x402-bazaar-mcp (sukrutkrdg/x402-bazaar-mcp) is an MCP server listed on the M8ven Trust Index. It scores 56 out of 100, grade D. It declares 137 tools. No publisher has claimed this listing.

D
Caution
56/100

x402-bazaar-mcp

MCP server exposing x402 Bazaar's paid Base APIs (token risk/honeypot, prices, gas, wallet intel, tx decode + AI utilities) as agent tools. Your agent pays per call in USDC over x402 — no API keys, no signup.

Caution. Specific findings reduced this grade. They are listed on the page. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.

How we verified

⚡ Live Monitored: not connected

Verified is a snapshot. Live keeps it current, and builds your track record.

⚡ Connect GitHub → continuous verification on every pushwhy connect →

Who stands behind it

sukrutkrdg

Source: Glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →

Install from

The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.

// tools this server exposes137 tools

These names and descriptions are the publisher's own, read from the source code. We print them as written. Our assessment is the findings above, not this list.

token-risk

Pre-trade safety score for any Base token — Pass a token contract address and get a risk score + flags (ERC-20 conformance, ownership renounce, upgradeable proxy) computed live from Base. Built for trading bots and agents that vet tokens before buying. Required input: address. Priced $0.03 per call

pre-trade-gate

One call before you trade — GO / HOLD / STOP — The single call an agent makes before touching a Base token: token risk + sellability (honeypot/tax) + route/price-impact + deployer reputation, collapsed into one GO/HOLD/STOP verdict with an auditable receipt. Cheaper than the four checks à la carte.

sign-guard

Should the agent sign THIS calldata? GO/HOLD/STOP — The check before the riskiest moment — signing. Decodes raw unsigned calldata (approve / permit / transfer / setApprovalForAll), shows the exact intent (who gets power over what, and whether it's UNLIMITED), and screens the destination + spender fo

spend-audit

Which apps/agents can pull funds from this Base wallet? — Base Account spend permissions let an app or agent spend a scoped, recurring allowance from a wallet — the primitive behind autonomous agent payments on Base. This reconstructs a wallet's ACTIVE spend permissions from onchain approve/revoke e

agent-wallet-audit

Every way this wallet can be drained without a fresh signature — The complete fund-movement authority on a Base wallet in one call: ERC-20 approvals (a spender you approved can pull the token) PLUS Base Account spend permissions (the agent-era scoped recurring allowance) — one drain-surface verdict

wallet-delegation

Is this EOA secretly running someone else's code? — Since Pectra an EOA can carry EIP-7702 delegated code (the 0xef0100 designator): every call to the wallet executes the DELEGATE's contract with the wallet's funds — a malicious delegate is total takeover, invisible to approval tools. Reads the desi

commerce-escrow

Auth/capture payment reconciliation on Base — First tooling for Base's Commerce Payments protocol (AuthCaptureEscrow): reconciles two-phase auth/capture payments — in escrow, captured, charged, voided, refunded, or payer-RECLAIMABLE because the operator missed the capture window. Filter by payment=

commerce-operator-audit

Should you trust this Commerce Payments operator? — Commerce Payments flows are DRIVEN by an operator — it authorizes escrow, captures for merchants and takes the fees. This audits one before you rely on it: 90-day volumes, fees taken, capture-vs-reclaim record (missed capture windows = merchants le

morpho-health

Is this Morpho lending position about to be liquidated? — First lending tooling in the catalog. Reads a Morpho Blue position on Base (the largest lending venue on Base) and returns its liquidation health in one call: health factor, current vs liquidation LTV, and the exact collateral price drop that

morpho-vault

Should you deposit into this MetaMorpho vault? — A MetaMorpho vault spreads your deposit across Morpho Blue markets — your real risk is WHERE the curator put it and WHO can move it. Reads the vault's live allocation (concentration, per-market collateral + liquidation LTV), idle share, performance fe

