Agent Utils (x402)

dev.workers.revenue-agent-jw.agent-utils-x402-production由 agent-utils-x402-production.revenue-agent-jw.workers.dev 发布官方发布者v1.8.0更新于 Nov 7, 2026

Public records, email-auth DNS and OSV package vuln checks for agents: SEC, FDA, trials. x402 USDC

已验证Streamable HTTP可网页运行金融安全与监控数据与分析

概览

AI 生成的概览

远程 MCP 服务器,汇集美国公共记录查询(召回、SEC、FDA、临床试验、天气)及安全与合规检查,按次以 USDC 通过 x402 付费。

可以做什么
  • 查询产品与车辆召回、加密地址的 OFAC 制裁名单,以及 FDA 药品标签、不良事件和 NDC 编码
  • 检索 SEC EDGAR 申报、8-K 临时报告和 13F 机构持仓,以及联邦公报文件和 ClinicalTrials.gov 研究
  • 获取美国天气预报、警报和 NWS 气候日最高/最低温,并计算美国工作日或列出联邦假日
  • 对不可信文本做提示注入检测,并以确定性规则脱敏个人身份信息
  • 审计邮件认证 DNS(SPF、DMARC、DKIM、MTA-STS),并通过 OSV.dev 检查开源软件包漏洞
  • 校验 x402 支付端点,并评估 Crypto Twitter 喊单者的历史表现
适用场景
适合需要权威美国公共数据做尽职调查、合规、安全或研究的场景,也适合在智能体流程中加入防护检查(注入扫描、PII 脱敏、依赖漏洞),而无需自行对接各数据源 API。
运行要求
需要远程 streamable HTTP 端点;未声明本地安装、账号或 API 密钥。付费工具通过 x402 传输按每次 0.002 USDC(Base 链)计费,因此需要已充值的钱包和支持 x402 的客户端;us_federal_holidays 免费,可用于测试连接。
安装前请注意
多数工具按次以 Base 链上的 USDC 付费,使用会真实花费钱包资金。提交给注入扫描和 PII 脱敏工具的文本会发送到第三方端点。结果仅供参考:制裁筛查仅做精确匹配,喊单者评分仅基于结果,诚实性未纳入评估。

安装

在 SourceWeft 中

  1. 打开 控制台中的 Agent Utils (x402),将其添加到工作区。
  2. 为需要使用其工具的对话启用该服务。

Web executable,通过 Streamable HTTP。 远程服务在工作区中配置后即可从网页运行时运行。

交给智能体安装

把这段提示词粘贴到 Claude Code、Codex、Cursor 等智能体,或 SourceWeft 对话中。智能体会读取该服务器的安装指南,先向你展示发布者、端点和登录方式,经你同意后再把它添加到你的客户端。密钥不会写进任何命令。

阅读 https://sourceweft.com/mcp/dev.workers.revenue-agent-jw.agent-utils-x402-production%2Fagent-utils/install.md,并按其中说明把这个 MCP 服务器接入我的客户端。修改任何配置之前,先告诉我它的发布者、端点和登录方式,等我确认。不要把 API 密钥写进命令或我会提交的文件;问我密钥应从哪里获取。

查看智能体所依据的安装指南

其他 MCP 客户端

把它添加到你客户端的 mcpServers 配置中。

{
  "mcpServers": {
    "agent-utils-x402": {
      "type": "http",
      "url": "https://agent-utils-x402-production.revenue-agent-jw.workers.dev/mcp"
    }
  }
}

工具

22

recall_check

US recall check (NHTSA, CPSC, FDA)

Product and vehicle recall lookup across US agencies in one call: NHTSA (cars, by VIN or make/model/year), CPSC (consumer products, by UPC or product name) and FDA enforcement reports (food, drugs, medical devices). Useful for safety checks before buying, selling or using a product or vehicle. Returns normalized recalls (number, date, hazard/reason, remedy, link), newest first, plus anyRecall. Errors: 400 JSON {error} for invalid input. PAID: $0.002 USDC per call on Base via x402 (MCP transport: retry with params._meta["x402/payment"]). Same tool over plain HTTP: GET /v1/recalls/check.

