Diogenes Web3, DeFi & 402 Security MCP

io.github.stand-out-of-my-sunPublished by GitHub account stand-out-of-my-sunv1.0.0Updated Oct 26, 2026

Smart contract audit oracles, Solana risk analysis, MEV defense & HTTP 402 verifiers.

The publisher's own server: Web3TV MCP Server

VerifiedStreamable HTTPWeb executableFinance Developer Tools Security & Monitoring

Server details

Identifier: io.github.stand-out-of-my-sun/diogenes-web3-security-mcp
Transport: Streamable HTTP
Runtime: Web executable
Trust: Verified
Published: Oct 20, 2026

Security note

MCP servers receive tool arguments from a conversation and may perform external actions. Review what a server can do before you enable it, and give it only the access it needs.

The registry verified the GitHub account stand-out-of-my-sun for this listing. That does not show the account is the product's maker.

SourceWeft's checks cover whether the listing is complete and the endpoint answered; they do not review the server's code or what its tools do.

Add a badge to your README

Show readers this MCP server is listed on SourceWeft. The badge links to this page.

[![Listed on SourceWeft](https://sourceweft.com/badge/mcp/io.github.stand-out-of-my-sun%2Fdiogenes-web3-security-mcp.svg)](https://sourceweft.com/mcp/io.github.stand-out-of-my-sun%2Fdiogenes-web3-security-mcp?utm_source=readme&utm_medium=badge)

Overview

AI-generated overview

Remote MCP endpoint for Web3 security checks: smart contract audits, Solana token risk, MEV, address poisoning, HTTP 402 and Bitcoin fee tools.

What you can do: Audit smart contract source and Solana programs for honeypots, hidden mints, reentrancy and CPI privilege bugs
Assess Solana SPL tokens: mint and freeze authority, holder concentration, whale flows, liquidity metadata
Decode and simulate EVM transactions and EIP-712/Permit2 approvals; evaluate DEX MEV sandwich risk and slippage
Check recipient addresses for poisoning and lookalike spoofing; verify HTTP 402 payment challenges
Estimate Bitcoin mempool fees, plan UTXO consolidation, convert spot rates and compare cross-chain bridge routes
When to use it: Useful when an assistant helps review smart contracts or Solana tokens before trading, checks calldata or permit payloads before signing, or needs fee, MEV and payment-challenge context for on-chain transactions.
Requirements: A remote streamable HTTP endpoint; no local runtime, account or API key is declared. The README says demo previews are free, while production calls are settled per request via L402, x402 or MPP payment headers.

Before you install

Production calls are paid per request in sats or USDC, so an assistant could spend money if it calls them without limits. Payment credentials are supplied through L402, x402 or MPP headers. Audit and risk results are advisory and should not be treated as a guarantee of safety.

Installation

In SourceWeft

Open Diogenes Web3, DeFi & 402 Security MCP in the dashboard and add it to a workspace.
Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.github.stand-out-of-my-sun%2Fdiogenes-web3-security-mcp/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "diogenes-web3-defi-402-security": {
      "type": "http",
      "url": "https://diogenes-micro-gateway.corinth.workers.dev/mcp/web3-security"
    }
  }
}

README

Diogenes Web3, DeFi & HTTP 402 Security MCP (`diogenes-web3-security-mcp`)

[Indexed on TensorBlock MCP Index] [Glama MCP Server] [M8ven Score] [Master Gateway]

Diogenes Web3, DeFi & HTTP 402 Security MCP is a focused, zero-bloat Model Context Protocol (streamable-http) package powered by the Diogenes Microservice Gateway.

Instead of loading all 121 gateway endpoints into your LLM's context window, installing this package exposes only the 15 specialized web3-security tools needed for Blockchain & Web3:

15 Web3, DeFi & HTTP 402 security tools: EVM/Move contract auditor, Solana Anchor CPI scanner, SPL risk & liquidity inspectors, whale flow tracker, Jito fee estimator, EIP-712 & EVM calldata decoders, MEV evaluator, address-poisoning detector, 402 verifier, Bitcoin UTXO planner, and non-KYC bridge comparator.

