Cybercentry Verification
Server Details
Twelve tools: token, wallet, contract and site security. Two free, the rest $1 in USDC over x402.
- Status
- Healthy
- Last Tested
- Transport
- Streamable HTTP
- URL
- Repository
- Cybercentry/verification-mcp
- GitHub Stars
- 0
Available Tools
12 toolsbase_token_verificationBase Token VerificationAInspect
Check a Base token contract before buying: detects honeypots, armed freeze-and-seize, a live pause, fake B20s and ticker-impersonation copycats, and separately discloses issuer controls (admin centralisation, supply cap, transfer policy, rebase) so a legitimate token is not mistaken for a scam. Costs $1.00 per call, paid in USDC over x402.
| Name | Required | Description | Default |
|---|---|---|---|
| chain | No | base for mainnet (default), or base-sepolia to check a token before you launch it | |
| contract_address | Yes | B20 token contract address | |
| subscription_token | No | Optional Cybercentry subscription token. Uses your plan quota instead of paying per call. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the burden of behavioral disclosure and does so well. It explicitly lists what the tool detects, separately discloses issuer controls, and transparently states the cost and payment method ($1.00, USDC over x402). It does not contradict any annotations because none are provided.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences, front-loaded with the core purpose, and every sentence provides valuable information. There is no redundancy or fluff; the cost and payment details are included efficiently.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description explains what the tool does, when to use it, what it detects, and the cost. While there is no output schema, the description implies the output through phrases like 'detects' and 'discloses issuer controls.' It could be improved by explicitly mentioning the return format, but overall it is sufficiently complete for a verification tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema already provides 100% coverage with descriptions for all three parameters, so the baseline is 3. The tool description adds context about Base and B20 tokens, which indirectly clarifies the 'chain' parameter, but it does not add specific parameter-level semantics beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's purpose with a specific verb ('Check'), the resource ('Base token contract'), and the context ('before buying'). It details specific detection categories (honeypots, freeze-and-seize, pause, fake B20s, impersonation) and distinguishes itself from the sibling ethereum_token_verification by targeting the Base chain and B20 tokens.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives a clear usage context ('before buying') and specifies the target chain (Base), implying when to use it. It also mentions the $1.00 cost, aiding decision-making. However, it does not explicitly state when not to use it or name alternative tools, leaving some ambiguity versus the similar Ethereum verification sibling.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
cyber_security_consultantCyber Security ConsultantAInspect
Ask a cyber security question and get an expert answer backed by real-time threat intelligence, covering current threats, best practice and compliance. Costs $1.00 per call, paid in USDC over x402.
| Name | Required | Description | Default |
|---|---|---|---|
| query | Yes | Question (e.g., What should an incident response capability include?). | |
| subscription_token | No | Optional Cybercentry subscription token. Uses your plan quota instead of paying per call. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden of behavioral disclosure. It explicitly states the cost ('$1.00 per call') and payment method ('USDC over x402'), which is critical for an agent deciding whether to invoke. It also mentions 'real-time threat intelligence,' implying live data access. This goes beyond what the schema provides.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences, front-loaded with the purpose in the first sentence and the cost in the second. Every word earns its place, with no redundancy or fluff.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple Q&A tool with two parameters and no output schema, the description provides sufficient context: what the tool does, the topic scope, cost, and payment method. The optional subscription_token is documented clearly in the schema, so the description need not elaborate further. The agent has all necessary information to decide whether to use the tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema covers 100% of the parameters (query and subscription_token) with descriptions. The description adds no parameter-specific information beyond what the schema already provides, so the baseline of 3 is appropriate. The schema is sufficient.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's function: 'Ask a cyber security question and get an expert answer backed by real-time threat intelligence.' It uses a specific verb ('ask') and resource ('cyber security question'), and the scope ('current threats, best practice and compliance') distinguishes it from sibling verification tools, which are more narrowly focused.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides clear context on when to use the tool: whenever a cyber security question needs an expert answer. It does not explicitly mention alternatives or when not to use it, but the purpose is evident given the sibling list of specialized verification tools, making the usage context clear.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
ethereum_token_verificationEthereum Token VerificationAInspect
Check an Ethereum or EVM token contract before buying: rug pull, hidden tax, liquidity legitimacy and holder concentration risk. Token due diligence returned as a scan report. Costs $1.00 per call, paid in USDC over x402.
