Skip to content
Agentmart
Submit a tool

CanaryGuard 402

Deterministic prompt-injection detection & sanitization for AI agents via x402 on Base.

Connector by ak10082247-max · GitHub account verified by the MCP Registry

IndexedMITRemote (HTTP)
Write a review

Chalk Labs

Need help deploying CanaryGuard 402?

Chalk Labs sets up agents like this inside real teams: connected to your tools, tested on your data, with a human in the loop where it matters.

Book a call

Install

Works with Claude Code, VS Code, Cursor, Windsurf. Read the repository before you give any tool access to your data.

npx agentmarket install connector/ak10082247-max-canaryguard-402

Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.

Remote endpoint

  • https://canaryguard-402.onrender.com/mcp Remote (HTTP)

Get the weekly diff

The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.

We use your email only for this newsletter. Privacy

About

Deterministic prompt-injection detection & sanitization for AI agents via x402 on Base.

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this server can do and what it asks for, from its tool list, install config and code. Checked Nov 1, 2026.

Tools
28 read · 0 write · 0 deleteRead-only
Secrets
None asked for
Install scripts
Nothing to install (hosted)
Runs as
Hosted (remote endpoint)

Tools by what they do 28

From the running server's own tool list (tools/list) on Oct 25, 2026.

Read 28 · Look things up without changing anything.

  • analyzeEvmWallet
  • auditEip712Signature
  • auditEip712SignaturePayload
  • auditMcpToolPoisoning
  • auditMcpToolSchema
  • auditUrlAgentReadiness
  • calculateLlmTokenPricing
  • canary_sanitize
  • checkSmartContractHoneypot
  • checkWalletDrainer
  • checkWalletSanctions
  • decodeBaseTxStatus
Show 16 more tools
  • getCryptoPriceOnchain
  • getOndemandMarketSnapshot
  • getPolymarketOddsPulse
  • getPolymarketVerifiedOdds
  • getSafeBaseTrending
  • getSafeDefiYields
  • getSafeYieldAllocation
  • getTokenHistoryAndSpread
  • guardAgentMemory
  • inspectBaseToken
  • inspectContractInfo
  • inspectPhishingUrl
  • inspectUniswapPoolState
  • repairAndSanitizeJson
  • runFullEnterpriseRiskAudit
  • verifyAgentAttestation

Network hosts it talks to 23

  • api.cdp.coinbase.com · found in code
  • api.mainnet-beta.solana.com · found in code
  • api.telegram.org · found in code
  • app.uniswap.org · found in code
  • base-rpc.publicnode.com · found in code
  • base.blockscout.com · found in code
  • basescan.org · found in code
  • canaryguard-402.onrender.com · found in remote endpoint, install command, code
  • dial.to · found in code
  • eips.ethereum.org · found in code
  • facilitator.payai.network · found in code
  • github.com · found in code
  • glama.ai · found in code
  • lumierepaycheck.org · found in code
  • mainnet.base.org · found in code
  • mcpize.com · found in code
  • news.ycombinator.com · found in code
  • rugshield-402.onrender.com · found in code
  • sitemaps.org · found in code
  • stealthguard-402.onrender.com · found in code
  • vet402.com · found in code
  • x402-agent-tollbooth.onrender.com · found in code
  • x402-trust.com · found in code

Tools (28)

As the server listed them on Oct 25, 2026. Descriptions are the server’s own words; hidden characters are shown as [U+…].

  • analyzeEvmWalletread-only

    Comprehensive EVM wallet security profile on Base, analyzing transaction velocity, approval exposure, drainer interaction risk, and smart-account state. Price: 0.010 USDC on Base.

  • auditEip712Signatureread-only

    Audits EIP-712 and EIP-3009 typed-data signature payloads (Permit, Permit2, transferWithAuthorization) to block malicious spender approvals and phishing domains. Price: 0.010 USDC on Base.

  • auditEip712SignaturePayloadread-only

    Audits EIP-712 and EIP-3009 typed-data signature payloads (Permit, Permit2, transferWithAuthorization) to prevent unauthorized token approvals and replay attacks. Price: 0.02 USDC on Base.