⚡ 1-Click Install for Cursor & Claude Desktop

No API keys, user accounts, or local dependencies required. Zero setup — paste directly into your client config:

🖱️ Cursor IDE (`.cursor/mcp.json`)

Add to .cursor/mcp.json in your project root or global Cursor settings:

json

{  "mcpServers": {    "diogenes-web3-security": {      "transport": "streamable-http",      "url": "https://diogenes-micro-gateway.corinth.workers.dev/mcp/web3-security"    }  }}

{  "mcpServers": {    "diogenes-web3-security": {      "transport": "streamable-http",      "url": "https://diogenes-micro-gateway.corinth.workers.dev/mcp/web3-security"    }  }}

🧠 Claude Desktop (`claude_desktop_config.json`)

Add to claude_desktop_config.json (Mac: ~/Library/Application Support/Claude/claude_desktop_config.json | Windows: %APPDATA%\Claude\claude_desktop_config.json):

json

{  "mcpServers": {    "diogenes-web3-security": {      "transport": "streamable-http",      "url": "https://diogenes-micro-gateway.corinth.workers.dev/mcp/web3-security"    }  }}

{  "mcpServers": {    "diogenes-web3-security": {      "transport": "streamable-http",      "url": "https://diogenes-micro-gateway.corinth.workers.dev/mcp/web3-security"    }  }}

Prefer local stdio? Run via npx:

Included Tools in `web3-security` (15 Tools)