| Name | Required | Description | Default |
|---|---|---|---|
| chain_id | Yes | Chain ID (e.g., Mainnet 1, Testnet 2) | |
| platform_id | Yes | Platform ID (e.g., Ethereum 1, Base 17) | |
| contract_address | Yes | Contract Address | |
| subscription_token | No | Optional Cybercentry subscription token. Uses your plan quota instead of paying per call. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden. It explicitly discloses the cost ($1.00 per call, paid in USDC over x402) and the output type (scan report). It does not mention auth prerequisites or error scenarios, but the cost and payment method are significant behavioral disclosures that go beyond the schema.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences, front-loaded with the primary purpose, and every clause adds value. The first sentence explains what the tool checks, the second covers output and cost. No redundant or filler content.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description is fairly complete for a due diligence tool: it lists the risk checks, states output type (scan report), and reveals cost. It lacks detail on the report's structure (e.g., risk scores, pass/fail) and the relationship between chain_id and platform_id, but these are partially covered by the schema. Given no output schema, a bit more detail would improve, but the current level is adequate.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, with all parameters (chain_id, platform_id, contract_address, subscription_token) already described. The tool description adds no additional meaning to these parameters; it only mentions cost, which is not a parameter. Baseline of 3 is appropriate since the schema does the heavy lifting.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's purpose: 'Check an Ethereum or EVM token contract before buying' with specific risk checks (rug pull, hidden tax, liquidity legitimacy, holder concentration). It identifies the resource and action effectively. However, it does not explicitly distinguish itself from sibling base_token_verification, despite the 'Ethereum or EVM' scope being somewhat ambiguous.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides a clear usage context ('before buying') and the tool's purpose is evident. However, it offers no exclusions or references to alternatives, such as when to use base_token_verification instead. The guidance is clear but lacks comparative direction.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_servicesList ServicesAInspect
List every Cybercentry verification service with its price, inputs and SLA. Free.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations exist, so the description carries the burden. It adds 'Free' and 'every', providing some context, but does not disclose output format, pagination, or any other behavioral traits. For a simple list tool, this is adequate but not comprehensive.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, front-loaded sentence that conveys purpose, content, and cost without any filler. Every word earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's simplicity (no params, no output schema), the description covers the essential information: what it lists and that it is free. It could mention the return format, but for a zero-parameter list tool, this is nearly complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has zero parameters, so there is nothing to explain beyond the schema. Baseline for 0 params is 4, and the description correctly focuses on what the tool returns.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description states a specific verb ('List') and resource ('every Cybercentry verification service') with detailed content (price, inputs, SLA). This clearly distinguishes it from the sibling tools, which are individual verification services.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Usage is implied: use this tool to list all services. However, it does not explicitly state when to use it versus alternatives (e.g., specific verification tools), nor does it provide exclusions.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
media_content_verificationMedia Content VerificationAInspect
Check whether an image or video is authentic and where it came from: C2PA content credentials, provenance and metadata extraction, with an avatar and logo impersonation check. Detect AI-generated or tampered media before trusting it. Costs $1.00 per call, paid in USDC over x402.
