Cybercentry Verification

uk.co.cybercentry由 cybercentry.co.uk 發布官方發布者v1.0.4更新於 Oct 24, 2026

Twelve tools: token, wallet, contract and site security. Two free, the rest $1 in USDC over x402.

已驗證Streamable HTTP可網頁執行金融安全與監控

概覽

AI 產生的概覽

遠端按次付費的安全驗證伺服器:檢查錢包、代幣、合約、dApp、AI 代理與媒體內容,另有兩個免費目錄工具。

可以做什麼
  • 列出所有驗證服務目錄,並讀取即時漏洞利用動態(皆免費)
  • 篩查錢包的制裁與風險,以及上線前的錢包篩查
  • 檢查 Base 與以太坊/EVM 代幣,並為已上線代幣發行評分
  • 稽核 Solidity 原始碼,掃描網站或 dApp 前端的漏洞
  • 稽核 AI 代理設定,驗證圖片或影片的來源與真實性
  • 以零知識證明驗證私有資料而不揭露內容,並用抗量子加密處理文字
適用情境
適合在加密交易、部署或連線之前做盡職調查:查核代幣、交易對手錢包、合約、dApp 前端或 AI 代理,或判斷媒體是否真實。可先用兩個免費工具查看服務目錄與近期漏洞動態。
執行需求
遠端 streamable-HTTP 端點,無需安裝。不需帳號或 API 金鑰。十個付費工具每次呼叫 1.00 美元,透過 x402 以 USDC 支付(Base 或 Solana);不支援 x402 的用戶端可傳入 subscription_token 參數或 x-subscription-token 標頭。
安裝前請注意
十二個工具中有十個會花錢:每次呼叫 1.00 美元 USDC,支援 x402 的用戶端會自動結算,重複呼叫會產生實際費用。subscription_token 屬於憑證,會以參數或標頭傳送。錢包與網站掃描最長可能需要三分鐘。驗證請求會把地址、合約原始碼、網站 URL、代理設定與媒體內容傳送給第三方服務。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 Cybercentry Verification,將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Web executable,透過 Streamable HTTP。 遠端服務在工作區中設定後即可從網頁執行環境執行。

交給代理程式安裝

把這段提示詞貼上到 Claude Code、Codex、Cursor 等代理程式,或 SourceWeft 對話中。代理程式會讀取該伺服器的安裝指南,先向你展示發布者、端點和登入方式,經你同意後再把它新增到你的客戶端。金鑰不會寫進任何命令。

閱讀 https://sourceweft.com/mcp/uk.co.cybercentry%2Fverification/install.md,並按其中說明把這個 MCP 伺服器接入我的客戶端。修改任何設定之前,先告訴我它的發布者、端點和登入方式,等我確認。不要把 API 金鑰寫進命令或我會提交的檔案;問我金鑰應從哪裡取得。

檢視代理程式所依據的安裝指南

其他 MCP 客戶端

把它新增到你客戶端的 mcpServers 設定中。

{
  "mcpServers": {
    "cybercentry-verification": {
      "type": "http",
      "url": "https://centry.cybercentry.co.uk/api/mcp"
    }
  }
}

README

Cybercentry MCP Server

Pay-per-call security verification for AI agents: wallets, tokens, contracts, dApps, agents and more.

Nothing to install. This is a remote MCP server — connect to the URL and the tools appear.

Endpointhttps://centry.cybercentry.co.uk/api/mcp
Transportstreamable-http
Registryuk.co.cybercentry/verification
Websitehttps://centry.cybercentry.co.uk

Connect

Claude (Desktop or claude.ai)

Remote servers are added as connectors, not through claude_desktop_config.json — that file is for local servers that run a command.

  1. Settings → Connectors
  2. Add → Add custom connector
  3. Paste https://centry.cybercentry.co.uk/api/mcp

Other clients

Anything that speaks MCP over streamable HTTP can connect. Point it at:

https://centry.cybercentry.co.uk/api/mcp

Check your client's own documentation for where a remote MCP server URL goes — some use a settings pane, some a config file. If yours takes a config file, the field is the server URL rather than a command.

Tools

Twelve tools. Two are free and need no payment, credentials or account:

ToolWhat it does
list_servicesThe catalogue: every verification, its inputs and its price
recent_exploitsLive exploit feed, curated from DefiLlama

The other ten are paid, at $1.00 per call:

ToolWhat it verifies
wallet_verificationSanctions screening and risk scoring across 35 EVM chains
base_token_verificationBase B20 tokens: honeypots, freeze-and-seize, pause, impersonation
ethereum_token_verificationEthereum token due diligence
solidity_code_verificationSolidity source, for known vulnerability classes
web_application_verificationLive site and dApp frontend scan
openclaw_ai_agent_verificationAn agent's configuration: auth gaps, prompt-injection exposure, unsafe permissions
media_content_verificationC2PA provenance and content authenticity
private_data_verificationZero-knowledge proof over a payload, without revealing it
quantum_cryptography_verificationQuantum-resistant encryption of a payload
cyber_security_consultantAdvisory answers grounded in a security body of knowledge

Wallet and web application verification return a job immediately and fill in as findings arrive; both can take up to three minutes. The rest return in under ten seconds.

Paying

No API keys. No accounts. Two ways to pay for the ten paid tools:

x402 — the client is told the price, pays in USDC, and retries. Automatic in clients that support it.

Base    eip155:8453   USDCSolana  mainnet       USDC

Subscription token — for clients that do not speak x402 yet. Pass subscription_token as a tool argument, or send it as the x-subscription-token header.

A paid call runs the verification before it settles, so a call that fails is never charged.

