Skip to main content
Glama

Agent safety checks: prompt-injection scan, honeypot check, x402 preflight + crypto data (USDC/x402)

Server Details

Checks before an agent acts: prompt-injection scan, honeypot check, x402 preflight. 3 free calls.

If you are the author of this connector, you can claim ownership by verifying the domain or GitHub account it belongs to. Claimed connector authors can inspect health checks, view analytics, and manage their listing.
Status
Healthy
Uptime
100.0% over the last 24 hours
Last Tested
Transport
Streamable HTTP · MCP 2025-11-25
URL
ChatGPT
–
Claude
–

TDQS

A3.6/5.0

Scored across 29 tools

Disambiguation3/5

Most market-analysis and safety-check tools have clearly distinct targets, but the set contains several overlapping clusters: five purchase/pilot tools all sell access in different ways, and get_registry, get_signal_card and registry_metrics all serve catalog/reliability lookup roles. The detailed descriptions help an agent choose correctly, but selection requires careful reading rather than being immediately obvious.

Naming Consistency4/5

Names are consistently snake_case throughout, with clear prefixes like get_, buy_, validate_ and input_guard_. A few tools are noun phrases (regime, slippage, token_risk) while others use verb_noun, but the pattern remains readable and predictable enough.

Tool Count2/5

At 29 tools this surface is above the comfortable upper bound and feels heavy for a single MCP server. Many endpoints are granular market checks and there are multiple purchase variants that could be consolidated without losing capability.

Completeness4/5

The surface covers the stated safety-check domain well, including prompt-injection scanning, honeypot/token risk, x402 preflight, gas checks and payment reconciliation, alongside substantial crypto market data. Minor gaps exist around subscription/cancellation management and wallet status, but core workflows are complete.

Available Tools

29 tools
buy_enterpriseTradeSignal: enterpriseAInspect

TradeSignal enterprise package bought in one x402 call: 499 USDC for 30 days and 20,000 calls, 2,500 for 90 days and 150,000 calls, or 9,900 for a year and 750,000 calls, all with a priority slot that is never rate limited and desk-level /watch included. After: use the bundle_token on every tool (priority slot, never 429) and poll /watch with the subscription token.

Inputs: plan, payment_tx.

buy_pack_with_cardTradeSignal: pack by cardAInspect

For agents and people without USDC: prepaid packs paid in EUR by card or Link (100 calls €5.00 · 500 calls €25.00 · 5,000 calls €199.00) — including Link's wallet for agents (one-time card, approved by the human). Returns checkout_url; after payment the success page (Accept: application/json) returns the bundle_token, and it is e-mailed. After: get_signals with bundle_token.

Inputs: calls, email.

buy_signal_packTradeSignal: prepaid packAInspect

Prepaid calls for every TradeSignal tool: 50000 calls 1499.00 · 5000 calls 199.00 · 500 calls 25.00 USDC (default 50,000); returns a bundle_token. Paid via x402 (params._meta["x402/payment"]) or payment_tx. After: get_signals with bundle_token — no per-call signing.

Inputs: calls, payment_tx.

buy_subscriptionTradeSignal: subscriptionAInspect

30 days in one call: basic 39.00 USDC (/watch, 20 pairs, 60 s poll); pro 99.00 USDC (/watch every 30 s + 2,000 calls on every surface); desk 199.00 USDC (/watch every 15 s + 10,000 calls on every surface, priority slot). Returns a subscription token (and a bundle_token for pro/desk); the paying address is whitelisted. No form, no login, no e-mail. After: GET /agenten/signal/watch with X-Subscription-Token — 200 new setups, 204 nothing new.

Inputs: bias, plan, symbols, payment_tx.

correlation_matrixCorrelation matrix for position sizing and hedgingA
Read-only
Inspect

Concentration-risk check for a crypto portfolio: Pearson correlation of 1h log returns between up to 12 Binance spot pairs over up to 200 closed hours, with the most and least correlated pairs, for position sizing and hedging. 0.25 USDC base (new payers 0.25, >10 payments 0.175; 5 pack calls). After: regime for the least correlated pairs (the result's next field has the exact call).

Inputs: symbols (required), bars, payment_tx, bundle_token, +1 more.

funding_ratesPerpetual funding rates across Binance, Bybit and HyperliquidA
Read-only
Inspect

Carry and crowding check from predicted perpetual funding per coin on Binance, Bybit and Hyperliquid: rate per interval, annualized rate, which side pays and the cross-venue spread for funding arbitrage, from the Hyperliquid predictedFundings feed. 0.25 USDC base (new payers 0.25, >10 payments 0.175; 5 pack calls). After: sentiment-gate for the coin with the widest spread (the result's next field has the exact call).

