Chainverdict

xyz.chainverdict由 chainverdict.xyz 发布官方发布者v2.2.1更新于 Nov 2, 2026

Pay-per-call x402 checks before an agent moves money: token safety, wallet risk, identifiers.

已验证Streamable HTTP可网页运行数据库金融安全与监控

概览

AI 生成的概览

远程 MCP 服务器，为助手提供按次付费的付款前核查：Base 代币与钱包风险、链上付款验证、标识符校验和域名安全。

可以做什么
  • 检查 Base 上 ERC-20 代币的安全判定、代币真伪与钱包风险画像
  • 验证链上付款，并读取实时链上数据：Gas、最新区块、代币供应量、活跃度与持仓余额
  • 校验金融标识符：IBAN、VAT、BIC、LEI 与 ISIN
  • 探测域名安全状况：邮件认证记录、TLS 证书与品牌仿冒域名
  • 将 HTML 转换为 Markdown，并比较两段文本差异
  • 通过免费的 payment_info 工具说明 x402 定价与结算方式
适用场景
适合在智能体即将在 Base 上转账或向陌生对手方付款时，快速获取确定性的风险与验证信号；也适合在采取行动前校验金融标识符和域名安全。它并非合规控制手段，也不构成受监管的建议。
运行要求
远程 Streamable HTTP 端点，无需账号、API 密钥或注册。除 payment_info 外，每次工具调用都需通过 x402 协议在 Base 上用 USDC 按次付费，因此需要可进行 x402 付款且有余额的钱包。需要能访问该端点及实时 Base RPC 数据。
安装前请注意
每次工具调用都产生费用（约 0.001 至 0.02 美元），自动化循环可能持续消耗 USDC，建议先查看 payment_info 与价格。结果仅为参考信号，不是合规控制，也不构成金融、法律或合规建议，实时读取的数据可能变化。签名只能证明来源，不能证明结论正确。工具均为只读，不写入或删除数据。

安装

在 SourceWeft 中

  1. 打开 控制台中的 Chainverdict，将其添加到工作区。
  2. 为需要使用其工具的对话启用该服务。

Web executable，通过 Streamable HTTP。 远程服务在工作区中配置后即可从网页运行时运行。

交给智能体安装

把这段提示词粘贴到 Claude Code、Codex、Cursor 等智能体，或 SourceWeft 对话中。智能体会读取该服务器的安装指南，先向你展示发布者、端点和登录方式，经你同意后再把它添加到你的客户端。密钥不会写进任何命令。

阅读 https://sourceweft.com/mcp/xyz.chainverdict%2Fchainverdict/install.md，并按其中说明把这个 MCP 服务器接入我的客户端。修改任何配置之前，先告诉我它的发布者、端点和登录方式，等我确认。不要把 API 密钥写进命令或我会提交的文件；问我密钥应从哪里获取。

查看智能体所依据的安装指南

其他 MCP 客户端

把它添加到你客户端的 mcpServers 配置中。

{
  "mcpServers": {
    "chainverdict": {
      "type": "http",
      "url": "https://chainverdict.xyz/mcp"
    }
  }
}

README

ChainVerdict — chainverdict.xyz

Hosting: the main API and TradeRails share one service; Pulse retains its own server and data disk. See the hosting and rollback guide.

Checks an autonomous agent runs before a proposed payment: token safety verdicts and wallet risk profiles on Base, on-chain payment verification, financial-identifier validation, and live domain security posture.

Every call is paid per request in USDC on Base over the x402 protocol — no accounts, no API keys, no signup. Every response carries an evidence record saying what was checked, how fresh it is and what it does not establish, and is Ed25519-signed. No LLM inference anywhere: every answer is a deterministic computation or a live read of external state, results from live external sources can change over time.

MCP server

ChainVerdict is a remote MCP (Model Context Protocol) server, built on the official @modelcontextprotocol/sdk and served over Streamable HTTP at:

https://chainverdict.xyz/mcp

It is published in the official MCP registry as xyz.chainverdict/chainverdict.

  • initialize and tools/list are free, so registries and clients can index the server without paying.
  • tools/call is x402-paid at the price of the route behind the tool — except payment_info, which is free.
  • 20 MCP tools, all read-only and idempotent, annotated with readOnlyHint / destructiveHint / idempotentHint / openWorldHint.
  • No MCP resources or prompts are exposed; this server is tools-only.

Tool descriptions interpolate the live price from the same map the payment middleware charges from, so tools/list can never advertise a rate that is not the rate. test/mcp-parity.test.js fails the build if a tool exists for a route that is no longer sold, or if a sold route has no tool.

Tools

ToolWhat it answers
payment_infoFree. How x402 payment works, the price of every tool, where payments settle.
token_verdictHeuristic ERC-20 risk signals on Base; not a safety guarantee.
wallet_dossierWallet risk profile for a Base address before you pay it.
verify_paymentDecode and confirm an on-chain payment on Base.
verify_tokenResolve a symbol or address to the canonical Base token.
validate_iban validate_vat validate_bic validate_lei validate_isinDeterministic check-digit and format validation.
security_email security_tls security_typosquatSPF/DMARC/DKIM posture, live TLS probe, brand look-alike analysis.
data_gas data_block data_token_supply data_token_activity data_portfolioLive Base chain reads.
html_to_markdown text_diffDocument utilities.

POST /v1/batch/validate is HTTP-only by design: 500 identifiers do not belong in a tool-call argument.

HTTP rate card

Every endpoint answers an unpaid request with a 402 quote.

