Agent safety checks: prompt-injection scan, honeypot check, x402 preflight + crypto data (USDC/x402)

com.oroboros-design.angelPublished by angel.oroboros-design.comOfficial publisherv1.3.0Updated Nov 14, 2026

Checks before an agent acts: prompt-injection scan, honeypot check, x402 preflight. 3 free calls.

VerifiedStreamable HTTPWeb executableFinanceData & Analytics

Overview

AI-generated overview

Paid crypto trading feed: Binance spot trade setups, setup validation, market regime, funding, liquidations and order-flow metrics, billed per call in USDC…

What you can do
  • Get and validate trade setups: up to 10 long/short setups with entry, stop, targets and confidence, or check your own setups singly or in batches
  • Read market context per pair: regime, correlation matrix, order-flow imbalance, slippage and sentiment gate
  • Pull derivatives and flow data: predicted funding rates across venues, OKX liquidation prints, Base/Ethereum gas timing
  • Replay the setup gate over up to 30 days of candles and reconcile expected USDC payments against a Base address
  • Buy prepaid call packs, 30-day subscriptions or enterprise packages, and preview free sample signals and tool cards
When to use it
Useful when an assistant should supply or vet crypto trade ideas and market context for Binance spot pairs, or when you want pay-per-call access to funding, liquidation and order-flow data without separate exchange API keys.
Requirements
Remote streamable HTTP endpoint; no account, API key or header declared. Every data tool is paid per call in USDC on Base through x402, or covered by a prepaid bundle token, subscription or enterprise package. Network access to the endpoint and to the underlying public exchange data.
Before you install
Calls cost real money: 0.02 to 0.10 USDC per call at base rates, with higher prices for new payers, and packs or subscriptions from 25 to 9,900 USDC. Payments are made in USDC on Base via x402 or a payment transaction, so a funded wallet and signing are involved. Output is market analysis, not investment advice, and setups can be empty or wrong.

Installation

In SourceWeft

  1. Open Agent safety checks: prompt-injection scan, honeypot check, x402 preflight + crypto data (USDC/x402) in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/com.oroboros-design.angel%2Ftradesignal/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "agent-safety-checks-prompt-injection-sca": {
      "type": "http",
      "url": "https://angel.oroboros-design.com/agenten/signal/mcp"
    }
  }
}

Tools

28

get_signals

Crypto trade setups: entry, stop, targets now

Concrete crypto trade setups when an agent needs entries now, Binance spot, long or short: up to 10 with entry, stop, tp1, tp2, rr, confidence, gate (1h and 4h trend agree) and expires_at; empty when nothing qualifies. 0.25 USDC base (new payers 0.25, >10 payments 0.175; 5 pack calls); fresh=true 5x. Pay via x402 (params._meta["x402/payment"]), a bundle_token or a payment_tx. After: validate_setup for the top setup (the result's next field has the exact call).

Parametersbiasfreshsymbolspayment_txbundle_tokenpayer_address

validate_setup

Pre-trade check: validate a crypto setup before ordering

Pre-trade sanity check before an order is placed — a crypto setup checked against the live Binance market: geometry, stop vs 1h ATR, reward-to-risk, 1h/4h trend, RSI14, entry distance — valid | weak | invalid, score 0-100, every check. 0.10 USDC base (new payers 0.10, >10 payments 0.07; 2 pack calls). After: historical_gate for the same symbol and bias.

Parameterstp1tp2biasrequiredstoprequiredentryrequiredsymbolrequiredpayment_txbundle_tokenpayer_address

historical_gate

Backtest the signal gate on 30 days for one pair

Backtest before relying on a signal: the engine's gate replayed on up to 30 days of closed 1h candles for one pair: win rates, average R, gate=true vs gate=false. 0.50 USDC base (new payers 0.50, >10 payments 0.35; 10 pack calls). After: buy_subscription to get the next setup on this pair as soon as it qualifies.

