Novarithm Agent Hub: trust and commerce checks

com.novarithm.www由 www.novarithm.com 发布v1.1.0更新于 Nov 1, 2026

Agent trust, pre-purchase risk, deliverable checks, data and SEO tools. Pay per call via x402.

已验证Streamable HTTP可网页运行网页搜索与抓取安全与监控商业与电商

概览

AI 生成的概览

远程 MCP 端点，按次付费提供代理信任、购前风险、交付物评估、数据与 SEO 检查，通过 x402 以 Base 上的 USDC 结算。

可以做什么
  • 列出付费工具及价格，并读取异步任务结果
  • 探测其他代理与端点：x402 报价、MCP 握手、A2A 卡片、提供方信任与质量对比
  • 审计网站：被动站点、SEO、安全、结账路径与交付验证，并附签名证明
  • 检查交易风险：卖家信誉、价格与库存、召回、制裁、欧盟合规、香水商品页
  • 查询数据：美国地址地理编码、英国邮编、邮箱与域名邮件健康度、欧洲央行汇率
  • 按标准评估交付物并验证其证明
适用场景
适合在集成其他付费代理或端点前做尽调、购买商品前核查店铺与商品、按验收标准核验交付的网站或交付物，或获取汇率、地理编码、制裁筛查等小型参考数据。
运行要求
远程 streamable HTTP 端点，未声明账号或密钥。初始化、工具列表与定价查询免费。付费工具需要支持 x402 的客户端和运营方授权的钱包，钱包需持有 Base 主网 USDC；普通 MCP 连接不会提供支付能力。限流为每 IP 每分钟 120 次请求。
安装前请注意
付费工具按次消耗真实 USDC，单次 0.002 至 99 USDC，应设定明确的预算策略；文档所述预算按进程计算，结果不确定时预留额度仍会被消耗，重试前需核对回执。签名凭证应保留在服务端。工具会把目标网址、地址、姓名和加密地址发送给第三方运营方。评分与证明仅供参考，任何工具都不授权购买或释放托管资金，检查也不能证明商品真伪或邮箱可达。

安装

在 SourceWeft 中

  1. 打开 控制台中的 Novarithm Agent Hub: trust and commerce checks，将其添加到工作区。
  2. 为需要使用其工具的对话启用该服务。

Web executable，通过 Streamable HTTP。 远程服务在工作区中配置后即可从网页运行时运行。

交给智能体安装

把这段提示词粘贴到 Claude Code、Codex、Cursor 等智能体，或 SourceWeft 对话中。智能体会读取该服务器的安装指南，先向你展示发布者、端点和登录方式，经你同意后再把它添加到你的客户端。密钥不会写进任何命令。

阅读 https://sourceweft.com/mcp/com.novarithm.www%2Fagent-hub/install.md，并按其中说明把这个 MCP 服务器接入我的客户端。修改任何配置之前，先告诉我它的发布者、端点和登录方式，等我确认。不要把 API 密钥写进命令或我会提交的文件；问我密钥应从哪里获取。

查看智能体所依据的安装指南

其他 MCP 客户端

把它添加到你客户端的 mcpServers 配置中。

{
  "mcpServers": {
    "novarithm-agent-hub-trust-and-commerce-c": {
      "type": "http",
      "url": "https://gogeta2-u35175.vm.elestio.app/agents/mcp"
    }
  }
}

README

Novarithm Agent Hub

Trust and commerce checks for agent operators, through HTTP x402 and one remote MCP endpoint. Current settlement: Coinbase CDP, USDC on Base mainnet. There are 29 paid tools and one free pricing tool at the verification dated 24 October 2026.

Start with Agent Check: inspect an x402 quote, an MCP handshake, or an A2A card before integrating another agent. These checks observe protocols and evidence; they do not certify the provider or the quality of a paid result.

Connect and inspect for free

json
{  "mcpServers": {    "novarithm": {      "type": "streamable-http",      "url": "https://gogeta2-u35175.vm.elestio.app/agents/mcp"    }  }}

The client-specific configuration format may differ. MCP initialization, tools/list, and pricing are free. Paid calls require an x402-capable client and an operator-authorized wallet; an ordinary MCP connection does not provision payment.

sh
# Node 22+; no dependencies or wallet needed for this commandnode examples/buyer.mjs quote /v1/agent/x402-probe

This only obtains an unsigned 402 quote: zero signatures and zero spending. It does not run the paid tool.

