Transparency log · MCP tool definitions
Your AI client trusts the tool descriptions an MCP server sends it — and a server can change them after you approved it. HISTOR keeps a public, signed record of what every remote MCP server in the official registry advertised, and tells you the day it changed.
Remote endpoints: it lists tools and never calls one. Registry packages: bounded canary calls run inside the isolated sandbox. It never says a server is safe — it tells you what was said, and when.
WebGL is unavailable here. The picture is the log itself: each label is a leaf, leaf hashes climb a Merkle tree, and a signed tree head seals the root.
What HISTOR is for
When you connect an MCP server, its tool descriptions go straight to the model as instructions. A server can pass your review with harmless descriptions and change them next week — one added sentence is all a prompt injection needs, and most clients never ask you again.
Every day HISTOR reads what each remote (streamable-HTTP) endpoint in the official MCP registry advertises, fingerprints it, signs what it saw and appends it to a log that can only grow. When a server's definitions change, the change gets a date and a diff.
Look up any server before you trust it. Paste what your client received and learn whether everyone else sees the same thing. Follow changes in a feed, or put a badge in your README. Every answer is signed, so you can verify it instead of believing it.
io.github.bck-stack/sitecheck-crypto-finance · https://api.chainmarket-api.workers.dev/mcp?ref=registry
128 pay-per-call agent tools: crypto, DeFi, on-chain and finance data tools. x402
crypto_1inch_pathfinder_quotes — Best swap quote for a token pair on an EVM chain, compared across two public DEX aggregators (KyberSwap and Velora/ParaSwap): amount out, USD values, estimated gas in USD, price impact against the input's USD value and the pools/DEXes used, plus which aggregator gives more. Chains: Ethereum, Base, Arbitrum, Optimism, Polygon, BNB Chain, Avalanche. Indicative quotes, not executable orders. Price: $ …crypto_aave_lending_markets — Aave v3 Ethereum main-market reserves: supply and borrow APY, utilization, max LTV, liquidation threshold, supply/borrow caps status, frozen/paused flags, total supplied and available liquidity. Filter by symbol, or get the first 20 reserves. Ethereum main market only. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.crypto_arbiscan_l2_rollup — Arbitrum One rollup batch postings to Ethereum L1 and the L1 gas they incurred: the latest SequencerBatchDelivered events on the SequencerInbox with batch number, L1 block and time, data location (blob or calldata), poster, execution gas, blob gas, gas prices and fees in ETH, plus totals. Read from Ethereum mainnet via Etherscan API V2. Price: $0.002 in USDC per successful call, paid with x402 (Ba …crypto_balancer_v2_pools — Balancer V2 pools by total liquidity (USD): pool name, type (weighted, stable, composable stable, and others), token symbols with weights where the pool has them, 24h volume and address. Top 1 to 20. Values are as the Balancer API reports them; some pools show implausible liquidity and are not corrected. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls …crypto_basescan_contract_events — Recent event logs of a contract on Base (chain 8453) from public RPC: block, time order, transaction hash, log index, event name (signature database), topics and data, with ERC-20/721 Transfer and Approval decoded to from/to/value. Look back up to 5,000 blocks (~2.8 h); optional event-signature filter. Internal transactions are not included. Price: $0.002 in USDC per successful call, paid with x40 …crypto_berachain_pol_validators — Berachain Proof-of-Liquidity telemetry from the public Berachain RPC: total BGT (Bera Governance Token) supply read from the BGT contract — BGT is minted only as PoL rewards, so its growth is the emitted amount — plus latest, safe and finalized blocks, finality lag, gas price (gwei), gas used % and average block time over the last 20 blocks. Per-gauge and per-validator splits are not read and not …crypto_binance_orderbook_depth — Binance spot order book snapshot for one pair: best bid and ask, spread, USD depth within 1% and 2% of mid price (from the returned levels only), and 24h volume, change and high/low. Up to 100 levels per side. Snapshot only; Binance market data, not a merged multi-exchange book. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.crypto_bitcoin_hashrate_difficulty — Bitcoin network hashrate (EH/s) with the last 3 daily averages, current difficulty, difficulty-epoch progress and expected change, and miner revenue over the last 144 blocks (about one day): total reward incl. fees in BTC, fee share and average reward per block. Network-wide figures from mempool.space, not per-miner. