Back to directory

Automaton Token Safety

https://api.automatonsvrn.xyz/v2/security/scan
● healthy model-context-protocol-mcp

Base L2 token safety for AI agents: honeypot scans, swap simulation, approval and liquidity risk.

Category
model-context-protocol-mcp
Chains
base
Price
$0.0010 USDC / call

Quality grade

How grading works
B+ 65.4 / 100
Availability 20.0 / 20
Endpoint responded (HTTP 200)
Payability 15.0 / 15
  • ✓ Answers a real HTTP 402 challenge
  • ✓ Publishes a /.well-known/x402 descriptor
  • ✓ Payment address on record
  • ✓ Settlement network declared
  • ✓ Price declared
Demand 13.8 / 35
28 distinct payers, 319 USDC transfers in the last 30 days; the wallet is shared by 3 listings, so each is credited 1/3
Performance 4.4 / 10
Last probe answered in 1208 ms (full marks at 200 ms or less)
Readiness 12.2 / 15
Agent readiness 81/100
Owner verified 0.0 / 5
Nobody has claimed this listing yet
Endpoint last checked 20 h ago. On-chain activity last read 3 d ago. Availability and on-chain demand are both re-probed daily; the grade updates automatically on the next pass. This grade sets search order and leaderboards; the readiness score below is shown for reference only.

x402 readiness

B · 81/100

Readiness is how fully this listing follows its protocol and how it behaved in our probes over 30 days. It is shown for reference and does not move it in search. Search order and leaderboards use the separate quality grade (here B+, 65.4/100), which weighs availability, payability and on-chain demand. How the two differ

Valid payment requirements 10/10 Payment requirements carry a payee, a mainnet network and a price.
Live 402 challenge 20/25 Endpoint reachable; its 402 challenge was seen earlier (1208 ms).
x402 version n/a x402 version not observed yet.
Signed descriptor n/a No x402 standard defines a signed descriptor.
Uptime (30 days) 15/15 32/32 probes succeeded over 30 days (100%).
Resource declaration 10/10 Declares 17 paid resource(s).
Verified identity 5/10 Publisher descriptor (/.well-known/x402 or OpenAPI) on record; claim this listing to verify domain control.
Freshness + modern flags 1/5 not seen in a source for over 30 days; declares x402.
Security declaration n/a Payment is the access control for an x402 resource.
Applicable criteria total 75 points, scaled to 100.
Responsiveness: Responsive (1208 ms; bands ≤2.5 s, ≤5 s, ≤8 s, slower; penalty only).
Payment evidence: x402_challenge — We sent a request and got a live HTTP 402 challenge. Also: x402_manifest. Qualifies the payment claim; adds no points.
Measured 2026-11-11.
Nine criteria, the same as the A2A readiness score, read from our daily probe of the paid endpoint, its payment requirements and 30-day probe history. Signed descriptor and security declaration are n/a for x402 (payment is the access control), as is an x402 version we have not observed; the remaining points are scaled to 100. Grades: A>=90, B>=75, C>=60, D>=40, F<40. It also feeds 15 points of the x402 quality grade.

Compared with peers

Against 10,082 reachable x402 APIs in our daily snapshot (2026-11-12 06:46 UTC). Display only; it does not change search order.

Readiness
Higher than 60% of peers
This listing 81 · peer median 78
Latency
Faster than 5% of peers
This listing 1,208 ms · peer median 205 ms

Where it loses the most points, and how to win them back

  • Live 402 challenge −5 — Answer the paid path with a valid 402 challenge.
    Now: Endpoint reachable; its 402 challenge was seen earlier (1208 ms).
  • Verified identity −5 — Claim the listing and prove control of its domain.
    Now: Publisher descriptor (/.well-known/x402 or OpenAPI) on record; claim this listing to verify domain control.
  • Freshness + modern flags −4 — Keep the listing current in the registry or source it comes from.
    Now: not seen in a source for over 30 days; declares x402.

How many agent tools actually work · All statistics

Paid endpoints

17 resource(s) advertised by this origin. Each price below is that resource's own x402 price; the headline price is the range across them.

GET https://api.automatonsvrn.xyz/v2/security/scan

Pre-flight EVM bytecode analysis: honeypot detection, hidden mint backdoors, transfer restrictions & algorithmic risk score on Base L2.

POST https://api.automatonsvrn.xyz/v2/token/simulate

Dry-run transaction simulation on Base RPC: measures transfer taxes, slippage, and execution traps without signing or spending gas.

POST https://api.automatonsvrn.xyz/v2/token/approval-risk

Audit ERC-20 allowances, drain risk, and unlimited approvals for token and spender addresses on Base.

POST https://api.automatonsvrn.xyz/v2/token/liquidity-risk

DEX pool depth analysis, price impact (2% move USD), and reserve concentration on Base Uniswap v2/v3 and Aerodrome.

GET https://api.automatonsvrn.xyz/v2/sentinel/latest

Latest Base liquidity pools detected and analyzed across Uniswap v3/v4 & Aerodrome with real EVM bytecode audit verdicts.

GET https://api.automatonsvrn.xyz/v1/hash

Deterministic SHA-256 digest of a supplied string. Stateless utility; the digest is computed, never stored.

GET https://api.automatonsvrn.xyz/v1/echo

Returns the supplied message together with the server timestamp: a liveness and clock-skew probe for an agent that must trust a remote timestamp.

GET https://api.automatonsvrn.xyz/v1/uuid

A single RFC 4122 version 4 identifier, generated per call.

GET https://api.automatonsvrn.xyz/v1/random

One uniformly distributed integer between min and max inclusive.

GET|POST https://api.automatonsvrn.xyz/v2/attest

Writes a signed entry into the hash-chained proof-of-existence ledger and returns it. Each entry commits to its predecessor, so the chain can be verified end to end.

POST https://api.automatonsvrn.xyz/v2/batch

Commits up to 1000 items under ONE signed Merkle root instead of one ledger entry per item: the cheaper way to prove many records existed.

GET https://api.automatonsvrn.xyz/v2/oracle/base

Base Mainnet gas and price readings under an ECDSA P-256 signature, so the answer can be verified offline and cannot be silently altered in transit.

POST https://api.automatonsvrn.xyz/v2/merkle/prove

Inclusion proof for one item of a committed batch, returned together with the signed root.

GET https://api.automatonsvrn.xyz/v2/sentiment

Composite index for one asset with a signed verdict: on-chain risk, liquidity and sentiment readings in a single call.

GET|POST https://api.automatonsvrn.xyz/v2/simulate

Read-only Base Mainnet dry-run of arbitrary calldata: whether it reverts, the decoded revert reason (Error/Panic/custom), estimated gas and return data. No transaction is signed or sent. The same dry-run is also served free by the local MCP tool `simulate_base_transaction`; the HTTP route is the hos

POST https://api.automatonsvrn.xyz/v2/firewall/simulate-tx

Pre-flight transaction simulation with anti-revert check, honeypot detection, and MEV safe slippage bounds.

POST https://api.automatonsvrn.xyz/v2/security/preflight

Alias for /v2/firewall/simulate-tx: Pre-flight transaction simulation & protection.

How to call

cURL · x402-fetch / x402-axios will auto-handle 402
curl -sS -i -X GET https://api.automatonsvrn.xyz/v2/security/scan  # expect HTTP 402 Payment Required (about 0.001 USDC/call)
MCP endpoint
https://api.automaton-sovereign.workers.dev/mcp
/.well-known/x402.json
https://api.automatonsvrn.xyz/.well-known/x402

Listed in

Directories this entry was found in.

mcp since 2026-10-08 x402 since 2026-10-09