Standards

The interfaces these services implement were specified in public:

  • ERC-8126 — AI Agent Verification (Final)
  • ERC-8196 — AI Agent Authenticated Wallet (Final)
  • ERC-8376 — Token Launch Abuse Detection and Remediation (open pull request)

Links


Cybercentry Limited

來源:README.md,提交 1c91439

工具

14

list_services

List Services

List every Cybercentry verification service with its price, inputs and SLA. Free.

無需輸入參數。

recent_exploits

Recent Exploits

Recent real-world web3 exploits from the live feed, with loss amounts, attack vectors and the Cybercentry service that addresses each. Free.

輸入參數limit

base_token_verification

Base Token Verification

Check a Base token contract before buying: detects honeypots, armed freeze-and-seize, a live pause, fake B20s and ticker-impersonation copycats, and separately discloses issuer controls (admin centralisation, supply cap, transfer policy, rebase) so a legitimate token is not mistaken for a scam. Costs $1.00 per call, paid in USDC over x402.

輸入參數chaincontract_address必填subscription_token

cyber_security_consultant

Cyber Security Consultant

Ask a cyber security question and get an expert answer backed by real-time threat intelligence, covering current threats, best practice and compliance. Costs $1.00 per call, paid in USDC over x402.

輸入參數query必填subscription_token

ethereum_token_verification

Ethereum Token Verification

Check an Ethereum or EVM token contract before buying: rug pull, hidden tax, liquidity legitimacy and holder concentration risk. Token due diligence returned as a scan report. Costs $1.00 per call, paid in USDC over x402.

輸入參數chainchain_idplatform_idcontract_address必填subscription_token

media_content_verification

Media Content Verification

Check whether an image or video is authentic and where it came from: C2PA content credentials, provenance and metadata extraction, with an avatar and logo impersonation check. Detect AI-generated or tampered media before trusting it. Costs $1.00 per call, paid in USDC over x402.

輸入參數image_uri必填media_file_path必填extract_metadatasubscription_tokenverify_authenticity

openclaw_ai_agent_verification

OpenClaw AI Agent Verification

Audit an AI agent configuration for security holes: prompt injection exposure, missing authentication, over-broad tool permissions and unsafe gateway settings. Check an agent before you trust it or connect to it. Costs $1.00 per call, paid in USDC over x402.

輸入參數toolconfig必填skillsmessagesessionIdsubscription_token

post_launch_screening

Post-launch Screening

Score a live token launch under ERC-8376, the token launch abuse standard we co-authored. The twelve-signal vector is assembled from chain state and scored against the eleven deployer abuse patterns into an abuse score of 0 to 100, with confidence reported separately so a high score on thin evidence cannot read as a certainty. Signals that could not be computed are named rather than scored clean. Price decline is excluded by rule, so a launch that locked liquidity, sold nothing and fell 95 per cent still scores clean: falling is not fraud. Name the creator, because at most venues the token was deployed by the venue's own factory and the creating address is the launchpad rather than the applicant. A screening, not a bonded on-chain report. Costs $1.00 per call, paid in USDC over x402.

輸入參數chaintoken必填creatorsubscription_token

pre_launch_screening

Pre-launch Screening

Screen who is asking to launch, before you deploy anything for them. At most venues the launchpad creates the token, so the only thing in front of you beforehand is a connected wallet: this screens that wallet, and it includes the full wallet verification rather than a summary of one. OFAC SDN sanctions screening, the funding chain walked to depth across 33 chains, mixer contact including the Tornado Cash pools, dusting, control clusters and exchange reuse, with a risk score. Then the launch-specific half: allocations this wallet has taken from contracts before and whether it still holds them or sold them, and whether the ticker it wants collides with a token it already touched. Says what it could not establish rather than reporting it clean. Eight of the twelve ERC-8376 signals describe conduct during or after a sale and cannot exist yet, so this reports on the party and not on the launch. Costs $1.00 per call, paid in USDC over x402.

輸入參數chaintickercreator必填subscription_token

private_data_verification

Private Data Verification

Prove a fact about private data without revealing the data: validates text integrity and returns a zero-knowledge proof (ZKP) with a verification ID and URL. Costs $1.00 per call, paid in USDC over x402.

輸入參數cpdv_data必填subscription_token

quantum_cryptography_verification

Quantum Cryptography Verification

Encrypt text with quantum-resistant (post-quantum) cryptography, for secrets that must outlast classical encryption. Returns a record ID and a decrypt URL. Costs $1.00 per call, paid in USDC over x402.

輸入參數cqcv_data必填subscription_token

solidity_code_verification

Solidity Code Verification

Audit Solidity smart contract source for vulnerabilities before you deploy or call it. Returns findings with a clear risk level. Costs $1.00 per call, paid in USDC over x402.

輸入參數solidity_code必填subscription_token

wallet_verification

Wallet Verification

Screen a wallet address for sanctions and risk: OFAC SDN sanctions screening, risk scoring and suspicious-activity detection across 33 EVM chains. Check a counterparty before you transact with it. Costs $1.00 per call, paid in USDC over x402.

輸入參數wallet_address必填subscription_token

web_application_verification

Web Application Verification

Scan a website or dApp frontend for vulnerabilities using OWASP checks, before connecting a wallet to it or trusting it with user data. Costs $1.00 per call, paid in USDC over x402.

輸入參數target_url必填subscription_token

版本歷史

1
  1. v1.0.4最新Sep 16, 2026

評分

已滿足適用檢查項的 100%

該評分衡量此收錄條目的完整程度,依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價,也不表示伺服器安全或目前可用:可連通性是帶日期的檢查結果,評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通必需25 分
  • 已宣告認證方式必需10 分
  • 已列出工具必需15 分
  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分