Add an explicitly bounded buyer

The example supports HTTP and MCP. Dependencies are pinned to the versions used for the free integration check. enablePaid defaults to false. No wallet is created and no paid call runs on import.

sh
cd examplesnpm installnode --test test_buyer.mjs

For a backend with an existing signer:

js
import { BASE, budgetPolicy, makePaymentClient, httpBuyer, mcpBuyer } from './buyer.mjs';
const policy = budgetPolicy({  maxPerCallAtomic: '10000',  // 0.01 USDC  totalAtomic: '20000',      // at most 0.02 USDC authorized in this process  allowedResources: [BASE + '/v1/agent/x402-probe', 'mcp://tool/x402_probe']});const paymentClient = await makePaymentClient(operatorProvidedSigner, policy);const http = await httpBuyer({client: paymentClient, allowedPaths: ['/v1/agent/x402-probe']});// Still unsigned by default. Explicit enablePaid:true permits spending under the policy.const response = await http('/v1/agent/x402-probe', {url: 'https://example.com/paid'});console.log(response.status); // 402 while enablePaid is false
const mcp = await mcpBuyer({paymentClient, allowedTools: ['x402_probe']});console.log(await mcp.pricing());await mcp.close();

Keep signer credentials server-side. The policy checks resource, recipient, chain, token, price, timeout and total authorization before signing. Reservations remain consumed after uncertain outcomes; reconcile before retrying. The budget is per process, so production operators need persistent wallet limits across restarts and instances. Tests of policy and free integration do not constitute a paid end-to-end test of this new client.

Choose the relevant evidence

TaskExisting toolsPrice per call (USDC)
Inspect another agentx402_probe, mcp_probe, a2a_card_check0.01 each
Before buying a productpre_purchase_check0.08
Inspect listing riskseller_reputation, price_availability0.02 / 0.03
Inspect a fragrance listingfragrance_check0.15
Check explicit deliverable criteriaevaluate_deliverable / verify_attestation0.25 / 0.001
Other data tasksRecall, sanctions, email/DNS, FX, USDC, geocoding, SEO/GEOlive catalog

Scores are indicative. Fragrance checks do not authenticate a physical bottle. Email/DNS checks do not prove mailbox delivery. The rule-based evaluator cannot establish free-text semantic truth; a signed attestation proves the signer and the report's integrity. It holds no funds and sends no escrow transaction. Use measurable structured criteria and inspect the returned limitations.

HTTP results use {service,data}. Failed or invalid upstream requests are not settled; after an uncertain payment response, reconcile the receipt before retrying. An HTTP 200 MCP envelope may contain a tool error. The public limit is 120 requests/minute/IP, including unpaid attempts. There is no contractual availability guarantee in this repository.

Registry metadata

server.json uses the existing official registry identity com.novarithm.www/agent-hub. A GitHub merge updates repository metadata; registry publication is a separate authenticated action with domain ownership proof. Preserve the existing namespace when publishing a new version.

The hosted server is operated by Novarithm. Contact: [email protected]. License: MIT.

来源：README.md，提交 715c407

工具

53

pricing

Free. Lists every paid tool with its price per call (USDC, Base mainnet).

无需输入参数。

job_result

Free. Reads the result of an async paid job (services: site-audit, deploy-proof, due-diligence-report). Pass the service and job_id returned by the paid tool.

输入参数job_id必填service必填

site_audit_quick

[PAID $5 USDC/call, x402, eip155:8453] Quick Bierus website audit (5 pages, no Lighthouse): ~25 checks, each ok/ko/not_measured with sources and two-source corroboration. Async: returns job_id + free result_url (about 1-2 min).

输入参数url必填namesector

site_audit_full

[PAID $25 USDC/call, x402, eip155:8453] Full Bierus website audit: 20 pages, Lighthouse mobile speed, ~25 checks ok/ko/not_measured with sources, plus registry comparison with the previous full run (observed / fixed / possible regression). Async: job_id + free result_url (about 2-4 min).