Inputs: symbols, payment_tx, bundle_token, payer_address.

gas_windowGas check on Base or Ethereum: send now or waitA
Read-only
Inspect

Gas-cost check before a transaction is submitted on Base or Ethereum: current base fee against the median of the last 30 blocks, priority fee percentiles and the cost of an ERC-20 transfer in ETH and USD, with a now, soon or wait recommendation. 0.25 USDC base (new payers 0.25, >10 payments 0.175; 5 pack calls). After: reconciliation once your transfer is mined (the result's next field has the exact call).

Inputs: chain, payment_tx, bundle_token, payer_address.

get_nowAngel: current date and timeA
Read-only
Inspect

Free: the real current date and time (UTC, unix, weekday, ISO week) and local time in 16 world cities, Asia first — your training data ends earlier than today. Includes a context line to prepend. After: input_guard before your agent reads outside content.

Inputs: no named parameters.

get_registryTradeSignal: registryA
Read-only
Inspect

Free: every endpoint payable through this cashier with price tiers, pack calls and its agent.md; verified numbers (latency, failure rate, price history, payer trend) cost one registry_metrics call. After: registry_metrics for the endpoint you want to rely on.

Inputs: no named parameters.

get_sample_signalTradeSignal: free sampleA
Read-only
Inspect

Free: the best current setup from the full 16-pair scan (cached up to 120 s; the market regime for BTC and ETH when no setup qualifies) so you can judge the output before paying, plus the pack offer. After: get_signals for every setup, or buy_signal_pack.

Inputs: bias.

get_signal_cardTradeSignal: free cardA
Read-only
Inspect

Free: every tool with price, fields, latency, cache, payTo and an example response. After: buy_signal_pack (50,000 calls) or call any tool with x402.

Inputs: no named parameters.

get_signalsCrypto trade setups: entry, stop, targets nowA
Read-only
Inspect

Concrete crypto trade setups when an agent needs entries now, Binance spot, long or short: up to 10 with entry, stop, tp1, tp2, rr, confidence, gate (1h and 4h trend agree) and expires_at; empty when nothing qualifies. 0.25 USDC base (new payers 0.25, >10 payments 0.175; 5 pack calls); fresh=true 5x. Pay via x402 (params._meta["x402/payment"]), a bundle_token or a payment_tx. After: validate_setup for the top setup (the result's next field has the exact call).

Inputs: bias, fresh, symbols, payment_tx, +2 more.

get_swap_routeSwap route on Base (free)A
Read-only
Inspect

Free route data: the best swap route on Base (or Ethereum) for a token you already checked with token_risk — quote, minimum out, approval target and, with taker, the unsigned transaction you sign and send yourself. Technical data and risk-analysis service only: no custody, no order execution, no investment advice. Disclosed: the 0.5 % integrator fee is a technical API provisioning fee for computing the route data, deducted by the aggregator inside the swap and sent to Angel's wallet; buy_amount is already net of it. Run token_risk on buy_token first. After: approve the spender if approval is set, then send the transaction from your own wallet.

Inputs: buy_token (required), sell_token (required), sell_amount (required), chain, +2 more.

historical_gateBacktest the signal gate on 30 days for one pairA
Read-only
Inspect

Backtest before relying on a signal: the engine's gate replayed on up to 30 days of closed 1h candles for one pair: win rates, average R, gate=true vs gate=false. 0.50 USDC base (new payers 0.50, >10 payments 0.35; 10 pack calls). After: buy_subscription to get the next setup on this pair as soon as it qualifies.

Inputs: symbol (required), bias, days, payment_tx, +2 more.

input_guardPrompt-injection scan for untrusted web, email and tool contentA
Read-only
Inspect

Prompt-injection and hidden-instruction scan for untrusted input before an agent acts on it: web pages, emails, RAG chunks, tool and MCP responses. Flags text aimed at the model (role takeover, forged system or tool turns, requests for keys, the prompt, history or payments, exfiltration links), invisible Unicode (tag smuggling decoded, zero-width, bidi), homoglyphs, base64 payloads and HTML hidden from humans, in 17 languages. Verdict clean, caution or hostile, score, findings, cleaned text. 0.99 USDC base (new payers 0.99, >10 payments 0.693; 20 pack calls). After: preflight before your agent pays anything the content pointed to (the result's next field has the exact call).

