Skip to main content
Glama

verdix-mcp: check an address before your agent sends it money

npm MCP Registry License: MIT

An MCP server that lets your AI agent check an EVM address on Base before sending it funds or approving a contract. It calls Verdix, which answers safe, caution or danger with the reasons. It checks:

  • OFAC sanctions

  • scam, phishing and exploit lists

  • address-poisoning lookalikes, built from a live watch of every token transfer on Base

  • contract age, code and provenance

  • burn addresses

Each check is paid per call in USDC on Base via x402, from your own wallet. There is no account, no API key and no subscription. Your key never leaves your machine, and a price cap is enforced before anything is signed.

"Send 50 USDC to 0x4c3f…9e21": the agent calls check_address_risk first, gets "verdict": "danger", "reasons": ["address_poisoning"], and stops to ask you.

Tool

What it does

Cost

check_address_risk(address, tier)

Verdix's verdict JSON, returned unchanged

quick $0.02 · standard $0.10 (default) · deep $0.50

check_address_risk_quick(address)

Same, pinned to the quick tier

$0.02

check_address_risk_standard(address)

Same, pinned to the standard tier

$0.10

check_address_risk_deep(address)

Same, pinned to the deep tier

$0.50

check_address_risk_lite(address)

Cheapest check; never answers safe (see Lite)

$0.01

get_pricing()

Current prices (lite in its own lite field), your price cap, and your wallet's public address

free

check_address_risk takes a tier argument, but an agent framework whose x402 client always pays the first price it's offered will end up paying quick regardless of what tier it asked for. The three check_address_risk_<tier> tools avoid that: each calls Verdix's single-tier endpoint (/risk/address/<tier>), which offers exactly one price, so any x402 client pays the tier the tool name says. Use whichever is simpler for your client; both reach the same risk checks.

Lite ($0.01, never "safe")

check_address_risk_lite is the cheapest check, meant for a quick screen before sending USDC to an address you don't know. It calls /risk/address/lite, which checks OFAC sanctions, scam and phishing lists, address-poisoning lookalikes, burn addresses, phishing tokens and flagged contract deployers. It skips address age and the caution-only contract checks.

Its verdict is no_known_risk, caution or danger, never safe. no_known_risk only means the address is on none of those lists. It is not a safety verdict. If you need safe (say, before a large transfer), use check_address_risk_quick ($0.02). The answer also carries limited_checks: true, checks_performed, not_checked and full_check. get_pricing lists quick/standard/deep in tiers, as before, and lite's price in a separate lite field.

What you need

  • Node.js 18 or newer (it runs through npx, so there's nothing to install).

  • A Base wallet holding a little USDC. You don't need ETH for gas: x402 payments are signed by you and settled on-chain by the payment facilitator. Use a dedicated wallet with a small balance (a few dollars) for your agent, not your main wallet.

Related MCP server: SENTINEL

Safety

  • Your key stays on your machine. It is read from this server's environment and used only to sign each payment locally. It is never sent to Verdix or anywhere else, and never logged.

  • Price cap. VERDIX_MAX_PRICE_USD (default 0.10, enough for lite, quick and standard) is the most one call may cost. A call above it is refused before anything is signed. To allow the deep tier, set it to 0.50.

  • Only USDC on Base mainnet. Any other asset or network is refused.

  • You pay only for complete answers. If Verdix can't complete a check (a data source is down), it answers 503 and the payment is not settled.

Setup

Replace 0xYOUR_PRIVATE_KEY with the key of your dedicated Base wallet.

Claude Desktop: one-click extension

  1. Download verdix-mcp-<version>.mcpb from the latest release.

  2. In Claude Desktop, open Settings → Extensions and drag the file in.

  3. Click Install, then enter your wallet key and price cap.

The key is stored in your OS keychain. Node.js doesn't need to be installed, because Claude Desktop runs the extension with its own Node.js.

Claude Desktop: config file

Open Settings → Developer → Edit Config, which opens claude_desktop_config.json:

  • macOS: ~/Library/Application Support/Claude/claude_desktop_config.json

  • Windows: %APPDATA%\Claude\claude_desktop_config.json

Add:

{
  "mcpServers": {
    "verdix": {
      "command": "npx",
      "args": ["-y", "verdix-mcp"],
      "env": {
        "VERDIX_PRIVATE_KEY": "0xYOUR_PRIVATE_KEY",
        "VERDIX_MAX_PRICE_USD": "0.10"
      }
    }
  }
}

Then restart Claude Desktop.