输入参数url必填namesector

test_website

[PAID $5 USDC/call, x402, eip155:8453] Signed passive website proof: page reachable, TLS certificate, http→https, response time, title, mixed content, real 404, internal links sample, optional expected text. ok/ko/not_measured + EIP-712 attestation.

输入参数url必填expect_textmax_response_ms

test_seo

[PAID $5 USDC/call, x402, eip155:8453] Signed passive SEO proof: SEO module scores (technical, content, links, local, AI visibility), title/meta lengths, canonical, single h1, lang, JSON-LD, indexable, sitemap. ok/ko/not_measured + EIP-712 attestation.

输入参数url必填

test_security_basics

[PAID $5 USDC/call, x402, eip155:8453] Signed PASSIVE security basics: TLS 1.2+, certificate expiry, HSTS, CSP, framing, nosniff, referrer policy, version disclosure, cookie flags, known-vulnerable JS versions in script URLs, mixed content, SPF/DMARC, security.txt. No scanning.

输入参数url必填

test_checkout

[PAID $25 USDC/call, x402, eip155:8453] Signed passive checkout-path proof for a store or product page: price/currency/availability, add-to-cart control, cart page, checkout links over https, payment provider, terms/returns/privacy/legal pages reachable, contact. Nothing added to cart, no payment.

输入参数url必填

verify_delivery

[PAID $99 USDC/call, x402, eip155:8453] Full signed delivery verification: website + SEO + security basics (+ checkout if store=true) + the client's acceptance criteria (expected texts, pages that must answer). One verdict pass/partial/fail and one EIP-712 attestation over all measurements. Async: job_id + free result_url.

输入参数url必填pagesstoreexpect_textmax_response_ms

check_provider

[PAID $0.5 USDC/call, x402, eip155:8453] Trust decision (trust/caution/avoid + score) for one paid agent provider: x402 offer, MCP, A2A card, 3 unpaid availability probes, domain reputation, OFAC check of payTo, ERC-8004 identity and agentWallet = payTo on Base.

输入参数url必填methodmcp_urlagent_id

compare_quality

[PAID $2 USDC/call, x402, eip155:8453] Compare 2-5 paid agent providers with the same measured checks and rank them (decision, budget, trust score, price, latency); returns the recommended provider and why.

输入参数urls必填max_price_usd

vendor_report

[PAID $9 USDC/call, x402, eip155:8453] Readable vendor due-diligence report: reputation, sanctions (OFAC/UN/EU/UK), product recalls, EU-Ready, email authentication, product offer; proceed/review/block, Markdown report, signed evidence hash. Async if slow (job_id + free result_url), cached 24 h.

输入参数gtinquerydomain必填marketsellerproduct_url

us_geocode

[PAID $0.003 USDC/call, x402, eip155:8453] Geocode one US street address with the U.S. Census Bureau: standardised address, lat/lon, state, county, census tract, block group, ZCTA, metro area, congressional district (official GEOIDs). No match = not charged.

输入参数address必填

uk_postcode

[PAID $0.002 USDC/call, x402, eip155:8453] UK postcode lookup (ONS Postcode Directory via postcodes.io): lat/lon, country, region, local authority, ward, parliamentary constituency, NHS ICB, police force, LSOA. Unknown postcode = not charged.

输入参数postcode必填

a2a_card_check

[PAID $0.01 USDC/call, x402, eip155:8453] Fetch and validate a peer agent's A2A Agent Card (v1.0 / v0.3): fields, skills, interfaces, auth, signature, reachability. Score 0-100 + issues.

输入参数url必填

mcp_probe

[PAID $0.01 USDC/call, x402, eip155:8453] Real MCP Streamable HTTP handshake (initialize + tools/list, no tool call): reachability, protocol version, tools, schemas, latency, OAuth metadata.

输入参数url必填

x402_probe

[PAID $0.01 USDC/call, x402, eip155:8453] Pre-payment check of an x402 endpoint: one unpaid request, decodes the 402 offer (v1/v2): network, USDC or not, USD price, payTo, testnet, red flags.

