NullClear Arbiter

by mithgalalfayez · remote · local (npm) · no sign-in to list tools · v1.1.1 · published by GitHub user mithgalalfayez

Autonomous x402 payment schema-escrow arbiter, spend firewall, failover & ERC-8004 Sybil oracle

Changes · 4

Compare Registry entry

8 tools: 4 change things and 4 only read.

Scanned Oct 21, 2026

Deletes or cancels0Claude Code: deny
Can't be undone0Claude Code: ask
Changes things4Claude Code: ask: see these tools
Only reads4Claude Code: allow: see these tools

2 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http nullclear https://api.nullclear.dev/mcp

Findings

Matches of fixed checks, with the text they matched.

2 warn

Warnnullclear_token_security_audit
The input schema at properties.tokenAddress.description contains a 42-character base64 string.
Matched text
inputSchema.properties.tokenAddress.description: "...ract address (e.g. '0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913' for USDC)"
What this check looks for
Warnnullclear_token_security_audit
The input schema at properties.tokenAddress.default contains a 42-character base64 string.
Matched text
inputSchema.properties.tokenAddress.default: "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913"
What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

8 tools

Changes things 4Creates or changes something that can be changed back.Claude Code: ask

nullclear_escrow_x402_callExecute an x402-gated HTTP API call through NullClear deferred schema escrow.No findings
Why it is in this group
- The name "nullclear_escrow_x402_call" says "call": a word for a change.
Description, as the server wrote it
Execute an x402-gated HTTP API call through NullClear deferred schema escrow. Guarantees payment is only settled if upstream returns valid data matching your schema contract. Supports 10 free daily trial calls with zero wallet setup.
Annotations the server declares
- title: Execute Escrowed x402 Call with Invariants
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
nullclear_token_security_auditAudit any Base ERC-20 token address for honeypot risk, buy/sell taxes, verified bytecode, and x402 compatibility via NullClear Bazaar.2 findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
  The input schema at properties.tokenAddress.description contains a 42-character base64 string.
  Matched text
  inputSchema.properties.tokenAddress.description: "...ract address (e.g. '0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913' for USDC)"
  What this check looks for
- Warn
  The input schema at properties.tokenAddress.default contains a 42-character base64 string.
  Matched text
  inputSchema.properties.tokenAddress.default: "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913"
  What this check looks for
Description, as the server wrote it
Audit any Base ERC-20 token address for honeypot risk, buy/sell taxes, verified bytecode, and x402 compatibility via NullClear Bazaar. Works out-of-the-box with zero configuration (10 free daily calls included).
Annotations the server declares
- title: Base Token Honeypot & Security Audit
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
nullclear_verify_kya_mandateVerify an agent's Know Your Agent (KYA) corporate liability mandate, active validity, and whether a proposed transaction amount is within corporate limitsNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Verify an agent's Know Your Agent (KYA) corporate liability mandate, active validity, and whether a proposed transaction amount is within corporate limits
Annotations the server declares
- title: Verify Corporate KYA Mandate & Limits
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
nullclear_wallet_risk_scoreCheck any wallet or agent address on Base for OFAC sanctions, Sybil wash-trading concentration flags, and ERC-8004 counterparty reputation.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Check any wallet or agent address on Base for OFAC sanctions, Sybil wash-trading concentration flags, and ERC-8004 counterparty reputation. Works out-of-the-box with zero configuration (10 free daily calls included).
Annotations the server declares
- title: Wallet & Agent Sanctions / Sybil Risk Score
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true

Only reads 4Looks things up and changes nothing.Claude Code: allow

nullclear_check_reputationInspect an AI agent's trust score (0-100), clearing reliability, Sybil wash-trade penalty flags, and corporate KYA backing on BaseNo findings
Why it is in this group
- The description's first verb is "inspect": a word for reading.
Description, as the server wrote it
Inspect an AI agent's trust score (0-100), clearing reliability, Sybil wash-trade penalty flags, and corporate KYA backing on Base
Annotations the server declares
- title: Inspect AI Agent Trust & Sybil Score
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
nullclear_crypto_market_oracleFetch multi-exchange spread-verified crypto spot prices (ETH/USDC, BTC/USDC, SOL/USDC, BASE/USDC) with cryptographic NullClear invariant receipts.No findings
Why it is in this group
- The description's first verb is "fetch": a word for reading.
Description, as the server wrote it
Fetch multi-exchange spread-verified crypto spot prices (ETH/USDC, BTC/USDC, SOL/USDC, BASE/USDC) with cryptographic NullClear invariant receipts. Works out-of-the-box with zero configuration (10 free daily calls included).
Annotations the server declares
- title: Spread-Verified Crypto Market Price Oracle
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
nullclear_discover_verified_x402_apisSearch the live NullClear Ecosystem Directory for audited, high-uptime x402 & ERC-8004 APIs by topic/keyword, category, minimum uptime, or max latency.No findings
Why it is in this group
- The description's first verb is "search": a word for reading.
Description, as the server wrote it
Search the live NullClear Ecosystem Directory for audited, high-uptime x402 & ERC-8004 APIs by topic/keyword, category, minimum uptime, or max latency. Automatically returns the NullClear-protected Zero-Loss Proxy URL ('https://api.nullclear.dev/https://...') for each endpoint.
Annotations the server declares
- title: Discover Verified High-Uptime x402 APIs
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
nullclear_safe_fetchZero-config drop-in URL fetcher with automatic Canonical LLM Refusal Guard, HTTP 5xx crash guard, empty-JSON guard, and cryptographic execution receipt.No findings
Why it is in this group
- The name "nullclear_safe_fetch" says "fetch": a word for reading.
Description, as the server wrote it
Zero-config drop-in URL fetcher with automatic Canonical LLM Refusal Guard, HTTP 5xx crash guard, empty-JSON guard, and cryptographic execution receipt. Protects agents from hallucinated or broken API responses.
Annotations the server declares
- title: Auto-Guarded URL Fetcher (Zero Schema Required)
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.1.1. Values in angle brackets are yours to fill in.

claude mcp add --transport http nullclear https://api.nullclear.dev/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__nullclear__nullclear_discover_verified_x402_apis",
      "mcp__nullclear__nullclear_crypto_market_oracle",
      "mcp__nullclear__nullclear_safe_fetch",
      "mcp__nullclear__nullclear_check_reputation"
    ],
    "ask": [
      "mcp__nullclear__nullclear_token_security_audit",
      "mcp__nullclear__nullclear_wallet_risk_score",
      "mcp__nullclear__nullclear_escrow_x402_call",
      "mcp__nullclear__nullclear_verify_kya_mandate"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as nullclear. Review it before you use it.

Keep track

Get told when this server's tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.github.mithgalalfayez/nullclear/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Anlyon alternative

4 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Compare with other servers for the same product.

Source: MCP Registry · repository. Synced Oct 21, 2026, 18:41 UTC.

For agents: Markdown · JSON · report this listing