MCP HeartbeatTHE MCP OBSERVATORY
Public workspace

Explore

Evidence for your next connection.

Independent measurements of remote MCP servers. Every observation has a timestamp.

Read-only probes

VerifyLite

Claim this listing

io.github.SecondShotAI/verifylite

SecondShotAI

Verify before you pay or act: site, transaction, token and injection checks for agents. x402 USDC.

Finance & CryptoIs VerifyLite down?Alternatives

12 of 22 checks passed

  • Handshake
  • Tools listed
  • Updated recently

Responded

The server completed its last measured handshake. This is an observation, not a guarantee.

Connect to server
Median latency
87 ms
Uptime, 30 days
Not measured
Last checked

Measurement details

Core

  • Pass
    Reachable

    Latest probe returned HTTP 200 in 87 ms.

  • Pass
    Valid handshake

    protocolVersion 2025-11-25, serverInfo.name verifylite.

  • Pass
    Lists tools

    tools/list returned 40 tools.

  • Pass
    Current protocol

    Negotiated 2025-11-25. The bar is 2025-06-18 or newer.

  • Pass
    HTTPS

    The endpoint URL is https.

Performance

  • Not measured
    Fast (p50)

    Median latency 87 ms over 1 samples in 7 days. The bar is 1000 ms. Need at least 5 samples.

  • Not measured
    Consistent (p95)

    95th percentile 87 ms over 1 samples in 7 days. The bar is 3000 ms. Need at least 20 samples.

  • Not measured
    Reliable (uptime)

    1 of 1 attempts returned a tool list in 30 days (100%). The bar is 99%. Need at least 30 samples.

  • Not measured
    Stable tool list

    Fewer than two successful probes in 30 days, so tool-list stability is not measured.

Access

  • Pass
    Open access

    tools/list succeeded with no credential, and the record declares none.

  • Not measured
    Standard auth

    Auth is not required, so the OAuth metadata check does not apply.

  • Not measured
    Free tier cited

    No publisher quote has been checked.

Tools

  • Pass
    Tools described

    Every tool description is at least 20 characters.

  • Pass
    Valid input schemas

    Every inputSchema is a JSON Schema object.

  • Pass
    Parameters documented

    80 of 80 parameters have a description (100%). The bar is 80%.

  • Pass
    Safety hints

    Every tool sets readOnlyHint or destructiveHint.

Publisher

  • Pass
    Verified namespace

    Listed in the Official MCP Registry.

  • Not measured
    Website matches publisher

    This namespace is not a reverse domain, so the website comparison does not apply.

  • Fail
    Source repo linked

    No repository URL is on file.

  • Fail
    Repo owner matches

    The GitHub repository owner does not match the namespace login.

  • Pass
    Recently updated

    Updated 2026-11-05T14:58:12.781799Z, within 180 days.

  • Not measured
    Open-source licence

    No GitHub repository to ask about a licence.

Tools

  • chain_balance

    Base mainnet balance for one address: ETH and USDC (human-readable and raw), plus up to 10 ERC-20 tokens you list (with symbol and decimals), transaction count, and whether it is a wallet or a contract. One price for 0 to 10 tokens. Useful for checking a wallet is funded before a payment, confirming a payout or airdrop landed, tracking agent or treasury wallets, or screening a counterparty. Read-only. Not charged for invalid addresses or when Base can't be reached. Paid via x402; see list_prices.

    Measured

  • chain_block

    Base mainnet block details for the latest block or a given block number: number, hash, timestamp, transaction count, gas used and limit, and base fee. Useful for checking chain head and freshness, timestamping events, and counting confirmations. Read-only. Not charged for an invalid or future block number or when Base can't be reached. Paid via x402; see list_prices.

    Measured

  • chain_contract

    Inspects one Base mainnet address: whether it holds contract code and how large, whether it is an EIP-1967 upgradeable proxy (and its implementation address), EIP-7702 delegation, and which standards it reports or behaves like (ERC-165, ERC-721 NFT, ERC-1155, ERC-20). Useful for knowing what kind of contract an agent is about to interact with or approve. Read-only. Not charged for an invalid address or when Base can't be reached. Paid via x402; see list_prices.