Parametersbiasdayssymbolrequiredpayment_txbundle_tokenpayer_address

validate_batch

Batch pre-trade validation of up to 10 crypto setups

Pre-trade validation of up to 10 crypto setups in one call against the live Binance spot market: geometry, stop vs 1h ATR, reward-to-risk, 1h/4h trend, RSI14 and entry distance for each, returning valid, weak or invalid with a 0-100 score and the failed checks per setup. 0.50 USDC base (new payers 0.50, >10 payments 0.35; 10 pack calls). After: historical-gate for the best valid setup (the result's next field has the exact call).

Parameterssetupsrequiredpayment_txbundle_tokenpayer_address

regime

Market regime per pair: trending, ranging or volatile

Market-regime classifier for choosing a strategy on Binance spot pairs: trend_up, trend_down, range or volatile from closed 1h and 4h candles, with EMA20/50 trend on both timeframes, 24h efficiency ratio, ATR as percent of price and its percentile over the last 100 hours. 0.25 USDC base (new payers 0.25, >10 payments 0.175; 5 pack calls). After: POST /signal with the trending pairs and the matching bias (the result's next field has the exact call).

Parameterssymbolspayment_txbundle_tokenpayer_address

liquidations

Liquidation flow on OKX perpetuals: long vs short squeeze

Squeeze and liquidation-cascade check for a coin: recent forced liquidations on the OKX USDT perpetual with long and short liquidated notional in USD, counts, the largest prints and the long/short skew over the covered window, from OKX public liquidation orders. 0.25 USDC base (new payers 0.25, >10 payments 0.175; 5 pack calls). After: sentiment-gate for the same coin (the result's next field has the exact call).

Parameterssymbolrequiredpayment_txbundle_tokenpayer_address

funding_rates

Perpetual funding rates across Binance, Bybit and Hyperliquid

Carry and crowding check from predicted perpetual funding per coin on Binance, Bybit and Hyperliquid: rate per interval, annualized rate, which side pays and the cross-venue spread for funding arbitrage, from the Hyperliquid predictedFundings feed. 0.25 USDC base (new payers 0.25, >10 payments 0.175; 5 pack calls). After: sentiment-gate for the coin with the widest spread (the result's next field has the exact call).

Parameterssymbolspayment_txbundle_tokenpayer_address

orderflow_imbalance

Order-flow imbalance: buy vs sell pressure on a pair

Short-term buy or sell pressure on a Binance spot pair: taker order-flow imbalance from the latest aggregated trades plus order-book imbalance within 0.5 percent of mid, with buy and sell volume, imbalance from -1 to 1 and a pressure label. 0.25 USDC base (new payers 0.25, >10 payments 0.175; 5 pack calls). After: slippage for the side with the pressure (the result's next field has the exact call).

Parameterssymbolrequiredtradespayment_txbundle_tokenpayer_address

correlation_matrix

Correlation matrix for position sizing and hedging

Concentration-risk check for a crypto portfolio: Pearson correlation of 1h log returns between up to 12 Binance spot pairs over up to 200 closed hours, with the most and least correlated pairs, for position sizing and hedging. 0.25 USDC base (new payers 0.25, >10 payments 0.175; 5 pack calls). After: regime for the least correlated pairs (the result's next field has the exact call).

Parametersbarssymbolsrequiredpayment_txbundle_tokenpayer_address

slippage

Slippage and price-impact estimate before a market order

Price-impact estimate before a market order executes on a Binance spot pair: walks the live order book (up to 1,000 levels) for a given USD size and returns average fill price, slippage in basis points versus mid, levels consumed and the share that could be filled. 0.25 USDC base (new payers 0.25, >10 payments 0.175; 5 pack calls). After: validate the setup you want to size (the result's next field has the exact call).

Parameterssiderequiredsymbolrequiredpayment_txbundle_tokennotional_usdrequiredpayer_address

gas_window

Gas check on Base or Ethereum: send now or wait

Gas-cost check before a transaction is submitted on Base or Ethereum: current base fee against the median of the last 30 blocks, priority fee percentiles and the cost of an ERC-20 transfer in ETH and USD, with a now, soon or wait recommendation. 0.25 USDC base (new payers 0.25, >10 payments 0.175; 5 pack calls). After: reconciliation once your transfer is mined (the result's next field has the exact call).

