tech-risk
ai.greyridgesignals/tech-riskVersion 0.1.7MCP security scanner: tool-poisoning & prompt-injection audit (OWASP LLM01/LLM08), x402-payable
Status
Responds384 msAnswered our handshake without sign-in.- Last checked
- Nov 14, 2026, 13:29 UTC
- Latency
- 384 ms
- Remotes responding
- 1 of 1
- Sign-in
- No sign-in
- Hosting
- Hosted outside the EU (detected)
- Registry data as of
- Nov 14, 2026, 22:14 UTC
Data from the official MCP Registry, checked by run.zero. How we check
Connect
Streamable HTTP
https://api.greyridgesignals.ai/mcpResponds384 msNo sign-in
Claude Code
claude mcp add --transport http tech-risk https://api.greyridgesignals.ai/mcpClaude Desktop and claude.ai
Settings > Connectors > Add custom connector
Name: tech-risk
Remote MCP server URL: https://api.greyridgesignals.ai/mcpCursor
{
"mcpServers": {
"tech-risk": {
"url": "https://api.greyridgesignals.ai/mcp"
}
}
}VS Code
code --add-mcp '{"name":"tech-risk","type":"http","url":"https://api.greyridgesignals.ai/mcp"}'Streamable HTTP
pypi: greyridge-x402-tools 0.8.2Package only
PyPI (uvx)
claude mcp add tech-risk -- uvx greyridge-x402-tools==0.8.2Built your own server? run.zero hosts MCP servers on European infrastructure.
Tools
34 tools
Read-only | Idempotent | Open world | ||
|---|---|---|---|---|
chain_balanceNative ETH balance of a Base mainnet address, incl. balance_usd (ETH price cross-call — no price oracle on ETH-only competitors), via multi-provider JSON-RPC. Cost: $0.005 USDC per call via x402. | Not declared | Not declared | Not declared | Not declared |
chain_block_numberCurrent Base mainnet block number via multi-provider JSON-RPC (automatic failover across 4 providers, never fails on one provider's rate limit). Cost: $0.005 USDC per call via x402. | Not declared | Not declared | Not declared | Not declared |
chain_block_number_previewFREE live sample of the current Base mainnet block number — identical data to the paid chain_block_number tool. No payment required. | Not declared | Not declared | Not declared | Not declared |
chain_gas_priceCurrent Base mainnet gas price (wei/gwei), EIP-1559 base_fee_gwei/priority_fee_gwei, and gas_price_usd (ETH price cross-call — no price oracle on ETH-only competitors) via multi-provider JSON-RPC. Cost: $0.005 USDC per call via x402. | Not declared | Not declared | Not declared | Not declared |
chain_gas_price_previewFREE live sample of the current Base mainnet gas price — identical data to the paid chain_gas_price tool. No payment required. | Not declared | Not declared | Not declared | Not declared |
chain_token_balanceERC-20 token balance of a Base mainnet address via multi-provider JSON-RPC, incl. symbol/decimals/balance_formatted (per-token-contract cached in-isolate). Cost: $0.005 USDC per call via x402. | Not declared | Not declared | Not declared | Not declared |
chain_token_reportToken security check (honeypot detector + rug-pull risk score) for a Base ERC-20 in one call, decision-grade trade-safety verdict: SAFE | CAUTION | AVOID plus risk_score (0-100) and reasons, bundling honeypot/sellability simulation, owner-renounced + mint/pause/blacklist/fee-setter/upgradeable-proxy checks, token symbol/name/decimals, and Uniswap v3 WETH-pool liquidity (USD). Replaces many RPC calls and prevents a bad trade. Cost: $0.005 USDC per call via the shared MCP payment gate (the direct HTTP endpoint GET /chain/token-report is $0.01 — MCP tools/call is gated at a flat $0.005 per request). | Not declared | Not declared | Not declared | Not declared |
chain_token_report_previewFREE full real trade-safety report (SAFE/CAUTION/AVOID verdict) for Base USDC, same depth as the paid chain_token_report tool. No payment required. | Not declared | Not declared | Not declared | Not declared |