    Measured

  • chain_gas

    Current Base mainnet gas: gas price, base fee, and priority fee in gwei, plus estimated execution cost in ETH for an ETH transfer, a USDC transfer, and a typical swap, from the latest block. Useful for timing transactions and budgeting fees before sending. No input needed. Not charged when Base can't be reached. Paid via x402; see list_prices.

    Measured

  • chain_token

    ERC-20 token metadata for one contract on Base mainnet: name, symbol, decimals, and total supply (human-readable and raw), with a flag for whether it behaves like an ERC-20 at all and whether it is native USDC. Handles older tokens that return bytes32 names. Useful for formatting token amounts correctly and spotting look-alike tokens. Read-only. Not charged for an invalid address or an address with no contract. Paid via x402; see list_prices.

    Measured

  • chain_tx

    Base mainnet transaction lookup by hash: status (success, failed, or pending), block, timestamp, confirmations, from, to, ETH value, total fee including the L1 data fee, method id, and every USDC transfer in the transaction decoded to sender, recipient, and amount. Useful for confirming that a USDC or x402 payment really settled before delivering goods. Read-only. Not charged for an invalid hash, a hash not found on Base, or when Base can't be reached. Paid via x402; see list_prices.

    Measured

  • check_email

    Email check: validates the address format, confirms the domain exists and accepts mail (MX), and flags disposable providers, role accounts (info@, support@), and free providers. Returns deliverable_likely, risky, undeliverable, or invalid with a reason. No message is sent. Useful for cleaning sign-up lists and lead data before outreach. Paid via x402; see list_prices.

    Measured

  • check_prompt_injection

    Prompt injection detection for AI agents: classify untrusted, agent-bound text or a URL (web pages, emails, tool and MCP output, RAG documents) as clean, suspicious or malicious before your LLM reads it. Returns a 0-100 risk score, each matched pattern (instruction overrides, jailbreaks, fake system prompts, requests for keys or seed phrases, exfiltration links, invisible Unicode, hidden HTML) and cleaned text. Up to 50,000 characters. Not charged on bad input. Paid via x402; see list_prices.

    Measured

  • check_site_safety

    Website safety check for one URL. Passively fetches the site and returns a verdict (safe, caution, unsafe), a 0-100 score, and evidence-backed flags: TLS validity, HTTP-to-HTTPS redirect, redirect chain and offsite redirects, security headers, mixed content, insecure forms, and domain age from the official registry. Useful before visiting, linking to, buying from, or submitting data to an unfamiliar site. Not charged if the host cannot be checked. Paid via x402; see list_prices.

    Measured

  • check_site_safety_pro

    Website safety check plus a Google Web Risk lookup for malware, phishing, and unwanted software. Includes the full /safe report: verdict (safe, caution, unsafe), 0-100 score, TLS, redirects, security headers, mixed content, insecure forms, and domain age. A blocklist hit makes the verdict unsafe. Useful for screening links before a payment, login, or download. Not charged if the blocklist cannot be reached. Paid via x402; see list_prices.

    Measured

  • check_sites_batch

    Batch website safety check: the full /safe report for several URLs in one call, priced per site and cheaper than single checks. Each result has a verdict (safe, caution, unsafe), a 0-100 score, and evidence-backed flags for TLS, redirects, security headers, mixed content, insecure forms, and domain age, plus a summary count. Useful for screening every link in a search result, email, or document at once. Not charged if no site can be checked. Paid via x402; see list_prices.

    Measured

  • contract_call

    Call any read-only (view/pure) function on a Base contract and get the decoded answer. Give the function as a signature like balanceOf(address) returns (uint256) plus args, or raw 0x calldata. Supports address, bool, uint/int, bytesN, string, bytes and arrays, an optional historical block, and plain revert reasons. Raw return data is always included. Not charged for invalid input, reverted calls, or when Base can't be reached. Paid via x402; see list_prices.

    Measured

  • contract_events

    Recent events (logs) one Base contract emitted, newest first, decoded: token transfers and approvals with amounts, Uniswap/Aerodrome swaps, liquidity and reserve updates, WETH wraps, NFT transfers, and admin actions (ownership changes, proxy upgrades, pauses, role grants) flagged. Filter by event name to search about 22 hours back. Counts by event type and the block window searched. Read-only. Not charged for invalid input or when Base can't be reached. Paid via x402; see list_prices.

