x402 agent toolkit: service finder, payment safety, Solana & web tools

• x402_market_snapshot — Paid ($0.001 USDC on Base via x402 over MCP), read-only, no arguments: snapshot of MoneyTools' live-probed x402 API index — size, live share, endpoints by netwo
• x402_recommend — Find which x402 paid service to call for a task. Returns endpoints ranked by relevance and live liveness (unpaid probe returned valid x402 terms, payTo OFAC-scr
• x402_precheck — Before paying an x402 endpoint: fetch it, validate its HTTP 402 payment requirements (scheme, network, payTo, amount, asset) and screen payTo against the OFAC S
• x402_verify_settlement — Verify an on-chain USDC settlement: tx hash on network (base, base-sepolia, polygon, arbitrum, avalanche, bsc) paid amount to payTo. Returns verdict valid|inval
• x402_gateway_plan — Before paying an x402 seller through the non-custodial MoneyTools Pay Gateway: prechecks the seller (valid x402 terms, OFAC-screened payTo) and returns the gate
• solana_mint_check — Rule-based safety check of a Solana SPL / Token-2022 mint: mint & freeze authority, permanent delegate, transfer hook/fee, pausable, default-frozen, largest-hol
• web_read_markdown — Fetch a public web page and return clean Markdown (title, headings, links, lists, code) with a sha256 of the content. Respects robots.txt, public pages only, 1h
• email_check — Validate an email address without sending mail or SMTP probing: syntax, domain exists, MX / null-MX, SPF, DMARC, disposable domain (10k+ list), role account, fr
• swap_quote — Get a best-price token swap quote on one EVM chain (KyberSwap aggregator) or a cross-chain bridge quote (LI.FI, fallback Relay; set toChain). Returns expected a
• x402_find_endpoint — Find which live x402 paid API to call for a need (e.g. 'transcribe audio', 'web search', 'token price'), ranked by relevance and measured seller reputation (upt
• allowance_setup — For a human who wants to give their AI agent money but does not know crypto: returns a tailored 3-step plan (zh-TW or English) - 1) create their own non-custodi
• list_swap_tokens — List the chains, chain ids, native tokens and token symbols accepted by swap_quote. Free.
• plan_buy — Free: returns price, coverage, fair-use cap and the exact x402 URL to buy the monthly plan (1 USDC once via x402 = 30 days of all paid MoneyTools tools, 1,000 c
• plan_status — Free: status of your MoneyTools API key: monthly-plan expiry, calls used today vs the 1,000/day fair-use cap, or remaining prepaid credits. Uses the X-API-Key h
• token_safety_check — Before buying an ERC-20: simulates USDC→token→USDC with aggregator quotes and reads the contract (owner, proxy, paused, supply). Flags no-sell-route (honeypot p
• address_profile — Profile an EVM address or ENS name across Ethereum, Base, Arbitrum, Optimism, Polygon, BSC, Avalanche: EOA vs contract vs EIP-7702 delegated, nonce, native bala
• ens_resolve — Resolve an ENS name to an address (+ url/avatar/twitter/github records, optional L2 addresses), or an address to its primary ENS name with forward verification.
• gas_compare — Current gas on 7 EVM chains: base fee, priority fee, suggested maxFee, and the native-token cost of a transfer, ERC-20 transfer, approve and DEX swap. Among ETH
• erc20_info — Name, symbol, decimals, total supply, owner, paused, upgradeable-proxy detection and (optional) a holder's balance for any ERC-20. Free: 10 calls/day; then $0.0
• allowance_revoke_plan — Find risky ERC-20 approvals for a wallet (default: common tokens × 20 well-known routers/spenders, or your own lists) and get UNSIGNED approve(spender,0) revoke
• tx_explain — Explain a transaction in plain words: status, fee in USD, decoded method and arguments, token/NFT transfers, approvals (incl. unlimited / setApprovalForAll), ot
• calldata_decode — Decode raw EVM calldata before signing: function name and typed arguments via the open Sourcify signature DB (or your ABI / signature), plus a plain-language me
• contract_abi — Fetch a verified contract's ABI from Sourcify (open data) with proxy resolution: implementation ABI merged, function and event signature lists. Free: 10 calls/d
• signature_verify — Verify a personal_sign message or EIP-712 typed-data signature against an address, including smart-contract wallets (ERC-1271 / ERC-6492). Free: 10 calls/day; t
• typed_data_risk — Before an agent signs EIP-712 data: identifies Permit / Permit2 / EIP-3009 (x402) / Seaport / CoW / delegation messages, explains them in one sentence and flags
• x402_validate — Lint any x402 paid endpoint like a client would: 402 status, PAYMENT-REQUIRED header decode, CAIP-2 network, integer amount, payTo/asset, EIP-712 domain extra,
• http_inspect — Fetch a URL and report status, redirect chain, latency, size, cache headers, CORS, parsed rate-limit headers (RateLimit-*, X-RateLimit-*, Retry-After) and a sec
• url_metadata — Title, description, canonical, language, favicon, Open Graph + Twitter card, JSON-LD types, feeds, word count and what's missing for link previews. Metadata onl