输入参数qupcvinmakeyearbrandlimitmodelsince

sanctions_address_check

OFAC sanctions check for crypto addresses

OFAC sanctions screening for crypto wallet addresses: exact match against every digital currency address on the U.S. Treasury OFAC SDN list (BTC, ETH, USDT, USDC, TRX, SOL, LTC, XMR and more). Useful for compliance and AML checks before paying a counterparty or an x402 payTo. Up to 20 comma-separated addresses; returns sanctioned true/false, SDN name, programs, official link and list freshness. Errors: 400 JSON {error} for invalid input. PAID: $0.002 USDC per call on Base via x402 (MCP transport: retry with params._meta["x402/payment"]). Same tool over plain HTTP: GET /v1/sanctions/address.

输入参数address必填

climate_day

NWS climate-day high/low + official CLI

Daily high and low temperature for a US weather station from NWS: running provisional high/low over the station's climate day (midnight-midnight local standard time) and the official NWS Daily Climate Report (CLI) high/low once issued, flagged preliminary or final. Useful for temperature settlement, weather prediction markets and climate records. Optional temperature buckets (width/offset or explicit edges). Errors: 400 JSON {error} for invalid input. PAID: $0.002 USDC per call on Base via x402 (MCP transport: retry with params._meta["x402/payment"]). Same tool over plain HTTP: GET /v1/weather/climate-day.

输入参数clidateedgesroundunitsstation必填bucket_widthbucket_offset

us_weather

US weather (NWS)

US weather forecast, current conditions and severe-weather alerts for a latitude/longitude from the National Weather Service (NWS) in one call. Useful when an agent needs local temperature, a forecast or active alerts for a US location. Returns the latest station observation, next 12 hourly periods, 6-period forecast and active alerts as normalized JSON. Errors: 400 JSON {error} for invalid input. PAID: $0.002 USDC per call on Base via x402 (MCP transport: retry with params._meta["x402/payment"]). Same tool over plain HTTP: GET /v1/weather/us.

输入参数lat必填lon必填

sec_filings

SEC EDGAR filings + XBRL facts

SEC EDGAR company filings and financials for a stock ticker or CIK in one call: latest 10-K, 10-Q, 8-K and other forms with dates, accession numbers, primary document and index URLs, plus optional XBRL facts (revenue, net income, shares outstanding). Useful for company research, due diligence and earnings monitoring. Errors: 400 JSON {error} for an unknown ticker; 503 while the shared SEC rate limit is busy. PAID: $0.002 USDC per call on Base via x402 (MCP transport: retry with params._meta["x402/payment"]). Same tool over plain HTTP: GET /v1/sec/filings.

输入参数cikfactsformslimitticker

injection_scan

Prompt-injection pre-filter

Prompt-injection detection for untrusted text (web pages, emails, documents, tool output) before it reaches an LLM; a guardrail for agent pipelines. Flags instruction overrides, role spoofing, secret/system-prompt exfiltration, image beacons, tool-call markup, hidden Unicode, hidden HTML and base64 payloads. Returns a 0-100 risk score, risk level and matched rules. Deterministic rules, no LLM. JSON body {text}, max 32 KB. Errors: 400 missing text, 413 too large. PAID: $0.002 USDC per call on Base via x402 (MCP transport: retry with params._meta["x402/payment"]). Same tool over plain HTTP: POST /v1/text/injection-scan.

输入参数text必填

us_business_days

US federal business days

US business days calculator: counts working days between two dates (inclusive), excluding weekends and observed US federal holidays per 5 U.S.C. 6103 and OPM rules. Useful for deadlines, SLAs, shipping and payment due dates. Returns the count and lists the holidays skipped. Errors: 400 JSON {error} for invalid input. PAID: $0.002 USDC per call on Base via x402 (MCP transport: retry with params._meta["x402/payment"]). Same tool over plain HTTP: GET /v1/calendar/us-business-days.

输入参数to必填from必填

x402_check

x402 endpoint readiness check

x402 endpoint validator and payment-readiness checker, useful for sellers debugging a paywall or buyers vetting an endpoint before paying. Fetches the URL unpaid, decodes the 402 challenge and grades network, USDC asset, payTo, price vs facilitator fees, EIP-712 domain, CORS and Bazaar metadata. Returns a 0-100 score and a fix list. Never pays the target. Errors: 400 JSON {error} for invalid input. PAID: $0.002 USDC per call on Base via x402 (MCP transport: retry with params._meta["x402/payment"]). Same tool over plain HTTP: GET /v1/x402/check.