Inputs: url, text, payment_tx, bundle_token, +1 more.

input_guard_previewPrompt-injection quick scan (free)A
Read-only
Inspect

Free prompt-injection quick scan for untrusted input: up to 4,000 characters of text, or one https page, checked for hidden instructions aimed at agents (role override, invisible Unicode, hidden HTML) in 17 languages incl. Chinese, Japanese, Korean, Hindi, Arabic. Returns verdict, score and the top 3 findings. After: input_guard for every finding and the cleaned text.

Inputs: url, text.

liquidationsLiquidation flow on OKX perpetuals: long vs short squeezeA
Read-only
Inspect

Squeeze and liquidation-cascade check for a coin: recent forced liquidations on the OKX USDT perpetual with long and short liquidated notional in USD, counts, the largest prints and the long/short skew over the covered window, from OKX public liquidation orders. 0.25 USDC base (new payers 0.25, >10 payments 0.175; 5 pack calls). After: sentiment-gate for the same coin (the result's next field has the exact call).

Inputs: symbol (required), payment_tx, bundle_token, payer_address.

orderflow_imbalanceOrder-flow imbalance: buy vs sell pressure on a pairA
Read-only
Inspect

Short-term buy or sell pressure on a Binance spot pair: taker order-flow imbalance from the latest aggregated trades plus order-book imbalance within 0.5 percent of mid, with buy and sell volume, imbalance from -1 to 1 and a pressure label. 0.25 USDC base (new payers 0.25, >10 payments 0.175; 5 pack calls). After: slippage for the side with the pressure (the result's next field has the exact call).

Inputs: symbol (required), trades, payment_tx, bundle_token, +1 more.

preflightPre-purchase check for any shop, checkout link, payment page, API or x402 endpointA
Read-only
Inspect

Before an agent buys, pays or calls an unknown endpoint: one unpaid request to any https shop, checkout or payment link (Stripe, Shopify, PayPal and others), API or x402 endpoint. Checks TLS, domain age, look-alike domains, redirects to foreign gateways, the payment provider, card fields in the page, http forms, text aimed at agents in the page and, for x402, USDC contract, payTo, EIP-712 domain and price traps. Verdict pay, caution or do_not_pay, risk_score, merchant_signals. 0.25 USDC base (new payers 0.25, >10 payments 0.175; 5 pack calls). After: input-guard on the page text you will act on, gas-window before you settle on Base (the result's next field has the exact call).

Inputs: url (required), method, payment_tx, bundle_token, +3 more.

reconciliationPayment-received check: match expected USDC payments on BaseA
Read-only
Inspect

Payment-received check for USDC on Base: matches a list of expected amounts (optionally sender and reference) against the incoming USDC transfers of an address and returns each match with tx hash and time, the expected payments still missing and transfers that arrived unexpected. Answers whether an invoice or agent payment arrived without a block explorer. 0.25 USDC base (new payers 0.25, >10 payments 0.175; 5 pack calls). After: gas-window before your next payout (the result's next field has the exact call).

Inputs: address (required), expected (required), payment_tx, bundle_token, +1 more.

regimeMarket regime per pair: trending, ranging or volatileA
Read-only
Inspect

Market-regime classifier for choosing a strategy on Binance spot pairs: trend_up, trend_down, range or volatile from closed 1h and 4h candles, with EMA20/50 trend on both timeframes, 24h efficiency ratio, ATR as percent of price and its percentile over the last 100 hours. 0.25 USDC base (new payers 0.25, >10 payments 0.175; 5 pack calls). After: POST /signal with the trending pairs and the matching bias (the result's next field has the exact call).

Inputs: symbols, payment_tx, bundle_token, payer_address.

registry_metricsVerified reliability stats for an x402 endpoint before relying on itA
Read-only
Inspect

Reliability check for an x402 endpoint in this registry before an agent depends on it, measured from requests and payments this cashier settled itself: calls, success and failure rate, p50/p95 latency, 402-to-paid conversion, paid calls, unique and repeat payers, and daily quoted and paid price over 7 or 30 days. 0.25 USDC base (new payers 0.25, >10 payments 0.175; 5 pack calls). After: the endpoint you verified — its path is in the answer (the result's next field has the exact call).

Inputs: endpoint (required), days, payment_tx, bundle_token, +1 more.

request_enterprise_pilotTradeSignal: free enterprise pilotAInspect

Free for teams: a 7-day pilot with 300 calls on every TradeSignal tool and the enterprise priority slot — no wallet, no payment. Needs the operator's work e-mail, the company and the use case; one pilot per address. Returns a bundle_token. After: pass bundle_token to get_signals and every other tool; buy_enterprise before it ends.

