Cybercentry Verification

uk.co.cybercentryPublished by cybercentry.co.ukOfficial publisherv1.0.4Updated Oct 24, 2026

Twelve tools: token, wallet, contract and site security. Two free, the rest $1 in USDC over x402.

VerifiedStreamable HTTPWeb executableFinanceSecurity & Monitoring

Overview

AI-generated overview

Remote pay-per-call security verification server: checks wallets, tokens, contracts, dApps, agents and media, with two free catalogue tools.

What you can do
  • List the service catalogue and read a live exploit feed, both free
  • Screen wallets for sanctions and risk, and screen pre-launch wallets
  • Check Base and Ethereum/EVM tokens, and score live token launches
  • Audit Solidity source and scan websites or dApp frontends for vulnerabilities
  • Audit AI agent configuration, and verify image or video provenance
  • Prove facts about private data with zero-knowledge proofs, and encrypt text with post-quantum cryptography
When to use it
Useful when an assistant needs due diligence before a crypto transaction, deployment or connection: vetting a token, wallet counterparty, contract, dApp frontend or AI agent, or checking whether media is authentic. The two free tools are a low-risk way to see the catalogue and recent exploits first.
Requirements
A remote streamable-HTTP endpoint; nothing to install. No accounts or API keys. The ten paid tools cost $1.00 per call in USDC over x402 (Base or Solana), or accept a subscription_token argument or x-subscription-token header for clients without x402 support.
Before you install
Ten of the twelve tools spend money: $1.00 per call in USDC, settled automatically by x402-capable clients, so repeated calls cost real funds. A subscription token is a credential passed as an argument or header. Wallet and web scans can take up to three minutes. Verification requests send addresses, contract source, site URLs, agent configs and media to a third-party service.

Installation

In SourceWeft

  1. Open Cybercentry Verification in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/uk.co.cybercentry%2Fverification/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "cybercentry-verification": {
      "type": "http",
      "url": "https://centry.cybercentry.co.uk/api/mcp"
    }
  }
}

README

Cybercentry MCP Server

Pay-per-call security verification for AI agents: wallets, tokens, contracts, dApps, agents and more.

Nothing to install. This is a remote MCP server — connect to the URL and the tools appear.

Endpointhttps://centry.cybercentry.co.uk/api/mcp
Transportstreamable-http
Registryuk.co.cybercentry/verification
Websitehttps://centry.cybercentry.co.uk

Connect

Claude (Desktop or claude.ai)

Remote servers are added as connectors, not through claude_desktop_config.json — that file is for local servers that run a command.

  1. Settings → Connectors
  2. Add → Add custom connector
  3. Paste https://centry.cybercentry.co.uk/api/mcp

Other clients

Anything that speaks MCP over streamable HTTP can connect. Point it at:

https://centry.cybercentry.co.uk/api/mcp

Check your client's own documentation for where a remote MCP server URL goes — some use a settings pane, some a config file. If yours takes a config file, the field is the server URL rather than a command.

Tools

Twelve tools. Two are free and need no payment, credentials or account:

ToolWhat it does
list_servicesThe catalogue: every verification, its inputs and its price
recent_exploitsLive exploit feed, curated from DefiLlama

The other ten are paid, at $1.00 per call:

ToolWhat it verifies
wallet_verificationSanctions screening and risk scoring across 35 EVM chains
base_token_verificationBase B20 tokens: honeypots, freeze-and-seize, pause, impersonation
ethereum_token_verificationEthereum token due diligence
solidity_code_verificationSolidity source, for known vulnerability classes
web_application_verificationLive site and dApp frontend scan
openclaw_ai_agent_verificationAn agent's configuration: auth gaps, prompt-injection exposure, unsafe permissions
media_content_verificationC2PA provenance and content authenticity
private_data_verificationZero-knowledge proof over a payload, without revealing it
quantum_cryptography_verificationQuantum-resistant encryption of a payload
cyber_security_consultantAdvisory answers grounded in a security body of knowledge

Wallet and web application verification return a job immediately and fill in as findings arrive; both can take up to three minutes. The rest return in under ten seconds.

Paying

No API keys. No accounts. Two ways to pay for the ten paid tools:

x402 — the client is told the price, pays in USDC, and retries. Automatic in clients that support it.

Base    eip155:8453   USDCSolana  mainnet       USDC

Subscription token — for clients that do not speak x402 yet. Pass subscription_token as a tool argument, or send it as the x-subscription-token header.

A paid call runs the verification before it settles, so a call that fails is never charged.

Standards

The interfaces these services implement were specified in public:

  • ERC-8126 — AI Agent Verification (Final)
  • ERC-8196 — AI Agent Authenticated Wallet (Final)
  • ERC-8376 — Token Launch Abuse Detection and Remediation (open pull request)

Links


Cybercentry Limited

Source: README.md at commit 1c91439

Tools

14

list_services

List Services

List every Cybercentry verification service with its price, inputs and SLA. Free.

