DYOE Trust Tools (x402)

io.github.bjyoe2016由 GitHub 账号 bjyoe2016 发布v1.0.0更新于 Oct 26, 2026

22 pay-per-call x402 tools for agents: scam checks, payment pre-flight, approvals, data. USDC/Base

已验证STDIO仅桌面网页搜索与抓取金融安全与监控

概览

AI 生成的概览

按次付费的信任工具集：22 个 x402 工具，用于诈骗核查、付款预检、钱包筛查、审批与数据查询，以 Base 上的 USDC 结算。

可以做什么
  • 核查网站、企业、商店、代币和钱包的诈骗、欺诈与跑路风险，返回结论、信任分和风险信号
  • 付款前预检交易、筛查钱包地址是否受制裁，并按策略获取审批或人工签核及签名回执
  • 提取联系方式、网页正文与元数据，调研公司、域名和声誉历史
  • 签发机构凭证，并查询加密货币价格、市场概况、热门币、涨跌榜与汇率
  • 获取天气、维基百科主题摘要，以及面向行程规划的综合目的地信息
适用场景
适合需要在开放网络上付款或交易的智能体，在信任对方或转账前做对手方核查。也适合想通过一个服务器快速查询加密行情、汇率、天气或维基百科内容的场景。
运行要求
通过 npx 以 stdio 在本地运行（需 Node.js）。无需账号或 API 密钥。可选设置 WALLET_PRIVATE_KEY，指向持有 USDC 的 Base 专用低余额钱包以启用付费调用；不设置则每次仅返回 402 报价。DYOE_MAX_PAYMENT_USD 限制单次调用花费（默认 0.10）。需能访问 DYOE 端点。
安装前请注意
付费模式需要 WALLET_PRIVATE_KEY，这是用于在 Base 上签署 USDC 付款的私钥；请使用只有少量资金的临时钱包，切勿使用主钱包。每次调用都花真钱，dyoe_review 为 15 美元，超过默认上限。dyoe_approve 和 dyoe_review 会代表你向 DYOE 记录审批请求。域名、钱包地址和网址等查询内容会发送给第三方端点。

安装

在 SourceWeft 中

  1. 打开 控制台中的 DYOE Trust Tools (x402)，将其添加到工作区。
  2. 为需要使用其工具的对话启用该服务。

Desktop only，通过 STDIO。 STDIO 服务会启动本地进程，因此需要 SourceWeft 桌面宿主。

其他 MCP 客户端

参照 仓库 中的启动说明。

README

dyoe-trust-mcp

MCP server for DYOE, the trust layer for AI agents. It gives Claude, Cursor or any MCP client 22 pay-per-call tools from agents.dyoeway.org: scam and fraud checks, payment pre-flight, wallet screening, policy approval and human sign-off, contact extraction, company research, and data tools. Every call settles in USDC on Base via x402. You need no account or API key.

  • Free preview by default. Without a wallet, each tool makes one unpaid request and returns the x402 payment requirements (HTTP 402: price, network, payTo). Nothing is signed or spent.
  • Paid mode. Set WALLET_PRIVATE_KEY to a dedicated, low-balance Base wallet holding USDC. The key stays on your machine (stdio) and signs each payment locally. Each call is capped at DYOE_MAX_PAYMENT_USD (default 0.10). Tools priced above the cap (dyoe_review, $15) are refused until you raise it.

Install

Claude Desktop

Add this to claude_desktop_config.json (macOS: ~/Library/Application Support/Claude/claude_desktop_config.json, Windows: %APPDATA%\Claude\claude_desktop_config.json), then restart Claude:

json
{  "mcpServers": {    "dyoe": {      "command": "npx",      "args": ["-y", "dyoe-trust-mcp"],      "env": {        "WALLET_PRIVATE_KEY": "",        "DYOE_MAX_PAYMENT_USD": "0.10"      }    }  }}

Leave WALLET_PRIVATE_KEY empty for preview mode. The .mcpb bundle from the GitHub releases also installs with one click (Settings > Extensions).

Cursor

Add this to ~/.cursor/mcp.json (all projects) or .cursor/mcp.json (one project):

json
{  "mcpServers": {    "dyoe": {      "command": "npx",      "args": ["-y", "dyoe-trust-mcp"],      "env": { "WALLET_PRIVATE_KEY": "", "DYOE_MAX_PAYMENT_USD": "0.10" }    }  }}

Smithery

bash
npx -y @smithery/cli mcp add bjyoe2016/dyoe-trust-mcp --client claude   # or --client cursor

Any MCP client

bash
npx -y dyoe-trust-mcp          # stdio

Tools (22)

Prices are what the endpoint charges per call. The live 402 is the authority, and every result reports the price it quoted.

