Tech Risk Enrichment

https://x402-data-api.sigrunner.workers.dev/defi/yields

● healthy model-context-protocol-mcp

Enriches a tech stack with CVE, EPSS, and CISA-KEV security findings, billed per query in USDC.

Paid verification

No sponsored paid call yet.

Pay this endpoint once from your own wallet (Base USDC, up to $1.00) and we call it and record what came back. Your wallet pays the listed recipient directly; Agent Tools never holds funds. Sponsored checks prove delivery; they do not count as demand.

Quality grade

How grading works

A 70.2 / 100

Availability 20.0 / 20

Endpoint responded (HTTP 200)

Payability 15.0 / 15

✓ Answers a real HTTP 402 challenge
✓ Publishes a /.well-known/x402 descriptor
✓ Payment address on record
✓ Settlement network declared
✓ Price declared

Demand 12.2 / 35

66 distinct payers, 893 USDC transfers in the last 30 days; the wallet is shared by 11 listings, so each is credited 1/11

Performance 10.0 / 10

Last probe answered in 122 ms (full marks at 200 ms or less)

Readiness 13.0 / 15

Agent readiness 87/100

Owner verified 0.0 / 5

Nobody has claimed this listing yet

Endpoint last checked 19 h ago. On-chain activity last read 3 d ago. Availability and on-chain demand are both re-probed daily; the grade updates automatically on the next pass. This grade sets search order and leaderboards; the readiness score below is shown for reference only.

x402 readiness

B · 87/100

Readiness is how fully this listing follows its protocol and how it behaved in our probes over 30 days. It is shown for reference and does not move it in search. Search order and leaderboards use the separate quality grade (here A, 70.2/100), which weighs availability, payability and on-chain demand. How the two differ

Valid payment requirements	10/10	Payment requirements carry a payee, a mainnet network and a price.
Live 402 challenge	20/25	Endpoint reachable; its 402 challenge was seen earlier (122 ms).
x402 version	n/a	x402 version not observed yet.
Signed descriptor	n/a	No x402 standard defines a signed descriptor.
Uptime (30 days)	15/15	32/32 probes succeeded over 30 days (100%).
Resource declaration	10/10	Declares 75 paid resource(s).
Verified identity	5/10	Publisher descriptor (/.well-known/x402 or OpenAPI) on record; claim this listing to verify domain control.
Freshness + modern flags	5/5	seen in a source within 7 days; declares x402.
Security declaration	n/a	Payment is the access control for an x402 resource.

Applicable criteria total 75 points, scaled to 100.

Responsiveness: Responsive (122 ms; bands ≤2.5 s, ≤5 s, ≤8 s, slower; penalty only).

Payment evidence: x402_challenge — We sent a request and got a live HTTP 402 challenge. Also: x402_manifest, catalog_listing. Qualifies the payment claim; adds no points.

Measured 2026-11-11.

Nine criteria, the same as the A2A readiness score, read from our daily probe of the paid endpoint, its payment requirements and 30-day probe history. Signed descriptor and security declaration are n/a for x402 (payment is the access control), as is an x402 version we have not observed; the remaining points are scaled to 100. Grades: A>=90, B>=75, C>=60, D>=40, F<40. It also feeds 15 points of the x402 quality grade.

Compared with peers

Against 10,082 reachable x402 APIs in our daily snapshot (2026-11-12 06:46 UTC). Display only; it does not change search order.

Readiness: Higher than 75% of peers; This listing 87 · peer median 78
Latency: Faster than 78% of peers; This listing 122 ms · peer median 205 ms

Where it loses the most points, and how to win them back

Live 402 challenge −5 — Answer the paid path with a valid 402 challenge.
Now: Endpoint reachable; its 402 challenge was seen earlier (122 ms).
Verified identity −5 — Claim the listing and prove control of its domain.
Now: Publisher descriptor (/.well-known/x402 or OpenAPI) on record; claim this listing to verify domain control.

How many agent tools actually work · All statistics

Paid endpoints

75 resource(s) advertised by this origin. Each price below is that resource's own x402 price; the headline price is the range across them.

GET https://x402-data-api.sigrunner.workers.dev/defi/yields $0.0010 / call

Decision-tagged DeFi lending/LP yields — every pool row carries a per-pool verdict (SUSTAINABLE|DECAYING|OUTLIER|AVOID) + 0-100 risk_score, so you rank by go/no-go not just raw APY (raw yield feeds don't). Plus project, chain, symbol, pool id, 1d/7d/30d APY trend, IL risk (il7d), reward/underlying t

GET https://x402-data-api.sigrunner.workers.dev/crypto/prices $0.0010 / call

Spot token prices from DefiLlama — pass comma-separated ticker symbols or CoinGecko ids, get price/change_24h/symbol/confidence/timestamp.

