All servers · Crypto & blockchain · Agent payments (x402) · Payments & accounting

io.github.rezearcher/tech-risk

io.github.rezearcher/tech-risk · v1.3.0

Measured by MCP Station

Instruction-like text was found in scan_mcp_server and the registry description. This is a pattern match, not a verdict. What we look for

Description written by the publisher, not verified

Scan any MCP server for tool-poisoning/prompt-injection/exfiltration (OWASP LLM01/08) + Base data

Connect

claude mcp add --transport http tech-risk https://x402-data-api.sigrunner.workers.dev/mcp

{
  "mcpServers": {
    "tech-risk": {
      "url": "https://x402-data-api.sigrunner.workers.dev/mcp"
    }
  }
}

Tools as reported by the server

• enrich_tech_risk
  Security enrichment: tech-stack fingerprint + CVE mapping + EPSS + CISA KEV + verdict (clear/review/block) for a domain. Cost: $0.005 USDC per call (x402 micropayment).
• enrich_domain
  Firmographic + tech-stack enrichment: RDAP registrant/registrar, DNS records, full subdomain enumeration + certificate-transparency history, tech-stack fingerprint, verdict (clear/review/block, based on domain age) for a domain. Cost: $0.005 USDC per call via the shared MCP payment gate (the direct
• scan_mcp_server
  Security-audit a target MCP server for prompt-injection / tool-poisoning. Fetches the server's advertised tools and statically analyzes each for hidden instructions, data-exfiltration hints, dangerous capabilities, cross-tool shadowing, and invisible-unicode payloads (OWASP LLM01/LLM08). Returns fin
• scan_mcp_preview
  FREE preview scan of a target MCP server for tool-poisoning / prompt-injection. Returns issue count, severity breakdown, risk score, and verdict (clear/review/block) — but NOT which tools or the evidence. Use this to check any MCP server (including your own) at no cost; if issues are found, call the
• crypto_prices
  Live spot token prices (price, change_24h, symbol, confidence, timestamp) for CoinGecko ids, sourced from DefiLlama. Cost: $0.005 USDC per call via x402.
• crypto_funding
  Live cross-venue perpetual-futures funding rates from Hyperliquid+OKX+dYdX (per-venue rate, arb spread in bps, cheapest-long/richest-short venue, premium/basis, annualized_hl, annualized_okx, LONGS_PAY/SHORTS_PAY/NEUTRAL signal, next_funding_ts, mark/oracle price, open interest, day volume), ranked
• defi_yields
  Live DeFi lending/LP yield pools (project, chain, symbol, pool id, APY breakdown incl. 1d/7d/30d trend + apyBase7d/apyMean30d, IL risk incl. il7d, exposure, reward/underlying tokens, outlier flag, mu/sigma, DefiLlama stability forecast, TVL, stablecoin flag) from DefiLlama, ranked by TVL (or risk-ad
• pm_markets
  Live Polymarket prediction-market data — question, outcomes, outcome prices, bestBid/bestAsk/spread, volume24hr/volume1wk, oneDayPriceChange, clobTokenIds, conditionId, category tags, liquidity, end date — ranked by volume24hr. Cost: $0.005 USDC per call via x402.
• crypto_prices_preview
  FREE 1-item sample of live token prices. No payment required.
• crypto_funding_preview
  FREE 1-item sample of live cross-venue funding rates. No payment required.
• defi_yields_preview
  FREE 1-item sample of live DeFi yield pools. No payment required.
• pm_markets_preview
  FREE top-1 sample of live Polymarket prediction markets, ranked by volume24hr. No payment required.
• chain_block_number
  Current Base mainnet block number via multi-provider JSON-RPC (automatic failover across 4 providers, never fails on one provider's rate limit). Cost: $0.005 USDC per call via x402.
• chain_gas_price
  Current Base mainnet gas price (wei/gwei), EIP-1559 base_fee_gwei/priority_fee_gwei, and gas_price_usd (ETH price cross-call — no price oracle on ETH-only competitors) via multi-provider JSON-RPC. Cost: $0.005 USDC per call via x402.
• chain_balance
  Native ETH balance of a Base mainnet address, incl. balance_usd (ETH price cross-call — no price oracle on ETH-only competitors), via multi-provider JSON-RPC. Cost: $0.005 USDC per call via x402.
• chain_token_balance
  ERC-20 token balance of a Base mainnet address via multi-provider JSON-RPC, incl. symbol/decimals/balance_formatted (per-token-contract cached in-isolate). Cost: $0.005 USDC per call via x402.
• chain_tx
  Transaction details by hash on Base mainnet via multi-provider JSON-RPC. Cost: $0.005 USDC per call via x402.
• chain_wallet
  Wallet screening bundle (balance, activity, contract vs EOA check): ETH balance + balance_usd (ETH price cross-call) + tx count + contract-code check (EIP-7702 delegated-EOA aware) for a Base mainnet address, in one call. Cost: $0.005 USDC per call via x402.
• chain_token_security
  Token security / honeypot detector for a Base mainnet ERC-20: EIP-1967/1822 proxy + upgradeability detection, bytecode dispatcher scan for mint/pause/blacklist/fee-setter/ownership selectors, owner() renouncement check, and a live eth_call state-override simulation testing whether a synthetic wallet
• chain_block_number_preview
  FREE live sample of the current Base mainnet block number — identical data to the paid chain_block_number tool. No payment required.
• chain_gas_price_preview
  FREE live sample of the current Base mainnet gas price — identical data to the paid chain_gas_price tool. No payment required.
• chain_token_report
  Token security check (honeypot detector + rug-pull risk score) for a Base ERC-20 in one call, decision-grade trade-safety verdict: SAFE | CAUTION | AVOID plus risk_score (0-100) and reasons, bundling honeypot/sellability simulation, owner-renounced + mint/pause/blacklist/fee-setter/upgradeable-proxy
• gate_swap
  Pre-trade GO / HOLD / BLOCK gate for a Base ERC-20 swap: honeypot/sellability + admin-control checks + Uniswap v3 liquidity vs. your trade size. Returns the GO/HOLD/BLOCK decision AND decision-grade sizing — per $100 / $1k / $10k / $50k (and your exact notional_usd): entry-slippage + exit-simulation
• gate_swap_preview
  FREE live sample of the gate_swap pre-trade GO/HOLD/BLOCK decision for a demo Base token (usdc|weth|cbbtc|aero|degen), same shape as the paid gate_swap tool. The paid gate_swap tool additionally returns `sizing` (entry/exit slippage simulation + round-trip breakeven + max_safe_notional_usd); the `pa
• chain_token_report_preview
  FREE full real trade-safety report (SAFE/CAUTION/AVOID verdict) for Base USDC, same depth as the paid chain_token_report tool. No payment required.
• chain_token_security_preview
  FREE full real analysis of a fixed well-known token (Base WETH) via the token security / honeypot detector — same depth as the paid chain_token_security tool, so you can see the real product before paying. To analyze an arbitrary token, use the paid chain_token_security tool. No payment required.