morpho-liquidatable

Which Base Morpho positions are liquidatable right now? — Built for liquidator / MEV searchers. Reconstructs the active borrower set on a Morpho Blue market from Borrow events, prices every position onchain in one multicall, and ranks them by liquidation health — flagging positions liquidatable NOW

gas-payer

Who pays this wallet's gas? Is it a sponsored smart account? — A smart account's gas can be paid by a PAYMASTER instead of the account itself — invisible to every 'does this wallet spend ETH' heuristic. Reads a wallet's UserOperationEvents across BOTH EntryPoints (v0.6 + v0.7): is it a smart account

paymaster-check

Should you trust this Base gas paymaster? — Given a paymaster address, audits whether it's a healthy, active gas sponsor. Reads its UserOperationEvents across both EntryPoints: sponsored op volume, distinct accounts served, success rate, total gas sponsored, and concentration (the share coming from

safe-check

Real M-of-N multisig, or a 1-of-1 that just looks like one? — Multisig / treasury intelligence. Given an address: is it a Gnosis Safe, its owners and M-of-N threshold, version, activity, and — critically — its enabled MODULES. A module can move the Safe's funds via execTransactionFromModule with no

first-funder

Where did this wallet's money originally come from? — Funding provenance in one call. Traces a Base wallet back to its EARLIEST transaction and resolves who first funded it: a recognized exchange/bridge (real on-ramp, lower risk), an anon EOA (possible sybil/burner — trace the cluster), or a contrac

fresh-bridge

Is this wallet's USDC freshly bridged, and from where? — Cross-chain inflow detection. Reads a wallet's recent USDC MINTS and correlates them with Circle CCTP receives to tell you whether its USDC is freshly bridged in (and from which source chain — Ethereum, Arbitrum, OP, Polygon, Solana…) vs nativ

safe-to-send

Is this address safe to send, approve or sign to? — Before your agent sends, approves or signs to an address: one GO/REVIEW/STOP verdict. Screens OFAC sanctions, Coinbase/Basename identity, wallet vs contract, how long the address has existed, and whether contract logic can be swapped AFTER you send

address-trust

Is this counterparty Coinbase-verified or an anon/sybil? — The 'who am I dealing with?' check for agents. Reads Coinbase's ONCHAIN verification (an EAS attestation by verifications.coinbase.eth) — meaning the address is tied to a KYC'd Coinbase account, the strongest sybil-resistance signal on Base

basename-profile

Full onchain identity behind a Basename or address — Resolves the complete Base identity behind an address or Basename: resolved address, avatar, description, website and social handles (X/Twitter, GitHub, Farcaster, Discord) read from Base's L2 Resolver text records. Lets an agent turn a counterpar

whale-flow

Is size moving to the exits right now? — Flow, not snapshot: the largest transfers of a Base token in the last 24h, classified by whether whales are sending INTO DEX pools (sell pressure) or pulling OUT (accumulation) — a net sell-pressure read that decays in hours. Complements holder-forensics ('wh

watchlist-diff

What changed on my tokens since last check? — Retention in one call: pass up to 10 tokens to snapshot them and get a watchId; call again with that watchId to get only the DELTAS since last time — liquidity ±%, price ±%, became-honeypot, sell-tax spiked, liquidity pulled. The second call is worth mor

address-intel

Instant profile of any Base address — EOA vs contract, ETH + USDC balance, transaction count and activity level — straight from Base RPC. Useful for counterparty and wallet checks. Required input: address. Priced $0.02 per call over x402 on Base; send a prepaid x-credit-token header for unlimited ca

gas-oracle

Live Base gas estimates — slow / normal / fast — Returns current Base gas fees (baseFee, maxPriorityFee) and three tiered suggestions (slow, normal, fast) in Gwei, derived live from the Base RPC. Built for agents that time or cost-estimate transactions. Priced $0.01 per call over x402 on Base; send

b20-safety

Can this Base-native (B20) token freeze or seize your funds? — Live — B20 is Base's native precompile token standard, and unlike ERC-20 a B20 issuer can freeze holders (Policy Registry) and even SEIZE your balance (burnBlocked) at the protocol level. This reads exactly those powers — seizable, freez