输入参数url必填method

agent_ready_score

[PAID $0.05 USDC/call, x402, eip155:8453] Agent-ready score 0-100 (A-F) of a website or API: AI-bot access, llms.txt, A2A agent card, MCP manifest, x402 discovery, OpenAPI and agentic-commerce markup, with fixes ranked by impact.

输入参数url必填

clone_blueprint

[PAID $49 USDC/call, x402, eip155:8453] Architecture plan + installation checklist for one AI-run business: clone=agency (AI sales-agent agency), trading-house (AI B2B trading house) or api-store (API store for AI agents). Components, data flows, build phases, done-when checklist, go-live checks. No source code, no revenue promise. Unknown clone = not charged.

输入参数clone必填

email_check

[PAID $0.003 USDC/call, x402, eip155:8453] Validate one email address without sending mail: syntax, MX, disposable, free webmail, role account, SPF/DMARC. Returns deliverable/risky/undeliverable/invalid with score.

输入参数email必填

domain_email_health

[PAID $0.01 USDC/call, x402, eip155:8453] Audit a domain's email authentication: MX, SPF, DMARC, DKIM (20 selectors), MTA-STS, TLS-RPT, BIMI and domain age. Returns an A-F grade with concrete fixes.

输入参数domain必填

evaluate_deliverable

[PAID $0.25 USDC/call, x402, eip155:8453] Evaluate a deliverable (text, JSON or URL) against a job spec (free text or JSON criteria): verdict pass/partial/fail, score, checked criteria, and a signed EIP-712 attestation whose digest is the ERC-8183 complete/reject reason. No funds held.

输入参数spec必填job_idchain_idcontractthresholddeliverable必填

verify_attestation

[PAID $0.001 USDC/call, x402, eip155:8453] Verify an attestation token issued by evaluate_deliverable: recovers the EIP-712 signer, checks it is our evaluator, returns verdict, score, jobId and the bytes32 reason.

输入参数token必填

eu_ready_check

[PAID $0.12 USDC/call, x402, eip155:8453] Before buying or selling a product in the EU: Safety Gate alerts (barcode or brand+words), GPSR manufacturer / EU responsible person on the page, seller sanctions (OFAC/UN/EU/UK) and price at the ECB rate, with a ready/review/block decision.

输入参数tourlgtinpricequerysellercurrency

fragrance_check

[PAID $0.15 USDC/call, x402, eip155:8453] Risk signals for a fragrance listing: sales channel, price per ml, listing words, seller domain and EU Safety Gate. Does not authenticate a physical bottle. Provide url, or brand and seller_domain.

输入参数urlbrandpriceproductsize_mlcurrencybatch_codeseller_domain

fx_convert

[PAID $0.002 USDC/call, x402, eip155:8453] Convert an amount between two currencies at the official ECB reference rate, today or any date since 1999, incl. CFA franc and Gulf pegs. Returns rate, amount, rate date.

输入参数to必填datefrom必填amount

fx_timeseries

[PAID $0.005 USDC/call, x402, eip155:8453] Daily official ECB exchange rates for a currency pair over up to 366 days, with min, max, mean and % change. Useful for invoicing, hedging checks and reporting.

输入参数to必填endfrom必填start

fx_latest

[PAID $0.002 USDC/call, x402, eip155:8453] All official ECB reference rates for any base currency on the latest or a given fixing date, including pegged currencies (XOF, XAF, AED, SAR). One call, full rate table.

输入参数basedatesymbols

pre_purchase_check

[PAID $0.08 USDC/call, x402, eip155:8453] Bundle before paying: verified price/stock (schema.org), seller trust score (RDAP, TLS, DMARC, policies, phishing lists) and recall status (CPSC, openFDA, RappelConso) for a product URL, with a proceed/caution/stop decision.

输入参数url必填gtinquerymarket

price_availability

[PAID $0.03 USDC/call, x402, eip155:8453] Verified price, currency, availability and seller of a product page URL from its schema.org JSON-LD / microdata / OpenGraph data. robots.txt respected; blocked or unpriced pages return 'unavailable' (not charged).

输入参数url必填

gtin_recall

[PAID $0.01 USDC/call, x402, eip155:8453] Exact recall check for one EAN/UPC/GTIN barcode (check digit validated) across RappelConso, CPSC and openFDA.