    Measured

  • crypto_price

    Current prices in USD from Chainlink Data Feeds on Base mainnet: ETH, BTC, cbBTC, SOL, USDC, DAI, and EUR. One pair or all at once, each with the feed's last update time, age in seconds, and a stale flag, read straight from the oracle contracts (the same prices DeFi protocols use). Useful for valuing balances, converting USDC amounts, and checking a stablecoin peg. Not charged for an unknown pair or when the feeds can't be read. Paid via x402; see list_prices.

    Measured

  • domain_report

    Domain intelligence: WHOIS/RDAP registration (registrar, created and expiry dates, status, name servers) plus DNS records (A, AAAA, MX, NS, TXT, CAA) and email security (SPF, DMARC), with flags for new, expiring or misconfigured domains, as one JSON object. Useful for vetting a company, vendor or link before trusting it. Not charged for invalid or reserved domain names. Paid via x402; see list_prices.

    Measured

  • federal_register_search

    Search the US Federal Register, the government's daily journal of rules, proposed rules, notices and presidential documents. Filter by keyword, type, agency and date range, only items still open for comment, or look up one document by number. Returns title, agency, publication and effective dates, comment deadline, a trimmed abstract, citation, docket IDs and official links. Useful for agents that monitor regulation. Not charged for invalid input or when nothing matches. Paid via x402; see list_prices.

    Measured

  • get_time

    Current time from a reliable server clock: UTC ISO timestamp, Unix seconds and milliseconds, and optionally the local date, time, weekday, and UTC offset in any IANA time zone (daylight saving handled). Useful because language models don't know the current date or time. Not charged for an unknown time zone. Paid via x402; see list_prices.

    Measured

  • honeypot_check

    Honeypot and sell-tax check for a Base token. Finds its deepest WETH or USDC pool (Uniswap V2/V3, Aerodrome, Slipstream) and simulates a buy then a sell on a Base node: no money moves. Returns whether selling works, the actual buy tax and sell tax, round-trip loss, pool and liquidity, with a verdict: clean, taxed, high_tax, honeypot, no_liquidity or inconclusive. Useful before an agent buys, swaps or accepts a token. Not charged for invalid input or tokens with no WETH or USDC pool. Paid via x402; see list_prices.

    Measured

  • ip_info

    Classifies an IPv4 or IPv6 address: family, canonical form, and whether it is public, private (RFC 1918 or unique local), loopback, link-local, carrier-grade NAT, multicast, documentation, or reserved, including IPv4-mapped IPv6. With no input over HTTP, returns the caller's own public IP and country. Useful for validating network input and filtering internal addresses. Not charged for an invalid address. Paid via x402; see list_prices.

    Measured

  • link_preview

    Link preview: returns the title, description, preview image, site name, favicon, canonical URL, and Open Graph/Twitter card details for one URL, like a chat app's link unfurl. Useful when an agent posts, shares, or summarizes links and needs clean metadata without reading the whole page. Not charged if the page can't be fetched. Paid via x402; see list_prices.

    Measured

  • list_prices

    Lists every VerifyLite tool and its current price. Free.

    Measured

  • name_lookup

    Resolves Basenames (name.base.eth, on Base) and ENS names (name.eth, on Ethereum) to wallet addresses, including a Base-specific address and profile records (avatar, description, url, X, GitHub). Or give an 0x address to get its primary name, verified by resolving the name back to the same address. A bare name like jesse means jesse.base.eth. Useful before sending funds to a name or labeling counterparties. Read-only. Not charged for invalid or unregistered names. Paid via x402; see list_prices.

    Measured

  • new_uuid

    Generates standards-compliant UUIDs from a cryptographic random source: version 4 (random) or version 7 (time-ordered, sorts by creation time, good for database keys), one or up to 100 per call. Useful for idempotency keys, record IDs, and correlation IDs. Not charged for invalid options. Paid via x402; see list_prices.

    Measured

  • nft_lookup

    Look up one NFT on Base by contract and token ID: ERC-721 or ERC-1155, current owner (wallet or contract), collection name and symbol, and its metadata: name, description, image link, animation, traits. Reads ipfs://, ar://, https and inline on-chain metadata. Pass owner to confirm a wallet holds it (and its ERC-1155 balance). Read-only. Not charged for invalid input, tokens that don't exist, or when Base can't be reached. Paid via x402; see list_prices.