b20-gate

One GO/HOLD/STOP before you touch a B20 token — The single call before trading a Base-native B20: seize (burnBlocked) + freeze (Policy Registry) + rebase + pause + uncapped-mint, collapsed into one GO/HOLD/STOP verdict with an auditable receipt. Pass wallet= to also check if YOUR address is already

b20-transfer-preflight

Will THIS transfer (from→to) clear right now? — The per-transaction B20 rail check: pass token + from + to (+ optional executor) and get one GO/HOLD/STOP on whether this exact transfer clears NOW — sender policy resolved against the sender, receiver policy against the recipient, executor policy agai

b20-portfolio

Which B20s in your wallet can freeze or seize you? — Scans a wallet's B20 (Base-native) holdings for protocol-level freeze/seize powers and whether YOUR address is ALREADY blocked on any of them — the risk no ERC-20 portfolio tool can see. Returns per-token seizable/freezable/rebase flags plus a wal

b20-control

WHO can mint, seize, freeze or pause this B20? — b20-safety tells you WHICH powers a B20 has; this tells you WHO holds them. Reads the token's role-based access control (mint / burn / seize-via-burnBlocked / pause / admin) from onchain role events and reports the exact controllers, how centralized t

b20-seizure-history

Has this issuer ever actually SEIZED holders? — Every other B20 check reads what the issuer CAN do; this reads what they HAVE done. Scans the token's actual burnBlocked seizures (the BurnedBlocked event) — whether the issuer has ever burned a blocked holder's balance, who was seized, and how much. v

b20-authenticity

Is this a REAL B20 — or a lookalike contract? — Run FIRST on any 'B20'. A scammer can deploy a normal contract at a vanity 0xB200… address and fake the whole B20 read surface — the B20Factory precompile is the one authority that can't be spoofed. Verifies factory registration + bytecode absence (rea

b20-config-audit

Bricked scopes, dangling policies, frozen lists — The B20 misconfiguration lint. Base's docs warn: a scope bound to a NON-EXISTENT allowlist silently denies EVERYONE — transfers brick. Audits every policy scope for dangling bindings, ALWAYS_BLOCK, renounced (frozen) lists and live pauses; verdict br

b20-policy-members

The FULL blocklist/allowlist — every address, with history — b20-freeze-check answers one wallet; this enumerates the WHOLE list. Replays the Policy Registry's BlocklistUpdated/AllowlistUpdated events into the full membership of a B20's blocklist/allowlist: every address ever blocked or whitelisted,

b20-genesis-audit

What the issuer did in the initCalls bypass window — createB20's initCalls run with role AND transfer-policy gates BYPASSED — a one-tx privilege window only the issuer ever gets. Reconstructs what they did in it: pre-mints (how much, to whom), role grants, policy bindings, blocklist seeding — the to

b20-mint-watch

Who is printing this token, right now — b20-supply shows the dilution ceiling; this shows the actual printing. Every mint (incl. batchMint) in the window: amount, recipients, and the share of current supply it represents — heavy_dilution / active_minting / minor_minting / quiet. The live issuance fe

b20-rebase-history

Every silent balance rescaling this token ever did — An Asset B20's multiplier rescales EVERY holder's balance in one call — no transfer, no per-account event, nothing in your tx history. b20-rebase shows today's value; this replays the full MultiplierUpdated history and flags DOWNWARD moves that si

b20-peg

Declared currency vs what the market actually pays — A B20 Stablecoin's currency() is SELF-DECLARED — the standard verifies nothing. This is the missing check: declared peg vs actual DEX market price. 'Says USD, trades at $0.71' in one call: on_peg / depeg_warning / depegged / no_market (the peg is

b20-dossier

Institutional AI report on a Base-native B20 token — The premium tier of the B20 suite — no ERC-20 tool can produce it. Composes the full B20 picture: seize/freeze/pause/mint powers, WHO holds them (admin renounced?), allowlist-vs-blocklist access model, supply-cap dilution headroom, metadata mutabi