MCP Tool Name	Underlying REST Route	Settlement	Capability
`audit_smart_contract_code`	`POST /api/v1/agent/contract-audit`	250 sats (L402)	Statically audits Solidity, Vyper, or Move smart contract source code for honeypot transfer taxes, hidden mint backdoors, proxy upgrade traps, and reentrancy. Use when auditing smart contract source code or bytecode before deploying or interacting with a protocol; for scanning Solana Anchor/Rust programs specifically for Cross-Program Invocation (CPI) signer/account vulnerabilities, use scan_solana_cpi_reentrancy instead. Read-only edge call (32 KB, 60 RPM): accepts 'code_or_address' ('chain' defaults to 'evm_solidity'), uses '?demo=true' or L402 (250 sats); HTTP 400 if invalid.
`scan_solana_cpi_reentrancy`	`POST /api/v1/crypto/solana-cpi-reentrancy-scanner`	160 sats (L402)	Scans Solana Anchor and native Rust program instructions for unverified Cross-Program Invocation (CPI) program IDs, missing signer checks, and PDA bump seed canonicalization bugs. Use when auditing Solana Rust/Anchor source code or instruction account structs for CPI privilege escalation; for checking live SPL token mint/freeze authorities and rug-pull risk by mint address, use evaluate_solana_token_risk instead. Read-only edge call (32 KB, 60 RPM): accepts 'rust_source_or_idl' ('framework' defaults to 'anchor'), uses '?demo=true' or L402 (160 sats); HTTP 400 if invalid.
`evaluate_solana_token_risk`	`POST /api/v1/crypto/solana-risk`	100 sats (L402)	Evaluates Solana SPL and Token-2022 rug-pull risk by checking mint/freeze authorities, permanent delegates, transfer hooks, and returning reason codes with slot height. Use when making a pre-trade security decision on whether an SPL or Token-2022 mint is safe to trade; for DEX liquidity and metadata lookup via x402, use inspect_solana_token_liquidity instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'token_address' ('risk_profile' defaults to 'strict_decentralized'), supports '?demo=true' or L402 (100 sats), and returns HTTP 400 if invalid.
`inspect_solana_token_liquidity`	`POST /api/v1/x402/token-meta`	200 sats (x402)	Retrieves canonical Solana SPL token metadata including name, ticker symbol, decimal precision, and current mint/freeze authority addresses. Use when resolving SPL token decimals, ticker symbols, and registry metadata for portfolio or swap formatting; for computing a composite security risk score and binary should_transact verdict, use evaluate_solana_token_risk instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'mint' ('network' defaults to 'mainnet-beta'), supports '?demo=true' or x402 (200 sats), and returns HTTP 400 if invalid.
`track_solana_whale_flows`	`POST /api/v1/x402/whale-radar`	500 sats (x402)	Tracks 24-hour net accumulation or distribution flows across top Solana whale wallets and flags coordinated insider wallet clusters for a given SPL token. Use when analyzing on-chain smart-money order flow and holder clustering on Solana; for checking static SPL contract mint/freeze authority permissions, use evaluate_solana_token_risk instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'token' ('window' defaults to '1h'), supports '?demo=true' or x402 (500 sats), and returns HTTP 400 if invalid.
`estimate_solana_priority_fees`	`POST /api/v1/x402/solana-priority-fee-oracle`	50 sats (x402)	Calculates optimal Solana compute-unit (CU) microlamport priority fees and Jito bundle tip lamports to achieve target block-inclusion probability. Use when setting SetComputeUnitPrice and Jito tips before broadcasting a Solana transaction; for querying Bitcoin L1 sat/vB mempool fee rates, use estimate_bitcoin_mempool_fees instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'priority_level' ('tx_type' defaults to 'simple_transfer'), supports '?demo=true' or x402 (50 sats), and returns HTTP 400 if invalid.
`decode_eip712_permit_signature`	`POST /api/v1/crypto/eip712-permit-decoder`	100 sats (L402)	Decodes EIP-712 and Uniswap Permit2 off-chain typed-data payloads to verify spender identity, detect unlimited (uint256.max) token approvals, and flag expired deadlines. Use when inspecting an off-chain eth_signTypedData_v4 or Permit2 payload before signing; for decoding raw on-chain hex transaction calldata (0x...) for eth_sendTransaction, use simulate_evm_transaction_calldata instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'typed_data_json' ('chain_id' defaults to '1'), supports '?demo=true' or L402 (100 sats), and returns HTTP 400 if invalid.