| Name | Required | Description | Default |
|---|---|---|---|
| image_uri | Yes | Avatar/logo image URI: HTTPS URL or IPFS path | |
| media_file_path | Yes | URL or path to the media file to verify | |
| extract_metadata | No | Extract file metadata (default: true) | |
| subscription_token | No | Optional Cybercentry subscription token. Uses your plan quota instead of paying per call. | |
| verify_authenticity | No | Verify content authenticity / C2PA provenance (default: true) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description must carry the burden. It discloses the $1.00 per-call cost and payment method (USDC over x402), which is important behavioral context, but it does not detail authentication requirements, failure modes, or whether any state is mutated. Verification is implied read-only.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three sentences: features, application, cost. Every sentence adds distinct information, and the core purpose is in the first line.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no output schema, the description doesn't clarify what the returned result looks like (e.g., a confidence score, a report, or a boolean). It also omits details on edge cases like unsupported formats. Still, it covers the core capabilities and pricing sufficiently for many use cases.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema covers 100% of parameters with descriptions. The tool description adds context around C2PA and impersonation check, but does not explain each parameter beyond the schema. Defaults for booleans are in schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description opens with an action verb 'Check' and specifies the resource 'image or video', then enumerates distinct capabilities (C2PA credentials, provenance/metadata, avatar/logo impersonation). This clearly differentiates it from sibling token/wallet verification tools.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The phrase 'before trusting it' gives clear context for when to apply the tool. However, it does not explicitly state when not to use it or point to alternative sibling tools for other verification needs.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
openclaw_ai_agent_verificationOpenClaw AI Agent VerificationAInspect
Audit an AI agent configuration for security holes: prompt injection exposure, missing authentication, over-broad tool permissions and unsafe gateway settings. Check an agent before you trust it or connect to it. Costs $1.00 per call, paid in USDC over x402.
| Name | Required | Description | Default |
|---|---|---|---|
| tool | No | Tool to validate, as a JSON string | |
| config | Yes | Agent configuration as a JSON string | |
| skills | No | Skills | |
| message | No | Message | |
| sessionId | No | Session ID | |
| subscription_token | No | Optional Cybercentry subscription token. Uses your plan quota instead of paying per call. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description must carry the full burden of behavioral disclosure. It reveals the pricing ($1.00 per call) but does not explain what the tool returns (e.g., a report, a pass/fail status, or a list of vulnerabilities), nor does it mention side effects, permission requirements, or whether it modifies the input. This lack of transparency is critical for an audit tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description consists of three concise sentences. The first sentence states the core purpose, the second provides the usage context, and the third gives pricing. Every sentence adds valuable information without redundancy or fluff, making it efficient and front-loaded.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Despite having 6 parameters and no output schema, the description omits many details needed for an AI agent to use the tool effectively. It does not explain how to interpret the results, what each parameter does beyond the schema, or any dependencies (e.g., subscription token usage). The tool's complexity demands more context, especially regarding the output format and behavioral expectations.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema has 6 parameters with 100% description coverage, so the schema already documents each parameter. The description adds no extra meaning beyond mentioning 'agent configuration' (the config parameter). Since the baseline is 3 when schema coverage is high, and the description does not degrade or improve understanding, a score of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's purpose: 'Audit an AI agent configuration for security holes: prompt injection exposure, missing authentication, over-broad tool permissions and unsafe gateway settings.' It specifies the verb (audit/check) and the resource (AI agent configuration), and the specific security aspects differentiate it from the sibling tools (e.g., base_token_verification, web_application_verification).
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides a clear usage scenario: 'Check an agent before you trust it or connect to it.' This tells the agent when to invoke the tool. It also mentions the cost ($1.00 per call), which is relevant for decision-making. However, it does not explicitly state when not to use it or compare it to sibling tools, missing the opportunity to provide exclusions or alternatives.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
private_data_verificationPrivate Data VerificationAInspect
Prove a fact about private data without revealing the data: validates text integrity and returns a zero-knowledge proof (ZKP) with a verification ID and URL. Costs $1.00 per call, paid in USDC over x402.