b20-memo

Payment IDs & compliance tags on a B20 token — B20 adds memos to transfers/mints/burns (transferWithMemo) for payment IDs, compliance tags and settlement correlation — a field ERC-20 has no equivalent for. Reads a token's on-chain Memo event history, optionally filtered by a specific memo (bytes32)

b20-supply

Mint headroom & dilution history of a B20 — The dilution half of B20 rug risk (b20-safety covers seizure). Reads supply cap vs minted supply (how much can still be minted) plus the on-chain SupplyCapUpdated history — an issuer that RAISED the cap diluted, or set up to dilute, holders. Uncapped mint

b20-metadata

Can this token rename itself? Has it? — A B20 with a METADATA_ROLE holder can call updateName/updateSymbol — change its own identity after launch (an impersonation / bait-and-switch vector ERC-20 has no protocol equivalent for). Reads whether the metadata is mutable (role holder exists) AND whether

b20-permit

Gasless-approval (ERC-2612) readiness for agents — Every B20 has ERC-2612 permit built in — approve a spender by signature instead of a transaction. Reads exactly what an agent needs to build a valid permit: the token's DOMAIN_SEPARATOR, the owner's current nonce (so the signed payload can't be reje

b20-policy-admin

WHO administers the blocklist that can freeze you? — b20-control reads the token's own roles; the address that can actually add you to a blocklist lives in the Policy Registry. This reads WHO administers each active transfer/mint policy (policyAdmin), and whether that control is being handed over (p

b20-access-type

Permissioned (allowlist) or blockable? Decoded per scope — A B20 transfer policy is either a BLOCKLIST (allowed unless listed) or an ALLOWLIST (allowed ONLY if listed — a permissioned/whitelist token you can't even receive uninvited). b20-safety flags that a policy exists; this decodes its TYPE per

b20-announcements

On-chain issuer notices & corporate actions — B20 Asset tokens can post on-chain announcements (Announcement: id, description, uri) — issuer notices, corporate actions, redemptions — a channel ERC-20 has no equivalent for. Reads a token's announcement feed (active vs ended) from CDP-indexed events.

b20-stablecoin

Declared peg currency + issuance & control — B20 Stablecoin tokens self-declare a fiat currency code (currency() → USD, EUR, …). Reads that declared peg alongside the issuance profile (supply, cap) and control powers (seize/freeze/pause/uncapped-mint) — a one-call 'what is this stablecoin and who co

base-withdrawal

When can a Base→L1 withdrawal be finalized? — Beryl (2026-06-25) cut the single-proof withdrawal window from 7 days to 5, with a dual-proof fast path at ~1 day. Given a Base withdrawal-initiation tx, this decodes the L2ToL1MessagePasser event (the withdrawalHash, target & value needed to prove/final

b20-launch-radar

Freshly minted B20 tokens on Base — Lists the newest B20 tokens created on Base (from the B20Factory precompile) — variant, symbol, decimals, block. B20 is Base's native token standard and dozens launch hourly. A discovery feed for agents hunting new B20 launches early. Run b20-safety on any address

b20-policy-watch

Did this token BECOME seizable after launch? — The B20-only rug vector: a token can launch clean and later attach a sender blocklist (PolicyUpdated) — silently becoming seizable via burnBlocked. This reads the token's full policy/pause event timeline (CDP-indexed onchain events) plus the live policy

b20-guard

Real-time alerts the moment a B20 token turns seizable — The live layer over B20 Policy Watch: a network-wide onchain webhook captures every B20 PolicyUpdated/Paused sub-second. Pass a token address for its live guard status, or call with no address for the feed of tokens that JUST attached a sender

b20-info

Full profile of a Base-native B20 token — Complete B20 token profile straight from the precompile: variant (Asset/Stablecoin), name, symbol, decimals, total supply, supply cap, active transfer policies, pause states, and rebase. The data companion to b20-safety. Required input: address. Priced $0.02

