youraitools
Provides Solana-specific tools: SolVerdict checks SPL and Token-2022 mint safety (mint/freeze authorities, Token-2022 traps, liquidity, holder distribution) on lite and full check tiers, and CounterpartyCheck performs pre-payment due diligence on Solana addresses returning ok/caution/block verdicts. USDC on Solana mainnet is also accepted as a payment rail for paid routes.
YourAITools: pay-per-call x402 tools for AI agents
YourAITools is a set of small, single-purpose APIs that AI agents pay for per call with
x402 (HTTP 402 Payment Required + a USDC payment). There's no signup, no API key and
no subscription. An agent calls a paid route, gets a 402 with the payment requirements, pays in USDC
and gets the answer.
API: https://api.youraitools.co (each tool lives under its own path, e.g.
https://api.youraitools.co/webread/)Website and directory: https://youraitools.co
Browsable source mirror: https://agentgate-source.pages.dev
Every tool in this repository is a Cloudflare Worker (Hono, x402 v2 with a v1 fallback), with a free
preview route, OpenAPI, /.well-known/x402 discovery, a remote MCP server at /mcp and, for most tools,
a stdio MCP server.
Tools
Prices are in USDC per call. They come from each tool's wrangler.toml / src/config.js and match what the
live API charges today. GET|POST means both methods are accepted at the same price.
Tool | What it does | Paid routes and prices | Landing page |
Checks whether an AI agent is registered, Active and Verified in the Concordium Agent Registry |
| ||
Reads any public web page as clean Markdown (robots.txt-aware, SSRF-safe) |
| ||
Scans text, web pages and MCP tool definitions for prompt injection |
| ||
Domain and email trust checks: DNS, SPF/DMARC, registration age, disposable mail |
| ||
OFAC SDN sanctions screening for crypto addresses (informational, not legal advice) |
| ||
Known vulnerabilities and confirmed-malicious packages in a manifest or lockfile (OSV.dev data) |
| ||
Website technology detection: CMS, frameworks, hosting/CDN, analytics, payments, email and DNS providers |
| ||
Base ERC-20 token safety check (honeypot / sell simulation, taxes, owner powers, liquidity, holders) |
| ||
Pre-sign check for agent wallets: transactions, Permit / Permit2 / EIP-3009 signatures, EIP-7702, x402 payments |
| ||
Pre-payment due diligence on an EVM or Solana address: ok / caution / block with reasons |
| ||
x402 endpoint doctor for sellers: grades a paid x402 URL A-F with paste-ready fixes (unpaid probes only) |
| ||
Solana SPL / Token-2022 mint safety check (authorities, Token-2022 traps, liquidity, holders) |
| ||
Website AI-agent readiness audit: 23 checks, a 0-100 score and grade, with fixes |
| ||
Perp funding radar: normalized funding, open interest and cross-venue spreads (Hyperliquid, dYdX v4, Paradex, Aevo) |
| ||
Technical analysis, risk metrics and rule backtests on public candles |
| ||
Finds and redacts wallet keys, seed phrases, API secrets and PII before text reaches an LLM, tool or log |
| ||
Prepaid credit packs accepted by every tool above |
|
Safety tools (PayGuard, TokenVerdict, SignCheck, CounterpartyCheck, SolVerdict, PkgGuard, InjectScan, LeakGuard, DomainCheck): each result is a safety check, not a guarantee and not financial advice. A good verdict means the checks found nothing wrong. It does not mean an asset, address or package is safe.
Trader tools (PerpRadar, TASignal): read-only market analytics and simulation. They never trade, hold funds or touch keys. Not financial advice. Past performance does not guarantee future results.
Related MCP server: coinopai-mcp
Payments and chains
Paid routes accept USDC on:
Base (
eip155:8453)Polygon (
eip155:137)Arbitrum One (
eip155:42161)Solana mainnet (
solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp)
Every 402 response lists all four in accepts (x402 v2, PAYMENT-REQUIRED header). x402 v1 (X-PAYMENT)
is supported on Base. Payments settle to the public payout addresses
0x3c1A1E01e790Cd326495631B3b38Bd7068F08d6F (EVM) and FH73WbbUe2UyNzfy72MJs5nT3NxyDf9GrqE7kzjL2Jte (Solana).