`simulate_evm_transaction_calldata`	`POST /api/v1/crypto/simulate-evm-calldata`	90 sats (L402)	Decodes raw EVM hexadecimal transaction calldata (0x...) by 4-byte function selector to expose hidden ERC-20 approve/transferFrom calls, setApprovalForAll drains, and multicall bundles. Use when auditing raw hex transaction data (to, value, data) before broadcasting an on-chain EVM transaction; for inspecting off-chain EIP-712 JSON typed-data signatures, use decode_eip712_permit_signature instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'calldata_hex' ('network' defaults to 'base_mainnet'), supports '?demo=true' or L402 (90 sats), and returns HTTP 400 if invalid.
`evaluate_dex_mev_risk`	`POST /api/v1/crypto/mev-risk`	150 sats (L402)	Evaluates decentralized exchange (DEX) swap parameters against pool depth and mempool visibility to quantify MEV sandwich risk and compute optimal slippage tolerance in basis points. Use when configuring slippage tolerance and private-RPC routing before executing an on-chain DEX token swap; for comparing cross-chain bridge settlement routes across different L1 blockchains, use compare_crosschain_bridge_routes instead. Read-only edge call (32 KB, 60 RPM): accepts 'pair' ('execution_venue' defaults to 'uniswap_v3_public'), uses '?demo=true' or L402 (150 sats); HTTP 400 if invalid.
`detect_address_poisoning_scam`	`POST /api/v1/crypto/address-poisoning-check`	100 sats (L402)	Compares a target recipient wallet address against recent transaction history to detect vanity prefix/suffix lookalike spoofing and zero-value dusting attacks. Use when verifying a recipient EVM or Solana wallet address before sending funds; for decoding hex smart contract calldata payloads, use simulate_evm_transaction_calldata instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'target_address' ('address_standard' defaults to 'auto_detect'), supports '?demo=true' or L402 (100 sats), and returns HTTP 400 if invalid.
`verify_http402_payment_challenge`	`POST /api/v1/crypto/http402-challenge-verifier`	60 sats (L402)	Decodes inbound HTTP 402 Payment Required challenges (L402 BOLT11 + Macaroon, x402 Solana USDC, MPP Base intents) to verify cryptographic payment-hash binding and block overcharge fraud. Use when auditing a 402 challenge header before an autonomous agent pays a Lightning invoice or USDC transfer; for checking on-chain Bitcoin L1 mempool feerates, use estimate_bitcoin_mempool_fees instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'www_authenticate' ('protocol_hint' defaults to 'L402'), supports '?demo=true' or L402 (60 sats), and returns HTTP 400 if invalid.
`estimate_bitcoin_mempool_fees`	`POST /api/v1/mempool-fee`	50 sats (L402)	Fetches real-time Bitcoin mainnet mempool feerate recommendations in satoshis per virtual byte (sat/vB) across fastest, half-hour, hour, and economy confirmation tiers. Use when checking current Bitcoin L1 network congestion before broadcasting an on-chain BTC transaction; for calculating exact SegWit/Taproot UTXO batch consolidation vByte weights and dust thresholds, use plan_bitcoin_utxo_consolidation instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'confirmation_target', supports '?demo=true' or L402 (50 sats), and returns HTTP 400 if invalid.
`plan_bitcoin_utxo_consolidation`	`POST /api/v1/crypto/utxo-consolidation-planner`	80 sats (L402)	Analyzes a set of Bitcoin UTXO balances in satoshis to compute exact vByte transaction weight, identify uneconomical dust inputs, and recommend whether to consolidate now or hold. Use when optimizing on-chain Bitcoin treasury UTXO sets to minimize long-term miner fee drag; for fetching current live Bitcoin mempool sat/vB feerates alone, use estimate_bitcoin_mempool_fees instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'utxos_sats_json' ('script_type' defaults to 'p2wpkh_segwit'), supports '?demo=true' or L402 (80 sats), and returns HTTP 400 if invalid.
`calculate_spot_swap_rate`	`POST /api/v1/swap-rate`	100 sats (L402)	Calculates instantaneous spot exchange rates and equivalent USD, BTC, and satoshi values across BTC, ETH, SOL, SUI, and USDC. Use when converting a token amount into USD or satoshis for invoice pricing or accounting; for quoting executable non-KYC cross-chain bridge routes with bridge fees and settlement times, use compare_crosschain_bridge_routes instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'currency' ('amount' defaults to 'standard'), supports '?demo=true' or L402 (100 sats), and returns HTTP 400 if invalid.
`compare_crosschain_bridge_routes`	`POST /api/v1/crypto/bridge-quote`	100 sats (L402)	Compares non-custodial, non-KYC cross-chain swap routes (THORChain native L1 swaps, Maya Protocol, Blockstream Liquid) by basis-point fee, net output sats, and settlement time. Use when routing cross-chain treasury settlements (e.g. Solana USDC or Base ETH into native Bitcoin); for calculating mid-market spot exchange rates without bridge routing fees, use calculate_spot_swap_rate instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'from_asset' ('to_asset' defaults to 'BTC_NATIVE'), supports '?demo=true' or L402 (100 sats), and returns HTTP 400 if invalid.

