# Cybercentry Verification [Health: Active]

**Category:** 💰 Finance & Fintech  
**Repository:** https://github.com/Cybercentry/verification-mcp  
**GitHub Stars:** 2  
**Views:** 0  
**Installs:** 0  
**Upvotes:** 0  
**Directory Page:** https://allmcps.com/mcp/cybercentry-verification

## Description
Pay-per-call security verification for wallets, contracts, agents and apps, in USDC over x402.

## Tools
Capabilities this server exposes over MCP:

- **list_services** — List every Cybercentry verification service with its price, inputs and SLA. Free.
- **recent_exploits** — Recent real-world web3 exploits from the live feed, with loss amounts, attack vectors and the Cybercentry service that addresses each. Free.
- **base_token_verification** — Check a Base token contract before buying: detects honeypots, armed freeze-and-seize, a live pause, fake B20s and ticker-impersonation copycats, and separately discloses issuer controls (admin centralisation, supply cap, transfer policy, rebase) so a legitimate token is not mistaken for a scam. Costs $1.00 per call, paid in USDC over x402.
- **cyber_security_consultant** — Ask a cyber security question and get an expert answer backed by real-time threat intelligence, covering current threats, best practice and compliance. Costs $1.00 per call, paid in USDC over x402.
- **ethereum_token_verification** — Check an Ethereum or EVM token contract before buying: rug pull, hidden tax, liquidity legitimacy and holder concentration risk. Token due diligence returned as a scan report. Costs $1.00 per call, paid in USDC over x402.
- **media_content_verification** — Check whether an image or video is authentic and where it came from: C2PA content credentials, provenance and metadata extraction, with an avatar and logo impersonation check. Detect AI-generated or tampered media before trusting it. Costs $1.00 per call, paid in USDC over x402.
- **openclaw_ai_agent_verification** — Audit an AI agent configuration for security holes: prompt injection exposure, missing authentication, over-broad tool permissions and unsafe gateway settings. Check an agent before you trust it or connect to it. Costs $1.00 per call, paid in USDC over x402.
- **post_launch_screening** — Score a live token launch under ERC-8376, the token launch abuse standard we co-authored. The twelve-signal vector is assembled from chain state and scored against the eleven deployer abuse patterns into an abuse score of 0 to 100, with confidence reported separately so a high score on thin evidence cannot read as a certainty. Signals that could not be computed are named rather than scored clean. Price decline is excluded by rule, so a launch that locked liquidity, sold nothing and fell 95 per cent still scores clean: falling is not fraud. Name the creator, because at most venues the token was deployed by the venue's own factory and the creating address is the launchpad rather than the applicant. A screening, not a bonded on-chain report. Costs $1.00 per call, paid in USDC over x402.
- **pre_launch_screening** — Screen who is asking to launch, before you deploy anything for them. At most venues the launchpad creates the token, so the only thing in front of you beforehand is a connected wallet: this screens that wallet, and it includes the full wallet verification rather than a summary of one. OFAC SDN sanctions screening, the funding chain walked to depth across 33 chains, mixer contact including the Tornado Cash pools, dusting, control clusters and exchange reuse, with a risk score. Then the launch-specific half: allocations this wallet has taken from contracts before and whether it still holds them or sold them, and whether the ticker it wants collides with a token it already touched. Says what it could not establish rather than reporting it clean. Eight of the twelve ERC-8376 signals describe conduct during or after a sale and cannot exist yet, so this reports on the party and not on the launch. Costs $1.00 per call, paid in USDC over x402.
- **private_data_verification** — Prove a fact about private data without revealing the data: validates text integrity and returns a zero-knowledge proof (ZKP) with a verification ID and URL. Costs $1.00 per call, paid in USDC over x402.
- **quantum_cryptography_verification** — Encrypt text with quantum-resistant (post-quantum) cryptography, for secrets that must outlast classical encryption. Returns a record ID and a decrypt URL. Costs $1.00 per call, paid in USDC over x402.
- **solidity_code_verification** — Audit Solidity smart contract source for vulnerabilities before you deploy or call it. Returns findings with a clear risk level. Costs $1.00 per call, paid in USDC over x402.
- **wallet_verification** — Screen a wallet address for sanctions and risk: OFAC SDN sanctions screening, risk scoring and suspicious-activity detection across 33 EVM chains. Check a counterparty before you transact with it. Costs $1.00 per call, paid in USDC over x402.
- **web_application_verification** — Scan a website or dApp frontend for vulnerabilities using OWASP checks, before connecting a wallet to it or trusting it with user data. Costs $1.00 per call, paid in USDC over x402.

