DYOE Trust Tools (x402)

io.github.bjyoe2016由 GitHub 帳號 bjyoe2016 發布v1.0.0更新於 Oct 26, 2026

22 pay-per-call x402 tools for agents: scam checks, payment pre-flight, approvals, data. USDC/Base

已驗證STDIO僅桌面網頁搜尋與抓取金融安全與監控

概覽

AI 產生的概覽

按次付費的信任工具集：22 個 x402 工具，用於詐騙查核、付款預檢、錢包篩查、審批與資料查詢，以 Base 上的 USDC 結算。

可以做什麼
  • 查核網站、企業、商店、代幣與錢包的詐騙、詐欺與跑路風險，回傳結論、信任分數和風險訊號
  • 付款前預檢交易、篩查錢包地址是否受制裁，並依政策取得審批或人工簽核及簽章回執
  • 擷取聯絡方式、網頁正文與中繼資料，調查公司、網域和聲譽紀錄
  • 簽發機構憑證，並查詢加密貨幣價格、市場概況、熱門幣、漲跌榜與匯率
  • 取得天氣、維基百科主題摘要，以及供行程規劃使用的綜合目的地資訊
適用情境
適合需要在開放網路上付款或交易的代理，在信任對方或轉帳前做交易對手查核。也適合想透過單一伺服器快速查詢加密行情、匯率、天氣或維基百科內容的情境。
執行需求
透過 npx 以 stdio 在本機執行（需 Node.js）。不需帳號或 API 金鑰。可選設定 WALLET_PRIVATE_KEY，指向持有 USDC 的 Base 專用低餘額錢包以啟用付費呼叫；未設定時每次僅回傳 402 報價。DYOE_MAX_PAYMENT_USD 限制單次呼叫花費（預設 0.10）。需能連線至 DYOE 端點。
安裝前請注意
付費模式需要 WALLET_PRIVATE_KEY，這是用於在 Base 上簽署 USDC 付款的私鑰；請使用僅有少量資金的臨時錢包，切勿使用主錢包。每次呼叫都花真錢，dyoe_review 為 15 美元，超過預設上限。dyoe_approve 與 dyoe_review 會代表你向 DYOE 記錄審批請求。網域、錢包地址和網址等查詢內容會傳送給第三方端點。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 DYOE Trust Tools (x402)，將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Desktop only，透過 STDIO。 STDIO 服務會啟動本機處理程序，因此需要 SourceWeft 桌面主機。

其他 MCP 客戶端

參照 儲存庫 中的啟動說明。

README

dyoe-trust-mcp

MCP server for DYOE, the trust layer for AI agents. It gives Claude, Cursor or any MCP client 22 pay-per-call tools from agents.dyoeway.org: scam and fraud checks, payment pre-flight, wallet screening, policy approval and human sign-off, contact extraction, company research, and data tools. Every call settles in USDC on Base via x402. You need no account or API key.

  • Free preview by default. Without a wallet, each tool makes one unpaid request and returns the x402 payment requirements (HTTP 402: price, network, payTo). Nothing is signed or spent.
  • Paid mode. Set WALLET_PRIVATE_KEY to a dedicated, low-balance Base wallet holding USDC. The key stays on your machine (stdio) and signs each payment locally. Each call is capped at DYOE_MAX_PAYMENT_USD (default 0.10). Tools priced above the cap (dyoe_review, $15) are refused until you raise it.

Install

Claude Desktop

Add this to claude_desktop_config.json (macOS: ~/Library/Application Support/Claude/claude_desktop_config.json, Windows: %APPDATA%\Claude\claude_desktop_config.json), then restart Claude:

json
{  "mcpServers": {    "dyoe": {      "command": "npx",      "args": ["-y", "dyoe-trust-mcp"],      "env": {        "WALLET_PRIVATE_KEY": "",        "DYOE_MAX_PAYMENT_USD": "0.10"      }    }  }}

Leave WALLET_PRIVATE_KEY empty for preview mode. The .mcpb bundle from the GitHub releases also installs with one click (Settings > Extensions).

Cursor

Add this to ~/.cursor/mcp.json (all projects) or .cursor/mcp.json (one project):

json
{  "mcpServers": {    "dyoe": {      "command": "npx",      "args": ["-y", "dyoe-trust-mcp"],      "env": { "WALLET_PRIVATE_KEY": "", "DYOE_MAX_PAYMENT_USD": "0.10" }    }  }}

Smithery

bash
npx -y @smithery/cli mcp add bjyoe2016/dyoe-trust-mcp --client claude   # or --client cursor

Any MCP client

bash
npx -y dyoe-trust-mcp          # stdio

Tools (22)

Prices are what the endpoint charges per call. The live 402 is the authority, and every result reports the price it quoted.

