KushBitx AgentProof

com.kushbitx/agentproofVersion 1.0.0

Safety checks for AI agents paying on Base: free SpendGuard, paid x402 token risk and preflight.

Status

Responds218 msNov 14, 2026, 14:03 UTCAnswered our handshake without sign-in.

Registry data may be out of date

We could not refresh it, so this page shows the last copy.

Last checked: Nov 14, 2026, 14:03 UTC
Latency: 218 ms
Remotes responding: 1 of 1
Sign-in: No sign-in
Hosting: Hosted outside the EU (detected)
Registry data as of: Nov 14, 2026, 21:12 UTC

Data from the official MCP Registry, checked by run.zero. How we check

Connect

Streamable HTTP

https://kushbitx.com/mcpResponds218 msNov 14, 2026, 14:03 UTC

No sign-in

Claude Code

claude mcp add --transport http agentproof https://kushbitx.com/mcp

Claude Desktop and claude.ai

1
2
3

Settings > Connectors > Add custom connector
Name: agentproof
Remote MCP server URL: https://kushbitx.com/mcp

Cursor

{
  "mcpServers": {
    "agentproof": {
      "url": "https://kushbitx.com/mcp"
    }
  }
}

VS Code

code --add-mcp '{"name":"agentproof","type":"http","url":"https://kushbitx.com/mcp"}'

Built your own server? run.zero hosts MCP servers on European infrastructure.

