Novarithm Agent Hub: trust and commerce checks

com.novarithm.wwwPublished by www.novarithm.comv1.1.0Updated Nov 1, 2026

Agent trust, pre-purchase risk, deliverable checks, data and SEO tools. Pay per call via x402.

VerifiedStreamable HTTPWeb executableWeb Search & ScrapingSecurity & MonitoringBusiness & Commerce

Overview

AI-generated overview

Remote MCP endpoint offering paid, per-call trust, pre-purchase, deliverable, data and SEO checks settled in USDC on Base via x402.

What you can do
  • List paid tools and prices, and read async job results
  • Probe other agents and endpoints: x402 offers, MCP handshakes, A2A cards, provider trust and quality comparisons
  • Audit websites: passive site, SEO, security, checkout and delivery verification with signed attestations
  • Check commerce risk: seller reputation, price and availability, recalls, sanctions, EU readiness, fragrance listings
  • Look up data: US geocoding, UK postcodes, email and domain email health, ECB FX rates
  • Evaluate deliverables against criteria and verify the resulting attestation
When to use it
Useful when an assistant must vet another paid agent or endpoint before integrating it, check a store or product before buying, verify a delivered website or deliverable against criteria, or pull small reference data such as FX rates, geocoding and sanctions screening.
Requirements
Remote streamable HTTP endpoint; no account or key declared. Free calls cover initialization, tool listing and pricing. Paid tools need an x402-capable client and an operator-authorized wallet holding USDC on Base mainnet; an ordinary MCP connection does not provision payment. Rate limit is 120 requests per minute per IP.
Before you install
Paid tools spend real USDC per call, from 0.002 to 99 USDC, so set an explicit budget policy; the documented budget is per process and reservations stay consumed after uncertain outcomes, so reconcile receipts before retrying. Keep signer credentials server-side. Tools send target URLs, addresses, names and crypto addresses to a third-party operator. Scores and attestations are indicative, no tool authorizes purchases or releases escrow, and checks do not prove product authenticity or mailbox…

Installation

In SourceWeft

  1. Open Novarithm Agent Hub: trust and commerce checks in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/com.novarithm.www%2Fagent-hub/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "novarithm-agent-hub-trust-and-commerce-c": {
      "type": "http",
      "url": "https://gogeta2-u35175.vm.elestio.app/agents/mcp"
    }
  }
}

README

Novarithm Agent Hub

Trust and commerce checks for agent operators, through HTTP x402 and one remote MCP endpoint. Current settlement: Coinbase CDP, USDC on Base mainnet. There are 29 paid tools and one free pricing tool at the verification dated 24 October 2026.

Start with Agent Check: inspect an x402 quote, an MCP handshake, or an A2A card before integrating another agent. These checks observe protocols and evidence; they do not certify the provider or the quality of a paid result.

Connect and inspect for free

json
{  "mcpServers": {    "novarithm": {      "type": "streamable-http",      "url": "https://gogeta2-u35175.vm.elestio.app/agents/mcp"    }  }}

The client-specific configuration format may differ. MCP initialization, tools/list, and pricing are free. Paid calls require an x402-capable client and an operator-authorized wallet; an ordinary MCP connection does not provision payment.

sh
# Node 22+; no dependencies or wallet needed for this commandnode examples/buyer.mjs quote /v1/agent/x402-probe

This only obtains an unsigned 402 quote: zero signatures and zero spending. It does not run the paid tool.

