LeashIndex Get the report

Index / messaging

ARYSPHERE x402 chain reads and token verdicts

com-arysphere-arysphere-x402 declares 50 capabilities across 50 tools, with 1 critical issue.

61/100 exposureElevated

Manifest recorded 2026-10-21 from tools/list on https://api.arysphere.com/mcp, published in the official MCP registry as com.arysphere/arysphere-x402 1.1.0. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 50 tools

50 of 50 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

high · no-expiry · All 50 tools

50 of 50 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 50 tools

50 of 50 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

low · uncapped-read · All 50 tools

50 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
x402_bazaar_token_verdict_v2__base_token_verdict_v3read declared
x402_chain_reads_v1__base_contract_abiread declared
x402_chain_reads_v1__base_erc20_balanceofread declared
x402_chain_reads_v1__base_erc721_ownerofread declared
x402_chain_reads_v1__base_eth_getbalanceread declared
x402_chain_reads_v1__base_eth_getblockbynumberread declared
x402_chain_reads_v1__base_eth_getlogsread declared
x402_chain_reads_v1__base_eth_gettransactionbyhashread declared
x402_chain_reads_v1__base_reads_bundleread declared
x402_chain_reads_v1__base_token_verdict_readread declared
x402_chain_reads_v1__base_tx_explainread declared
x402_chain_reads_v1__base_tx_verdict_bundleread declared
x402_chain_reads_v1__base_verdict_wallet_snapshot_bundleread declared
x402_chain_reads_v1__base_wallet_snapshotread declared
x402_chain_reads_v1__chain_fees_digestread declared
x402_chain_reads_v1__eth_balance_verdict_bundleread declared
x402_chain_reads_v1__eth_chainidread declared
x402_chain_reads_v1__eth_ens_resolveread declared
x402_chain_reads_v1__eth_erc20_allowanceread declared
x402_chain_reads_v1__eth_erc20_balanceofread declared
x402_chain_reads_v1__eth_erc721_tokensofread declared
x402_chain_reads_v1__eth_getbalanceread declared
x402_chain_reads_v1__eth_getblockbynumberread declared
x402_chain_reads_v1__eth_gettransactionbyhashread declared
x402_chain_reads_v1__eth_mainnet_getlogsread declared
x402_chain_reads_v1__eth_token_verdictread declared
x402_chain_reads_v1__eth_tx_explainread declared
x402_chain_reads_v1__eth_tx_verdict_bundleread declared
x402_chain_reads_v1__eth_verdict_chainid_bundleread declared
x402_chain_reads_v1__gnosis_eth_getbalanceread declared
x402_chain_reads_v1__gnosis_eth_getlogsread declared
x402_chain_reads_v1__network_info_balance_bundleread declared
x402_chain_reads_v1__network_info_summaryread declared
x402_eth_reads_v1__eth_mainnet_contract_abiread declared
x402_eth_reads_v1__eth_mainnet_erc20_allowanceread declared
x402_eth_reads_v1__eth_mainnet_erc20_balanceofread declared
x402_eth_reads_v1__eth_mainnet_erc20_totalsupplyread declared
x402_eth_reads_v1__eth_mainnet_erc721_ownerofread declared
x402_eth_reads_v1__eth_mainnet_eth_blocknumberread declared
x402_eth_reads_v1__eth_mainnet_eth_getbalanceread declared
x402_eth_reads_v1__eth_mainnet_eth_getcoderead declared
x402_eth_reads_v1__eth_mainnet_eth_getlogsread declared
x402_eth_reads_v1__eth_mainnet_eth_gettransactionbyhashread declared
x402_eth_reads_v1__eth_mainnet_gaspriceread declared
x402_eth_reads_v1__eth_mainnet_getblockbynumberread declared
x402_eth_reads_v1__eth_mainnet_logs_and_txread declared
x402_eth_reads_v1__eth_mainnet_token_reads_bundleread declared
x402_eth_reads_v1__eth_mainnet_tx_receiptread declared
x402_eth_token_verdict_v1__eth_mainnet_token_verdictread declared
x402_eth_token_verdict_v1__eth_token_verdict_v3read declared
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.