chain_token_securityToken security / honeypot detector for a Base mainnet ERC-20: EIP-1967/1822 proxy + upgradeability detection, bytecode dispatcher scan for mint/pause/blacklist/fee-setter/ownership selectors, owner() renouncement check, and a live eth_call state-override simulation testing whether a synthetic wallet can actually transfer() the token. Returns risk_score (0-100) + verdict (clear/review/block) + human-readable flags. Real compute an agent can't trivially self-serve. Cost: $0.005 USDC per call via x402. | Not declared | Not declared | Not declared | Not declared |
chain_token_security_previewFREE full real analysis of a fixed well-known token (Base WETH) via the token security / honeypot detector — same depth as the paid chain_token_security tool, so you can see the real product before paying. To analyze an arbitrary token, use the paid chain_token_security tool. No payment required. | Not declared | Not declared | Not declared | Not declared |
chain_txTransaction details by hash on Base mainnet via multi-provider JSON-RPC. Cost: $0.005 USDC per call via x402. | Not declared | Not declared | Not declared | Not declared |
chain_walletWallet screening bundle (balance, activity, contract vs EOA check): ETH balance + balance_usd (ETH price cross-call) + tx count + contract-code check (EIP-7702 delegated-EOA aware) for a Base mainnet address, in one call. Cost: $0.005 USDC per call via x402. | Not declared | Not declared | Not declared | Not declared |
chain_wallet_screenIs this wallet sanctioned OR a known scammer? Pre-trade screen for a counterparty / recipient / token-spender address before an agent sends, swaps or approves: exact match against (1) the U.S. Treasury OFAC SDN crypto-address list and (2) community scam/phishing/wallet-drainer threat-intel (ScamSniffer + MEW darklist). Returns sanctioned (bool) + malicious (bool) + verdict (blocked/clear) + the list sources and snapshot dates. 'clear' means not on these lists — not a safety guarantee. Cost: $0.005 USDC per call via x402 on MCP tools/call (direct HTTP route: $0.004). | Not declared | Not declared | Not declared | Not declared |
crypto_fundingLive 6-venue perpetual-futures funding rates from Binance+Bybit+OKX+Hyperliquid+dYdX+Gate (per-venue rate, per-venue open interest in USD, an OI-WEIGHTED CEX↔DEX arb verdict — funding_spread_bps + cheapest-long/richest-short venue computed over an OI-screened set so a thin-book outlier never names an unexecutable venue; excluded_thin_venues + oi_weighted flag report what was screened — premium/basis, annualized_hl/okx/binance/bybit/gate, LONGS_PAY/SHORTS_PAY/NEUTRAL signal, next_funding_ts, mark/oracle price, day volume), ranked by volume. Venues unreachable or not listing a coin are omitted per-coin — Hyperliquid is always present. Cost: $0.005 USDC per call via x402 on MCP tools/call (direct HTTP route: $0.004). | Not declared | Not declared | Not declared | Not declared |
crypto_funding_previewFREE 1-item sample of live cross-venue funding rates. No payment required. | Not declared | Not declared | Not declared | Not declared |
crypto_pricesLive spot token prices (price, change_24h, symbol, confidence, timestamp) for CoinGecko ids, sourced from DefiLlama. Cost: $0.005 USDC per call via x402. | Not declared | Not declared | Not declared | Not declared |
crypto_prices_previewFREE 1-item sample of live token prices. No payment required. | Not declared | Not declared | Not declared | Not declared |
defi_yieldsLive DeFi lending/LP yield pools, and every pool is tagged with an entry verdict (SUSTAINABLE | DECAYING | OUTLIER | AVOID) + a 0-100 risk_score right in the list — a go/no-go at the browse stage, not just raw rows. Each row carries project, chain, symbol, pool id, APY breakdown incl. 1d/7d/30d trend + apyBase7d/apyMean30d, IL risk incl. il7d, exposure, reward/underlying tokens, outlier flag, mu/sigma, DefiLlama stability forecast, TVL and a stablecoin flag, from DefiLlama, ranked by TVL (or risk-adjusted APY = apy/sigma). For the deep go/no-go on the one pool you're sizing into, pass its pool id to yield_entry_verdict. Cost: $0.005 USDC per call via x402. | Not declared | Not declared | Not declared | Not declared |
defi_yields_previewFREE 1-item sample of live DeFi yield pools. No payment required. | Not declared | Not declared | Not declared | Not declared |
