Agent Risk Desk

io.github.soldanoandreaPublished by GitHub account soldanoandreav0.2.0Updated Nov 1, 2026

EVM address enrichment, counterparty risk and tx screening for agents, paid per call in USDC (x402)

VerifiedStreamable HTTPWeb executableFinanceSecurity & MonitoringBusiness & Commerce

Overview

AI-generated overview

Remote MCP server that profiles EVM addresses, screens counterparty risk on EVM and NEAR, verifies NEAR Allowance receipts and explains transactions, paid per…

What you can do
  • Profile an EVM address on Base, Ethereum, OP Mainnet or Arbitrum: account type, age, balances, verified source, proxy details and labels
  • Get an allow, warn or block counterparty-risk verdict for an EVM address or a NEAR account, covering sanctions lists, account age and contract code
  • Verify a seller-side NEAR Allowance vault receipt against a request hash, payee, amount and asset at final finality
  • Explain an EVM or NEAR transaction in plain language: status, transfers, approvals, fee and per-counterparty risk
  • List the paid tools with their prices, payment network and asset, and endpoints
When to use it
Useful when an agent must decide whether to pay, approve or trust an address or account, or when a seller needs to confirm a NEAR payment before delivering. Also handy for quickly understanding what a transaction actually did.
Requirements
Runs as a remote streamable HTTP endpoint; no local package, account or API key is declared. Paid tools require USDC on Base per call through x402, with payment passed in the MCP request metadata; network access is needed.
Before you install
Most tools cost USDC on Base per call, so usage spends real money; check prices with the free list_services tool first. Risk verdicts and labels come from third-party sources such as the OFAC SDN list and the Chainalysis sanctions oracle, so treat them as advisory rather than authoritative.

Installation

In SourceWeft

  1. Open Agent Risk Desk in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.github.soldanoandrea%2Fagent-risk-desk/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "agent-risk-desk": {
      "type": "http",
      "url": "https://x402-services.soldano.workers.dev/mcp"
    }
  }
}

Tools

6

enrich_evm_address

EVM address enrichment

Profile of an EVM address on Base, Ethereum, OP Mainnet or Arbitrum in one call: EOA, contract or EIP-7702 account, age, transactions sent, native and major token balances (USDC, USDT, EURC, DAI, WETH, BTC), Sourcify-verified source and name, proxy and implementation, token metadata, labels (OFAC SDN, Chainalysis oracle, known issuers) and a risk verdict with reasons. Useful to know who an address is before paying, listing or trusting it. Price: $0.01 USDC per call (x402).

Parameterschainaddressrequired

counterparty_risk_evm

EVM counterparty risk

Counterparty-risk verdict (allow, warn or block, with reasons) for an EVM address on Base, Ethereum, OP Mainnet, Arbitrum or Base Sepolia, for use before paying, approving or trusting it. Checks the OFAC SDN list and the Chainalysis sanctions oracle, account age, EOA or contract, EIP-7702 delegation, upgradeable proxies and code changes in the last 72 h, and token controls (mint, blacklist, pause, fees, owner). Price: $0.02 USDC per call (x402).

ParameterschainrequiredaddressrequiredminAgeDayscodeWindowHours

counterparty_risk_near

NEAR counterparty risk

Counterparty-risk verdict (allow, warn or block, with reasons) for a NEAR account, for use before paying it. Checks the OFAC SDN list and operator deny-lists, whether the account exists, its age, its contract code and code changes in the last 72 h, global contracts whose publisher can change them, and, with an Allowance vault, the vault denylist and payment history. Price: $0.02 USDC per call (x402).

ParametersvaultaccountrequirednetworkminAgeDayscodeWindowHours

verify_allowance_receipt

Allowance receipt verification (NEAR)

Seller-side check that an Allowance vault receipt on NEAR paid a given account at least a given amount, bound to the seller request hash, at final finality. Returns valid or the reason (not paid yet, wrong payee, amount, asset or request, unknown receipt, not a vault) and the vault code hash read at the same block. Price: $0.005 USDC per call (x402).

ParametersassetnoncepayeerequiredvaultrequirednetworkminAmountrequiredreceiptIdrequiredrequestHash

screen_transaction

Transaction screening

Plain-language explanation of an EVM or NEAR transaction: status, method, native and token transfers, approvals (unlimited ones flagged), fee, and a risk verdict for each counterparty, with a one-line summary. Covers Base, Ethereum, OP Mainnet, Arbitrum, Base Sepolia and NEAR. Useful to check what a payment or approval really did. Price: $0.04 USDC per call (x402).

ParameterschainrequiredsendertxHashrequired

list_services

List services and prices

Free. Lists the paid tools of this server with their prices, the payment network and asset, and the HTTP endpoints.

Takes no parameters.

Version history

1
  1. v0.2.0LatestNov 1, 2026

Score

83% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts

    Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.

  • LicenseNot applicable

    A hosted service is used under its provider's terms, so no license is expected here. This check is left out of the percentage.