输入参数gtin必填

sanctions_screen

[PAID $0.01 USDC/call, x402, eip155:8453] Screen a person or company name against OFAC SDN, UN, EU and UK sanctions lists in one call (fuzzy, aliases). Returns matches with score, list, programs, countries.

输入参数name必填typelistscountrythresholdbirth_yearmax_results

sanctions_crypto_address

[PAID $0.005 USDC/call, x402, eip155:8453] Check a crypto address (BTC, ETH/EVM, TRON, LTC, XMR, SOL and more) against OFAC SDN digital currency addresses. Returns listed true/false and the sanctioned entity.

输入参数address必填

seller_reputation

[PAID $0.02 USDC/call, x402, eip155:8453] Trust score 0-100 for an online store domain or URL: domain age (RDAP), HTTPS, MX/SPF/DMARC, return policy and contact, Tranco rank, phishing lists, scam patterns. Short JSON with risk, advice, red_flags, reasons.

输入参数domain必填

seo_technical_audit

[PAID $0.02 USDC/call, x402, eip155:8453] Technical SEO audit of a URL: HTTPS and redirects, www duplicate, canonical, noindex, title/meta/H1, viewport, hreflang, Open Graph, sitemap and robots.txt, soft 404, response time, compression, images alt, schema.org, JS-only content. Score 0-100 + ranked fixes.

输入参数url必填

seo_keywords_content

[PAID $0.01 USDC/call, x402, eip155:8453] On-page keyword and content analysis: focus keyword (given or detected) placement in title/H1/meta/first 100 words/URL, density, top terms and phrases, headings outline, FAQ questions, word count, readability. Score + fixes.

输入参数url必填target

seo_local_presence

[PAID $0.01 USDC/call, x402, eip155:8453] Local SEO / listings readiness from the website: phone (tel: links), postal address, e-mail, Organization/LocalBusiness JSON-LD (address, telephone, geo, hours, sameAs), Google Maps/Business and review-platform links, social profiles. Score + fixes.

输入参数url必填

geo_ai_visibility

[PAID $0.02 USDC/call, x402, eip155:8453] GEO audit - can ChatGPT, Claude, Perplexity, Gemini cite this site? AI search/user/training bots allowed in robots.txt, text readable without JavaScript, schema.org, metadata, llms.txt, sitemap, agentic-commerce signals. Score + ranked fixes.

输入参数url必填

seo_full_audit

[PAID $0.06 USDC/call, x402, eip155:8453] Full SEO + GEO audit in one call: technical, keywords and content, internal links (12-page crawl), local presence and AI visibility, weighted 0-100 score and the 12 priority actions across all areas, with module details.

输入参数url必填

trust_trio

[PAID $0.03 USDC/call, x402, eip155:8453] Trust Trio: A2A agent card + MCP server probe + x402 payment-offer check of one AI agent in a single call (no payment made to it). Returns trusted/partial/untrusted, a trust score and every issue.

输入参数url必填mcp_urlx402_urlx402_method

verify_usdc_payment

[PAID $0.002 USDC/call, x402, eip155:8453] Verify a USDC payment on Base: tx succeeded, USDC sent to the expected recipient (and from the expected sender), at least min_amount, enough confirmations. Returns verdict + decoded transfers. Unknown tx = not charged.

输入参数tofromchaintx_hash必填min_amountmin_confirmations

usdc_balance

[PAID $0.001 USDC/call, x402, eip155:8453] Current USDC balance of an address on Base or Base Sepolia (balanceOf on the official Circle contract).

输入参数chainaddress必填

vendor_due_diligence

[PAID $0.5 USDC/call, x402, eip155:8453] Vendor due diligence in one call: seller domain reputation, legal-name sanctions screening (OFAC/UN/EU/UK), product recalls (barcode or keywords) and EU-Ready (Safety Gate, GPSR, ECB price). Returns proceed/review/block with reasons.

输入参数gtinquerydomain必填marketsellerproduct_url

invoice_duplicate_check

[PAID $0.005 USDC/call, x402, eip155:8453] Compare up to 1000 caller-supplied invoice records for repeated supplier/reference/document identity and conflicting amounts or currency. Exact decimal strings; no external calls, accounting certification or payment decision. EOA EIP-712 payments only; ERC-1271/6492 unsupported. MCP body max 64 KiB. Experimental price; input facts are not authenticated.