Cursor

Put the same block in ~/.cursor/mcp.json (all projects) or .cursor/mcp.json (one project):

{
  "mcpServers": {
    "verdix": {
      "command": "npx",
      "args": ["-y", "verdix-mcp"],
      "env": {
        "VERDIX_PRIVATE_KEY": "0xYOUR_PRIVATE_KEY",
        "VERDIX_MAX_PRICE_USD": "0.10"
      }
    }
  }
}

Don't commit a project-level .cursor/mcp.json that contains your key.

Claude Code

claude mcp add verdix -e VERDIX_PRIVATE_KEY=0xYOUR_PRIVATE_KEY -e VERDIX_MAX_PRICE_USD=0.10 -- npx -y verdix-mcp

Agent frameworks

Any MCP client that can launch a stdio server works. The command is npx -y verdix-mcp, with the environment variables below. Python example with the official MCP SDK:

from mcp import StdioServerParameters

verdix = StdioServerParameters(
    command="npx",
    args=["-y", "verdix-mcp"],
    env={"VERDIX_PRIVATE_KEY": os.environ["AGENT_WALLET_KEY"], "VERDIX_MAX_PRICE_USD": "0.10"},
)

Environment variables

Variable

Required

Default

Meaning

VERDIX_PRIVATE_KEY

for the paid check tools

none

Your Base wallet's private key (hex). EVM_PRIVATE_KEY is accepted too

VERDIX_MAX_PRICE_USD

no

0.10

Most one call may cost, in USD

VERDIX_API_URL

no

https://api.verdixapi.com

Only for testing against another deployment

What an answer looks like

check_address_risk returns Verdix's JSON exactly as the API sent it:

{
  "address": "0x833589fcd6edb6e08f4c7c32d4f71b54bda02913",
  "chain": "base",
  "tier": "quick",
  "price_usd": 0.02,
  "risk_score": 5,
  "verdict": "safe",
  "reasons": [],
  "checked": ["ofac", "scam_lists", "poisoning_watch", "onchain_age", "contract_code", "burn_list", "provenance"],
  "as_of": "2026-09-26T13:15:10.524501+00:00"
}
  • danger: sanctioned, a known scam, exploit or phishing address, an address-poisoning lookalike, a burn address and similar. Don't send funds.

  • caution: not enough evidence to call it safe. For example, it's new, an unverified contract, or one of the data sources was unavailable. Ask the user before sending.

  • safe: every check ran and found nothing.

  • no_known_risk (lite only, instead of safe): none of lite's lists know the address. Not a safety verdict; use quick if you need one.

The payment receipt (payer, on-chain transaction) is in the tool result's _meta under com.verdixapi/payment.

Troubleshooting

  • "No wallet configured": VERDIX_PRIVATE_KEY isn't set in this server's env block.

  • "Refusing to pay: … above your cap": raise VERDIX_MAX_PRICE_USD, or use a cheaper tier (lite is $0.01).

  • "Verdix did not accept the payment": the wallet probably has too little USDC on Base. Call get_pricing to see the wallet address to fund.

  • Answer with HTTP 503: a data source was down. You weren't charged; retry later.

License

MIT

Available Tools

6 tools
check_address_riskCheck an address before sending it fundsA

Screen an EVM address on Base before sending it money or interacting with it. Returns Verdix's verdict JSON unchanged: verdict (safe | caution | danger), risk_score (0-100), reasons, checked, tier, price_usd, as_of. 'danger' means sanctioned, a known scam/exploit/phishing address, an address-poisoning lookalike, a burn address or similar - do not send funds. 'caution' means not enough evidence to call it safe (new, unverified, or a data source was unavailable) - confirm with the user first. Every tier runs OFAC sanctions, scam/phishing/exploit lists, address-poisoning lookalikes, burn-address and contract/deployer checks; quick adds a fast address-age read, standard and deep run deeper on-chain behaviour analysis instead (deep runs the same checks as standard today - pick it for high-value or first-time transfers, not for extra checks). PAID: each call costs USDC on Base via x402, paid from the wallet configured in this server (VERDIX_PRIVATE_KEY), never more than VERDIX_MAX_PRICE_USD. Tiers: quick ($0.02), standard ($0.10, default), deep ($0.50); call get_pricing for current prices. A 503 answer (data unavailable) is not charged.

