Agent Kiosk — 23-in-1 B2A Intelligence, Action & x402 API

by ralf9090 · remote · no sign-in to list tools · v2.6.0 · published by GitHub user ralf9090

23-in-1 MCP server: EVM tx simulator, funding rate arb, macro radar, swap calldata & security.

Final · 1Changes · 18

Compare Registry entry

24 tools: 1 do something that can't be undone, 18 change things and 5 only read.

Scanned Oct 21, 2026

Deletes or cancels0Claude Code: deny
Can't be undone1Claude Code: ask: see these tools
Changes things18Claude Code: ask: see these tools
Only reads5Claude Code: allow: see these tools

3 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http agent-kiosk https://agent-kiosk.vercel.app/mcp

Findings

Matches of fixed checks, with the text they matched.

3 warn

Warnpackage_audit
The server marks "package_audit" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The description's first verb is "open": a word for a change.
What this check looks for
Warnevm_tx_simulator
The server marks "evm_tx_simulator" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The input addresses people (input.to): what it sends cannot be taken back.
What this check looks for
Warnllm_chat_completions
The server marks "llm_chat_completions" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The description's first verb is "open": a word for a change.
What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

24 tools

Can't be undone 1Sends, pays, publishes or merges: once done, it cannot be taken back.Claude Code: ask

evm_tx_simulatorPre-flight EVM Transaction Simulator, Gas Estimator, Revert Reason Decoder, ERC-20 Allowance Checker & EIP-1967 Proxy Detector ($0.005 USDC).1 finding
Why it is in this group
- The input addresses people (input.to): what it sends cannot be taken back.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
  The server marks "evm_tx_simulator" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The input addresses people (input.to): what it sends cannot be taken back.
  What this check looks for
Description, as the server wrote it
Pre-flight EVM Transaction Simulator, Gas Estimator, Revert Reason Decoder, ERC-20 Allowance Checker & EIP-1967 Proxy Detector ($0.005 USDC). Simulates any transaction via eth_call & eth_estimateGas across Base, Ethereum, Arbitrum, Optimism, and Polygon before signing.
Annotations the server declares
- title: Evm Tx Simulator
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true

Changes things 18Creates or changes something that can be changed back.Claude Code: ask

