io.github.rezearcher/tech-risk

up checked 2026-11-11T07:37:50.333Z

Unclaimed · Unverified

Agent searches it appeared in, last 30 days: 0. Run this server? Claim the listing: verified label, uptime alerts and analytics.

Publisher-provided description

MCP security scanner: tool-poisoning & prompt-injection audit (OWASP LLM01/LLM08), x402-payable

Summary by lookupd

Scans MCP servers for tool-poisoning and prompt-injection, and offers Base chain, DeFi, token-security and x402 payment checks for agents.

Install

Claude Code, remote (streamable-http)

claude mcp add --transport http tech-risk https://x402-data-api.sigrunner.workers.dev/mcp

Claude Code, pypi package (stdio)

claude mcp add tech-risk -- uvx greyridge-x402-tools

Codex, remote (streamable-http)

codex mcp add tech-risk --url https://x402-data-api.sigrunner.workers.dev/mcp

Codex, pypi package (stdio)

codex mcp add tech-risk -- uvx greyridge-x402-tools

Cursor, remote (streamable-http) → .cursor/mcp.json

{
  "mcpServers": {
    "tech-risk": {
      "url": "https://x402-data-api.sigrunner.workers.dev/mcp"
    }
  }
}

Cursor, pypi package (stdio) → .cursor/mcp.json

{
  "mcpServers": {
    "tech-risk": {
      "command": "uvx",
      "args": [
        "greyridge-x402-tools"
      ]
    }
  }
}

Other clients: docs. Or tell your agent: Set up lookupd for me: read https://lookupd.com/agent.md and follow it.

Tools (showing 30 of 34)

Publisher-provided text

• enrich_tech_risk Security enrichment: tech-stack fingerprint + CVE mapping + EPSS + CISA KEV + verdict (clear/review/block) for a domain. Cost: $0.005 USDC per call (x402 microp
• enrich_domain Firmographic + tech-stack enrichment: RDAP registrant/registrar, DNS records, full subdomain enumeration + certificate-transparency history, tech-stack fingerpr
• scan_mcp_server Security-audit a target MCP server for prompt-injection / tool-poisoning. Fetches the server's advertised tools and statically analyzes each for hidden instruct
• scan_mcp_preview FREE preview scan of a target MCP server for tool-poisoning / prompt-injection. Returns issue count, severity breakdown, risk score, and verdict (clear/review/b
• crypto_prices Live spot token prices (price, change_24h, symbol, confidence, timestamp) for CoinGecko ids, sourced from DefiLlama. Cost: $0.005 USDC per call via x402.
• crypto_funding Live 6-venue perpetual-futures funding rates from Binance+Bybit+OKX+Hyperliquid+dYdX+Gate (per-venue rate, per-venue open interest in USD, an OI-WEIGHTED CEX↔DE
• defi_yields Live DeFi lending/LP yield pools, and every pool is tagged with an entry verdict (SUSTAINABLE | DECAYING | OUTLIER | AVOID) + a 0-100 risk_score right in the li
• yield_entry_verdict Per-pool DeFi yield-entry go/no-go. Pass a DefiLlama poolId (the 'pool' field from defi_yields) and get a packaged SUSTAINABLE | DECAYING | OUTLIER | AVOID verd
• simulate Will this Base transaction revert? Prospective-tx dry-run via eth_simulateV1: pass from, to, optional data (0x calldata) and value (wei) and get will_revert + r
• pm_markets Live Polymarket prediction-market data — question, outcomes, outcome prices, bestBid/bestAsk/spread, volume24hr/volume1wk, oneDayPriceChange, clobTokenIds, cond
• crypto_prices_preview FREE 1-item sample of live token prices. No payment required.
• crypto_funding_preview FREE 1-item sample of live cross-venue funding rates. No payment required.
• defi_yields_preview FREE 1-item sample of live DeFi yield pools. No payment required.
• yield_entry_verdict_preview FREE sample yield-entry verdict for the current top-TVL pool. Shows the packaged SUSTAINABLE/DECAYING/OUTLIER/AVOID + risk-score output shape before you pay. No
• simulate_preview FREE sample prospective-tx dry-run (benign 0-value call) showing the will_revert/gas_used/asset_changes output shape before you pay. No payment required.
• pm_markets_preview FREE top-1 sample of live Polymarket prediction markets, ranked by volume24hr. No payment required.
• chain_block_number Current Base mainnet block number via multi-provider JSON-RPC (automatic failover across 4 providers, never fails on one provider's rate limit). Cost: $0.005 US
• chain_gas_price Current Base mainnet gas price (wei/gwei), EIP-1559 base_fee_gwei/priority_fee_gwei, and gas_price_usd (ETH price cross-call — no price oracle on ETH-only compe
• chain_balance Native ETH balance of a Base mainnet address, incl. balance_usd (ETH price cross-call — no price oracle on ETH-only competitors), via multi-provider JSON-RPC. C
• chain_token_balance ERC-20 token balance of a Base mainnet address via multi-provider JSON-RPC, incl. symbol/decimals/balance_formatted (per-token-contract cached in-isolate). Cost
• chain_tx Transaction details by hash on Base mainnet via multi-provider JSON-RPC. Cost: $0.005 USDC per call via x402.
• chain_wallet Wallet screening bundle (balance, activity, contract vs EOA check): ETH balance + balance_usd (ETH price cross-call) + tx count + contract-code check (EIP-7702
• chain_wallet_screen Is this wallet sanctioned OR a known scammer? Pre-trade screen for a counterparty / recipient / token-spender address before an agent sends, swaps or approves:
• x402_preflight Should an agent pay this x402 endpoint? Pre-payment check of an UNKNOWN x402 URL: fetch it once (never pays) to validate the 402 challenge + accepts[] (scheme/n
• x402_receipt_verify Did my x402 payment actually settle? POST-payment on-chain proof — the other half of x402_preflight (which checks BEFORE paying). Bring your Base settlement tx
• x402_receipt_verify_preview FREE keyless x402 settlement check on Base: pass a tx hash plus payto (and optionally expect, in USDC). Dual-RPC reads the receipt, decodes USDC Transfers and r
• chain_token_security Token security / honeypot detector for a Base mainnet ERC-20: EIP-1967/1822 proxy + upgradeability detection, bytecode dispatcher scan for mint/pause/blacklist/
• chain_block_number_preview FREE live sample of the current Base mainnet block number — identical data to the paid chain_block_number tool. No payment required.
• chain_gas_price_preview FREE live sample of the current Base mainnet gas price — identical data to the paid chain_gas_price tool. No payment required.
• chain_token_report Token security check (honeypot detector + rug-pull risk score) for a Base ERC-20 in one call, decision-grade trade-safety verdict: SAFE | CAUTION | AVOID plus r

Details

• Version: 1.4.0
• Transports: streamable-http, stdio
• Uptime (7 days): 100%
• Median latency: 520 ms
• First indexed: 2026-11-01T09:51:06.861Z
• Last seen in registry: 2026-11-04T18:17:16.596Z
• Repository: https://github.com/rezearcher/x402-data-api
• Website: https://x402-data-api.sigrunner.workers.dev/x402/preflight

Badge for your README

Shows this live status and links here; updates hourly.

[![lookupd status](https://lookupd.com/badge/io.github.rezearcher/tech-risk.svg)](https://lookupd.com/servers/io.github.rezearcher/tech-risk)

• 62071 servers
• Last crawl: 2026-11-11T16:39:06.253Z
• API base: https://api.lookupd.com
• MCP URL: https://api.lookupd.com/mcp