mempool size and fees,…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Blockchair chain statistics for one blockchain (bitcoin, ethereum, litecoin, dogecoin, bitcoin-cash, dash, zcash, groestlcoin): block and transaction counts, mempool size and fees, 24-hour hashrate and volume, and the market price in USD as Blockchair reports it. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • dev_bloomberg_articlesLatest Bloomberg Markets headlines from Bloomberg's public RSS feed: title, short description, article link, author and publish time.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Latest Bloomberg Markets headlines from Bloomberg's public RSS feed: title, short description, article link, author and publish time. Feed only (about 20 items); article bodies are not returned. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • dev_bundlephobianpm package bundle size from Bundlephobia's public size API: minified and gzipped size in bytes, version, number of dependencies, repository and description.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    npm package bundle size from Bundlephobia's public size API: minified and gzipped size in bytes, version, number of dependencies, repository and description. Give a package name, optionally with @version (e.g. react@18.3.1). Sizes are as Bundlephobia computes them. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • dev_codecov_statsCodecov code coverage totals for a public GitHub repository: coverage percentage, lines hit and missed, files, branches and the branch Codecov tracks.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Codecov code coverage totals for a public GitHub repository: coverage percentage, lines hit and missed, files, branches and the branch Codecov tracks. Public repos only; per-file detail is not included. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • dev_coversSportsbook odds from Covers.com odds screens (NFL, NBA, MLB, NHL, college, WNBA): every listed game with Covers game ID, away/home team, kick-off text and, for each sportsbook show…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Sportsbook odds from Covers.com odds screens (NFL, NBA, MLB, NHL, college, WNBA): every listed game with Covers game ID, away/home team, kick-off text and, for each sportsbook shown (e.g. bet365, BetVictor, William Hill, Betway), the away and home price in American, decimal and fractional odds plus Covers' market tag. The books shown depend on the visitor's region. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • dev_dicks_sporting_goodsDICK'S Sporting Goods products in a category (e.g.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    DICK'S Sporting Goods products in a category (e.g. mens-running-shoes, golf-drivers, kayaks): product name, brand, part number, price and list price range (USD), rating, review count, badge (new, sale...), number of SKUs (sizes/colors) and link; 48 per page (page 1 to 20), plus the total count. From dickssportinggoods.com's public category pages via a residential proxy. Price: $0.02 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • dev_espn_college_footballESPN college football scoreboard for one date: every game with home and away team, score, status (scheduled, live, final) and stadium, from ESPN's public site JSON.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    ESPN college football scoreboard for one date: every game with home and away team, score, status (scheduled, live, final) and stadium, from ESPN's public site JSON. Times are UTC; days with no games return an empty list. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • dev_espn_f1_resultsESPN Formula 1 race list for one date with the finishing order of the first drivers (position, driver name, winner flag) and session state, from ESPN's public site JSON.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    ESPN Formula 1 race list for one date with the finishing order of the first drivers (position, driver name, winner flag) and session state, from ESPN's public site JSON. Results only as ESPN lists them; a race with no published order returns the entries it has. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • dev_espn_golfESPN PGA Tour tournament leaderboard for one date: tournament name, state and the top players or teams with their total score to par and position order, from ESPN's public site JSO…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    ESPN PGA Tour tournament leaderboard for one date: tournament name, state and the top players or teams with their total score to par and position order, from ESPN's public site JSON. Team events (pairs) are listed as teams. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • dev_espn_mlb_scoreboardESPN MLB scoreboard for one date: every game with away and home team, score, status (scheduled, live, final), and venue, from ESPN's public site JSON.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    ESPN MLB scoreboard for one date: every game with away and home team, score, status (scheduled, live, final), and venue, from ESPN's public site JSON. Times are UTC. Scores match the MLB Stats API for final games. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • dev_espn_mmaESPN UFC event card: the current or next UFC event with its fights in card order (fighter names, winner flag, record and fight status), from ESPN's public site JSON.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    ESPN UFC event card: the current or next UFC event with its fights in card order (fighter names, winner flag, record and fight status), from ESPN's public site JSON. Returns the card ESPN serves now; no date filter. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • dev_espn_nascarESPN NASCAR Cup Series race list for one date with the finishing order of the first drivers (position, driver name, winner flag), race name, venue and state, from ESPN's public sit…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    ESPN NASCAR Cup Series race list for one date with the finishing order of the first drivers (position, driver name, winner flag), race name, venue and state, from ESPN's public site JSON. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • dev_espn_nba_scoreboardESPN NBA scoreboard for one date: every game with away and home team, score, status (scheduled, live, final), venue and current period, from ESPN's public site JSON.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    ESPN NBA scoreboard for one date: every game with away and home team, score, status (scheduled, live, final), venue and current period, from ESPN's public site JSON. Times are UTC. Days without games return an empty list. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • dev_espn_nfl_scoreboardESPN NFL scoreboard for one date: every game with home and away team, score, status (scheduled, live, final) and stadium, from ESPN's public site JSON.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    ESPN NFL scoreboard for one date: every game with home and away team, score, status (scheduled, live, final) and stadium, from ESPN's public site JSON. Regular season and playoffs as ESPN lists them; times are UTC. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • dev_espn_nhl_scoreboardESPN NHL scoreboard for one date: every game with home and away team, score, status (scheduled, live, final) and stadium, from ESPN's public site JSON.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    ESPN NHL scoreboard for one date: every game with home and away team, score, status (scheduled, live, final) and stadium, from ESPN's public site JSON. Times are UTC; days with no games return an empty list. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • dev_espn_soccer_scoreboardESPN soccer scoreboard for one league and date: each match with home and away team, score, status (scheduled, live, full time) and stadium, from ESPN's public site JSON.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    ESPN soccer scoreboard for one league and date: each match with home and away team, score, status (scheduled, live, full time) and stadium, from ESPN's public site JSON. Default league is the English Premier League (eng.1); times are UTC. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • dev_espn_sportsESPN latest news headlines for one league (NFL, NBA, MLB, NHL, WNBA, college football, men's college basketball) from ESPN's public site JSON: headline, description, published time…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    ESPN latest news headlines for one league (NFL, NBA, MLB, NHL, WNBA, college football, men's college basketball) from ESPN's public site JSON: headline, description, published time and ESPN link. Newest first; ESPN's own feed, no scores. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • dev_espn_standingsESPN standings for NBA, NFL, MLB or NHL, by conference or division group as ESPN lists them: team, wins, losses, win percentage, games behind and streak, from ESPN's public standin…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    ESPN standings for NBA, NFL, MLB or NHL, by conference or division group as ESPN lists them: team, wins, losses, win percentage, games behind and streak, from ESPN's public standings JSON. Current season as ESPN serves it. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • dev_espn_wnbaESPN WNBA scoreboard for one date: each game with home and away team, score, status (scheduled, live, final) and arena, from ESPN's public site JSON.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    ESPN WNBA scoreboard for one date: each game with home and away team, score, status (scheduled, live, final) and arena, from ESPN's public site JSON. Times are UTC; days with no games return an empty list. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • dev_fanduelFanDuel Sportsbook (New Jersey) game lines for NFL, NBA, MLB, NHL, WNBA and college football/basketball: each listed game with FanDuel event ID, away/home team, start time and the …Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    FanDuel Sportsbook (New Jersey) game lines for NFL, NBA, MLB, NHL, WNBA and college football/basketball: each listed game with FanDuel event ID, away/home team, start time and the moneyline, spread (puck line in NHL) and total, every price in American and decimal odds with the line. Read from the JSON FanDuel's own web app loads; only games FanDuel currently lists, no props or futures. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • dev_fbrefSoccer competition stats for 16 leagues (Premier League, LaLiga, Bundesliga, Serie A, Ligue 1, Süper Lig, MLS, Champions League …): league table (rank, team, played, W/D/L, goals f…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Soccer competition stats for 16 leagues (Premier League, LaLiga, Bundesliga, Serie A, Ligue 1, Süper Lig, MLS, Champions League …): league table (rank, team, played, W/D/L, goals for/against, goal difference, points, qualification note; any season), or current-season top scorers / top assists with appearances, goals, assists and club. Data from ESPN's public soccer API (FBref blocks automated access). Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • dev_flashscoreFlashscore match list for one sport and day (7 days back to 7 ahead): every match with Flashscore ID, competition (country: league), start time, home/away team, current or final sc…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Flashscore match list for one sport and day (7 days back to 7 ahead): every match with Flashscore ID, competition (country: league), start time, home/away team, current or final score and state (scheduled, live with period, finished, after extra time/penalties, postponed, cancelled). Football, tennis, basketball, hockey, American football, baseball, handball, volleyball. Read from the feed the Flashscore web page loads. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • dev_football_data_coukEuropean football match results with statistics and betting odds from Football-Data.co.uk (free CSV data): for a league and season — date, kick-off, teams, full-time and half-time …Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    European football match results with statistics and betting odds from Football-Data.co.uk (free CSV data): for a league and season — date, kick-off, teams, full-time and half-time score, result, referee, shots, shots on target, corners, fouls, cards, plus market average and Bet365 1X2 odds and average over/under 2.5 odds. 20 leagues (Premier League, La Liga, Bundesliga, Serie A, Ligue 1, Süper Lig…). Filter by team. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • dev_fpl_premier_leagueFantasy Premier League player stats from the official FPL data feed: the top players by total points with team, position, goals, assists, form, price in £m and percentage of manage…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Fantasy Premier League player stats from the official FPL data feed: the top players by total points with team, position, goals, assists, form, price in £m and percentage of managers who selected them. Current season as FPL serves it. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • dev_gmx_arbitrum_statsGMX total value locked on Arbitrum in USD from DefiLlama's public API: current value and daily history for the last 1 to 30 days.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    GMX total value locked on Arbitrum in USD from DefiLlama's public API: current value and daily history for the last 1 to 30 days. This is TVL as DefiLlama reports it, not GMX's own trading volume or fees. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • dev_google_play_storeGoogle Play app details from the public app page's JSON-LD: name, developer, category, content rating, average rating and number of ratings, description.Reads text others write1 finding

