Connect Tech Risk and your agent gets 22 tools, among them chain_balance, chain_block_number, chain_block_number_preview. It answers at https://x402-data-api.sigrunner.workers.dev/mcp over streamable HTTP, and it listed its tools to an anonymous client, so no sign-in was needed for that. Our probes reached it 6 of 6 times since 11 September 2026; the last check, on 23 October 2026, succeeded.
Scan any MCP server for tool-poisoning/prompt-injection/exfiltration (OWASP LLM01/08) + Base data
Description as the publisher wrote it.
| Tool | What it does |
|---|---|
chain_balance | Native ETH balance of a Base mainnet address, incl. balance_usd (ETH price cross-call — no price oracle on ETH-only competitors), via multi-provider JSON-RPC. Cost: $0.005 USDC per call via x402. Inputs: address |
chain_block_number | Current Base mainnet block number via multi-provider JSON-RPC (automatic failover across 4 providers, never fails on one provider's rate limit). Cost: $0.005 USDC per call via x402. |
chain_block_number_preview | FREE live sample of the current Base mainnet block number — identical data to the paid chain_block_number tool. No payment required. |
chain_gas_price | Current Base mainnet gas price (wei/gwei), EIP-1559 base_fee_gwei/priority_fee_gwei, and gas_price_usd (ETH price cross-call — no price oracle on ETH-only competitors) via multi-provider JSON-RPC. Cost: $0.005 USDC per call via x402. |
chain_gas_price_preview | FREE live sample of the current Base mainnet gas price — identical data to the paid chain_gas_price tool. No payment required. |
chain_token_balance | ERC-20 token balance of a Base mainnet address via multi-provider JSON-RPC, incl. symbol/decimals/balance_formatted (per-token-contract cached in-isolate). Cost: $0.005 USDC per call via x402. Inputs: address, token |
chain_token_security | Token security / honeypot detector for a Base mainnet ERC-20: EIP-1967/1822 proxy + upgradeability detection, bytecode dispatcher scan for mint/pause/blacklist/fee-setter/ownership selectors, owner() renouncement check, and a live eth_call Inputs: token |
chain_token_security_preview | FREE full real analysis of a fixed well-known token (Base WETH) via the token security / honeypot detector — same depth as the paid chain_token_security tool, so you can see the real product before paying. To analyze an arbitrary token, use |
chain_tx | Transaction details by hash on Base mainnet via multi-provider JSON-RPC. Cost: $0.005 USDC per call via x402. Inputs: hash |
chain_wallet | Wallet bundle: ETH balance + balance_usd (ETH price cross-call) + tx count + contract-code check (EIP-7702 delegated-EOA aware) for a Base mainnet address, in one call. Cost: $0.005 USDC per call via x402. Inputs: address |
crypto_funding | Live cross-venue perpetual-futures funding rates from Hyperliquid+OKX+dYdX (per-venue rate, arb spread in bps, cheapest-long/richest-short venue, premium/basis, annualized_hl, annualized_okx, LONGS_PAY/SHORTS_PAY/NEUTRAL signal, next_fundin Inputs: limit |
crypto_funding_preview | FREE 1-item sample of live cross-venue funding rates. No payment required. |
crypto_prices | Live spot token prices (price, change_24h, symbol, confidence, timestamp) for CoinGecko ids, sourced from DefiLlama. Cost: $0.005 USDC per call via x402. Inputs: coins |
crypto_prices_preview | FREE 1-item sample of live token prices. No payment required. |
defi_yields | Live DeFi lending/LP yield pools (project, chain, symbol, pool id, APY breakdown incl. 1d/7d/30d trend + apyBase7d/apyMean30d, IL risk incl. il7d, exposure, reward/underlying tokens, outlier flag, mu/sigma, DefiLlama stability forecast, TVL Inputs: limit, project, chain, stable, sort |
defi_yields_preview | FREE 1-item sample of live DeFi yield pools. No payment required. |
enrich_domain | Firmographic + tech-stack enrichment: RDAP registrant/registrar, DNS records, full subdomain enumeration + certificate-transparency history, tech-stack fingerprint, verdict (clear/review/block, based on domain age) for a domain. Cost: $0.00 Inputs: domain |
enrich_tech_risk | Security enrichment: tech-stack fingerprint + CVE mapping + EPSS + CISA KEV + verdict (clear/review/block) for a domain. Cost: $0.005 USDC per call (x402 micropayment). Inputs: domain, techstack |
pm_markets | Live Polymarket prediction-market data — question, outcomes, outcome prices, bestBid/bestAsk/spread, volume24hr/volume1wk, oneDayPriceChange, clobTokenIds, conditionId, category tags, liquidity, end date — ranked by volume24hr. Cost: $0.005 Inputs: query, limit |
pm_markets_preview | FREE top-1 sample of live Polymarket prediction markets, ranked by volume24hr. No payment required. |
scan_mcp_preview | FREE preview scan of a target MCP server for tool-poisoning / prompt-injection. Returns issue count, severity breakdown, risk score, and verdict (clear/review/block) — but NOT which tools or the evidence. Use this to check any MCP server (i Inputs: url |
scan_mcp_server | Security-audit a target MCP server for prompt-injection / tool-poisoning. Fetches the server's advertised tools and statically analyzes each for hidden instructions, data-exfiltration hints, dangerous capabilities, cross-tool shadowing, and Inputs: url |
Every block below points at https://x402-data-api.sigrunner.workers.dev/mcp. Pick your client and copy.
