Skip to main content
Glama

EdgeScreen x402 Security Screening

Server Details

Deterministic OFAC, homoglyph, prompt, SSRF, secret, and git diff screening via Base USDC x402.

If you are the author of this connector, you can claim ownership by verifying the domain or GitHub account it belongs to. Claimed connector authors can inspect health checks, view analytics, and manage their listing.
Status
Healthy
Uptime
100.0% over the last 24 hours
Last Tested
Transport
Streamable HTTP · MCP 2025-06-18
URL
ChatGPT
–
Claude
–

TDQS

A3.7/5.0

Scored across 8 tools

Disambiguation3/5

The seven screen_* tools map to distinct targets (address, domain, prompt, URL, secret, diff), but screen_batch is explicitly a superset that can do address, domain, prompt, URL, text, and diff screening all at once, making it unclear when to pick the batch tool versus a specific one. Secret-leak detection also appears in three places (screen_batch, screen_secret, screen_diff), so an agent could reasonably pick the wrong one. The detailed descriptions help, but the boundaries are genuinely fuzzy.

Naming Consistency5/5

All tools follow a consistent snake_case verb_noun pattern (health_check, screen_address, screen_batch, screen_diff, etc.), with the shared screen_ prefix cleanly grouping the domain tools. The one outlier, health_check, still fits the same grammar and is an obvious infrastructure tool.

Tool Count4/5

Eight tools is well within the ideal 3-15 range and the set is tightly scoped to a single purpose (security screening) with one tool per screening target plus health. The only mild redundancy is screen_batch versus the individual screen_ tools, otherwise each earns its place.

Completeness4/5

The surface covers the main screening surfaces (address, domain, prompt, URL, secret, diff) plus a batch convenience path and health/pricing introspection, so core workflows are covered. Minor gaps remain: batch is capped at 25 items, and there is no way to query prior screenings, entity reputation, or payment/credit status beyond the health_check pricing snapshot.

Available Tools

8 tools
health_checkA
Read-onlyIdempotent
Inspect

Inspect EdgeScreen health, version, active OFAC snapshot size, and x402 pricing (free, no payment required).

Inputs: no named parameters.

screen_addressA
Read-onlyIdempotent
Inspect

OFAC SDN crypto wallet sanctions screening for EVM, Bitcoin, and TRON addresses in <1ms. Requires $0.002 (2000 atomic) Base USDC on eip155:8453 via x402 PAYMENT-SIGNATURE header.

Inputs: address, addresses.

screen_batchA
Read-onlyIdempotent
Inspect

Screen up to 25 crypto addresses (OFAC SDN), domains/handles (IDN homoglyphs), untrusted prompts (prompt injection & tool poisoning), URLs (pre-fetch SSRF firewall), text snippets (secret leak redaction), and/or git diffs (pre-merge patch security) in <1ms. Requires $0.005 (5000 atomic) Base USDC on eip155:8453 via x402 PAYMENT-SIGNATURE header.

Inputs: url, diff, text, urls, +19 more.

screen_diffA
Read-onlyIdempotent
Inspect

Deterministic pre-merge git diff & PR patch auditor detecting leaked secrets in added lines, destructive shell/SQL commands, GitHub Actions/CI workflow injection, malicious package lifecycle hooks, SSRF & cloud metadata endpoints, auth/TLS verification bypasses, Trojan Source BiDi Unicode smuggling, and corrupt hunk counts. Requires $0.002 (2000 atomic) Base USDC on eip155:8453 via x402 PAYMENT-SIGNATURE header.

Inputs: diff, diffs, patch, patches.

screen_domainB
Read-onlyIdempotent
Inspect

Deterministic IDN Punycode, Unicode UTS #39 homoglyph, and typosquatting lookalike detection for domains and handles. Requires $0.002 (2000 atomic) Base USDC on eip155:8453 via x402 PAYMENT-SIGNATURE header.

Inputs: brand (required), domain, handle, domains, +5 more.

screen_promptA
Read-onlyIdempotent
Inspect

Deterministic prompt-injection, MCP tool-poisoning, Unicode tag smuggling, and secret exfiltration firewall. Requires $0.002 (2000 atomic) Base USDC on eip155:8453 via x402 PAYMENT-SIGNATURE header.

Inputs: prompt, prompts.

screen_secretA
Read-onlyIdempotent
Inspect

Deterministic pre-publish secret leak detector & redactor for PRs, logs, and webhooks (OpenAI, Anthropic, AWS, GitHub, Stripe, Slack, Google keys, PEM & 64-hex private keys, JWTs, Bearer tokens -> safe, riskScore, masked findings, redactedText). Requires $0.002 (2000 atomic) Base USDC on eip155:8453 via x402 PAYMENT-SIGNATURE header.

Inputs: text, texts, secret, secrets.

screen_urlA
Read-onlyIdempotent
Inspect

Deterministic pre-fetch URL & SSRF firewall detecting loopback, RFC1918, CGNAT, IPv6 mapped/unique-local/link-local, AWS/GCP/Azure/Alibaba metadata endpoints, hex/octal/decimal IP encodings, dangerous schemes, embedded credentials, punycode homoglyphs, and open redirects. Requires $0.002 (2000 atomic) Base USDC on eip155:8453 via x402 PAYMENT-SIGNATURE header.

Inputs: url, urls.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

Loading tool schema changelog…

    Related MCP Connectors

    Related MCP Servers

    • F
      license
      A
      quality
      C
      maintenance
      Agent-Level Transaction Safety Oracle. Before an AI agent signs a blockchain transaction, it returns a SAFE/UNSAFE verdict with a SENTINEL Score (AAA-D) and risk flags. Pay-per-call $0.005 USDC via x402 on Base.
      1
      -
    • A
      license
      A
      quality
      B
      maintenance
      Enables AI agents to securely access x402-protected APIs on Base L2 with automatic USDC payments under deterministic spending limits, domain and contract allowlists, transaction simulation, and audit logging.
      4
      128 npm
      MIT
    • A
      license
      Not graded
      quality
      B
      maintenance
      Enables AI agents to run paid safety and data pre-checks over streamable HTTP — Base token risk and pricing, wallet balances and screening, transaction decoding, calldata and EIP-712 signature checks, ENS resolution, DNS/WHOIS, link phishing and security-header audits — with each tool call settled by an x402 USDC micropayment on Base instead of an account or API key. Also offers x402 seller preflight and web content extraction.
      MIT
    Try in Browser

    Glama MCP Gateway

    Add one secure layer between your agents and this server.

    Resources