    Why it is in this group

    • The name "dev_google_play_store" says "store": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.

    Findings

    • Warn

      The server marks "dev_google_play_store" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "dev_google_play_store" says "store": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Google Play app details from the public app page's JSON-LD: name, developer, category, content rating, average rating and number of ratings, description. Install counts and reviews are not on that block and are not returned. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • dev_hockey_referenceNHL season standings from Hockey-Reference: every team in East and West with division, games, wins, losses, overtime losses, points, goals for and against.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    NHL season standings from Hockey-Reference: every team in East and West with division, games, wins, losses, overtime losses, points, goals for and against. Season given by the year it ends (2025 = 2024-25 season). Playoff teams are flagged. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • dev_huggingface_papersHugging Face Papers search: arXiv papers matching a query with title, abstract summary, publish date, community upvotes, comment count and arXiv link.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Hugging Face Papers search: arXiv papers matching a query with title, abstract summary, publish date, community upvotes, comment count and arXiv link. Public search API; ranking is Hugging Face's. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • dev_liquipedia_esports_wikiLiquipedia Dota 2 wiki: plain-text introduction of one wiki page (tournament, team or player) from Liquipedia's public MediaWiki API.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Liquipedia Dota 2 wiki: plain-text introduction of one wiki page (tournament, team or player) from Liquipedia's public MediaWiki API. Dota 2 wiki only for now; the intro is the first section, not the full page. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • dev_loom_video_downloaderPublic metadata for a Loom video from Loom's oEmbed API: title, description, duration in seconds, size, thumbnail and embed URL.Reads text others writeCan send data outNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.
    Description, as the server wrote it
    Public metadata for a Loom video from Loom's oEmbed API: title, description, duration in seconds, size, thumbnail and embed URL. Metadata only: it does not download or return the video file. Works only for videos the owner made public or anyone-with-link. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • dev_mac_app_storeMac App Store app metadata from Apple's public iTunes Lookup API by App Store id: name, seller, version, price, average rating and rating count (0 when Apple shows none), genre and…Reads text others write1 finding

    Why it is in this group

    • The name "dev_mac_app_store" says "store": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.

    Findings

    • Warn

      The server marks "dev_mac_app_store" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "dev_mac_app_store" says "store": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Mac App Store app metadata from Apple's public iTunes Lookup API by App Store id: name, seller, version, price, average rating and rating count (0 when Apple shows none), genre and store link. Mac apps only. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • dev_mlb_statsMLB player season stats (hitting or pitching) and bio from the official MLB Stats API (statsapi.mlb.com).Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    MLB player season stats (hitting or pitching) and bio from the official MLB Stats API (statsapi.mlb.com). Input is the MLB person id; season stats only, no game feed. Free public data, MLB copyright applies. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • dev_mlb_statsapiMLB games for one date from the official MLB Stats API: teams, scores, status, venue and current inning.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    MLB games for one date from the official MLB Stats API: teams, scores, status, venue and current inning. Regular and postseason games as the schedule lists them; the date is the schedule date (UTC game times). MLB copyright applies. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • dev_nascar_racing_referenceNASCAR season stats per driver for the Cup, Xfinity (O'Reilly) or Truck Series, 2018 to the current season: points position, points, playoff points/rank, starts, wins, stage wins, …Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    NASCAR season stats per driver for the Cup, Xfinity (O'Reilly) or Truck Series, 2018 to the current season: points position, points, playoff points/rank, starts, wins, stage wins, poles, top 5, top 10, laps led, DNFs, car number and manufacturer. Data from NASCAR's own public points feed (the stats Racing-Reference season pages list; Racing-Reference itself blocks automated access). Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • dev_nba_statsNBA player season statistics, sorted leaderboard: per player team, position, age, games, minutes, points, rebounds, assists, steals, blocks, turnovers, FG/3P/FT made-attempted-perc…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    NBA player season statistics, sorted leaderboard: per player team, position, age, games, minutes, points, rebounds, assists, steals, blocks, turnovers, FG/3P/FT made-attempted-percentage, double-doubles, triple-doubles (per-game and totals). Regular season or playoffs, 2003 to now (season = year it ends, 2026 = 2025-26). Data from ESPN's public stats API (stats.nba.com blocks automated access). Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • dev_nfl_statsNFL official passing leaders for a regular season from nfl.com's stats page, sorted by passing yards: player, yards, yards per attempt, attempts, completions, completion %, touchdo…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    NFL official passing leaders for a regular season from nfl.com's stats page, sorted by passing yards: player, yards, yards per attempt, attempts, completions, completion %, touchdowns, interceptions, passer rating, sacks. Passing only; other categories are not returned. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • dev_nrl_rugby_league_statsNRL Telstra Premiership ladder for a season from the NRL site's own ladder data: position, club, played, wins, draws, losses, points for and against, points difference, competition…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    NRL Telstra Premiership ladder for a season from the NRL site's own ladder data: position, club, played, wins, draws, losses, points for and against, points difference, competition points, form and streak. Season stats only; no player stats. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • dev_openverse_mediaOpenverse openly licensed image search (Creative Commons and public domain): title, creator, license, ready-made attribution, source page, direct image URL and size.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Openverse openly licensed image search (Creative Commons and public domain): title, creator, license, ready-made attribution, source page, direct image URL and size. Images only; each result keeps its own license. Results can be slow (up to ~15 s). Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • dev_pinnacle_oddsPinnacle sportsbook prices (the sharpest market-making book) from its public guest API: upcoming matchups of a league with start time, home/away participants and the main full-game…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Pinnacle sportsbook prices (the sharpest market-making book) from its public guest API: upcoming matchups of a league with start time, home/away participants and the main full-game lines — moneyline (incl. draw), handicap/spread and total with American odds, team totals, betting cutoff and max stake. Find a league by name within a sport (soccer, basketball, football, hockey, baseball, tennis, mma) or pass Pinnacle's league ID. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • dev_podchaserPodcast search across the Apple Podcasts directory (iTunes Search API): podcast title, publisher, episode count, genres, latest episode date, explicit flag, RSS feed URL, artwork a…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Podcast search across the Apple Podcasts directory (iTunes Search API): podcast title, publisher, episode count, genres, latest episode date, explicit flag, RSS feed URL, artwork and Apple Podcasts link, for a search term and optional country store. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • dev_pro_football_referenceNFL player season statistics, sorted leaderboard (default passing yards): per player team, position, games, completions, attempts, completion %, yards, Y/A, TD, INT, sacks, passer …Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    NFL player season statistics, sorted leaderboard (default passing yards): per player team, position, games, completions, attempts, completion %, yards, Y/A, TD, INT, sacks, passer rating and QBR, plus rushing, receiving, defense, scoring, returns, kicking and punting. Regular season or playoffs, 2004 to now. Data from ESPN's public stats API (Pro Football Reference blocks automated access). Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • dev_producthuntProduct Hunt launches featured on the homepage feed for one day, ranked by Product Hunt's daily rank: name, tagline, product link and Product Hunt's score (latestScore, the points …Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Product Hunt launches featured on the homepage feed for one day, ranked by Product Hunt's daily rank: name, tagline, product link and Product Hunt's score (latestScore, the points the site shows; not a raw upvote count). Public page data; no API key. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • dev_sherdogSherdog MMA fighter profile by Sherdog fighter id: name, nationality, height, weight, win/loss record and the fight history (result, opponent, event, date, method, round).Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Sherdog MMA fighter profile by Sherdog fighter id: name, nationality, height, weight, win/loss record and the fight history (result, opponent, event, date, method, round). Public profile pages; no draws or upcoming bouts beyond what the page lists. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • dev_shopify_app_storeShopify App Store listing by app handle (the part after apps.shopify.com/): app name, developer brand, category, description and average rating with rating count, from the public l…Reads text others write1 finding

