Chainverdict

xyz.chainverdict由 chainverdict.xyz 發布官方發布者v2.2.1更新於 Nov 2, 2026

Pay-per-call x402 checks before an agent moves money: token safety, wallet risk, identifiers.

已驗證Streamable HTTP可網頁執行資料庫金融安全與監控

概覽

AI 產生的概覽

遠端 MCP 伺服器，讓助理取得按次付費的付款前查核：Base 代幣與錢包風險、鏈上付款驗證、識別碼檢核與網域安全。

可以做什麼
  • 檢查 Base 上 ERC-20 代幣的安全判定、代幣真偽與錢包風險概況
  • 驗證鏈上付款，並讀取即時鏈上資料：Gas、最新區塊、代幣供給量、活躍度與持倉餘額
  • 檢核金融識別碼：IBAN、VAT、BIC、LEI 與 ISIN
  • 探測網域安全狀態：郵件驗證紀錄、TLS 憑證與品牌仿冒網域
  • 將 HTML 轉為 Markdown，並比對兩段文字的差異
  • 透過免費的 payment_info 工具說明 x402 定價與結算方式
適用情境
適合在代理程式即將於 Base 上轉帳或付款給陌生對象時，快速取得確定性的風險與驗證訊號；也適合在採取行動前檢核金融識別碼與網域安全。它並非合規控制措施，也不構成受監管的建議。
執行需求
遠端 Streamable HTTP 端點，不需帳號、API 金鑰或註冊。除 payment_info 外，每次工具呼叫都須透過 x402 協定在 Base 上以 USDC 按次付費，因此需要可進行 x402 付款且有餘額的錢包。需要能連線該端點及即時 Base RPC 資料。
安裝前請注意
每次工具呼叫都會產生費用（約 0.001 至 0.02 美元），自動化迴圈可能持續消耗 USDC，建議先查看 payment_info 與價格。結果僅為參考訊號，不是合規控制，也不構成金融、法律或合規建議，即時讀取的資料可能變動。簽章只能證明來源，不能證明結論正確。工具皆為唯讀，不會寫入或刪除資料。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 Chainverdict，將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Web executable，透過 Streamable HTTP。 遠端服務在工作區中設定後即可從網頁執行環境執行。

交給代理程式安裝

把這段提示詞貼上到 Claude Code、Codex、Cursor 等代理程式，或 SourceWeft 對話中。代理程式會讀取該伺服器的安裝指南，先向你展示發布者、端點和登入方式，經你同意後再把它新增到你的客戶端。金鑰不會寫進任何命令。

閱讀 https://sourceweft.com/mcp/xyz.chainverdict%2Fchainverdict/install.md，並按其中說明把這個 MCP 伺服器接入我的客戶端。修改任何設定之前，先告訴我它的發布者、端點和登入方式，等我確認。不要把 API 金鑰寫進命令或我會提交的檔案；問我金鑰應從哪裡取得。

檢視代理程式所依據的安裝指南

其他 MCP 客戶端

把它新增到你客戶端的 mcpServers 設定中。

{
  "mcpServers": {
    "chainverdict": {
      "type": "http",
      "url": "https://chainverdict.xyz/mcp"
    }
  }
}

README

ChainVerdict — chainverdict.xyz

Hosting: the main API and TradeRails share one service; Pulse retains its own server and data disk. See the hosting and rollback guide.

Checks an autonomous agent runs before a proposed payment: token safety verdicts and wallet risk profiles on Base, on-chain payment verification, financial-identifier validation, and live domain security posture.

Every call is paid per request in USDC on Base over the x402 protocol — no accounts, no API keys, no signup. Every response carries an evidence record saying what was checked, how fresh it is and what it does not establish, and is Ed25519-signed. No LLM inference anywhere: every answer is a deterministic computation or a live read of external state, results from live external sources can change over time.

MCP server

ChainVerdict is a remote MCP (Model Context Protocol) server, built on the official @modelcontextprotocol/sdk and served over Streamable HTTP at:

https://chainverdict.xyz/mcp

It is published in the official MCP registry as xyz.chainverdict/chainverdict.

  • initialize and tools/list are free, so registries and clients can index the server without paying.
  • tools/call is x402-paid at the price of the route behind the tool — except payment_info, which is free.
  • 20 MCP tools, all read-only and idempotent, annotated with readOnlyHint / destructiveHint / idempotentHint / openWorldHint.
  • No MCP resources or prompts are exposed; this server is tools-only.

Tool descriptions interpolate the live price from the same map the payment middleware charges from, so tools/list can never advertise a rate that is not the rate. test/mcp-parity.test.js fails the build if a tool exists for a route that is no longer sold, or if a sold route has no tool.

Tools

ToolWhat it answers
payment_infoFree. How x402 payment works, the price of every tool, where payments settle.
token_verdictHeuristic ERC-20 risk signals on Base; not a safety guarantee.
wallet_dossierWallet risk profile for a Base address before you pay it.
verify_paymentDecode and confirm an on-chain payment on Base.
verify_tokenResolve a symbol or address to the canonical Base token.
validate_iban validate_vat validate_bic validate_lei validate_isinDeterministic check-digit and format validation.
security_email security_tls security_typosquatSPF/DMARC/DKIM posture, live TLS probe, brand look-alike analysis.
data_gas data_block data_token_supply data_token_activity data_portfolioLive Base chain reads.
html_to_markdown text_diffDocument utilities.

POST /v1/batch/validate is HTTP-only by design: 500 identifiers do not belong in a tool-call argument.

HTTP rate card

Every endpoint answers an unpaid request with a 402 quote.

