Skip to content

Cybercentry Verification

by cybercentry.co.uk · remote · no sign-in to list tools · v1.0.4 · published by uk.co.cybercentry

Twelve tools: token, wallet, contract and site security. Two free, the rest $1 in USDC over x402.

Changes · 13
CompareRegistry entry

14 tools: 13 change things and 1 only read.

Scanned Oct 21, 2026

1 check matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http verification https://centry.cybercentry.co.uk/api/mcp

Findings

Matches of fixed checks, with the text they matched.

1 info

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

14 tools

Changes things 13Claude Code: ask
  • base_token_verificationCheck a Base token contract before buying: detects honeypots, armed freeze-and-seize, a live pause, fake B20s and ticker-impersonation copycats, and separately discloses issuer con…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Check a Base token contract before buying: detects honeypots, armed freeze-and-seize, a live pause, fake B20s and ticker-impersonation copycats, and separately discloses issuer controls (admin centralisation, supply cap, transfer policy, rebase) so a legitimate token is not mistaken for a scam. Costs $1.00 per call, paid in USDC over x402.
  • cyber_security_consultantAsk a cyber security question and get an expert answer backed by real-time threat intelligence, covering current threats, best practice and compliance.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Ask a cyber security question and get an expert answer backed by real-time threat intelligence, covering current threats, best practice and compliance. Costs $1.00 per call, paid in USDC over x402.
  • ethereum_token_verificationCheck an Ethereum or EVM token contract before buying: rug pull, hidden tax, liquidity legitimacy and holder concentration risk.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Check an Ethereum or EVM token contract before buying: rug pull, hidden tax, liquidity legitimacy and holder concentration risk. Token due diligence returned as a scan report. Costs $1.00 per call, paid in USDC over x402.
  • media_content_verificationCheck whether an image or video is authentic and where it came from: C2PA content credentials, provenance and metadata extraction, with an avatar and logo impersonation check.1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    Findings

    • Info

      The description mentions "credentials".

      Matched text

      description: "...ic and where it came from: C2PA content credentials, provenance and metadata extraction, wi..."

      What this check looks for
    Description, as the server wrote it
    Check whether an image or video is authentic and where it came from: C2PA content credentials, provenance and metadata extraction, with an avatar and logo impersonation check. Detect AI-generated or tampered media before trusting it. Costs $1.00 per call, paid in USDC over x402.
  • openclaw_ai_agent_verificationAudit an AI agent configuration for security holes: prompt injection exposure, missing authentication, over-broad tool permissions and unsafe gateway settings.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Audit an AI agent configuration for security holes: prompt injection exposure, missing authentication, over-broad tool permissions and unsafe gateway settings. Check an agent before you trust it or connect to it. Costs $1.00 per call, paid in USDC over x402.
  • post_launch_screeningScore a live token launch under ERC-8376, the token launch abuse standard we co-authored.No findings

    Why it is in this group

    • The name "post_launch_screening" says "post": a word for a change.
    Description, as the server wrote it
    Score a live token launch under ERC-8376, the token launch abuse standard we co-authored. The twelve-signal vector is assembled from chain state and scored against the eleven deployer abuse patterns into an abuse score of 0 to 100, with confidence reported separately so a high score on thin evidence cannot read as a certainty. Signals that could not be computed are named rather than scored clean. Price decline is excluded by rule, so a launch that locked liquidity, sold nothing and fell 95 per cent still scores clean: falling is not fraud. Name the creator, because at most venues the token was deployed by the venue's own factory and the creating address is the launchpad rather than the applicant. A screening, not a bonded on-chain report. Costs $1.00 per call, paid in USDC over x402.
  • pre_launch_screeningScreen who is asking to launch, before you deploy anything for them.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Screen who is asking to launch, before you deploy anything for them. At most venues the launchpad creates the token, so the only thing in front of you beforehand is a connected wallet: this screens that wallet, and it includes the full wallet verification rather than a summary of one. OFAC SDN sanctions screening, the funding chain walked to depth across 33 chains, mixer contact including the Tornado Cash pools, dusting, control clusters and exchange reuse, with a risk score. Then the launch-specific half: allocations this wallet has taken from contracts before and whether it still holds them or sold them, and whether the ticker it wants collides with a token it already touched. Says what it could not establish rather than reporting it clean. Eight of the twelve ERC-8376 signals describe conduct during or after a sale and cannot exist yet, so this reports on the party and not on the launch. Costs $1.00 per call, paid in USDC over x402.
  • private_data_verificationProve a fact about private data without revealing the data: validates text integrity and returns a zero-knowledge proof (ZKP) with a verification ID and URL.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Prove a fact about private data without revealing the data: validates text integrity and returns a zero-knowledge proof (ZKP) with a verification ID and URL. Costs $1.00 per call, paid in USDC over x402.
  • quantum_cryptography_verificationEncrypt text with quantum-resistant (post-quantum) cryptography, for secrets that must outlast classical encryption.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Encrypt text with quantum-resistant (post-quantum) cryptography, for secrets that must outlast classical encryption. Returns a record ID and a decrypt URL. Costs $1.00 per call, paid in USDC over x402.
  • recent_exploitsRecent real-world web3 exploits from the live feed, with loss amounts, attack vectors and the Cybercentry service that addresses each.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Recent real-world web3 exploits from the live feed, with loss amounts, attack vectors and the Cybercentry service that addresses each. Free.
  • solidity_code_verificationAudit Solidity smart contract source for vulnerabilities before you deploy or call it.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Audit Solidity smart contract source for vulnerabilities before you deploy or call it. Returns findings with a clear risk level. Costs $1.00 per call, paid in USDC over x402.
  • wallet_verificationScreen a wallet address for sanctions and risk: OFAC SDN sanctions screening, risk scoring and suspicious-activity detection across 33 EVM chains.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Screen a wallet address for sanctions and risk: OFAC SDN sanctions screening, risk scoring and suspicious-activity detection across 33 EVM chains. Check a counterparty before you transact with it. Costs $1.00 per call, paid in USDC over x402.
  • web_application_verificationScan a website or dApp frontend for vulnerabilities using OWASP checks, before connecting a wallet to it or trusting it with user data.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Scan a website or dApp frontend for vulnerabilities using OWASP checks, before connecting a wallet to it or trusting it with user data. Costs $1.00 per call, paid in USDC over x402.
Only reads 1Claude Code: allow
  • list_servicesList every Cybercentry verification service with its price, inputs and SLA.No findings

    Why it is in this group

    • The name "list_services" says "list": a word for reading.
    Description, as the server wrote it
    List every Cybercentry verification service with its price, inputs and SLA. Free.

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.0.4. Values in angle brackets are yours to fill in.

claude mcp add --transport http verification https://centry.cybercentry.co.uk/api/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__verification__list_services"
    ],
    "ask": [
      "mcp__verification__recent_exploits",
      "mcp__verification__base_token_verification",
      "mcp__verification__cyber_security_consultant",
      "mcp__verification__ethereum_token_verification",
      "mcp__verification__media_content_verification",
      "mcp__verification__openclaw_ai_agent_verification",
      "mcp__verification__post_launch_screening",
      "mcp__verification__pre_launch_screening",
      "mcp__verification__private_data_verification",
      "mcp__verification__quantum_cryptography_verification",
      "mcp__verification__solidity_code_verification",
      "mcp__verification__wallet_verification",
      "mcp__verification__web_application_verification"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as verification. Review it before you use it.