    Why it is in this group

    • The name "dev_shopify_app_store" says "store": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.

    Findings

    • Warn

      The server marks "dev_shopify_app_store" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "dev_shopify_app_store" says "store": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Shopify App Store listing by app handle (the part after apps.shopify.com/): app name, developer brand, category, description and average rating with rating count, from the public listing's schema.org data. No install counts or prices. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • dev_sofascore_liveLive sports from SofaScore.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Live sports from SofaScore. Without an event ID: every match in play for a sport (football, basketball, tennis, ice-hockey, baseball, cricket, esports...) with event ID, competition, teams, live score and status. With an event ID: score by period, venue, incidents (goals, cards, substitutions with minute), live and pre-match odds by market, and team statistics (possession, xG, shots...). Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • dev_sporting_life_racingHorse racing racecards from Sporting Life (UK & Ireland, plus international meetings): today's meetings with course, country, going, surface and weather, and each race's time, name…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Horse racing racecards from Sporting Life (UK & Ireland, plus international meetings): today's meetings with course, country, going, surface and weather, and each race's time, name, class, age band, distance, runner count, stage (declared, off, result) and winning time; plus the next ten races with runners (horse, age, form, jockey, trainer, draw, official rating, current and earlier odds) and the betting forecast. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • dev_sportsbook_reviewUS sportsbook odds comparison from SportsbookReview: for a league (NFL, NBA, MLB, NHL, college, WNBA), market (spread, moneyline or totals) and optional date, every game with teams…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    US sportsbook odds comparison from SportsbookReview: for a league (NFL, NBA, MLB, NHL, college, WNBA), market (spread, moneyline or totals) and optional date, every game with teams, start time, venue, public consensus pick percentages and each sportsbook's opening and current line and price (BetMGM, bet365, DraftKings, FanDuel, Caesars, BetRivers, Fanatics, Hard Rock…). Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • dev_sportslineSportsLine (CBS Sports) odds board: for NFL, NBA, MLB, NHL, college or WNBA, every listed game with teams, start time, venue, TV, status, SportsLine's projected score and, per spor…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    SportsLine (CBS Sports) odds board: for NFL, NBA, MLB, NHL, college or WNBA, every listed game with teams, start time, venue, TV, status, SportsLine's projected score and, per sportsbook (consensus, BetMGM, DraftKings, FanDuel, bet365, Caesars…), the opening and current moneyline, point spread and total with prices. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • dev_teamrankingsTeamRankings team stat table for NBA or NFL, for one stat page (for example points-per-game): rank, team, the season value, last 3 games, last game, home and away averages, and the…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    TeamRankings team stat table for NBA or NFL, for one stat page (for example points-per-game): rank, team, the season value, last 3 games, last game, home and away averages, and the previous season, as TeamRankings publishes them. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • dev_tennisexplorerTennisExplorer ATP/WTA match results for one day from the public results page: tournament, start time, both players with seed, sets won, set scores and pre-match home/away odds as …Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    TennisExplorer ATP/WTA match results for one day from the public results page: tournament, start time, both players with seed, sets won, set scores and pre-match home/away odds as the site lists them. Only matches listed for that day. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • dev_the_odds_api_sportsPre-match head-to-head odds for one sport from The Odds API (v4): each event with start time, teams and each bookmaker's decimal prices, plus the best price per outcome and which b…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Pre-match head-to-head odds for one sport from The Odds API (v4): each event with start time, teams and each bookmaker's decimal prices, plus the best price per outcome and which bookmaker offers it. Needs the owner's free The Odds API key; uses quota on that key. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • dev_thesportsdbTheSportsDB team search: up to 5 teams matching a name, with sport, league, formed year, stadium, country, website and English description.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    TheSportsDB team search: up to 5 teams matching a name, with sport, league, formed year, stadium, country, website and English description. Community-maintained database; uses TheSportsDB's public test key unless the owner sets THESPORTSDB_KEY. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • dev_tiktok_soundTikTok sound (music) stats from TikTok's public embed player and sound page: sound ID, title, artist, total number of videos made with the sound, cover image and the first 10 video…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    TikTok sound (music) stats from TikTok's public embed player and sound page: sound ID, title, artist, total number of videos made with the sound, cover image and the first 10 videos using it (video ID, link, creator username, caption, play count, cover). Accepts a sound ID or a tiktok.com/music/… URL. Unknown sounds return 404. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • dev_trustradiusTrustRadius software product summary: product name, vendor, category, TrustRadius score (out of 10) and rating count, product description, TrustRadius' review digest (overview, top…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    TrustRadius software product summary: product name, vendor, category, TrustRadius score (out of 10) and rating count, product description, TrustRadius' review digest (overview, top pros and cons, number of reviews it is based on) and the top industries using the product (share of tracked installs). Takes the product slug from trustradius.com/products/<slug>/reviews. Via a rendering residential proxy. Price: $0.02 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • dev_ufc_statsOfficial UFC.com athlete rankings by division: champion (if listed) and ranked athletes with rank number and athlete page link.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Official UFC.com athlete rankings by division: champion (if listed) and ranked athletes with rank number and athlete page link. Read from the public rankings page; no fight records or per-fight stats. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • dev_ufcstatsUFC fighter career profile from the official UFC.com athlete page: name, division, ranking/status tags, W-L-D record, win streak, significant strikes and takedowns landed/attempted…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    UFC fighter career profile from the official UFC.com athlete page: name, division, ranking/status tags, W-L-D record, win streak, significant strikes and takedowns landed/attempted, per-minute and per-15-minute averages, defense percentages, strikes by position and target, wins by method, bio (age, height, reach, camp, debut) and the most recent bouts with round, time and method. Give the fighter's name or UFC.com slug. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • dev_understat_xgUnderstat expected-goals (xG) player stats for one league and season: top players by xG with goals, xG, assists, xA, shots, key passes and minutes.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Understat expected-goals (xG) player stats for one league and season: top players by xG with goals, xG, assists, xA, shots, key passes and minutes. Leagues: EPL, La_liga, Bundesliga, Serie_A, Ligue_1, RFPL. Season is the start year (2025 = 2025-26). Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • dev_vegasinsiderBetting lines from VegasInsider's odds screens (NFL, NBA, MLB, NHL, WNBA, college football/basketball): every listed game with VI event ID, start time, teams with rotation numbers …Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Betting lines from VegasInsider's odds screens (NFL, NBA, MLB, NHL, WNBA, college football/basketball): every listed game with VI event ID, start time, teams with rotation numbers and, per market (spread, total or moneyline), the opening line, each US sportsbook's line and price (bet365, BetMGM, DraftKings, Caesars, FanDuel, Hard Rock, Fanatics, BetRivers) and VI's consensus. American odds; 'even' is +100. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • dev_wnba_statsWNBA player season statistics, sorted leaderboard: per player team, position, age, games, minutes, points, rebounds, assists, steals, blocks, turnovers, FG/3P/FT made-attempted-per…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    WNBA player season statistics, sorted leaderboard: per player team, position, age, games, minutes, points, rebounds, assists, steals, blocks, turnovers, FG/3P/FT made-attempted-percentage, double-doubles (per-game and totals). Regular season or playoffs, 2006 to now. Data from ESPN's public stats API (stats.wnba.com blocks automated access). Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • dev_wta_tennis_rankingsWTA official singles or doubles rankings from the JSON API behind wtatennis.com: rank, player name, country, ranking points, tournaments played and rank movement.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    WTA official singles or doubles rankings from the JSON API behind wtatennis.com: rank, player name, country, ranking points, tournaments played and rank movement. Top N as published; no ATP data. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • dev_youtube_channelYouTube channel public details by @handle from the channel page: channel id, name, description (YouTube truncates it), subscriber count as YouTube rounds it (e.g.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    YouTube channel public details by @handle from the channel page: channel id, name, description (YouTube truncates it), subscriber count as YouTube rounds it (e.g. 44.7 million) and exact video count. Public page data; English locale; no per-video stats. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
Only reads 10Show 10 read-only tools
  • agent_intel_bytecode_similarity_radarCompares the runtime bytecode of two Ethereum contracts you name: the share of shared PUSH4 function selectors (Jaccard) and the cosine similarity of their opcode frequencies, comb…Reads text others writeNo findings