Add an explicitly bounded buyer

The example supports HTTP and MCP. Dependencies are pinned to the versions used for the free integration check. enablePaid defaults to false. No wallet is created and no paid call runs on import.

sh
cd examplesnpm installnode --test test_buyer.mjs

For a backend with an existing signer:

js
import { BASE, budgetPolicy, makePaymentClient, httpBuyer, mcpBuyer } from './buyer.mjs';
const policy = budgetPolicy({  maxPerCallAtomic: '10000',  // 0.01 USDC  totalAtomic: '20000',      // at most 0.02 USDC authorized in this process  allowedResources: [BASE + '/v1/agent/x402-probe', 'mcp://tool/x402_probe']});const paymentClient = await makePaymentClient(operatorProvidedSigner, policy);const http = await httpBuyer({client: paymentClient, allowedPaths: ['/v1/agent/x402-probe']});// Still unsigned by default. Explicit enablePaid:true permits spending under the policy.const response = await http('/v1/agent/x402-probe', {url: 'https://example.com/paid'});console.log(response.status); // 402 while enablePaid is false
const mcp = await mcpBuyer({paymentClient, allowedTools: ['x402_probe']});console.log(await mcp.pricing());await mcp.close();

Keep signer credentials server-side. The policy checks resource, recipient, chain, token, price, timeout and total authorization before signing. Reservations remain consumed after uncertain outcomes; reconcile before retrying. The budget is per process, so production operators need persistent wallet limits across restarts and instances. Tests of policy and free integration do not constitute a paid end-to-end test of this new client.

Choose the relevant evidence

TaskExisting toolsPrice per call (USDC)
Inspect another agentx402_probe, mcp_probe, a2a_card_check0.01 each
Before buying a productpre_purchase_check0.08
Inspect listing riskseller_reputation, price_availability0.02 / 0.03
Inspect a fragrance listingfragrance_check0.15
Check explicit deliverable criteriaevaluate_deliverable / verify_attestation0.25 / 0.001
Other data tasksRecall, sanctions, email/DNS, FX, USDC, geocoding, SEO/GEOlive catalog

Scores are indicative. Fragrance checks do not authenticate a physical bottle. Email/DNS checks do not prove mailbox delivery. The rule-based evaluator cannot establish free-text semantic truth; a signed attestation proves the signer and the report's integrity. It holds no funds and sends no escrow transaction. Use measurable structured criteria and inspect the returned limitations.

HTTP results use {service,data}. Failed or invalid upstream requests are not settled; after an uncertain payment response, reconcile the receipt before retrying. An HTTP 200 MCP envelope may contain a tool error. The public limit is 120 requests/minute/IP, including unpaid attempts. There is no contractual availability guarantee in this repository.

Registry metadata

server.json uses the existing official registry identity com.novarithm.www/agent-hub. A GitHub merge updates repository metadata; registry publication is a separate authenticated action with domain ownership proof. Preserve the existing namespace when publishing a new version.

The hosted server is operated by Novarithm. Contact: [email protected]. License: MIT.

Source: README.md at commit 715c407

Tools

53

pricing

Free. Lists every paid tool with its price per call (USDC, Base mainnet).

Takes no parameters.

job_result

Free. Reads the result of an async paid job (services: site-audit, deploy-proof, due-diligence-report). Pass the service and job_id returned by the paid tool.

Parametersjob_idrequiredservicerequired

site_audit_quick

[PAID $5 USDC/call, x402, eip155:8453] Quick Bierus website audit (5 pages, no Lighthouse): ~25 checks, each ok/ko/not_measured with sources and two-source corroboration. Async: returns job_id + free result_url (about 1-2 min).

Parametersurlrequirednamesector

site_audit_full

[PAID $25 USDC/call, x402, eip155:8453] Full Bierus website audit: 20 pages, Lighthouse mobile speed, ~25 checks ok/ko/not_measured with sources, plus registry comparison with the previous full run (observed / fixed / possible regression). Async: job_id + free result_url (about 2-4 min).

Parametersurlrequirednamesector

test_website

[PAID $5 USDC/call, x402, eip155:8453] Signed passive website proof: page reachable, TLS certificate, http→https, response time, title, mixed content, real 404, internal links sample, optional expected text. ok/ko/not_measured + EIP-712 attestation.

Parametersurlrequiredexpect_textmax_response_ms

test_seo

[PAID $5 USDC/call, x402, eip155:8453] Signed passive SEO proof: SEO module scores (technical, content, links, local, AI visibility), title/meta lengths, canonical, single h1, lang, JSON-LD, indexable, sitemap. ok/ko/not_measured + EIP-712 attestation.