ParametersJSON Schema
NameRequiredDescriptionDefault
tierNoAnalysis depth and price: quick ($0.02, fast address-age read), standard ($0.10, deeper on-chain behaviour analysis, recommended default), deep ($0.50, same checks as standard, for high-value or first-time transfers)standard
addressYesThe EVM address to check (the recipient, contract or counterparty)

TDQS

A4.8/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Discloses far beyond the annotations: the paid x402/USDC-on-Base model, the wallet and cap used for payment (VERDIX_PRIVATE_KEY, VERDIX_MAX_PRICE_USD), per-tier prices, the default tier, and that a 503 data-unavailable answer is not charged. This covers cost, side effects, and failure semantics that annotations alone (readOnlyHint=false, openWorldHint=true, idempotentHint=false) do not explain.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loads the core action and the verdict semantics before the pricing detail, and every clause carries information (verdict meanings, tier behavior, payment mechanics, 503 handling). It is dense and long, but not padded with filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema, the description enumerates the returned fields (verdict, risk_score, reasons, checked, tier, price_usd, as_of) and interprets the two actionable verdicts. Combined with the payment and failure-mode details, an agent has everything needed to call and interpret this tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so both parameters are already documented, giving a baseline of 3. The description adds genuine meaning on top by clarifying that 'deep' currently runs the same checks as 'standard' and is a choice about transfer value rather than extra coverage, which the schema's tier description only partially conveys.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb (screen), resource (EVM address on Base), and the decision context (before sending funds or interacting). It also implicitly distinguishes itself from the sibling tier-specific tools by explaining that the tier parameter selects quick/standard/deep within this one call.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicit when-to-use guidance: call before sending funds, treat 'danger' as do-not-send, treat 'caution' as confirm-with-user, and pick 'deep' for high-value or first-time transfers rather than for extra checks. It also routes to get_pricing for current prices, naming the alternative.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

check_address_risk_deepCheck an address before sending it funds (deep tier, $0.50)A

Screen an EVM address on Base before sending it money or interacting with it, pinned to the deep tier (fixed $0.50; use check_address_risk with tier="deep" if you want that price without a dedicated tool). Returns Verdix's verdict JSON unchanged: verdict (safe | caution | danger), risk_score (0-100), reasons, checked, tier, price_usd, as_of. 'danger' means sanctioned, a known scam/exploit/phishing address, an address-poisoning lookalike, a burn address or similar - do not send funds. 'caution' means not enough evidence to call it safe (new, unverified, or a data source was unavailable) - confirm with the user first. Every tier runs OFAC sanctions, scam/phishing/exploit lists, address-poisoning lookalikes, burn-address and contract/deployer checks; this tier additionally runs the same checks as standard today - pick it for high-value or first-time transfers, not for extra checks. PAID: calling this tool always costs $0.50 USDC on Base via x402, paid from the wallet configured in this server (VERDIX_PRIVATE_KEY), and is refused up front if that is above VERDIX_MAX_PRICE_USD. A 503 answer (data unavailable) is not charged.

ParametersJSON Schema
NameRequiredDescriptionDefault
addressYesThe EVM address to check (the recipient, contract or counterparty)

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Goes well beyond the annotations by disclosing the full cost model: always $0.50 USDC on Base via x402, paid from VERDIX_PRIVATE_KEY, refused up front if above VERDIX_MAX_PRICE_USD, and 503 responses are not charged. It also decodes the 'danger'/'caution' verdicts into actionable conditions.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loads the action, tier and price, and the return-shape summary is dense but useful. The clause 'this tier additionally runs the same checks as standard today' is mildly confusing and could be tightened, costing a point.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema, the description fully documents the return payload (verdict, risk_score, reasons, checked, tier, price_usd, as_of) and its interpretation. Combined with the payment and tier semantics, an agent has everything needed to call it correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100% for the single 'address' parameter, so the schema already carries the semantics. The description adds no format or syntax detail beyond what the schema provides, making the baseline 3 appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb ('screen') and resource ('an EVM address on Base'), and pins itself to a distinct tier. It explicitly tells the agent that check_address_risk with tier="deep" is the equivalent, so the sibling relationship is unambiguous.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Provides explicit when-to-use guidance ('pick it for high-value or first-time transfers, not for extra checks') and names the alternative that avoids the dedicated tool. Both the selecting condition and the exclusion are stated.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

check_address_risk_liteCheapest pre-send address check (lite, $0.01, never "safe")A