    Why it is in this group

    • The description's first verb is "compare": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Compares the runtime bytecode of two Ethereum contracts you name: the share of shared PUSH4 function selectors (Jaccard) and the cosine similarity of their opcode frequencies, combined into one 0 to 1 score with a SIMILAR, PARTIAL or DIFFERENT label. It compares two addresses only; it has no database of known scam or exploit templates, so it cannot say a contract is a known clone. Price: $0.003 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • agent_intel_global_postal_geocode_resolverResolves a postal code in one country (ISO 2-letter code, e.g.Reads text others writeNo findings

    Why it is in this group

    • The description's first verb is "resolve": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Resolves a postal code in one country (ISO 2-letter code, e.g. US, DE, TR, GB) to its place names, state or province, and latitude and longitude, from Zippopotam.us. Covers only the countries that service publishes. No time zone or administrative municipality is returned, since no free source for them was used. Price: $0.001 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • agent_intel_iban_routing_swift_resolverValidates an IBAN (MOD-97 checksum and country length, computed here) and, if it passes, looks up the bank name, city and BIC (SWIFT) through OpenIBAN's public validation.Reads text others writeNo findings

    Why it is in this group

    • The description's first verb is "validate": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Validates an IBAN (MOD-97 checksum and country length, computed here) and, if it passes, looks up the bank name, city and BIC (SWIFT) through OpenIBAN's public validation. The bank lookup depends on OpenIBAN's directory and may be missing for some banks; a valid checksum does not prove the account exists. Price: $0.001 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • agent_intel_live_page_diffCompares a public page now with its earliest Internet Archive (Wayback) snapshot on or after a date: changed yes/no, word similarity, added and removed text lines, and the price-li…Reads text others writeCan send data outNo findings

    Why it is in this group

    • The name "agent_intel_live_page_diff" says "diff": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • untrusted-inputThe description's first sentence says "compare" and "internet": it reads web pages, which anyone can write.
    • untrusted-inputThe input takes a URL (input.url), and the tool reads it: it reads web pages, which anyone can write.
    • outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.

    Claude Code: ask, because it is tagged outbound.

    Description, as the server wrote it
    Compares a public page now with its earliest Internet Archive (Wayback) snapshot on or after a date: changed yes/no, word similarity, added and removed text lines, and the price-like amounts ($, €, £) before and after. Only what the archive captured is compared; pages the archive never saved return 404. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • agent_intel_phone_carrier_hlr_lookupParses an international phone number (E.164), checks it against Google's open libphonenumber metadata, and returns the country, line type (mobile, fixed line, fixed-or-mobile, VoIP…Reads text others writeNo findings

    Why it is in this group

    • The name "agent_intel_phone_carrier_hlr_lookup" says "lookup": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Parses an international phone number (E.164), checks it against Google's open libphonenumber metadata, and returns the country, line type (mobile, fixed line, fixed-or-mobile, VoIP, toll free, premium, pager and more), E.164/international/national formats and the carrier that the number range was originally allocated to. Not a live HLR query: ported numbers keep the original carrier and active/inactive status is not checked. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • agent_intel_smart_money_inflow_trackerFinds the top-ROI accounts on Hyperliquid's public perp leaderboard (week, month or all-time window, with a minimum account size) and reads their live open positions from Hyperliqu…Reads text others writeNo findings

    Why it is in this group

    • The description's first verb is "find": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Finds the top-ROI accounts on Hyperliquid's public perp leaderboard (week, month or all-time window, with a minimum account size) and reads their live open positions from Hyperliquid's public info API, then sums net long/short USD exposure per coin. Shows where the best-performing Hyperliquid traders are positioned now. Hyperliquid perps only, not spot wallets on other chains; not investment advice. Price: $0.004 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • agent_intel_token_liquidity_migration_watchSnapshot of a token's DEX pool liquidity now (DexScreener, deepest pair and every pair's USD liquidity).Reads text others writeNo findings

    Why it is in this group

    • The description's first verb is "snapshot": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Snapshot of a token's DEX pool liquidity now (DexScreener, deepest pair and every pair's USD liquidity). Stateless: pass the liquidityUsd you saved last time as previousLiquidityUsd and it returns the % change and a DROP/DRAIN flag. It keeps no history itself and does not show lock expiry dates. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • agent_intel_web_search_turboWeb search via DuckDuckGo's public HTML results page: ranked titles, direct result URLs and snippets, no ads.Reads text others writeNo findings

