Doormat Capital's paid x402 safety tools (token scan, HTTP security headers) for AI agents.
Maintain this server? Claim it
Call this server's tools from your browser. Nothing to install.
Requests go through mcptry because browsers can't call most MCP servers directly. Header values are sent to the server for that request only and are never stored or logged.
Tool list from our last check. Connect live to refresh it.
Paid (x402, USDC on Base). Full safety report for a Base ERC-20 token contract: metadata, raw owner address, mint-selector heuristic, approximate recent-activity signal. Call without 'tx' first to receive the exact x402 payment challenge (amount, asset, payTo address, chain); pay that amount in USDC on Base, then call again with the resulting transaction hash in 'tx' to receive the real report.
0x-prefixed 40-hex-character Base token contract address.
Optional: 0x-prefixed 64-hex-character Base transaction hash proving payment. Omit on the first call to see the payment challenge.
This tool isn't marked read-only, so it may change something on the server or in an account you connected.
Paid (x402, USDC on Base). Full safety report for a Base ERC-20 token contract: metadata, raw owner address, mint-selector heuristic, approximate recent-activity signal. Call without 'tx' first to receive the exact x402 payment challenge (amount, asset, payTo address, chain); pay that amount in USDC on Base, then call again with the resulting transaction hash in 'tx' to receive the real report.
| Argument | Type | Description |
|---|---|---|
| tx | string | Optional: 0x-prefixed 64-hex-character Base transaction hash proving payment. Omit on the first call to see the payment challenge. |
| address* | string | 0x-prefixed 40-hex-character Base token contract address. |
{
"type": "object",
"required": [
"address"
],
"properties": {
"tx": {
"type": "string",
"description": "Optional: 0x-prefixed 64-hex-character Base transaction hash proving payment. Omit on the first call to see the payment challenge."
},
"address": {
"type": "string",
"description": "0x-prefixed 40-hex-character Base token contract address."
}
}
}FREE, no payment required. Checks a site's robots.txt against a list of known AI crawlers (GPTBot, ClaudeBot, Google-Extended, etc.) and reports which are allowed or blocked.
| Argument | Type | Description |
|---|---|---|
| url* | string | The site URL to check (e.g. https://example.com). robots.txt is looked up at that domain's root. |
{
"type": "object",
"required": [
"url"
],
"properties": {
"url": {
"type": "string",
"description": "The site URL to check (e.g. https://example.com). robots.txt is looked up at that domain's root."
}
}
}FREE, no payment required. Checks whether a site has a valid llms.txt file (the emerging convention for telling AI crawlers/agents what a site is and how to use it): fetches it, reports status and any errors/warnings.
| Argument | Type | Description |
|---|---|---|
| url* | string | The site URL to check (e.g. https://example.com). llms.txt is looked up at that domain's root. |
{
"type": "object",
"required": [
"url"
],
"properties": {
"url": {
"type": "string",
"description": "The site URL to check (e.g. https://example.com). llms.txt is looked up at that domain's root."
}
}
}Paid (x402, USDC on Base). Full HTTP security-headers report for a URL: every header checked, raw values, remediation detail. Call without 'tx' first to receive the exact x402 payment challenge; pay, then call again with the transaction hash in 'tx' to receive the full report.
| Argument | Type | Description |
|---|---|---|
| tx | string | Optional: 0x-prefixed 64-hex-character Base transaction hash proving payment. Omit on the first call to see the payment challenge. |
| url* | string | The URL to check (e.g. https://example.com). |
{
"type": "object",
"required": [
"url"
],
"properties": {
"tx": {
"type": "string",
"description": "Optional: 0x-prefixed 64-hex-character Base transaction hash proving payment. Omit on the first call to see the payment challenge."
},
"url": {
"type": "string",
"description": "The URL to check (e.g. https://example.com)."
}
}
}