Cybercentry Verification

uk.co.cybercentry由 cybercentry.co.uk 发布官方发布者v1.0.4更新于 Oct 24, 2026

Twelve tools: token, wallet, contract and site security. Two free, the rest $1 in USDC over x402.

已验证Streamable HTTP可网页运行金融安全与监控

概览

AI 生成的概览

远程按次付费的安全验证服务器:检查钱包、代币、合约、dApp、AI 代理和媒体内容,另有两个免费目录工具。

可以做什么
  • 列出全部验证服务目录,并读取实时漏洞利用动态(均免费)
  • 筛查钱包的制裁与风险,以及上线前的钱包筛查
  • 检查 Base 与以太坊/EVM 代币,并对已上线代币发行打分
  • 审计 Solidity 源码,扫描网站或 dApp 前端的漏洞
  • 审计 AI 代理配置,核验图片或视频的来源与真实性
  • 用零知识证明验证私有数据而不泄露内容,并用抗量子加密处理文本
适用场景
适合在加密交易、部署或连接之前做尽职调查:核查代币、交易对手钱包、合约、dApp 前端或 AI 代理,或判断媒体是否真实。可先用两个免费工具查看服务目录和近期漏洞动态。
运行要求
远程 streamable-HTTP 端点,无需安装。无需账号或 API 密钥。十个付费工具每次调用 1.00 美元,通过 x402 以 USDC 支付(Base 或 Solana);不支持 x402 的客户端可传入 subscription_token 参数或 x-subscription-token 请求头。
安装前请注意
十二个工具中有十个会花钱:每次调用 1.00 美元 USDC,支持 x402 的客户端会自动结算,重复调用会产生真实费用。subscription_token 属于凭据,会作为参数或请求头传递。钱包与网站扫描最长可能需要三分钟。验证请求会把地址、合约源码、网站 URL、代理配置和媒体内容发送给第三方服务。

安装

在 SourceWeft 中

  1. 打开 控制台中的 Cybercentry Verification,将其添加到工作区。
  2. 为需要使用其工具的对话启用该服务。

Web executable,通过 Streamable HTTP。 远程服务在工作区中配置后即可从网页运行时运行。

交给智能体安装

把这段提示词粘贴到 Claude Code、Codex、Cursor 等智能体,或 SourceWeft 对话中。智能体会读取该服务器的安装指南,先向你展示发布者、端点和登录方式,经你同意后再把它添加到你的客户端。密钥不会写进任何命令。

阅读 https://sourceweft.com/mcp/uk.co.cybercentry%2Fverification/install.md,并按其中说明把这个 MCP 服务器接入我的客户端。修改任何配置之前,先告诉我它的发布者、端点和登录方式,等我确认。不要把 API 密钥写进命令或我会提交的文件;问我密钥应从哪里获取。

查看智能体所依据的安装指南

其他 MCP 客户端

把它添加到你客户端的 mcpServers 配置中。

{
  "mcpServers": {
    "cybercentry-verification": {
      "type": "http",
      "url": "https://centry.cybercentry.co.uk/api/mcp"
    }
  }
}

README

Cybercentry MCP Server

Pay-per-call security verification for AI agents: wallets, tokens, contracts, dApps, agents and more.

Nothing to install. This is a remote MCP server — connect to the URL and the tools appear.

Endpointhttps://centry.cybercentry.co.uk/api/mcp
Transportstreamable-http
Registryuk.co.cybercentry/verification
Websitehttps://centry.cybercentry.co.uk

Connect

Claude (Desktop or claude.ai)

Remote servers are added as connectors, not through claude_desktop_config.json — that file is for local servers that run a command.

  1. Settings → Connectors
  2. Add → Add custom connector
  3. Paste https://centry.cybercentry.co.uk/api/mcp

Other clients

Anything that speaks MCP over streamable HTTP can connect. Point it at:

https://centry.cybercentry.co.uk/api/mcp

Check your client's own documentation for where a remote MCP server URL goes — some use a settings pane, some a config file. If yours takes a config file, the field is the server URL rather than a command.

Tools

Twelve tools. Two are free and need no payment, credentials or account:

ToolWhat it does
list_servicesThe catalogue: every verification, its inputs and its price
recent_exploitsLive exploit feed, curated from DefiLlama

The other ten are paid, at $1.00 per call:

ToolWhat it verifies
wallet_verificationSanctions screening and risk scoring across 35 EVM chains
base_token_verificationBase B20 tokens: honeypots, freeze-and-seize, pause, impersonation
ethereum_token_verificationEthereum token due diligence
solidity_code_verificationSolidity source, for known vulnerability classes
web_application_verificationLive site and dApp frontend scan
openclaw_ai_agent_verificationAn agent's configuration: auth gaps, prompt-injection exposure, unsafe permissions
media_content_verificationC2PA provenance and content authenticity
private_data_verificationZero-knowledge proof over a payload, without revealing it
quantum_cryptography_verificationQuantum-resistant encryption of a payload
cyber_security_consultantAdvisory answers grounded in a security body of knowledge

Wallet and web application verification return a job immediately and fill in as findings arrive; both can take up to three minutes. The rest return in under ten seconds.

Paying

No API keys. No accounts. Two ways to pay for the ten paid tools:

x402 — the client is told the price, pays in USDC, and retries. Automatic in clients that support it.

Base    eip155:8453   USDCSolana  mainnet       USDC

Subscription token — for clients that do not speak x402 yet. Pass subscription_token as a tool argument, or send it as the x-subscription-token header.

A paid call runs the verification before it settles, so a call that fails is never charged.