    Why it is in this group

    • The name "agent_intel_web_search_turbo" says "search": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • untrusted-inputThe name "agent_intel_web_search_turbo" says "search" and "web": it reads web pages, which anyone can write.
    • untrusted-inputThe description's first sentence says "web": it reads web pages, which anyone can write.
    Description, as the server wrote it
    Web search via DuckDuckGo's public HTML results page: ranked titles, direct result URLs and snippets, no ads. No relevance score (DuckDuckGo does not publish one). DuckDuckGo often answers with an empty page; the tool retries, and if it still gets none the list is empty and 'note' says so. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • dev_screenshot_urlScreenshot of a public web page as a PNG, rendered by the thum.io screenshot service.Reads text others writeCan send data outNo findings

    Why it is in this group

    • The name "dev_screenshot_url" says "screenshot": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • untrusted-inputThe name "dev_screenshot_url" says "screenshot" and "url": it reads web pages, which anyone can write.
    • untrusted-inputThe description's first sentence says "screenshot" and "web": it reads web pages, which anyone can write.
    • untrusted-inputThe input takes a URL (input.url), and the tool reads it: it reads web pages, which anyone can write.
    • outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.

    Claude Code: ask, because it is tagged outbound.

    Description, as the server wrote it
    Screenshot of a public web page as a PNG, rendered by the thum.io screenshot service. Returns the image URL plus the PNG width and height measured from the image. Only http/https pages; the caller fetches screenshotUrl. Third-party renderer, rate limits apply. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged private-data.

Reads private data0
Reads files, mail, messages, databases, secrets, calendars or repositories.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

9 warn2 info
  • The server marks "agent_intel_fact_brief_synthesizer" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"openWorldHint":true}; The input takes a statement or command to run (input.statement), which can change anything it can reach.

    What this check looks for
  • The server marks "agent_intel_liquidity_lock_inspector" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "agent_intel_liquidity_lock_inspector" says "lock": a word for a change.

    What this check looks for
  • The server marks "agent_intel_cross_chain_bridge_liquidity" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

    Matched text

    annotations: {"readOnlyHint":true,"openWorldHint":true}; The input addresses people (input.to): what it sends cannot be taken back.

    What this check looks for
  • The server marks "agent_intel_ecb_institutional_fx_rates" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

    Matched text

    annotations: {"readOnlyHint":true,"openWorldHint":true}; The input addresses people (input.to): what it sends cannot be taken back.

    What this check looks for
  • The server marks "agent_intel_html_dom_to_clean_markdown" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"openWorldHint":true}; The description's first verb is "convert": a word for a change.

    What this check looks for
  • The server marks "dev_google_play_store" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "dev_google_play_store" says "store": a word for a change.

    What this check looks for
Show 5 more findings

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http sitecheck-agent-intel-dev https://api.fadeandco.workers.dev/mcp?ref=registry
claude mcp add --transport http sitecheck-agent-intel-dev https://api.fadeandco.workers.dev/mcp?ref=registry

