Safety checks before an agent pays: address poisoning, phishing links, x402 payment requests.
Maintain this server? Claim it
Call this server's tools from your browser. Nothing to install.
Requests go through mcptry because browsers can't call most MCP servers directly. Header values are sent to the server for that request only and are never stored or logged.
Tool list from our last check. Connect live to refresh it.
Before sending crypto: checks an EVM, Solana or Bitcoin address for a valid checksum, the right network, dead/burn/program addresses, a mismatch with the expected payee, and address-poisoning lookalikes of addresses you already trust. Live on-chain lookup: has the address ever been used, is it a wallet, contract or program. Returns pass / caution / fail with reasons. Price: $0.01 USDC per call after 25 free calls per day.
The address you are about to pay.
Optional. Addresses you have paid or trust before (max 200). GET: comma-separated.
Optional. Network you intend to use.
x402 v2 payment: base64 PaymentPayload, as you would send in the PAYMENT-SIGNATURE header. Only needed after the free allowance is used.
Optional. The address you were told to pay, e.g. from an invoice.
Pick your client. Values in capitals, like YOUR_TOKEN, are yours to fill in.
claude mcp add --transport http value-verdicts https://verdicts.anagramic.com/mcp
Tool list last changed Nov 1, 2026.
Before sending crypto: checks an EVM, Solana or Bitcoin address for a valid checksum, the right network, dead/burn/program addresses, a mismatch with the expected payee, and address-poisoning lookalikes of addresses you already trust. Live on-chain lookup: has the address ever been used, is it a wallet, contract or program. Returns pass / caution / fail with reasons. Price: $0.01 USDC per call after 25 free calls per day.
| Argument | Type | Description |
|---|---|---|
| known | array | Optional. Addresses you have paid or trust before (max 200). GET: comma-separated. |
| address* | string | The address you are about to pay. |
| network | string | Optional. Network you intend to use. |
| _payment | string | x402 v2 payment: base64 PaymentPayload, as you would send in the PAYMENT-SIGNATURE header. Only needed after the free allowance is used. |
| expected | string | Optional. The address you were told to pay, e.g. from an invoice. |
{
"type": "object",
"required": [
"address"
],
"properties": {
"known": {
"type": "array",
"items": {
"type": "string"
},
"description": "Optional. Addresses you have paid or trust before (max 200). GET: comma-separated."
},
"address": {
"type": "string",
"description": "The address you are about to pay."
},
"network": {
"enum": [
"evm",
"ethereum",
"base",
"polygon",
"arbitrum",
"optimism",
"bsc",
"avalanche",
"solana",
"bitcoin"
],
"type": "string",
"description": "Optional. Network you intend to use."
},
"_payment": {
"type": "string",
"description": "x402 v2 payment: base64 PaymentPayload, as you would send in the PAYMENT-SIGNATURE header. Only needed after the free allowance is used."
},
"expected": {
"type": "string",
"description": "Optional. The address you were told to pay, e.g. from an invoice."
}
},
"additionalProperties": false
}Before opening a link or entering credentials: detects lookalike domains (homoglyphs, mixed alphabets, typosquats), brand impersonation in domains and subdomains, hidden destinations (user@host), unsafe schemes, and risky TLDs across 70+ commonly impersonated brands. Live lookups: does the domain exist (DNS) and how old is it (registration date), since most phishing domains are days old. The page itself is never visited. Price: $0.01 USDC per call after 25 free calls per day.
| Argument | Type | Description |
|---|---|---|
| url* | string | The link to check. |
| _payment | string | x402 v2 payment: base64 PaymentPayload, as you would send in the PAYMENT-SIGNATURE header. Only needed after the free allowance is used. |
| expectedBrand | string | Optional. The brand this link claims to be, e.g. "paypal". Fails if the domain is not official. |
{
"type": "object",
"required": [
"url"
],
"properties": {
"url": {
"type": "string",
"description": "The link to check."
},
"_payment": {
"type": "string",
"description": "x402 v2 payment: base64 PaymentPayload, as you would send in the PAYMENT-SIGNATURE header. Only needed after the free allowance is used."
