Skip to content

DeriveAI x402 APIs

by deriveit33z-ship-it · remote · no sign-in to list tools · v2.0.0 · published by GitHub user deriveit33z-ship-it

25 pay-per-request intelligence APIs for AI agents via x402 micropayments (USDC/Base)

Final · 2Changes · 21

25 tools: 2 do something that can't be undone, 21 change things and 2 only read.

Scanned Oct 21, 2026

No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http x402-apis https://x402-apis-eta.vercel.app/api/mcp

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

25 tools

Can't be undone 2Claude Code: ask
  • currency_convertCurrency conversion with real-time rates.No findings

    Why it is in this group

    • The name "currency_convert" says "convert": a word for a change.
    • The input addresses people (input.to): what it sends cannot be taken back.
    Description, as the server wrote it
    Currency conversion with real-time rates. Supports 150+ currencies including fiat (USD, EUR, GBP, AED, SAR, INR, PKR, PHP) and crypto (BTC, ETH). Returns rate, converted amount, and inverse rate.
  • screenshotCaptures a website screenshot as PNG/JPEG with performance metrics.No findings

    Why it is in this group

    • The name "screenshot" says "screenshot": a word for reading.
    • The description's first verb is "capture": a word that usually means money moves, which cannot be taken back.
    Description, as the server wrote it
    Captures a website screenshot as PNG/JPEG with performance metrics. Returns base64 image, Lighthouse performance score, First Contentful Paint, Largest Contentful Paint, and Total Blocking Time.
Changes things 21Claude Code: ask
  • arabizi_translateConvert Arabizi (Latin-script Arabic like '7abibi', 'shlonk', '3aysh') to Arabic script (حبيبي، شلونك، عايش).No findings

    Why it is in this group

    • The description's first verb is "convert": a word for a change.
    Description, as the server wrote it
    Convert Arabizi (Latin-script Arabic like '7abibi', 'shlonk', '3aysh') to Arabic script (حبيبي، شلونك، عايش). Gulf dialect optimized. Handles number-to-letter mappings (3=ع, 7=ح, 5=خ, 8=ق, 9=ص).
  • brand_scoutBrand availability scout.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Brand availability scout. Checks domain availability across 12 TLDs, social handle availability on 15+ platforms, trademark conflicts, and alternative name suggestions. Scored report (0-100).
  • company_reportFull company report ($1.00).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Full company report ($1.00). The mega-report: 25+ parallel checks in one call. WHOIS/domain age, SSL certificate, sanctions screening, web archive history, security headers (7 types), email infrastructure (SPF/DKIM/DMARC/blacklists), full DNS records, CDN detection, subdomain discovery, SEO analysis, social presence, tech stack, Lighthouse performance, legal pages. Returns scored verdict (0-100).
  • competitor_analysisCompetitive analysis report ($1.00).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Competitive analysis report ($1.00). Pass two domains, get a head-to-head comparison across 8 dimensions: security headers, SEO quality, Lighthouse performance, SSL health, email security (SPF/DMARC), social presence, infrastructure (CDN/IPv6), and domain maturity. Returns winner per category and overall verdict.
  • crypto_dataReal-time cryptocurrency market data: price, 24h volume, market cap, and 24h price change percentage.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Real-time cryptocurrency market data: price, 24h volume, market cap, and 24h price change percentage. Supports thousands of coins via CoinGecko IDs.
  • detect_languageDetects language, script type, and Arabic dialect from any text.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Detects language, script type, and Arabic dialect from any text. Supports Arabic (MSA, Gulf, Egyptian, Levantine, Maghrebi), English, French, Spanish, Turkish, Hindi. Also detects Arabizi (Latin-script Arabic) and mixed-language text.
  • domain_enrichDomain enrichment: returns company name, description, detected tech stack (React, WordPress, Shopify, etc.), social media links (Twitter, LinkedIn, GitHub), email addresses, and re…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Domain enrichment: returns company name, description, detected tech stack (React, WordPress, Shopify, etc.), social media links (Twitter, LinkedIn, GitHub), email addresses, and redirect info for any domain.
  • domain_infraDomain infrastructure map.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Domain infrastructure map. Full DNS records (A, AAAA, MX, NS, TXT, SOA, CAA), hosting provider, CDN detection, subdomain discovery via DNS brute-force and Certificate Transparency, IP geolocation.
  • due_diligenceEntity due diligence report.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Entity due diligence report. One call replaces 10+ separate lookups. Pass a domain or company name, get: WHOIS data, SSL certificate analysis, sanctions screening (OpenSanctions), web archive history, web presence audit, social links, contact info, risk signals, and a confidence-scored trust verdict (0-100). Costs $0.50 because it runs 5+ parallel checks and cross-references the results.
  • email_auditEmail infrastructure audit.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Email infrastructure audit. Checks SPF, DKIM (10 selectors), DMARC, MX records, blacklist status (8 DNSBLs), and DNSSEC. Returns deliverability score (0-100). All DNS-based, zero API keys.
  • gold_priceCurrent retail gold prices per gram in 24K/22K/21K/18K across 10 currencies (USD, AED, EUR, GBP, INR, SAR, PKR, PHP, BDT, EGP).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Current retail gold prices per gram in 24K/22K/21K/18K across 10 currencies (USD, AED, EUR, GBP, INR, SAR, PKR, PHP, BDT, EGP). Consumer retail pricing.
  • ip_intelIP address threat intelligence.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    IP address threat intelligence. Geolocation, ASN/ISP, reverse DNS, blacklist status (8 DNSBLs), VPN/proxy/Tor detection, abuse history. Cross-referenced risk score (0-100).
  • prayer_timesIslamic prayer times for any city worldwide: Fajr, Dhuhr, Asr, Maghrib, Isha.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Islamic prayer times for any city worldwide: Fajr, Dhuhr, Asr, Maghrib, Isha. Includes sunrise, Hijri date, and multiple calculation methods (Umm Al-Qura, ISNA, MWL).
  • profanity_filterMultilingual profanity and toxicity detection.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Multilingual profanity and toxicity detection. Supports English, Arabic (Gulf dialect aware), Spanish, and French. Returns toxicity score, flagged words with categories (hate/sexual/violence/slur), severity rating, and cleaned text.
  • scrape_structuredSmart structured web scraper.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Smart structured web scraper. Unlike basic scrapers that return raw text, this extracts and LABELS structured data: emails, phone numbers, prices, dates, tables, links, headings, and metadata. Returns agent-ready JSON — no further parsing needed.
  • site_auditWebsite security and SEO audit.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Website security and SEO audit. Runs 5 parallel checks: security headers (HSTS, CSP, X-Frame-Options), SSL certificate grade, DNS configuration (DNSSEC, SPF), SEO analysis (title, meta, OG tags, headings, images), and Lighthouse performance metrics. Returns scored report (0-100) with actionable findings. $0.50 per audit.
  • username_osintUsername OSINT report.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Username OSINT report. Checks 25+ platforms (GitHub, Reddit, Twitter, Instagram, npm, Steam, etc.) for a username. Categorizes by type, enriches GitHub profile, checks domain availability.
  • verify_emailEmail verification: validates format, checks domain exists, verifies MX records, detects disposable emails, free providers (Gmail, Yahoo), and role-based addresses (info@, admin@).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Email verification: validates format, checks domain exists, verifies MX records, detects disposable emails, free providers (Gmail, Yahoo), and role-based addresses (info@, admin@). Returns risk score.
  • weather_dataCurrent weather conditions for any city worldwide.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Current weather conditions for any city worldwide. Returns temperature, feels-like, humidity, precipitation, wind speed/direction, and weather condition description.
  • web_scrapeExtract text content, links, title, and metadata from any URL.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Extract text content, links, title, and metadata from any URL. Returns cleaned text (scripts/styles removed), page title, meta description, and up to 50 links.
Only reads 2Claude Code: allow
  • arabic_sentimentAnalyze sentiment in Arabic text.No findings