输入参数url必填method

caller_avoidance_score

Caller Avoidance Score (callers-avoid-0.1, outcome-only; honesty deferred): toxicity / avoid grade for a Crypto Twitter handle from public-call follower sim (post+5m, fees). Returns avoid_score 0-100, band, components with receipts (sim_mean, sim_win_rate, rug_rate, hit_2x_24h + Wilson CI), verdict (copy_buy_loses|insufficient_sample|mixed), and public post id links — not full post text. Free when n_scored<4 via GET /v0/callers/score. Not financial advice. PAID: $0.002 USDC per call on Base via x402 (MCP transport: retry with params._meta["x402/payment"]). Same tool over plain HTTP: GET /v1/callers/score.

输入参数handle必填

clinical_trial_study

ClinicalTrials.gov study by NCT ID

ClinicalTrials.gov study lookup by NCT ID (official v2 API). Useful when an agent needs the facts of one trial. Returns titles, sponsor and collaborators, status and why stopped, key dates, phases, design, enrollment, conditions, interventions, primary outcomes, eligibility (ages, sex, criteria text), summary, site count, countries and up to 25 sites, plus results link, source URL and retrievedAt. Errors: 400 bad NCT ID, 404 not found. PAID: $0.002 USDC per call on Base via x402 (MCP transport: retry with params._meta["x402/payment"]). Same tool over plain HTTP: GET /v1/clinical-trials/study.

输入参数nct必填

fda_drug_label

FDA drug label (openFDA)

FDA drug label (package insert, SPL) lookup via openFDA by brand or generic name, NDC or set ID; prefers the original packager's latest label. Useful for indications, dosing, boxed warnings, contraindications, interactions and adverse reactions. Returns label metadata (brand, generic, manufacturer, application number, NDCs, RxCUI) and selected sections trimmed to max_chars, plus DailyMed link and retrievedAt. Errors: 400 invalid input, 404 no label. PAID: $0.002 USDC per call on Base via x402 (MCP transport: retry with params._meta["x402/payment"]). Same tool over plain HTTP: GET /v1/fda/drug-label.

输入参数ndcnameset_idsectionsmax_chars

fda_adverse_events

FDA adverse event counts (FAERS)

FDA adverse event report counts (FAERS via openFDA) for a drug by generic or brand name, optionally filtered by reaction, date range or serious reports only. Useful for drug safety signal checks and pharmacovigilance research. Returns total, serious, non-serious and death report counts and the top reported reactions, with source URL, FDA data date and retrievedAt. Reports do not prove causation. Errors: 400 invalid input. PAID: $0.002 USDC per call on Base via x402 (MCP transport: retry with params._meta["x402/payment"]). Same tool over plain HTTP: GET /v1/fda/adverse-events.

输入参数drug必填limitsinceuntilreactionserious_only

fda_ndc_lookup

FDA NDC directory lookup

FDA National Drug Code (NDC) directory lookup via openFDA by product or package NDC (dashed, or 10/11-digit billing format) or by drug name. Useful for pharmacy, claims and inventory data. Returns product NDC, brand and generic names, labeler, dosage form, route, active ingredients and strengths, marketing category and dates, application number, DEA schedule and packages, with DailyMed link and retrievedAt. Errors: 400 invalid input, 404 no match. PAID: $0.002 USDC per call on Base via x402 (MCP transport: retry with params._meta["x402/payment"]). Same tool over plain HTTP: GET /v1/fda/ndc.

输入参数ndcnamelimit

sec_8k_filings

SEC 8-K current reports

SEC 8-K current reports from EDGAR: one company's 8-Ks by ticker or CIK, or the latest 8-Ks market-wide, optionally by item code (2.02 earnings, 5.02 officer changes, 1.01 agreements) or full-text phrase. Useful for event monitoring and research. Returns company, CIK, tickers, filing date, accession number, decoded items and document and index URLs, with retrievedAt. Errors: 400 invalid input, 503 SEC rate limit busy. PAID: $0.002 USDC per call on Base via x402 (MCP transport: retry with params._meta["x402/payment"]). Same tool over plain HTTP: GET /v1/sec/8k.

输入参数qcikitemslimitsinceuntilticker

sec_13f_holdings

SEC 13F institutional holdings

SEC 13F-HR institutional holdings for a filer by CIK or ticker (latest quarter or a given accession), parsed from the EDGAR information table. Useful for tracking what funds like Berkshire Hathaway hold. Returns period, holdings ranked by value with issuer, CUSIP, class, shares, put/call and portfolio percent, totals checked against the cover page, recent 13F filings and source URLs. Tables over 1.5 MB return 422. Errors: 400, 404 no 13F. PAID: $0.002 USDC per call on Base via x402 (MCP transport: retry with params._meta["x402/payment"]). Same tool over plain HTTP: GET /v1/sec/13f.