b20-freeze-check

Is YOUR wallet blocked or seizable on this B20 token? — Checks whether a specific wallet is authorized under a B20 token's transfer-sender policy. If it isn't, that wallet can't transfer and can be burnBlocked() (SEIZED) by the issuer. The personal companion to b20-safety — 'can this token freeze MY

b20-rebase

Asset-variant rebase multiplier & scaling risk — Reads a B20 Asset token's rebase multiplier — the factor that scales every holder's balance. Flags whether balances are being scaled (invisible dilution/inflation the issuer controls). Stablecoin variants return no-rebase. Required input: address. Pri

b20-batch

Freeze/seize scan for up to 5 B20 tokens — Runs the B20 safety verdict across up to 5 B20 tokens in one call — each scored for freeze/seize/pause/rebase/uncapped-mint, with the worst score surfaced. For portfolio holders and agents screening several B20s at once. Required input: addresses. Priced $0

token-price

DEX price & liquidity for any Base token — Pass a Base token contract address and get the current USD price, 24h change, liquidity, and volume from DexScreener (highest-liquidity pair auto-selected). No API key required. Required input: address. Priced $0.02 per call over x402 on Base; send a prepai

tx-decode

Structural decode of any Base transaction — Provide a Base transaction hash and get a structured summary: from/to, ETH value, status, gas used, block, method selector, and nonce — straight from Base RPC. Required input: hash. Priced $0.02 per call over x402 on Base; send a prepaid x-credit-token hea

exit-liquidity

Can you actually get OUT of this position? — Give a Base token + a trade size in USD → estimated buy AND sell price impact, whether you can unwind that size without collapsing the pool, and the largest safe exit. The hidden form of a rug isn't 'you can't buy' — it's 'you can't sell'. Built for tradi

sellability

Can you actually SELL it — or is it a honeypot? — The hard honeypot question, answered three ways: security simulation (honeypot, cannot-sell-all, sell/buy tax, transfer-pausable), a LIVE transfer simulation we run ourselves from a real holder (reverts/taxed?), and exit liquidity. Returns a hard can

holder-forensics

Benign vs dangerous concentration — who can dump — Goes past 'top-10 = X%' to classify the holder base: how much the creator & owner still hold, which top holders are infrastructure (LP/CEX/bridge — benign) vs unlabelled wallets (the concentration that can actually dump the price), and the largest n

proxy-check

Can this contract be changed under you? — Reads the EIP-1967 proxy slots live: is the contract upgradeable, what's the current implementation, and WHO can upgrade it. Flags the dangerous case — an EOA admin that can swap the logic at any block with no timelock/multisig. Upgradeability is a rug vecto

contract-danger

What can the owner do to you? — Reads a verified contract's ABI and flags owner-callable abuse functions: mint (dilute), pause (freeze exit), blacklist (block your wallet), setFee/setTax (tax you after entry), withdraw/sweep (pull funds), upgrade (swap logic). An unverified contract is itself a red

lp-lock

Is liquidity locked, how much, until when? — Surfaces the LP holders, how much of the LP supply is locked or burned vs pullable, the lockers, and unlock dates. Unlocked liquidity is the clearest rug setup — this shows the detail a one-line 'LP locked: yes/no' hides. Required input: address. Priced $

deployer-rep

Who created this token — and can you trust them? — Profiles the token's creator wallet: how much history it has, how much of the supply the creator still holds, and whether ownership is renounced — rolled into a 0-100 reputation score with signals. A fresh wallet holding 20% of supply with no renoun

swap-route

Where to trade it, the impact, and whether it's safe to receive — Give a token and a trade size in USD → the deepest Base pool to route through, estimated price impact, a suggested slippage tolerance + minimum-out, all gated on a honeypot/sell-tax check of the token you'd receive (no point routing i

token-unlock

When does locked LP unlock — is a cliff coming? — Turns raw LP-lock data into a forward calendar: each unlock with its date, the % of LP it frees, the locker (UNCX / Team Finance labelled), and days away — flagging imminent unlocks (<30 days). An LP unlock is a scheduled price event: the moment a ru