ToolPriceWhat it does
dyoe_verify$0.01DYOE Trust Check: Check whether a website, business, or wallet is a scam before an agent trusts or pays it — fraud, phishing and rug-risk screening. Returns verdict (safe/caution/avoid), trust_score, domain age, red_flags. Input: ?target=domain
dyoe_transaction$0.10DYOE Payment Pre-Flight: Vet an entire payment before an agent sends money: is the counterparty site legit, is the payee wallet sanctioned or disposable, is the amount within policy. Returns proceed/caution/stop, reasons, and a signed attestation — one go/no-go instead of three calls. Input: ?domain=merchant.com&wallet=0x...&amount=500
dyoe_wallet$0.05DYOE Wallet Screening: Screen a crypto wallet address before an agent sends funds to it: OFAC sanctions check, on-chain footprint (empty or disposable address), human-vouch overlay. Returns verdict (safe/caution/avoid), sanctioned flag, on-chain activity, red_flags. Input: ?address=0x...
dyoe_approve$0.02DYOE Policy Authorization: Approve or deny an agent action instantly against a human-set policy — no waiting. Returns a signed decision receipt; anything over the policy line escalates to a human. Input: ?action=&counterparty=&amount= (counterparty required)
dyoe_review$15.00DYOE Human Sign-Off: Get a named human to review an agent action against a checklist and sign off on it. Poll /api/task?id= for the signed receipt. Priced on the amount at stake. Input: ?action=&counterparty=&amount= (counterparty required)
dyoe_contacts$0.01DYOE Contact Extraction: Extract public business emails, phone numbers, and social profiles from a website. Batch-safe contact enrichment for autonomous agents. Input: website URL. Returns structured JSON.
dyoe_intel$0.10DYOE Company Research: Research a company or website in one call: what they do, legitimacy verdict, domain age, how to reach them, social presence, scam red flags — background checks for agents. Sources disclosed, not a black box: RDAP registry domain age, HTTPS reachability, on-page contact signals, DYOE human-vouch registry. Input: ?target=domain
dyoe_merchant$0.05DYOE Store Safety Check: Is this online store safe to buy from? Scam/fraud check + trust verdict (safe/caution/avoid) + store signals (checkout, returns, payment methods) — counterparty trust for shopping & commerce agents before they pay. Input: ?url=
dyoe_audit$0.05DYOE Website Audit: Score any website 0-100 for legitimacy, trust, SEO and contactability — due diligence on a company in one call. Returns a verdict plus prioritized fixes. Input: ?url=domain
dyoe_reputation$0.05DYOE Reputation History: Look up the track record of any domain or wallet: how many times it has been assessed, verdict history, times flagged, first and last seen, a reputation score and a signed credential — a credit score for counterparties. Computed only from DYOE's own logged prior assessments; thin history is labeled as such. Input: ?target=
dyoe_credential_org$0.10DYOE Org Credential: Issue a signed, independently verifiable credential that a business domain passed a trust check — returns verdict, trust_score and domain_age. Input: ?domain=
dyoe_token$0.05DYOE Token Intelligence: Look up a token's price and market data plus a scam and rug-risk read on the project behind the coin — market data and counterparty trust in one call. Input: ?symbol=
dyoe_extract$0.01DYOE Text Extraction: Extract clean main text content from any web page (no nav/ads) — for research & summarizing agents. Input: ?url=
dyoe_metadata$0.01DYOE Page Metadata: Extract title, description, OpenGraph image, favicon & canonical from any URL — link previews & summaries. Input: ?url=
dyoe_crypto$0.01DYOE Crypto Price: Live crypto price + 24h change, market cap & volume for any coin — for trading agents. Input: ?symbol=btc
dyoe_market$0.01DYOE Crypto Market: Global crypto market overview — total market cap, 24h change, BTC/ETH dominance. Input: (none)
dyoe_trending$0.01DYOE Trending Coins: The coins trending right now — for trading & research agents. Input: (none)
dyoe_movers$0.01DYOE Top Movers: Top gainers & losers (24h) across the top 100 coins — for trading agents. Input: (none)
dyoe_fx$0.01DYOE Currency Conversion: Currency conversion + live exchange rate (ECB data). Input: ?from=USD&to=EUR&amount=100
dyoe_weather$0.01DYOE Weather: Current conditions + 3-day forecast for any city — for travel & planning agents. Input: ?city=Atlanta
dyoe_wiki$0.01DYOE Topic Summary: Factual summary of any topic from Wikipedia — for research agents. Input: ?topic=Bitcoin
dyoe_destination$0.05DYOE Destination Intel: Get what a trip-planning agent needs before it books, in one call: weather and 3-day forecast, local currency with live FX from USD, and a scam check on the booking site before it pays. Input: ?city=Athens&date=2026-11-20&currency=EUR&booking=hotel-site.com&budget=1500

Configuration

VariableDefaultMeaning
WALLET_PRIVATE_KEYunsetA dedicated, low-balance Base wallet holding USDC. Unset = free preview (402 quotes only).
DYOE_MAX_PAYMENT_USD0.10Per-call cap. Calls priced above it are refused locally.
DYOE_BASE_URLhttps://agents.dyoeway.orgOverride the API origin (testing).

Safety

  • Use a burner wallet with a few dollars of USDC, never your main wallet.
  • The server signs only x402 payments for the tool you call, up to the per-call cap.
  • dyoe_approve and dyoe_review act on your behalf: they record an approval request with DYOE.

License

MIT

来源：README.md，提交 0a18801

工具

0
SourceWeft 曾在隔离沙箱中以无凭据方式启动该软件包一次，以列出其工具，但未能完成：服务器未在限时内响应。

版本历史

1
  1. v1.0.0最新Oct 21, 2026

评分

已满足适用检查项的 50%

该评分衡量此收录条目的完整程度，依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价，也不表示服务器安全或当前可用：可连通性是带日期的检查结果，评分也不包含安装量或用户评价。

  • 近 30 天内可连通25 分

    请保持端点能够响应 MCP 握手；SourceWeft 每 30 天探测一次。

  • 已声明认证方式10 分

    请在注册中心条目中声明凭据请求头，或保持端点能够响应探测，以便判定其认证方式。

  • 已列出工具15 分

    请让服务器在无凭据时响应 tools/list，或发布可在沙箱中无凭据启动的软件包。

  • 描述必需15 分
  • 图标10 分
  • 文档15 分
  • 许可证10 分