Tool changes

• 2026-10-24: enrich_tech_risk, enrich_domain, scan_mcp_server, scan_mcp_preview, crypto_prices, crypto_funding, defi_yields, pm_markets, crypto_prices_preview, crypto_funding_preview, defi_yields_preview, pm_markets_preview
• 2026-10-22: enrich_tech_risk, enrich_domain, scan_mcp_server, scan_mcp_preview, crypto_prices, crypto_funding, defi_yields, pm_markets, crypto_prices_preview, crypto_funding_preview, defi_yields_preview, pm_markets_preview
• 2026-10-21: enrich_tech_risk, enrich_domain, scan_mcp_server, scan_mcp_preview, crypto_prices, crypto_funding, defi_yields, pm_markets, crypto_prices_preview, crypto_funding_preview, defi_yields_preview, pm_markets_preview
• 2026-10-20: enrich_tech_risk, enrich_domain, scan_mcp_server, scan_mcp_preview, crypto_prices, crypto_funding, defi_yields, pm_markets, crypto_prices_preview, crypto_funding_preview, defi_yields_preview, pm_markets_preview
• 2026-10-16: enrich_tech_risk, enrich_domain, scan_mcp_server, scan_mcp_preview, crypto_prices, crypto_funding, defi_yields, pm_markets, crypto_prices_preview, crypto_funding_preview, defi_yields_preview, pm_markets_preview

Repository · Website · JSON · Text for agents · Registry updated 2026-10-22