CanaryGuard 402 MCP Server

by ak10082247-max Your server? Claim it

answering

CanaryGuard 402 is answering right now. Last checked 10 min ago. It exposes 28 tools. Last commit 16 Oct 2026.

Deterministic prompt-injection detection & sanitization for AI agents via x402 on Base.

Uptime history 69 hours of history

69 hours agonow

100.0%

Uptime 24h

92 of 92 checks

Tools

read from the server

429 ms

Response time

average over 24h

Stars

last commit 16 Oct 2026

What changed 31

Every tool that appeared, vanished or quietly changed what it asks for. Recorded since 16 October 2026. No other catalogue keeps this.

16 Oct 27 tools appeared analyzeEvmWallet, auditEip712Signature, auditEip712SignaturePayload and 24 more

16 Oct a tool changed version2 times that day

16 Oct a tool description was rewritten canary_sanitize

16 Oct a tool changed the parameters it asks for canary_sanitize

and 1 more, back to 16 October 2026

Nothing serious here today

Today is the operative word: we check CanaryGuard 402 every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 10 min ago.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add canaryguard-402 --transport http https://canaryguard-402.onrender.com/mcp

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "canaryguard-402": {
      "url": "https://canaryguard-402.onrender.com/mcp"
    }
  }
}

~/.codex/config.toml

[mcp_servers.canaryguard-402]
url = "https://canaryguard-402.onrender.com/mcp"

.cursor/mcp.json

{
  "mcpServers": {
    "canaryguard-402": {
      "url": "https://canaryguard-402.onrender.com/mcp"
    }
  }
}

.vscode/mcp.json

{
  "mcpServers": {
    "canaryguard-402": {
      "url": "https://canaryguard-402.onrender.com/mcp"
    }
  }
}

Available tools 28

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

analyzeevmwallet

analyzeEvmWallet

Comprehensive EVM wallet security profile on Base, analyzing transaction velocity, approval exposure, drainer interaction risk, and smart-account state. Price: 0.010 USDC on Base.

auditeip712signature

auditEip712Signature

Audits EIP-712 and EIP-3009 typed-data signature payloads (Permit, Permit2, transferWithAuthorization) to block malicious spender approvals and phishing domains. Price: 0.010 USDC on Base.

auditeip712signaturepayload

auditEip712SignaturePayload

Audits EIP-712 and EIP-3009 typed-data signature payloads (Permit, Permit2, transferWithAuthorization) to prevent unauthorized token approvals and replay attacks. Price: 0.02 USDC on Base.

auditmcptoolpoisoning

auditMcpToolPoisoning

Inspects Model Context Protocol (MCP) tool definitions, descriptions, and JSON schemas for hidden prompt overrides, shadowing attacks, and exfiltration sinks. Price: 0.02 USDC on Base.

auditmcptoolschema

auditMcpToolSchema

Inspects Model Context Protocol (MCP) tool definitions, JSON schemas, and server cards for hidden instructions, tool shadowing, and data exfiltration vectors. Price: 0.010 USDC on Base.

auditurlagentreadiness

auditUrlAgentReadiness

Audits any domain or URL for AI agent readiness (llms.txt, .well-known/x402, openapi.json, MCP server card) and detects hidden CSS/DOM prompt-injection traps. Price: 0.010 USDC on Base.

calculatellmtokenpricing

calculateLlmTokenPricing

Calculates exact input, cached-input, and output token costs across frontier LLMs (OpenAI, Anthropic, Gemini, DeepSeek, Meta) and recommends optimal model routing. Price: 0.010 USDC on Base.

canary

canary_sanitize

Deterministic prompt-injection firewall and honeypot scrubber for AI agents. Sanitizes untrusted text and blocks detected wallet-draining commands before context ingestion. Price: 0.010 USDC on Base.