Free Account-Less Demo Mode: Append ?demo=true to any REST endpoint above for an instant HTTP 200 schema preview at zero cost.

Other Modular Diogenes MCP Packages

Install only the domain packages relevant to your workflow:

Package	Scoped MCP Endpoint	Spoke Repository
1. EVE: Frontier Sui Move Suite (14 Tools)	`https://diogenes-micro-gateway.corinth.workers.dev/mcp/eve-frontier`	`stand-out-of-my-sun/diogenes-eve-frontier-mcp`
2. Agent Guardrails & Sandbox (12 Tools)	`https://diogenes-micro-gateway.corinth.workers.dev/mcp/agent-guardrails`	`stand-out-of-my-sun/diogenes-agent-guardrails-mcp`
3. Web3, DeFi & 402 Security (15 Tools)	`https://diogenes-micro-gateway.corinth.workers.dev/mcp/web3-security`	`stand-out-of-my-sun/diogenes-web3-security-mcp`
4. Gemini Suite & AI Agents (15 Tools)	`https://diogenes-micro-gateway.corinth.workers.dev/mcp/gemini-suite`	`stand-out-of-my-sun/diogenes-gemini-suite-mcp`
5. Context, Code & Solvers (15 Tools)	`https://diogenes-micro-gateway.corinth.workers.dev/mcp/context-code-solver`	`stand-out-of-my-sun/diogenes-context-code-solver-mcp`
6. Dev, Data & Workflow Utilities (14 Tools)	`https://diogenes-micro-gateway.corinth.workers.dev/mcp/dev-utilities`	`stand-out-of-my-sun/diogenes-dev-utilities-mcp`
7. Web Extraction, Readability & Markdown Engine (12 Tools)	`https://diogenes-micro-gateway.corinth.workers.dev/mcp/web-scraping-engine`	`stand-out-of-my-sun/diogenes-web-scraping-engine-mcp`
8. Neural Search, Grounded Research & Deep Intelligence (12 Tools)	`https://diogenes-micro-gateway.corinth.workers.dev/mcp/neural-search-engine`	`stand-out-of-my-sun/diogenes-neural-search-engine-mcp`
9. Database Intelligence, SQL Engine & Schema Guard (12 Tools)	`https://diogenes-micro-gateway.corinth.workers.dev/mcp/database-intelligence`	`stand-out-of-my-sun/diogenes-database-intelligence-mcp`
10. Full Master Gateway (All 121 Services)	`https://diogenes-micro-gateway.corinth.workers.dev/mcp`	`stand-out-of-my-sun/diogenes-micro-gateway`

TensorBlock & MCP Index Profile Metadata

Field	Value
Category	`Blockchain & Web3`
Transport	`streamable-http`
Endpoint	`https://diogenes-micro-gateway.corinth.workers.dev/mcp/web3-security`
Manifest	`https://diogenes-micro-gateway.corinth.workers.dev/.well-known/mcp/web3-security.json`
Health Check	`https://diogenes-micro-gateway.corinth.workers.dev/api/v1/health`
Auth	`none` (100% account-less free tier, MCP discovery & `?demo=true` previews; optional 6 flexible crypto payment rails for production calls: L402, x402, Base MPP, Garlicoin 0-Conf, BSC WGRLC, or Prepaid GRLC session API keys)
Install Confidence	`high` (Zero-install remote Streamable HTTP endpoint + root `package.json`, `smithery.yaml`, `server.json`, `glama.json`, and `mcp.json`)
License	`MIT`
Verification	`verified` (`@stand-out-of-my-sun` verified via `https://diogenes-micro-gateway.corinth.workers.dev/.well-known/tensorblock.json` & `https://diogenes-micro-gateway.corinth.workers.dev/.well-known/mcp/web3-security.json`)
Maintainer	`@stand-out-of-my-sun`
Docs	`https://diogenes-micro-gateway.corinth.workers.dev/llms.txt`
Support	`https://github.com/stand-out-of-my-sun/diogenes-web3-security-mcp/issues`

Source: README.md at commit 0d05732

Tools

audit_smart_contract_code

EVM & Move Smart Contract Honeypot, Tax & Reentrancy Auditor

Statically audits Solidity, Vyper, or Move smart contract source code for honeypot transfer taxes, hidden mint backdoors, proxy upgrade traps, and reentrancy. Use when auditing smart contract source code or bytecode before deploying or interacting with a protocol; for scanning Solana Anchor/Rust programs specifically for Cross-Program Invocation (CPI) signer/account vulnerabilities, use scan_solana_cpi_reentrancy instead. Read-only edge call (32 KB, 60 RPM): accepts 'code_or_address' ('chain' defaults to 'evm_solidity'), uses '?demo=true' or L402 (250 sats); HTTP 400 if invalid.

Parameterschaincode_or_addressrequired

scan_solana_cpi_reentrancy

Solana Anchor & Rust Cross-Program Invocation (CPI) Vulnerability Scanner

Scans Solana Anchor and native Rust program instructions for unverified Cross-Program Invocation (CPI) program IDs, missing signer checks, and PDA bump seed canonicalization bugs. Use when auditing Solana Rust/Anchor source code or instruction account structs for CPI privilege escalation; for checking live SPL token mint/freeze authorities and rug-pull risk by mint address, use evaluate_solana_token_risk instead. Read-only edge call (32 KB, 60 RPM): accepts 'rust_source_or_idl' ('framework' defaults to 'anchor'), uses '?demo=true' or L402 (160 sats); HTTP 400 if invalid.