| Name | Required | Description | Default |
|---|---|---|---|
| cpdv_data | Yes | Data (e.g., Test Data) | |
| subscription_token | No | Optional Cybercentry subscription token. Uses your plan quota instead of paying per call. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden and does well: it discloses the per-call cost ($1.00 USDC via x402), the optional subscription token path to quota, and the output (ZKP with verification ID and URL). It does not mention rate limits or data storage details, but the core behaviors are covered.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences and front-loads the core purpose. It packs cost, payment method, output artifacts, and privacy guarantee without repetition or fluff.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With only two parameters, no output schema, and no annotations, the description covers the essential return values and cost model. It is complete for basic invocation, though it could briefly mention what the verification ID/URL are for or how it differs from sibling verification tools to be fully self-contained.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema covers both parameters with descriptions, so the baseline is 3. The description adds meaningful semantics by explaining cpdv_data as 'text integrity' validation and clarifying that the tool proves facts without revealing the data, which elaborates on the schema's terse 'Data (e.g., Test Data)' example.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description uses a specific verb 'prove' and clearly states the resource: a fact about private data, validated as text integrity, with a zero-knowledge proof output. This distinguishes it from sibling verification tools by focusing on private data rather than tokens, media, or wallets.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The opening phrase 'Prove a fact about private data without revealing the data' provides clear context for when this tool should be used. However, it does not explicitly name alternative tools or state when not to use it, so it stops short of full exclusionary guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
quantum_cryptography_verificationQuantum Cryptography VerificationAInspect
Encrypt text with quantum-resistant (post-quantum) cryptography, for secrets that must outlast classical encryption. Returns a record ID and a decrypt URL. Costs $1.00 per call, paid in USDC over x402.
| Name | Required | Description | Default |
|---|---|---|---|
| cqcv_data | Yes | Any text data you want to encrypt and verify | |
| subscription_token | No | Optional Cybercentry subscription token. Uses your plan quota instead of paying per call. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden. It discloses the cost ($1.00 per call, paid in USDC over x402), the output (record ID and decrypt URL), and the core function. This is adequate for a simple encryption tool, though it does not elaborate on data storage or limitations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is three short sentences that efficiently convey purpose, use case, and cost. There is no filler or redundant information, and key details are front-loaded.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
This is a straightforward paid encryption service. The description explains what it does, when to use it, what it returns, and its price, making it sufficiently complete for an agent to decide on invocation. No output schema exists, but the description compensates with return-value details.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema covers both parameters (cqcv_data and subscription_token) with descriptions, achieving 100% coverage. The description adds no additional parameter-specific details, but the schema already provides the needed semantics.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool encrypts text using quantum-resistant (post-quantum) cryptography, specifying the use case of protecting secrets that must outlast classical encryption. It distinguishes itself from sibling verification tools by focusing on encryption and returning a decrypt URL.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The phrase 'for secrets that must outlast classical encryption' provides clear context for when to use this tool. It does not explicitly mention alternatives or exclusions, but the use case is well-delineated.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
recent_exploitsRecent ExploitsAInspect
Recent real-world web3 exploits from the live feed, with loss amounts, attack vectors and the Cybercentry service that addresses each. Free.
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | Max incidents to return (default 10). |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden. It mentions 'live feed' and 'Free,' which give some context, but it does not disclose limitations, data freshness, rate limits, or whether the operation is read-only. The behavioral traits are only minimally addressed, and no safety or side-effect information is provided.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single sentence that immediately states the core function and key output information. It is front-loaded with 'Recent real-world web3 exploits' and includes no filler or redundant details, making it highly concise and well-structured.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
There is no output schema, so the description must explain return values, which it does by listing loss amounts, attack vectors, and the Cybercentry service. It also provides context via 'live feed' and 'Free.' It does not detail output format or error handling, but for a simple feed tool with a limit parameter, this is largely complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema already fully documents the single 'limit' parameter with a clear description and default value. The tool description adds no further semantic detail about how limit affects results. With 100% schema coverage, the description does not need to compensate, and the baseline of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool returns 'recent real-world web3 exploits' with specific output fields (loss amounts, attack vectors, Cybercentry service). This is a specific verb+resource and clearly distinguishes it from the sibling verification tools, which focus on security verifications rather than exploit feeds.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies a use case for accessing current exploit data via the live feed, but it does not explicitly state when to use this tool over alternatives or mention exclusions. The sibling tools are all verification-related, so the context suggests this is for retriving exploit intelligence, but explicit guidance is missing.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
solidity_code_verificationSolidity Code VerificationAInspect
Audit Solidity smart contract source for vulnerabilities before you deploy or call it. Returns findings with a clear risk level. Costs $1.00 per call, paid in USDC over x402.
