Cybercentry Verification MCP

An MCP server providing twelve security verification tools for wallets, tokens, smart contracts, and AI agents. It operates on a pay-per-call model using USDC over the x402 protocol, offering services like token due diligence, exploit detection, and agent configuration auditing.

Endpoint and access

No sign-in to connect and list tools. Individual tools may still need a vendor account, credentials, or permissions; check the documented prerequisites.

Vendor evidenceStreamable HTTPNo sign-inEndpoint checked 2026-11-06Operated by Cybercentry Limited

MCP endpoint (Streamable HTTP)

https://centry.cybercentry.co.uk/api/mcp

Vendor documentation

What its tools do

14 tools, grouped by the hints the server advertises. Hints are self-declared, not verified behavior.

Not annotated (14)

list_services
recent_exploits
base_token_verification
cyber_security_consultant
ethereum_token_verification
media_content_verification
openclaw_ai_agent_verification
post_launch_screening
pre_launch_screening
private_data_verification
quantum_cryptography_verification
solidity_code_verification
wallet_verification
web_application_verification

14 of 14 have a description · 0 of 14 declare behavior hints · 13 of 13 with parameters document them all

Checks and signals

Each line is separate evidence, not a trust score.

Passed Endpoint answered the live check · Nov 6, 2026, 8:04 PM UTC
Passed Official MCP Registry namespace is tied to cybercentry.co.uk · Nov 6, 2026, 7:53 PM UTC
Passed Endpoint is on the registry namespace domain · Nov 6, 2026, 7:53 PM UTC
Availability 1 of 1 checks passed in 30 days

What you can do with it

Check Base or Ethereum token contracts for honeypots and rug pulls
Audit AI agent configurations for security holes like prompt injection
Screen wallet addresses for sanctions and risk factors
Verify media content authenticity and provenance

Source and maintenance

Vendor evidenceRegistry 1.0.4

mcp-registry: uk.co.cybercentry/verification@1.0.4 Source repository Project website

Maintenance checked: Nov 6, 2026, 7:53 PM UTC

Protocol and capabilities

Server: cybercentry-x402 1.0.4
MCP protocol negotiated in check: 2025-06-18
Tools: 14 advertised
Resources: Not advertised
Resource templates: Not advertised
Prompts: Not advertised

Server-advertised capabilities

{
  "tools": {
    "listChanged": false
  }
}

Server-provided instructions

Untrusted server output shown for inspection. It is not Koskamo guidance and is excluded from knowledge search.

Cybercentry security and verification services. list_services and recent_exploits are free. Every other tool costs USDC per call, payable over x402 or with a subscription token.

Tools

14 advertised

list_services — List Services

Advertised by the server during the last successful anonymous check.

List every Cybercentry verification service with its price, inputs and SLA. Free.

list_services input schema

{
  "type": "object",
  "required": [],
  "properties": {}
}

recent_exploits — Recent Exploits

Advertised by the server during the last successful anonymous check.

Recent real-world web3 exploits from the live feed, with loss amounts, attack vectors and the Cybercentry service that addresses each. Free.

recent_exploits input schema

{
  "type": "object",
  "required": [],
  "properties": {
    "limit": {
      "type": "number",
      "description": "Max incidents to return (default 10)."
    }
  }
}

base_token_verification — Base Token Verification

Advertised by the server during the last successful anonymous check.

Check a Base token contract before buying: detects honeypots, armed freeze-and-seize, a live pause, fake B20s and ticker-impersonation copycats, and separately discloses issuer controls (admin centralisation, supply cap, transfer policy, rebase) so a legitimate token is not mistaken for a scam. Costs $1.00 per call, paid in USDC over x402.

base_token_verification input schema

{
  "type": "object",
  "required": [
    "contract_address"
  ],
  "properties": {
    "chain": {
      "type": "string",
      "description": "base for mainnet (default), or base-sepolia to check a token before you launch it"
    },
    "contract_address": {
      "type": "string",
      "description": "B20 token contract address"
    },
    "subscription_token": {
      "type": "string",
      "description": "Optional Cybercentry subscription token. Uses your plan quota instead of paying per call."
    }
  }
}

cyber_security_consultant — Cyber Security Consultant

Advertised by the server during the last successful anonymous check.