Parametersurlrequired

test_security_basics

[PAID $5 USDC/call, x402, eip155:8453] Signed PASSIVE security basics: TLS 1.2+, certificate expiry, HSTS, CSP, framing, nosniff, referrer policy, version disclosure, cookie flags, known-vulnerable JS versions in script URLs, mixed content, SPF/DMARC, security.txt. No scanning.

Parametersurlrequired

test_checkout

[PAID $25 USDC/call, x402, eip155:8453] Signed passive checkout-path proof for a store or product page: price/currency/availability, add-to-cart control, cart page, checkout links over https, payment provider, terms/returns/privacy/legal pages reachable, contact. Nothing added to cart, no payment.

Parametersurlrequired

verify_delivery

[PAID $99 USDC/call, x402, eip155:8453] Full signed delivery verification: website + SEO + security basics (+ checkout if store=true) + the client's acceptance criteria (expected texts, pages that must answer). One verdict pass/partial/fail and one EIP-712 attestation over all measurements. Async: job_id + free result_url.

Parametersurlrequiredpagesstoreexpect_textmax_response_ms

check_provider

[PAID $0.5 USDC/call, x402, eip155:8453] Trust decision (trust/caution/avoid + score) for one paid agent provider: x402 offer, MCP, A2A card, 3 unpaid availability probes, domain reputation, OFAC check of payTo, ERC-8004 identity and agentWallet = payTo on Base.

Parametersurlrequiredmethodmcp_urlagent_id

compare_quality

[PAID $2 USDC/call, x402, eip155:8453] Compare 2-5 paid agent providers with the same measured checks and rank them (decision, budget, trust score, price, latency); returns the recommended provider and why.

Parametersurlsrequiredmax_price_usd

vendor_report

[PAID $9 USDC/call, x402, eip155:8453] Readable vendor due-diligence report: reputation, sanctions (OFAC/UN/EU/UK), product recalls, EU-Ready, email authentication, product offer; proceed/review/block, Markdown report, signed evidence hash. Async if slow (job_id + free result_url), cached 24 h.

Parametersgtinquerydomainrequiredmarketsellerproduct_url

us_geocode

[PAID $0.003 USDC/call, x402, eip155:8453] Geocode one US street address with the U.S. Census Bureau: standardised address, lat/lon, state, county, census tract, block group, ZCTA, metro area, congressional district (official GEOIDs). No match = not charged.

Parametersaddressrequired

uk_postcode

[PAID $0.002 USDC/call, x402, eip155:8453] UK postcode lookup (ONS Postcode Directory via postcodes.io): lat/lon, country, region, local authority, ward, parliamentary constituency, NHS ICB, police force, LSOA. Unknown postcode = not charged.

Parameterspostcoderequired

a2a_card_check

[PAID $0.01 USDC/call, x402, eip155:8453] Fetch and validate a peer agent's A2A Agent Card (v1.0 / v0.3): fields, skills, interfaces, auth, signature, reachability. Score 0-100 + issues.

Parametersurlrequired

mcp_probe

[PAID $0.01 USDC/call, x402, eip155:8453] Real MCP Streamable HTTP handshake (initialize + tools/list, no tool call): reachability, protocol version, tools, schemas, latency, OAuth metadata.

Parametersurlrequired

x402_probe

[PAID $0.01 USDC/call, x402, eip155:8453] Pre-payment check of an x402 endpoint: one unpaid request, decodes the 402 offer (v1/v2): network, USDC or not, USD price, payTo, testnet, red flags.

Parametersurlrequiredmethod

agent_ready_score

[PAID $0.05 USDC/call, x402, eip155:8453] Agent-ready score 0-100 (A-F) of a website or API: AI-bot access, llms.txt, A2A agent card, MCP manifest, x402 discovery, OpenAPI and agentic-commerce markup, with fixes ranked by impact.

