# CanaryGuard 402

> Deterministic prompt-injection detection & sanitization for AI agents via x402 on Base.

- name: io.github.ak10082247-max/canaryguard-402
- version: 1.0.2
- connection class: R0 (autonomous)
- trust: 97/100
- quality: 81/100 (new)
- owner: not claimed
- descriptor: https://api.protogrid.dev/v1/servers/io.github.ak10082247-max%2Fcanaryguard-402
- tools: https://api.protogrid.dev/v1/servers/io.github.ak10082247-max%2Fcanaryguard-402/tools

**An agent can connect right now, no human step.** Remote endpoint, no authentication, reachable on the last probe.

## Connection (mcpServers)

```json
{
  "mcpServers": {
    "canaryguard-402": {
      "type": "http",
      "url": "https://canaryguard-402.onrender.com/mcp"
    }
  }
}
```


## Trust

- hygiene: 100
- liveness: 100
- freshness: 100
- provenance: 90
- drivers: +repository +namespace-matches-repo +website +reachable +uptime-100% +updated-4d-ago
- Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed.

## Quality 81/100 (new)

### protocol: 75 (weight 25)

- warn `protocol.modern`: newest supported version is 2024-11-05; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
- n/a `protocol.stateless`: only applies to 2026-07-28 servers
- pass `protocol.transport`: streamable HTTP
- n/a `protocol.list_ttl`: only applies to 2026-07-28 servers

### authorization: n/a (weight 15)

- n/a `auth.prm`, `auth.as_metadata`, `auth.cimd`: no remote uses OAuth
- n/a `auth.secret_in_url`: no templated URL

### tool hygiene: 86 (weight 30)

- pass `tools.descriptions`: every tool has a description
- pass `tools.description_length`: descriptions are concise
- pass `tools.schemas`: every tool has an object input schema
- pass `tools.annotations`: 34 of 34 tools declare readOnlyHint or destructiveHint
- fail `tools.directory_hints`: no tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: repairAndSanitizeJson (idempotentHint); getSafeYieldAllocation (idempotentHint); nansenTgmHolders (idempotentHint); …
- pass `tools.token_cost`: about 3,475 tokens to load every tool
- pass `tools.api_dump`: tools are not a one-to-one API dump

### stability: n/a (weight 15)

- n/a `stability.changes`, `stability.rug_pull`: tool history recorded for 5 of the 7 days needed

### dependencies: n/a (weight 15)

- n/a `deps.known_vulns`, `deps.mcp_sdk_version`, `deps.resolvable`: no npm or PyPI package

- tools: 34, about 3,475 tokens to load them all
- tool set hash: 5d9436b1a39df21f5a6affa373833b3d
- tools last changed: 2026-10-17T16:33:54.049Z
- badge: [![protogrid quality](https://protogrid.dev/badge/io.github.ak10082247-max/canaryguard-402.svg)](https://protogrid.dev/servers/io.github.ak10082247-max/canaryguard-402)
- Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed.

### Tool changes

- 2026-10-17 `nansenProfilerAddressBalance` added
  - Profiles any Solana or Base wallet address for current token balances, USD valuation, historical win-rate, and drainer/OFAC taint. Price: 0.010 USDC on Base.
- 2026-10-17 `nansenTgmHolders` added
  - Returns top-10/top-50 holder distribution, LP lock percentage, and coordinated sybil cluster detection for any Solana or Base token. Price: 0.010 USDC on Base.
- 2026-10-17 `nansenTgmWhoBoughtSold` added
  - Analyzes who bought and sold a specific Solana or Base token over the last 24h, segmented by Smart Money, Whales, Fresh Wallets, and Dev Clusters. Price: 0.010 USDC on Base.
- 2026-10-17 `nansenSmartMoneyDexTrades` added
  - Returns real-time DEX trades executed by labeled smart-money and whale wallets on Solana and Base with pre-trade honeypot verification. Price: 0.010 USDC on Base.
- 2026-10-17 `nansenSmartMoneyNetflow` added
  - Tracks institutional and high-win-rate whale wallet net inflows and outflows across Solana SPL and Base ERC-20 tokens. Price: 0.010 USDC on Base.
- 2026-10-17 `nansenTokenScreener` added
  - Screens trending Solana (Pump.fun/Raydium) and Base (Aerodrome/Uniswap V3) tokens with pre-verified honeypot, tax, and liquidity depth metrics. Price: 0.010 USDC on Base.
- 2026-10-16 `auditMcpToolSchema` added
  - Inspects Model Context Protocol (MCP) tool definitions, JSON schemas, and server cards for hidden instructions, tool shadowing, and data exfiltration vectors. Price: 0.010 USDC on Base.
- 2026-10-16 `auditEip712Signature` added
  - Audits EIP-712 and EIP-3009 typed-data signature payloads (Permit, Permit2, transferWithAuthorization) to block malicious spender approvals and phishing domains. Price: 0.010 USDC on Base.
- 2026-10-16 `calculateLlmTokenPricing` added
  - Calculates exact input, cached-input, and output token costs across frontier LLMs (OpenAI, Anthropic, Gemini, DeepSeek, Meta) and recommends optimal model routing. Price: 0.010 USDC on Base.
- 2026-10-16 `getSafeDefiYields` added
  - Curates top risk-adjusted USDC, EURC, and WETH DeFi yield pools on Base (Morpho, Aave V3, Aerodrome, Moonwell), pre-screened for TVL depth and audit status. Price: 0.010 USDC on Base.