  • auditMcpToolPoisoningread-only

    Inspects Model Context Protocol (MCP) tool definitions, descriptions, and JSON schemas for hidden prompt overrides, shadowing attacks, and exfiltration sinks. Price: 0.02 USDC on Base.

  • auditMcpToolSchemaread-only

    Inspects Model Context Protocol (MCP) tool definitions, JSON schemas, and server cards for hidden instructions, tool shadowing, and data exfiltration vectors. Price: 0.010 USDC on Base.

  • auditUrlAgentReadinessread-only

    Audits any domain or URL for AI agent readiness (llms.txt, .well-known/x402, openapi.json, MCP server card) and detects hidden CSS/DOM prompt-injection traps. Price: 0.010 USDC on Base.

  • calculateLlmTokenPricingread-only

    Calculates exact input, cached-input, and output token costs across frontier LLMs (OpenAI, Anthropic, Gemini, DeepSeek, Meta) and recommends optimal model routing. Price: 0.010 USDC on Base.

  • canary_sanitizeread-only

    Deterministic prompt-injection firewall and honeypot scrubber for AI agents. Sanitizes untrusted text and blocks detected wallet-draining commands before context ingestion. Price: 0.010 USDC on Base.

  • checkSmartContractHoneypotread-only

    Audits Base smart contracts for hidden transfer locks, owner blacklist modifiers, unverified proxy upgrades, and malicious fee-on-transfer hooks. Price: 0.02 USDC on Base.

  • checkWalletDrainerread-only

    Audits EVM wallet and counterparty addresses on Base for Permit2 drainer exposure, approval phishing history, and OFAC sanctions flags. Price: 0.02 USDC on Base.

  • checkWalletSanctionsread-only

    Screens EVM and Solana wallet addresses against OFAC SDN sanctions lists, Lazarus Group attributions, and known DeFi exploit/drainer blacklists. Price: 0.010 USDC on Base.

  • decodeBaseTxStatusread-only

    Decodes Base Mainnet transaction receipts, EIP-3009 transferWithAuthorization settlements, ERC-20 transfer logs, gas fees, and finality confirmations. Price: 0.010 USDC on Base.

  • getCryptoPriceOnchainread-only

    Returns tamper-resistant on-chain USD spot prices, 24h volatility, and Chainlink/TWAP oracle deviation metrics for major Base and EVM assets. Price: 0.010 USDC on Base.

  • getOndemandMarketSnapshotread-only

    On-demand institutional market intelligence snapshot combining Base DEX spot & TWAP prices, Aerodrome/Uniswap V3 liquidity depth, perpetual funding rates, and Polymarket whale orderbook divergence. Price: 0.020 USDC on Base.

  • getPolymarketOddsPulseread-only

    Delivers sanitized Polymarket CLOB implied probabilities, bid-ask spreads, and 24-hour smart-money volume movers across crypto, macro, and geopolitics. Price: 0.010 USDC on Base.

Show 13 more tools
  • getPolymarketVerifiedOddsread-only

    Delivers CanaryGuard-sanitized Polymarket CLOB implied probabilities, bid-ask spread depth, and smart-money orderbook skew across high-volume markets. Price: 0.02 USDC on Base.

  • getSafeBaseTrendingread-only

    Returns top Base Mainnet tokens by 24h DEX volume and liquidity velocity that pass CanaryGuard zero-honeypot and prompt-injection safety gates. Price: 0.02 USDC on Base.

  • getSafeDefiYieldsread-only

    Curates top risk-adjusted USDC, EURC, and WETH DeFi yield pools on Base (Morpho, Aave V3, Aerodrome, Moonwell), pre-screened for TVL depth and audit status. Price: 0.010 USDC on Base.

  • getSafeYieldAllocationread-only

    Computes an institutional risk-adjusted DeFi capital allocation matrix across multi-audited Base and Arbitrum liquidity vaults (Morpho Blue, Aave V3, Moonwell, Aerodrome) with smart-contract timelock and depeg stress scores. Price: 0.020 USDC on Base.