Parametersurlrequired

clone_blueprint

[PAID $49 USDC/call, x402, eip155:8453] Architecture plan + installation checklist for one AI-run business: clone=agency (AI sales-agent agency), trading-house (AI B2B trading house) or api-store (API store for AI agents). Components, data flows, build phases, done-when checklist, go-live checks. No source code, no revenue promise. Unknown clone = not charged.

Parametersclonerequired

email_check

[PAID $0.003 USDC/call, x402, eip155:8453] Validate one email address without sending mail: syntax, MX, disposable, free webmail, role account, SPF/DMARC. Returns deliverable/risky/undeliverable/invalid with score.

Parametersemailrequired

domain_email_health

[PAID $0.01 USDC/call, x402, eip155:8453] Audit a domain's email authentication: MX, SPF, DMARC, DKIM (20 selectors), MTA-STS, TLS-RPT, BIMI and domain age. Returns an A-F grade with concrete fixes.

Parametersdomainrequired

evaluate_deliverable

[PAID $0.25 USDC/call, x402, eip155:8453] Evaluate a deliverable (text, JSON or URL) against a job spec (free text or JSON criteria): verdict pass/partial/fail, score, checked criteria, and a signed EIP-712 attestation whose digest is the ERC-8183 complete/reject reason. No funds held.

Parametersspecrequiredjob_idchain_idcontractthresholddeliverablerequired

verify_attestation

[PAID $0.001 USDC/call, x402, eip155:8453] Verify an attestation token issued by evaluate_deliverable: recovers the EIP-712 signer, checks it is our evaluator, returns verdict, score, jobId and the bytes32 reason.

Parameterstokenrequired

eu_ready_check

[PAID $0.12 USDC/call, x402, eip155:8453] Before buying or selling a product in the EU: Safety Gate alerts (barcode or brand+words), GPSR manufacturer / EU responsible person on the page, seller sanctions (OFAC/UN/EU/UK) and price at the ECB rate, with a ready/review/block decision.

Parameterstourlgtinpricequerysellercurrency

fragrance_check

[PAID $0.15 USDC/call, x402, eip155:8453] Risk signals for a fragrance listing: sales channel, price per ml, listing words, seller domain and EU Safety Gate. Does not authenticate a physical bottle. Provide url, or brand and seller_domain.

Parametersurlbrandpriceproductsize_mlcurrencybatch_codeseller_domain

fx_convert

[PAID $0.002 USDC/call, x402, eip155:8453] Convert an amount between two currencies at the official ECB reference rate, today or any date since 1999, incl. CFA franc and Gulf pegs. Returns rate, amount, rate date.

Parameterstorequireddatefromrequiredamount

fx_timeseries

[PAID $0.005 USDC/call, x402, eip155:8453] Daily official ECB exchange rates for a currency pair over up to 366 days, with min, max, mean and % change. Useful for invoicing, hedging checks and reporting.

Parameterstorequiredendfromrequiredstart

fx_latest

[PAID $0.002 USDC/call, x402, eip155:8453] All official ECB reference rates for any base currency on the latest or a given fixing date, including pegged currencies (XOF, XAF, AED, SAR). One call, full rate table.

Parametersbasedatesymbols

pre_purchase_check

[PAID $0.08 USDC/call, x402, eip155:8453] Bundle before paying: verified price/stock (schema.org), seller trust score (RDAP, TLS, DMARC, policies, phishing lists) and recall status (CPSC, openFDA, RappelConso) for a product URL, with a proceed/caution/stop decision.

Parametersurlrequiredgtinquerymarket

price_availability

[PAID $0.03 USDC/call, x402, eip155:8453] Verified price, currency, availability and seller of a product page URL from its schema.org JSON-LD / microdata / OpenGraph data. robots.txt respected; blocked or unpriced pages return 'unavailable' (not charged).

Parametersurlrequired

gtin_recall

[PAID $0.01 USDC/call, x402, eip155:8453] Exact recall check for one EAN/UPC/GTIN barcode (check digit validated) across RappelConso, CPSC and openFDA.