volume-check

Is this trading volume real — or painted on by bots? — Reads the deepest pool's 24h volume, buy/sell counts, liquidity and price move, and scores how organic the activity looks. Volume 10x+ the pool's liquidity, near-perfect buy/sell symmetry, or big volume that moves the price nowhere are the class

position-health

You're IN the token — should you stay in? — The post-trade check everything else skips: given a token, your position size and (optionally) entry price, returns live price & P&L, whether the position can still be EXITED at that size, and the token's current rug score — combined into a healthy / watch

token-compare

2-5 candidates in, one ranked pick out — Agents choose between tokens, not around them. Pass 2-5 Base token addresses → each gets a 0-100 quality score (safety-weighted: rug score first, then liquidity depth, then momentum), ranked best-first, with a named pick — or an honest 'none pass the gate'. O

revoke-builder

The exact ready-to-sign tx that kills an approval — approval-advisor tells you WHAT to revoke; this builds the HOW: the ready-to-sign transaction (to + calldata) for approve(spender, 0) on a token, plus the live current allowance read from Base (flags unlimited, or 'already revoked'). Hand the resul

approval-advisor

Which approvals could drain you — and revoke order — Ranks a wallet's active token approvals by USD-at-risk x unlimited-allowance x unlabelled-spender, and returns a prioritised revoke queue. Approvals are the #1 drain vector; this tells an agent exactly what to revoke first. Required input: address

portfolio-scan

Audit a whole wallet — which holdings could hurt you — Pulls a wallet's holdings and runs a risk check on each, flagging which positions are honeypots / high-risk / illiquid and the USD sitting in risky tokens. One call audits the whole wallet — 'which of the things you already hold could hurt you'.

rug-monitor

Get alerted the moment liquidity is pulled — Pay once to watch a Base token's liquidity. We snapshot a baseline and, on each monitor run, POST your webhook if liquidity collapses (a liquidity pull — the actual moment of a rug). Not price moving — the pool being drained out from under you. Expires af

deep-dd

Institutional-grade full report on a Base token — one call — The premium flagship. One call runs the FULL battery — contract risk, holder concentration, liquidity depth, EXIT liquidity (can you actually sell), OFAC sanctions — and Claude synthesizes an institutional verdict: safety score, explicit b

wallet-tokens

ETH + major Base token balances with USD values — Returns native ETH plus WETH, USDC, USDbC, DAI, cbETH balances for any Base address, enriched with live USD values via DexScreener. Only non-zero holdings are returned. Required input: address. Priced $0.02 per call over x402 on Base; send a prepaid

trending-tokens

Currently boosted/promoted Base tokens — Fetches the DexScreener boosts feed filtered to Base — up to 15 trending tokens with address, description, boost amount, and link. Great for discovery bots. Priced $0.01 per call over x402 on Base; send a prepaid x-credit-token header for unlimited calls, or

price-alert

Webhook when a Base token crosses your target — Pay once to register a price-threshold alert on any Base token. Supply target price, direction (above/below), and an https webhook URL. A polling cron (daily by default; configurable to ~minutes) checks DexScreener and POSTs your webhook when it crosse

contract-abi

Is this Base contract verified? Get its ABI — Checks Sourcify for a Base contract's verification status and returns its ABI as function/event name lists + item count (full or partial match). No API key required. Required input: address. Priced $0.02 per call over x402 on Base; send a prepaid x-credi

decode-selector

Turn a function selector into readable signatures — Resolves a 4-byte function selector (e.g. 0x70a08231) to candidate human-readable signatures via 4byte.directory. Accepts a bare selector or full calldata. Required input: selector. Priced $0.01 per call over x402 on Base; send a prepaid x-credit-t

basename

Resolve names ↔ addresses on Base — Forward + reverse Basename resolution read from the Base L2 Resolver: turn jesse.base.eth into an address, or an address into its primary Basename. No API key required. Required input: query. Priced $0.01 per call over x402 on Base; send a prepaid x-credit-token h