Ask a cyber security question and get an expert answer backed by real-time threat intelligence, covering current threats, best practice and compliance. Costs $1.00 per call, paid in USDC over x402.

cyber_security_consultant input schema

{
  "type": "object",
  "required": [
    "query"
  ],
  "properties": {
    "query": {
      "type": "string",
      "description": "Question (e.g., What should an incident response capability include?)."
    },
    "subscription_token": {
      "type": "string",
      "description": "Optional Cybercentry subscription token. Uses your plan quota instead of paying per call."
    }
  }
}

ethereum_token_verification — Ethereum Token Verification

Advertised by the server during the last successful anonymous check.

Check an Ethereum or EVM token contract before buying: rug pull, hidden tax, liquidity legitimacy and holder concentration risk. Token due diligence returned as a scan report. Costs $1.00 per call, paid in USDC over x402.

ethereum_token_verification input schema

{
  "type": "object",
  "required": [
    "contract_address"
  ],
  "properties": {
    "chain": {
      "type": "string",
      "description": "Chain name or EVM chain ID: ethereum (1), base (8453), arc (5042), robinhood (4663), optimism (10), polygon (137), arbitrum (42161), bsc (56), avalanche (43114), gnosis (100), blast (81457). Defaults to ethereum."
    },
    "chain_id": {
      "type": "number",
      "description": "Legacy: network, 1 mainnet or 2 testnet. Use chain instead."
    },
    "platform_id": {
      "type": "number",
      "description": "Legacy: 1 Ethereum or 17 Base. Use chain instead."
    },
    "contract_address": {
      "type": "string",
      "description": "Token contract address"
    },
    "subscription_token": {
      "type": "string",
      "description": "Optional Cybercentry subscription token. Uses your plan quota instead of paying per call."
    }
  }
}

media_content_verification — Media Content Verification

Advertised by the server during the last successful anonymous check.

Check whether an image or video is authentic and where it came from: C2PA content credentials, provenance and metadata extraction, with an avatar and logo impersonation check. Detect AI-generated or tampered media before trusting it. Costs $1.00 per call, paid in USDC over x402.

media_content_verification input schema

{
  "type": "object",
  "required": [
    "image_uri",
    "media_file_path"
  ],
  "properties": {
    "image_uri": {
      "type": "string",
      "description": "Avatar/logo image URI: HTTPS URL or IPFS path"
    },
    "media_file_path": {
      "type": "string",
      "description": "URL or path to the media file to verify"
    },
    "extract_metadata": {
      "type": "boolean",
      "description": "Extract file metadata (default: true)"
    },
    "subscription_token": {
      "type": "string",
      "description": "Optional Cybercentry subscription token. Uses your plan quota instead of paying per call."
    },
    "verify_authenticity": {
      "type": "boolean",
      "description": "Verify content authenticity / C2PA provenance (default: true)"
    }
  }
}

openclaw_ai_agent_verification — OpenClaw AI Agent Verification

Advertised by the server during the last successful anonymous check.

Audit an AI agent configuration for security holes: prompt injection exposure, missing authentication, over-broad tool permissions and unsafe gateway settings. Check an agent before you trust it or connect to it. Costs $1.00 per call, paid in USDC over x402.

openclaw_ai_agent_verification input schema

{
  "type": "object",
  "required": [
    "config"
  ],
  "properties": {
    "tool": {
      "type": "string",
      "description": "Tool to validate, as a JSON string"
    },
    "config": {
      "type": "string",
      "description": "Agent configuration as a JSON string"
    },
    "skills": {
      "type": "string",
      "description": "Skills"
    },
    "message": {
      "type": "string",
      "description": "Message"
    },
    "sessionId": {
      "type": "string",
      "description": "Session ID"
    },
    "subscription_token": {
      "type": "string",
      "description": "Optional Cybercentry subscription token. Uses your plan quota instead of paying per call."
    }
  }
}

post_launch_screening — Post-launch Screening

Advertised by the server during the last successful anonymous check.

Score a live token launch under ERC-8376, the token launch abuse standard we co-authored. The twelve-signal vector is assembled from chain state and scored against the eleven deployer abuse patterns into an abuse score of 0 to 100, with confidence reported separately so a high score on thin evidence cannot read as a certainty. Signals that could not be computed are named rather than scored clean. Price decline is excluded by rule, so a launch that locked liquidity, sold nothing and fell 95 per cent still scores clean: falling is not fraud. Name the creator, because at most venues the token was deployed by the venue's own factory and the creating address is the launchpad rather than the applicant. A screening, not a bonded on-chain report. Costs $1.00 per call, paid in USDC over x402.

post_launch_screening input schema

{
  "type": "object",
  "required": [
    "token"
  ],
  "properties": {
    "chain": {
      "type": "string",
      "description": "Chain name or EVM chain ID. base (8453) only for now, since the scoring contracts are deployed there."
    },
    "token": {
      "type": "string",
      "description": "Token contract address"
    },
    "creator": {
      "type": "string",
      "description": "Wallet of the party who requested the launch, as connected at your venue. Without it the launch is unattributed and the signals about the deployer come back unavailable."
    },
    "subscription_token": {
      "type": "string",
      "description": "Optional Cybercentry subscription token. Uses your plan quota instead of paying per call."
    }
  }
}

pre_launch_screening — Pre-launch Screening

Advertised by the server during the last successful anonymous check.