| Name | Required | Description | Default |
|---|---|---|---|
| solidity_code | Yes | Solidity Code | |
| subscription_token | No | Optional Cybercentry subscription token. Uses your plan quota instead of paying per call. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden of behavioral disclosure. It discloses cost and payment method ('Costs $1.00 per call, paid in USDC over x402') and mentions output ('findings with a clear risk level'). But it does not mention whether the code is sent externally, whether the action is read-only, or any authorization/privacy implications, which are significant for a security auditing tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two concise sentences that immediately state the purpose, output, and cost. Every sentence adds value and there is no wasted wording or repetition of the title or schema fields.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple tool with one required parameter and no output schema, the description is largely complete: it tells the agent what to pass, what the tool will do, and what to expect back. The missing details are around output structure and potential input limitations, but the current level is enough for an agent to invoke the tool confidently.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema already documents both parameters. The description does add meaningful context by explaining the cost model and the purpose of the tool, which indirectly supports the 'solidity_code' parameter, but it does not add new syntax or detailed parameter-level semantics beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states a specific action ('Audit Solidity smart contract source for vulnerabilities') and identifies the unique resource (Solidity source code). It also distinguishes from sibling token verification tools by focusing on general Solidity code rather than a specific token standard or blockchain.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The phrase 'before you deploy or call it' provides clear timing/context for when to use this tool. However, it does not explicitly state when not to use it or name alternative sibling tools, so it falls just short of a 5.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
wallet_verificationWallet VerificationAInspect
Screen a wallet address for sanctions and risk: OFAC SDN sanctions screening, risk scoring and suspicious-activity detection across 31 EVM chains. Check a counterparty before you transact with it. Costs $1.00 per call, paid in USDC over x402.
| Name | Required | Description | Default |
|---|---|---|---|
| wallet_address | Yes | Wallet Address | |
| subscription_token | No | Optional Cybercentry subscription token. Uses your plan quota instead of paying per call. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries full responsibility for behavioral disclosure. It transparently states the cost ($1.00 per call, paid in USDC over x402) and scope (31 EVM chains), but does not explicitly state side effects, read-only nature, or limitations. Since it's a screening tool, it likely performs reads only, but that's implicit. The cost and chain scope add value beyond schema, but lacking explicit non-destructive behavior and error cases, I give a 3.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is three sentences, front-loaded with the core purpose ('Screen a wallet address for sanctions and risk'), then provides scope ('31 EVM chains'), a usage hint ('before you transact'), and cost information. Every sentence adds value with zero waste, making it efficient and easily scannable.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool has 2 params, no output schema, and moderate complexity, the description sufficiently explains purpose, scope, and cost. It lacks explicit communication about return format or potential errors, but the tool's function is straightforward (screening result). The mention of subscription alternative adds useful context. Minor gap: no comparison to sibling verification tools, but the distinct purpose is clear enough.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, with each parameter having a brief description. The tool description adds no additional meaning beyond the schema—it mentions the optional subscription token but not more detail. Per rubric, baseline 3 is appropriate when schema covers all params and description doesn't add significant semantic value beyond that.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action 'Screen a wallet address' and the specific resource (wallet). It enumerates concrete capabilities: OFAC SDN sanctions screening, risk scoring, suspicious-activity detection across 31 EVM chains. This strongly differentiates from sibling tools like token verification, making the purpose unambiguous.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides clear usage context: 'Check a counterparty before you transact with it.' This implies when to use the tool. It also mentions cost implications, which influence usage decisions. However, it does not explicitly contrast with sibling tools (e.g., 'use this instead of token verification for wallet-level checks'), so some exclusions are missing.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
web_application_verificationWeb Application VerificationAInspect
Scan a website or dApp frontend for vulnerabilities using OWASP checks, before connecting a wallet to it or trusting it with user data. Costs $1.00 per call, paid in USDC over x402.
