7702 Sweeper Check

io.github.devx-agentPublished by GitHub account devx-agentv1.1.0Updated Oct 30, 2026

Free read-only EIP-7702 delegation / wallet-sweeper check for EVM addresses on 8 chains

The publisher's own server: check.tattoo: tattoo size and placement guide

VerifiedStreamable HTTPWeb executableFinanceSecurity & Monitoring

Overview

AI-generated overview

Checks whether an EVM address has an EIP-7702 delegation (possible wallet sweeper) across 8 chains, and explains how to buy a paid full report.

What you can do
  • Check an EVM address for an EIP-7702 delegation across Ethereum, Base, BNB Chain, Arbitrum, OP, Polygon, Gnosis and Unichain, returning delegate addresses.
  • Get a link and instructions for the paid full report, which adds bytecode heuristics, source verification, a risk level and advice.
  • Read-only lookups: the free check reads contract code and nonce per chain and never touches keys.
When to use it
Useful when you want a quick, free sanity check on whether a wallet has contract code attached via EIP-7702, for example after a suspected drainer signature or before trusting an address. The paid report is for a deeper heuristic risk assessment.
Requirements
Remote endpoint over streamable HTTP, or a local stdio process via the npm package devx-7702-check with Node.js (npx). No authentication, environment variables or headers are declared. The paid report requires an x402 payment client and USDC on Base.
Before you install
The paid full report costs 0.01 USDC per call via x402 and is charged after the report is produced; the info tool itself does not pay. Detection is heuristic, not a guarantee. If an unexpected delegation appears, the README advises treating the key as compromised and moving funds to a new wallet.

Installation

In SourceWeft

  1. Open 7702 Sweeper Check in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.github.devx-agent%2F7702-sweeper-check/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "7702-sweeper-check": {
      "type": "http",
      "url": "https://sweeper-check.nextill-pos.workers.dev/mcp"
    }
  }
}

README

7702 Sweeper Check

Does your EVM wallet have an EIP-7702 delegation you didn't set?

Since Ethereum's Pectra upgrade, one signature can attach contract code to an ordinary wallet (EIP-7702). Smart-wallet upgrades use this legitimately. Drainers use it to install sweepers: tiny contracts that forward anything sent to your wallet straight to the attacker.

This project checks 8 chains at once: Ethereum, Base, BNB Chain, Arbitrum, OP, Polygon, Gnosis and Unichain.

  • Web (free): https://sweeper-check.nextill-pos.workers.dev
  • CLI (free): npx devx-7702-check 0xYourAddress
  • MCP server for AI agents (free): remote https://sweeper-check.nextill-pos.workers.dev/mcp, or local npx devx-7702-check mcp
  • JSON API (free): GET /api/basic?address=0x...
  • Full report (paid, 0.01 USDC on Base via x402): GET /v1/check?address=0x..[,0x..], 1–20 addresses per call. It adds:
    • a delegate bytecode heuristic (a small contract with a hard-coded forwarding address = the sweeper shape);
    • source-verification status (Sourcify / Blockscout);
    • a risk level and what to do. You're charged only after the report is produced. Humans can pay with a browser wallet on the web page: you sign one USDC authorization and pay no gas.

Read-only. It never asks for or touches private keys or seed phrases.

How detection works

A 7702-delegated account's code is exactly 0xef0100 ‖ <20-byte delegate address>. The free check reads eth_getCode and the nonce on each chain. The paid report then fetches the delegate's bytecode and walks the opcodes (skipping PUSH data):

  • PUSH20 constants other than your own address and the ERC-4337 EntryPoints, combined with CALL, in a contract under 1.2 KB → high (sweeper pattern).
  • SELFBALANCE + CALL + a hard-coded address → medium.
  • Verified source or ERC-4337 smart-account shape → low.
  • Otherwise → medium/unknown.

These are heuristics, not guarantees. If a delegation you didn't create shows up, treat the key as compromised and move funds to a new wallet made on a clean device. Re-delegating to 0x0 doesn't help if an attacker holds the key.

CLI

npx devx-7702-check 0xabc... 0xdef...    # exit code 0 = none, 2 = delegation found, 1 = errornpx devx-7702-check 0xabc... --json

MCP

Claude Desktop / Cursor config:

json
{ "mcpServers": { "7702-sweeper-check": { "url": "https://sweeper-check.nextill-pos.workers.dev/mcp" } } }

or stdio: { "command": "npx", "args": ["-y", "devx-7702-check", "mcp"] }

Tools: check_7702_delegation(address), full_report_info().

x402 (agents)

GET /v1/check?address=... returns 402 with a PAYMENT-REQUIRED header (x402 v2, scheme exact, network eip155:8453, USDC 0x8335…2913, amount 10000 = 0.01 USDC). Pay with any x402 client. Discovery: /.well-known/x402.json, /openapi.json. Terms: /terms.

Layout

  • worker/: Cloudflare Worker source (page, free API, x402 paid route, remote MCP)
  • cli/: the npm package devx-7702-check (CLI + stdio MCP server)

Made by DevX. MIT.

Guide

Source: README.md at commit ea30287

Tools

2

check_7702_delegation

Free, read-only: is an EIP-7702 delegation (possible wallet sweeper) set on this EVM address on Ethereum, Base, BNB Chain, Arbitrum, OP, Polygon, Gnosis, Unichain? Returns delegate addresses and a link to the paid full report (0.01 USDC via x402).

Parametersaddressrequired

full_report_info

How to buy the full sweeper report (bytecode heuristic, source verification, risk, advice) via x402. Does not pay.

Takes no parameters.

Version history

2
  1. v1.1.0LatestOct 30, 2026
  2. v1.0.0Oct 30, 2026

Score

100% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts

Other Check integrations

check.tattoo: tattoo size and placement guide

tattoo.checkOfficial publisher

check.tattoo: tattoo size and placement guide's hosted MCP server, published by check.tattoo; no sign-in required; Streamable HTTP; 5 tools.

Streamable HTTPWeb executable
5 toolsOct 24, 2026

iva.pt — EU VAT check (VIES) and Portuguese VAT law

pt.ivaOfficial publisher

Validates EU VAT numbers against VIES and returns Portuguese VAT Code (CIVA) and RITI articles, in Portuguese or English.

Streamable HTTPWeb executable
Business & Commerce4 toolsOct 30, 2026

Dirtsmith Evidence Quote Check

Published by GitHub account throttler300

A local MCP server that binds an assistant's citations to admitted source text with spans and can reject stale-hash references.

STDIODesktop only
Knowledge & MemoryNot validated yetNov 7, 2026

HTTP Header Policy Check — HSTS, CSP & Frame Declarations

Published by GitHub account kriton-dev

Remote Apify-hosted MCP server that lets an assistant check seven declared HTTP security header families on a site, without returning raw header values.

Streamable HTTPWeb executableAuth
Security & MonitoringCredential requiredNov 7, 2026

VOOPA Render Check

Published by GitHub account Voopa-Corp

Reviews a completed AI-generated video against its brief and recommends whether to edit, retry once, or change approach before paying for another render.

Streamable HTTPWeb executable
AI & ML2 toolsNov 7, 2026