Parametersgtinrequired

sanctions_screen

[PAID $0.01 USDC/call, x402, eip155:8453] Screen a person or company name against OFAC SDN, UN, EU and UK sanctions lists in one call (fuzzy, aliases). Returns matches with score, list, programs, countries.

Parametersnamerequiredtypelistscountrythresholdbirth_yearmax_results

sanctions_crypto_address

[PAID $0.005 USDC/call, x402, eip155:8453] Check a crypto address (BTC, ETH/EVM, TRON, LTC, XMR, SOL and more) against OFAC SDN digital currency addresses. Returns listed true/false and the sanctioned entity.

Parametersaddressrequired

seller_reputation

[PAID $0.02 USDC/call, x402, eip155:8453] Trust score 0-100 for an online store domain or URL: domain age (RDAP), HTTPS, MX/SPF/DMARC, return policy and contact, Tranco rank, phishing lists, scam patterns. Short JSON with risk, advice, red_flags, reasons.

Parametersdomainrequired

seo_technical_audit

[PAID $0.02 USDC/call, x402, eip155:8453] Technical SEO audit of a URL: HTTPS and redirects, www duplicate, canonical, noindex, title/meta/H1, viewport, hreflang, Open Graph, sitemap and robots.txt, soft 404, response time, compression, images alt, schema.org, JS-only content. Score 0-100 + ranked fixes.

Parametersurlrequired

seo_keywords_content

[PAID $0.01 USDC/call, x402, eip155:8453] On-page keyword and content analysis: focus keyword (given or detected) placement in title/H1/meta/first 100 words/URL, density, top terms and phrases, headings outline, FAQ questions, word count, readability. Score + fixes.

Parametersurlrequiredtarget

seo_local_presence

[PAID $0.01 USDC/call, x402, eip155:8453] Local SEO / listings readiness from the website: phone (tel: links), postal address, e-mail, Organization/LocalBusiness JSON-LD (address, telephone, geo, hours, sameAs), Google Maps/Business and review-platform links, social profiles. Score + fixes.

Parametersurlrequired

geo_ai_visibility

[PAID $0.02 USDC/call, x402, eip155:8453] GEO audit - can ChatGPT, Claude, Perplexity, Gemini cite this site? AI search/user/training bots allowed in robots.txt, text readable without JavaScript, schema.org, metadata, llms.txt, sitemap, agentic-commerce signals. Score + ranked fixes.

Parametersurlrequired

seo_full_audit

[PAID $0.06 USDC/call, x402, eip155:8453] Full SEO + GEO audit in one call: technical, keywords and content, internal links (12-page crawl), local presence and AI visibility, weighted 0-100 score and the 12 priority actions across all areas, with module details.

Parametersurlrequired

trust_trio

[PAID $0.03 USDC/call, x402, eip155:8453] Trust Trio: A2A agent card + MCP server probe + x402 payment-offer check of one AI agent in a single call (no payment made to it). Returns trusted/partial/untrusted, a trust score and every issue.

Parametersurlrequiredmcp_urlx402_urlx402_method

verify_usdc_payment

[PAID $0.002 USDC/call, x402, eip155:8453] Verify a USDC payment on Base: tx succeeded, USDC sent to the expected recipient (and from the expected sender), at least min_amount, enough confirmations. Returns verdict + decoded transfers. Unknown tx = not charged.

Parameterstofromchaintx_hashrequiredmin_amountmin_confirmations

usdc_balance

[PAID $0.001 USDC/call, x402, eip155:8453] Current USDC balance of an address on Base or Base Sepolia (balanceOf on the official Circle contract).

Parameterschainaddressrequired

vendor_due_diligence

[PAID $0.5 USDC/call, x402, eip155:8453] Vendor due diligence in one call: seller domain reputation, legal-name sanctions screening (OFAC/UN/EU/UK), product recalls (barcode or keywords) and EU-Ready (Safety Gate, GPSR, ECB price). Returns proceed/review/block with reasons.

