ERC-8126 Scan

uk.co.cybercentryPublished by cybercentry.co.ukv1.0.1Updated Oct 24, 2026

378k+ ERC-8004 agents and their security verifications. Two tools free, the rest USDC over x402.

The publisher's own server: scan.mx Email Diagnostics

VerifiedStreamable HTTPWeb executableFinanceSecurity & Monitoring

Overview

AI-generated overview

A remote MCP server that lets an assistant search an index of 378,000+ ERC-8004 agents and read their security verification scores and reports.

What you can do
List the server's tools, their prices and how to read the risk fields, and check how many agents the index covers (both free). Search and filter indexed agents by chain, risk score range and verification status, or look one up by wallet or ID. Fetch a single agent's full detail record, including verification state and metadata. Fetch on-chain activity and liveness signals for one agent. Fetch the full security assessment report for an agent you own.
When to use it
Use it when you need to vet an ERC-8004 agent before interacting with or trusting it, or to survey the on-chain agent population by risk and verification status. Start with the free catalogue and index-stats tools to judge coverage before paying for lookups.
Requirements
A remote streamable-HTTP endpoint; nothing to install. The two catalogue and stats tools need no account, key or wallet. Paid tools are billed per call in USDC over x402 on Base or Solana, or draw on a plan quota via an erc8126_ API key sent as an Authorization bearer token.
Before you install
Paid tools cost money per call (up to $0.05 for the full report) or consume a plan quota; an invalid API key is rejected rather than falling back to per-call billing. The report tool only returns data for agents owned by the wallet bound to your key or the wallet that paid. Judge agents by risk_level, not overall_risk_score: unverified agents score 100 by presumption, which is not a finding against them.

Installation

In SourceWeft

  1. Open ERC-8126 Scan in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/uk.co.cybercentry%2Ferc-8126-scan/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "erc-8126-scan": {
      "type": "http",
      "url": "https://erc8126scan.ai/api/mcp"
    }
  }
}

README

ERC-8126 Scan MCP Server

Security intelligence for ERC-8004 agents: search the on-chain agent index and read verification results.

Nothing to install. This is a remote MCP server — connect to the URL and the tools appear.

Endpointhttps://erc8126scan.ai/api/mcp
Transportstreamable-http
Registryuk.co.cybercentry/erc-8126-scan
Websitehttps://erc8126scan.ai

What it is

Every agent minted in the ERC-8004 Identity Registry is indexed automatically — 378,000+ and counting. Each one carries verification results across five dimensions, produced by the Cybercentry verification services:

DimensionWhat it covers
ETVToken verificationThe agent's token contract
SCVSolidity code verificationThe staking contract source
MCVMedia content verificationC2PA provenance of the agent's image
WAVWeb application verificationThe agent's live site or dApp frontend
WVWallet verificationOFAC sanctions screening and funding-chain risk

This server exposes that index. It does not run verifications — it serves results already computed and stored.

Connect

Claude (Desktop or claude.ai)

Remote servers are added as connectors, not through claude_desktop_config.json — that file is for local servers that run a command.

  1. Settings → Connectors
  2. Add → Add custom connector
  3. Paste https://erc8126scan.ai/api/mcp

Other clients

Anything that speaks MCP over streamable HTTP can connect. Point it at:

https://erc8126scan.ai/api/mcp

Check your client's own documentation for where a remote MCP server URL goes — some use a settings pane, some a config file. If yours takes a config file, the field is the server URL rather than a command.

Tools

Six tools, all read-only. None of them mints, writes on-chain, or spends your credits.

Two are free — no payment, wallet or account:

ToolWhat it returns
list_servicesThe catalogue: every tool, its price, and how to read the risk fields
get_index_statsHow many agents are indexed, so you can judge coverage before paying

The other four are paid:

ToolWhat it returnsPer callPlan
search_agentsFilter the index by chain, risk score range and verification status; paginated$0.001Starter
get_agentFull detail for one agent by UUID$0.001Starter
get_agent_activityOn-chain activity and liveness for one agent$0.002Starter
get_agent_reportFull security assessment: per-dimension findings and evidence$0.05Pro

Call list_services first. It is free, and authoritative about current pricing.

get_agent_report returns data only for agents owned by the wallet bound to your API key. Other agents return FORBIDDEN_NOT_OWNER. Public scores for any agent are available through get_agent.