checksmartcontracthoneypot

checkSmartContractHoneypot

Audits Base smart contracts for hidden transfer locks, owner blacklist modifiers, unverified proxy upgrades, and malicious fee-on-transfer hooks. Price: 0.02 USDC on Base.

checkwalletdrainer

checkWalletDrainer

Audits EVM wallet and counterparty addresses on Base for Permit2 drainer exposure, approval phishing history, and OFAC sanctions flags. Price: 0.02 USDC on Base.

checkwalletsanctions

checkWalletSanctions

Screens EVM and Solana wallet addresses against OFAC SDN sanctions lists, Lazarus Group attributions, and known DeFi exploit/drainer blacklists. Price: 0.010 USDC on Base.

decodebasetxstatus

decodeBaseTxStatus

Decodes Base Mainnet transaction receipts, EIP-3009 transferWithAuthorization settlements, ERC-20 transfer logs, gas fees, and finality confirmations. Price: 0.010 USDC on Base.

getcryptopriceonchain

getCryptoPriceOnchain

Returns tamper-resistant on-chain USD spot prices, 24h volatility, and Chainlink/TWAP oracle deviation metrics for major Base and EVM assets. Price: 0.010 USDC on Base.

getondemandmarketsnapshot

getOndemandMarketSnapshot

On-demand institutional market intelligence snapshot combining Base DEX spot & TWAP prices, Aerodrome/Uniswap V3 liquidity depth, perpetual funding rates, and Polymarket whale orderbook divergence. Price: 0.020 USDC on Base.

getpolymarketoddspulse

getPolymarketOddsPulse

Delivers sanitized Polymarket CLOB implied probabilities, bid-ask spreads, and 24-hour smart-money volume movers across crypto, macro, and geopolitics. Price: 0.010 USDC on Base.

getpolymarketverifiedodds

getPolymarketVerifiedOdds

Delivers CanaryGuard-sanitized Polymarket CLOB implied probabilities, bid-ask spread depth, and smart-money orderbook skew across high-volume markets. Price: 0.02 USDC on Base.

getsafebasetrending

getSafeBaseTrending

Returns top Base Mainnet tokens by 24h DEX volume and liquidity velocity that pass CanaryGuard zero-honeypot and prompt-injection safety gates. Price: 0.02 USDC on Base.

getsafedefiyields

getSafeDefiYields

Curates top risk-adjusted USDC, EURC, and WETH DeFi yield pools on Base (Morpho, Aave V3, Aerodrome, Moonwell), pre-screened for TVL depth and audit status. Price: 0.010 USDC on Base.

getsafeyieldallocation

getSafeYieldAllocation

Computes an institutional risk-adjusted DeFi capital allocation matrix across multi-audited Base and Arbitrum liquidity vaults (Morpho Blue, Aave V3, Moonwell, Aerodrome) with smart-contract timelock and depeg stress scores. Price: 0.020 USDC on Base.

gettokenhistoryandspread

getTokenHistoryAndSpread

Returns multi-timeframe Base token price history (1h, 24h, 7d, 30d OHLCV summary), Chainlink vs. Uniswap V3/Aerodrome bid-ask spread in bps, and realized volatility skew. Price: 0.020 USDC on Base.

guardagentmemory

guardAgentMemory

Scans RAG context chunks, vector DB retrievals, and persistent agent memory payloads for delayed sleeper-agent instructions and cross-session poisoning. Price: 0.02 USDC on Base.

inspectbasetoken

inspectBaseToken

Audits Base ERC-20 token contracts for honeypot risks, buy/sell transfer taxes, liquidity depth, and prompt injection traps in token metadata. Price: 0.010 USDC on Base.

inspectcontractinfo

inspectContractInfo

Inspects Base EVM smart contract bytecode size, EIP-1967/UUPS proxy implementation slots, EIP-7702 delegation designators, and verified function selectors. Price: 0.010 USDC on Base.