token-pools

All DEX pools for a token, deepest first — Lists every DEX pool for a Base token (pair address, DEX, quote symbol, price, liquidity, 24h volume), sorted by liquidity. Tells agents where — and how deep — a token can be traded. Required input: address. Priced $0.02 per call over x402 on Base; send a p

ens-resolve

Resolve .eth names ↔ addresses (Ethereum) — Forward + reverse ENS resolution on Ethereum mainnet: turn vitalik.eth into an address, or an address into its primary ENS name. Complements the Basename resolver for Base. Required input: query. Priced $0.01 per call over x402 on Base; send a prepaid x-cr

encode-selector

Function signature → 4-byte selector — Computes the 4-byte selector for a function signature (e.g. transfer(address,uint256) → 0xa9059cbb). The inverse of the decoder — useful for agents building or matching calldata. Required input: signature. Priced $0.01 per call over x402 on Base; send a prepaid

sanctions

Is this address OFAC-sanctioned? — Checks an address against the OFAC SDN list of sanctioned digital-currency addresses. Built for compliance agents and bots that must screen counterparties before transacting. Direct-address match; list refreshed regularly. No API key required. Required input: addre

holders

Top holders, concentration & LP lock — Top-10 holders with their %, holder count, concentration level (whale risk), and LP-lock %, from GoPlus. Lets agents judge how fairly a token is distributed before trading. No API key required. Required input: address. Priced $0.02 per call over x402 on Base; s

multi-price

Prices for up to 10 Base tokens at once — Pass a comma-separated list of up to 10 Base token addresses and get USD price + 24h change for each in one call. Ideal for agents pricing a portfolio or watchlist. Required input: addresses. Priced $0.02 per call over x402 on Base; send a prepaid x-credit-t

compliance-check

OFAC + profile + risk → one verdict — Combined counterparty screening for an address: direct OFAC sanctions match, EOA/contract profile, and (for contracts) risk flags — rolled into a single recommendation (blocked / review / clear). Built for compliance agents. Required input: address. Priced $0.03

sanctions-batch

Screen up to 25 addresses against OFAC at once — Pass a comma-separated list of up to 25 addresses and get an OFAC sanctions result for each, plus the flagged subset. Built for compliance agents vetting whole counterparty lists in one call. Required input: addresses. Priced $0.03 per call over x402

pair-info

Pool price, liquidity, volume & buy/sell counts — Given a Base DEX pair (pool) address, returns price, liquidity, 24h volume, buy/sell transaction counts and FDV from DexScreener. For agents analysing a specific pool's depth and activity. Required input: pair. Priced $0.02 per call over x402 on Base

rug-score

One 0-100 risk gate (security + holders + liquidity) — Deterministic 0-100 rug-probability score combining security flags, holder concentration, LP lock and liquidity depth — with the exact signals that drove it. A fast numeric gate for trading agents. Higher = riskier. Required input: address. Pric

batch-risk

Rug-score up to 10 tokens in one call — Screen up to 10 Base tokens in a single paid call — each gets a 0-100 rug-probability score, risk level and top signals, sorted riskiest-first. Built for agents triaging a watchlist or portfolio without paying per token. Required input: addresses. Priced $0.08

token-momentum

Price & volume trend across 1h / 6h / 24h — Price change and trading volume across 1h, 6h and 24h windows for a Base token, plus a trend read (strong_up → strong_down). Lets agents gauge momentum, not just a single 24h number. Required input: address. Priced $0.02 per call over x402 on Base; send a

token-info

Name, logo, website & socials for a token — Metadata for a Base token: name, symbol, logo image, official website and social links (X/Telegram/etc.) plus price & liquidity — from DexScreener. For agents and UIs enriching a token. Required input: address. Priced $0.01 per call over x402 on Base; send

chain-status

Block, base fee, ETH price & transfer cost in USD — Live Base chain snapshot: latest block, base fee + priority fee (Gwei), current ETH price, and the estimated USD cost of a simple ETH transfer. For agents timing or budgeting transactions. Priced $0.01 per call over x402 on Base; send a prepaid x-c