Full history: https://api.protogrid.dev/v1/servers/io.github.ak10082247-max%2Fcanaryguard-402/changes

## Remotes

- https://canaryguard-402.onrender.com/mcp (streamable-http, auth none, reachable true, uptime30d 1)

## Packages

_none_

## Tools (34)

- `analyzeEvmWallet`: Comprehensive EVM wallet security profile on Base, analyzing transaction velocity, approval exposure, drainer interaction risk, and smart-account state. Price: 0.010 USDC on Base.
- `auditEip712Signature`: Audits EIP-712 and EIP-3009 typed-data signature payloads (Permit, Permit2, transferWithAuthorization) to block malicious spender approvals and phishing domains. Price: 0.010 USDC on Base.
- `auditEip712SignaturePayload`: Audits EIP-712 and EIP-3009 typed-data signature payloads (Permit, Permit2, transferWithAuthorization) to prevent unauthorized token approvals and replay attacks. Price: 0.02 USDC on Base.
- `auditMcpToolPoisoning`: Inspects Model Context Protocol (MCP) tool definitions, descriptions, and JSON schemas for hidden prompt overrides, shadowing attacks, and exfiltration sinks. Price: 0.02 USDC on Base.
- `auditMcpToolSchema`: Inspects Model Context Protocol (MCP) tool definitions, JSON schemas, and server cards for hidden instructions, tool shadowing, and data exfiltration vectors. Price: 0.010 USDC on Base.
- `auditUrlAgentReadiness`: Audits any domain or URL for AI agent readiness (llms.txt, .well-known/x402, openapi.json, MCP server card) and detects hidden CSS/DOM prompt-injection traps. Price: 0.010 USDC on Base.
- `calculateLlmTokenPricing`: Calculates exact input, cached-input, and output token costs across frontier LLMs (OpenAI, Anthropic, Gemini, DeepSeek, Meta) and recommends optimal model routing. Price: 0.010 USDC on Base.
- `canary_sanitize`: Deterministic prompt-injection firewall and honeypot scrubber for AI agents. Sanitizes untrusted text and blocks detected wallet-draining commands before context ingestion. Price: 0.010 USDC on Base.
- `checkSmartContractHoneypot`: Audits Base smart contracts for hidden transfer locks, owner blacklist modifiers, unverified proxy upgrades, and malicious fee-on-transfer hooks. Price: 0.02 USDC on Base.
- `checkWalletDrainer`: Audits EVM wallet and counterparty addresses on Base for Permit2 drainer exposure, approval phishing history, and OFAC sanctions flags. Price: 0.02 USDC on Base.
- `checkWalletSanctions`: Screens EVM and Solana wallet addresses against OFAC SDN sanctions lists, Lazarus Group attributions, and known DeFi exploit/drainer blacklists. Price: 0.010 USDC on Base.
- `decodeBaseTxStatus`: Decodes Base Mainnet transaction receipts, EIP-3009 transferWithAuthorization settlements, ERC-20 transfer logs, gas fees, and finality confirmations. Price: 0.010 USDC on Base.
- `getCryptoPriceOnchain`: Returns tamper-resistant on-chain USD spot prices, 24h volatility, and Chainlink/TWAP oracle deviation metrics for major Base and EVM assets. Price: 0.010 USDC on Base.
- `getOndemandMarketSnapshot`: On-demand institutional market intelligence snapshot combining Base DEX spot & TWAP prices, Aerodrome/Uniswap V3 liquidity depth, perpetual funding rates, and Polymarket whale orderbook divergence. Price: 0.020 USDC on Base.
- `getPolymarketOddsPulse`: Delivers sanitized Polymarket CLOB implied probabilities, bid-ask spreads, and 24-hour smart-money volume movers across crypto, macro, and geopolitics. Price: 0.010 USDC on Base.
- `getPolymarketVerifiedOdds`: Delivers CanaryGuard-sanitized Polymarket CLOB implied probabilities, bid-ask spread depth, and smart-money orderbook skew across high-volume markets. Price: 0.02 USDC on Base.
- `getSafeBaseTrending`: Returns top Base Mainnet tokens by 24h DEX volume and liquidity velocity that pass CanaryGuard zero-honeypot and prompt-injection safety gates. Price: 0.02 USDC on Base.
- `getSafeDefiYields`: Curates top risk-adjusted USDC, EURC, and WETH DeFi yield pools on Base (Morpho, Aave V3, Aerodrome, Moonwell), pre-screened for TVL depth and audit status. Price: 0.010 USDC on Base.
- `getSafeYieldAllocation`: Computes an institutional risk-adjusted DeFi capital allocation matrix across multi-audited Base and Arbitrum liquidity vaults (Morpho Blue, Aave V3, Moonwell, Aerodrome) with smart-contract timelock and depeg stress scores. Price: 0.020 USDC on Base.
- `getTokenHistoryAndSpread`: Returns multi-timeframe Base token price history (1h, 24h, 7d, 30d OHLCV summary), Chainlink vs. Uniswap V3/Aerodrome bid-ask spread in bps, and realized volatility skew. Price: 0.020 USDC on Base.
- `guardAgentMemory`: Scans RAG context chunks, vector DB retrievals, and persistent agent memory payloads for delayed sleeper-agent instructions and cross-session poisoning. Price: 0.02 USDC on Base.
- `inspectBaseToken`: Audits Base ERC-20 token contracts for honeypot risks, buy/sell transfer taxes, liquidity depth, and prompt injection traps in token metadata. Price: 0.010 USDC on Base.
- `inspectContractInfo`: Inspects Base EVM smart contract bytecode size, EIP-1967/UUPS proxy implementation slots, EIP-7702 delegation designators, and verified function selectors. Price: 0.010 USDC on Base.
- `inspectPhishingUrl`: Audits target URLs, API endpoints, and Web3 dApp domains for IDN homograph spoofing, Angel/Pink/Inferno drainer scripts, and hidden DOM prompt injections. Price: 0.02 USDC on Base.
- `inspectUniswapPoolState`: Audits Uniswap V3/V4 and Aerodrome liquidity pools on Base, returning tick liquidity depth, fee tier, price impact bps, and LP concentration rug-risk scores. Price: 0.010 USDC on Base.
- `nansenProfilerAddressBalance`: Profiles any Solana or Base wallet address for current token balances, USD valuation, historical win-rate, and drainer/OFAC taint. Price: 0.010 USDC on Base.
- `nansenSmartMoneyDexTrades`: Returns real-time DEX trades executed by labeled smart-money and whale wallets on Solana and Base with pre-trade honeypot verification. Price: 0.010 USDC on Base.
- `nansenSmartMoneyNetflow`: Tracks institutional and high-win-rate whale wallet net inflows and outflows across Solana SPL and Base ERC-20 tokens. Price: 0.010 USDC on Base.
- `nansenTgmHolders`: Returns top-10/top-50 holder distribution, LP lock percentage, and coordinated sybil cluster detection for any Solana or Base token. Price: 0.010 USDC on Base.
- `nansenTgmWhoBoughtSold`: Analyzes who bought and sold a specific Solana or Base token over the last 24h, segmented by Smart Money, Whales, Fresh Wallets, and Dev Clusters. Price: 0.010 USDC on Base.
- `nansenTokenScreener`: Screens trending Solana (Pump.fun/Raydium) and Base (Aerodrome/Uniswap V3) tokens with pre-verified honeypot, tax, and liquidity depth metrics. Price: 0.010 USDC on Base.
- `repairAndSanitizeJson`: Deterministically repairs malformed or truncated LLM JSON payloads (missing quotes, trailing commas, markdown fences) while scrubbing embedded prompt-injection payloads. Price: 0.010 USDC on Base.
- `runFullEnterpriseRiskAudit`: Enterprise 360-degree security audit bundle combining Base bytecode/proxy inspection, DEX liquidity rug-risk analysis, OFAC/Lazarus sanctions screening, EIP-712 permit verification, and deterministic prompt-injection firewalling. Price: 0.020 USDC on Base.
- `verifyAgentAttestation`: Generates a cryptographic attestation report verifying an autonomous AI agent wallet, x402 EIP-3009 payment capability, counterparty reputation score, and zero-drainer history on Base. Price: 0.020 USDC on Base.