## Claude Desktop Quick Installation
Remote MCP endpoint (confidence: high). Install path detected from listing signals. Add as a URL/SSE server in your client:

```json
"mcpServers": {
  "cybercentry-verification": {
    "url": "https://centry.cybercentry.co.uk/api/mcp"
  }
}
```

## Documentation

## What Cybercentry Verification does

Cybercentry Verification MCP server provides a catalogue of security checks that an MCP-compatible client can call remotely. The service covers blockchain assets, application frontends, smart-contract code, AI-agent configurations, media provenance, private payloads, and cryptographic processing. It also includes a security consultant tool that returns advisory answers grounded in a security body of knowledge.

The catalogue contains twelve tools. `list_services` shows available checks, their required inputs, and prices. `recent_exploits` provides a live exploit feed curated from DefiLlama. The remaining tools perform paid verification or advisory work across the supported domains.

## How it works

Cybercentry Verification MCP server uses streamable HTTP rather than a local process. Clients connect to `https://centry.cybercentry.co.uk/api/mcp`, after which the MCP tools become available through the client’s remote-server configuration.

Two tools do not require payment, credentials, or an account: `list_services` and `recent_exploits`. The other ten tools cost $1 per call. Payment can use x402 with USDC on Base or Solana, when the client supports that flow. A client without x402 support can provide a subscription token as a tool argument or through the `x-subscription-token` header. The service performs a paid verification before settlement, so failed calls are not charged.

Most paid calls return in under ten seconds. `wallet_verification` and `web_application_verification` start a job and return findings as they arrive; either may take up to three minutes.

## Setup and configuration

Cybercentry Verification MCP server requires no installation, API key, or account. Add the endpoint as a remote MCP server in a compatible client. In Claude Desktop or claude.ai, use Settings, then Connectors, then Add custom connector, and enter the endpoint URL. Other clients may place the same URL in a settings screen or configuration field intended for remote MCP servers.

The server is listed in the MCP registry as `uk.co.cybercentry/verification`. Its published OpenAPI document is available at `https://centry.cybercentry.co.uk/openapi.json`.

## Tools and capabilities

- `wallet_verification`: screens wallets for sanctions and assigns risk scores across 35 EVM chains.
- `base_token_verification`: checks Base B20 tokens for honeypots, freeze-and-seize behavior, pausing, and impersonation.
- `ethereum_token_verification`: performs Ethereum token due diligence.
- `solidity_code_verification`: checks Solidity source for known vulnerability classes.
- `web_application_verification`: scans a live website or dApp frontend.
- `openclaw_ai_agent_verification`: reviews agent configuration for authentication gaps, prompt-injection exposure, and unsafe permissions.
- `media_content_verification`: checks C2PA provenance and content authenticity.
- `private_data_verification`: creates a zero-knowledge proof over a payload without revealing it.
- `quantum_cryptography_verification`: applies quantum-resistant encryption to a payload.
- `cyber_security_consultant`: answers security questions using a security knowledge base.

The service interfaces reference ERC-8126, ERC-8196, and ERC-8376.

## Limitations and notes

The service is remote, so clients need a connection to its endpoint and support for streamable HTTP. Ten tools are paid, and the wallet and web scans can take up to three minutes. Payment support depends on the client: x402 is automatic only in clients that implement it; other clients need a subscription token.

_Full upstream README: https://allmcps.com/mcp/cybercentry-verification/readme_