inspectphishingurl

inspectPhishingUrl

Audits target URLs, API endpoints, and Web3 dApp domains for IDN homograph spoofing, Angel/Pink/Inferno drainer scripts, and hidden DOM prompt injections. Price: 0.02 USDC on Base.

inspectuniswappoolstate

inspectUniswapPoolState

Audits Uniswap V3/V4 and Aerodrome liquidity pools on Base, returning tick liquidity depth, fee tier, price impact bps, and LP concentration rug-risk scores. Price: 0.010 USDC on Base.

repairandsanitizejson

repairAndSanitizeJson

Deterministically repairs malformed or truncated LLM JSON payloads (missing quotes, trailing commas, markdown fences) while scrubbing embedded prompt-injection payloads. Price: 0.010 USDC on Base.

runfullenterpriseriskaudit

runFullEnterpriseRiskAudit

Enterprise 360-degree security audit bundle combining Base bytecode/proxy inspection, DEX liquidity rug-risk analysis, OFAC/Lazarus sanctions screening, EIP-712 permit verification, and deterministic prompt-injection firewalling. Price: 0.020 USDC on Base.

verifyagentattestation

verifyAgentAttestation

Generates a cryptographic attestation report verifying an autonomous AI agent wallet, x402 EIP-3009 payment capability, counterparty reputation score, and zero-drainer history on Base. Price: 0.020 USDC on Base.

Endpoints

URL	Transport	State	Latency	Checked
https://canaryguard-402.onrender.com/mcp	streamable-http	answering	289 ms	10 min ago

Alternatives to CanaryGuard 402

same job, measured the same way

Zentric Protocol MCP

by zentricprotocol

Prompt injection + PII detection for LLM apps and agent pipelines. Deterministic, sub-25ms.

63 installs/wk local only

RESET Verifica

by resetparatodos

Deterministic Mexican/LatAm verification + sanctions & PEP screening for AI agents. Pay via x402.

27 tools answering

prompt-protection

by mughalhere

Scan prompts, tool definitions and model output for injection, and guard agent tool calls.

611 installs/wk local only

Scenariosim MCP

by inity13

Deterministic what-if & scenario simulation for AI agents: projections, sensitivity & break-even.

35 installs/wk 6 tools answering

Rosentic

by rosentic

Deterministic cross-branch conflict detection for AI coding agents

188 installs/wk local only

Capabilities

by eckari

Deterministic company, entity and location lookups for agents - per call, x402 or API key.

24 tools answering

TrigGuard

by trigguard-ai

Deterministic execution authorization for AI agents and automated systems.

18 installs/wk local only

Cornea, deterministic visual inspection

by abduljabbarbxr

Deterministic visual inspection for AI agents. Overlap, overflow, contrast, quality.

local only

CanaryGuard 402 — questions

Answers built from our own checks of this server.

What can CanaryGuard 402 do?

It exposes 28 tools, read directly from the server on our last check. Among them: analyzeEvmWallet, auditEip712Signature, auditEip712SignaturePayload, auditMcpToolPoisoning, auditMcpToolSchema, auditUrlAgentReadiness and 22 more. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →

Is CanaryGuard 402 working right now?

We send a real MCP handshake every 15 minutes. Over the last 24 hours 92 of 92 checks got a reply (100.0%), average response time 429 ms. The bar chart above shows every period we have measured.

How do I connect CanaryGuard 402?

Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.

Does CanaryGuard 402 need an API key?

No. CanaryGuard 402 completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 28 of them are readable on this page. This is what we observed, not what the docs claim.

How fast is CanaryGuard 402?

It answers our handshake in 429 ms on average, which is faster than 28% of all working MCP servers we measure. The comparison comes from our own checks across the whole registry, every 15 minutes.

Is CanaryGuard 402 open source?

Yes — it is published under the MIT licence, written in TypeScript and 1 stars on GitHub. The source link is on this page, so you can read exactly what it does with your data before you connect it.