LeashIndex Get the report

Index / storage

Crypto Bot Audit + Market Data (x402 paid)

io-github-kaminariouji-x402-audit-agent declares 146 capabilities across 146 tools, with 1 critical issue.

94/100 exposureHigh exposure

Manifest recorded 2026-10-11 from tools/list on https://labored-safari-islamic.ngrok-free.dev/mcp, published in the official MCP registry as io.github.kaminariouji/x402-audit-agent 1.5.0. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 146 tools

146 of 146 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

high · no-expiry · All 146 tools

146 of 146 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 146 tools

146 of 146 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

low · uncapped-read · All 146 tools

146 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
audit_bot_coderead declared
demo_auditread declared
x402_rail_heartbeatread declared
get_token_priceread declared
search_tokensread declared
top_marketsread declared
chain_tvlread declared
stablecoin_supplyread declared
trending_tokensread declared
gas_pricesread declared
chain_block_numberread declared
chain_balanceread declared
chain_balancesread declared
chain_nonceread declared
chain_coderead declared
chain_blockread declared
chain_block_txidsread declared
chain_txread declared
chain_receiptread declared
chain_logsread declared
chain_callread declared
chain_storageread declared
chain_fee_dataread declared
chain_gas_estimateread declared
chain_token_balanceread declared
chain_token_metaread declared
chain_allowanceread declared
chain_nft_ownerread declared
chain_nft_balanceread declared
chain_nft_metaread declared
chain_contract_checkread declared
chain_wallet_stateread declared
chain_headsread declared
chain_block_statsread declared
chain_block_receiptsread declared
chain_fee_historyread declared
chain_storage_rangeread declared
chain_multicallread declared
chain_token_balancesread declared
chain_nft_token_uriread declared
chain_nft_approvedread declared
chain_nft_approved_for_allread declared
chain_code_atread declared
chain_supply_atread declared
chain_approvals_scanread declared
chain_transfers_scanread declared
chain_client_versionread declared
chain_network_idread declared
chain_sync_statusread declared
chain_tx_countread declared
chain_block_by_hashread declared
chain_tx_at_indexread declared
chain_block_seriesread declared
chain_block_by_timestampread declared
chain_contract_ownerread declared
chain_proxy_checkread declared
chain_paused_checkread declared
chain_permit_readyread declared
chain_1155_balanceread declared
chain_1155_uriread declared
chain_1155_batchread declared
chain_1155_checkread declared
chain_storage_diffread declared
chain_token_meta_atread declared
chain_nft_owner_atread declared
chain_bytecode_fingerprintread declared
chain_bytecode_capabilitiesread declared
chain_contract_diffread declared
chain_wallet_tokensread declared
chain_wallet_nftsread declared
chain_wallet_approvalsread declared
chain_tx_statusread declared
chain_tx_eventsread declared
market_kraken_tickerread declared
market_kraken_ohlcread declared
market_kraken_depthread declared
market_kraken_tradesread declared
market_kraken_spreadread declared
market_kraken_pair_specread declared
market_cbex_tickerread declared
market_cbex_statsread declared
market_cbex_tradesread declared
market_cbex_candlesread declared
market_cbex_best_quoteread declared
market_cbex_product_specread declared
market_cbex_clockread declared
market_okx_tickerread declared
market_okx_candlesread declared
market_okx_depthread declared
market_okx_tradesread declared
market_okx_instrument_specread declared
market_okx_funding_rateread declared
market_bfex_tickerread declared
market_bfex_candlesread declared
market_bfex_pairsread declared
market_gate_tickerread declared
market_gate_candlesread declared
market_gate_depthread declared
market_gate_tradesread declared
market_gate_pair_specread declared
market_kucoin_tickerread declared
market_kucoin_best_quoteread declared
market_kucoin_candlesread declared
market_deribit_indexread declared
market_deribit_funding_windowread declared
market_deribit_volatility_indexread declared
market_deribit_instrumentsread declared
market_hl_mid_priceread declared
market_hl_perp_specsread declared
market_hl_order_bookread declared
market_hl_candlesread declared
market_hl_funding_historyread declared
market_hl_asset_contextread declared
market_llama_chain_tvl_historyread declared
market_llama_asset_price_historyread declared
market_llama_price_snapshotread declared
market_btc_chain_tipread declared
market_btc_fee_estimatesread declared
market_btc_block_projectionsread declared
market_btc_spot_pricesread declared
market_btc_difficulty_adjustmentread declared
market_btc_recent_blocksread declared
market_btc_mining_hashrateread declared
market_btc_network_statsread declared
market_btc_usd_price_historyread declared
market_fear_greed_indexread declared
market_poly_marketsread declared
market_poly_market_detailread declared
market_poly_tagsread declared
market_dex_token_pairsread declared
market_dex_pair_detailread declared
market_dex_boosted_tokensread declared
market_jup_token_pricesread declared
market_jup_token_searchread declared
market_jup_new_tokensread declared
market_scout_address_profileread declared
market_scout_token_profileread declared
market_scout_chain_statsread declared
market_x402_overviewread declared
market_x402_top_sellersread declared
market_x402_host_demandread declared
market_x402_payer_bandsread declared
market_token_verdictread declared
market_npm_tree_riskread declared
market_npm_package_riskread declared
market_github_repo_healthread declared
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.