Prepaid credits
To skip the on-chain payment on every call, buy a credit pack once from
Credits: $1, or $5 with a 10% bonus. The payment returns an API key
with a USDC balance. Send Authorization: Bearer <key> to any paid route, and that route's normal price is
debited from the balance. Credits are for prepaid API usage only and are not refundable.
Using the tools from an MCP client
Each tool runs a remote MCP server (Streamable HTTP) at https://api.youraitools.co/<tool>/mcp. For example:
{
"mcpServers": {
"webread": { "url": "https://api.youraitools.co/webread/mcp" },
"leakguard": { "url": "https://api.youraitools.co/leakguard/mcp" }
}
}The free preview tools work without payment. Paid tools return the x402 payment requirements, which an
x402-capable client (such as @x402/fetch or x402 for Python) can pay. Ready-to-use MCP configs for each
tool are in its folder (server.json / glama.json where present, and the README).
Repository layout
tools/<name>/ one folder per tool: src/, test/, README.md, package.json, wrangler.toml, Dockerfile, logoEach folder is an exact export of that tool's published commit on agentgate-source.pages.dev, with deployment-specific values removed:
Cloudflare KV namespace IDs in
wrangler.tomlare replaced with"<your-kv-id>"internal paths and notes are removed from comments
internal test-payment scripts are left out
To run a tool yourself, follow its README. You'll need your own Cloudflare account, KV namespace and payout
address, plus secrets such as CDP_API_KEY_ID / CDP_API_KEY_SECRET set with wrangler secret put (never committed).
cd tools/webread
npm install
npm test
npx wrangler devLicense
MIT. See LICENSE.
Available Tools
2 toolsscreen_addressOFAC SDN screen of a crypto addressARead-onlyIdempotent
Reports whether a crypto address (EVM, BTC, TRX, SOL, LTC, XMR and more) appears in the US Treasury OFAC SDN list of digital currency addresses. Free offline preview by default (sanctioned true/false, match count, chain guess). With PAYGUARD_X402_PRIVATE_KEY set, returns the full paid result (SDN entity, programs, list date, checksum) from https://api.youraitools.co/payguard/v1/address, paying $0.001 USDC on Base per address over x402. Informational screening, not legal advice.
| Name | Required | Description | Default |
|---|---|---|---|
| address | Yes | Blockchain address |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes well beyond the annotations by disclosing the two operating modes (offline preview unless PAYGUARD_X402_PRIVATE_KEY is set), the exact payment mechanism and cost ($0.001 USDC on Base per address over x402), and the remote endpoint. For a tool that can incur a real monetary charge, this is exactly the behavioral context the agent needs and could not get from readOnlyHint/idempotentHint.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Front-loaded with the core purpose, then the free/paid behavior, then the required env var, then the disclaimer — a sensible priority order. Dense but each sentence carries information; the URL and per-address price could arguably be compressed, but nothing is filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no output schema, the description usefully sketches both return shapes (sanctioned boolean, match count, chain guess in preview; SDN entity, programs, list date, checksum in the paid tier). The one meaningful omission is the relationship to the batch sibling screen_addresses, which matters for a single-address tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the baseline is 3, but the description adds genuine meaning by naming the accepted address families (EVM, BTC, TRX, SOL, LTC, XMR and more), which the bare "Blockchain address" schema text does not convey. It stops short of giving format/validation details such as checksum or case requirements.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource with scope ("Reports whether a crypto address ... appears in the US Treasury OFAC SDN list") and enumerates supported chains, so the operation is unmistakable. It never mentions the sibling screen_addresses, so an agent cannot tell from the description alone whether this is the single-address or batch variant.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies usage context via the free-preview-by-default vs. paid-full-result split, and adds the caveat "Informational screening, not legal advice." However, it gives no explicit when-to-use/when-not guidance and does not route the agent between this tool and screen_addresses, leaving the alternative undisclosed.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
screen_addressesOFAC SDN screen of several addressesCRead-onlyIdempotent
Same screen for up to 50 addresses in one call. Paid mode uses https://api.youraitools.co/payguard/v1/batch ($0.01 USDC per batch).