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__sitecheck-agent-intel-dev__agent_intel_web_search_turbo",
      "mcp__sitecheck-agent-intel-dev__agent_intel_bytecode_similarity_radar",
      "mcp__sitecheck-agent-intel-dev__agent_intel_token_liquidity_migration_watch",
      "mcp__sitecheck-agent-intel-dev__agent_intel_smart_money_inflow_tracker",
      "mcp__sitecheck-agent-intel-dev__agent_intel_iban_routing_swift_resolver",
      "mcp__sitecheck-agent-intel-dev__agent_intel_phone_carrier_hlr_lookup",
      "mcp__sitecheck-agent-intel-dev__agent_intel_global_postal_geocode_resolver",
      "mcp__sitecheck-agent-intel-dev__agent_intel_sec_edgar_filings_search"
    ],
    "ask": [
      "mcp__sitecheck-agent-intel-dev__agent_intel_deep_research",
      "mcp__sitecheck-agent-intel-dev__agent_intel_news_radar",
      "mcp__sitecheck-agent-intel-dev__agent_intel_social_signal_aggregator",
      "mcp__sitecheck-agent-intel-dev__agent_intel_reader_markdown_extract",
      "mcp__sitecheck-agent-intel-dev__agent_intel_viral_trending_radar",
      "mcp__sitecheck-agent-intel-dev__agent_intel_domain_authority_credibility",
      "mcp__sitecheck-agent-intel-dev__agent_intel_live_page_diff",
      "mcp__sitecheck-agent-intel-dev__agent_intel_fact_brief_synthesizer",
      "mcp__sitecheck-agent-intel-dev__agent_intel_citation_verifier",
      "mcp__sitecheck-agent-intel-dev__agent_intel_token_verdict_engine",
      "mcp__sitecheck-agent-intel-dev__agent_intel_honeypot_trap_detector",
      "mcp__sitecheck-agent-intel-dev__agent_intel_liquidity_lock_inspector",
      "mcp__sitecheck-agent-intel-dev__agent_intel_bundle_sniper_detector",
      "mcp__sitecheck-agent-intel-dev__agent_intel_deployer_rug_forensics",
      "mcp__sitecheck-agent-intel-dev__agent_intel_holder_cluster_analyzer",
      "mcp__sitecheck-agent-intel-dev__agent_intel_solana_authority_audit",
      "mcp__sitecheck-agent-intel-dev__agent_intel_wallet_forensic_profiler",
      "mcp__sitecheck-agent-intel-dev__agent_intel_token_composite_safety_score",
      "mcp__sitecheck-agent-intel-dev__agent_intel_anti_whale_limit_detector",
      "mcp__sitecheck-agent-intel-dev__agent_intel_wash_trading_volume_filter",
      "mcp__sitecheck-agent-intel-dev__agent_intel_sybil_airdrop_farmer_check",
      "mcp__sitecheck-agent-intel-dev__agent_intel_known_scams_blacklist_db",
      "mcp__sitecheck-agent-intel-dev__agent_intel_whale_transaction_monitor",
      "mcp__sitecheck-agent-intel-dev__agent_intel_dex_depth_slippage_calculator",
      "mcp__sitecheck-agent-intel-dev__agent_intel_perp_funding_rate_heatmap",
      "mcp__sitecheck-agent-intel-dev__agent_intel_options_implied_volatility",
      "mcp__sitecheck-agent-intel-dev__agent_intel_leverage_liquidation_levels",
      "mcp__sitecheck-agent-intel-dev__agent_intel_cex_exchange_reserve_flows",
      "mcp__sitecheck-agent-intel-dev__agent_intel_onchain_mvrv_valuation",
      "mcp__sitecheck-agent-intel-dev__agent_intel_sopr_profit_taking_ratio",
      "mcp__sitecheck-agent-intel-dev__agent_intel_crosschain_gas_priority_fee",
      "mcp__sitecheck-agent-intel-dev__agent_intel_mev_sandwich_risk_analyzer",
      "mcp__sitecheck-agent-intel-dev__agent_intel_wallet_pnl_performance_audit",
      "mcp__sitecheck-agent-intel-dev__agent_intel_cross_chain_bridge_liquidity",
      "mcp__sitecheck-agent-intel-dev__agent_intel_stablecoin_peg_integrity_radar",
      "mcp__sitecheck-agent-intel-dev__agent_intel_defi_yield_risk_optimizer",
      "mcp__sitecheck-agent-intel-dev__agent_intel_prompt_injection_firewall",
      "mcp__sitecheck-agent-intel-dev__agent_intel_scam_phishing_message_filter",
      "mcp__sitecheck-agent-intel-dev__agent_intel_x402_endpoint_health_vetting",
      "mcp__sitecheck-agent-intel-dev__agent_intel_ofac_sanctions_preflight",
      "mcp__sitecheck-agent-intel-dev__agent_intel_agent_json_schema_guard",
      "mcp__sitecheck-agent-intel-dev__agent_intel_pii_credentials_redaction",
      "mcp__sitecheck-agent-intel-dev__agent_intel_smart_contract_linter_audit",
      "mcp__sitecheck-agent-intel-dev__agent_intel_ssl_certificate_transparency",
      "mcp__sitecheck-agent-intel-dev__agent_intel_typosquat_phishing_domain_radar",
      "mcp__sitecheck-agent-intel-dev__agent_intel_ip_fraud_reputation_score",
      "mcp__sitecheck-agent-intel-dev__agent_intel_hallucination_claim_checker",
      "mcp__sitecheck-agent-intel-dev__agent_intel_api_sla_liveness_benchmark",
      "mcp__sitecheck-agent-intel-dev__agent_intel_cors_security_misconfig_audit",
      "mcp__sitecheck-agent-intel-dev__agent_intel_subdomain_takeover_monitor",
      "mcp__sitecheck-agent-intel-dev__agent_intel_dnssec_trust_chain_validator",
      "mcp__sitecheck-agent-intel-dev__agent_intel_invoice_document_ocr",
      "mcp__sitecheck-agent-intel-dev__agent_intel_gleif_corporate_lei_registry",
      "mcp__sitecheck-agent-intel-dev__agent_intel_eu_vies_vat_batch_validator",
      "mcp__sitecheck-agent-intel-dev__agent_intel_ecb_institutional_fx_rates",
      "mcp__sitecheck-agent-intel-dev__agent_intel_consumer_product_recalls",
      "mcp__sitecheck-agent-intel-dev__agent_intel_marine_weather_tide_forecast",
      "mcp__sitecheck-agent-intel-dev__agent_intel_highres_qr_code_generator",
      "mcp__sitecheck-agent-intel-dev__agent_intel_multilingual_voice_tts",
      "mcp__sitecheck-agent-intel-dev__agent_intel_speech_to_text_transcribe_turbo",
      "mcp__sitecheck-agent-intel-dev__agent_intel_html_dom_to_clean_markdown",
      "mcp__sitecheck-agent-intel-dev__dev_tennisexplorer",
      "mcp__sitecheck-agent-intel-dev__dev_mlb_stats",
      "mcp__sitecheck-agent-intel-dev__dev_ufcstats",
      "mcp__sitecheck-agent-intel-dev__dev_sofascore_live",
      "mcp__sitecheck-agent-intel-dev__dev_producthunt",
      "mcp__sitecheck-agent-intel-dev__dev_fbref",
      "mcp__sitecheck-agent-intel-dev__dev_screenshot_url",
      "mcp__sitecheck-agent-intel-dev__dev_mlb_statsapi",
      "mcp__sitecheck-agent-intel-dev__dev_wta_tennis_rankings",
      "mcp__sitecheck-agent-intel-dev__dev_loom_video_downloader",
      "mcp__sitecheck-agent-intel-dev__dev_openverse_media",
      "mcp__sitecheck-agent-intel-dev__dev_action_network",
      "mcp__sitecheck-agent-intel-dev__dev_flashscore",
      "mcp__sitecheck-agent-intel-dev__dev_podchaser",
      "mcp__sitecheck-agent-intel-dev__dev_sherdog",
      "mcp__sitecheck-agent-intel-dev__dev_espn_sports",
      "mcp__sitecheck-agent-intel-dev__dev_espn_mlb_scoreboard",
      "mcp__sitecheck-agent-intel-dev__dev_ufc_stats",
      "mcp__sitecheck-agent-intel-dev__dev_liquipedia_esports_wiki",
      "mcp__sitecheck-agent-intel-dev__dev_gmx_arbitrum_stats",
      "mcp__sitecheck-agent-intel-dev__dev_espn_soccer_scoreboard",
      "mcp__sitecheck-agent-intel-dev__dev_pinnacle_odds",
      "mcp__sitecheck-agent-intel-dev__dev_football_data_couk",
      "mcp__sitecheck-agent-intel-dev__dev_google_play_store",
      "mcp__sitecheck-agent-intel-dev__dev_youtube_channel",
      "mcp__sitecheck-agent-intel-dev__dev_wnba_stats",
      "mcp__sitecheck-agent-intel-dev__dev_espn_nfl_scoreboard",
      "mcp__sitecheck-agent-intel-dev__dev_baseball_reference",
      "mcp__sitecheck-agent-intel-dev__dev_sporting_life_racing",
      "mcp__sitecheck-agent-intel-dev__dev_trustradius",
      "mcp__sitecheck-agent-intel-dev__dev_covers",
      "mcp__sitecheck-agent-intel-dev__dev_huggingface_papers",
      "mcp__sitecheck-agent-intel-dev__dev_nba_stats",
      "mcp__sitecheck-agent-intel-dev__dev_espn_standings",
      "mcp__sitecheck-agent-intel-dev__dev_nrl_rugby_league_stats",
      "mcp__sitecheck-agent-intel-dev__dev_espn_wnba",
      "mcp__sitecheck-agent-intel-dev__dev_sportsline",
      "mcp__sitecheck-agent-intel-dev__dev_nascar_racing_reference",
      "mcp__sitecheck-agent-intel-dev__dev_the_odds_api_sports",
      "mcp__sitecheck-agent-intel-dev__dev_apple_app_store_iphone",
      "mcp__sitecheck-agent-intel-dev__dev_pro_football_reference",
      "mcp__sitecheck-agent-intel-dev__dev_bloomberg_articles",
      "mcp__sitecheck-agent-intel-dev__dev_shopify_app_store",
      "mcp__sitecheck-agent-intel-dev__dev_fanduel",
      "mcp__sitecheck-agent-intel-dev__dev_bundlephobia",
      "mcp__sitecheck-agent-intel-dev__dev_espn_mma",
      "mcp__sitecheck-agent-intel-dev__dev_espn_nba_scoreboard",
      "mcp__sitecheck-agent-intel-dev__dev_sportsbook_review",
      "mcp__sitecheck-agent-intel-dev__dev_vegasinsider",
      "mcp__sitecheck-agent-intel-dev__dev_nfl_stats",
      "mcp__sitecheck-agent-intel-dev__dev_fpl_premier_league",
      "mcp__sitecheck-agent-intel-dev__dev_understat_xg",
      "mcp__sitecheck-agent-intel-dev__dev_tiktok_sound",
      "mcp__sitecheck-agent-intel-dev__dev_mac_app_store",
      "mcp__sitecheck-agent-intel-dev__dev_dicks_sporting_goods",
      "mcp__sitecheck-agent-intel-dev__dev_academy_sports_outdoors",
      "mcp__sitecheck-agent-intel-dev__dev_thesportsdb",
      "mcp__sitecheck-agent-intel-dev__dev_espn_golf",
      "mcp__sitecheck-agent-intel-dev__dev_teamrankings",
      "mcp__sitecheck-agent-intel-dev__dev_hockey_reference",
      "mcp__sitecheck-agent-intel-dev__dev_codecov_stats",
      "mcp__sitecheck-agent-intel-dev__dev_espn_nhl_scoreboard",
      "mcp__sitecheck-agent-intel-dev__dev_espn_college_football",
      "mcp__sitecheck-agent-intel-dev__dev_espn_nascar",
      "mcp__sitecheck-agent-intel-dev__dev_espn_f1_results",
      "mcp__sitecheck-agent-intel-dev__dev_blockchair_multichain_stats"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as sitecheck-agent-intel-dev. Review it before you use it.

