AgentSec MCP

Created By
traveljamboree2 months ago
AI security intelligence on Base. Three paid MCP tools: CVE vulnerability lookup ($0.01), IP/domain reputation check ($0.01), and secret/credential scan ($0.05). Pay-per-call via x402 USDC on Base. No API keys required for callers. Hosted on Cloudflare Workers with per-tool x402 payment challenges.
Overview

Pay-per-call security intelligence for AI agents

Three MCP tools for CVE lookup, IP reputation, and secret scanning. Priced in USDC on Base via x402. No API keys, no subscriptions — just pay per call.

MCP-native x402 payments USDC on Base Cloudflare Workers edge

Three tools, priced per call

All payments are micropayments in USDC on Base. No minimum, no recurring charges.

cve_lookup

$0.01 per call

Query CVE vulnerability data by package+version or CVE ID. Sources: NVD + OSV.dev with parallel fetch, LRU cache, and graceful degradation. Never returns a false "clean" verdict on partial data.

reputation_check

$0.01 per call

Check IP or domain reputation. Sources: AbuseIPDB + VirusTotal with security-conservative verdict hierarchy: malicious > suspicious > unknown > clean. Unknown on partial data — never false clean.

secret_scan

$0.05 per call

Detect exposed secrets in text: AWS keys, GitHub PATs, OpenAI/Anthropic keys, Stripe keys, Slack tokens, PEM private keys, and more. Input text is never logged, cached, or forwarded — privacy guaranteed by architecture.

Quickstart

Any MCP-compatible agent with x402 payment support can call the server. No registration needed.

1. Trigger a payment challenge

curl -X POST https://agentsec-mcp.agentsec-mcp.workers.dev/mcp \
  -H "Content-Type: application/json" \
  -d '{
    "jsonrpc": "2.0",
    "id": 1,
    "method": "tools/call",
    "params": {
      "name": "cve_lookup",
      "arguments": { "cve_id": "CVE-2021-44228" }
    }
  }'

2. Receive an HTTP 402 with payment requirements

{
  "x402Version": 1,
  "error": "payment_required",
  "accepts": [{
    "scheme": "exact",
    "network": "base",
    "maxAmountRequired": "10000",
    "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
    "payTo": "0x3385c6022F92B5BdBaC221BE3C4e381ae09Ca26F"
  }]
}

3. Resubmit with an X-Payment header (signed USDC transfer)

Any x402-compatible client library handles the signing + retry automatically. See the x402 protocol docs for client integration.

Production status

Live on Base mainnet. Monitor status in real time at the public health endpoint.

GET https://agentsec-mcp.agentsec-mcp.workers.dev/health

{ "status": "ok", "version": "0.1.0", "upstreams": { "nvd": "ok", "abuseipdb": "ok", "virustotal": "ok", "x402_facilitator": "ok" } }

Server Config

{
  "mcpServers": {
    "agentsec": {
      "url": "https://agentsec-mcp.agentsec-mcp.workers.dev/mcp",
      "transport": "http"
    }
  }
}
Project Info
Created At
2 months ago
Updated At
2 months ago
Author Name
traveljamboree
Star
-
Language
-
License
-
Category

Recommend Servers

View All
Mnemom

14 hours ago
//beforeyouship — LLM Cost Modeling From Your Editor
@Indiegoing

Query realistic LLM cost models without leaving your editor. beforeyouship models the **true monthly cost** of an LLM app architecture — retries, prompt caching, batch discounts, infra overhead, and 3×/10× growth — across GPT-5.x, Claude, Gemini, DeepSeek, and more. Not a token calculator: a planning tool for the design phase, before you commit to a stack. **No API key needed to try it** — demo mode covers the six free-tier models. A Pro key from [beforeyouship.dev](https://beforeyouship.dev) unlocks the full 18-model catalog. ## What you can ask - "How much will a RAG chatbot cost at 10,000 requests/day?" - "Compare Claude Haiku vs Gemini Flash pricing for my workload" - "What's the cheapest model for a multi-step agent at scale?" - "Show me current per-token prices for Anthropic models" ## Tools ### `estimate_cost` Full cost model for an architecture at a given usage level. Returns Naive / Realistic / Worst Case monthly cost per model, 3×/10× growth scenarios, and an opinionated recommendation with reasoning. ### `get_model_prices` Current per-1M-token pricing — input, output, cached input, batch — with context windows and staleness metadata. ### `list_archetypes` Seven preset architecture patterns (simple chatbot, chatbot with history, RAG pipeline, multi-model router, coding assistant, document processor, multi-step agent) used as starting points for estimates. ## Setup **Claude Code:** ​```bash claude mcp add --transport http beforeyouship https://beforeyouship.dev/api/mcp ​``` **Cursor / other clients** — add a remote server: ​```json { "mcpServers": { "beforeyouship": { "type": "streamable-http", "url": "https://beforeyouship.dev/api/mcp" } } } ​``` Add an `Authorization: Bearer bys_...` header with a Pro key for the full catalog. ## Try it > Estimate the monthly cost of a RAG pipeline at 10,000 requests/day

13 hours ago
Docwand

13 hours ago