Standards

The interfaces these services implement were specified in public:

  • ERC-8126 — AI Agent Verification (Final)
  • ERC-8196 — AI Agent Authenticated Wallet (Final)
  • ERC-8376 — Token Launch Abuse Detection and Remediation (open pull request)

Links


Cybercentry Limited

来源:README.md,提交 1c91439

工具

14

list_services

List Services

List every Cybercentry verification service with its price, inputs and SLA. Free.

无需输入参数。

recent_exploits

Recent Exploits

Recent real-world web3 exploits from the live feed, with loss amounts, attack vectors and the Cybercentry service that addresses each. Free.

输入参数limit

base_token_verification

Base Token Verification

Check a Base token contract before buying: detects honeypots, armed freeze-and-seize, a live pause, fake B20s and ticker-impersonation copycats, and separately discloses issuer controls (admin centralisation, supply cap, transfer policy, rebase) so a legitimate token is not mistaken for a scam. Costs $1.00 per call, paid in USDC over x402.

输入参数chaincontract_address必填subscription_token

cyber_security_consultant

Cyber Security Consultant

Ask a cyber security question and get an expert answer backed by real-time threat intelligence, covering current threats, best practice and compliance. Costs $1.00 per call, paid in USDC over x402.

输入参数query必填subscription_token

ethereum_token_verification

Ethereum Token Verification

Check an Ethereum or EVM token contract before buying: rug pull, hidden tax, liquidity legitimacy and holder concentration risk. Token due diligence returned as a scan report. Costs $1.00 per call, paid in USDC over x402.

输入参数chainchain_idplatform_idcontract_address必填subscription_token

media_content_verification

Media Content Verification

Check whether an image or video is authentic and where it came from: C2PA content credentials, provenance and metadata extraction, with an avatar and logo impersonation check. Detect AI-generated or tampered media before trusting it. Costs $1.00 per call, paid in USDC over x402.

输入参数image_uri必填media_file_path必填extract_metadatasubscription_tokenverify_authenticity

openclaw_ai_agent_verification

OpenClaw AI Agent Verification

Audit an AI agent configuration for security holes: prompt injection exposure, missing authentication, over-broad tool permissions and unsafe gateway settings. Check an agent before you trust it or connect to it. Costs $1.00 per call, paid in USDC over x402.

输入参数toolconfig必填skillsmessagesessionIdsubscription_token

post_launch_screening

Post-launch Screening

Score a live token launch under ERC-8376, the token launch abuse standard we co-authored. The twelve-signal vector is assembled from chain state and scored against the eleven deployer abuse patterns into an abuse score of 0 to 100, with confidence reported separately so a high score on thin evidence cannot read as a certainty. Signals that could not be computed are named rather than scored clean. Price decline is excluded by rule, so a launch that locked liquidity, sold nothing and fell 95 per cent still scores clean: falling is not fraud. Name the creator, because at most venues the token was deployed by the venue's own factory and the creating address is the launchpad rather than the applicant. A screening, not a bonded on-chain report. Costs $1.00 per call, paid in USDC over x402.

输入参数chaintoken必填creatorsubscription_token

pre_launch_screening

Pre-launch Screening

Screen who is asking to launch, before you deploy anything for them. At most venues the launchpad creates the token, so the only thing in front of you beforehand is a connected wallet: this screens that wallet, and it includes the full wallet verification rather than a summary of one. OFAC SDN sanctions screening, the funding chain walked to depth across 33 chains, mixer contact including the Tornado Cash pools, dusting, control clusters and exchange reuse, with a risk score. Then the launch-specific half: allocations this wallet has taken from contracts before and whether it still holds them or sold them, and whether the ticker it wants collides with a token it already touched. Says what it could not establish rather than reporting it clean. Eight of the twelve ERC-8376 signals describe conduct during or after a sale and cannot exist yet, so this reports on the party and not on the launch. Costs $1.00 per call, paid in USDC over x402.

输入参数chaintickercreator必填subscription_token

private_data_verification

Private Data Verification

Prove a fact about private data without revealing the data: validates text integrity and returns a zero-knowledge proof (ZKP) with a verification ID and URL. Costs $1.00 per call, paid in USDC over x402.

输入参数cpdv_data必填subscription_token

quantum_cryptography_verification

Quantum Cryptography Verification

Encrypt text with quantum-resistant (post-quantum) cryptography, for secrets that must outlast classical encryption. Returns a record ID and a decrypt URL. Costs $1.00 per call, paid in USDC over x402.

输入参数cqcv_data必填subscription_token

solidity_code_verification

Solidity Code Verification

Audit Solidity smart contract source for vulnerabilities before you deploy or call it. Returns findings with a clear risk level. Costs $1.00 per call, paid in USDC over x402.

输入参数solidity_code必填subscription_token

wallet_verification

Wallet Verification

Screen a wallet address for sanctions and risk: OFAC SDN sanctions screening, risk scoring and suspicious-activity detection across 33 EVM chains. Check a counterparty before you transact with it. Costs $1.00 per call, paid in USDC over x402.

输入参数wallet_address必填subscription_token

web_application_verification

Web Application Verification

Scan a website or dApp frontend for vulnerabilities using OWASP checks, before connecting a wallet to it or trusting it with user data. Costs $1.00 per call, paid in USDC over x402.

输入参数target_url必填subscription_token

版本历史

1
  1. v1.0.4最新Sep 16, 2026

评分

已满足适用检查项的 100%

该评分衡量此收录条目的完整程度,依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价,也不表示服务器安全或当前可用:可连通性是带日期的检查结果,评分也不包含安装量或用户评价。

  • 近 30 天内可连通必需25 分
  • 已声明认证方式必需10 分
  • 已列出工具必需15 分
  • 描述必需15 分
  • 图标10 分
  • 文档15 分
  • 许可证10 分