Inputs: email (required), company (required), use_case (required), plan, +2 more.

send_wishAngel: wish boxBInspect

Free: tell Angel what your agent is missing — a tool, data, a safety check, a payment method — in any language (3-500 characters). Only counts per category and language are ever published. After: get_now or input_guard_preview.

Inputs: need (required), lang, agent, category.

sentiment_gateRisk-on / risk-off gate before opening a positionA
Read-only
Inspect

Risk gate before opening a position on a coin, from three public signals: the Crypto Fear and Greed index and its change, predicted perpetual funding across venues and the 4h EMA trend on Binance spot, combined into risk_on, neutral or risk_off with the reasons. 0.25 USDC base (new payers 0.25, >10 payments 0.175; 5 pack calls). After: POST /signal with the bias the gate allows (the result's next field has the exact call).

Inputs: symbol, payment_tx, bundle_token, payer_address.

slippageSlippage and price-impact estimate before a market orderA
Read-only
Inspect

Price-impact estimate before a market order executes on a Binance spot pair: walks the live order book (up to 1,000 levels) for a given USD size and returns average fill price, slippage in basis points versus mid, levels consumed and the share that could be filled. 0.25 USDC base (new payers 0.25, >10 payments 0.175; 5 pack calls). After: validate the setup you want to size (the result's next field has the exact call).

Inputs: side (required), symbol (required), notional_usd (required), payment_tx, +2 more.

token_riskHoneypot and rug-pull check for an ERC-20 before swap or approveA
Read-only
Inspect

Honeypot and rug-pull check for an ERC-20 on Base or Ethereum before a swap, approval or signature, read straight from the contract: upgradeable proxy (EIP-1967, beacon, clone), owner powers in the bytecode (mint, pause, blacklist, fee or max-tx setters, trading switch, burn from any address), owner renounced or active and the owner's share of supply; known issuers labeled. Risk low, medium or high with reasons. Signals, not investment advice. 0.99 USDC base (new payers 0.99, >10 payments 0.693; 20 pack calls). After: gas-window before you trade on that chain (the result's next field has the exact call).

Inputs: token (required), chain, payment_tx, bundle_token, +1 more.

validate_batchBatch pre-trade validation of up to 10 crypto setupsA
Read-only
Inspect

Pre-trade validation of up to 10 crypto setups in one call against the live Binance spot market: geometry, stop vs 1h ATR, reward-to-risk, 1h/4h trend, RSI14 and entry distance for each, returning valid, weak or invalid with a 0-100 score and the failed checks per setup. 0.50 USDC base (new payers 0.50, >10 payments 0.35; 10 pack calls). After: historical-gate for the best valid setup (the result's next field has the exact call).

Inputs: setups (required), payment_tx, bundle_token, payer_address.

validate_setupPre-trade check: validate a crypto setup before orderingA
Read-only
Inspect

Pre-trade sanity check before an order is placed — a crypto setup checked against the live Binance market: geometry, stop vs 1h ATR, reward-to-risk, 1h/4h trend, RSI14, entry distance — valid | weak | invalid, score 0-100, every check. 0.10 USDC base (new payers 0.10, >10 payments 0.07; 2 pack calls). After: historical_gate for the same symbol and bias.

Inputs: bias (required), stop (required), entry (required), symbol (required), +5 more.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

Loading tool schema changelog…

    Related MCP Connectors

    Related MCP Servers

    • A
      license
      A
      quality
      C
      maintenance
      Safety checks an agent runs before it acts — flags malicious packages, destructive shell commands, secret leaks, and web-backend holes before execution.
      8
      MIT
    • A
      license
      Not graded
      quality
      B
      maintenance
      Enables AI agents to run a free fail-closed preflight gate on x402 payment challenges and transactions before signing, plus five USDC-paid on-chain truth checks covering arbitrage profitability, token safety, swap routing, quote validation, and trade sizing. Each check returns a verdict with pinned-block evidence and a verifiable receipt.
      Apache 2.0
    • A
      license
      A
      quality
      D
      maintenance
      security tools for AI agents: URL safety scanning, prompt injection detection (200+ patterns), email/password breach checks via HIBP, domain & IP reputation analysis, and AI skill supply chain scanning. Free tier (3 calls/day) or pay-per-request with USDC micropayments via x402.
      9
      32 npm
      1
      MIT
    Try in Browser

    Glama MCP Gateway

    Add one secure layer between your agents and this server.

    Resources