list_services
List Services
List every Cybercentry verification service with its price, inputs and SLA. Free.
Takes no parameters.
uk.co.cybercentryPublished by cybercentry.co.ukOfficial publisherv1.0.4Updated Oct 24, 2026
Twelve tools: token, wallet, contract and site security. Two free, the rest $1 in USDC over x402.
Remote pay-per-call security verification server: checks wallets, tokens, contracts, dApps, agents and media, with two free catalogue tools.
Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.
Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.
Read https://sourceweft.com/mcp/uk.co.cybercentry%2Fverification/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.Add this to your client's mcpServers config.
{
"mcpServers": {
"cybercentry-verification": {
"type": "http",
"url": "https://centry.cybercentry.co.uk/api/mcp"
}
}
}Pay-per-call security verification for AI agents: wallets, tokens, contracts, dApps, agents and more.
Nothing to install. This is a remote MCP server — connect to the URL and the tools appear.
Remote servers are added as connectors, not through claude_desktop_config.json — that file is for local servers that run a command.
https://centry.cybercentry.co.uk/api/mcpAnything that speaks MCP over streamable HTTP can connect. Point it at:
Check your client's own documentation for where a remote MCP server URL goes — some use a settings pane, some a config file. If yours takes a config file, the field is the server URL rather than a command.
Twelve tools. Two are free and need no payment, credentials or account:
The other ten are paid, at $1.00 per call:
Wallet and web application verification return a job immediately and fill in as findings arrive; both can take up to three minutes. The rest return in under ten seconds.
No API keys. No accounts. Two ways to pay for the ten paid tools:
x402 — the client is told the price, pays in USDC, and retries. Automatic in clients that support it.
Subscription token — for clients that do not speak x402 yet. Pass subscription_token as a tool argument, or send it as the x-subscription-token header.
A paid call runs the verification before it settles, so a call that fails is never charged.
The interfaces these services implement were specified in public:
Cybercentry Limited
Source: README.md at commit 1c91439
List Services
List every Cybercentry verification service with its price, inputs and SLA. Free.
Takes no parameters.
Recent Exploits
Recent real-world web3 exploits from the live feed, with loss amounts, attack vectors and the Cybercentry service that addresses each. Free.
limitBase Token Verification
Check a Base token contract before buying: detects honeypots, armed freeze-and-seize, a live pause, fake B20s and ticker-impersonation copycats, and separately discloses issuer controls (admin centralisation, supply cap, transfer policy, rebase) so a legitimate token is not mistaken for a scam. Costs $1.00 per call, paid in USDC over x402.
chaincontract_addressrequiredsubscription_tokenCyber Security Consultant
Ask a cyber security question and get an expert answer backed by real-time threat intelligence, covering current threats, best practice and compliance. Costs $1.00 per call, paid in USDC over x402.
queryrequiredsubscription_tokenEthereum Token Verification
Check an Ethereum or EVM token contract before buying: rug pull, hidden tax, liquidity legitimacy and holder concentration risk. Token due diligence returned as a scan report. Costs $1.00 per call, paid in USDC over x402.
chainchain_idplatform_idcontract_addressrequiredsubscription_tokenMedia Content Verification
Check whether an image or video is authentic and where it came from: C2PA content credentials, provenance and metadata extraction, with an avatar and logo impersonation check. Detect AI-generated or tampered media before trusting it. Costs $1.00 per call, paid in USDC over x402.
image_urirequiredmedia_file_pathrequiredextract_metadatasubscription_tokenverify_authenticityOpenClaw AI Agent Verification
Audit an AI agent configuration for security holes: prompt injection exposure, missing authentication, over-broad tool permissions and unsafe gateway settings. Check an agent before you trust it or connect to it. Costs $1.00 per call, paid in USDC over x402.
toolconfigrequiredskillsmessagesessionIdsubscription_tokenPost-launch Screening
Score a live token launch under ERC-8376, the token launch abuse standard we co-authored. The twelve-signal vector is assembled from chain state and scored against the eleven deployer abuse patterns into an abuse score of 0 to 100, with confidence reported separately so a high score on thin evidence cannot read as a certainty. Signals that could not be computed are named rather than scored clean. Price decline is excluded by rule, so a launch that locked liquidity, sold nothing and fell 95 per cent still scores clean: falling is not fraud. Name the creator, because at most venues the token was deployed by the venue's own factory and the creating address is the launchpad rather than the applicant. A screening, not a bonded on-chain report. Costs $1.00 per call, paid in USDC over x402.
chaintokenrequiredcreatorsubscription_tokenPre-launch Screening
Screen who is asking to launch, before you deploy anything for them. At most venues the launchpad creates the token, so the only thing in front of you beforehand is a connected wallet: this screens that wallet, and it includes the full wallet verification rather than a summary of one. OFAC SDN sanctions screening, the funding chain walked to depth across 33 chains, mixer contact including the Tornado Cash pools, dusting, control clusters and exchange reuse, with a risk score. Then the launch-specific half: allocations this wallet has taken from contracts before and whether it still holds them or sold them, and whether the ticker it wants collides with a token it already touched. Says what it could not establish rather than reporting it clean. Eight of the twelve ERC-8376 signals describe conduct during or after a sale and cannot exist yet, so this reports on the party and not on the launch. Costs $1.00 per call, paid in USDC over x402.
chaintickercreatorrequiredsubscription_tokenPrivate Data Verification
Prove a fact about private data without revealing the data: validates text integrity and returns a zero-knowledge proof (ZKP) with a verification ID and URL. Costs $1.00 per call, paid in USDC over x402.
cpdv_datarequiredsubscription_tokenQuantum Cryptography Verification
Encrypt text with quantum-resistant (post-quantum) cryptography, for secrets that must outlast classical encryption. Returns a record ID and a decrypt URL. Costs $1.00 per call, paid in USDC over x402.
cqcv_datarequiredsubscription_tokenSolidity Code Verification
Audit Solidity smart contract source for vulnerabilities before you deploy or call it. Returns findings with a clear risk level. Costs $1.00 per call, paid in USDC over x402.
solidity_coderequiredsubscription_tokenWallet Verification
Screen a wallet address for sanctions and risk: OFAC SDN sanctions screening, risk scoring and suspicious-activity detection across 33 EVM chains. Check a counterparty before you transact with it. Costs $1.00 per call, paid in USDC over x402.
wallet_addressrequiredsubscription_tokenWeb Application Verification
Scan a website or dApp frontend for vulnerabilities using OWASP checks, before connecting a wallet to it or trusting it with user data. Costs $1.00 per call, paid in USDC over x402.
target_urlrequiredsubscription_token100% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
https://centry.cybercentry.co.uk/api/mcpBase eip155:8453 USDCSolana mainnet USDC