io.github.devx-agent由 GitHub 帳號 devx-agent 發布v1.1.0更新於 Nov 6, 2026
Before sending crypto, check the recipient for address poisoning: lookalikes and bad checksums
唯讀 MCP 伺服器，在轉帳前檢查加密收款地址是否為地址投毒的仿冒地址，並驗證 EIP-55 校驗碼。
Web executable，透過 Streamable HTTP。 遠端服務在工作區中設定後即可從網頁執行環境執行。
把這段提示詞貼上到 Claude Code、Codex、Cursor 等代理程式，或 SourceWeft 對話中。代理程式會讀取該伺服器的安裝指南，先向你展示發布者、端點和登入方式，經你同意後再把它新增到你的客戶端。金鑰不會寫進任何命令。
閱讀 https://sourceweft.com/mcp/io.github.devx-agent%2Faddress-poisoning-check/install.md，並按其中說明把這個 MCP 伺服器接入我的客戶端。修改任何設定之前，先告訴我它的發布者、端點和登入方式，等我確認。不要把 API 金鑰寫進命令或我會提交的檔案；問我金鑰應從哪裡取得。把它新增到你客戶端的 mcpServers 設定中。
{
"mcpServers": {
"address-poisoning-check": {
"type": "http",
"url": "https://address-poisoning-check.nextill-pos.workers.dev/mcp"
}
}
}Is this the address you meant? Address poisoning plants a lookalike address (same first and last characters, different middle) in a wallet's history with a zero-value, dust or fake-token transfer, and waits for the owner (or their AI agent) to copy it. Bitquery counted about $76M stolen on Ethereum alone in the 12 months to July 2026.
This repo has three pieces, all read-only (we never ask for keys and never move funds):
Live: https://address-poisoning-check.nextill-pos.workers.dev
Exit code 2 on danger, so it can gate scripts and agent payment flows.
Claude Desktop / Cursor (stdio):
Or remote (streamable HTTP): https://address-poisoning-check.nextill-pos.workers.dev/mcp
Tools: check_recipient_lookalike (free), onchain_check_info (how to buy the on-chain check; does not pay).
402 with an x402 v1 body (X-PAYMENT, network base) and a v2 PAYMENT-REQUIRED header (PAYMENT-SIGNATURE, eip155:8453). Both work.0xB3cDDccEe6B150c8efFD55B961afc0Ecefe7f247, settled through the Coinbase CDP facilitator, listed in the CDP x402 Bazaar."partial": true and the scanned window stated per chain in chains[].window. It is a heuristic over a window of public data: always confirm the full address with the payee.Example (the May 2024 $68M WBTC case): from=0x1E227979f0b5BC691a70DEAed2e0F39a6F538FD5&to=0xd9A1C3788D81257612E2581A6ea0aDa244853a91 returns danger / possibly_already_poisoned: the victim did send real value to that address, but it first appeared in their history through a zero-value transfer.
OpenAPI: /openapi.json · Terms: /terms
cli/: npm package devx-address-poisoning-check (CLI + stdio MCP), npm testworker/: the Cloudflare Worker behind the hosted API (npm run build)MIT. Made by DevX · [email protected]
來源：README.md，提交 2141d56
Free, offline, read-only: before sending crypto, check whether the recipient address is a lookalike (same first/last hex characters, different middle) of any address you trust, and whether its EIP-55 checksum is valid. Address poisoning stole $76M+ in 12 months by planting such lookalikes in wallet histories.
to必填knownHow to buy the on-chain check (scans the sender's real transfer history on Ethereum/Base/Avalanche for poisoning transfers and lookalikes) via x402 for 0.005 USDC. Does not pay.
無需輸入參數。
已滿足適用檢查項的 100%
該評分衡量此收錄條目的完整程度，依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價，也不表示伺服器安全或目前可用：可連通性是帶日期的檢查結果，評分也不包含安裝量或使用者評價。
tattoo.check官方發布者
check.tattoo: tattoo size and placement guide 的託管 MCP 服務，由 check.tattoo 發布；無需登入；Streamable HTTP；5 個工具。
pt.iva官方發布者
在 VIES 中驗證歐盟增值稅號，並回傳葡萄牙增值稅法典（CIVA）與 RITI 條文，支援葡語與英語。
由 GitHub 帳號 throttler300 發布
一個本機 MCP 伺服器，把助理的引用綁定到已准入的來源文字並標註片段位置，可選擇拒絕雜湊已過期的引用。
由 GitHub 帳號 kriton-dev 發布
託管於 Apify 的遠端 MCP 伺服器，讓助理檢查網站宣告的七類 HTTP 安全標頭，且不傳回原始標頭值。
由 GitHub 帳號 Voopa-Corp 發布
對照創作要求審查已生成的影片，在再次付費算圖前建議是剪輯修改、重試一次還是更換做法。
npx devx-address-poisoning-check 0xd9A1C3788D81257612E2581A6ea0aDa244853a91 --known 0xd9A1b0B1e1aE382DbDc898Ea68012FfcB2853a91# DANGER: Looks like 0xd9a1...3a91 (same first 4 / last 6 hex chars) but is a different address. Classic address-poisoning lookalike.{ "mcpServers": { "address-poisoning-check": { "command": "npx", "args": ["-y", "devx-address-poisoning-check", "mcp"] } } }GET https://address-poisoning-check.nextill-pos.workers.dev/v1/check?from=0x...&to=0x...[&chains=ethereum,base,avalanche]