enrich_domainFirmographic + tech-stack enrichment: RDAP registrant/registrar, DNS records, full subdomain enumeration + certificate-transparency history, tech-stack fingerprint, verdict (clear/review/block, based on domain age) for a domain. Cost: $0.005 USDC per call via the shared MCP payment gate (the direct HTTP endpoint GET /enrich/domain is $0.01 — MCP tools/call is gated at a flat $0.005 per request). | Not declared | Not declared | Not declared | Not declared |
enrich_tech_riskSecurity enrichment: tech-stack fingerprint + CVE mapping + EPSS + CISA KEV + verdict (clear/review/block) for a domain. Cost: $0.005 USDC per call (x402 micropayment). | Not declared | Not declared | Not declared | Not declared |
gate_swapPre-trade GO / HOLD / BLOCK gate for a Base ERC-20 swap: honeypot/sellability + admin-control checks + Uniswap v3 liquidity vs. your trade size. Returns a top-level `sized_verdict` one-liner (decision + pool-depth % + max-safe size + round-trip breakeven + exit recovery, read in one shot) AND the full decision-grade sizing — per $100 / $1k / $10k / $50k (and your exact notional_usd): entry-slippage + exit-simulation (net USD recovered vs lost to slippage), round-trip breakeven move %, and max_safe_notional_usd. Cost: $0.005 USDC per call via the shared MCP payment gate (the direct HTTP endpoint GET /gate/swap is $0.008 — MCP tools/call is gated at a flat $0.005 per request). | Not declared | Not declared | Not declared | Not declared |
gate_swap_previewFREE live sample of the gate_swap pre-trade GO/HOLD/BLOCK decision for a demo Base token (usdc|weth|cbbtc|aero|degen), same shape as the paid gate_swap tool. The paid gate_swap tool additionally returns a top-level `sized_verdict` one-liner plus the full `sizing` object (entry/exit slippage simulation + round-trip breakeven + max_safe_notional_usd); the `paid_adds` block here names those fields. No payment required. | Not declared | Not declared | Not declared | Not declared |
pm_marketsLive Polymarket prediction-market data — question, outcomes, outcome prices, bestBid/bestAsk/spread, volume24hr/volume1wk, oneDayPriceChange, clobTokenIds, conditionId, category tags, liquidity, end date — ranked by volume24hr. Cost: $0.005 USDC per call via x402. | Not declared | Not declared | Not declared | Not declared |
pm_markets_previewFREE top-1 sample of live Polymarket prediction markets, ranked by volume24hr. No payment required. | Not declared | Not declared | Not declared | Not declared |
scan_mcp_previewFREE preview scan of a target MCP server for tool-poisoning / prompt-injection. Returns issue count, severity breakdown, risk score, and verdict (clear/review/block) — but NOT which tools or the evidence. Use this to check any MCP server (including your own) at no cost; if issues are found, call the paid scan_mcp_server for the itemized findings + remediation. No payment required. | Not declared | Not declared | Not declared | Not declared |
scan_mcp_serverSecurity-audit a target MCP server for prompt-injection / tool-poisoning. Fetches the server's advertised tools and statically analyzes each for hidden instructions, data-exfiltration hints, dangerous capabilities, cross-tool shadowing, and invisible-unicode payloads (OWASP LLM01/LLM08). Returns findings + a 0-100 risk score + verdict (clear/review/block). Cost: $0.005 USDC per scan via x402 (GET /scan/mcp HTTP variant is $0.05). | Not declared | Not declared | Not declared | Not declared |
simulateWill this Base transaction revert? Prospective-tx dry-run via eth_simulateV1: pass from, to, optional data (0x calldata) and value (wei) and get will_revert + revert_reason + gas_used + token asset_changes BEFORE the agent spends gas sending it. Keyless, Base-native, Tenderly/Alchemy-class output with no API key. Use before a swap/approve/transfer or alongside gate_swap. Cost: $0.005 USDC per call via x402. | Not declared | Not declared | Not declared | Not declared |
