io.github.devx-agent由 GitHub 账号 devx-agent 发布v1.1.0更新于 Nov 6, 2026
Before sending crypto, check the recipient for address poisoning: lookalikes and bad checksums
只读 MCP 服务器，在转账前检查加密收款地址是否为地址投毒仿冒地址，并校验 EIP-55 校验和。
Web executable，通过 Streamable HTTP。 远程服务在工作区中配置后即可从网页运行时运行。
把这段提示词粘贴到 Claude Code、Codex、Cursor 等智能体，或 SourceWeft 对话中。智能体会读取该服务器的安装指南，先向你展示发布者、端点和登录方式，经你同意后再把它添加到你的客户端。密钥不会写进任何命令。
阅读 https://sourceweft.com/mcp/io.github.devx-agent%2Faddress-poisoning-check/install.md，并按其中说明把这个 MCP 服务器接入我的客户端。修改任何配置之前，先告诉我它的发布者、端点和登录方式，等我确认。不要把 API 密钥写进命令或我会提交的文件；问我密钥应从哪里获取。把它添加到你客户端的 mcpServers 配置中。
{
"mcpServers": {
"address-poisoning-check": {
"type": "http",
"url": "https://address-poisoning-check.nextill-pos.workers.dev/mcp"
}
}
}Is this the address you meant? Address poisoning plants a lookalike address (same first and last characters, different middle) in a wallet's history with a zero-value, dust or fake-token transfer, and waits for the owner (or their AI agent) to copy it. Bitquery counted about $76M stolen on Ethereum alone in the 12 months to July 2026.
This repo has three pieces, all read-only (we never ask for keys and never move funds):
Live: https://address-poisoning-check.nextill-pos.workers.dev
Exit code 2 on danger, so it can gate scripts and agent payment flows.
Claude Desktop / Cursor (stdio):
Or remote (streamable HTTP): https://address-poisoning-check.nextill-pos.workers.dev/mcp
Tools: check_recipient_lookalike (free), onchain_check_info (how to buy the on-chain check; does not pay).
402 with an x402 v1 body (X-PAYMENT, network base) and a v2 PAYMENT-REQUIRED header (PAYMENT-SIGNATURE, eip155:8453). Both work.0xB3cDDccEe6B150c8efFD55B961afc0Ecefe7f247, settled through the Coinbase CDP facilitator, listed in the CDP x402 Bazaar."partial": true and the scanned window stated per chain in chains[].window. It is a heuristic over a window of public data: always confirm the full address with the payee.Example (the May 2024 $68M WBTC case): from=0x1E227979f0b5BC691a70DEAed2e0F39a6F538FD5&to=0xd9A1C3788D81257612E2581A6ea0aDa244853a91 returns danger / possibly_already_poisoned: the victim did send real value to that address, but it first appeared in their history through a zero-value transfer.
OpenAPI: /openapi.json · Terms: /terms
cli/: npm package devx-address-poisoning-check (CLI + stdio MCP), npm testworker/: the Cloudflare Worker behind the hosted API (npm run build)MIT. Made by DevX · [email protected]
来源：README.md，提交 2141d56
Free, offline, read-only: before sending crypto, check whether the recipient address is a lookalike (same first/last hex characters, different middle) of any address you trust, and whether its EIP-55 checksum is valid. Address poisoning stole $76M+ in 12 months by planting such lookalikes in wallet histories.
to必填knownHow to buy the on-chain check (scans the sender's real transfer history on Ethereum/Base/Avalanche for poisoning transfers and lookalikes) via x402 for 0.005 USDC. Does not pay.
无需输入参数。
已满足适用检查项的 100%
该评分衡量此收录条目的完整程度，依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价，也不表示服务器安全或当前可用：可连通性是带日期的检查结果，评分也不包含安装量或用户评价。
tattoo.check官方发布者
check.tattoo: tattoo size and placement guide 的托管 MCP 服务，由 check.tattoo 发布；无需登录；Streamable HTTP；5 个工具。
pt.iva官方发布者
在 VIES 中校验欧盟增值税号，并返回葡萄牙增值税法典（CIVA）与 RITI 条文，支持葡语和英语。
由 GitHub 账号 throttler300 发布
一个本地 MCP 服务器，将助手的引用绑定到已准入的源文本并标注片段位置，可选拒绝哈希过期的引用。
由 GitHub 账号 kriton-dev 发布
托管在 Apify 上的远程 MCP 服务器，让助手检查网站声明的七类 HTTP 安全响应头，且不返回原始头值。
由 GitHub 账号 Voopa-Corp 发布
对照创作要求审查已生成的视频，在再次付费渲染前建议是剪辑修改、重试一次还是更换方案。
npx devx-address-poisoning-check 0xd9A1C3788D81257612E2581A6ea0aDa244853a91 --known 0xd9A1b0B1e1aE382DbDc898Ea68012FfcB2853a91# DANGER: Looks like 0xd9a1...3a91 (same first 4 / last 6 hex chars) but is a different address. Classic address-poisoning lookalike.{ "mcpServers": { "address-poisoning-check": { "command": "npx", "args": ["-y", "devx-address-poisoning-check", "mcp"] } } }GET https://address-poisoning-check.nextill-pos.workers.dev/v1/check?from=0x...&to=0x...[&chains=ethereum,base,avalanche]