• dns_lookup — A/AAAA/CNAME/MX/TXT/NS/CAA (or chosen types) via DNS-over-HTTPS, DNSSEC flag, SPF/DMARC/DKIM detection and common misconfigurations. Free: 10 calls/day; then $0
• domain_rdap — Registrar, creation/expiry dates, age in days, status codes, nameservers and DNSSEC from RDAP; flags very new domains (phishing signal) and near expiry. Free: 1
• robots_check — May this user agent fetch this URL? RFC 9309 evaluation of robots.txt with the matching rule, crawl-delay, sitemaps, llms.txt presence and an allow/deny table f
• json_schema_validate — Validate JSON data against a JSON Schema (draft 4, 7, 2019-09, 2020-12) and get precise error paths. Use it to check tool outputs or API payloads. Free: 10 call
• time_convert — op=now|convert|diff|add: current time in many zones, convert a local time between IANA zones (DST-aware), difference incl. business days, add ISO-8601 durations
• cron_next_runs — Next N run times of a 5-field cron expression (or @daily etc.) in any IANA time zone, with a plain-language description. Free: 10 calls/day; then $0.001/call vi
• currency_convert — Convert fiat amounts with daily ECB reference rates (Source: ECB statistics, via frankfurter.dev). Only currencies published by the ECB are supported. Not trada
• unit_convert — Length, mass, volume, area (incl. 坪/ping), speed, time, data (KB vs KiB), energy, pressure, temperature and exact wei/gwei/ETH conversion. Free: 10 calls/day; t
• hash_encode — sha256/sha1/sha512/md5/keccak256, function selector, HMAC-SHA256, base64(url), hex, URL encoding, UUIDs, JWT decode (unverified), EVM checksum address. Free: 10
• qr_payment_link — SVG QR code for any text/URL, or build an EIP-681 payment link + QR for a token amount to an address (for an agent asking a human to pay). We never receive the
• nft_metadata — ERC-721/1155 token: standard, collection name, owner, tokenURI resolved (IPFS/Arweave/data URI) and the metadata JSON with image URL; says whether metadata is o
• tx_status — Is my transaction pending, confirmed, reverted or not found? Confirmations and a per-chain finality hint. Cheap polling for agents waiting on a tx. Free: 10 cal
• block_at_time — Find the last block at or before a date/time on any of 7 EVM chains (interpolation search). For historical balance queries, snapshots and log ranges. Free: 10 c
• rpc_health — Probe the keyless public RPC endpoints of 7 EVM chains right now: up/down, latency, head block, lag. Returns the recommended RPC per chain. Free: 10 calls/day;
• chain_info — Chain id → name, native currency, public RPCs, explorers, CAIP-2 id and a ready wallet_addEthereumChain object. Source: ethereum-lists/chains (CC0 1.0) via jsDe
• safe_multisig_info — Is this address a Safe multisig? Owners, threshold (m-of-n), nonce, version, enabled modules, guard, fallback handler, plus risk warnings (1-of-n, modules). Fre
• abi_encode — Build calldata from a function signature and arguments (selector + encoded args). Unsigned bytes only, for agents preparing a tx for a human or wallet to review
• proxy_inspect — Is this contract upgradeable? Detects EIP-1967 (impl/admin/beacon), EIP-1167 clones, legacy OZ and Safe-style proxies and EIP-7702 delegated EOAs; returns imple
• token_balances — Native + ERC-20 balances for a wallet in one multicall: major tokens on the chain by default or your own list of token addresses/symbols. Free: 10 calls/day; th
• ens_available — Is name.eth available? Registered / grace period / available, expiry date, yearly base price and registration link. Free: 10 calls/day; then $0.001/call via x40
• erc4626_vault — Yield vault facts: underlying asset, total assets, share price (assets per share), deposits open, and a holder's position. Free: 10 calls/day; then $0.002/call
• address_validate — Which network is this address for, and is it well-formed? EVM checksum, Bitcoin (legacy/P2SH/SegWit/Taproot), Litecoin, Dogecoin, Tron, Solana, Cosmos bech32, T
• btc_address — Confirmed and pending BTC balance (and USD from mempool.space prices), tx count, address type and reuse for any Bitcoin address. Source: mempool.space public AP
• btc_fees — Recommended sat/vB for next block, 30 min, 1 hour and economy, and what your transaction will cost in sats and USD (USD from mempool.space prices). Source: memp
• vesting_schedule — Cliff + linear vesting with optional TGE unlock: vested/unvested on any date and the monthly unlock schedule. Free: 10 calls/day; then $0.001/call via x402 (MCP
• apr_apy — Convert APR to APY (or back) for any compounding frequency, project earnings over N days with optional performance fee, doubling time. Free: 10 calls/day; then
• liquidation_price — Perp (isolated margin: side, entry, leverage, maintenance margin) or lending (collateral, debt, liquidation threshold → health factor) liquidation price and dis