new-tokens

Freshly listed/profiled tokens on Base — Returns the latest tokens profiled on Base from the DexScreener feed — address, description, and links. Great for discovery bots hunting new launches early. Priced $0.01 per call over x402 on Base; send a prepaid x-credit-token header for unlimited calls, or

nft-floor

Live floor price for a Base NFT collection — Current floor price for a Base NFT collection (OpenSea / LooksRare) via Alchemy. Pass the collection contract address. Coverage is limited to marketplace-listed collections. For agents tracking NFT markets. Required input: contract. Priced $0.02 per call

wallet-portfolio

All ERC-20 holdings of a wallet with USD value — Complete ERC-20 portfolio for a Base address — every non-zero token with balance, metadata and live USD value, plus a total. Token discovery via CDP Data API (Coinbase) with Alchemy fallback; USD from DexScreener. Required input: address. Priced $0.02

wallet-networth

All tokens + USD value (reliable pricing) — Complete token portfolio for a Base address with USD values: every ERC-20 the wallet holds, priced from live DEX liquidity, plus native ETH — sorted by value with a total. Holdings nobody quotes are listed and counted separately rather than silently valued

wallet-summary

Tx count, first/last activity, wallet age — Wallet age in days, first & last activity timestamps, and outgoing transaction count for any Base address — read straight from the Base archive, not a 30-day feed, so it dates wallets of any age. Counts and last-activity cover what the wallet SENT; inbound

wallet-activity

Recent transactions for an address — The latest transactions for a Base address — hash, time, from/to, ETH value, success — via Covalent. For agents tracking what a wallet is doing. Required input: address. Priced $0.03 per call over x402 on Base; send a prepaid x-credit-token header for unlimited c

token-transfers

A wallet's in/out transfers of a token — Recent transfers of a specific token for a wallet — direction (in/out), amount, USD value, counterparty, tx hash and time, via Covalent. For agents tracking token flows and cost basis. Required inputs: address, token. Priced $0.03 per call over x402 on Base;

ai-token-report

Claude-written due-diligence verdict for a Base token — The flagship report: aggregates token risk, holder concentration, price/liquidity and OFAC sanctions, then Claude synthesizes a structured verdict (avoid → favorable) with key risks and positives. One call, agent-ready intelligence you can't ge

37 further tools are not listed here. The complete surface is in the source.

// quality suggestions

Destructive tools are labelled

4 tools sound destructive but lacks a destructiveHint annotation: morpho-health, morpho-liquidatable, b20-access-type

Add destructiveHint:true to any tool whose handler calls .delete(), .upsert(), .update(), unlink, rm, DELETE, DROP, REPLACE INTO, or any operation that overwrites existing data.

All four hints declared on every tool

137/137 tools missing one or more hints — token-risk (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); pre-trade-gate (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); sign-guard (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint), +134 more. OpenAI's directory rejects tools where any hint is missing or non-boolean.

For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.

Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.

// full audit trail
The findings above are the summary. The full trail, every check we ran, each deduction, the network hosts observed and the dependency advisories, goes to verified publishers, along with an alert whenever a new one lands. Verified publishers can also review each finding and dispute it in one click. Publisher corrections have sharpened several of our checks this month, because the maintainer knows the codebase better than any scanner.
// improvement guidance — verified publishers only
We have 2 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Verified](https://m8ven.ai/badge/mcp/sukrutkrdg/x402-bazaar-mcp?variant=verified)](https://m8ven.ai/mcp/sukrutkrdg/x402-bazaar-mcp)
Shows verification status without the grade. Want the grade badge instead? Remove ?variant=verified from the URL.
code hash: d32dcb695a1b2ed344572a612bf34827d71781a5fd26e30f605b281bcec3d30e
view raw JSON →
Check MCPs from inside your assistant
Tool Check · MCP

Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.

https://m8ven.ai/api/mcp/tool-check
check_toolsearch_toolscompare_toolsrecommend_alternativescheck_publisherreport_concern
How to add it →Free · no account needed · works in any MCP client