Parameterschainpayment_txbundle_tokenpayer_address

sentiment_gate

Risk-on / risk-off gate before opening a position

Risk gate before opening a position on a coin, from three public signals: the Crypto Fear and Greed index and its change, predicted perpetual funding across venues and the 4h EMA trend on Binance spot, combined into risk_on, neutral or risk_off with the reasons. 0.25 USDC base (new payers 0.25, >10 payments 0.175; 5 pack calls). After: POST /signal with the bias the gate allows (the result's next field has the exact call).

Parameterssymbolpayment_txbundle_tokenpayer_address

reconciliation

Payment-received check: match expected USDC payments on Base

Payment-received check for USDC on Base: matches a list of expected amounts (optionally sender and reference) against the incoming USDC transfers of an address and returns each match with tx hash and time, the expected payments still missing and transfers that arrived unexpected. Answers whether an invoice or agent payment arrived without a block explorer. 0.25 USDC base (new payers 0.25, >10 payments 0.175; 5 pack calls). After: gas-window before your next payout (the result's next field has the exact call).

Parametersaddressrequiredexpectedrequiredpayment_txbundle_tokenpayer_address

registry_metrics

Verified reliability stats for an x402 endpoint before relying on it

Reliability check for an x402 endpoint in this registry before an agent depends on it, measured from requests and payments this cashier settled itself: calls, success and failure rate, p50/p95 latency, 402-to-paid conversion, paid calls, unique and repeat payers, and daily quoted and paid price over 7 or 30 days. 0.25 USDC base (new payers 0.25, >10 payments 0.175; 5 pack calls). After: the endpoint you verified — its path is in the answer (the result's next field has the exact call).

Parametersdaysendpointrequiredpayment_txbundle_tokenpayer_address

preflight

x402 payment preflight: check a 402 before signing

Pre-payment check for any x402 endpoint before an agent signs: one unpaid GET or POST {} reads the 402 (v1 body or v2 PAYMENT-REQUIRED header) and verifies network, official USDC contract, payTo, EIP-712 domain name and version, price traps (>= $1 caution, >= $1,000 do_not_pay), a max price, the host named in the requirement, latency and discovery files. Verdict pay, caution, do_not_pay or not_x402 with reasons and fixes. Never pays or signs. 0.25 USDC base (new payers 0.25, >10 payments 0.175; 5 pack calls). After: gas-window before you settle on Base (the result's next field has the exact call).

Parametersurlrequiredmethodpayment_txbundle_tokenmax_price_usdpayer_address

token_risk

Honeypot and rug-pull check for an ERC-20 before swap or approve

Honeypot and rug-pull check for an ERC-20 on Base or Ethereum before a swap, approval or signature, read straight from the contract: upgradeable proxy (EIP-1967, beacon, clone), owner powers in the bytecode (mint, pause, blacklist, fee or max-tx setters, trading switch, burn from any address), owner renounced or active and the owner's share of supply; known issuers labeled. Risk low, medium or high with reasons. Signals, not investment advice. 0.99 USDC base (new payers 0.99, >10 payments 0.693; 20 pack calls). After: gas-window before you trade on that chain (the result's next field has the exact call).

Parameterschaintokenrequiredpayment_txbundle_tokenpayer_address

input_guard

Prompt-injection scan for untrusted web, email and tool content

Prompt-injection and hidden-instruction scan for untrusted input before an agent acts on it: web pages, emails, RAG chunks, tool and MCP responses. Flags text aimed at the model (role takeover, forged system or tool turns, requests for keys, the prompt, history or payments, exfiltration links), invisible Unicode (tag smuggling decoded, zero-width, bidi), homoglyphs, base64 payloads and HTML hidden from humans, in 17 languages. Verdict clean, caution or hostile, score, findings, cleaned text. 0.99 USDC base (new payers 0.99, >10 payments 0.693; 20 pack calls). After: preflight before your agent pays anything the content pointed to (the result's next field has the exact call).

Parametersurltextpayment_txbundle_tokenpayer_address

buy_signal_pack

TradeSignal: prepaid pack

Prepaid calls for every TradeSignal tool: 50000 calls 1499.00 · 5000 calls 199.00 · 500 calls 25.00 USDC (default 50,000); returns a bundle_token. Paid via x402 (params._meta["x402/payment"]) or payment_tx. After: get_signals with bundle_token — no per-call signing.