RoutePrice
GET /v1/token/verdict/*$0.01
GET /v1/wallet/dossier/*$0.01
GET /v1/validate/iban/*$0.001
GET /v1/validate/vat/*$0.001
GET /v1/validate/bic/*$0.001
POST /v1/doc/html-to-markdown$0.002
POST /v1/doc/diff$0.002
GET /v1/verify/payment/*$0.02
GET /v1/verify/token/*$0.005
GET /v1/validate/lei/*$0.002
GET /v1/validate/isin/*$0.001
POST /v1/batch/validate$0.10
GET /v1/security/email/*$0.01
GET /v1/security/tls/*$0.01
GET /v1/security/typosquat/*$0.005
GET /v1/data/gas$0.002
GET /v1/data/block$0.001
GET /v1/data/supply/*$0.003
GET /v1/data/activity/*$0.005
GET /v1/data/portfolio/*$0.004

Free to read before you pay for anything: / (discovery), /health, /openapi.json, /llms.txt, /v1/methodology, /.well-known/x402.json.

The whole portfolio, machine-readable: https://pulse.chainverdict.xyz/.well-known/portfolio.json

Local dev

bash
npm ciX402_ENABLED=false npm start   # free mode, no paymentsnpm test                       # 34 tests

Ops

Stateless. No database, no cron, no maintained data set. Sources are pure arithmetic over public specifications plus live Base RPC.

Limitations

These are informational signals. None is a compliance control, none discharges a legal obligation, and none is regulated financial, legal or compliance advice. A valid signature proves a response came from this service unaltered — not that the answer is correct. A signed wrong answer is still wrong, and still signed.

Operated by Alexander Balieu, independent professional established in Luxembourg.

Licence

MIT. See LICENSE.

Local development and repository hygiene

Run npm ci before npm test or npm start. Dependencies are installed from package-lock.json; node_modules/ is local-only and is not stored in Git. Never commit environment files or signing keys. Live reads can change with upstream state; signed responses authenticate the statement, not its accuracy.

來源：README.md，提交 afad434

工具

20

payment_info

How to pay for these tools (free)

Free. Explains how to call the paid tools on this server: the x402 protocol, the network and asset, the settlement address, and the price of every tool.

無需輸入參數。

token_verdict

Token safety verdict (Base)

Heuristic ERC-20 safety verdict on Base: bytecode risk capabilities, ownership, metadata, 0-100 score, hold/caution/avoid. $0.01 per call.

輸入參數address必填

wallet_dossier

Wallet dossier (Base)

Profile of a Base address: EOA vs contract, balance, activity band, flags. $0.01 per call.

輸入參數address必填

validate_iban

Validate IBAN

IBAN mod-97 checksum + country length rules. $0.001 per call.

輸入參數iban必填

validate_vat

Validate EU VAT number

EU VAT format validation with deterministic checksums (DE, IT, LU, PL, SI). $0.001 per call.

輸入參數vat必填

validate_bic

Validate BIC/SWIFT

BIC/SWIFT structural validation and decomposition. $0.001 per call.

輸入參數bic必填

html_to_markdown

HTML to Markdown

Convert raw HTML to clean Markdown. $0.002 per call.

輸入參數html必填

text_diff

Structured text diff

Diff two texts (lines/words/chars). $0.002 per call.

輸入參數a必填b必填mode

verify_payment

Verify on-chain payment (Base)

Decode ERC-20 transfers in a Base transaction: amounts, counterparties, confirmations. $0.02 per call.

輸入參數txhash必填

verify_token

Canonical token check (Base)

Is this the real USDC/EURC/WETH/cbBTC/USDT on Base? Anti-phishing for stablecoin payments. $0.005 per call.

輸入參數query必填

validate_lei

Validate LEI (ISO 17442)

Legal Entity Identifier checksum validation. $0.002 per call.

輸入參數lei必填

validate_isin

Validate ISIN (ISO 6166)

Securities identifier checksum validation. $0.001 per call.

輸入參數isin必填

security_email

Email spoofing posture (SPF/DMARC/DKIM)

Live DNS check of a domain's email authentication records. $0.01 per call.

輸入參數domain必填selector

security_tls

TLS certificate check

Live TLS handshake: cert validity, issuer, expiry countdown. $0.01 per call.

輸入參數domain必填

security_typosquat

Typosquat / look-alike domain check

Flags homoglyph and edit-distance look-alikes of known brands (c0inbase, b1nance, etc.). $0.005 per call.

輸入參數brandsdomain必填

data_gas

Base gas oracle

Live Base gas conditions: base fee, priority fees, congestion, est transfer cost. $0.002 per call.

無需輸入參數。

data_block

Latest Base block

Latest block number, timestamp, tx count, gas utilization. $0.001 per call.

無需輸入參數。

data_token_supply

Token supply & burn (Base)

Total/circulating/burned supply and burn percentage for an ERC-20 on Base. $0.003 per call.

輸入參數address必填

data_token_activity

Token transfer activity (Base)

Recent transfer count, volume, unique senders/receivers, activity level. $0.005 per call.

輸入參數blocksaddress必填

data_portfolio

Address portfolio (Base)

ETH + canonical token balances (USDC/WETH/cbBTC/EURC) for an address. $0.004 per call.

輸入參數address必填

版本歷史

1
  1. v2.2.1最新Sep 16, 2026

評分

已滿足適用檢查項的 100%

該評分衡量此收錄條目的完整程度，依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價，也不表示伺服器安全或目前可用：可連通性是帶日期的檢查結果，評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通必需25 分
  • 已宣告認證方式必需10 分
  • 已列出工具必需15 分
  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分