RoutePrice
GET /v1/token/verdict/*$0.01
GET /v1/wallet/dossier/*$0.01
GET /v1/validate/iban/*$0.001
GET /v1/validate/vat/*$0.001
GET /v1/validate/bic/*$0.001
POST /v1/doc/html-to-markdown$0.002
POST /v1/doc/diff$0.002
GET /v1/verify/payment/*$0.02
GET /v1/verify/token/*$0.005
GET /v1/validate/lei/*$0.002
GET /v1/validate/isin/*$0.001
POST /v1/batch/validate$0.10
GET /v1/security/email/*$0.01
GET /v1/security/tls/*$0.01
GET /v1/security/typosquat/*$0.005
GET /v1/data/gas$0.002
GET /v1/data/block$0.001
GET /v1/data/supply/*$0.003
GET /v1/data/activity/*$0.005
GET /v1/data/portfolio/*$0.004

Free to read before you pay for anything: / (discovery), /health, /openapi.json, /llms.txt, /v1/methodology, /.well-known/x402.json.

The whole portfolio, machine-readable: https://pulse.chainverdict.xyz/.well-known/portfolio.json

Local dev

bash
npm ciX402_ENABLED=false npm start   # free mode, no paymentsnpm test                       # 34 tests

Ops

Stateless. No database, no cron, no maintained data set. Sources are pure arithmetic over public specifications plus live Base RPC.

Limitations

These are informational signals. None is a compliance control, none discharges a legal obligation, and none is regulated financial, legal or compliance advice. A valid signature proves a response came from this service unaltered — not that the answer is correct. A signed wrong answer is still wrong, and still signed.

Operated by Alexander Balieu, independent professional established in Luxembourg.

Licence

MIT. See LICENSE.

Local development and repository hygiene

Run npm ci before npm test or npm start. Dependencies are installed from package-lock.json; node_modules/ is local-only and is not stored in Git. Never commit environment files or signing keys. Live reads can change with upstream state; signed responses authenticate the statement, not its accuracy.

来源：README.md，提交 afad434

工具

20

payment_info

How to pay for these tools (free)

Free. Explains how to call the paid tools on this server: the x402 protocol, the network and asset, the settlement address, and the price of every tool.

无需输入参数。

token_verdict

Token safety verdict (Base)

Heuristic ERC-20 safety verdict on Base: bytecode risk capabilities, ownership, metadata, 0-100 score, hold/caution/avoid. $0.01 per call.

输入参数address必填

wallet_dossier

Wallet dossier (Base)

Profile of a Base address: EOA vs contract, balance, activity band, flags. $0.01 per call.

输入参数address必填

validate_iban

Validate IBAN

IBAN mod-97 checksum + country length rules. $0.001 per call.

输入参数iban必填

validate_vat

Validate EU VAT number

EU VAT format validation with deterministic checksums (DE, IT, LU, PL, SI). $0.001 per call.

输入参数vat必填

validate_bic

Validate BIC/SWIFT

BIC/SWIFT structural validation and decomposition. $0.001 per call.

输入参数bic必填

html_to_markdown

HTML to Markdown

Convert raw HTML to clean Markdown. $0.002 per call.

输入参数html必填

text_diff

Structured text diff

Diff two texts (lines/words/chars). $0.002 per call.

输入参数a必填b必填mode

verify_payment

Verify on-chain payment (Base)

Decode ERC-20 transfers in a Base transaction: amounts, counterparties, confirmations. $0.02 per call.

输入参数txhash必填

verify_token

Canonical token check (Base)

Is this the real USDC/EURC/WETH/cbBTC/USDT on Base? Anti-phishing for stablecoin payments. $0.005 per call.

输入参数query必填

validate_lei

Validate LEI (ISO 17442)

Legal Entity Identifier checksum validation. $0.002 per call.

输入参数lei必填

validate_isin

Validate ISIN (ISO 6166)

Securities identifier checksum validation. $0.001 per call.

输入参数isin必填

security_email

Email spoofing posture (SPF/DMARC/DKIM)

Live DNS check of a domain's email authentication records. $0.01 per call.

输入参数domain必填selector

security_tls

TLS certificate check

Live TLS handshake: cert validity, issuer, expiry countdown. $0.01 per call.

输入参数domain必填

security_typosquat

Typosquat / look-alike domain check

Flags homoglyph and edit-distance look-alikes of known brands (c0inbase, b1nance, etc.). $0.005 per call.

输入参数brandsdomain必填

data_gas

Base gas oracle

Live Base gas conditions: base fee, priority fees, congestion, est transfer cost. $0.002 per call.

无需输入参数。

data_block

Latest Base block

Latest block number, timestamp, tx count, gas utilization. $0.001 per call.

无需输入参数。

data_token_supply

Token supply & burn (Base)

Total/circulating/burned supply and burn percentage for an ERC-20 on Base. $0.003 per call.

输入参数address必填

data_token_activity

Token transfer activity (Base)

Recent transfer count, volume, unique senders/receivers, activity level. $0.005 per call.

输入参数blocksaddress必填

data_portfolio

Address portfolio (Base)

ETH + canonical token balances (USDC/WETH/cbBTC/EURC) for an address. $0.004 per call.

输入参数address必填

版本历史

1
  1. v2.2.1最新Sep 16, 2026

评分

已满足适用检查项的 100%

该评分衡量此收录条目的完整程度，依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价，也不表示服务器安全或当前可用：可连通性是带日期的检查结果，评分也不包含安装量或用户评价。

  • 近 30 天内可连通必需25 分
  • 已声明认证方式必需10 分
  • 已列出工具必需15 分
  • 描述必需15 分
  • 图标10 分
  • 文档15 分
  • 许可证10 分