b2b_company_dossierComplete 4-in-1 B2B Sales & Competitive Intelligence Dossier ($0.10 USDC).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Complete 4-in-1 B2B Sales & Competitive Intelligence Dossier ($0.10 USDC). Combines DNS/MX/SaaS tech stack infrastructure, clean website extraction, local business contact/phone leads, and live social mentions.
Annotations the server declares
- title: B2b Company Dossier
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
buy_prepaid_passMint a 30-Day Prepaid API Key Pass (ak_live_...) for $5.00 USDC on Base via x402.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Mint a 30-Day Prepaid API Key Pass (ak_live_...) for $5.00 USDC on Base via x402. Unlocks all 23 paid per-call Agent Kiosk REST & MCP intelligence tools for 30 days via the X-API-KEY header without per-call x402 signing (ideal for LangChain, n8n, Make.com, OpenAI Actions, and Python/JS bots).
Annotations the server declares
- title: Buy Prepaid Pass
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
compliance_checkInstitutional AML, Sanctions (OFAC), Phishing, Mixer, and Malicious Counterparty Compliance Screening ($0.05 USDC).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Institutional AML, Sanctions (OFAC), Phishing, Mixer, and Malicious Counterparty Compliance Screening ($0.05 USDC). Screens any 0x EVM address against GoPlus Security (Base + Ethereum) and 4-chain RPC footprint before autonomous agents execute transfers.
Annotations the server declares
- title: Compliance Check
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
defi_swap_quoteExecutable DeFi Swap & Cross-Chain Bridge Action Calldata Builder ($0.05 USDC).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Executable DeFi Swap & Cross-Chain Bridge Action Calldata Builder ($0.05 USDC). Queries LI.FI and ParaSwap aggregators to compute the best DEX/Bridge route and returns ready-to-sign EVM transaction calldata (to, data, value, gasLimit) on Base, Ethereum, Arbitrum, Polygon, and Optimism.
Annotations the server declares
- title: Defi Swap Quote
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
defi_yieldsDeFi highest APY & yield radar powered by DeFiLlama.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
DeFi highest APY & yield radar powered by DeFiLlama. Finds top lending and liquidity pools for any token (USDC, ETH, USDT, WBTC) filtered by blockchain and minimum TVL.
Annotations the server declares
- title: Defi Yields
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
domain_intelB2B company & domain infrastructure intelligence.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
B2B company & domain infrastructure intelligence. Resolves DNS records (A, MX, TXT, NS), identifies email provider (Google Workspace, M365, etc.), detects SaaS tech stack from TXT verification records, queries RDAP registration dates, and discovers active subdomains.
Annotations the server declares
- title: Domain Intel
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
github_intelGitHub repository & open-source competitive intelligence.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
GitHub repository & open-source competitive intelligence. Pass 'owner/repo' for deep repository metrics and latest releases, or a keyword topic to find the fastest-growing repositories.
Annotations the server declares
- title: Github Intel
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
kalshi_polymarket_arbUnified Kalshi, Polymarket & Manifold Prediction Market Aggregator and Cross-Venue Probability Spread / Arbitrage Scanner ($0.015 USDC).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Unified Kalshi, Polymarket & Manifold Prediction Market Aggregator and Cross-Venue Probability Spread / Arbitrage Scanner ($0.015 USDC).
Annotations the server declares
- title: Kalshi Polymarket Arb
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
llm_chat_completionsOpenAI-compatible LLM Chat Completions Gateway ($0.002 USDC/call).1 finding
Why it is in this group
- The description's first verb is "open": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
  The server marks "llm_chat_completions" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The description's first verb is "open": a word for a change.
  What this check looks for
Description, as the server wrote it
OpenAI-compatible LLM Chat Completions Gateway ($0.002 USDC/call). Drop-in replacement for /v1/chat/completions settled in Base USDC via x402 with zero account or API key required.
Annotations the server declares
- title: Llm Chat Completions
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
package_auditOpen-source package & CVE security scanner for coding agents.1 finding
Why it is in this group
- The description's first verb is "open": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
  The server marks "package_audit" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The description's first verb is "open": a word for a change.
  What this check looks for
Description, as the server wrote it
Open-source package & CVE security scanner for coding agents. Checks npm, PyPI, or Rust crates against Google OSV.dev for known security vulnerabilities, deprecation status, and latest stable version.
Annotations the server declares
- title: Package Audit
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
perp_funding_arbitrageReal-time Cross-Exchange Perpetual Funding Rate Arbitrage, Annualized Basis Spread (APR), Open Interest & Crowded Positioning Radar ($0.008 USDC) across Hyperliquid and dYdX v4.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Real-time Cross-Exchange Perpetual Funding Rate Arbitrage, Annualized Basis Spread (APR), Open Interest & Crowded Positioning Radar ($0.008 USDC) across Hyperliquid and dYdX v4.
Annotations the server declares
- title: Perp Funding Arbitrage
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
security_auditPre-flight security and scam radar for AI agents.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Pre-flight security and scam radar for AI agents. Audits 0x smart contracts/tokens (honeypot check, buy/sell tax, mintable risk, DEX liquidity via GoPlus & DexScreener) or web URLs (phishing, wallet drainers, prompt injection).
Annotations the server declares
- title: Security Audit
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
token_alphaReal-time crypto & DeFi order-flow intelligence.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Real-time crypto & DeFi order-flow intelligence. Analyzes buy vs. sell transaction pressure, liquidity depth, volume velocity, FDV, and top DEX pools for any token ticker or contract address.
Annotations the server declares
- title: Token Alpha
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
token_due_diligenceInstitutional 3-in-1 Token Due Diligence Report ($0.10 USDC).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Institutional 3-in-1 Token Due Diligence Report ($0.10 USDC). Combines GoPlus on-chain honeypot/tax security audit, DexScreener DEX order-flow alpha & liquidity depth, and live Reddit/HN social sentiment into a composite investment grade (A-F).
Annotations the server declares
- title: Token Due Diligence
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
tradfi_macro_radarGlobal TradFi, Macro & DeFi Capital Flow Intelligence Radar ($0.008 USDC).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Global TradFi, Macro & DeFi Capital Flow Intelligence Radar ($0.008 USDC). Returns live S&P 500, Nasdaq, CBOE VIX Volatility, US Dollar Index (DXY), US 10Y Treasury Yield, Gold, WTI Crude Oil, Crypto Fear & Greed Index, BTC Dominance, and top DeFi chain TVL.
Annotations the server declares
- title: Tradfi Macro Radar
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
wallet_profilerMulti-chain whale & wallet portfolio profiler across Base, Ethereum, Arbitrum, and Polygon.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Multi-chain whale & wallet portfolio profiler across Base, Ethereum, Arbitrum, and Polygon. Returns live USDC and native ETH/POL balances, total outgoing transaction counts (nonce), wallet tier (Whale/Trader/Retail), and smart contract vs EOA detection.
Annotations the server declares
- title: Wallet Profiler
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
web_extractExtract clean, LLM-ready Markdown from any web URL while automatically scanning the page for hidden Prompt Injection traps targeting AI agents.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Extract clean, LLM-ready Markdown from any web URL while automatically scanning the page for hidden Prompt Injection traps targeting AI agents.
Annotations the server declares
- title: Web Extract
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
whale_alpha_radarComplete Multi-Chain Whale Portfolio & DeFi Yield Optimizer Report ($0.10 USDC).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Complete Multi-Chain Whale Portfolio & DeFi Yield Optimizer Report ($0.10 USDC). Profiles any 0x wallet across 4 EVM chains (Base, Ethereum, Arbitrum, Polygon), matches idle USDC/ETH balances against top DeFiLlama yield pools, and calculates projected annual yield.
Annotations the server declares
- title: Whale Alpha Radar
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true

