Connect
8 clients · secrets stay placeholdersQuality 85 / 100good
protocol75 · weight 25
- warn
protocol.modernnewest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
- n/a
protocol.statelessonly applies to 2026-07-28 servers
- pass
protocol.transportstreamable HTTP
- n/a
protocol.list_ttlonly applies to 2026-07-28 servers
authorizationn/a · weight 15
- n/a
auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
- n/a
auth.secret_in_urlno templated URL
tool hygiene86 · weight 30
- pass
tools.descriptionsevery tool has a description
- pass
tools.description_lengthdescriptions are concise
- pass
tools.schemasevery tool has an object input schema
- pass
tools.annotations2 of 2 tools declare readOnlyHint or destructiveHint
- fail
tools.directory_hintsno tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: check_recipient_lookalike (destructiveHint, idempotentHint); onchain_check_info (destructiveHint, idempotentHint, openWorldHint)
- pass
tools.token_costabout 230 tokens to load every tool
- pass
tools.api_dumptools are not a one-to-one API dump
dependenciesn/a · weight 15
- n/a
deps.known_vulns,
deps.mcp_sdk_version,
deps.resolvabledeps.dev does not know [email protected]
2 tools, about 230 tokens to load them all · tool set 9b18205b607e · checked 2026-11-07 18:01 UTC
Tool changes
No tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.
Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.
Trust 97 / 100
+repository +namespace-matches-repo +website +reachable +uptime-97% +updated-8d-ago
Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.
Dependencies
Dependency graphs from deps.dev; advisories from OSV.dev, including the GitHub Advisory Database and the PyPI Advisory Database; all CC BY 4.0. The graph is what a clean install of this version resolves today; nothing was installed or run. How it is checked.
More from io.github.devx-agent
Official server.json
{
"name": "io.github.devx-agent/address-poisoning-check",
"title": "Address Poisoning Check",
"$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
"remotes": [
{
"url": "https://address-poisoning-check.nextill-pos.workers.dev/mcp",
"type": "streamable-http"
}
],
"version": "1.1.0",
"packages": [
{
"version": "1.1.0",
"transport": {
"type": "stdio"
},
"identifier": "devx-address-poisoning-check",
"registryType": "npm",
"packageArguments": [
{
"type": "positional",
"value": "mcp"
}
]
}
],
"repository": {
"url": "https://github.com/devx-agent/address-poisoning-check",
"source": "github"
},
"websiteUrl": "https://address-poisoning-check.nextill-pos.workers.dev",
"description": "Before sending crypto, check the recipient for address poisoning: lookalikes and bad checksums"
}