Agent Utils (x402)

dev.workers.revenue-agent-jw.agent-utils-x402-production由 agent-utils-x402-production.revenue-agent-jw.workers.dev 發布官方發布者v1.8.0更新於 Nov 7, 2026

Public records, email-auth DNS and OSV package vuln checks for agents: SEC, FDA, trials. x402 USDC

已驗證Streamable HTTP可網頁執行金融安全與監控資料與分析

概覽

AI 產生的概覽

遠端 MCP 伺服器,彙整美國公共紀錄查詢(召回、SEC、FDA、臨床試驗、天氣)與安全及合規檢查,每次呼叫以 USDC 經 x402 付費。

可以做什麼
  • 查詢產品與車輛召回、加密錢包地址的 OFAC 制裁名單,以及 FDA 藥品標籤、不良事件與 NDC 編碼
  • 檢索 SEC EDGAR 申報、8-K 即時報告與 13F 機構持股,以及聯邦公報文件與 ClinicalTrials.gov 研究
  • 取得美國天氣預報、警報與 NWS 氣候日最高/最低溫,並計算美國工作日或列出聯邦假日
  • 對不可信文字做提示注入偵測,並以確定性規則遮蔽個人識別資訊
  • 稽核郵件驗證 DNS(SPF、DMARC、DKIM、MTA-STS),並透過 OSV.dev 檢查開源套件漏洞
  • 驗證 x402 付款端點,並評估 Crypto Twitter 喊單者的歷史表現
適用情境
適合需要權威美國公共資料進行盡職調查、合規、安全或研究的場合,也適合在代理流程中加入防護檢查(注入掃描、PII 遮蔽、相依套件漏洞),而不必自行串接各資料來源 API。
執行需求
需要遠端 streamable HTTP 端點;未宣告本機安裝、帳號或 API 金鑰。付費工具經 x402 傳輸每次 0.002 USDC(Base 鏈)計費,因此需要已儲值的錢包與支援 x402 的用戶端;us_federal_holidays 免費,可用來測試連線。
安裝前請注意
多數工具每次以 Base 鏈上的 USDC 付費,使用會實際花費錢包資金。送至注入掃描與 PII 遮蔽工具的文字會傳到第三方端點。結果僅供參考:制裁篩選只做完全比對,喊單者評分僅看結果,未納入誠信評估。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 Agent Utils (x402),將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Web executable,透過 Streamable HTTP。 遠端服務在工作區中設定後即可從網頁執行環境執行。

交給代理程式安裝

把這段提示詞貼上到 Claude Code、Codex、Cursor 等代理程式,或 SourceWeft 對話中。代理程式會讀取該伺服器的安裝指南,先向你展示發布者、端點和登入方式,經你同意後再把它新增到你的客戶端。金鑰不會寫進任何命令。

閱讀 https://sourceweft.com/mcp/dev.workers.revenue-agent-jw.agent-utils-x402-production%2Fagent-utils/install.md,並按其中說明把這個 MCP 伺服器接入我的客戶端。修改任何設定之前,先告訴我它的發布者、端點和登入方式,等我確認。不要把 API 金鑰寫進命令或我會提交的檔案;問我金鑰應從哪裡取得。

檢視代理程式所依據的安裝指南

其他 MCP 客戶端

把它新增到你客戶端的 mcpServers 設定中。

{
  "mcpServers": {
    "agent-utils-x402": {
      "type": "http",
      "url": "https://agent-utils-x402-production.revenue-agent-jw.workers.dev/mcp"
    }
  }
}

工具

22

recall_check

US recall check (NHTSA, CPSC, FDA)

Product and vehicle recall lookup across US agencies in one call: NHTSA (cars, by VIN or make/model/year), CPSC (consumer products, by UPC or product name) and FDA enforcement reports (food, drugs, medical devices). Useful for safety checks before buying, selling or using a product or vehicle. Returns normalized recalls (number, date, hazard/reason, remedy, link), newest first, plus anyRecall. Errors: 400 JSON {error} for invalid input. PAID: $0.002 USDC per call on Base via x402 (MCP transport: retry with params._meta["x402/payment"]). Same tool over plain HTTP: GET /v1/recalls/check.