输入参数invoices必填

migration_compare

[PAID $0.010 USDC/call, x402, eip155:8453] Compare two supplied JSON exports using unique string key fields. Report additions, removals and changed fields, keeping missing/null/boolean/number distinct. No database access or writes; source export completeness is not established. EOA EIP-712 payments only; ERC-1271/6492 unsupported. MCP body max 64 KiB. Experimental price; input facts are not authenticated.

输入参数after必填before必填key_fields必填compare_fields

incident_timeline

[PAID $0.005 USDC/call, x402, eip155:8453] Order up to 1000 supplied agent events in UTC, preserve undated events, remove identical retransmissions and reject conflicting event IDs. Evidence links are references only; chronology does not establish causality or clock accuracy. EOA EIP-712 payments only; ERC-1271/6492 unsupported. MCP body max 64 KiB. Experimental price; input facts are not authenticated.

输入参数events必填

data_freshness_check

[PAID $0.003 USDC/call, x402, eip155:8453] Evaluate supplied observation timestamps against caller-declared TTL and the server clock, or an explicitly supplied historical reference. Return stale/within_declared_ttl/future_observation/unknown. Does not authenticate timestamps or establish underlying fact freshness. EOA EIP-712 payments only; ERC-1271/6492 unsupported. MCP body max 64 KiB. Experimental price; input facts are not authenticated.

输入参数as_ofrecords必填

field_provenance_check

[PAID $0.004 USDC/call, x402, eip155:8453] Inspect up to 1000 supplied product fields and sources: missing references, declared expiry, future or undated observations, and content identity hashes. References are never fetched; neither source origin nor support for a field value is authenticated. EOA EIP-712 payments only; ERC-1271/6492 unsupported. MCP body max 64 KiB. Experimental price; input facts are not authenticated.

输入参数as_offields必填sources必填

quote_cost_normalize

[PAID $0.008 USDC/call, x402, eip155:8453] Normalize exact decimal quote amounts using supplied currency rates. Up to 1000 total line items. Missing shipping, tax or other costs stay unknown. Rank only complete quotes for identical supplied item-ID/quantity baskets; no rate verification, fiscal advice or order. EOA EIP-712 payments only; ERC-1271/6492 unsupported. MCP body max 64 KiB. Experimental price; input facts are not authenticated.

输入参数ratesquotes必填base_currency必填

renewal_cohort_check

[PAID $0.006 USDC/call, x402, eip155:8453] Compute UTC monthly cohorts and one declared renewal cycle per supplied subscription. Eligible at supplied due date plus grace; a matching confirmation is a declaration, never proof of collection. Up to 1000 subscriptions and 1000 events. No revenue, MRR, ARR or certain churn inferred. EOA EIP-712 payments only; ERC-1271/6492 unsupported. MCP body max 64 KiB. Experimental price; input facts are not authenticated.

输入参数as_of必填events必填grace_secondssubscriptions必填

api_contract_diff

[PAID $0.005 USDC/call, x402, eip155:8453] Diff two supplied OpenAPI 3.0.x/3.1.x documents: operations, parameters, response codes and a listed inline JSON-schema subset. At most 1000 operations/document, 12 schema levels and 4000 compared schema nodes. Unresolved references and excluded semantics remain explicit; no compatibility certification or deployed API verification. EOA EIP-712 payments only; ERC-1271/6492 unsupported. MCP body max 64 KiB. Experimental price; input facts are not authenticated.

输入参数after必填before必填

版本历史

2
  1. v1.1.0最新Oct 25, 2026
  2. v1.0.0Oct 23, 2026

评分

已满足适用检查项的 100%

该评分衡量此收录条目的完整程度，依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价，也不表示服务器安全或当前可用：可连通性是带日期的检查结果，评分也不包含安装量或用户评价。

  • 近 30 天内可连通必需25 分
  • 已声明认证方式必需10 分
  • 已列出工具必需15 分
  • 描述必需15 分
  • 图标10 分
  • 文档15 分
  • 许可证10 分