  • getTokenHistoryAndSpreadread-only

    Returns multi-timeframe Base token price history (1h, 24h, 7d, 30d OHLCV summary), Chainlink vs. Uniswap V3/Aerodrome bid-ask spread in bps, and realized volatility skew. Price: 0.020 USDC on Base.

  • guardAgentMemoryread-only

    Scans RAG context chunks, vector DB retrievals, and persistent agent memory payloads for delayed sleeper-agent instructions and cross-session poisoning. Price: 0.02 USDC on Base.

  • inspectBaseTokenread-only

    Audits Base ERC-20 token contracts for honeypot risks, buy/sell transfer taxes, liquidity depth, and prompt injection traps in token metadata. Price: 0.010 USDC on Base.

  • inspectContractInforead-only

    Inspects Base EVM smart contract bytecode size, EIP-1967/UUPS proxy implementation slots, EIP-7702 delegation designators, and verified function selectors. Price: 0.010 USDC on Base.

  • inspectPhishingUrlread-only

    Audits target URLs, API endpoints, and Web3 dApp domains for IDN homograph spoofing, Angel/Pink/Inferno drainer scripts, and hidden DOM prompt injections. Price: 0.02 USDC on Base.

  • inspectUniswapPoolStateread-only

    Audits Uniswap V3/V4 and Aerodrome liquidity pools on Base, returning tick liquidity depth, fee tier, price impact bps, and LP concentration rug-risk scores. Price: 0.010 USDC on Base.

  • repairAndSanitizeJsonread-only

    Deterministically repairs malformed or truncated LLM JSON payloads (missing quotes, trailing commas, markdown fences) while scrubbing embedded prompt-injection payloads. Price: 0.010 USDC on Base.

  • runFullEnterpriseRiskAuditread-only

    Enterprise 360-degree security audit bundle combining Base bytecode/proxy inspection, DEX liquidity rug-risk analysis, OFAC/Lazarus sanctions screening, EIP-712 permit verification, and deterministic prompt-injection firewalling. Price: 0.020 USDC on Base.

  • verifyAgentAttestationread-only

    Generates a cryptographic attestation report verifying an autonomous AI agent wallet, x402 EIP-3009 payment capability, counterparty reputation score, and zero-drainer history on Base. Price: 0.020 USDC on Base.

Signals

Stars
0
Forks
3
Open issues
1
Last commit
Oct 22, 2026 (9 days ago)
Last release
Oct 15, 2026 (16 days ago)

From GitHub (fetched Oct 24, 2026).

Details

Registry name
io.github.ak10082247-max/canaryguard-402
Version
1.0.2
Auth
Auth not stated
License
MIT
First seen
Oct 24, 2026
Last checked
Nov 1, 2026

More from ak10082247-max

Done for you

Rather not set it up yourself?

Chalk Labs scopes, builds and runs agents for your team: the task audit, the eval harness, the integrations and the weekly ops report. Fixed scope, priced before we start.

See how we build AI agents →Read the case studies

Chalk Labs is a two-founder AI and growth studio. We build AI agents, CRMs and MVPs for Web3 and AI companies, and have shipped 50+ product and token launches.

launches shipped
50+
launches shipped
media placements
500+
media placements
founders on every account
2
founders on every account

Press we've placed: Forbes · CoinDesk · Decrypt · Cointelegraph · The Block

Rahil Jain, Co-founder, Chalk Labs. Ex-Goldman Sachs engineer. You talk to the person who builds it.

Get CanaryGuard 402 running in your business

Tell us what you want to automate. A founder replies within one working day with a plan, not a pitch deck.

Goes to the Chalk Labs founders, not the newsletter. Privacy

Need help deploying CanaryGuard 402?

CallGet help
Cite this page

CanaryGuard 402 MCP server. Agent Mart. https://agentmart.dev/connectors/ak10082247-max-canaryguard-402 (last updated 2026-11-01)