Back to Browse

Kristo Travel Api MCP Server

Developer ToolsUse Caution2.2MCP RegistryLocalRemote
Free

Server data from the Official MCP Registry

Pay-per-call DeFi intelligence API for AI agents on Base blockchain with x402 micropayments

About

Pay-per-call DeFi intelligence API for AI agents on Base blockchain with x402 micropayments

Remote endpoints: streamable-http: https://kristo-intelligence.vercel.app/mcp

Security Report

2.2
Use Caution2.2Critical Risk

This MCP server for a blockchain pay-per-call API has moderate security concerns. While authentication via x402 protocol and USDC payment is implemented, there are significant code quality issues including unvalidated user input in wallet address parameters, potential XSS vulnerabilities in data rendering, and missing input validation on blockchain addresses. The server's heavy reliance on client-side wallet interactions and lack of proper error handling for malicious inputs creates exploitation surface. Permissions align with the stated purpose (network access for blockchain APIs, environment variables for configuration), but code execution quality needs improvement. Supply chain analysis found 5 known vulnerabilities in dependencies (0 critical, 2 high severity).

4 files analyzed ยท 15 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

env_vars

Check that this permission is expected for this type of plugin.

HTTP Network Access

Connects to external APIs or services over the internet.

network_websocket

Check that this permission is expected for this type of plugin.

clipboard

Check that this permission is expected for this type of plugin.

How to Install & Connect

Available as Local & Remote

This plugin can run on your machine or connect to a hosted endpoint. during install.

Documentation

View on GitHub

From the project's GitHub README.

Kristo Intelligence โ€” x402 Pay-Per-Call API

Pay-per-call DeFi intelligence API for AI agents on Base blockchain (Chain ID 8453). Powered by the x402 protocol.

๐Ÿš€ Quick Start

# 1. Call any paid endpoint (get 402 + payment instructions)
curl https://kristo-intelligence-api.onrender.com/defi/yields

# 2. Server responds with 402 + payment details:
# {
#   "x402_version": 1,
#   "accepts": {
#     "scheme": "exact",
#     "network": "base",
#     "chain_id": 8453,
#     "asset": "USDC",
#     "amount": "0.01",
#     "payTo": "0xd4cdA980839C8FED4374EE37EA8DBE8c4ECfd88f"
#   }
# }

# 3. Send 0.01 USDC on Base to payTo address, then retry with tx hash:
curl -H "X-PAYMENT: 0xYOUR_TX_HASH" https://kristo-intelligence-api.onrender.com/defi/yields

๐Ÿ’ฐ Pricing

TypePriceEndpoints
Paid0.01 USDC/call10 endpoints
FreemiumFree (rate-limited)token-prices, gas-oracle
FreeFreemetadata, health, pricing, stats

Hooks:

  • ๐ŸŽ First 3 calls FREE for new wallets
  • ๐Ÿ“Š After 50 paid calls โ†’ 0.005 USDC/call (50% off)
  • ๐Ÿ”— Referral program: earn 20% of referred agent's payments

๐Ÿ“ก Endpoints

Paid (0.01 USDC/call)

EndpointDescription
GET /defi/yieldsTop 10 Base DeFi yield pools by TVL
GET /defi/tvl-moversBase protocols with biggest 1-day TVL changes
GET /defi/lending-ratesBest lending/borrowing rates on Base
GET /defi/dex-poolsTop DEX liquidity pools (Aerodrome, Uniswap)
GET /defi/protocol-safetyRisk scores for Base DeFi protocols
GET /crypto/token-launchesRecently launched tokens on Base
GET /crypto/token-security๐Ÿ›ก๏ธ Rug-pull & honeypot detection scanner
GET /crypto/wallet-profileOn-chain wallet analysis & classification
GET /crypto/whale-movesLarge USDC transfers on Base
GET /crypto/bridge-volumeCross-chain bridge volume to/from Base

Freemium (free with rate limiting)

EndpointDescription
GET /crypto/token-pricesReal-time token prices from CoinGecko
GET /crypto/gas-oracleBase gas price & cost estimates

Free

EndpointDescription
GET /Service metadata & endpoint roster
GET /healthAPI health & Web3 connectivity
GET /pricingTransparent pricing & hooks info
GET /statsPublic usage statistics
GET /sales/recentRecent sales log
GET /agent/intelligenceAutonomous intelligence report
GET /agent/recommendationsAI-generated recommendations

๐Ÿ›ก๏ธ Token Security Scanner

The /crypto/token-security endpoint provides comprehensive rug-pull detection:

curl -H "X-PAYMENT: 0xTX_HASH" \
  "https://kristo-intelligence-api.onrender.com/crypto/token-security?address=0xTOKEN_ADDRESS"

Returns:

  • is_safe (bool) โ€” safe to interact with
  • is_honeypot_suspected (bool) โ€” potential honeypot
  • risk_score (0-100) โ€” higher is safer
  • risk_level โ€” "Low Risk" / "Medium Risk" / "High Risk" / "Critical Risk"
  • risk_factors โ€” detailed list of findings
  • recommendation_for_ai_agent โ€” buy/avoid decision with confidence

๐Ÿง  Autonomous Intelligence Engine

The API includes a built-in intelligence engine that runs every hour:

  • Analyzes sales patterns and endpoint popularity
  • Checks CoinGecko for trending tokens
  • Generates dynamic pricing recommendations
  • Identifies underperforming endpoints
  • Stores all reports in SQLite

Access via GET /agent/intelligence or GET /agent/recommendations

๐Ÿ”— Links

๐Ÿ—๏ธ Tech Stack

  • Backend: FastAPI + Python 3
  • Hosting: Render (API) + Vercel (Dashboard)
  • Blockchain: Base Mainnet (Chain ID 8453)
  • Payments: x402 protocol with USDC
  • Data Sources: DefiLlama, CoinGecko, direct RPC
  • Database: SQLite (replay protection + sales logs + intelligence reports)

๐Ÿ“„ License

MIT

Reviews

No reviews yet

Be the first to review this server!