Back to Browse

Cryptorisk Api MCP Server

Developer ToolsModerate7.2MCP RegistryRemote
Free

Server data from the Official MCP Registry

Free wallet lookup, ENS resolve, entity labels, caller ID. Paid x402 web search and scrape.

About

Free wallet lookup, ENS resolve, entity labels, caller ID. Paid x402 web search and scrape.

Remote endpoints: streamable-http: https://uxus.finance/api/mcp

Security Report

7.2
Moderate7.2Low Risk

Valid MCP server (3 strong, 4 medium validity signals). 6 known CVEs in dependencies Imported from the Official MCP Registry. 1 finding(s) downgraded by scanner intelligence.

Endpoint verified · Open access · 7 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Found in Source Code

Found by scanning the linked source code. This listing connects to a hosted endpoint, so none of this runs on your machine: it describes what the server software does where it is hosted.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Applies to the server that hosts this plugin, not to your machine.

How to Connect

Remote Plugin

No local installation needed. Your AI client connects to the remote endpoint directly.

Add this to your MCP configuration to connect:

{
  "mcpServers": {
    "io-github-dcroyalty-uxus": {
      "url": "https://uxus.finance/api/mcp"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

UXUS — Agent Services

Pay-per-call primitives for AI agents, live at uxus.finance. Paid in USDC on Base via the x402 protocol — no accounts, no API keys, no signup. A funded wallet is the whole integration.

Services

EndpointPriceWhat you get
POST /api/llm$0.01LLM completion, 5-model fallback chain
GET /api/scrape$0.01URL → clean markdown/text/html
POST /api/extract$0.01messy text/URL → JSON in your schema
POST /api/embed$0.01text → 1024-dim vectors (jina-embeddings-v3)
GET /api/search$0.01live web search
GET /api/risk/pro$0.02one call, one verdict: PROCEED / CAUTION / BLOCK + summary + reasons
GET /api/risk/live/pro$0.02one-call verdict on a token's owner powers (can it still be paused, upgraded or rugged?) + reasons
GET /api/risk · /api/risk/livefreerisk score + verdict (no reasons/signals)
GET /api/lookupfreeuniversal address lookup, EVM + XRPL, chain auto-detected
GET /api/entityfreeentity attribution — what is this address
GET /api/resolvefreeENS / Basenames, forward + reverse (forward-verified)
GET /api/calleridfreeshould this wallet be answered? (for XMTP/Push)
/api/shield/*freeper-user private wallet blocklist (signature-auth)
GET /api/catalog · /openapi.json · /llms.txt · /.well-known/x402.jsonfreediscovery
POST /api/mcpfreeMCP server (Streamable HTTP) over the free tools

Every risk/verdict response carries a disclaimer: this is developer-grade screening from public data (OFAC SDN list, community scam registries, on-chain reads), not legal or compliance advice.

Data

  • Sanctions come from one place: the OFAC SDN list in bad_addresses (source='ofac'), refreshed daily by /api/cron/refresh-lists (guarded — a 0-address upstream response aborts rather than wiping the table). lib/entity.ts is the only place that joins it. A non-OFAC blocklist hit is category flagged, not sanctioned, and is allowlistable.
  • Scoring fails open: if a data source needed for a verdict is unavailable and there's no list hit, the response is degraded:true / verdict CAUTION, never PROCEED.

Development

npm install
npm run dev        # http://localhost:3000
npm run build

Env (Vercel project settings):

varrequiredpurpose
DATABASE_URLyesNeon Postgres
CRON_SECRETyesgates /api/cron/*; Vercel Cron sends it as Authorization: Bearer
OPENROUTER_API_KEYfor /api/llm, /api/extract
JINA_API_KEYfor /api/embed
SERPER_API_KEY / BRAVE_API_KEYoptional/api/search (falls back to DuckDuckGo)
ETHERSCAN_API_KEYoptionalwallet history (falls back to Blockscout)
CDP_API_KEY_ID / CDP_API_KEY_SECRETfor x402 settlement

Scripts: scripts/schema*.mjs (create tables), scripts/ingest*.mjs (manual list load — the scheduled path is lib/refresh-lists.ts + scripts/ingest-entity.mjs), scripts/shield-verify.mjs (live E2E), scripts/fix-sanctions.mjs (one-shot sanctions remediation, already run).

Reviews

No reviews yet

Be the first to review this server!