ToolPriceWhat it does
dyoe_verify$0.01DYOE Trust Check: Check whether a website, business, or wallet is a scam before an agent trusts or pays it — fraud, phishing and rug-risk screening. Returns verdict (safe/caution/avoid), trust_score, domain age, red_flags. Input: ?target=domain
dyoe_transaction$0.10DYOE Payment Pre-Flight: Vet an entire payment before an agent sends money: is the counterparty site legit, is the payee wallet sanctioned or disposable, is the amount within policy. Returns proceed/caution/stop, reasons, and a signed attestation — one go/no-go instead of three calls. Input: ?domain=merchant.com&wallet=0x...&amount=500
dyoe_wallet$0.05DYOE Wallet Screening: Screen a crypto wallet address before an agent sends funds to it: OFAC sanctions check, on-chain footprint (empty or disposable address), human-vouch overlay. Returns verdict (safe/caution/avoid), sanctioned flag, on-chain activity, red_flags. Input: ?address=0x...
dyoe_approve$0.02DYOE Policy Authorization: Approve or deny an agent action instantly against a human-set policy — no waiting. Returns a signed decision receipt; anything over the policy line escalates to a human. Input: ?action=&counterparty=&amount= (counterparty required)
dyoe_review$15.00DYOE Human Sign-Off: Get a named human to review an agent action against a checklist and sign off on it. Poll /api/task?id= for the signed receipt. Priced on the amount at stake. Input: ?action=&counterparty=&amount= (counterparty required)
dyoe_contacts$0.01DYOE Contact Extraction: Extract public business emails, phone numbers, and social profiles from a website. Batch-safe contact enrichment for autonomous agents. Input: website URL. Returns structured JSON.
dyoe_intel$0.10DYOE Company Research: Research a company or website in one call: what they do, legitimacy verdict, domain age, how to reach them, social presence, scam red flags — background checks for agents. Sources disclosed, not a black box: RDAP registry domain age, HTTPS reachability, on-page contact signals, DYOE human-vouch registry. Input: ?target=domain
dyoe_merchant$0.05DYOE Store Safety Check: Is this online store safe to buy from? Scam/fraud check + trust verdict (safe/caution/avoid) + store signals (checkout, returns, payment methods) — counterparty trust for shopping & commerce agents before they pay. Input: ?url=
dyoe_audit$0.05DYOE Website Audit: Score any website 0-100 for legitimacy, trust, SEO and contactability — due diligence on a company in one call. Returns a verdict plus prioritized fixes. Input: ?url=domain
dyoe_reputation$0.05DYOE Reputation History: Look up the track record of any domain or wallet: how many times it has been assessed, verdict history, times flagged, first and last seen, a reputation score and a signed credential — a credit score for counterparties. Computed only from DYOE's own logged prior assessments; thin history is labeled as such. Input: ?target=
dyoe_credential_org$0.10DYOE Org Credential: Issue a signed, independently verifiable credential that a business domain passed a trust check — returns verdict, trust_score and domain_age. Input: ?domain=
dyoe_token$0.05DYOE Token Intelligence: Look up a token's price and market data plus a scam and rug-risk read on the project behind the coin — market data and counterparty trust in one call. Input: ?symbol=
dyoe_extract$0.01DYOE Text Extraction: Extract clean main text content from any web page (no nav/ads) — for research & summarizing agents. Input: ?url=
dyoe_metadata$0.01DYOE Page Metadata: Extract title, description, OpenGraph image, favicon & canonical from any URL — link previews & summaries. Input: ?url=
dyoe_crypto$0.01DYOE Crypto Price: Live crypto price + 24h change, market cap & volume for any coin — for trading agents. Input: ?symbol=btc
dyoe_market$0.01DYOE Crypto Market: Global crypto market overview — total market cap, 24h change, BTC/ETH dominance. Input: (none)
dyoe_trending$0.01DYOE Trending Coins: The coins trending right now — for trading & research agents. Input: (none)
dyoe_movers$0.01DYOE Top Movers: Top gainers & losers (24h) across the top 100 coins — for trading agents. Input: (none)
dyoe_fx$0.01DYOE Currency Conversion: Currency conversion + live exchange rate (ECB data). Input: ?from=USD&to=EUR&amount=100
dyoe_weather$0.01DYOE Weather: Current conditions + 3-day forecast for any city — for travel & planning agents. Input: ?city=Atlanta
dyoe_wiki$0.01DYOE Topic Summary: Factual summary of any topic from Wikipedia — for research agents. Input: ?topic=Bitcoin
dyoe_destination$0.05DYOE Destination Intel: Get what a trip-planning agent needs before it books, in one call: weather and 3-day forecast, local currency with live FX from USD, and a scam check on the booking site before it pays. Input: ?city=Athens&date=2026-11-20&currency=EUR&booking=hotel-site.com&budget=1500

Configuration

VariableDefaultMeaning
WALLET_PRIVATE_KEYunsetA dedicated, low-balance Base wallet holding USDC. Unset = free preview (402 quotes only).
DYOE_MAX_PAYMENT_USD0.10Per-call cap. Calls priced above it are refused locally.
DYOE_BASE_URLhttps://agents.dyoeway.orgOverride the API origin (testing).

Safety

  • Use a burner wallet with a few dollars of USDC, never your main wallet.
  • The server signs only x402 payments for the tool you call, up to the per-call cap.
  • dyoe_approve and dyoe_review act on your behalf: they record an approval request with DYOE.

License

MIT

來源：README.md，提交 0a18801

工具

0
SourceWeft 曾在隔離沙箱中以無憑證方式啟動該軟體包一次，以列出其工具，但未能完成：伺服器未在限時內回應。

版本歷史

1
  1. v1.0.0最新Oct 21, 2026

評分

已滿足適用檢查項的 50%

該評分衡量此收錄條目的完整程度，依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價，也不表示伺服器安全或目前可用：可連通性是帶日期的檢查結果，評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通25 分

    請保持端點能夠回應 MCP 握手；SourceWeft 每 30 天探測一次。

  • 已宣告認證方式10 分

    請在註冊中心條目中宣告憑證請求標頭，或保持端點能夠回應探測，以便判定其認證方式。

  • 已列出工具15 分

    請讓伺服器在無憑證時回應 tools/list，或發布可在沙箱中無憑證啟動的軟體包。

  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分