Back to Browse

Kaal Agent Safety MCP Server

Developer ToolsLow Risk10.0MCP RegistryRemote
Free

Server data from the Official MCP Registry

Paid MCP tools for URL payment-safety scanning and provider recommendations; USDC on Base via x402.

About

Paid MCP tools for URL payment-safety scanning and provider recommendations; USDC on Base via x402.

Remote endpoints: streamable-http: https://places-wayne-experiment-facial.trycloudflare.com/mcp

Security Report

10.0
Low Risk10.0Low Risk

Valid MCP server (1 strong, 1 medium validity signals). No known CVEs in dependencies. Imported from the Official MCP Registry.

2 tools verified · Open access · No issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Found in Source Code

Found by scanning the linked source code. This listing connects to a hosted endpoint, so none of this runs on your machine: it describes what the server software does where it is hosted.

file_system

Applies to the server that hosts this plugin, not to your machine.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Applies to the server that hosts this plugin, not to your machine.

How to Connect

Remote Plugin

No local installation needed. Your AI client connects to the remote endpoint directly.

Add this to your MCP configuration to connect:

{
  "mcpServers": {
    "io-github-immoney1-kaal-agent-safety": {
      "url": "https://places-wayne-experiment-facial.trycloudflare.com/mcp"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

kaal-agent-safety — x402 paid MCP server

Two paid MCP tools plus three free HTTP endpoints. Buyers pay USDC on Base (per-call, x402 exact scheme, EIP-3009 transferWithAuthorization) — no API keys, no subscriptions. Free initialize + tools/list; payment only on tools/call (HTTP 402 with payment requirements).

Endpoints

EndpointMethodPriceNotes
/v1/safety/check?target=<url>GET$0.002deterministic payment-safety / phishing scan + signed receipt
/v1/recommend?category=<cat>GET$0.005ranked provider / cost-directory lookup
/mcpPOST (MCP)see belowstreamable-http MCP transport
/.well-known/mcp.jsonGETfreeMCP discovery manifest
/.well-known/x402GETfreex402 payment manifest (payTo, facilitator, prices)
/v1/verify?receipt=<id>GETfreereplayable receipt verification
/healthGETfreeliveness

MCP tools

  • safety_check(target) — $0.002 per call: flags credentials_in_url, no_hsts, ip_literal, lookalike hosts, missing /.well-known/x402 manifest; returns AVOID / CAUTION / CAUTION_NONE_DETECTED + signed receipt.
  • recommend(category) — $0.005 per call: ranked whitespace/cost directory across search, onchain-data, agent-safety, paid-discovery, tx-execution.

Connect

claude mcp add --transport http kaal-agent-safety https://<host>/mcp
# or any MCP client pointed at the streamable-http URL in server.json

Free: initialize, notifications/initialized, tools/list. Paid: tools/call requires X-PAYMENT header (base64 exact-scheme payload); server settles through an x402 facilitator and returns X-Payment-Response with the on-chain transaction.

Run

npm ci
RECEIPT_SECRET=<32-byte-hex> \
NETWORK=base FACILITATOR_URL=http://127.0.0.1:8142 \
PORT=8140 node server.js

RECEIPT_SECRET (or WALLET_FILE=<path-to-wallet-json>) signs receipts. NETWORK is base (mainnet) or base-sepolia. Settlement is non-custodial: funds go straight to the configured payTo wallet on every settlement.

Verified

  • Local E2E: unpaid 402 → EIP-3009 signed payment → verify → settle → on-chain receipt status 1.
  • Public E2E over a tunnel: paid GET /v1/safety/check settled with tx 0xd7bd01780b75d106fb3e286b6a3c55a78a6a486ee2cf439f4d2b3d8b5b1c28d7 (Base mainnet, block 53162843, gas 83208).
  • Revenue ledger + treasury sweep + systemd auto-restart are part of the production deployment.

License

MIT

Reviews

No reviews yet

Be the first to review this server!