# io.github.verixiaapps/hostdefi-x402

> Free token-safety scans + paid x402 verdicts, signals, radar & EVM swap quotes for AI agents.

- name: io.github.verixiaapps/hostdefi-x402
- version: 1.3.1
- connection class: R0 (autonomous)
- trust: 76/100 flags: no-repository
- quality: 91/100 (strong)
- owner: not claimed
- descriptor: https://api.protogrid.dev/v1/servers/io.github.verixiaapps%2Fhostdefi-x402
- tools: https://api.protogrid.dev/v1/servers/io.github.verixiaapps%2Fhostdefi-x402/tools

**An agent can connect right now, no human step.** Remote endpoint, no authentication, reachable on the last probe.

## Connection (mcpServers)

```json
{
  "mcpServers": {
    "hostdefi-x402": {
      "type": "http",
      "url": "https://hostdefi.com/api/v1/mcp"
    }
  }
}
```


## Trust

- hygiene: 80
- liveness: 98
- freshness: 85
- provenance: 45
- drivers: +website +reachable +uptime-95% ~updated-59d-ago -no-repository
- Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed.

## Quality 91/100 (strong)

### protocol: 75 (weight 25)

- warn `protocol.modern`: newest supported version is 2025-06-18; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
- n/a `protocol.stateless`: only applies to 2026-07-28 servers
- pass `protocol.transport`: streamable HTTP
- n/a `protocol.list_ttl`: only applies to 2026-07-28 servers

### authorization: n/a (weight 15)

- n/a `auth.prm`, `auth.as_metadata`, `auth.cimd`: no remote uses OAuth
- n/a `auth.secret_in_url`: no templated URL

### tool hygiene: 100 (weight 30)

- pass `tools.descriptions`: every tool has a description
- pass `tools.description_length`: descriptions are concise
- pass `tools.schemas`: every tool has an object input schema
- pass `tools.annotations`: 15 of 15 tools declare readOnlyHint or destructiveHint
- pass `tools.directory_hints`: every tool declares readOnlyHint, destructiveHint, idempotentHint and openWorldHint
- pass `tools.token_cost`: about 3,359 tokens to load every tool
- pass `tools.api_dump`: tools are not a one-to-one API dump

### stability: 100 (weight 15)

- pass `stability.changes`: no tool changes in 30 days
- pass `stability.rug_pull`: no tool changed its meaning under the same name

### dependencies: n/a (weight 15)

- n/a `deps.known_vulns`, `deps.mcp_sdk_version`, `deps.resolvable`: no npm or PyPI package

- tools: 15, about 3,359 tokens to load them all
- tool set hash: dd623c33353663c639a153e5ade22077
- badge: [![protogrid quality](https://protogrid.dev/badge/io.github.verixiaapps/hostdefi-x402.svg)](https://protogrid.dev/servers/io.github.verixiaapps/hostdefi-x402)
- Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed.

### Tool changes

_No tool definition changes recorded._

## Remotes

- https://hostdefi.com/api/v1/mcp (streamable-http, auth none, reachable true, uptime30d 0.94736844)

## Packages

_none_

## Tools (15)

- `buy_api_key`: PAID ($5, one payment). Mint a 30-day HostDeFi Agent-plan API key (5,000 calls, batch enabled) — the key arrives in the paid response; no account, no signup. Call once WITHOUT x402_payment to receive the x402 payment requirements (an `accepts` array); pay one of them with any x402 client/wallet, then call again with `x402_payment` set to the base64 X-PAYMENT payload. You are only charged when a result actually comes back.
- `get_x402_pricing`: FREE. The HostDeFi machine-payable price catalog: every paid resource, its USD price and settlement rails.
- `predict_history`: PAID ($0.02/call). 24h odds history for one tracked Polymarket market: [ts, yesUsd, noUsd] points sampled ~1/min into a normalized series — one call, no auth juggling. An untracked market is an uncharged 404. Call once WITHOUT x402_payment to receive the x402 payment requirements (an `accepts` array); pay one of them with any x402 client/wallet, then call again with `x402_payment` set to the base64 X-PAYMENT payload. You are only charged when a result actually comes back.
- `predict_markets`: PAID ($0.005/call). Polymarket prediction markets HostDeFi tracks (top ~100 by 24h volume): market ids, questions, latest yes/no odds and sampling stats from HostDeFi's own recorded series. Call once WITHOUT x402_payment to receive the x402 payment requirements (an `accepts` array); pay one of them with any x402 client/wallet, then call again with `x402_payment` set to the base64 X-PAYMENT payload. You are only charged when a result actually comes back.
- `pregrad_signals`: PAID ($0.05/call). Pre-graduation on-chain signals for a Solana mint: bundled-launch detection, curve-aware holder concentration, Token-2022 traps, authority state. Call once WITHOUT x402_payment to receive the x402 payment requirements (an `accepts` array); pay one of them with any x402 client/wallet, then call again with `x402_payment` set to the base64 X-PAYMENT payload. You are only charged when a result actually comes back.
- `radar_alerts`: PAID ($0.01/call). Recent HostDeFi trend-radar alerts: big dated movers with real market cap, structured JSON. Call once WITHOUT x402_payment to receive the x402 payment requirements (an `accepts` array); pay one of them with any x402 client/wallet, then call again with `x402_payment` set to the base64 X-PAYMENT payload. You are only charged when a result actually comes back.
- `scan_token`: FREE. HostDeFi token-safety scan — pass any token contract address (Solana mint or EVM address), or an exact token name/ticker: structured risk read with concerning/legitimate on-chain signals (authority state, liquidity, holder concentration, contract flags). No payment, no signup — fair use 100 checks/day per IP (the same free scanner as https://hostdefi.com/scan).
- `swap_evm_price`: PAID ($0.002/call). EVM swap price preview: expected and minimum output for a pair/amount before committing to a firm quote — the cheap look-before-you-swap call. Call once WITHOUT x402_payment to receive the x402 payment requirements (an `accepts` array); pay one of them with any x402 client/wallet, then call again with `x402_payment` set to the base64 X-PAYMENT payload. You are only charged when a result actually comes back.
- `swap_evm_quote`: PAID ($0.01/call). Executable EVM swap: a firm KyberSwap-routed quote plus a ready-to-sign transaction for the taker's OWN wallet — non-custodial, no key, no account. A 1% platform fee in the chain's native coin is priced into the returned transaction, on top of the swap. Call once WITHOUT x402_payment to receive the x402 payment requirements (an `accepts` array); pay one of them with any x402 client/wallet, then call again with `x402_payment` set to the base64 X-PAYMENT payload. You are only charged when a result actually comes back.
- `token_launches`: PAID ($0.02/call). Fresh token launches with HostDeFi safety pre-reads baked in: newest token profiles annotated with authority state, bundled-launch flag, holder concentration and market depth — the clean flag is fail-closed (true only when every check is provably good). Call once WITHOUT x402_payment to receive the x402 payment requirements (an `accepts` array); pay one of them with any x402 client/wallet, then call again with `x402_payment` set to the base64 X-PAYMENT payload. You are only charged when a result actually comes back.
- `token_report`: PAID ($0.35/call). HostDeFi full due-diligence report — one document: the A+–F verdict, on-chain signals (authority state, bundled-launch read, holder concentration, Token-2022 traps on Solana), the dated verdict-history series, trend-radar mentions and a rug-ledger cross-check. Call once WITHOUT x402_payment to receive the x402 payment requirements (an `accepts` array); pay one of them with any x402 client/wallet, then call again with `x402_payment` set to the base64 X-PAYMENT payload. You are only charged when a result actually comes back.
- `token_risk_deep`: PAID ($0.25/call). Deep HostDeFi report in one call: the current A+-F verdict with authority/holder signals, the FULL dated safety history for the token, and a derived trend block (grade movement, liquidity trajectory, worst drawdown, days tracked). All figures are computed from recorded rows — no projections. History depth accrues from 2026-08-16. Call once WITHOUT x402_payment to receive the x402 payment requirements (an `accepts` array); pay one of them with any x402 client/wallet, then call again with `x402_payment` set to the base64 X-PAYMENT payload. You are only charged when a result actually comes back.
- `token_risk_verdict`: PAID ($0.02/call). HostDeFi A+–F token safety verdict by chain + address: grade, score, verdict prose, liquidity/holders/authority signals. Call once WITHOUT x402_payment to receive the x402 payment requirements (an `accepts` array); pay one of them with any x402 client/wallet, then call again with `x402_payment` set to the base64 X-PAYMENT payload. You are only charged when a result actually comes back.
- `wallet_exposure`: PAID ($0.10/call). Wallet risk-exposure read for a Solana wallet: its largest holdings graded through the full verdict path, exposure counts by risk tier, and a rug-ledger symbol cross-check. Holdings exposure heuristics — NOT AML attribution or sanctions screening. Call once WITHOUT x402_payment to receive the x402 payment requirements (an `accepts` array); pay one of them with any x402 client/wallet, then call again with `x402_payment` set to the base64 X-PAYMENT payload. You are only charged when a result actually comes back.
- `x402_provider_risk`: PAID ($0.02/call). Vet an x402 seller BEFORE paying it: A–F grade from observable signals (402-spec fidelity, price sanity, payTo presence, TLS, latency), dated crawl snapshot. Call once WITHOUT x402_payment to receive the x402 payment requirements (an `accepts` array); pay one of them with any x402 client/wallet, then call again with `x402_payment` set to the base64 X-PAYMENT payload. You are only charged when a result actually comes back.