• impermanent_loss — LP value vs holding after a price move: full-range (Uniswap v2) and concentrated range (v3, lower/upper) impermanent loss. Free: 10 calls/day; then $0.001/call
• loan_amortization — Monthly payment, total interest and schedule for annuity (本息平均攤還) or equal-principal (本金平均攤還) loans. Free: 10 calls/day; then $0.001/call via x402 (MCP params._
• security_headers_audit — Graded audit of HSTS, CSP (unsafe-inline/eval, wildcards), clickjacking, nosniff, Referrer/Permissions-Policy, cookie flags, version leaks and CORS misconfig, w
• ssl_certificate — Latest unexpired certificates for a domain from Certificate Transparency logs: issuer, names, expiry date, days left, expiring-soon warning. Free: 10 calls/day;
• og_image_check — Does the page's og:image work in link previews? Fetches it and checks status, type, file size, pixel dimensions and aspect ratio (1200×630). Free: 10 calls/day;
• sitemap_parse — Find (via robots.txt) and parse a sitemap or sitemap index: URL count, lastmod range, sample URLs and protocol issues. Free: 10 calls/day; then $0.002/call via
• feed_parse — Parse a feed (or autodiscover it from a web page) into clean JSON: title, latest items with link, date and summary. Free: 10 calls/day; then $0.002/call via x40
• broken_links — Extract links from a page and check up to 12 of them (HEAD, GET fallback): status, redirects, latency, broken list. Free: 10 calls/day; then $0.003/call via x40
• dns_propagation — Query 6 public resolvers (Cloudflare, Google, AdGuard, NextDNS, AliDNS, DNSPod) and compare answers: has my DNS change propagated? Free: 10 calls/day; then $0.0
• spf_dmarc_check — Recursively expand SPF includes, count DNS lookups against the RFC limit of 10, flag +all/?all, duplicate records and weak DMARC policy. Free: 10 calls/day; the
• ip_owner — Who owns this IP? Network name, CIDR, country, organization and abuse contact from the regional internet registries (RDAP). Free: 10 calls/day; then $0.001/call
• url_parse_clean — Split a URL into parts and query params, strip tracking params (utm_*, fbclid, gclid...) and flag phishing tricks (user@host, raw IP, shorteners, punycode). Fre
• idn_homograph_check — Decode punycode, detect mixed scripts and look-alike characters (Cyrillic а vs Latin a) and one-letter typos of major brands/wallets. Anti-phishing for agents.
• mcp_tools_lint — Connect to an MCP server (streamable HTTP) or take a tools/list array and lint every tool: names, descriptions, JSON Schema, required params, annotations; score
• openapi_lint — Lint an OpenAPI/Swagger JSON or YAML: operationIds, descriptions, responses, undeclared path params, missing security schemes, servers, x402 payment info. Free:
• llms_txt_validate — Check a site's /llms.txt against the llmstxt.org format: H1, summary, sections, link entries with notes; optional link check. Free: 10 calls/day; then $0.002/ca
• a2a_card_validate — Fetch /.well-known/agent-card.json (or legacy agent.json) and validate required A2A fields, skills, transport and security declarations. Free: 10 calls/day; the
• regex_test — Run a JavaScript regex on text: all matches with index and capture groups, optional replace, and a ReDoS warning for nested quantifiers. Free: 10 calls/day; the
• text_diff — Line, word or character diff between two texts with a unified patch, added/removed counts and similarity. Free: 10 calls/day; then $0.001/call via x402 (MCP par
• id_generate — Generate UUID v4/v7, ULID or nanoid (up to 100), or decode a UUID/ULID to its version and embedded timestamp. Free: 10 calls/day; then $0.001/call via x402 (MCP
• jwt_inspect — Decode a JWT, explain its claims (expired? lifetime?) and verify RS/PS/ES/EdDSA signatures against a public JWKS URL or the issuer's OIDC discovery. No secrets
• number_base — Convert big integers between bases 2-36 (hex/bin/oct/dec, 0x/0b/0o prefixes) with two's complement for 8-256 bits. Free: 10 calls/day; then $0.001/call via x402
• markdown_to_html — Render GitHub-flavored Markdown to HTML with raw HTML escaped and script URLs removed; also returns the heading outline. Free: 10 calls/day; then $0.001/call vi
• csv_json_convert — CSV to JSON (auto delimiter, headers, typed values, error rows) or JSON array to CSV. Free: 10 calls/day; then $0.001/call via x402 (MCP params._meta["x402/paym
• yaml_json_convert — YAML (multi-document, with line-numbered errors) to JSON, or JSON to YAML. Free: 10 calls/day; then $0.001/call via x402 (MCP params._meta["x402/payment"] or HT
• json_format — Validate JSON (error line + context), pretty-print/minify/sort keys, measure depth and size, and pick a value by path like a.b[0].c. Free: 10 calls/day; then $0
• semver_check — Parse and compare semantic versions, check a version against a range (^1.2, ~2.0, >=1 <2), max satisfying version and sort a list. Free: 10 calls/day; then $0.0
• text_stats — Characters, words (CJK-aware), sentences, paragraphs, reading time, LLM token estimate and top words. Free: 10 calls/day; then $0.001/call via x402 (MCP params.