simulate_previewFREE sample prospective-tx dry-run (benign 0-value call) showing the will_revert/gas_used/asset_changes output shape before you pay. No payment required. | Not declared | Not declared | Not declared | Not declared |
x402_preflightShould an agent pay this x402 endpoint? Pre-payment check of an UNKNOWN x402 URL: fetch it once (never pays) to validate the 402 challenge + accepts[] (scheme/network/payTo/amount/asset/resource = will it settle) AND label its LIVENESS (LIVE | ZOMBIE | DEAD — is it a working payable endpoint right now, or listed-active-but-broken) AND flag an absolute PRICE TRAP (a honeypot charging >= $1,000/call trips AVOID even when its advertised==live price looks self-consistent; pass max=<usdc> for your own budget ceiling) AND scan the resource + any advertised MCP tools for LLM01/LLM08 prompt-injection and screen payTo against the OFAC SDN + community scam lists (safe to pay) AND verify the PRICE — does the live accepts[].amount match the advertised price? pass advertised=<usdc> (the figure your catalog quoted) or it self-checks the endpoint's /.well-known/x402: MATCH | OVERCHARGE | UNDERCHARGE. Optional samples=N (1-5) runs a reliability/payability burst (settle-consistency + latency; a flapping endpoint downgrades PAY to CAUTION). Returns verdict PAY | CAUTION | AVOID + per-check fix hints + latency. Read-only, never a settlement guarantee. Cost: $0.005 USDC per call via x402 on MCP tools/call (direct HTTP route: $0.001). | Not declared | Not declared | Not declared | Not declared |
x402_receipt_verifyDid my x402 payment actually settle? POST-payment on-chain proof — the other half of x402_preflight (which checks BEFORE paying). Bring your Base settlement tx hash + the resource URL you paid, and this reads the tx receipt from Base mainnet, decodes its USDC Transfer events, and reconciles them against the endpoint's advertised payTo + amount (resolved from the resource's live 402, or pass payto/expect to bind it directly). Returns verdict SETTLED | UNDERPAID | WRONG_RECIPIENT | NO_TRANSFER | REVERTED | NOT_FOUND | UNVERIFIED, the matched transfer, and all USDC transfers in the tx. Read-only ground truth; confirms settlement to the right address + amount, not off-chain resource delivery. Cost: $0.005 USDC per call via x402 on MCP tools/call (direct HTTP route: $0.004). | Not declared | Not declared | Not declared | Not declared |
x402_receipt_verify_previewFREE keyless x402 settlement check on Base: pass a tx hash plus payto (and optionally expect, in USDC). Dual-RPC reads the receipt, decodes USDC Transfers and returns SETTLED | UNDERPAID | WRONG_RECIPIENT | NO_TRANSFER | REVERTED | NOT_FOUND. Binds to the payTo you supply; resolving the payTo from a live 402 url is the paid x402_receipt_verify. | Not declared | Not declared | Not declared | Not declared |
yield_entry_verdictPer-pool DeFi yield-entry go/no-go. Pass a DefiLlama poolId (the 'pool' field from defi_yields) and get a packaged SUSTAINABLE | DECAYING | OUTLIER | AVOID verdict + 0-100 risk score + field-cited reasons, built from the pool's APY trend (1d/7d/30d), DefiLlama stability forecast, impermanent loss (il7d), volatility (sigma), outlier flag and TVL. Optional token (0x underlying, Base) adds a honeypot-check pointer. The should-I-enter-THIS-pool call after defi_yields. Cost: $0.005 USDC per call via x402 on MCP tools/call (direct HTTP route: $0.01). | Not declared | Not declared | Not declared | Not declared |
yield_entry_verdict_previewFREE sample yield-entry verdict for the current top-TVL pool. Shows the packaged SUSTAINABLE/DECAYING/OUTLIER/AVOID + risk-score output shape before you pay. No payment required. | Not declared | Not declared | Not declared | Not declared |
Details
- Registry status
- Active
- Published
- Nov 4, 2026
- Updated
- Nov 4, 2026
- Categories (suggested)
- Finance and paymentsSecuritySuggested categories are assigned automatically from the registry text and may be wrong. Verified operators can correct them.
- GDPR
- Not declared