Cheapest Verdix check ($0.01): screen an EVM address on Base before sending it USDC or other funds, when the recipient is unknown or new to you. It checks OFAC sanctions, scam/phishing lists, address-poisoning lookalikes, burn addresses, phishing tokens and flagged contract deployers; it skips address age and the caution-only contract checks. Returns Verdix's JSON unchanged: verdict (no_known_risk | caution | danger), risk_score, reasons, checked, limited_checks (always true), checks_performed, not_checked, full_check, as_of. This tool NEVER returns "safe": the clean answer is "no_known_risk", which only means the address is on none of these lists - it is not a safety verdict. 'danger' means do not send funds. 'caution' means confirm with the user first. If you need a "safe" verdict (e.g. before a large or irreversible transfer), call check_address_risk_quick ($0.02) instead or after this one. PAID: calling this tool always costs $0.01 USDC on Base via x402, paid from the wallet configured in this server (VERDIX_PRIVATE_KEY), and is refused up front if that is above VERDIX_MAX_PRICE_USD. A 503 answer (data unavailable) is not charged.

ParametersJSON Schema
NameRequiredDescriptionDefault
addressYesThe EVM address to check (the recipient, contract or counterparty)

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations are minimal (readOnlyHint=false, openWorldHint=true, idempotentHint=false) and the description carries the real behavioral load: it discloses the $0.01 x402 payment on Base, the funding wallet (VERDIX_PRIVATE_KEY), the up-front refusal when above VERDIX_MAX_PRICE_USD, and that a 503 is not charged. It also warns that the tool NEVER returns 'safe', preventing a dangerous misinterpretation of 'no_known_risk'.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loads the cost and the core use case, then the field/verdict semantics, then the escalation path and payment details — a sensible ordering. It is dense and slightly overlong for a one-parameter tool, but nearly every sentence carries decision-relevant information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema, the description enumerates the return fields (verdict, risk_score, reasons, checked, limited_checks, checks_performed, not_checked, full_check, as_of), defines each verdict, and covers cost and failure behavior. An agent has everything needed to call this correctly and interpret the result.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Single parameter with 100% schema description coverage, so the baseline is 3. The description adds only marginal value ('EVM address on Base', recipient/contract/counterparty), largely restating what the schema description already says.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource (screen an EVM address on Base), names its scope limits (skips address age and caution-only contract checks), and differentiates itself from the sibling check_address_risk_quick. An agent can pick this tool over the other five risk tools without opening a schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives an explicit when (before sending USDC to an unknown or new recipient), a when-to-escalate (need a 'safe' verdict before a large/irreversible transfer → use check_address_risk_quick), and decision rules for the outcomes ('danger' = do not send, 'caution' = confirm with the user). Very little is left to inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

check_address_risk_quickCheck an address before sending it funds (quick tier, $0.02)A

Screen an EVM address on Base before sending it money or interacting with it, pinned to the quick tier (fixed $0.02; use check_address_risk with tier="quick" if you want that price without a dedicated tool). Returns Verdix's verdict JSON unchanged: verdict (safe | caution | danger), risk_score (0-100), reasons, checked, tier, price_usd, as_of. 'danger' means sanctioned, a known scam/exploit/phishing address, an address-poisoning lookalike, a burn address or similar - do not send funds. 'caution' means not enough evidence to call it safe (new, unverified, or a data source was unavailable) - confirm with the user first. Every tier runs OFAC sanctions, scam/phishing/exploit lists, address-poisoning lookalikes, burn-address and contract/deployer checks; this tier additionally runs a fast address-age read. PAID: calling this tool always costs $0.02 USDC on Base via x402, paid from the wallet configured in this server (VERDIX_PRIVATE_KEY), and is refused up front if that is above VERDIX_MAX_PRICE_USD. A 503 answer (data unavailable) is not charged.