},
"expectedBrand": {
"type": "string",
"description": "Optional. The brand this link claims to be, e.g. \"paypal\". Fails if the domain is not official."
}
},
"additionalProperties": false
}Before you sign an x402 payment to another service: pass the 402 payment request you received and get one verdict on the whole thing. Checks the price against your limit, that the token is real USDC with the right signing name, the payee address (checksum, poisoning lookalikes, on-chain history), whether the request claims a different site than the one you called, and the site itself (lookalike domains, domain age). One call, one price. Price: $0.01 USDC per call after 25 free calls per day.
| Argument | Type | Description |
|---|---|---|
| _payment | string | x402 v2 payment: base64 PaymentPayload, as you would send in the PAYMENT-SIGNATURE header. Only needed after the free allowance is used. |
| maxPrice | string | Optional. Your price limit in US dollars, e.g. "0.05". |
| knownPayees | array | Optional. Payee addresses you have paid before (max 200). GET: comma-separated. |
| requestedUrl | string | Optional. The URL you called that returned the 402. |
| paymentRequired* | string | object | The PAYMENT-REQUIRED header value (base64) or the 402 JSON body. GET: base64 only. |
{
"type": "object",
"required": [
"paymentRequired"
],
"properties": {
"_payment": {
"type": "string",
"description": "x402 v2 payment: base64 PaymentPayload, as you would send in the PAYMENT-SIGNATURE header. Only needed after the free allowance is used."
},
"maxPrice": {
"type": "string",
"description": "Optional. Your price limit in US dollars, e.g. \"0.05\"."
},
"knownPayees": {
"type": "array",
"items": {
"type": "string"
},
"description": "Optional. Payee addresses you have paid before (max 200). GET: comma-separated."
},
"requestedUrl": {
"type": "string",
"description": "Optional. The URL you called that returned the 402."
},
"paymentRequired": {
"type": [
"string",
"object"
],
"description": "The PAYMENT-REQUIRED header value (base64) or the 402 JSON body. GET: base64 only."
}
},
"additionalProperties": false
}Before paying an x402 service: safely makes one unauthenticated HTTPS request, confirms the endpoint is live and returns a current 402 challenge, then checks its price, USDC token, payee and site. Never signs or settles a payment. HTTPS only; redirects and private/local targets are refused. Price: $0.01 USDC per call after 25 free calls per day.
| Argument | Type | Description |
|---|---|---|
| url* | string | The public HTTPS x402 endpoint to preflight. |
| _payment | string | x402 v2 payment: base64 PaymentPayload, as you would send in the PAYMENT-SIGNATURE header. Only needed after the free allowance is used. |
| maxPrice | string | Optional. Your maximum acceptable US-dollar price, e.g. "0.05". |
| knownPayees | array | Optional. Payee addresses you have paid before (max 200). GET: comma-separated. |
{
"type": "object",
"required": [
"url"
],
"properties": {
"url": {
"type": "string",
"description": "The public HTTPS x402 endpoint to preflight."
},
"_payment": {
"type": "string",
"description": "x402 v2 payment: base64 PaymentPayload, as you would send in the PAYMENT-SIGNATURE header. Only needed after the free allowance is used."
},
"maxPrice": {
"type": "string",
"description": "Optional. Your maximum acceptable US-dollar price, e.g. \"0.05\"."
},
"knownPayees": {
"type": "array",
"items": {
"type": "string"
},
"description": "Optional. Payee addresses you have paid before (max 200). GET: comma-separated."
}
},
"additionalProperties": false
}We read every tool's name, description and inputs the way the model will, looking for instructions hidden from you. A clean result means no warning signs, not a guarantee. Scanned Nov 1, 2026.
What changed in this server's tools since we started watching, newest first. Each change is scanned again.
Before paying an x402 service: safely makes one unauthenticated HTTPS request, confirms the endpoint is live and returns a current 402 challenge, then checks its price, USDC token, payee and site. Never signs or settles a payment. HTTPS only; redirects and private/local targets are refused. Price: $0.01 USDC per call after 25 free calls per day.