Tools you cannot reach on your plan are hidden from tools/list rather than listed and refused.

Reading the scores

Judge an agent by risk_level, not overall_risk_score.

Scoring presumes risk: a check that applies to an agent but has not been verified counts as 100. So an agent nobody has paid to assess scores exactly the same as one assessed and found dangerous. Most of the index is the former.

risk_level separates them:

ValueMeaning
not_verifiedNobody has assessed this agent yet. Not a finding against it.
not_assessedNo score recorded
low / moderate / elevated / highVerified, scoring in that band
criticalVerified and genuinely high risk

Treating a not_verified agent as dangerous is the most common way to misread this data.

Paying

Two free tools, then two ways to pay for the rest. tools/list is public, so an agent can see everything on offer and what it costs before deciding to pay for anything.

x402 — no account, no key. The client is quoted a price, pays in USDC, and retries. Pay on whichever chain you hold funds on:

Base     eip155:8453    USDCSolana   mainnet        USDC
ToolPer call
list_servicesfree
get_index_statsfree
search_agents$0.001
get_agent$0.001
get_agent_activity$0.002
get_agent_report$0.05

An unpaid call returns a JSON-RPC error with code 402, carrying the payment requirements in error.data — the same shape as the Cybercentry verification server.

API key — for volume, or clients that do not speak x402 yet. Pass an erc8126_ key as a bearer token:

Authorization: Bearer erc8126_...

Keys come from erc8126scan.ai/my-api-keys. Calls draw on your plan's daily quota instead of being paid for individually, and tool availability and page sizes follow your tier. A key that is presented but invalid is rejected outright rather than quietly falling back to per-call billing.

Either way, get_agent_report is scoped to agents owned by the caller — the wallet bound to your key, or the wallet that paid.

Standards

  • ERC-8004 — Trustless Agents, the Identity Registry this index reads
  • ERC-8126 — AI Agent Verification (Final)
  • ERC-8196 — AI Agent Authenticated Wallet (Final)

Links


Cybercentry Limited

Source: README.md at commit 9f5004f

Tools

6

list_services

List services and prices

Free. The catalogue: every tool on this server, what it returns, what it costs per call, and how to read the risk fields. Call this first — it is authoritative about pricing, needs no payment, key or wallet, and answers most questions about what this server can do without spending anything.

Takes no parameters.

get_index_stats

Index coverage

Free. How much of the ERC-8004 agent population this index covers: total agents synced from the on-chain Identity Registry, and how many carry verification results. Use it to judge whether the index is likely to know about the agent you care about before paying to look it up.

Takes no parameters.

search_agents

Search agents

Search and filter scanned ERC-8004 agents by chain, risk score range, and verification status. Returns a paginated list with per-dimension scores (ETV, MCV, SCV, WAV, WV) and an overall risk score. Pass `wallet` or `id` to look up a single agent directly. IMPORTANT: read `risk_level`, not `overall_risk_score`, to judge an agent. Scoring presumes risk, so an agent nobody has paid to verify scores 100 exactly like one assessed as dangerous. risk_level separates them: 'not_verified' means unassessed and is NOT a finding against the agent, while 'critical' means verified and genuinely high risk. Most indexed agents are 'not_verified'. Costs $0.001 USDC per call when paying with x402.

Parametersidpagesortchainlimitorderwalletverifiedmax_scoremin_score

get_agent

Get agent detail

Fetch the full detail record for a single agent by UUID, including verification state and metadata. Judge the agent by `risk_level`, not the raw overall_risk_score: 'not_verified' means nobody has paid to assess it yet and scores 100 by presumption, which is not a finding against the agent. Costs $0.001 USDC per call when paying with x402.

Parametersidrequired

get_agent_activity

Get agent activity

Fetch on-chain activity and liveness signals for one agent, including whether it is currently active and when it was last checked. Costs $0.002 USDC per call when paying with x402.

Parametersidrequired

get_agent_report

Get agent security report

Fetch the full security assessment report for one agent: per-dimension findings, evidence and recommendations. Returns data only for agents owned by the caller — the wallet bound to your API key, or the wallet that paid via x402. Other agents return FORBIDDEN_NOT_OWNER. Use get_agent for public scores on any agent. Costs $0.05 USDC per call when paying with x402.

Parametersidrequired

Version history

1
  1. v1.0.1LatestSep 16, 2026

Score

100% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts

Other Scan integrations