    Why it is in this group

    • The description's first verb is "analyze": a word for reading.
    Description, as the server wrote it
    Analyze sentiment in Arabic text. Supports Gulf/Khaleeji, Egyptian, Levantine, and MSA dialects. Returns sentiment (positive/negative/neutral), confidence score, detected dialect, and keywords. Global LLMs hit ~45% accuracy on Gulf dialect — this tool is purpose-built for it.
  • text_summarizeExtractive text summarization.No findings

    Why it is in this group

    • The name "text_summarize" says "summarize": a word for reading.
    Description, as the server wrote it
    Extractive text summarization. Scores sentences by keyword frequency and returns the most important ones in original order, plus top 10 keywords.

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 2.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http x402-apis https://x402-apis-eta.vercel.app/api/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__x402-apis__arabic_sentiment",
      "mcp__x402-apis__text_summarize"
    ],
    "ask": [
      "mcp__x402-apis__arabizi_translate",
      "mcp__x402-apis__web_scrape",
      "mcp__x402-apis__crypto_data",
      "mcp__x402-apis__weather_data",
      "mcp__x402-apis__domain_enrich",
      "mcp__x402-apis__scrape_structured",
      "mcp__x402-apis__verify_email",
      "mcp__x402-apis__prayer_times",
      "mcp__x402-apis__profanity_filter",
      "mcp__x402-apis__legal_simplifier",
      "mcp__x402-apis__gold_price",
      "mcp__x402-apis__detect_language",
      "mcp__x402-apis__currency_convert",
      "mcp__x402-apis__screenshot",
      "mcp__x402-apis__due_diligence",
      "mcp__x402-apis__site_audit",
      "mcp__x402-apis__email_audit",
      "mcp__x402-apis__ip_intel",
      "mcp__x402-apis__username_osint",
      "mcp__x402-apis__domain_infra",
      "mcp__x402-apis__brand_scout",
      "mcp__x402-apis__competitor_analysis",
      "mcp__x402-apis__company_report"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as x402-apis. Review it before you use it.