輸入參數qupcvinmakeyearbrandlimitmodelsince

sanctions_address_check

OFAC sanctions check for crypto addresses

OFAC sanctions screening for crypto wallet addresses: exact match against every digital currency address on the U.S. Treasury OFAC SDN list (BTC, ETH, USDT, USDC, TRX, SOL, LTC, XMR and more). Useful for compliance and AML checks before paying a counterparty or an x402 payTo. Up to 20 comma-separated addresses; returns sanctioned true/false, SDN name, programs, official link and list freshness. Errors: 400 JSON {error} for invalid input. PAID: $0.002 USDC per call on Base via x402 (MCP transport: retry with params._meta["x402/payment"]). Same tool over plain HTTP: GET /v1/sanctions/address.

輸入參數address必填

climate_day

NWS climate-day high/low + official CLI

Daily high and low temperature for a US weather station from NWS: running provisional high/low over the station's climate day (midnight-midnight local standard time) and the official NWS Daily Climate Report (CLI) high/low once issued, flagged preliminary or final. Useful for temperature settlement, weather prediction markets and climate records. Optional temperature buckets (width/offset or explicit edges). Errors: 400 JSON {error} for invalid input. PAID: $0.002 USDC per call on Base via x402 (MCP transport: retry with params._meta["x402/payment"]). Same tool over plain HTTP: GET /v1/weather/climate-day.

輸入參數clidateedgesroundunitsstation必填bucket_widthbucket_offset

us_weather

US weather (NWS)

US weather forecast, current conditions and severe-weather alerts for a latitude/longitude from the National Weather Service (NWS) in one call. Useful when an agent needs local temperature, a forecast or active alerts for a US location. Returns the latest station observation, next 12 hourly periods, 6-period forecast and active alerts as normalized JSON. Errors: 400 JSON {error} for invalid input. PAID: $0.002 USDC per call on Base via x402 (MCP transport: retry with params._meta["x402/payment"]). Same tool over plain HTTP: GET /v1/weather/us.

輸入參數lat必填lon必填

sec_filings

SEC EDGAR filings + XBRL facts

SEC EDGAR company filings and financials for a stock ticker or CIK in one call: latest 10-K, 10-Q, 8-K and other forms with dates, accession numbers, primary document and index URLs, plus optional XBRL facts (revenue, net income, shares outstanding). Useful for company research, due diligence and earnings monitoring. Errors: 400 JSON {error} for an unknown ticker; 503 while the shared SEC rate limit is busy. PAID: $0.002 USDC per call on Base via x402 (MCP transport: retry with params._meta["x402/payment"]). Same tool over plain HTTP: GET /v1/sec/filings.

輸入參數cikfactsformslimitticker

injection_scan

Prompt-injection pre-filter

Prompt-injection detection for untrusted text (web pages, emails, documents, tool output) before it reaches an LLM; a guardrail for agent pipelines. Flags instruction overrides, role spoofing, secret/system-prompt exfiltration, image beacons, tool-call markup, hidden Unicode, hidden HTML and base64 payloads. Returns a 0-100 risk score, risk level and matched rules. Deterministic rules, no LLM. JSON body {text}, max 32 KB. Errors: 400 missing text, 413 too large. PAID: $0.002 USDC per call on Base via x402 (MCP transport: retry with params._meta["x402/payment"]). Same tool over plain HTTP: POST /v1/text/injection-scan.

輸入參數text必填

us_business_days

US federal business days

US business days calculator: counts working days between two dates (inclusive), excluding weekends and observed US federal holidays per 5 U.S.C. 6103 and OPM rules. Useful for deadlines, SLAs, shipping and payment due dates. Returns the count and lists the holidays skipped. Errors: 400 JSON {error} for invalid input. PAID: $0.002 USDC per call on Base via x402 (MCP transport: retry with params._meta["x402/payment"]). Same tool over plain HTTP: GET /v1/calendar/us-business-days.

輸入參數to必填from必填

x402_check

x402 endpoint readiness check

x402 endpoint validator and payment-readiness checker, useful for sellers debugging a paywall or buyers vetting an endpoint before paying. Fetches the URL unpaid, decodes the 402 challenge and grades network, USDC asset, payTo, price vs facilitator fees, EIP-712 domain, CORS and Bazaar metadata. Returns a 0-100 score and a fix list. Never pays the target. Errors: 400 JSON {error} for invalid input. PAID: $0.002 USDC per call on Base via x402 (MCP transport: retry with params._meta["x402/payment"]). Same tool over plain HTTP: GET /v1/x402/check.