GET https://x402-data-api.sigrunner.workers.dev/gate/swap $0.0080 / call

Is this Base token safe to swap right now? GO / HOLD / BLOCK pre-trade safety gate for autonomous trading agents: is it a honeypot, can you sell it, and is your trade too big for the pool? Honeypot/sellability + admin-control checks + Uniswap v3 liquidity vs. your notional — one decision + reason in

GET https://x402-data-api.sigrunner.workers.dev/chain/token-report $0.0100 / call

Is this Base token safe to buy? One call returns a trade-safety verdict — SAFE | CAUTION | AVOID — with risk_score (0-100) and reasons: honeypot/sellability simulation, owner-renounced + mint/pause/blacklist/fee-setter/upgradeable-proxy checks, measured transfer tax, symbol/name/decimals, and Uniswa

GET https://x402-data-api.sigrunner.workers.dev/pm/markets $0.0050 / call

Live Polymarket prediction markets — question, outcomes, bestBid/bestAsk/spread, volume24hr/volume1wk, oneDayPriceChange, clobTokenIds, conditionId, category tags, liquidity, end date. Ranked by volume24hr; filter by keyword.

GET https://x402-data-api.sigrunner.workers.dev/chain/gas-price $0.0020 / call

Current Base mainnet gas price (wei/gwei), EIP-1559 base_fee_gwei/priority_fee_gwei, and gas_price_usd — no price oracle on ETH-only competitors.

GET https://x402-data-api.sigrunner.workers.dev/chain/balance $0.0020 / call

ETH balance of a Base mainnet address, incl. balance_usd (internal ETH price cross-call).

GET https://x402-data-api.sigrunner.workers.dev/chain/token-balance $0.0020 / call

ERC-20 token balance of a Base mainnet address, incl. symbol, decimals, balance_formatted.

GET https://x402-data-api.sigrunner.workers.dev/chain/erc20-meta $0.0020 / call

ERC-20 metadata on Base: name, symbol, decimals, totalSupply for any token contract.

GET https://x402-data-api.sigrunner.workers.dev/chain/proxy-info $0.0020 / call

EIP-1967 proxy resolver for a Base contract: returns implementation, admin and beacon addresses (read from the standard storage slots) plus is_proxy flag. Use when an agent must know what code actually runs behind a proxy before trusting or calling it.

GET https://x402-data-api.sigrunner.workers.dev/chain/block $0.0020 / call

Base block summary by number or latest: hash, timestamp, tx count, gas used/limit, base fee.

GET https://x402-data-api.sigrunner.workers.dev/chain/token-security $0.0090 / call

Is this Base token a scam or rug pull? Honeypot detector for a Base ERC-20: EIP-1967 proxy + upgradeability check, bytecode scan for mint/pause/blacklist/fee-setter/ownership, owner() renouncement, contract source-verification (Sourcify), and a live eth_call state-override sim proving a real wallet

GET https://x402-data-api.sigrunner.workers.dev/chain/block-number $0.0020 / call

Current Base mainnet block number.

GET https://x402-data-api.sigrunner.workers.dev/chain/tx $0.0050 / call

Transaction details by hash on Base mainnet.

GET https://x402-data-api.sigrunner.workers.dev/chain/receipt $0.0050 / call

Transaction receipt by hash on Base mainnet — status, gas used, full logs, and the L1 fee breakdown (l1_fee_wei, l1_gas_price_wei, l1_gas_used, effective_gas_price_wei) + l1_fee_usd/total_fee_usd an ETH-only competitor can't offer.

GET https://x402-data-api.sigrunner.workers.dev/chain/code $0.0020 / call

Contract-code check for a Base mainnet address (is_contract + code size + EIP-7702 delegated-EOA detection).

GET https://x402-data-api.sigrunner.workers.dev/chain/nonce $0.0020 / call

Transaction count (nonce) for a Base address, latest and pending.

GET https://x402-data-api.sigrunner.workers.dev/chain/is-contract $0.0020 / call

Is a Base address a smart contract or an EOA (is_contract + bytecode size).

GET https://x402-data-api.sigrunner.workers.dev/chain/total-supply $0.0020 / call

ERC-20 total supply on Base (raw + formatted, with symbol and decimals).