Parametersgtinquerydomainrequiredmarketsellerproduct_url

invoice_duplicate_check

[PAID $0.005 USDC/call, x402, eip155:8453] Compare up to 1000 caller-supplied invoice records for repeated supplier/reference/document identity and conflicting amounts or currency. Exact decimal strings; no external calls, accounting certification or payment decision. EOA EIP-712 payments only; ERC-1271/6492 unsupported. MCP body max 64 KiB. Experimental price; input facts are not authenticated.

Parametersinvoicesrequired

migration_compare

[PAID $0.010 USDC/call, x402, eip155:8453] Compare two supplied JSON exports using unique string key fields. Report additions, removals and changed fields, keeping missing/null/boolean/number distinct. No database access or writes; source export completeness is not established. EOA EIP-712 payments only; ERC-1271/6492 unsupported. MCP body max 64 KiB. Experimental price; input facts are not authenticated.

Parametersafterrequiredbeforerequiredkey_fieldsrequiredcompare_fields

incident_timeline

[PAID $0.005 USDC/call, x402, eip155:8453] Order up to 1000 supplied agent events in UTC, preserve undated events, remove identical retransmissions and reject conflicting event IDs. Evidence links are references only; chronology does not establish causality or clock accuracy. EOA EIP-712 payments only; ERC-1271/6492 unsupported. MCP body max 64 KiB. Experimental price; input facts are not authenticated.

Parameterseventsrequired

data_freshness_check

[PAID $0.003 USDC/call, x402, eip155:8453] Evaluate supplied observation timestamps against caller-declared TTL and the server clock, or an explicitly supplied historical reference. Return stale/within_declared_ttl/future_observation/unknown. Does not authenticate timestamps or establish underlying fact freshness. EOA EIP-712 payments only; ERC-1271/6492 unsupported. MCP body max 64 KiB. Experimental price; input facts are not authenticated.

Parametersas_ofrecordsrequired

field_provenance_check

[PAID $0.004 USDC/call, x402, eip155:8453] Inspect up to 1000 supplied product fields and sources: missing references, declared expiry, future or undated observations, and content identity hashes. References are never fetched; neither source origin nor support for a field value is authenticated. EOA EIP-712 payments only; ERC-1271/6492 unsupported. MCP body max 64 KiB. Experimental price; input facts are not authenticated.

Parametersas_offieldsrequiredsourcesrequired

quote_cost_normalize

[PAID $0.008 USDC/call, x402, eip155:8453] Normalize exact decimal quote amounts using supplied currency rates. Up to 1000 total line items. Missing shipping, tax or other costs stay unknown. Rank only complete quotes for identical supplied item-ID/quantity baskets; no rate verification, fiscal advice or order. EOA EIP-712 payments only; ERC-1271/6492 unsupported. MCP body max 64 KiB. Experimental price; input facts are not authenticated.

Parametersratesquotesrequiredbase_currencyrequired

renewal_cohort_check

[PAID $0.006 USDC/call, x402, eip155:8453] Compute UTC monthly cohorts and one declared renewal cycle per supplied subscription. Eligible at supplied due date plus grace; a matching confirmation is a declaration, never proof of collection. Up to 1000 subscriptions and 1000 events. No revenue, MRR, ARR or certain churn inferred. EOA EIP-712 payments only; ERC-1271/6492 unsupported. MCP body max 64 KiB. Experimental price; input facts are not authenticated.

Parametersas_ofrequiredeventsrequiredgrace_secondssubscriptionsrequired

api_contract_diff

[PAID $0.005 USDC/call, x402, eip155:8453] Diff two supplied OpenAPI 3.0.x/3.1.x documents: operations, parameters, response codes and a listed inline JSON-schema subset. At most 1000 operations/document, 12 schema levels and 4000 compared schema nodes. Unresolved references and excluded semantics remain explicit; no compatibility certification or deployed API verification. EOA EIP-712 payments only; ERC-1271/6492 unsupported. MCP body max 64 KiB. Experimental price; input facts are not authenticated.

Parametersafterrequiredbeforerequired

Version history

2
  1. v1.1.0LatestOct 25, 2026
  2. v1.0.0Oct 23, 2026

Score

100% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts