dev.workers.nightshift-labs.nightshift-x402/agent-safety

up checked 2026-11-11T01:38:39.102Z

Unclaimed · Unverified

Agent searches it appeared in, last 30 days: 0. Run this server? Claim the listing: verified label, uptime alerts and analytics.

Publisher-provided title

Nightshift Labs: link, token & signature pre-checks

Publisher-provided description

Paid x402 pre-checks for agents: phishing links, Base tokens, EIP-712 permits, calldata, DNS.

Summary by lookupd

Pre-checks links, Base tokens, EIP-712 signatures, calldata, DNS and wallets for safety before an agent acts, via paid x402 calls.

Install

Claude Code, remote (streamable-http)

claude mcp add --transport http agent-safety https://nightshift-x402.nightshift-labs.workers.dev/mcp

Codex, remote (streamable-http)

codex mcp add agent-safety --url https://nightshift-x402.nightshift-labs.workers.dev/mcp

Cursor, remote (streamable-http) → .cursor/mcp.json

{
  "mcpServers": {
    "agent-safety": {
      "url": "https://nightshift-x402.nightshift-labs.workers.dev/mcp"
    }
  }
}

Other clients: docs. Or tell your agent: Set up lookupd for me: read https://lookupd.com/agent.md and follow it.

Tools (21 tools)

Publisher-provided text

• base_token_check Base token safety pre-check: name/symbol/decimals/supply, owner and renounce status, proxy implementation, privileged functions found in bytecode (mint, blackli
• base_token_price Live USD price of any ERC-20 token on Base from on-chain DEX quotes (Uniswap v3 0.05/0.3/1% pools and Aerodrome, against USDC and WETH; WETH converted with Chai
• base_balance Base wallet balances: native ETH and USDC for any address, with the block number they were read at. Price: $0.003 USDC on Base per call (x402).
• base_tx Decode a Base transaction: status, block time, from/to, ETH value, fee, method selector and every ERC-20 transfer with symbol and human amount. Flags fake look-
• domain_email_check Domain DNS and email-security check: A/AAAA, NS, MX (incl. null MX), SPF, DMARC policy, CAA, plus a list of issues and a 0-100 email security score. Use before
• evm_decode_calldata Decode EVM transaction calldata before signing: finds the function signature (signature DB, verified by re-encoding to reject selector collisions), decodes all
• evm_typed_data_check Check an EIP-712 signature request BEFORE signing (the JSON passed to eth_signTypedData_v4): detects ERC-2612 Permit, DAI permit, Uniswap Permit2 (allowance + t
• base_gas Base gas snapshot: gas price, base fee, priority fee, 10-block base-fee trend, ETH/USD (Chainlink) and estimated USD cost of an ETH transfer, ERC-20 transfer, s
• ens_resolve Resolve ENS and Basenames (name.eth, name.base.eth): name → address, or address → primary name with forward verification, plus text records (avatar, description
• domain_whois Domain registration lookup (RDAP, the official WHOIS successor): registration date and age in days, expiry, registrar and its abuse email, EPP status, nameserve
• domain_dns DNS lookup in one call: A, AAAA, CNAME, MX, TXT, NS and CAA records with TTLs (or just the types you ask for), NXDOMAIN status, DNSSEC validation, plus parsed h
• domain_dns_batch DNS lookup for up to 12 domains in ONE paid call: A, AAAA, MX and NS by default (or the types you ask for), NXDOMAIN status, DNSSEC validation and SPF/verificat
• domain_ssl TLS/SSL certificate check for a host: live verified HTTPS handshake (reachable, status, HSTS) plus the newest valid certificate from public Certificate Transpar
• domain_overview One-call domain overview: registration (RDAP age, expiry, registrar, DNSSEC), DNS (A/AAAA/NS/MX/CAA), email security (SPF, DMARC policy, 0-100 score, issues) an
• web_security_headers Website security-headers audit: follows redirects (SSRF-guarded) and grades the final page A–F on HSTS, Content-Security-Policy (script-src unsafe-inline/eval/w
• base_portfolio Base wallet portfolio: ETH plus 12 major Base tokens (USDC, USDbC, DAI, EURC, WETH, cbETH, wstETH, cbBTC, AERO, DEGEN, VIRTUAL, BRETT) with non-zero balances, U
• x402_preflight x402 seller preflight: check a paid endpoint BEFORE paying. Probes it unpaid, parses the 402 (v2 header or v1 body) and checks each option: scheme, network, ass
• wallet_screen Wallet / counterparty screen before you send funds or accept a payer: OFAC SDN sanctioned-address check (EVM list, refreshed from the 0xB10C OFAC dataset), addr
• web_brand Brand kit from a website: site name, logo candidates (JSON-LD logo, header/home-link image, inline SVG logo, apple-touch-icon/favicons, og:image), theme-color,
• web_link_check Link / URL phishing pre-check before an agent opens, clicks or forwards a link: brand look-alikes (typosquats, homoglyphs, brand in subdomain), punycode and mix
• web_extract Fetch any public web page and return clean Markdown of the main content plus title, meta description, word count and absolute links. Strips scripts, navigation

Details

• Version: 1.0.1
• Transports: streamable-http
• Uptime (7 days): 100%
• Median latency: 618 ms
• First indexed: 2026-11-05T22:17:18.824Z
• Last seen in registry: 2026-11-06T10:17:31.962Z
• Repository: https://github.com/nightshift-labs-ai/nightshift-x402
• Website: https://nightshift-x402.nightshift-labs.workers.dev/llms.txt

Badge for your README

Shows this live status and links here; updates hourly.

[![lookupd status](https://lookupd.com/badge/dev.workers.nightshift-labs.nightshift-x402/agent-safety.svg)](https://lookupd.com/servers/dev.workers.nightshift-labs.nightshift-x402/agent-safety)

• 62141 servers
• Last crawl: 2026-11-11T18:39:04.612Z
• API base: https://api.lookupd.com
• MCP URL: https://api.lookupd.com/mcp