io.github.dainidudePublished by GitHub account dainidudev0.1.0Updated Nov 14, 2026
Pay-per-call smart-contract security: scans, tx simulation, and token risk via x402 (USDC on Base).
The publisher's own server: Preflight
Remote MCP server that gives an assistant pay-per-call smart-contract security checks: Solidity scans, transaction simulation and token risk verdicts.
Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.
Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.
Read https://sourceweft.com/mcp/io.github.dainidude%2Fpreflight/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.Add this to your client's mcpServers config.
{
"mcpServers": {
"preflight": {
"type": "http",
"url": "https://preflight--preflight-api-mcp.modal.run/mcp"
}
}
}Pay-per-call security scans and transaction simulations for AI agents.
POST Solidity source or a transaction, receive a severity-scored,
EIP-712-attested verdict: looks_ok | review | block.
Payments over the x402 protocol (HTTP 402 + real USDC on Base mainnet).
Built from the product plan in dud3-vault/LLM/2026-11-08 - x402 Product Plans.md
by hermes + omp + crush + opencode in a 4-pane Herdr session.
First 10 scans/day per client are free (funnel). 10 req/min per payer.
x402 package v2 — exact scheme, USDC, Base mainnet (CDP facilitator with KYT/OFAC);
facilitator verifies + settles; server never holds custody.(source_sha256, verdict, findings_root) — buyers can prove what we said.eth_call simulation; verdicts are reproducible.AGENTS.md — ownership map & interface contractdocs/LAUNCH.md — launch checklist, tunnel, mainnet flip, operating notesdocs/STATUS_*.md — per-area build reportsSource: README.md at commit 65594af
Scan Solidity source and return a security verdict. This is a paid call ($0.01 USDC on Base mainnet) that flows through x402; in dev mode (DEV_MODE=1) no payment is required.
sourcerequiredcontract_nameSimulate a transaction against a contract and return revert reason, gas used, balance deltas, and severity-scored findings. mode='quick' costs $0.05 (eth_call); mode='deep' costs $0.25 (anvil local fork with gas, balance_delta_wei, and internal_calls). Paid in USDC on Base mainnet via x402; DEV_MODE=1 skips payment.
torequireddatamodevalue_weiCheck a token contract before trading it. Returns a honeypot transfer verdict, transfer tax percentage, and owner privileges as a severity-scored ScanReport. Paid call ($0.05 USDC on Base mainnet) via x402; DEV_MODE=1 skips payment.
addressrequiredReturn the Preflight service info and price list (free).
Takes no parameters.
100% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
social.preflightOfficial publisher
Hosted social media scheduling server that lets an assistant draft, rule-check, schedule and publish posts to 12 networks.
Published by GitHub account anytine123
Local MCP server that helps an agent draft, review and accept CSV contract templates, then buy and summarize a paid CSV validation report.
Published by GitHub account base-buzz
A local stdio MCP server that checks an x402 PaymentRequired payload against a JSON spending policy and returns pay, review, or do_not_pay before an agent pays.
Published by GitHub account showflexinc
Remote preflight service that checks the structure of SQLite table-rebuild copy maps before a rebuild is run.
Published by GitHub account Wolfe-Jam
Checks an MCP Registry listing before publishing: README mcp-name line, server.json rules, server name and namespace login.
# no wallet needed (server DEV_MODE=1):uv run uvicorn preflight.api.app:app --port 8000 &uv run python client/pay_client.py --dev
# real x402 payment (funded burner, $0.01):uv run python client/pay_client.py
# the handshake, by hand:curl -i -X POST http://127.0.0.1:8000/v1/scan -H 'Content-Type: application/json' \ -d '{"source":"contract A {}"}'# → 402, PAYMENT-REQUIRED header (base64 JSON requirements)# → retry with PAYMENT-SIGNATURE header → verdict + PAYMENT-RESPONSEclient/pay_client.py paying demo agent (402 → x402.client pay → retry)src/preflight/ core/ pipeline (solc+Slither), custom detectors, scoring, simulation (RPC eth_call + revert decoding) api/ FastAPI app, real x402 middleware (x402 pkg, x402.org facilitator), cache (source-hash LRU), ratelimit, metrics mcp/ MCP server: preflight_check, preflight_sim, preflight_pricingpublic/ llms.txt + .well-known/x402.json (discovery)uv run pytest tests/ -m "not network" # offline suiteuv run pytest tests/ -m network # live-RPC + real paid flows (spends test USDC)