Capability tags behind 135 rules
  • mcp__sitecheck-agent-intel-dev__agent_intel_deep_research untrusted-input
  • mcp__sitecheck-agent-intel-dev__agent_intel_web_search_turbo untrusted-input
  • mcp__sitecheck-agent-intel-dev__agent_intel_news_radar untrusted-input
  • mcp__sitecheck-agent-intel-dev__agent_intel_social_signal_aggregator untrusted-input
  • mcp__sitecheck-agent-intel-dev__agent_intel_reader_markdown_extract untrusted-input, outbound
  • mcp__sitecheck-agent-intel-dev__agent_intel_viral_trending_radar untrusted-input
  • mcp__sitecheck-agent-intel-dev__agent_intel_domain_authority_credibility untrusted-input
  • mcp__sitecheck-agent-intel-dev__agent_intel_live_page_diff untrusted-input, outbound
  • mcp__sitecheck-agent-intel-dev__agent_intel_fact_brief_synthesizer untrusted-input
  • mcp__sitecheck-agent-intel-dev__agent_intel_citation_verifier untrusted-input
  • mcp__sitecheck-agent-intel-dev__agent_intel_token_verdict_engine untrusted-input
  • mcp__sitecheck-agent-intel-dev__agent_intel_honeypot_trap_detector untrusted-input
  • mcp__sitecheck-agent-intel-dev__agent_intel_liquidity_lock_inspector untrusted-input
  • mcp__sitecheck-agent-intel-dev__agent_intel_bundle_sniper_detector untrusted-input
  • mcp__sitecheck-agent-intel-dev__agent_intel_deployer_rug_forensics untrusted-input
  • mcp__sitecheck-agent-intel-dev__agent_intel_holder_cluster_analyzer untrusted-input
  • mcp__sitecheck-agent-intel-dev__agent_intel_solana_authority_audit untrusted-input
  • mcp__sitecheck-agent-intel-dev__agent_intel_wallet_forensic_profiler untrusted-input
  • mcp__sitecheck-agent-intel-dev__agent_intel_token_composite_safety_score untrusted-input
  • mcp__sitecheck-agent-intel-dev__agent_intel_bytecode_similarity_radar untrusted-input
  • mcp__sitecheck-agent-intel-dev__agent_intel_anti_whale_limit_detector untrusted-input
  • mcp__sitecheck-agent-intel-dev__agent_intel_wash_trading_volume_filter untrusted-input
  • mcp__sitecheck-agent-intel-dev__agent_intel_sybil_airdrop_farmer_check untrusted-input
  • mcp__sitecheck-agent-intel-dev__agent_intel_known_scams_blacklist_db untrusted-input
  • mcp__sitecheck-agent-intel-dev__agent_intel_token_liquidity_migration_watch untrusted-input
  • mcp__sitecheck-agent-intel-dev__agent_intel_whale_transaction_monitor untrusted-input
  • mcp__sitecheck-agent-intel-dev__agent_intel_smart_money_inflow_tracker untrusted-input
  • mcp__sitecheck-agent-intel-dev__agent_intel_dex_depth_slippage_calculator untrusted-input
  • mcp__sitecheck-agent-intel-dev__agent_intel_perp_funding_rate_heatmap untrusted-input
  • mcp__sitecheck-agent-intel-dev__agent_intel_options_implied_volatility untrusted-input
  • mcp__sitecheck-agent-intel-dev__agent_intel_leverage_liquidation_levels untrusted-input
  • mcp__sitecheck-agent-intel-dev__agent_intel_cex_exchange_reserve_flows untrusted-input
  • mcp__sitecheck-agent-intel-dev__agent_intel_onchain_mvrv_valuation untrusted-input
  • mcp__sitecheck-agent-intel-dev__agent_intel_sopr_profit_taking_ratio untrusted-input
  • mcp__sitecheck-agent-intel-dev__agent_intel_crosschain_gas_priority_fee untrusted-input
  • mcp__sitecheck-agent-intel-dev__agent_intel_mev_sandwich_risk_analyzer untrusted-input
  • mcp__sitecheck-agent-intel-dev__agent_intel_wallet_pnl_performance_audit untrusted-input
  • mcp__sitecheck-agent-intel-dev__agent_intel_cross_chain_bridge_liquidity untrusted-input, outbound
  • mcp__sitecheck-agent-intel-dev__agent_intel_stablecoin_peg_integrity_radar untrusted-input
  • mcp__sitecheck-agent-intel-dev__agent_intel_defi_yield_risk_optimizer untrusted-input
  • mcp__sitecheck-agent-intel-dev__agent_intel_prompt_injection_firewall untrusted-input
  • mcp__sitecheck-agent-intel-dev__agent_intel_scam_phishing_message_filter untrusted-input
  • mcp__sitecheck-agent-intel-dev__agent_intel_x402_endpoint_health_vetting untrusted-input, outbound
  • mcp__sitecheck-agent-intel-dev__agent_intel_ofac_sanctions_preflight untrusted-input
  • mcp__sitecheck-agent-intel-dev__agent_intel_agent_json_schema_guard untrusted-input
  • mcp__sitecheck-agent-intel-dev__agent_intel_pii_credentials_redaction untrusted-input
  • mcp__sitecheck-agent-intel-dev__agent_intel_smart_contract_linter_audit untrusted-input
  • mcp__sitecheck-agent-intel-dev__agent_intel_ssl_certificate_transparency untrusted-input
  • mcp__sitecheck-agent-intel-dev__agent_intel_typosquat_phishing_domain_radar untrusted-input
  • mcp__sitecheck-agent-intel-dev__agent_intel_ip_fraud_reputation_score untrusted-input
  • mcp__sitecheck-agent-intel-dev__agent_intel_hallucination_claim_checker untrusted-input
  • mcp__sitecheck-agent-intel-dev__agent_intel_api_sla_liveness_benchmark untrusted-input, outbound
  • mcp__sitecheck-agent-intel-dev__agent_intel_cors_security_misconfig_audit untrusted-input, outbound
  • mcp__sitecheck-agent-intel-dev__agent_intel_subdomain_takeover_monitor untrusted-input
  • mcp__sitecheck-agent-intel-dev__agent_intel_dnssec_trust_chain_validator untrusted-input
  • mcp__sitecheck-agent-intel-dev__agent_intel_invoice_document_ocr untrusted-input
  • mcp__sitecheck-agent-intel-dev__agent_intel_gleif_corporate_lei_registry untrusted-input
  • mcp__sitecheck-agent-intel-dev__agent_intel_eu_vies_vat_batch_validator untrusted-input
  • mcp__sitecheck-agent-intel-dev__agent_intel_iban_routing_swift_resolver untrusted-input
  • mcp__sitecheck-agent-intel-dev__agent_intel_phone_carrier_hlr_lookup untrusted-input
  • mcp__sitecheck-agent-intel-dev__agent_intel_global_postal_geocode_resolver untrusted-input
  • mcp__sitecheck-agent-intel-dev__agent_intel_ecb_institutional_fx_rates untrusted-input, outbound
  • mcp__sitecheck-agent-intel-dev__agent_intel_sec_edgar_filings_search untrusted-input
  • mcp__sitecheck-agent-intel-dev__agent_intel_consumer_product_recalls untrusted-input