Parametersframeworkrust_source_or_idlrequired

evaluate_solana_token_risk

Solana SPL Token Mint/Freeze Authority & Rug-Pull Risk Evaluator

Evaluates a Solana SPL token's rug-pull probability by checking active mint authority, freeze authority, mutable metadata, and top-holder concentration. Use when making a pre-trade security decision on whether a Solana SPL token is safe to buy; for retrieving SPL token symbol, decimals, and DEX liquidity pool metadata via x402, use inspect_solana_token_liquidity instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'token_address' ('risk_profile' defaults to 'strict_decentralized'), supports '?demo=true' or L402 (100 sats), and returns HTTP 400 if invalid.

Parametersrisk_profiletoken_addressrequired

inspect_solana_token_liquidity

Solana SPL Token Metadata, Decimals & Authority Registry Lookup

Retrieves canonical Solana SPL token metadata including name, ticker symbol, decimal precision, and current mint/freeze authority addresses. Use when resolving SPL token decimals, ticker symbols, and registry metadata for portfolio or swap formatting; for computing a composite security risk score and binary should_transact verdict, use evaluate_solana_token_risk instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'mint' ('network' defaults to 'mainnet-beta'), supports '?demo=true' or x402 (200 sats), and returns HTTP 400 if invalid.

Parametersmintrequirednetwork

track_solana_whale_flows

Solana Whale Wallet Net-Flow & Insider Cluster Tracker

Tracks 24-hour net accumulation or distribution flows across top Solana whale wallets and flags coordinated insider wallet clusters for a given SPL token. Use when analyzing on-chain smart-money order flow and holder clustering on Solana; for checking static SPL contract mint/freeze authority permissions, use evaluate_solana_token_risk instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'token' ('window' defaults to '1h'), supports '?demo=true' or x402 (500 sats), and returns HTTP 400 if invalid.

Parameterstokenrequiredwindow

estimate_solana_priority_fees

Solana Compute-Unit Priority Fee & Jito MEV Tip Estimator

Calculates optimal Solana compute-unit (CU) microlamport priority fees and Jito bundle tip lamports to achieve target block-inclusion probability. Use when setting SetComputeUnitPrice and Jito tips before broadcasting a Solana transaction; for querying Bitcoin L1 sat/vB mempool fee rates, use estimate_bitcoin_mempool_fees instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'priority_level' ('tx_type' defaults to 'simple_transfer'), supports '?demo=true' or x402 (50 sats), and returns HTTP 400 if invalid.

Parameterstx_typepriority_levelrequired

decode_eip712_permit_signature

EIP-712 Typed Data & Uniswap Permit2 Phishing Signature Decoder

Decodes EIP-712 and Uniswap Permit2 off-chain typed-data payloads to verify spender identity, detect unlimited (uint256.max) token approvals, and flag expired deadlines. Use when inspecting an off-chain eth_signTypedData_v4 or Permit2 payload before signing; for decoding raw on-chain hex transaction calldata (0x...) for eth_sendTransaction, use simulate_evm_transaction_calldata instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'typed_data_json' ('chain_id' defaults to '1'), supports '?demo=true' or L402 (100 sats), and returns HTTP 400 if invalid.

Parameterschain_idtyped_data_jsonrequired

simulate_evm_transaction_calldata

Pre-Sign EVM Hex Calldata Selector Decoder & Drain Simulator

Decodes raw EVM hexadecimal transaction calldata (0x...) by 4-byte function selector to expose hidden ERC-20 approve/transferFrom calls, setApprovalForAll drains, and multicall bundles. Use when auditing raw hex transaction data (to, value, data) before broadcasting an on-chain EVM transaction; for inspecting off-chain EIP-712 JSON typed-data signatures, use decode_eip712_permit_signature instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'calldata_hex' ('network' defaults to 'base_mainnet'), supports '?demo=true' or L402 (90 sats), and returns HTTP 400 if invalid.