Host your own MCP server on run.zero

Tools

7 tools

Tools of KushBitx AgentProof
	Description		Read-only	Idempotent	Open world
`kushbitx_preflight`One check before money moves on Base. Simulates the unsigned transaction, decodes approvals and transfers, screens the token and the recipient or spender, and applies a protected SpendGuard policy when given. Returns ALLOW, REVIEW or BLOCK with sourced findings. Fail-closed: no ALLOW unless every check ran. Does not detect prompt injection; Protected SpendGuard can cap what an agent pays, but does not detect it either. Paid tool: 0.005 USDC per call on Base via x402 (exact scheme). An unpaid call returns the payment requirement and charges nothing. Sign only if verdict is ALLOW, before expiresAt, and the transaction you sign is exactly the one you sent (same transactionDigest, chainId 8453). In code: canSign(report, transaction) from @kushbitx/sdk. Beta: Preflight also accepts batches (up to 10 calls), smart-account calls, ERC-4337 UserOperations (deployed accounts) and EIP-7702 authorizations, at the same price. Any call in a batch that KushBitx does not interpret returns REVIEW. Signed verdicts (Beta): on ALLOW, Preflight returns an EIP-712 signed verdict (60-second expiry) bound to executionDigest; REVIEW and BLOCK are never signed; keys at /.well-known/kushbitx-preflight-signers.json.	One check before money moves on Base. Simulates the unsigned transaction, decodes approvals and transfers, screens the token and the recipient or spender, and applies a protected SpendGuard policy when given. Returns ALLOW, REVIEW or BLOCK with sourced findings. Fail-closed: no ALLOW unless every check ran. Does not detect prompt injection; Protected SpendGuard can cap what an agent pays, but does not detect it either. Paid tool: 0.005 USDC per call on Base via x402 (exact scheme). An unpaid call returns the payment requirement and charges nothing. Sign only if verdict is ALLOW, before expiresAt, and the transaction you sign is exactly the one you sent (same transactionDigest, chainId 8453). In code: canSign(report, transaction) from @kushbitx/sdk. Beta: Preflight also accepts batches (up to 10 calls), smart-account calls, ERC-4337 UserOperations (deployed accounts) and EIP-7702 authorizations, at the same price. Any call in a batch that KushBitx does not interpret returns REVIEW. Signed verdicts (Beta): on ALLOW, Preflight returns an EIP-712 signed verdict (60-second expiry) bound to executionDigest; REVIEW and BLOCK are never signed; keys at /.well-known/kushbitx-preflight-signers.json.	No	Yes	Yes	Yes
`preflight`Simulation Check: simulate one unsigned Base transaction (eth_call and gas estimate), decode transfers, approvals and setApprovalForAll, and flag unlimited approvals, non-contract targets, the zero address, reverts and destination risk labels. Returns ALLOW, WARN, BLOCK or INCOMPLETE. For one ALLOW, REVIEW or BLOCK verdict before signing (effects, intended recipient, token, batches, signed verdict) use KushBitx Preflight: /api/preflight. Paid tool: 0.001 USDC per call on Base via x402 (exact scheme). An unpaid call returns the payment requirement and charges nothing.	Simulation Check: simulate one unsigned Base transaction (eth_call and gas estimate), decode transfers, approvals and setApprovalForAll, and flag unlimited approvals, non-contract targets, the zero address, reverts and destination risk labels. Returns ALLOW, WARN, BLOCK or INCOMPLETE. For one ALLOW, REVIEW or BLOCK verdict before signing (effects, intended recipient, token, batches, signed verdict) use KushBitx Preflight: /api/preflight. Paid tool: 0.001 USDC per call on Base via x402 (exact scheme). An unpaid call returns the payment requirement and charges nothing.	No	Yes	Yes	Yes
`quick_check`Fast pre-payment sanity check for agents on Base: confirms the RPC reports Base mainnet (chain ID 8453) and that the official USDC contract has deployed code. No request body. Returns PASS or FAIL with both checks and a timestamp. It is not a token-risk report, transaction simulation or payment proof. Paid tool: 0.001 USDC per call on Base via x402 (exact scheme). An unpaid call returns the payment requirement and charges nothing.	Fast pre-payment sanity check for agents on Base: confirms the RPC reports Base mainnet (chain ID 8453) and that the official USDC contract has deployed code. No request body. Returns PASS or FAIL with both checks and a timestamp. It is not a token-risk report, transaction simulation or payment proof. Paid tool: 0.001 USDC per call on Base via x402 (exact scheme). An unpaid call returns the payment requirement and charges nothing.	No	Yes	Yes	Yes
`signature_check`Check an EIP-712 signature request before an agent signs it: EIP-3009 (x402 payments), EIP-2612 Permit and Permit2. Checks the chain, the token domain, payTo and amount, the spender, unlimited amounts and long validity. Returns ALLOW, REVIEW or BLOCK bound to the EIP-712 digest. Unknown typed data is REVIEW. An ALLOW is signed by a KushBitx key (signedVerdict, 60 seconds). Paid tool: 0.003 USDC per call on Base via x402 (exact scheme). An unpaid call returns the payment requirement and charges nothing. Sign only if verdict is ALLOW, before expiresAt, for the same signer, and the typed data you sign is exactly the one you sent (same typedDataDigest, chainId 8453 in the request and in typedData.domain). In code: canSignTypedData(report, { chainId, signer, typedData }) from @kushbitx/sdk.	Check an EIP-712 signature request before an agent signs it: EIP-3009 (x402 payments), EIP-2612 Permit and Permit2. Checks the chain, the token domain, payTo and amount, the spender, unlimited amounts and long validity. Returns ALLOW, REVIEW or BLOCK bound to the EIP-712 digest. Unknown typed data is REVIEW. An ALLOW is signed by a KushBitx key (signedVerdict, 60 seconds). Paid tool: 0.003 USDC per call on Base via x402 (exact scheme). An unpaid call returns the payment requirement and charges nothing. Sign only if verdict is ALLOW, before expiresAt, for the same signer, and the typed data you sign is exactly the one you sent (same typedDataDigest, chainId 8453 in the request and in typedData.domain). In code: canSignTypedData(report, { chainId, signer, typedData }) from @kushbitx/sdk.	No	Yes	Yes	Yes
`spendguard_evaluate`Free. Check a proposed Base USDC payment against a spending policy you supply (per-transaction limit, daily budget, human-approval threshold, allowed recipients) before money moves. Returns APPROVE, HUMAN_APPROVAL or BLOCK with findings. Advisory only: it never signs, holds keys or moves funds.	Free. Check a proposed Base USDC payment against a spending policy you supply (per-transaction limit, daily budget, human-approval threshold, allowed recipients) before money moves. Returns APPROVE, HUMAN_APPROVAL or BLOCK with findings. Advisory only: it never signs, holds keys or moves funds.	No	Yes	Yes	Yes
`token_risk`Token-risk report for one Base ERC-20 contract. Checks whether the token can be sold (honeypot simulation), buy/sell/transfer tax, owner privileges (mint, pause, blacklist, balance changes, proxy upgrades), holder concentration and DEX liquidity. Returns ALLOW, WARN, BLOCK or INCOMPLETE with scored findings and per-check coverage. INCOMPLETE means required evidence was unavailable, never zero risk. Read-only: never signs or trades. Paid tool: 0.001 USDC per call on Base via x402 (exact scheme). An unpaid call returns the payment requirement and charges nothing.	Token-risk report for one Base ERC-20 contract. Checks whether the token can be sold (honeypot simulation), buy/sell/transfer tax, owner privileges (mint, pause, blacklist, balance changes, proxy upgrades), holder concentration and DEX liquidity. Returns ALLOW, WARN, BLOCK or INCOMPLETE with scored findings and per-check coverage. INCOMPLETE means required evidence was unavailable, never zero risk. Read-only: never signs or trades. Paid tool: 0.001 USDC per call on Base via x402 (exact scheme). An unpaid call returns the payment requirement and charges nothing.	No	Yes	Yes	Yes
`verify_payment`Verify Base USDC payment by transaction hash: did my x402 payment settle? Check recipient and amount (and optional sender) against the official USDC Transfer logs before releasing goods or credit. Returns VERIFIED, MISMATCH, FAILED or PENDING_OR_NOT_FOUND with block, confirmations, the matching transfer and a Basescan link. Read-only: never moves funds. Paid tool: 0.00288 USDC per call on Base via x402 (exact scheme). An unpaid call returns the payment requirement and charges nothing.	Verify Base USDC payment by transaction hash: did my x402 payment settle? Check recipient and amount (and optional sender) against the official USDC Transfer logs before releasing goods or credit. Returns VERIFIED, MISMATCH, FAILED or PENDING_OR_NOT_FOUND with block, confirmations, the matching transfer and a Basescan link. Read-only: never moves funds. Paid tool: 0.00288 USDC per call on Base via x402 (exact scheme). An unpaid call returns the payment requirement and charges nothing.	No	Yes	Yes	Yes

Details

Registry status: Active
Published: Oct 22, 2026
Updated: Oct 22, 2026
Website: https://kushbitx.com/developers⁠ (opens in a new tab)
Repository: Not given
Categories (suggested): Finance and paymentsSuggested categories are assigned automatically from the registry text and may be wrong. Verified operators can correct them.
GDPR: Not declared

Are you the operator? Claim this listing