| Name | Required | Description | Default |
|---|---|---|---|
| addresses | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover the safety profile (readOnlyHint, idempotentHint, closed-world), and the description adds pricing context not present in structured fields ($0.01 USDC per batch, paid endpoint URL). However, it introduces "paid mode" without explaining what the non-paid mode is, whether payment is required, or how failure/refund behaves — leaving a real ambiguity around cost behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two short sentences, front-loaded with the batching scope and then the cost detail; nothing is redundant. The opening "Same screen" is too terse to be self-contained, which keeps it from a 5.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no output schema and minimal annotations, the description should clarify address format, free-vs-paid mode semantics, and what comes back (matches, risk scores, per-address results). It covers cost and batch size but leaves those gaps, so it is only adequate for a single-parameter screening tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
There is one parameter with 0% schema description coverage, so the description must carry the semantics. It confirms the 50-address cap (already encoded as maxItems) but says nothing about required address format — hex, chain-specific, checksummed, etc. — which is critical for a screening call.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with "Same screen," which only identifies the operation by reference to the sibling screen_address rather than stating the verb and resource itself. "For up to 50 addresses in one call" does differentiate it as the batch variant, but an agent must consult the title or sibling to learn that this is an OFAC SDN screen.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
"in one call" hints that this is the batch option, but the description never explicitly says to use this instead of screen_address when multiple addresses are needed, nor when not to use it. There is no guidance about prerequisites, free vs paid mode selection, or failure handling for oversized inputs.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
2 tool updates
v0.1.0- First observed
screen_address - First observed
screen_addresses
TDQS
Scored across 2 tools
The two tools differ along a single clear axis: one address versus a batch of up to 50. Descriptions explicitly state the singular/plural split and the differing price points, leaving no realistic path to misselection.
Both names use the same snake_case verb_noun form (screen_address / screen_addresses), differing only by pluralization. This is a predictable, textbook convention.
Two tools is on the thin side of the ideal range, but the server's stated purpose is a single narrow operation (OFAC address screening), and the single/batch pair is exactly what that operation needs. Nothing appears padded or missing at the surface level.
The domain is read-only screening, so no create/update/delete is needed; single-address and bulk-address coverage, plus free preview and paid detail modes, fully round out the lifecycle. There is no obvious dead end for an agent doing sanctions screening.
Maintenance
Related MCP Connectors
Agent-commerce MCP server for x402/USDC payments and affiliate splits on Base.
- FensoryOAuthcom.fensory
Trading MCP server for AI agents, with live market data, account reads and controlled execution.
- BlindPayOAuthcom.blindpay
Official BlindPay MCP server: stablecoin payouts, payins, quotes and receivers for global payments.
Guard wraps stdio MCP servers: risky calls wait for a person; no answer, no run. Remote: cooperative
Related MCP Servers
- AlicenseNot gradedqualityCmaintenanceMCP server for AgentPay — the payment gateway for autonomous AI agents. Fund a wallet once, give your agent the key, and it discovers, provisions, and pays for tool APIs on its own. One key, every tool.112 npm1MIT
- AlicenseNot gradedqualityFmaintenanceLocal stdio MCP server for x402-powered paid crypto intelligence, decision verification, and agent automation search over USDC micropayments on Base.79 npmMIT
- FlicenseNot gradedqualityDmaintenanceAn experimental MCP server that lets AI agents interact with guarded payment workflows through typed tools, enabling safe agent-assisted payments with M-Pesa and mock Airtel Money.2-
- AlicenseNot gradedqualityCmaintenanceMCP server that gives terminal AI agents a guarded USDC wallet with firewall, automatic 402 payment handling, and budget limits.2 npmMIT