Takes no parameters.

recent_exploits

Recent Exploits

Recent real-world web3 exploits from the live feed, with loss amounts, attack vectors and the Cybercentry service that addresses each. Free.

Parameterslimit

base_token_verification

Base Token Verification

Check a Base token contract before buying: detects honeypots, armed freeze-and-seize, a live pause, fake B20s and ticker-impersonation copycats, and separately discloses issuer controls (admin centralisation, supply cap, transfer policy, rebase) so a legitimate token is not mistaken for a scam. Costs $1.00 per call, paid in USDC over x402.

Parameterschaincontract_addressrequiredsubscription_token

cyber_security_consultant

Cyber Security Consultant

Ask a cyber security question and get an expert answer backed by real-time threat intelligence, covering current threats, best practice and compliance. Costs $1.00 per call, paid in USDC over x402.

Parametersqueryrequiredsubscription_token

ethereum_token_verification

Ethereum Token Verification

Check an Ethereum or EVM token contract before buying: rug pull, hidden tax, liquidity legitimacy and holder concentration risk. Token due diligence returned as a scan report. Costs $1.00 per call, paid in USDC over x402.

Parameterschainchain_idplatform_idcontract_addressrequiredsubscription_token

media_content_verification

Media Content Verification

Check whether an image or video is authentic and where it came from: C2PA content credentials, provenance and metadata extraction, with an avatar and logo impersonation check. Detect AI-generated or tampered media before trusting it. Costs $1.00 per call, paid in USDC over x402.

Parametersimage_urirequiredmedia_file_pathrequiredextract_metadatasubscription_tokenverify_authenticity

openclaw_ai_agent_verification

OpenClaw AI Agent Verification

Audit an AI agent configuration for security holes: prompt injection exposure, missing authentication, over-broad tool permissions and unsafe gateway settings. Check an agent before you trust it or connect to it. Costs $1.00 per call, paid in USDC over x402.

ParameterstoolconfigrequiredskillsmessagesessionIdsubscription_token

post_launch_screening

Post-launch Screening

Score a live token launch under ERC-8376, the token launch abuse standard we co-authored. The twelve-signal vector is assembled from chain state and scored against the eleven deployer abuse patterns into an abuse score of 0 to 100, with confidence reported separately so a high score on thin evidence cannot read as a certainty. Signals that could not be computed are named rather than scored clean. Price decline is excluded by rule, so a launch that locked liquidity, sold nothing and fell 95 per cent still scores clean: falling is not fraud. Name the creator, because at most venues the token was deployed by the venue's own factory and the creating address is the launchpad rather than the applicant. A screening, not a bonded on-chain report. Costs $1.00 per call, paid in USDC over x402.

Parameterschaintokenrequiredcreatorsubscription_token

pre_launch_screening

Pre-launch Screening

Screen who is asking to launch, before you deploy anything for them. At most venues the launchpad creates the token, so the only thing in front of you beforehand is a connected wallet: this screens that wallet, and it includes the full wallet verification rather than a summary of one. OFAC SDN sanctions screening, the funding chain walked to depth across 33 chains, mixer contact including the Tornado Cash pools, dusting, control clusters and exchange reuse, with a risk score. Then the launch-specific half: allocations this wallet has taken from contracts before and whether it still holds them or sold them, and whether the ticker it wants collides with a token it already touched. Says what it could not establish rather than reporting it clean. Eight of the twelve ERC-8376 signals describe conduct during or after a sale and cannot exist yet, so this reports on the party and not on the launch. Costs $1.00 per call, paid in USDC over x402.

Parameterschaintickercreatorrequiredsubscription_token

private_data_verification

Private Data Verification

Prove a fact about private data without revealing the data: validates text integrity and returns a zero-knowledge proof (ZKP) with a verification ID and URL. Costs $1.00 per call, paid in USDC over x402.

Parameterscpdv_datarequiredsubscription_token

quantum_cryptography_verification

Quantum Cryptography Verification

Encrypt text with quantum-resistant (post-quantum) cryptography, for secrets that must outlast classical encryption. Returns a record ID and a decrypt URL. Costs $1.00 per call, paid in USDC over x402.

Parameterscqcv_datarequiredsubscription_token

solidity_code_verification

Solidity Code Verification

Audit Solidity smart contract source for vulnerabilities before you deploy or call it. Returns findings with a clear risk level. Costs $1.00 per call, paid in USDC over x402.

Parameterssolidity_coderequiredsubscription_token

wallet_verification

Wallet Verification

Screen a wallet address for sanctions and risk: OFAC SDN sanctions screening, risk scoring and suspicious-activity detection across 33 EVM chains. Check a counterparty before you transact with it. Costs $1.00 per call, paid in USDC over x402.

Parameterswallet_addressrequiredsubscription_token

web_application_verification

Web Application Verification

Scan a website or dApp frontend for vulnerabilities using OWASP checks, before connecting a wallet to it or trusting it with user data. Costs $1.00 per call, paid in USDC over x402.

Parameterstarget_urlrequiredsubscription_token

Version history

1
  1. v1.0.4LatestSep 16, 2026

Score

100% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts