Pay-per-call security verification for AI agents: wallets, tokens, contracts, dApps, agents and more.
Nothing to install. This is a remote MCP server — connect to the URL and the tools appear.
| Endpoint | https://centry.cybercentry.co.uk/api/mcp |
| Transport | streamable-http |
| Registry | uk.co.cybercentry/verification |
| Website | https://centry.cybercentry.co.uk |
Remote servers are added as connectors, not through claude_desktop_config.json — that file is for local servers that run a command.
- Settings → Connectors
- Add → Add custom connector
- Paste
https://centry.cybercentry.co.uk/api/mcp
Anything that speaks MCP over streamable HTTP can connect. Point it at:
https://centry.cybercentry.co.uk/api/mcp
Check your client's own documentation for where a remote MCP server URL goes — some use a settings pane, some a config file. If yours takes a config file, the field is the server URL rather than a command.
Twelve tools. Two are free and need no payment, credentials or account:
| Tool | What it does |
|---|---|
list_services |
The catalogue: every verification, its inputs and its price |
recent_exploits |
Live exploit feed, curated from DefiLlama |
The other ten are paid, at $1.00 per call:
| Tool | What it verifies |
|---|---|
wallet_verification |
Sanctions screening and risk scoring across 35 EVM chains |
base_token_verification |
Base B20 tokens: honeypots, freeze-and-seize, pause, impersonation |
ethereum_token_verification |
Ethereum token due diligence |
solidity_code_verification |
Solidity source, for known vulnerability classes |
web_application_verification |
Live site and dApp frontend scan |
openclaw_ai_agent_verification |
An agent's configuration: auth gaps, prompt-injection exposure, unsafe permissions |
media_content_verification |
C2PA provenance and content authenticity |
private_data_verification |
Zero-knowledge proof over a payload, without revealing it |
quantum_cryptography_verification |
Quantum-resistant encryption of a payload |
cyber_security_consultant |
Advisory answers grounded in a security body of knowledge |
Wallet and web application verification return a job immediately and fill in as findings arrive; both can take up to three minutes. The rest return in under ten seconds.
No API keys. No accounts. Two ways to pay for the ten paid tools:
x402 — the client is told the price, pays in USDC, and retries. Automatic in clients that support it.
Base eip155:8453 USDC
Solana mainnet USDC
Subscription token — for clients that do not speak x402 yet. Pass subscription_token as a tool argument, or send it as the x-subscription-token header.
A paid call runs the verification before it settles, so a call that fails is never charged.
The interfaces these services implement were specified in public:
- ERC-8126 — AI Agent Verification (Final)
- ERC-8196 — AI Agent Authenticated Wallet (Final)
- ERC-8376 — Token Launch Abuse Detection and Remediation (open pull request)
- Endpoint — https://centry.cybercentry.co.uk/api/mcp
- Site and full catalogue — https://centry.cybercentry.co.uk
- How it works — https://centry.cybercentry.co.uk/guide
- Standards — https://centry.cybercentry.co.uk/standards
- OpenAPI — https://centry.cybercentry.co.uk/openapi.json
Cybercentry Limited