bridge-watch on-chain intelligence
by agentsapi.top · remote · local (npm) · no sign-in to list tools · v0.3.1 · published by top.agentsapi
Base on-chain address labels (eth-labels 104k category tags), tx explainer, clusters, CCTP USDC.
7 tools: 3 change things and 4 only read.
Scanned Oct 21, 2026
- Deletes or cancels0Claude Code: deny
- Can't be undone0Claude Code: ask
- Changes things3Claude Code: ask: see these tools
- Only reads4Claude Code: allow: see these tools
1 check matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http bridge-watch https://agentsapi.top/mcpFindings
Matches of fixed checks, with the text they matched.
- Warnget_label
The input schema at properties.address.description contains a 42-character base64 string.
What this check looks forMatched text
inputSchema.properties.address.description: "...ract on Base), e.g. 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913"
Tools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
7 tools
Changes things 3Claude Code: ask
alert_statsAlert statistics overview: totals, breakdown by kind / severity / address, and the latest alert time.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Alert statistics overview: totals, breakdown by kind / severity / address, and the latest alert time.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
detect_clusterDetect the set of addresses funded by a single funder (shared funding-source cluster).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Detect the set of addresses funded by a single funder (shared funding-source cluster). Useful for sybil / entity detection.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
track_cctpCCTP cross-chain transfer tracking: given a source-chain tx hash, find which transfer it belongs to, how much moved, the destination chain, and whether it arrived.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it CCTP cross-chain transfer tracking: given a source-chain tx hash, find which transfer it belongs to, how much moved, the destination chain, and whether it arrived. Supports Base → Ethereum and other CCTP chains.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
Only reads 4Claude Code: allow
explain_transactionExplain what a transaction did: status, sender/receiver (with identity labels), transfer details, and whether it looks like a cross-chain bridge operation.No findings
Why it is in this group
- The name "explain_transaction" says "explain": a word for reading.
Description, as the server wrote it Explain what a transaction did: status, sender/receiver (with identity labels), transfer details, and whether it looks like a cross-chain bridge operation.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
get_labelLook up the identity label of an EVM address (Base, open eth-labels dataset; mostly category tags rather than named entities).1 finding
Why it is in this group
- The name "get_label" says "get": a word for reading.
Findings
- Warn
The input schema at properties.address.description contains a 42-character base64 string.
What this check looks forMatched text
inputSchema.properties.address.description: "...ract on Base), e.g. 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913"
Description, as the server wrote it Look up the identity label of an EVM address (Base, open eth-labels dataset; mostly category tags rather than named entities). Returns which entity the address belongs to; unlabelled addresses return null. Call with no arguments for a free demo result.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
list_paid_endpointsList every paid HTTP endpoint of this service with its live per-call price in USDC on Base.No findings
Why it is in this group
- The name "list_paid_endpoints" says "list": a word for reading.
Description, as the server wrote it List every paid HTTP endpoint of this service with its live per-call price in USDC on Base. Takes no arguments. Call this first to discover what you can buy and what it costs.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
query_alertsQuery historical alert records; filterable by address, rule kind, severity, and time range.No findings
Why it is in this group
- The name "query_alerts" says "query": a word for reading.
Description, as the server wrote it Query historical alert records; filterable by address, rule kind, severity, and time range.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 0.3.1. Values in angle brackets are yours to fill in.
claude mcp add --transport http bridge-watch https://agentsapi.top/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__bridge-watch__get_label",
"mcp__bridge-watch__explain_transaction",
"mcp__bridge-watch__query_alerts",
"mcp__bridge-watch__list_paid_endpoints"
],
"ask": [
"mcp__bridge-watch__detect_cluster",
"mcp__bridge-watch__alert_stats",
"mcp__bridge-watch__track_cctp"
],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as bridge-watch. Review it before you use it.