輸入參數url必填method

caller_avoidance_score

Caller Avoidance Score (callers-avoid-0.1, outcome-only; honesty deferred): toxicity / avoid grade for a Crypto Twitter handle from public-call follower sim (post+5m, fees). Returns avoid_score 0-100, band, components with receipts (sim_mean, sim_win_rate, rug_rate, hit_2x_24h + Wilson CI), verdict (copy_buy_loses|insufficient_sample|mixed), and public post id links — not full post text. Free when n_scored<4 via GET /v0/callers/score. Not financial advice. PAID: $0.002 USDC per call on Base via x402 (MCP transport: retry with params._meta["x402/payment"]). Same tool over plain HTTP: GET /v1/callers/score.

輸入參數handle必填

clinical_trial_study

ClinicalTrials.gov study by NCT ID

ClinicalTrials.gov study lookup by NCT ID (official v2 API). Useful when an agent needs the facts of one trial. Returns titles, sponsor and collaborators, status and why stopped, key dates, phases, design, enrollment, conditions, interventions, primary outcomes, eligibility (ages, sex, criteria text), summary, site count, countries and up to 25 sites, plus results link, source URL and retrievedAt. Errors: 400 bad NCT ID, 404 not found. PAID: $0.002 USDC per call on Base via x402 (MCP transport: retry with params._meta["x402/payment"]). Same tool over plain HTTP: GET /v1/clinical-trials/study.

輸入參數nct必填

fda_drug_label

FDA drug label (openFDA)

FDA drug label (package insert, SPL) lookup via openFDA by brand or generic name, NDC or set ID; prefers the original packager's latest label. Useful for indications, dosing, boxed warnings, contraindications, interactions and adverse reactions. Returns label metadata (brand, generic, manufacturer, application number, NDCs, RxCUI) and selected sections trimmed to max_chars, plus DailyMed link and retrievedAt. Errors: 400 invalid input, 404 no label. PAID: $0.002 USDC per call on Base via x402 (MCP transport: retry with params._meta["x402/payment"]). Same tool over plain HTTP: GET /v1/fda/drug-label.

輸入參數ndcnameset_idsectionsmax_chars

fda_adverse_events

FDA adverse event counts (FAERS)

FDA adverse event report counts (FAERS via openFDA) for a drug by generic or brand name, optionally filtered by reaction, date range or serious reports only. Useful for drug safety signal checks and pharmacovigilance research. Returns total, serious, non-serious and death report counts and the top reported reactions, with source URL, FDA data date and retrievedAt. Reports do not prove causation. Errors: 400 invalid input. PAID: $0.002 USDC per call on Base via x402 (MCP transport: retry with params._meta["x402/payment"]). Same tool over plain HTTP: GET /v1/fda/adverse-events.

輸入參數drug必填limitsinceuntilreactionserious_only

fda_ndc_lookup

FDA NDC directory lookup

FDA National Drug Code (NDC) directory lookup via openFDA by product or package NDC (dashed, or 10/11-digit billing format) or by drug name. Useful for pharmacy, claims and inventory data. Returns product NDC, brand and generic names, labeler, dosage form, route, active ingredients and strengths, marketing category and dates, application number, DEA schedule and packages, with DailyMed link and retrievedAt. Errors: 400 invalid input, 404 no match. PAID: $0.002 USDC per call on Base via x402 (MCP transport: retry with params._meta["x402/payment"]). Same tool over plain HTTP: GET /v1/fda/ndc.

輸入參數ndcnamelimit

sec_8k_filings

SEC 8-K current reports

SEC 8-K current reports from EDGAR: one company's 8-Ks by ticker or CIK, or the latest 8-Ks market-wide, optionally by item code (2.02 earnings, 5.02 officer changes, 1.01 agreements) or full-text phrase. Useful for event monitoring and research. Returns company, CIK, tickers, filing date, accession number, decoded items and document and index URLs, with retrievedAt. Errors: 400 invalid input, 503 SEC rate limit busy. PAID: $0.002 USDC per call on Base via x402 (MCP transport: retry with params._meta["x402/payment"]). Same tool over plain HTTP: GET /v1/sec/8k.

輸入參數qcikitemslimitsinceuntilticker

sec_13f_holdings

SEC 13F institutional holdings

SEC 13F-HR institutional holdings for a filer by CIK or ticker (latest quarter or a given accession), parsed from the EDGAR information table. Useful for tracking what funds like Berkshire Hathaway hold. Returns period, holdings ranked by value with issuer, CUSIP, class, shares, put/call and portfolio percent, totals checked against the cover page, recent 13F filings and source URLs. Tables over 1.5 MB return 422. Errors: 400, 404 no 13F. PAID: $0.002 USDC per call on Base via x402 (MCP transport: retry with params._meta["x402/payment"]). Same tool over plain HTTP: GET /v1/sec/13f.