ParametersJSON Schema
NameRequiredDescriptionDefault
addressYesThe EVM address to check (the recipient, contract or counterparty)

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Goes well beyond the annotations: discloses that the call is paid ($0.02 USDC via x402 from VERDIX_PRIVATE_KEY), that it is refused up front if above VERDIX_MAX_PRICE_USD, that a 503 is not charged, which checks every tier runs vs. the extra address-age read this tier adds, and the exact meaning of each verdict value. This is unusually rich disclosure for a paid, open-world call.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loads purpose, tier and price, then verdict semantics, then payment mechanics. Dense but every clause carries information; only the parenthetical about check_address_risk tier="quick" and the payment paragraph overlap slightly in topic, keeping it short of a 5.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema, the description enumerates the returned fields (verdict, risk_score, reasons, checked, tier, price_usd, as_of) and the failure/pricing edge cases, so an agent knows both what it gets back and what it costs before invoking.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100% and there is a single required param whose pattern and meaning are already documented in the schema ('the recipient, contract or counterparty'). The description adds only contextual framing (sending money / interacting) rather than new syntax or semantics, so the baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb (screen) and resource (EVM address on Base) plus the exact tier and price, and explicitly distinguishes itself from the sibling check_address_risk with tier="quick". An agent can tell instantly what this does and how it differs from the other three risk tiers.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives an explicit use case (before sending funds or interacting), an explicit alternative with the condition that selects it (check_address_risk with tier="quick" for the same price without a dedicated tool), and decision rules for the two non-safe verdicts ('do not send funds' for danger, 'confirm with the user first' for caution).

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

check_address_risk_standardCheck an address before sending it funds (standard tier, $0.10)A

Screen an EVM address on Base before sending it money or interacting with it, pinned to the standard tier (fixed $0.10; use check_address_risk with tier="standard" if you want that price without a dedicated tool). Returns Verdix's verdict JSON unchanged: verdict (safe | caution | danger), risk_score (0-100), reasons, checked, tier, price_usd, as_of. 'danger' means sanctioned, a known scam/exploit/phishing address, an address-poisoning lookalike, a burn address or similar - do not send funds. 'caution' means not enough evidence to call it safe (new, unverified, or a data source was unavailable) - confirm with the user first. Every tier runs OFAC sanctions, scam/phishing/exploit lists, address-poisoning lookalikes, burn-address and contract/deployer checks; this tier additionally runs deeper on-chain behaviour analysis. PAID: calling this tool always costs $0.10 USDC on Base via x402, paid from the wallet configured in this server (VERDIX_PRIVATE_KEY), and is refused up front if that is above VERDIX_MAX_PRICE_USD. A 503 answer (data unavailable) is not charged.

ParametersJSON Schema
NameRequiredDescriptionDefault
addressYesThe EVM address to check (the recipient, contract or counterparty)

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Goes well beyond the annotations: discloses the x402 USDC-on-Base payment, the funding wallet, the max-price refusal, and the notable edge case that a 503 is not charged. It also decodes the verdict semantics ('danger' = sanctioned/scam/poisoning/burn, 'caution' = insufficient evidence, confirm with user).

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loads purpose, then pricing, then verdict semantics, then payment mechanics — a logical order with no filler. It is dense and long-ish, but every clause carries operational information, so it stays just short of 5.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

No output schema exists, and the description compensates by enumerating the returned verdict JSON fields (verdict, risk_score, reasons, checked, tier, price_usd, as_of). Combined with the pricing and failure-mode details, an agent has everything needed to call and interpret it.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Single required parameter with 100% schema description coverage, so the schema already documents the address and its pattern. The description reinforces that the address is the recipient/contract/counterparty, but adds no format or validation detail beyond the schema — baseline 3.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Screen an EVM address on Base') and pins the scope to the standard tier at a fixed $0.10, which cleanly separates it from the sibling check_address_risk_quick/deep and the generic check_address_risk. An agent can select it without opening any schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives an explicit trigger ('before sending it money or interacting with it') and names the alternative route ('use check_address_risk with tier="standard" if you want that price without a dedicated tool'). It also states a refusal precondition (price above VERDIX_MAX_PRICE_USD).