    Measured

  • package_vulnerabilities

    Check dependencies for known vulnerabilities before installing or shipping: up to 20 packages (npm, PyPI, Go, Maven, crates.io, RubyGems, NuGet, Packagist and more, by name and version or purl) against the OSV.dev database. Returns each advisory with CVE IDs, severity and CVSS score, fixed versions, the smallest safe upgrade, and links. Not charged for invalid input or if OSV.dev can't be reached. Paid via x402; see list_prices.

    Measured

  • ping

    x402 integration test for agents and payment clients: after a real USDC payment it confirms the payment arrived and echoes back what the server saw: network (Base or Arc), scheme, payer address, amount, asset and recipient, plus server time and an optional echo string. Useful for checking that a wallet, x402 client and budget limits work end to end before calling costlier services, and for uptime monitoring. The cheapest paid call VerifyLite offers. Paid via x402; see list_prices.

    Measured

  • random_number

    Cryptographically secure, unbiased randomness: whole numbers between min and max (default 1 to 100), or random picks from a list of choices, one or up to 100 per call. Useful because language models are bad at being random: fair draws, sampling, shuffling decisions, and A/B assignment. Not charged for invalid options. Paid via x402; see list_prices.

    Measured

  • read_feed

    RSS and Atom reader: give a feed URL or any news site, blog, or podcast page and get its latest items as clean JSON: title, link, published date, author, a plain-text summary, and media (podcast audio) links. Finds the feed automatically from the page when needed. Useful for news monitoring, research digests, and tracking competitors or releases. Not charged if no feed is found or it can't be fetched. Paid via x402; see list_prices.

    Measured

  • read_page

    Web page to markdown for AI agents: fetch one URL and get its main content as clean, LLM-ready markdown (navigation, ads, footers and scripts removed) with title, description, language, word count and a token estimate. Uses the site's own Markdown version when it offers one. Useful for RAG, summarizing articles, research and feeding pages to an LLM. Not charged if the page can't be fetched or isn't text. Paid via x402; see list_prices.

    Measured

  • repair_json

    Turns messy LLM output into valid JSON: strips Markdown code fences and surrounding prose, fixes trailing commas, single quotes, unquoted keys, comments, Python True/None, cut-off brackets, and stringified JSON. Optionally validates the result against a JSON Schema (draft 4 to 2020-12) and lists each error with its location. Returns the parsed data, the JSON text, and what was changed. Not charged if no JSON can be recovered or the input is invalid. Paid via x402; see list_prices.

    Measured

  • seo_check

    SEO check for one page: whether search engines can index it (meta robots, X-Robots-Tag, robots.txt rules), title and meta description length, canonical URL, H1 headings, viewport, language, Open Graph tags, sitemap, HTTPS, and redirects, with a 0-100 score and a list of issues by severity. Useful for site audits and pre-launch checks. Not charged if the page can't be fetched. Paid via x402; see list_prices.

    Measured

  • token_allowance_check

    Approval check for one wallet and one ERC-20 token on Base: how much each spender (up to 10 app or router addresses) is allowed to move, flagging unlimited approvals and approvals covering the full balance, plus approvals made through Uniswap Permit2 with their expiry. Defaults to checking Permit2 itself. Useful before signing, for wallet hygiene, and for spotting approvals to revoke. Read-only. Not charged for invalid addresses or non-tokens. Paid via x402; see list_prices.

    Measured

  • token_holders

    The largest holders of an ERC-20 token on Base, ranked, with balance, percent of supply and wallet/contract/burn type, read straight from the chain. Top 1/5/10 concentration (burns excluded), a wallets-only share, burned percent and a low-to-very-high level. For tokens whose whole transfer history fits (most new and small tokens) the list and holder count are exact; otherwise coverage is reported. Not charged for invalid input. Paid via x402; see list_prices.

    Measured

  • token_report

    One-call due diligence for a Base token before buying, accepting or listing it: owner powers in the contract (mint, pause, blacklist, fees, proxy), who holds the supply (top wallets, concentration), whether it can actually be sold and its real buy/sell tax (simulated), and whether the token or its owner is on the OFAC sanctions list or a scam blacklist. Returns one verdict (ok, caution, avoid, known issuer), a 0-100 risk score and plain reasons. Not charged for invalid input. Paid via x402; see list_prices.