claude mcp add --transport http tech-risk https://x402-data-api.sigrunner.workers.dev/mcp
{
"mcpServers": {
"tech-risk": {
"command": "npx",
"args": ["-y", "mcp-remote", "https://x402-data-api.sigrunner.workers.dev/mcp"]
}
}
}{
"mcpServers": {
"tech-risk": {
"url": "https://x402-data-api.sigrunner.workers.dev/mcp"
}
}
}{
"servers": {
"tech-risk": {
"type": "http",
"url": "https://x402-data-api.sigrunner.workers.dev/mcp"
}
}
}{
"context_servers": {
"tech-risk": {
"url": "https://x402-data-api.sigrunner.workers.dev/mcp"
}
}
}{
"mcpServers": {
"tech-risk": {
"serverUrl": "https://x402-data-api.sigrunner.workers.dev/mcp"
}
}
}{
"mcpServers": {
"tech-risk": {
"url": "https://x402-data-api.sigrunner.workers.dev/mcp"
}
}
}name: Tech Risk
version: 0.0.1
schema: v1
mcpServers:
- name: Tech Risk
type: streamable-http
url: https://x402-data-api.sigrunner.workers.dev/mcp{
"mcpServers": {
"tech-risk": {
"httpUrl": "https://x402-data-api.sigrunner.workers.dev/mcp"
}
}
}{
"mcpServers": {
"tech-risk": {
"type": "http",
"url": "https://x402-data-api.sigrunner.workers.dev/mcp"
}
}
}{
"mcpServers": {
"tech-risk": {
"url": "https://x402-data-api.sigrunner.workers.dev/mcp"
}
}
}goose://extension?url=https%3A%2F%2Fx402-data-api.sigrunner.workers.dev%2Fmcp&type=streamable_http&id=tech-risk&name=Tech%20Risk
It answered our last check on 23 October 2026 in 496 ms. Over 6 checks since 11 September 2026 it answered 6. Status here comes from Neuronto's own probes, not from the publisher.
22, as returned by the server's own tools/list on 20 September 2026: chain_balance, chain_block_number, chain_block_number_preview, chain_gas_price, chain_gas_price_preview, chain_token_balance, chain_token_security, chain_token_security_preview, and 14 more.
It answered our last check on 23 October 2026 in 496 ms. Over 6 checks since 11 September 2026 it answered 6.
Put the server under mcpServers in ~/.cursor/mcp.json with the URL https://x402-data-api.sigrunner.workers.dev/mcp. The exact JSON is above, with the same setup for Claude Code, Claude Desktop, VS Code, Windsurf, Zed, Gemini CLI and the rest.
It listed its tools to an anonymous client, so reading the tool list needs no key. Individual tools can still ask for credentials in their own inputs.
Publisher: io.github.rezearcher. Endpoint host: x402-data-api.sigrunner.workers.dev. ARD identifier: urn:air:io.github.rezearcher:mcp:tech-risk.
First indexed 10 September 2026. The tools are exactly what the server returned; nothing on this page
is inferred from its name. Ranking in Neuronto search is never for sale.