| Name | Required | Description | Default |
|---|---|---|---|
| target_url | Yes | Target URL | |
| subscription_token | No | Optional Cybercentry subscription token. Uses your plan quota instead of paying per call. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are present, so the description carries the full burden. It discloses the cost ($1.00 per call, paid in USDC over x402), which is a key behavioral trait beyond the schema. However, it does not mention whether the scan is read-only, what data is sent to the service, or the format of the returned results.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences with no filler. The first sentence covers purpose and use case, the second conveys cost and payment method. Every word earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
There is no output schema, so the description should explain what kind of result the agent can expect. It doesn't mention the output format, severity levels, or scope of OWASP checks. While the use case and cost are covered, the missing output information leaves the agent under-informed.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema has 100% coverage with both parameters described ('target_url' and 'subscription_token'). The description adds context that target_url refers to a website or dApp frontend, but this is already inferable from the tool's purpose. Baseline of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's purpose with a specific verb ('Scan') and resource ('a website or dApp frontend'), and notes it uses OWASP checks. It distinguishes itself from sibling verification tools by targeting web/dApp frontends rather than tokens, wallets, or media.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides an explicit use case: 'before connecting a wallet to it or trusting it with user data.' This tells when to use the tool, though it doesn't explicitly mention alternatives or when not to use it.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Frequently Asked Questions
Claiming proves that you control a remote MCP connector. It does not move, proxy, or interrupt the server.
Open the connector listing, choose Claim ownership, and sign in to Glama.
Complete one verification method:
GitHub identity — fastest for official registry listings. For a namespace such as
io.github.alice/server, link the matching GitHub user or an account that owns the GitHub organization, then choose Claim with GitHub.HTTP challenge — works when you can deploy a public file. Generate a token, publish the exact JSON Glama shows at
/.well-known/glama.jsonon the same origin as the connector, then choose Check HTTP challenge.DNS challenge — works when you control DNS but cannot change the server. Generate a token, create the exact TXT record Glama shows, wait for it to propagate, then choose Check DNS challenge.
After verification, Glama sends a confirmation email and gives you access to listing details, thumbnails, health checks, and analytics. Keep the HTTP file or DNS record in place: Glama periodically checks it and ownership remains verified while the token is discoverable.
The HTTP ownership file has this structure:
{
"$schema": "https://glama.ai/mcp/schemas/connector.json",
"claim": "glama_claim_..."
}Claim tokens are opaque, stable, and bound to the signed-in Glama account. They contain no email address or other personal information. If Glama can no longer discover a verified HTTP or DNS token, it starts a seven-day grace period before removing claim-based access. Restore the same token during that period to keep ownership verified. Never publish an email address, Glama session token, GitHub token, or connector credential as ownership proof.
If verification fails, confirm that you copied the current token exactly. The HTTP file must be public, return valid JSON with a successful HTTP response, and stay on the connector's origin. DNS changes may need more time to propagate. A claim cannot transfer to a different origin or hostname: if the connector target changes, Glama starts the grace period and the new target must be claimed separately after the previous claim is released.