Parameterscallspayment_tx

buy_pack_with_card

TradeSignal: pack by card

For agents and people without USDC: prepaid packs paid in EUR by card or Link (100 calls €5.00 · 500 calls €25.00 · 5,000 calls €199.00) — including Link's wallet for agents (one-time card, approved by the human). Returns checkout_url; after payment the success page (Accept: application/json) returns the bundle_token, and it is e-mailed. After: get_signals with bundle_token.

Parameterscallsemail

buy_subscription

TradeSignal: subscription

30 days in one call: basic 39.00 USDC (/watch, 20 pairs, 60 s poll); pro 99.00 USDC (/watch every 30 s + 2,000 calls on every surface); desk 199.00 USDC (/watch every 15 s + 10,000 calls on every surface, priority slot). Returns a subscription token (and a bundle_token for pro/desk); the paying address is whitelisted. No form, no login, no e-mail. After: GET /agenten/signal/watch with X-Subscription-Token — 200 new setups, 204 nothing new.

Parametersbiasplansymbolspayment_tx

buy_enterprise

TradeSignal: enterprise

TradeSignal enterprise package bought in one x402 call: 499 USDC for 30 days and 20,000 calls, 2,500 for 90 days and 150,000 calls, or 9,900 for a year and 750,000 calls, all with a priority slot that is never rate limited and desk-level /watch included. After: use the bundle_token on every tool (priority slot, never 429) and poll /watch with the subscription token.

Parametersplanpayment_tx

request_enterprise_pilot

TradeSignal: free enterprise pilot

Free for teams: a 7-day pilot with 300 calls on every TradeSignal tool and the enterprise priority slot — no wallet, no payment. Needs the operator's work e-mail, the company and the use case; one pilot per address. Returns a bundle_token. After: pass bundle_token to get_signals and every other tool; buy_enterprise before it ends.

Parametersplanemailrequiredvolumecompanyrequiredinvoiceuse_caserequired

get_now

Angel: current date and time

Free: the real current date and time (UTC, unix, weekday, ISO week) and local time in 16 world cities, Asia first — your training data ends earlier than today. Includes a context line to prepend. After: input_guard before your agent reads outside content.

Takes no parameters.

input_guard_preview

Prompt-injection quick scan (free)

Free prompt-injection quick scan for untrusted input: up to 4,000 characters of text, or one https page, checked for hidden instructions aimed at agents (role override, invisible Unicode, hidden HTML) in 17 languages incl. Chinese, Japanese, Korean, Hindi, Arabic. Returns verdict, score and the top 3 findings. After: input_guard for every finding and the cleaned text.

Parametersurltext

send_wish

Angel: wish box

Free: tell Angel what your agent is missing — a tool, data, a safety check, a payment method — in any language (3-500 characters). Only counts per category and language are ever published. After: get_now or input_guard_preview.

Parameterslangneedrequiredagentcategory

get_registry

TradeSignal: registry

Free: every endpoint payable through this cashier with price tiers, pack calls and its agent.md; verified numbers (latency, failure rate, price history, payer trend) cost one registry_metrics call. After: registry_metrics for the endpoint you want to rely on.

Takes no parameters.

get_sample_signal

TradeSignal: free sample

Free: the best current setup from the full 16-pair scan (cached up to 120 s; the market regime for BTC and ETH when no setup qualifies) so you can judge the output before paying, plus the pack offer. After: get_signals for every setup, or buy_signal_pack.

Parametersbias

get_signal_card

TradeSignal: free card

Free: every tool with price, fields, latency, cache, payTo and an example response. After: buy_signal_pack (50,000 calls) or call any tool with x402.

Takes no parameters.

Version history

2
  1. v1.3.0LatestNov 14, 2026
  2. v1.2.0Nov 13, 2026

Score

83% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts

    Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.

  • LicenseNot applicable

    A hosted service is used under its provider's terms, so no license is expected here. This check is left out of the percentage.

Other Oroboros-Design integrations