Only reads 5Looks things up and changes nothing.Claude Code: allow

academic_searchDeep scientific & academic research tool.No findings
Why it is in this group
- The name "academic_search" says "search": a word for reading.
Description, as the server wrote it
Deep scientific & academic research tool. Queries OpenAlex and arXiv for peer-reviewed papers and preprints, returning citation counts, reconstructed abstracts, authors, and direct Open-Access PDF links.
Annotations the server declares
- title: Academic Search
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
maps_leadsFind local businesses, companies, and places in any city worldwide.No findings
Why it is in this group
- The description's first verb is "find": a word for reading.
Description, as the server wrote it
Find local businesses, companies, and places in any city worldwide. Extracts business name, phone number, website URL, address, opening hours, and GPS coordinates for lead generation and verification.
Annotations the server declares
- title: Maps Leads
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
prediction_marketsQuery live prediction market odds & real-money implied probabilities (%) from Polymarket and Manifold Markets for any crypto, macro-economic, political, or technology event.No findings
Why it is in this group
- The description's first verb is "query": a word for reading.
Description, as the server wrote it
Query live prediction market odds & real-money implied probabilities (%) from Polymarket and Manifold Markets for any crypto, macro-economic, political, or technology event.
Annotations the server declares
- title: Prediction Markets
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
social_searchSearch live social media discussions (Reddit, HackerNews, tech forums) for any topic, product, or trend.No findings
Why it is in this group
- The name "social_search" says "search": a word for reading.
Description, as the server wrote it
Search live social media discussions (Reddit, HackerNews, tech forums) for any topic, product, or trend. Returns clean structured JSON and LLM-ready Markdown without rate-limit blocks or API keys.
Annotations the server declares
- title: Social Search
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
x402_pingUltra-low-cost ($0.001 USDC) x402 v2 & v1 wallet verification ping, payment settlement test, latency check, and round-trip echo endpoint on Base Mainnet.No findings
Why it is in this group
- The name "x402_ping" says "ping": a word for reading.
Description, as the server wrote it
Ultra-low-cost ($0.001 USDC) x402 v2 & v1 wallet verification ping, payment settlement test, latency check, and round-trip echo endpoint on Base Mainnet.
Annotations the server declares
- title: X402 Ping
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 2.6.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http agent-kiosk https://agent-kiosk.vercel.app/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__agent-kiosk__social_search",
      "mcp__agent-kiosk__maps_leads",
      "mcp__agent-kiosk__academic_search",
      "mcp__agent-kiosk__prediction_markets",
      "mcp__agent-kiosk__x402_ping"
    ],
    "ask": [
      "mcp__agent-kiosk__web_extract",
      "mcp__agent-kiosk__security_audit",
      "mcp__agent-kiosk__token_alpha",
      "mcp__agent-kiosk__domain_intel",
      "mcp__agent-kiosk__package_audit",
      "mcp__agent-kiosk__wallet_profiler",
      "mcp__agent-kiosk__defi_yields",
      "mcp__agent-kiosk__github_intel",
      "mcp__agent-kiosk__token_due_diligence",
      "mcp__agent-kiosk__b2b_company_dossier",
      "mcp__agent-kiosk__whale_alpha_radar",
      "mcp__agent-kiosk__compliance_check",
      "mcp__agent-kiosk__defi_swap_quote",
      "mcp__agent-kiosk__evm_tx_simulator",
      "mcp__agent-kiosk__perp_funding_arbitrage",
      "mcp__agent-kiosk__tradfi_macro_radar",
      "mcp__agent-kiosk__kalshi_polymarket_arb",
      "mcp__agent-kiosk__llm_chat_completions",
      "mcp__agent-kiosk__buy_prepaid_pass"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as agent-kiosk. Review it before you use it.

Keep track

Get told when this server's tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.github.ralf9090/agent-kiosk/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Anlyon alternative

19 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Compare with other servers for the same product.

Source: MCP Registry · repository. Synced Oct 21, 2026, 18:45 UTC.

For agents: Markdown · JSON · report this listing