EdgeScreen x402 Security Screening
Server Details
Deterministic OFAC, homoglyph, prompt, SSRF, secret, and git diff screening via Base USDC x402.
- Status
- Healthy
- Uptime
- 100.0% over the last 24 hours
- Last Tested
- Transport
- Streamable HTTP · MCP 2025-06-18
- URL
- ChatGPT
- –
- Claude
- –
TDQS
Scored across 8 tools
The seven screen_* tools map to distinct targets (address, domain, prompt, URL, secret, diff), but screen_batch is explicitly a superset that can do address, domain, prompt, URL, text, and diff screening all at once, making it unclear when to pick the batch tool versus a specific one. Secret-leak detection also appears in three places (screen_batch, screen_secret, screen_diff), so an agent could reasonably pick the wrong one. The detailed descriptions help, but the boundaries are genuinely fuzzy.
All tools follow a consistent snake_case verb_noun pattern (health_check, screen_address, screen_batch, screen_diff, etc.), with the shared screen_ prefix cleanly grouping the domain tools. The one outlier, health_check, still fits the same grammar and is an obvious infrastructure tool.
Eight tools is well within the ideal 3-15 range and the set is tightly scoped to a single purpose (security screening) with one tool per screening target plus health. The only mild redundancy is screen_batch versus the individual screen_ tools, otherwise each earns its place.
The surface covers the main screening surfaces (address, domain, prompt, URL, secret, diff) plus a batch convenience path and health/pricing introspection, so core workflows are covered. Minor gaps remain: batch is capped at 25 items, and there is no way to query prior screenings, entity reputation, or payment/credit status beyond the health_check pricing snapshot.
Available Tools
8 toolshealth_checkARead-onlyIdempotentInspect
Inspect EdgeScreen health, version, active OFAC snapshot size, and x402 pricing (free, no payment required).
Inputs: no named parameters.
screen_addressARead-onlyIdempotentInspect
OFAC SDN crypto wallet sanctions screening for EVM, Bitcoin, and TRON addresses in <1ms. Requires $0.002 (2000 atomic) Base USDC on eip155:8453 via x402 PAYMENT-SIGNATURE header.
Inputs: address, addresses.
screen_batchARead-onlyIdempotentInspect
Screen up to 25 crypto addresses (OFAC SDN), domains/handles (IDN homoglyphs), untrusted prompts (prompt injection & tool poisoning), URLs (pre-fetch SSRF firewall), text snippets (secret leak redaction), and/or git diffs (pre-merge patch security) in <1ms. Requires $0.005 (5000 atomic) Base USDC on eip155:8453 via x402 PAYMENT-SIGNATURE header.
Inputs: url, diff, text, urls, +19 more.
screen_diffARead-onlyIdempotentInspect
Deterministic pre-merge git diff & PR patch auditor detecting leaked secrets in added lines, destructive shell/SQL commands, GitHub Actions/CI workflow injection, malicious package lifecycle hooks, SSRF & cloud metadata endpoints, auth/TLS verification bypasses, Trojan Source BiDi Unicode smuggling, and corrupt hunk counts. Requires $0.002 (2000 atomic) Base USDC on eip155:8453 via x402 PAYMENT-SIGNATURE header.
Inputs: diff, diffs, patch, patches.
screen_domainBRead-onlyIdempotentInspect
Deterministic IDN Punycode, Unicode UTS #39 homoglyph, and typosquatting lookalike detection for domains and handles. Requires $0.002 (2000 atomic) Base USDC on eip155:8453 via x402 PAYMENT-SIGNATURE header.
Inputs: brand (required), domain, handle, domains, +5 more.
screen_promptARead-onlyIdempotentInspect
Deterministic prompt-injection, MCP tool-poisoning, Unicode tag smuggling, and secret exfiltration firewall. Requires $0.002 (2000 atomic) Base USDC on eip155:8453 via x402 PAYMENT-SIGNATURE header.
Inputs: prompt, prompts.
screen_secretARead-onlyIdempotentInspect
Deterministic pre-publish secret leak detector & redactor for PRs, logs, and webhooks (OpenAI, Anthropic, AWS, GitHub, Stripe, Slack, Google keys, PEM & 64-hex private keys, JWTs, Bearer tokens -> safe, riskScore, masked findings, redactedText). Requires $0.002 (2000 atomic) Base USDC on eip155:8453 via x402 PAYMENT-SIGNATURE header.
Inputs: text, texts, secret, secrets.
screen_urlARead-onlyIdempotentInspect
Deterministic pre-fetch URL & SSRF firewall detecting loopback, RFC1918, CGNAT, IPv6 mapped/unique-local/link-local, AWS/GCP/Azure/Alibaba metadata endpoints, hex/octal/decimal IP encodings, dangerous schemes, embedded credentials, punycode homoglyphs, and open redirects. Requires $0.002 (2000 atomic) Base USDC on eip155:8453 via x402 PAYMENT-SIGNATURE header.
Inputs: url, urls.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
Loading tool schema changelog…
Related MCP Connectors
Pay-per-call smart-contract security: scans, tx simulation, and token risk via x402 (USDC on Base).
1Deterministic prompt-injection detection & sanitization for AI agents via x402 on Base.
Pay-per-call tx explainer, DeFi yields, token safety, SEC 8-K and OFAC data via x402 (USDC on Base).
Accountless public-source, SEC Form D and OFAC tools with x402 USDC payment on Base.
Related MCP Servers
- AlicenseAqualityBmaintenanceEnables AI assistants and CLI users to run automated bytecode security audits of EVM smart contracts on Base Mainnet, detecting risky opcodes and interface signatures, scoring risk, and unlocking verified results via x402 USDC micropayments.3MIT
- FlicenseAqualityCmaintenanceAgent-Level Transaction Safety Oracle. Before an AI agent signs a blockchain transaction, it returns a SAFE/UNSAFE verdict with a SENTINEL Score (AAA-D) and risk flags. Pay-per-call $0.005 USDC via x402 on Base.1-
- AlicenseAqualityBmaintenanceEnables AI agents to securely access x402-protected APIs on Base L2 with automatic USDC payments under deterministic spending limits, domain and contract allowlists, transaction simulation, and audit logging.4128 npmMIT
- AlicenseNot gradedqualityBmaintenanceEnables AI agents to run paid safety and data pre-checks over streamable HTTP — Base token risk and pricing, wallet balances and screening, transaction decoding, calldata and EIP-712 signature checks, ENS resolution, DNS/WHOIS, link phishing and security-header audits — with each tool call settled by an x402 USDC micropayment on Base instead of an account or API key. Also offers x402 seller preflight and web content extraction.MIT
Glama MCP Gateway
Add one secure layer between your agents and this server.