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_pricingVerdix prices per tierA
Read-only

Free. Current Verdix price per tier (USDC on Base, via x402), the payment recipient, your configured max price per call, and whether a wallet is configured (with its public address, so it can be funded). tiers lists quick/standard/deep; the lite tier ($0.01, check_address_risk_lite, never answers safe) is in the separate lite field. Nothing is signed or paid.

ParametersJSON Schema
NameRequiredDescriptionDefault

No parameters

TDQS

A3.7/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true and openWorldHint=true, so the safety profile is covered; the description goes further by stating the tool is free, that 'nothing is signed or paid', and that the wallet address is exposed so it can be funded. These are real behavioral facts beyond the annotations, though it stops short of describing any freshness or caching behavior.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three dense sentences, front-loaded with the 'Free' cost signal, then output contents, then the tiers/lite split. Every sentence carries information, though the output-field enumeration runs long and could be tightened slightly. No filler or repetition.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema, the description must explain return values, and it does: currency and chain (USDC on Base via x402), the tiers field contents (quick/standard/deep), the separate lite field, payment recipient, max price, and wallet configuration. For a zero-parameter, no-output-schema tool this is complete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool takes zero parameters, which is the baseline-4 case; there are no arguments whose semantics could be missing. The description instead spends its words documenting returned fields, which is useful but not parameter semantics.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description makes clear this is a read-only pricing/configuration lookup for the Verdix service, enumerating exactly what is returned (per-tier prices, payment recipient, configured max price, wallet status). It also distinguishes itself from the check_address_risk_* siblings by explaining that the lite tier belongs to check_address_risk_lite. It never states a clean verb+resource ('returns pricing/config'), but the resource and scope are unambiguous.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no explicit when-to-use guidance such as 'call this first to discover prices or verify your wallet/max price before invoking a paid check.' The reference to check_address_risk_lite and the lite tier is routing context for interpreting a field, not usage direction. An agent must infer the invocation context on its own.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 1 tool updatev0.3.1
    • Addedcheck_address_risk_lite
  2. 4 tool updates
    • Changedcheck_address_risk1 field changed
      • changedInput schema / properties / tier / description
        Previous value: -"Analysis depth and price: quick ($0.02), standard ($0.10), deep ($0.50)"New value: +"Analysis depth and price: quick ($0.02, fast address-age read), standard ($0.10, deeper on-chain behaviour analysis, recommended default), deep ($0.50, same checks as standard, for high-value or first-time transfers)"
    • Addedcheck_address_risk_deep
    • Addedcheck_address_risk_quick
    • Addedcheck_address_risk_standard
  3. 2 tool updatesv0.1.1
    • First observedcheck_address_risk
    • First observedget_pricing

TDQS

A4/5.0

Scored across 6 tools

Disambiguation2/5

check_address_risk takes a tier parameter and is functionally identical to the three pinned tier variants (quick, standard, deep) and largely overlaps lite. The descriptions explicitly acknowledge this equivalence, but four+ tools that reach the same verdict for the same address still create real misselection risk.

Naming Consistency4/5

All tools use consistent snake_case with a predictable check_address_risk_<tier> family plus get_pricing. The base tool omits the tier suffix, a minor deviation, but overall the pattern is clear and readable.

Tool Count4/5

Six tools is a reasonable scope for a single-purpose screening service. However, the four near-duplicate risk-check tools inflate the count where one parameterized tool plus get_pricing would suffice.

Completeness4/5

The domain is EVM/Base address screening, and the surface covers the lite→deep tiers plus pricing disclosure and payment config, which fits the stated purpose. Gaps like batch/multi-address screening or other chains exist but are minor for the declared scope.

Maintenance

ActivityMaintained
ResponsivenessNo issues

Related MCP Connectors

Related MCP Servers

  • F
    license
    A
    quality
    C
    maintenance
    Agent-Level Transaction Safety Oracle. Before an AI agent signs a blockchain transaction, it returns a SAFE/UNSAFE verdict with a SENTINEL Score (AAA-D) and risk flags. Pay-per-call $0.005 USDC via x402 on Base.
    1
    -
  • F
    license
    Not graded
    quality
    D
    maintenance
    Provides counterparty risk checks for any EVM address, returning malicious-history flags, tiered risk scoring, and plain-language summaries via x402 payment.
    -