Parametersnetworkcalldata_hexrequired

evaluate_dex_mev_risk

Pre-Swap DEX MEV Sandwich & Frontrunning Risk Evaluator

Evaluates decentralized exchange (DEX) swap parameters against pool depth and mempool visibility to quantify MEV sandwich risk and compute optimal slippage tolerance in basis points. Use when configuring slippage tolerance and private-RPC routing before executing an on-chain DEX token swap; for comparing cross-chain bridge settlement routes across different L1 blockchains, use compare_crosschain_bridge_routes instead. Read-only edge call (32 KB, 60 RPM): accepts 'pair' ('execution_venue' defaults to 'uniswap_v3_public'), uses '?demo=true' or L402 (150 sats); HTTP 400 if invalid.

Parameterspairrequiredexecution_venue

detect_address_poisoning_scam

Counterparty Address Poisoning & Vanity Prefix/Suffix Spoof Detector

Compares a target recipient wallet address against recent transaction history to detect vanity prefix/suffix lookalike spoofing and zero-value dusting attacks. Use when verifying a recipient EVM or Solana wallet address before sending funds; for decoding hex smart contract calldata payloads, use simulate_evm_transaction_calldata instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'target_address' ('address_standard' defaults to 'auto_detect'), supports '?demo=true' or L402 (100 sats), and returns HTTP 400 if invalid.

Parameterstarget_addressrequiredaddress_standard

verify_http402_payment_challenge

Pre-Payment HTTP 402 (L402 / x402 / MPP) Invoice & Macaroon Fraud Verifier

Decodes inbound HTTP 402 Payment Required challenges (L402 BOLT11 + Macaroon, x402 Solana Native SOL, MPP Base intents) to verify cryptographic payment-hash binding and block overcharge fraud. Use when auditing a 402 challenge header before an autonomous agent pays a Lightning invoice or USDC transfer; for checking on-chain Bitcoin L1 mempool feerates, use estimate_bitcoin_mempool_fees instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'www_authenticate' ('protocol_hint' defaults to 'L402'), supports '?demo=true' or L402 (60 sats), and returns HTTP 400 if invalid.

Parametersprotocol_hintwww_authenticaterequired

estimate_bitcoin_mempool_fees

Bitcoin Mainnet Mempool Feerate Estimator (sat/vB)

Fetches real-time Bitcoin mainnet mempool feerate recommendations in satoshis per virtual byte (sat/vB) across fastest, half-hour, hour, and economy confirmation tiers. Use when checking current Bitcoin L1 network congestion before broadcasting an on-chain BTC transaction; for calculating exact SegWit/Taproot UTXO batch consolidation vByte weights and dust thresholds, use plan_bitcoin_utxo_consolidation instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'confirmation_target', supports '?demo=true' or L402 (50 sats), and returns HTTP 400 if invalid.

Parametersconfirmation_target

plan_bitcoin_utxo_consolidation

Bitcoin SegWit/Taproot UTXO Dust Consolidation & Fee-Window Planner

Analyzes a set of Bitcoin UTXO balances in satoshis to compute exact vByte transaction weight, identify uneconomical dust inputs, and recommend whether to consolidate now or hold. Use when optimizing on-chain Bitcoin treasury UTXO sets to minimize long-term miner fee drag; for fetching current live Bitcoin mempool sat/vB feerates alone, use estimate_bitcoin_mempool_fees instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'utxos_sats_json' ('script_type' defaults to 'p2wpkh_segwit'), supports '?demo=true' or L402 (80 sats), and returns HTTP 400 if invalid.

Parametersscript_typeutxos_sats_jsonrequired

calculate_spot_swap_rate

Cross-Asset Spot Exchange Rate & Satoshi Conversion Calculator

Calculates instantaneous spot exchange rates and equivalent USD, BTC, and satoshi values across BTC, ETH, SOL, SUI, and USDC. Use when converting a token amount into USD or satoshis for invoice pricing or accounting; for quoting executable non-KYC cross-chain bridge routes with bridge fees and settlement times, use compare_crosschain_bridge_routes instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'currency' ('amount' defaults to 'standard'), supports '?demo=true' or L402 (100 sats), and returns HTTP 400 if invalid.