    Measured

  • token_safety_check

    Risk check for an ERC-20 token on Base before buying, accepting, or holding it: reads the contract and its proxy implementation for owner powers (minting, pausing, blacklisting wallets, changing buy/sell taxes, trade limits, trading switches, burning others' tokens, upgrades), checks whether ownership was renounced and how much supply the owner holds. Returns a verdict, 0-100 risk score, and plain-language flags. Read-only. Not charged for invalid addresses or non-tokens. Paid via x402; see list_prices.

    Measured

  • transcribe_audio

    Speech-to-text for one audio or video file by URL, using Whisper (turbo) on a GPU. Returns the full transcript, timed segments, ready-made SRT and WebVTT captions, and the detected language; optional translation to English. Files up to 25 MB (about 25 minutes of typical MP3). Useful for captioning videos, indexing podcasts, or reading meetings. Not charged if the file can't be fetched or transcribed. Paid via x402; see list_prices.

    Measured

  • tx_preflight

    Pre-signing check for Base. Send a transaction (to, data, value, from) or a typed-data signature request and get what it does in plain words plus red flags: unlimited or wallet-targeted approvals, NFT approve-all, off-chain permits, sends to a token's own contract or the dead address, OFAC or scam-listed counterparties, risky tokens, and calls that would fail (simulated from your wallet). Verdict ok, caution, danger or block. Not charged for invalid input. Paid via x402; see list_prices.

    Measured

  • verify_url

    URL syntax validator. Takes one absolute HTTP or HTTPS URL and returns its normalized form, or a specific error code: unparseable, unsupported scheme, embedded credentials, IP literal, or local/metadata hostname. Never contacts the destination, so it is fast and side-effect free. Useful for cleaning URLs from user input, scraped pages, or LLM output before fetching them. Paid via x402; see list_prices.

    Measured

  • wallet_sanctions_check

    Screens 1 to 20 wallet addresses against the US Treasury OFAC SDN sanctions list (crypto addresses) and the ScamSniffer scam and drainer blacklist, in one call at one price. Returns block or clear per address with the reason, plus list sizes and freshness. Address-level, so it works for Base, Arc, Ethereum and any EVM chain. Useful before sending a payment, paying an x402 seller, accepting funds, or approving a spender. Read-only. Not charged for invalid addresses. Paid via x402; see list_prices.

    Measured

  • wallet_transfers

    Recent token transfers for one Base wallet, incoming and outgoing, newest first: token, symbol, amount, sender, recipient, transaction hash, block and time, with likely spam airdrops flagged. Filter by one token or by direction, up to 50 per call. Reports the block window searched. Useful for checking a counterparty's activity, confirming deposits, reconciling payments, or watching an agent's wallet. Read-only. Not charged for invalid input or when Base can't be reached. Paid via x402; see list_prices.

    Measured

Probe history

  • ok87 ms40 tools

Status and uptime

Add badge to your README

The image links back to this page. It shows checks passed, or uptime, and the colour follows the latest status. Responses are cached for 5 to 15 minutes.

MCP Heartbeat badge

Markdown

[![MCP Heartbeat](https://mcpheartbeat.com/badge/io.github.SecondShotAI/verifylite.svg)](https://mcpheartbeat.com/s/io.github.SecondShotAI/verifylite)

HTML

<a href="https://mcpheartbeat.com/s/io.github.SecondShotAI/verifylite"><img alt="MCP Heartbeat" src="https://mcpheartbeat.com/badge/io.github.SecondShotAI/verifylite.svg"></a>

Uptime markdown

[![MCP Heartbeat uptime](https://mcpheartbeat.com/badge/io.github.SecondShotAI/verifylite.svg?kind=uptime)](https://mcpheartbeat.com/s/io.github.SecondShotAI/verifylite)

Served from https://mcpheartbeat.com.

Related servers

All alternatives

Same function and industry, ranked by checks passed then median latency.

Connect to this server

Claude Code

claude mcp add --transport http verifylite https://verifylite.hydratinghealingtouch.workers.dev/mcp

Cursor .cursor/mcp.json

{
  "mcpServers": {
    "verifylite": {
      "url": "https://verifylite.hydratinghealingtouch.workers.dev/mcp"
    }
  }
}

VS Code .vscode/mcp.json

{
  "servers": {
    "verifylite": {
      "type": "http",
      "url": "https://verifylite.hydratinghealingtouch.workers.dev/mcp"
    }
  }
}