GET https://x402-data-api.sigrunner.workers.dev/chain/storage-at $0.0020 / call

Raw storage slot read (eth_getStorageAt) for any Base contract; slot defaults to 0x0. Use when an agent needs proxy implementation/admin slots or raw contract state.

GET https://x402-data-api.sigrunner.workers.dev/chain/allowance $0.0020 / call

ERC-20 allowance(owner, spender) on Base, raw + formatted, flags unlimited approvals.

GET https://x402-data-api.sigrunner.workers.dev/crypto/fear-greed $0.0020 / call

Crypto Fear & Greed Index (alternative.me): current value 0-100, classification, history of last N days. No params. Use when an agent needs a market-sentiment gauge.

GET https://x402-data-api.sigrunner.workers.dev/defi/fees-top $0.0030 / call

Top DeFi protocols by 24h fees (DefiLlama): name, 24h/7d fees USD, 1d change, plus market total. No params. Use when an agent needs which protocols earn the most.

GET https://x402-data-api.sigrunner.workers.dev/ai/ask $0.0020 / call

Cheap LLM answer (Llama 3.2 3B on Workers AI): ?q=<prompt up to 500 chars>, returns concise text. Pay-per-call, no API key.

GET https://x402-data-api.sigrunner.workers.dev/chain/wallet $0.0030 / call

Wallet screening bundle (balance, activity, contract vs EOA check): ETH balance + balance_usd (internal ETH price cross-call) + tx count + contract-code check (EIP-7702 delegated-EOA aware) for a Base mainnet address, in one call.

GET https://x402-data-api.sigrunner.workers.dev/crypto/funding $0.0040 / call

6-venue perp funding rates — Binance+Bybit+OKX+Hyperliquid+dYdX+Gate — top coins by 24h volume, per-venue funding + per-venue open interest (USD) + OI-weighted CEX↔DEX arb verdict (thin-book venues excluded so cheapest-long/richest-short is executable, not a mirage), premium/basis, annualized_hl/okx

GET https://x402-data-api.sigrunner.workers.dev/scan/mcp $0.0500 / call

Security scan of a target MCP server: audits every advertised tool for prompt-injection / tool-poisoning / exfiltration / dangerous-capability / hidden-unicode (OWASP LLM01/LLM08). Returns findings + risk score + verdict (clear/review/block).

GET https://x402-data-api.sigrunner.workers.dev/enrich/tech-risk $0.0100 / call

Tech-stack fingerprint -> CVE (NVD) + EPSS + CISA-KEV attack-surface risk + verdict (clear/review/block) for a domain.

GET https://x402-data-api.sigrunner.workers.dev/security/epss-movers $0.0100 / call

EPSS velocity feed — not a point lookup. Scans the top-N CVEs by current exploit probability (EPSS) and returns WHAT MOVED: rising[] (Δepss over 7d), crossed_action_level[] (just passed the 0.5 patch threshold), new_kev_high_epss[] (CISA known-exploited AND high EPSS), and top_movers[] ranked by |Δ7

GET https://x402-data-api.sigrunner.workers.dev/enrich/domain $0.0100 / call

Firmographic + tech-stack enrichment for a domain, incl. full subdomain enumeration via certificate-transparency logs (crt.sh, RDAP, DoH, HTTP fingerprint) + verdict (clear/review/block, based on domain age).

GET https://x402-data-api.sigrunner.workers.dev/chain/simulate $0.0050 / call

Will this Base transaction revert? Prospective-tx dry-run via eth_simulateV1: pass ?from=&to=&data=&value= and get will_revert + revert_reason + gas_used + token asset_changes BEFORE the agent spends gas sending it. Keyless, Base-native, per-call — Tenderly/Alchemy-class output with no API key or si

GET https://x402-data-api.sigrunner.workers.dev/chain/fee-estimate $0.0040 / call

Base EIP-1559 fee estimate: base fee, suggested priority fee, max-fee tiers (slow/standard/fast) in gwei and a 21k-gas transfer cost.

GET https://x402-data-api.sigrunner.workers.dev/chain/network-status $0.0040 / call

Base network status snapshot: chain id, latest block, block age, gas used ratio and tx count.

GET https://x402-data-api.sigrunner.workers.dev/chain/l1-base-fee $0.0040 / call

Ethereum L1 base fee as seen by Base's GasPriceOracle (wei/gwei) plus estimated L1 data fee for a simple transfer.

GET https://x402-data-api.sigrunner.workers.dev/chain/fee-history $0.0040 / call

Base fee history for the last 10 blocks: base fee per block (gwei), gas-used ratios and a min/max/avg summary. Use when an agent times transactions around cheap blocks.