Parametersamountcurrencyrequired

compare_crosschain_bridge_routes

Non-KYC Cross-Chain Bridge Route & Settlement Fee Comparator

Compares non-custodial, non-KYC cross-chain swap routes (THORChain native L1 swaps, Maya Protocol, Blockstream Liquid) by basis-point fee, net output sats, and settlement time. Use when routing cross-chain treasury settlements (e.g. Solana Native SOL or Base ETH into native Bitcoin); for calculating mid-market spot exchange rates without bridge routing fees, use calculate_spot_swap_rate instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'from_asset' ('to_asset' defaults to 'BTC_NATIVE'), supports '?demo=true' or L402 (100 sats), and returns HTTP 400 if invalid.

Parametersamountto_assetfrom_assetrequired

Version history

v1.0.0LatestOct 20, 2026

Score

100% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

Reached in the last 30 daysRequired25 pts
Auth declaredRequired10 pts
Tools listedRequired15 pts
DescriptionRequired15 pts
Logo10 pts
Documentation15 pts
License10 pts

Other Web3 integrations

Web3TV MCP Server

tv.web3Official publisher

A remote MCP server for Web3TV creators that lets an assistant manage the user's Web3TV account over MCP.

Streamable HTTPWeb executableAuth

Business & CommerceCredential requiredOct 24, 2026

AI.TV MCP Server

tv.aiOfficial publisher

A remote MCP server that lets an AI assistant carry out AI.TV creator account operations on the user's behalf.

Streamable HTTPWeb executableAuth

Productivity & WorkflowCredential requiredOct 24, 2026

Gexno Web3

Published by GitHub account JanzenChen

Free, read-only Ethereum lookups: an assistant can fetch a wallet's ETH balance and simple risk flags, or resolve NFT metadata for a contract and token ID.

Streamable HTTPWeb executable

Web Search & Scraping2 toolsOct 29, 2026

Robotbase Web3

Published by GitHub account wygogogo19

Remote MCP endpoint for Web3 agents: read-only Bitcoin, Ethereum, Monero, Zcash and Tron verification, TRON risk checks, market context, and a 17-tool web…

Streamable HTTPWeb executable

Web Search & Scraping65 toolsOct 29, 2026

Base Web3 M2m Hub

Published by GitHub account castralis122

Live Base Mainnet on-chain data (gas, DEX, Aave, token risk, prices). Pay per call in USDC via x402.

Streamable HTTPWeb executable

17 toolsOct 25, 2026

Diogenes Web3, DeFi & 402 Security MCP

Overview

Installation

In SourceWeft

Use with an agent

Other MCP clients

README

Diogenes Web3, DeFi & HTTP 402 Security MCP (diogenes-web3-security-mcp)

⚡ 1-Click Install for Cursor & Claude Desktop

🖱️ Cursor IDE (.cursor/mcp.json)

🧠 Claude Desktop (claude_desktop_config.json)

Included Tools in web3-security (15 Tools)

Other Modular Diogenes MCP Packages

TensorBlock & MCP Index Profile Metadata

Tools

audit_smart_contract_code

scan_solana_cpi_reentrancy

evaluate_solana_token_risk

inspect_solana_token_liquidity

track_solana_whale_flows

estimate_solana_priority_fees

decode_eip712_permit_signature

simulate_evm_transaction_calldata

evaluate_dex_mev_risk

detect_address_poisoning_scam

verify_http402_payment_challenge

estimate_bitcoin_mempool_fees

plan_bitcoin_utxo_consolidation

calculate_spot_swap_rate

compare_crosschain_bridge_routes

Version history

Score

Other Web3 integrations

Web3TV MCP Server

AI.TV MCP Server

Gexno Web3

Robotbase Web3

Base Web3 M2m Hub

Diogenes Web3, DeFi & HTTP 402 Security MCP (`diogenes-web3-security-mcp`)

🖱️ Cursor IDE (`.cursor/mcp.json`)

🧠 Claude Desktop (`claude_desktop_config.json`)

Included Tools in `web3-security` (15 Tools)