• language_detect — Detect the language of a text (82 languages, ISO 639-3 + BCP 47), including Traditional vs Simplified Chinese. Free: 10 calls/day; then $0.001/call via x402 (MC
• slugify — URL slug (accents removed; CJK kept or ASCII-only) and a filesystem-safe filename from any title. Free: 10 calls/day; then $0.001/call via x402 (MCP params._met
• ip_cidr — IPv4/IPv6 subnet math: network, range, size, netmask/wildcard, private/reserved type, contains-check and subnet split. Free: 10 calls/day; then $0.001/call via
• user_agent_parse — Browser, engine, OS, device type, and whether it is a known crawler or AI agent (GPTBot, ClaudeBot, PerplexityBot, scripts...). Free: 10 calls/day; then $0.001/
• color_convert — Convert hex/rgb/hsl/CSS names to hex, RGB, HSL, CMYK; luminance, best text color and WCAG AA/AAA contrast against another color. Free: 10 calls/day; then $0.001
• password_strength — Entropy, common-password and pattern checks (sequences, years, Word123!), crack-time estimates and feedback. Never stored or logged. Free: 10 calls/day; then $0
• iban_validate — Check an IBAN's country length and mod-97 check digits, return BBAN and print format. Not stored. Free: 10 calls/day; then $0.001/call via x402 (MCP params._met
• public_holidays — US federal holidays with observed dates, plus the next holiday. The Taiwan calendar is no longer offered (HTTP 410 if country=TW). Free: 10 calls/day; then $0.0
• business_days — Count business days between dates or add N business days, using the official Taiwan calendar, US federal holidays or plain weekdays. Free: 10 calls/day; then $0
• token_count — Estimate LLM tokens, words and characters for any text (±15% vs GPT/Claude tokenizers; CJK-aware) and whether it fits 8k-1M context windows. Free: 10 calls/day;
• llm_cost_estimate — USD cost of a prompt across 22 popular models (GPT, Claude, Gemini, Grok, DeepSeek, Llama, Mistral) from token counts or raw text, sorted cheapest first. Free:
• text_chunk — Split long text into sentence/paragraph-aware chunks of N characters or tokens with overlap, ready for embeddings. Free: 10 calls/day; then $0.001/call via x402
• html_to_markdown — Fetch a public URL (or pass HTML) and get clean LLM-ready Markdown of the main content: headings, links, lists, tables, code; scripts/nav removed; token estimat
• extract_entities — Pull emails, URLs, EVM addresses, tx hashes, BTC addresses, phone numbers, dates, money amounts, IPs, hashtags and @mentions out of any text. Free: 10 calls/day
• prompt_injection_scan — Heuristic scan of untrusted web/email/tool content for injection markers: instruction override, system-prompt spoofing, secret exfiltration, payment coercion, h
• json_repair — Fix broken JSON from LLMs: code fences, leading prose, comments, single quotes, bare keys, trailing commas, Python True/None, truncated strings and unclosed bra
• json_diff — Structural diff of two JSON values: added/removed/changed paths (JSON Pointer) and an RFC 6902-style patch. Free: 10 calls/day; then $0.001/call via x402 (MCP p

No hidden text found in the tool definitions.

Text a person reading a tool definition does not see and a model does. Invisible characters can be pasted in by accident; this says what is there, not why. Covers tools only, not prompts or resources.