GET https://x402-data-api.sigrunner.workers.dev/chain/blob-base-fee $0.0040 / call

Base EIP-4844 blob base fee from the GasPriceOracle (wei/gwei). Use when an agent estimates L1 data-availability cost for Base batches.

GET https://x402-data-api.sigrunner.workers.dev/chain/eth-usd $0.0010 / call

Base ETH/USD spot price from the Chainlink aggregator (price, round, updatedAt, staleness). Use when an agent needs a trusted on-chain ETH price.

GET https://x402-data-api.sigrunner.workers.dev/chain/btc-usd $0.0010 / call

Base BTC/USD spot price from the Chainlink aggregator (price, round, updatedAt, staleness). Use when an agent needs a trusted on-chain BTC price.

GET https://x402-data-api.sigrunner.workers.dev/chain/prices $0.0010 / call

Base crypto price snapshot in one call: BTC, ETH, LINK and SOL USD spot from Chainlink aggregators with per-feed staleness. Use when an agent needs a multi-asset trusted on-chain price board.

GET https://x402-data-api.sigrunner.workers.dev/chain/sol-usd $0.0010 / call

Base SOL/USD spot price from the Chainlink aggregator (price, round, updatedAt, staleness). Use when an agent needs a trusted on-chain SOL price.

GET https://x402-data-api.sigrunner.workers.dev/chain/link-usd $0.0010 / call

Base LINK/USD spot price from the Chainlink aggregator (price, round, updatedAt, staleness). Use when an agent needs a trusted on-chain LINK price.

GET https://x402-data-api.sigrunner.workers.dev/defi/chains-tvl $0.0040 / call

Top blockchains ranked by total DeFi TVL (DefiLlama): name, TVL USD, gas token. No params. Use when an agent needs a quick map of where DeFi capital sits.

GET https://x402-data-api.sigrunner.workers.dev/crypto/stablecoins $0.0040 / call

Top stablecoins by circulating supply (DefiLlama): name, symbol, price, peg type, circulating USD. No params. Use when an agent needs stablecoin supply and depeg checks.

GET https://x402-data-api.sigrunner.workers.dev/defi/protocols-top $0.0040 / call

Top DeFi protocols by TVL (DefiLlama): name, category, TVL USD, 1d/7d change, chain. No params. Use when an agent needs a ranked protocol league table.

GET https://x402-data-api.sigrunner.workers.dev/defi/dex-volume $0.0040 / call

Top DEXs by 24h trading volume (DefiLlama): name, 24h/7d volume USD, 1d change, plus market total. No params. Use when an agent needs where on-chain swap volume is flowing.

GET https://x402-data-api.sigrunner.workers.dev/crypto/trending $0.0040 / call

Trending coins on CoinGecko right now: name, symbol, market-cap rank, 24h price change. No params. Use when an agent needs what the market is searching for.

GET https://x402-data-api.sigrunner.workers.dev/crypto/global $0.0040 / call

Global crypto market stats (CoinGecko): total market cap, 24h volume, BTC/ETH dominance, active coins. No params. Use when an agent needs a one-call market overview.

GET https://x402-data-api.sigrunner.workers.dev/crypto/markets-top $0.0040 / call

Top coins by market cap (CoinGecko): price, market cap, 24h volume, 24h change; ?limit= up to 100. No required params. Use when an agent needs a ranked market snapshot.

GET https://x402-data-api.sigrunner.workers.dev/crypto/movers $0.0040 / call

Top 24h gainers and losers among the top-100 coins (CoinGecko). No params. Use when an agent needs what is moving the market right now.

GET https://x402-data-api.sigrunner.workers.dev/brief/market $0.0100 / call

One-call crypto market brief: Fear & Greed, global market cap/dominance, top movers, trending coins and top DeFi fee earners. No params. Use when an agent needs a full market snapshot in a single payment.

How to call

cURL · x402-fetch / x402-axios will auto-handle 402

curl -sS -i -X GET https://x402-data-api.sigrunner.workers.dev/defi/yields  # expect HTTP 402 Payment Required (about 0.001 USDC/call)

MCP endpoint

https://x402-data-api.sigrunner.workers.dev/mcp

/.well-known/x402.json

https://x402-data-api.sigrunner.workers.dev/.well-known/x402

Listed in

Directories this entry was found in.

mcp since 2026-07-17 awesome-x402 since 2026-07-28 x402scan since 2026-09-13 a2a since 2026-10-08 x402 since 2026-10-08 submission since 2026-11-05 ↗