输入参数ciklimittickeraccession

email_auth_audit

Email auth DNS audit (SPF, DMARC, DKIM, MTA-STS)

Email authentication DNS audit for a domain or email address: SPF with recursive 10-lookup count and all qualifier, DMARC policy, pct and report addresses, DKIM selector probe, MTA-STS with policy file, TLS-RPT, BIMI and MX. Useful for deliverability checks, Google/Yahoo bulk-sender readiness and spoofing risk. Returns grade A-F, score, spoofable flag, parsed records and plain-language issues. Errors: 400 invalid domain, 404 NXDOMAIN. PAID: $0.002 USDC per call on Base via x402 (MCP transport: retry with params._meta["x402/payment"]). Same tool over plain HTTP: GET /v1/dns/email-auth.

输入参数domain必填selectors

osv_package_vulns

Package vulnerability check (OSV.dev)

Open-source package vulnerability check via OSV.dev for npm, PyPI, Go, crates.io, Maven, RubyGems, NuGet, Packagist and more, by ecosystem+name+version, purl, or up to 10 purls. Useful before installing or upgrading a dependency. Returns vulnerable flag, count, CVE/GHSA aliases, CVSS score and severity, fixed versions and a verified upgradeTo version. Errors: 400 invalid input, 502 OSV unavailable. PAID: $0.002 USDC per call on Base via x402 (MCP transport: retry with params._meta["x402/payment"]). Same tool over plain HTTP: GET /v1/osv/package.

输入参数namepurllimitversionpackagesecosystem

text_pii_redact

Deterministic PII redact (email/phone/SSN/card/IP/IBAN/routing/secrets)

Deterministic PII detect-and-redact for untrusted text (tickets, chat logs, LLM prompts) before storage or model input. Finds email, phone, US SSN, credit card (Luhn), IP, IBAN (mod-97), US ABA routing, and secret prefixes (sk-, ghp_, AKIA…). Checksum-validated; no LLM/NER. Returns findings with offsets, placeholders, redacted copy and countsByType. Optional types= filter. POST JSON {text} max 32 KB (GET ?text= max 2,000). Errors: 400 bad input. PAID: $0.002 USDC per call on Base via x402 (MCP transport: retry with params._meta["x402/payment"]). Same tool over plain HTTP: POST /v1/text/pii-redact.

输入参数text必填types

solana_pre_promo

Solana pre-promo covered-shelf aggregates vs matched null

Pre-promo tape lookup for a Solana token when we hold a locked [-60m,0] window around its DexScreener paid-promo timestamp (specialty covered shelf, not a universal catalog). Returns raw aggregates only: net buy USD, unique buyers, largest buyer share, and the same stats vs a matched-null mean from other covered tokens (intensity-tercile leave-one-out). Uncovered token -> 404 with coverage:false and the live coverage rate — never fabricated numbers. Free coverage probe: GET /v0/solana/pre-promo-coverage. Not financial advice; no wallet-to-person attribution. PAID: $0.01 USDC per call on Base via x402 (MCP transport: retry with params._meta["x402/payment"]). Same tool over plain HTTP: GET /v1/solana/pre-promo.

输入参数token必填

us_federal_holidays

US federal holidays (free)

FREE. US federal holidays (observed dates) for a year, per 5 U.S.C. 6103. Useful to test the connection before paying.

输入参数year

版本历史

5
  1. v1.8.0最新Nov 7, 2026
  2. v1.7.0Nov 5, 2026
  3. v1.6.0Nov 4, 2026
  4. v1.5.0Nov 3, 2026
  5. v1.2.0Oct 22, 2026

评分

已满足适用检查项的 72%

该评分衡量此收录条目的完整程度,依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价,也不表示服务器安全或当前可用:可连通性是带日期的检查结果,评分也不包含安装量或用户评价。

  • 近 30 天内可连通必需25 分
  • 已声明认证方式必需10 分
  • 已列出工具必需15 分
  • 描述必需15 分
  • 图标10 分

    请在注册中心条目中发布图标。

  • 文档15 分

    请声明包含 README 的 GitHub 仓库,或在 OAuth 受保护资源元数据中提供 resource_documentation。

  • 许可证不适用

    托管服务按其提供方的条款使用,因此这里不要求许可证。此检查项不计入百分比。