Screen who is asking to launch, before you deploy anything for them. At most venues the launchpad creates the token, so the only thing in front of you beforehand is a connected wallet: this screens that wallet, and it includes the full wallet verification rather than a summary of one. OFAC SDN sanctions screening, the funding chain walked to depth across 33 chains, mixer contact including the Tornado Cash pools, dusting, control clusters and exchange reuse, with a risk score. Then the launch-specific half: allocations this wallet has taken from contracts before and whether it still holds them or sold them, and whether the ticker it wants collides with a token it already touched. Says what it could not establish rather than reporting it clean. Eight of the twelve ERC-8376 signals describe conduct during or after a sale and cannot exist yet, so this reports on the party and not on the launch. Costs $1.00 per call, paid in USDC over x402.

pre_launch_screening input schema

{
  "type": "object",
  "required": [
    "creator"
  ],
  "properties": {
    "chain": {
      "type": "string",
      "description": "Chain name or EVM chain ID. Defaults to base (8453)."
    },
    "ticker": {
      "type": "string",
      "description": "Ticker or name they want, to check for collision with an existing project"
    },
    "creator": {
      "type": "string",
      "description": "Wallet address of the party requesting the launch, as connected at your venue"
    },
    "subscription_token": {
      "type": "string",
      "description": "Optional Cybercentry subscription token. Uses your plan quota instead of paying per call."
    }
  }
}

private_data_verification — Private Data Verification

Advertised by the server during the last successful anonymous check.

Prove a fact about private data without revealing the data: validates text integrity and returns a zero-knowledge proof (ZKP) with a verification ID and URL. Costs $1.00 per call, paid in USDC over x402.

private_data_verification input schema

{
  "type": "object",
  "required": [
    "cpdv_data"
  ],
  "properties": {
    "cpdv_data": {
      "type": "string",
      "description": "Data (e.g., Test Data)"
    },
    "subscription_token": {
      "type": "string",
      "description": "Optional Cybercentry subscription token. Uses your plan quota instead of paying per call."
    }
  }
}

quantum_cryptography_verification — Quantum Cryptography Verification

Advertised by the server during the last successful anonymous check.

Encrypt text with quantum-resistant (post-quantum) cryptography, for secrets that must outlast classical encryption. Returns a record ID and a decrypt URL. Costs $1.00 per call, paid in USDC over x402.

quantum_cryptography_verification input schema

{
  "type": "object",
  "required": [
    "cqcv_data"
  ],
  "properties": {
    "cqcv_data": {
      "type": "string",
      "description": "Any text data you want to encrypt and verify"
    },
    "subscription_token": {
      "type": "string",
      "description": "Optional Cybercentry subscription token. Uses your plan quota instead of paying per call."
    }
  }
}

solidity_code_verification — Solidity Code Verification

Advertised by the server during the last successful anonymous check.

Audit Solidity smart contract source for vulnerabilities before you deploy or call it. Returns findings with a clear risk level. Costs $1.00 per call, paid in USDC over x402.

solidity_code_verification input schema

{
  "type": "object",
  "required": [
    "solidity_code"
  ],
  "properties": {
    "solidity_code": {
      "type": "string",
      "description": "Solidity Code"
    },
    "subscription_token": {
      "type": "string",
      "description": "Optional Cybercentry subscription token. Uses your plan quota instead of paying per call."
    }
  }
}

wallet_verification — Wallet Verification

Advertised by the server during the last successful anonymous check.

Screen a wallet address for sanctions and risk: OFAC SDN sanctions screening, risk scoring and suspicious-activity detection across 33 EVM chains. Check a counterparty before you transact with it. Costs $1.00 per call, paid in USDC over x402.

wallet_verification input schema

{
  "type": "object",
  "required": [
    "wallet_address"
  ],
  "properties": {
    "wallet_address": {
      "type": "string",
      "description": "Wallet Address"
    },
    "subscription_token": {
      "type": "string",
      "description": "Optional Cybercentry subscription token. Uses your plan quota instead of paying per call."
    }
  }
}

web_application_verification — Web Application Verification

Advertised by the server during the last successful anonymous check.