For a connector linked to the official MCP Registry, registry updates continue to replace its name, description, and URL by default. After claiming, open Manage connector and enable Use Glama listing details as the source of truth if edits made on Glama should be preserved. Categories and thumbnails are always managed on Glama; registry linkage and technical connection settings continue to sync.
Control your server's listing on Glama, including description and metadata
Access analytics and receive server usage reports
Get monitoring and health status updates for your server
Feature your server to boost visibility and reach more users
To improve your MCP server's ranking:
Claim ownership of the server listing
Complete the server profile with an accurate description and thumbnail
Provide a test profile so Glama can connect to and evaluate the server
Keep tool definitions clear and complete to earn a high Tool Definition Quality Score (TDQS)
Route real usage through the Glama Gateway; more recorded successful server uses also improve the ranking
For users:
Full audit trail – every tool call is logged with inputs and outputs for compliance and debugging
Granular tool control – enable or disable individual tools per connector to limit what your AI agents can do
Centralized credential management – store and rotate API keys and OAuth tokens in one place
Change alerts – get notified when a connector changes its schema, adds or removes tools, or updates tool definitions, so nothing breaks silently
For server owners:
Proven adoption – public usage metrics on your listing show real-world traction and build trust with prospective users
Tool-level analytics – see which tools are being used most, helping you prioritize development and documentation
Direct user feedback – users can report issues and suggest improvements through the listing, giving you a channel you would not have otherwise
The connector status is unhealthy when Glama is unable to successfully connect to the server. This can happen for several reasons:
The server is experiencing an outage
The URL of the server is wrong
Credentials required to access the server are missing or invalid
If you are the owner of this MCP connector and would like to make modifications to the listing, including providing test credentials for accessing the server, please contact support@glama.ai.
Discussions
No comments yet. Be the first to start the discussion!
Related MCP Connectors
378k+ ERC-8004 agents and their security verifications. Two tools free, the rest USDC over x402.
Twenty-two paid x402 and MPP tools for agent discovery, payment safety, data, and DeFi.
37 paid x402 MCP tools for OSINT, prediction markets, web intel, and agent security on Base USDC.
Free token-safety scans + paid x402 verdicts, signals, radar & EVM swap quotes for AI agents.
Related MCP Servers
FlicenseNot gradedqualityDmaintenance33 crypto security tools via x402 micropayments. Auto-refund guarantee. $0.01-$0.15/call.- FlicenseNot gradedqualityDmaintenance33 crypto security tools via x402 micropayments. Auto-refund guarantee. $0.01-$0.15/call.

AfaAgent x402 API Suiteofficial
FlicenseNot gradedqualityCmaintenance43 x402-enabled API tools — DeFi, wallet security, AI/ML, developer tools, SEO. Pay-per-call USDC on Base via x402 protocol.- FlicenseNot gradedqualityDmaintenancePay-per-use AI security and research tools for autonomous agents on Base, enabling honeypot detection, risk assessment, wallet analysis, and yield optimization via the x402 protocol.
Glama MCP Gateway
Add one secure layer between your agents and this server.
TDQS
Most tools target distinct domains (token, media, AI agent, wallet, web app, code), but `base_token_verification` and `ethereum_token_verification` are closely related and could be confused despite chain-specific descriptions. The informational tools (`list_services`, `recent_exploits`) are clearly separate.
All tool names are lowercase snake_case, with the majority following a `[domain]_verification` pattern. The exceptions (`cyber_security_consultant`, `list_services`, `recent_exploits`) are still clear but deviate from the dominant suffix convention.
12 tools is a well-scoped size for a multi-domain verification service. Each tool represents a distinct service category, and the count feels appropriately comprehensive without being bloated.
The tool surface covers major verification needs across tokens, code, media, AI agents, wallets, web apps, private data, and quantum-safe encryption. The addition of `cyber_security_consultant`, `list_services`, and `recent_exploits` provides context and support, leaving no obvious dead ends for typical use cases.