輸入參數ciklimittickeraccession

email_auth_audit

Email auth DNS audit (SPF, DMARC, DKIM, MTA-STS)

Email authentication DNS audit for a domain or email address: SPF with recursive 10-lookup count and all qualifier, DMARC policy, pct and report addresses, DKIM selector probe, MTA-STS with policy file, TLS-RPT, BIMI and MX. Useful for deliverability checks, Google/Yahoo bulk-sender readiness and spoofing risk. Returns grade A-F, score, spoofable flag, parsed records and plain-language issues. Errors: 400 invalid domain, 404 NXDOMAIN. PAID: $0.002 USDC per call on Base via x402 (MCP transport: retry with params._meta["x402/payment"]). Same tool over plain HTTP: GET /v1/dns/email-auth.

輸入參數domain必填selectors

osv_package_vulns

Package vulnerability check (OSV.dev)

Open-source package vulnerability check via OSV.dev for npm, PyPI, Go, crates.io, Maven, RubyGems, NuGet, Packagist and more, by ecosystem+name+version, purl, or up to 10 purls. Useful before installing or upgrading a dependency. Returns vulnerable flag, count, CVE/GHSA aliases, CVSS score and severity, fixed versions and a verified upgradeTo version. Errors: 400 invalid input, 502 OSV unavailable. PAID: $0.002 USDC per call on Base via x402 (MCP transport: retry with params._meta["x402/payment"]). Same tool over plain HTTP: GET /v1/osv/package.

輸入參數namepurllimitversionpackagesecosystem

text_pii_redact

Deterministic PII redact (email/phone/SSN/card/IP/IBAN/routing/secrets)

Deterministic PII detect-and-redact for untrusted text (tickets, chat logs, LLM prompts) before storage or model input. Finds email, phone, US SSN, credit card (Luhn), IP, IBAN (mod-97), US ABA routing, and secret prefixes (sk-, ghp_, AKIA…). Checksum-validated; no LLM/NER. Returns findings with offsets, placeholders, redacted copy and countsByType. Optional types= filter. POST JSON {text} max 32 KB (GET ?text= max 2,000). Errors: 400 bad input. PAID: $0.002 USDC per call on Base via x402 (MCP transport: retry with params._meta["x402/payment"]). Same tool over plain HTTP: POST /v1/text/pii-redact.

輸入參數text必填types

solana_pre_promo

Solana pre-promo covered-shelf aggregates vs matched null

Pre-promo tape lookup for a Solana token when we hold a locked [-60m,0] window around its DexScreener paid-promo timestamp (specialty covered shelf, not a universal catalog). Returns raw aggregates only: net buy USD, unique buyers, largest buyer share, and the same stats vs a matched-null mean from other covered tokens (intensity-tercile leave-one-out). Uncovered token -> 404 with coverage:false and the live coverage rate — never fabricated numbers. Free coverage probe: GET /v0/solana/pre-promo-coverage. Not financial advice; no wallet-to-person attribution. PAID: $0.01 USDC per call on Base via x402 (MCP transport: retry with params._meta["x402/payment"]). Same tool over plain HTTP: GET /v1/solana/pre-promo.

輸入參數token必填

us_federal_holidays

US federal holidays (free)

FREE. US federal holidays (observed dates) for a year, per 5 U.S.C. 6103. Useful to test the connection before paying.

輸入參數year

版本歷史

5
  1. v1.8.0最新Nov 7, 2026
  2. v1.7.0Nov 5, 2026
  3. v1.6.0Nov 4, 2026
  4. v1.5.0Nov 3, 2026
  5. v1.2.0Oct 22, 2026

評分

已滿足適用檢查項的 72%

該評分衡量此收錄條目的完整程度,依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價,也不表示伺服器安全或目前可用:可連通性是帶日期的檢查結果,評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通必需25 分
  • 已宣告認證方式必需10 分
  • 已列出工具必需15 分
  • 描述必需15 分
  • 圖示10 分

    請在註冊中心條目中發布圖示。

  • 文件15 分

    請宣告包含 README 的 GitHub 儲存庫,或在 OAuth 受保護資源後設資料中提供 resource_documentation。

  • 授權條款不適用

    託管服務按其提供方的條款使用,因此這裡不要求授權條款。此檢查項不計入百分比。