Scan a website or dApp frontend for vulnerabilities using OWASP checks, before connecting a wallet to it or trusting it with user data. Costs $1.00 per call, paid in USDC over x402.

web_application_verification input schema

{
  "type": "object",
  "required": [
    "target_url"
  ],
  "properties": {
    "target_url": {
      "type": "string",
      "description": "Target URL"
    },
    "subscription_token": {
      "type": "string",
      "description": "Optional Cybercentry subscription token. Uses your plan quota instead of paying per call."
    }
  }
}

Prompts

Not advertised

No prompt definitions available.

Resources

Not advertised

No resource definitions available.

90-day uptime

A lightweight connection check about every six hours, sampled on hosts with many listings. It shows the server answered, not that its tools work.

Too few checks for a percentage yet (2 of 2 answered).

2026-11-07: 2 of 2 checks answered

30-day availability

Aggregated from read-only remote checks; this is not a tool-execution or security guarantee.

Successful checks: 1 of 1 (100%)
Average latency: 741 ms
95th percentile latency: 741 ms

Maintenance history

Public check and source-refresh events. Editorial and ownership records remain private.

Nov 6, 2026, 8:04 PM UTC · probe · passed · 741 ms · metadata changed · 14 tool(s)

Connect from your client

Each snippet registers the same endpoint; pick the client you use.

This server is operated by the named third party. Listing and endpoint checks are not an endorsement or a security audit. Review the operator's permissions, terms, and data handling before connecting. How listings are checked and corrected.

Claude Code

Run this once in a terminal. It registers the remote server. Use --scope project to write .mcp.json for the repo.

Claude Code configuration

claude mcp add --transport http cybercentry-verification-mcp https://centry.cybercentry.co.uk/api/mcp

Codex

Run this once. Codex stores MCP servers in ~/.codex/config.toml (or .codex/config.toml in a trusted project).

Codex configuration

codex mcp add cybercentry-verification-mcp --url https://centry.cybercentry.co.uk/api/mcp

Cursor

Merge this server into .cursor/mcp.json in your project, then enable cybercentry-verification-mcp in your MCP settings.

Cursor configuration

{
  "mcpServers": {
    "cybercentry-verification-mcp": {
      "url": "https://centry.cybercentry.co.uk/api/mcp"
    }
  }
}

Cline

Merge this into cline_mcp_settings.json (Cline → MCP Servers → Configure).

Cline configuration

{
  "mcpServers": {
    "cybercentry-verification-mcp": {
      "type": "streamableHttp",
      "url": "https://centry.cybercentry.co.uk/api/mcp",
      "disabled": false
    }
  }
}

VS Code

Merge this server into .vscode/mcp.json. Use MCP: List Servers to start cybercentry-verification-mcp and inspect its tools.

VS Code configuration

{
  "servers": {
    "cybercentry-verification-mcp": {
      "type": "http",
      "url": "https://centry.cybercentry.co.uk/api/mcp"
    }
  }
}

Gemini CLI

Run this once. It writes .gemini/settings.json in the current project; pass --scope user for ~/.gemini/settings.json.

Gemini CLI configuration

gemini mcp add --transport http cybercentry-verification-mcp https://centry.cybercentry.co.uk/api/mcp

Claude Desktop

Open Claude Settings > Connectors > Add custom connector, enter this server URL and enable it for the conversation. This is a manual remote-connector handoff, not a desktop JSON configuration.

Claude Desktop configuration

https://centry.cybercentry.co.uk/api/mcp

Windsurf

Merge this into ~/.codeium/windsurf/mcp_config.json, then refresh MCP in Cascade. Windsurf remote servers use serverUrl, not url.

Windsurf configuration

{
  "mcpServers": {
    "cybercentry-verification-mcp": {
      "serverUrl": "https://centry.cybercentry.co.uk/api/mcp"
    }
  }
}

Let your agent find its tools

Find servers like Cybercentry Verification MCP from your agent. Add Koskamo once to search the index for endpoints, access requirements, and client setup. Public discovery needs no key.

Connect Koskamo Explore workflows

Do you run Cybercentry Verification MCP?

Prove ownership with a DNS record, a well-known file, or your Official MCP Registry entry, and your edits publish immediately. Proofs are re-checked weekly; admins can still hide or remove a listing.

Claim this listing