  • mcp__sitecheck-agent-intel-dev__agent_intel_marine_weather_tide_forecast untrusted-input
  • mcp__sitecheck-agent-intel-dev__agent_intel_highres_qr_code_generator untrusted-input
  • mcp__sitecheck-agent-intel-dev__agent_intel_multilingual_voice_tts untrusted-input
  • mcp__sitecheck-agent-intel-dev__agent_intel_speech_to_text_transcribe_turbo untrusted-input
  • mcp__sitecheck-agent-intel-dev__agent_intel_html_dom_to_clean_markdown untrusted-input
  • mcp__sitecheck-agent-intel-dev__dev_tennisexplorer untrusted-input
  • mcp__sitecheck-agent-intel-dev__dev_mlb_stats untrusted-input
  • mcp__sitecheck-agent-intel-dev__dev_ufcstats untrusted-input
  • mcp__sitecheck-agent-intel-dev__dev_sofascore_live untrusted-input
  • mcp__sitecheck-agent-intel-dev__dev_producthunt untrusted-input
  • mcp__sitecheck-agent-intel-dev__dev_fbref untrusted-input
  • mcp__sitecheck-agent-intel-dev__dev_screenshot_url untrusted-input, outbound
  • mcp__sitecheck-agent-intel-dev__dev_mlb_statsapi untrusted-input
  • mcp__sitecheck-agent-intel-dev__dev_wta_tennis_rankings untrusted-input
  • mcp__sitecheck-agent-intel-dev__dev_loom_video_downloader untrusted-input, outbound
  • mcp__sitecheck-agent-intel-dev__dev_openverse_media untrusted-input
  • mcp__sitecheck-agent-intel-dev__dev_action_network untrusted-input
  • mcp__sitecheck-agent-intel-dev__dev_flashscore untrusted-input
  • mcp__sitecheck-agent-intel-dev__dev_podchaser untrusted-input
  • mcp__sitecheck-agent-intel-dev__dev_sherdog untrusted-input
  • mcp__sitecheck-agent-intel-dev__dev_espn_sports untrusted-input
  • mcp__sitecheck-agent-intel-dev__dev_espn_mlb_scoreboard untrusted-input
  • mcp__sitecheck-agent-intel-dev__dev_ufc_stats untrusted-input
  • mcp__sitecheck-agent-intel-dev__dev_liquipedia_esports_wiki untrusted-input
  • mcp__sitecheck-agent-intel-dev__dev_gmx_arbitrum_stats untrusted-input
  • mcp__sitecheck-agent-intel-dev__dev_espn_soccer_scoreboard untrusted-input
  • mcp__sitecheck-agent-intel-dev__dev_pinnacle_odds untrusted-input
  • mcp__sitecheck-agent-intel-dev__dev_football_data_couk untrusted-input
  • mcp__sitecheck-agent-intel-dev__dev_google_play_store untrusted-input
  • mcp__sitecheck-agent-intel-dev__dev_youtube_channel untrusted-input
  • mcp__sitecheck-agent-intel-dev__dev_wnba_stats untrusted-input
  • mcp__sitecheck-agent-intel-dev__dev_espn_nfl_scoreboard untrusted-input
  • mcp__sitecheck-agent-intel-dev__dev_baseball_reference untrusted-input
  • mcp__sitecheck-agent-intel-dev__dev_sporting_life_racing untrusted-input
  • mcp__sitecheck-agent-intel-dev__dev_trustradius untrusted-input
  • mcp__sitecheck-agent-intel-dev__dev_covers untrusted-input
  • mcp__sitecheck-agent-intel-dev__dev_huggingface_papers untrusted-input
  • mcp__sitecheck-agent-intel-dev__dev_nba_stats untrusted-input
  • mcp__sitecheck-agent-intel-dev__dev_espn_standings untrusted-input
  • mcp__sitecheck-agent-intel-dev__dev_nrl_rugby_league_stats untrusted-input
  • mcp__sitecheck-agent-intel-dev__dev_espn_wnba untrusted-input
  • mcp__sitecheck-agent-intel-dev__dev_sportsline untrusted-input
  • mcp__sitecheck-agent-intel-dev__dev_nascar_racing_reference untrusted-input
  • mcp__sitecheck-agent-intel-dev__dev_the_odds_api_sports untrusted-input
  • mcp__sitecheck-agent-intel-dev__dev_apple_app_store_iphone untrusted-input
  • mcp__sitecheck-agent-intel-dev__dev_pro_football_reference untrusted-input
  • mcp__sitecheck-agent-intel-dev__dev_bloomberg_articles untrusted-input
  • mcp__sitecheck-agent-intel-dev__dev_shopify_app_store untrusted-input
  • mcp__sitecheck-agent-intel-dev__dev_fanduel untrusted-input
  • mcp__sitecheck-agent-intel-dev__dev_bundlephobia untrusted-input
  • mcp__sitecheck-agent-intel-dev__dev_espn_mma untrusted-input
  • mcp__sitecheck-agent-intel-dev__dev_espn_nba_scoreboard untrusted-input
  • mcp__sitecheck-agent-intel-dev__dev_sportsbook_review untrusted-input
  • mcp__sitecheck-agent-intel-dev__dev_vegasinsider untrusted-input
  • mcp__sitecheck-agent-intel-dev__dev_nfl_stats untrusted-input
  • mcp__sitecheck-agent-intel-dev__dev_fpl_premier_league untrusted-input
  • mcp__sitecheck-agent-intel-dev__dev_understat_xg untrusted-input
  • mcp__sitecheck-agent-intel-dev__dev_tiktok_sound untrusted-input
  • mcp__sitecheck-agent-intel-dev__dev_mac_app_store untrusted-input
  • mcp__sitecheck-agent-intel-dev__dev_dicks_sporting_goods untrusted-input
  • mcp__sitecheck-agent-intel-dev__dev_academy_sports_outdoors untrusted-input
  • mcp__sitecheck-agent-intel-dev__dev_thesportsdb untrusted-input
  • mcp__sitecheck-agent-intel-dev__dev_espn_golf untrusted-input
  • mcp__sitecheck-agent-intel-dev__dev_teamrankings untrusted-input
  • mcp__sitecheck-agent-intel-dev__dev_hockey_reference untrusted-input
  • mcp__sitecheck-agent-intel-dev__dev_codecov_stats untrusted-input
  • mcp__sitecheck-agent-intel-dev__dev_espn_nhl_scoreboard untrusted-input
  • mcp__sitecheck-agent-intel-dev__dev_espn_college_football untrusted-input
  • mcp__sitecheck-agent-intel-dev__dev_espn_nascar untrusted-input
  • mcp__sitecheck-agent-intel-dev__dev_espn_f1_results untrusted-input
  • mcp__sitecheck-agent-intel-dev__dev_blockchair_multichain_stats untrusted-input

Pin

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/io.github.bck-stack/sitecheck-agent-intel-dev/verify?hash=a1be48762efaafcc3f0d5262194904de19d46f4d9023309907d3dc51a6f007ea" | jq -e '.changed == false'

Pinned hash a1be48762efa, from Oct 23, 2026, 18:19 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.github.bck-stack/sitecheck-agent-intel-dev/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

anlyon.dev badge for io.github.bck-stack/sitecheck-agent-intel-dev
[![anlyon.dev](https://anlyon.dev/badge/io.github.bck-stack/sitecheck-agent-intel-dev.svg)](https://anlyon.dev/servers/io.github.bck-stack/sitecheck-agent-intel-dev)

Source: MCP Registry. Synced Oct 23, 2026, 18:18 UTC.