x402 merchant
PreFlight Checker$0.06 / callx402-api-catalog.onrender.com ↗
McpSecurityAuditTool-poisoningPrompt-injection

MCP server safety audit: completes a real initialize+tools/list handshake, then statically scans every tool's name/description/schema for hidden unicode (tool-poisoning), prompt-injection-style phrasing, and tools that quietly combine multiple high-privilege capabilities (network+filesystem+exec+credential access). If a GitHub repo is supplied, folds in a real software-supply-chain signal too.

MerchantReport

0x9041…847e

0x9041f8a43d0b43209b9227de2c7fb25c9fe3847eExplorer
Received
$3.73↓ 100%
Last 7d vs prior 7d
Paid out
$0.16
Last 7d vs prior 7d
Settlements
191↓ 100%
Last 7d vs prior 7d
6
Distinct counterparties
Over the whole indexed history

Received $3.73 of the $3059.84M Roundhouse has indexed across 1,397,496 wallets — less than 0.0001% of it.

Chains (from the recent scan): Base (191)

Funds flow over time

Activity

MayJunJulAugSepOctNov
LessMore

One square per day; click a day to see its settlements in the ledger.

Frequent counterparties

CounterpartySent to themReceived from themSettlementsLast
0x22df…1eb4$0.00$3.612362d agoGraph
0x2bd0…7625$0.16$0.0016253d agoGraph
0xa1d1…1978$0.00$0.0427d agoGraph
0xc9c7…1670$0.00$0.04233d agoGraph
0x7722…5e4a$0.00$0.02113d agoGraph
0x7e6b…2b1c$0.00$0.02164d agoGraph

Ranked by settled amount over this wallet's recent settlement window — who it normally transacts with.

Data quality

93% of observed volume is with a single counterparty, in all 191 observed settlements.

Organic volume $3.89 of $3.89 total.

Recent activity

Payer PayeeChainAmountx402RouteAgeTxn hash
0x9041…847e0x2bd0…7625BaseBase$0.001100%coinbase54d ago0x832c0b…c89e0e
0x9041…847e0x2bd0…7625BaseBase$0.001100%coinbase54d ago0xb8c1f7…854ef2
0x9041…847e0x2bd0…7625BaseBase$0.001100%coinbase55d ago0xb81a3c…d9044c
0x9041…847e0x2bd0…7625BaseBase$0.001100%coinbase55d ago0xd9cab3…a9233f
0x9041…847e0x2bd0…7625BaseBase$0.001100%coinbase55d ago0x6d6ec0…efd07a
0x9041…847e0x2bd0…7625BaseBase$0.001100%coinbase55d ago0x4bbadf…b028be
0x9041…847e0x2bd0…7625BaseBase$0.001100%coinbase55d ago0xb49f50…ec7bec
0x9041…847e0x2bd0…7625BaseBase$0.001100%coinbase55d ago0xad7494…393d17
0x9041…847e0x2bd0…7625BaseBase$0.001100%coinbase55d ago0x15eef6…5adf33
0x9041…847e0x2bd0…7625BaseBase$0.001100%coinbase55d ago0xb53f89…98749a
0x9041…847e0x2bd0…7625BaseBase$0.001100%coinbase55d ago0xcf97d0…f1c3fa
0x9041…847e0x2bd0…7625BaseBase$0.001100%coinbase55d ago0x672fc0…a04c15
0x9041…847e0x2bd0…7625BaseBase$0.001100%coinbase55d ago0xc63204…30a36b
0x9041…847e0x2bd0…7625BaseBase$0.001100%coinbase55d ago0xe2719b…be183a
0x9041…847e0x2bd0…7625BaseBase$0.001100%coinbase55d ago0xe55208…7d901d
0x9041…847e0x2bd0…7625BaseBase$0.001100%coinbase55d ago0xc8d2c0…2e6c3b
0x9041…847e0x2bd0…7625BaseBase$0.001100%coinbase55d ago0x709f3a…fe8236
0x9041…847e0x2bd0…7625BaseBase$0.001100%coinbase55d ago0x8edb78…90b6b6
0x9041…847e0x2bd0…7625BaseBase$0.001100%coinbase55d ago0x1abdd2…1d62e0
0x9041…847e0x2bd0…7625BaseBase$0.001100%coinbase55d ago0xc966e0…e939e2
0x9041…847e0x2bd0…7625BaseBase$0.001100%coinbase55d ago0xd16109…f9d173
0x9041…847e0x2bd0…7625BaseBase$0.001100%coinbase55d ago0xdfc67a…4e59fb
0x9041…847e0x2bd0…7625BaseBase$0.001100%coinbase55d ago0x21926f…66194c
0x9041…847e0x2bd0…7625BaseBase$0.001100%coinbase55d ago0x5a2472…21bf69
0x9041…847e0x2bd0…7625BaseBase$0.001100%coinbase55d ago0x3942b8…2f0615

Hand this page to an agent

Copy the prompt and paste it into Claude, an MCP client or your own agent — it will check 0x9041…847e's payment record before paying it over the free read API. No key, no account.

GET api.roundhouseai.io/v0/merchants/0x9041f8a43d0b43209b9227de2c7fb25c9fe3847e

Open skill.md
Show the prompt
Using Roundhouse, tell me whether this x402 merchant is worth paying: how many distinct
agents have paid it, how recently, and for what.

  Merchant wallet: 0x9041f8a43d0b43209b9227de2c7fb25c9fe3847e

curl -s 'https://api.roundhouseai.io/v0/merchants/0x9041f8a43d0b43209b9227de2c7fb25c9fe3847e'
curl -s 'https://api.roundhouseai.io/v0/entities/0x9041f8a43d0b43209b9227de2c7fb25c9fe3847e/settlements?limit=50'

The /v0 API needs an API key (`authorization: Bearer rh_live_…`) on everything except
/v0/unified* and /v0/endpoints. Either pay over x402 (mint a personal key for $0.01 at
GET https://api.roundhouseai.io/v0/test/x402), or ask me for an organization key, which I create at
https://roundhouseai.io/dashboard/connections. If you have neither, ask before going further.

If you do not have Roundhouse tools or skills installed, read
https://roundhouseai.io/skill.md first — it is the whole procedure.