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); …crypto_bitcoin_mempool_stats — Bitcoin mempool congestion from mempool.space: unconfirmed transaction count and size, recommended fee rates in sat/vB, difficulty-adjustment progress and estimated retarget date, and blocks until the next halving (every 210,000 blocks). Current snapshot only; no history. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.crypto_blast_gold_points — Blast L2 native yield from the chain itself: for the rebasing USDB (stablecoin yield) and WETH (ETH staking yield) predeploy contracts, total supply and share price — the cumulative native-yield multiplier since launch (e.g. 1.126 = 12.6% earned) — plus latest/safe/finalized blocks, finality lag, gas price and block time. Blast Gold / DApp points are allocated off-chain by Blast and have no public …crypto_chainlink_price_feeds — Chainlink on-chain price feed (ETH/USD or BTC/USD, Ethereum mainnet): latest round answer in USD, round id, and the start and update times with the age of the last update in seconds. Only the two feeds listed here are supported. Heartbeat and deviation thresholds are not reported. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.crypto_circle_cctp_transfers — Circle CCTP (USDC cross-chain transfer) fast-burn allowance and the fee tiers for one source-to-destination domain pair. Narrowed: the attestation status of a specific transfer needs its burn transaction hash, which this tool does not take, so per-transfer attestation is not reported. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.crypto_coinbase_spot_exchange — Coinbase Exchange (US spot) order book for one product: best bid and ask, spread, USD depth within 1% and 2% of mid (aggregated level-2 levels only), 24h base volume, 24h RFQ (institutional request-for-quote) volume, last price and 24h high/low. Coinbase Exchange data only, not Coinbase Advanced or other venues. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); faile …crypto_coingecko_market_depth — CoinGecko per-exchange market depth for one coin: USD cost to move price up 2% and down 2% (liquidity), 24h volume in USD, last price and bid-ask spread, for the 15 highest-volume trading pairs. Each row is one exchange pair, not a merged order book. Data is CoinGecko's, updated on its own schedule. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are n …crypto_coinmarketcap_listings — Recently added tokens on CoinMarketCap (public new-listings page): name, symbol, date added, price, 24h change, 24h volume and market cap, from the page's embedded data. Exchange volume rank is not on this page and is not reported. Reads the public page, not the paid API. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.crypto_compound_market_stats — Compound v3 (Comet) market stats on Ethereum read on-chain: utilization, supply and borrow APY, total supply and borrow of the base asset, and every collateral asset with its borrow and liquidation collateral factors, liquidation factor and supply cap. Markets: usdc (cUSDCv3) or weth (cWETHv3). Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not ch …crypto_convex_vlcvx_voting — Convex Finance (cvx.eth) governance on Snapshot: the newest proposals (1 to 20) with title, state, start and end time, number of votes and the top two choice scores. Votes are the Snapshot tallies. vlCVX lock balances and per-wallet voting power are not in this source and are not reported. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged …crypto_cowswap_batch_auctions — CoW Protocol (Ethereum) latest batch auction result: auction id and block window, number of solver solutions, the winning solution (solver, score, ranking, settlement tx), and the top five solutions by ranking. Order details and clearing prices are not returned in this summary. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.crypto_cross_chain_bridge_flows — Cross-chain transfer volume from Wormholescan (Wormhole network): USD and token counts grouped by source to destination chain over the newest N transfers (1 to 100). A recent window, not total bridge TVL or long-term trends. Transfers with no USD price are counted but not summed. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.crypto_crypto_fundraising_rounds — Recent crypto and Web3 venture funding rounds (project, date, round type, amount and valuation in USD, lead and other investors, category, chains) from DefiLlama's public Raises page. Filter by date window, investor, category, chain, round or minimum amount. Amounts are as DefiLlama lists them and can be missing for undisclosed rounds; new rounds appear within days. Price: $0.002 in USDC per succe …crypto_crypto_hack_rekt_database — Rekt News leaderboard of the largest crypto hacks and exploits: rank, incident name, audit status as listed, loss in USD and date, from the public page (top 1 to 50). Root-cause write-ups and attack technique (e.g. flash loans) are not in the list and are not reported. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.crypto_crypto_liquidations_feed — OKX perpetual-swap liquidations for one underlying (e.g. BTC-USD): the most recent 100 filled forced liquidations, split into long and short liquidated USD value, with the largest events. Covers OKX only, and the window is the latest 100 events, not a fixed 24h total. Other exchanges' liquidation streams are not reported. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or A …crypto_curve_gauge_weights — Curve Finance gauges on one chain (default Ethereum): CRV emission APR range, CRV inflation rate per second and working supply per gauge, with the pool name and addresses. Sorted by CRV APR, top 1 to 50. Relative gauge weights and bribe yields are not in this source and are not reported. Small pools can show very high APR. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or …crypto_debank_wallet_portfolio — Multi-chain wallet net worth with DeFi positions and debt (40+ EVM chains and Solana, data from the Zerion API): total value in USD split by wallet, deposited, borrowed, locked and staked, top chains, and every protocol position (protocol, chain, type such as deposit, loan, staked, reward or locked, token, amount and USD value) grouped by protocol, with total debt. Price: $0.002 in USDC per succes …crypto_defillama_stablecoins — Stablecoin market cap (circulating USD), 1/7/30-day circulating change (mint/burn proxy), peg price and depeg % from DefiLlama. Pass symbols (e.g. USDT,USDC) or leave empty for the 10 largest. Net change is a change in circulating supply, not separate mint and burn events. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.crypto_defillama_tvl_oracle — Current total value locked (TVL, USD) of one DeFi protocol from DefiLlama, by protocol slug (e.g. aave, uniswap-v3). Returns the single current TVL number only; chain breakdown and history are not included. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.crypto_defillama_yields — DeFi pool APY (total, base, reward), TVL, 7/30-day APY change and impermanent-loss estimate (il7d, ilRisk) from DefiLlama. Filter by project, chain and symbol; returns up to 20 pools by TVL. APY is DefiLlama's estimate, not a guaranteed return. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.crypto_deribit_options_skew — Deribit BTC or ETH options for one expiry (default: nearest unexpired): at-the-money implied volatility (mark IV), and an IV skew at ±10% moneyness (put at 0.9x spot minus call at 1.1x spot, in IV points). This is a moneyness skew, not a 25-delta skew: Deribit's summary has no delta, so per-strike delta calls are not made. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or …crypto_dex_pool_liquidity — Live DEX pool snapshot from DexScreener for one pool address on one chain (Uniswap, Raydium, Curve and other DEXes DexScreener indexes): USD liquidity, token reserves, price, 24h volume and transactions, FDV. Slippage is not computed. Data is DexScreener's aggregate, not raw on-chain reads. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charge …crypto_dydx_chain_markets — dYdX v4 (Cosmos app-chain) perpetual market for one ticker: status, oracle price, 24h price change, 24h USD volume and trade count, hourly funding rate, initial and maintenance margin, and open interest in base units and an approximate USD value at the oracle price. Indexer data only. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.crypto_ethereum_gas_telemetry — Ethereum EIP-1559 gas per recent block: base fee (gwei), gas used ratio, and priority fee (tip) percentiles at 10/50/90 from eth_feeHistory, plus the next block's base fee. Gas used by contract is not included (this RPC does not give it). Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.crypto_ethereum_staking_rewards — Ethereum proof-of-stake yield snapshot: Lido stETH APR (protocol-wide, after Lido fees) and the beacon chain's finalized and justified epochs with the finality flag. Validator queue and churn are not in these sources and are not reported. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.crypto_etherscan_label_cloud — Etherscan public address-label cloud: entity labels (e.g. Binance, 0x Protocol) with counts of tagged accounts, transactions and tokens, from the label page's embedded data. Filter by name or take the top labels by total. Does not list individual deposit wallets and does not separate CEX deposit tags from other labels. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc) …crypto_fear_greed_index — Crypto Fear & Greed Index (0-100) from alternative.me: today's value and label, change vs yesterday and vs 7 days ago, 7-day average, and a sentiment momentum label (rising, falling, flat). Daily; the source updates once a day. Attribution to alternative.me is requested by the source. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.crypto_gmx_v2_glv_vaults — GMX v2 (Arbitrum) GLV liquidity vaults: each vault's name, vault token address, long and short collateral tokens, whether it is listed, and listing date. Trader net exposure, vault APY and GM market composition are not in this response and are not reported. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.crypto_honeypot_detector — EVM token honeypot check from honeypot.is: simulated buy/sell success, honeypot verdict, buy/sell/transfer tax, risk flags, open-source status and the main DEX pair liquidity. EVM only (no Solana). Simulation results can change with pool state; not financial advice. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.crypto_hyperliquid_perps_depth — Hyperliquid L1 perpetual market snapshot for one coin: best bid and ask, spread, USD depth within 1% of mid (from the 20 returned levels per side), mark and oracle prices, hourly funding rate, open interest in USD and 24h notional volume. Public market data only; vault PnL is not included. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged …crypto_jupiter_solana_routing — Jupiter aggregator quote on Solana for an exact-input swap: input and output amounts in base units, price impact %, USD value, slippage, and the AMM route legs (venue labels). Quote only, no transaction. Amounts stay in the token's smallest unit (decimals are not looked up). Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.crypto_lido_steth_peg — Lido stETH vs ETH peg from public USD prices (DefiLlama coins API): stETH and ETH price, discount or premium in %, plus Lido's total stETH staked and market cap. The two prices can be quoted a few minutes apart. Curve pool balances and the Lido withdrawal queue are not included. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.crypto_linea_consensys_rollup — Linea zkEVM rollup telemetry from the public Linea RPC: latest sequencer block, safe block and finalized block (proven and finalized on Ethereum L1) with numbers, times and transaction counts, the finality lag in blocks and seconds, gas price (gwei), base fee, gas used % of limit and average block time over the last 20 blocks. Batch/proof IDs are not exposed by the RPC and are not reported. Price: …crypto_makerdao_vault_status — Sky (MakerDAO) savings rates and peg: sUSDS and sDAI savings APY and TVL on Ethereum (DefiLlama yields), DAI and USDS USD price and depeg %, and circulating supply. Vault collateralization is not in these sources and is not reported. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.crypto_mantle_da_eigenlayer — Mantle Network L2 telemetry from the public Mantle RPC: latest block, safe block (its batch is posted to Ethereum/EigenDA) and finalized block with numbers, times and transaction counts, the head-to-safe and head-to-finalized lags in blocks and seconds, gas price (gwei), base fee, gas used % of limit and average block time over the last 20 blocks. Treasury AUM and per-blob EigenDA statistics are n …crypto_mev_block_analytics — Ethereum MEV-Boost delivered blocks from the Flashbots relay: proposer payment in ETH (block value), transaction count, gas used vs limit, and builder pubkeys with block counts. Covers the newest blocks only (1 to 50). Sandwich volume is not in this source and is not reported. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.crypto_nft_floor_wash_detector — ERC-721 collection activity on Ethereum from Blockscout: name, holder count, supply and the newest 50 transfers, with round-trip transfers (a token sent A to B and straight back to A) flagged as possible wash signals. No sale prices, floor price or royalties: this source does not provide them. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not cha …crypto_optimism_superchain_tx — OP Mainnet (Optimism) recent blocks from the public RPC: transactions per block, gas used per block, block time, and the transaction rate over the last N blocks (1 to 10). Sequencer revenue and Superchain-wide totals are not in this RPC and are not reported. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.crypto_polygon_pos_checkpoints — Polygon PoS checkpoints from the Heimdall API: the latest K checkpoints (1 to 10) with their Bor block range, timestamp and proposer, plus the average spacing in blocks and seconds. Checkpoints are the Ethereum-anchored root commitments. State-sync logs are not included. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.crypto_pyth_network_oracles — Pyth Network oracle prices with confidence bands, read on-chain from Pyth's Solana push feeds: price, confidence interval (absolute and %), EMA price and EMA confidence, publish time and age in seconds, feed id and account, for up to 20 symbols (BTCUSD, ETHUSD, SOLUSD, gold XAUUSD, stablecoins, LST rates; ~65 feeds). Call with list=true for every available symbol. Price: $0.002 in USDC per success …crypto_sanctioned_crypto_wallets — OFAC SDN list digital-currency addresses (from the Remarks field 'Digital Currency Address - <CODE> <address>'): list up to 200 entries with currency code, address and sanctioned entity name, optionally filtered by currency or checked for one address. Covers the current SDN.CSV only; the list is not complete for every chain, and a miss is not proof an address is clean. Price: $0.002 in USDC per su …crypto_scroll_l2_zk_proofs — Scroll (zkEVM L2) network statistics from its public explorer: total blocks and transactions, average block time, gas prices, network utilization and today's transactions, plus the newest blocks (1 to 10) with gas use and transaction counts. Narrowed: proof and batch-finalization status is not in this public API and is not reported. Price: $0.002 in USDC per successful call, paid with x402 (Base, …crypto_smart_contract_verify — EVM contract verification status from Sourcify (open, no key): match type (exact/partial), compiler, contract name, ABI function and event counts, proxy implementations. Only verified contracts; source files are not returned. Unverified contracts give a 404. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.crypto_solana_token_extensions — Solana SPL mint audit from the chain: program (Token or Token-2022), authorities, supply and decimals, plus Token-2022 extensions with risk flags for permanent delegate, transfer hook, transfer fee, default frozen state and mint close. Reads the mint account only; it does not check holders or liquidity. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls a …crypto_solana_validator_cluster — Solana validator snapshot from the public RPC: active and delinquent validator counts, total active stake in SOL, stake-weighted commission, cluster skip rate over the latest epoch block production, and the top validators by stake with their commission and skip rate. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.crypto_solscan_account_tokens — Solana account inventory: SOL balance, every SPL token account (Token and Token-2022 programs) with mint, amount, decimals and frozen state, token name, symbol, USD price and value for the largest holdings (Jupiter token data), and the latest transaction signatures with time and status. Read from Solana RPC. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed ca …crypto_sui_move_objects — Sui mainnet current epoch from the public GraphQL API: epoch number, reference gas price (MIST per gas unit), epoch start and end time, and total checkpoints. Shared objects and package ids are not included: the public JSON-RPC is deprecated and this tool does not query object lists. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.crypto_sushiswap_route_quotes — SushiSwap route quote for an exact-input swap on one EVM chain: amount out, swap price, price impact, gas spent and the tokens in the route. Quote only, no transaction data. The API needs a sender address; if none is given, a fixed placeholder address is sent and nothing is signed or executed. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not cha …crypto_tether_treasury_burns — USDT (Ethereum) supply changes from the USDT contract's own events over the last N blocks (1 to 200000, about 4 weeks): Tether issues (Issue), redemptions (Redeem) and destroyed funds of blacklisted addresses (DestroyedBlackFunds), with counts, totals and the latest and largest events. On-chain events only, not Tether's treasury reports. Price: $0.002 in USDC per successful call, paid with x402 (B …crypto_token_holder_concentration — Ethereum ERC-20 holder concentration from Blockscout: top 100 holders' share of total supply, top 10 share, and a Gini coefficient over those 100 balances. Gini is over the top 100 only, not all holders. Ethereum mainnet only. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.crypto_token_vesting_schedule — Token emission and unlock schedule per allocation label (team, investors, rewards, etc.) from DefiLlama emissions data, by protocol slug: last unlock day and amount, next scheduled unlock (if any in the data), and total unlocked to date. Amounts are in tokens. Coverage depends on DefiLlama having the protocol's emissions file. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana …crypto_ton_blockchain_jettons — TON jetton (token) masters from TON Center's public API: the newest N jetton masters (1 to 10) with raw address, total supply in base units, mintable flag, admin address and metadata URI. Jetton holder balances and Toncoin staking are not included. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.crypto_tornado_cash_anonymity — Tornado Cash ETH pools (0.1, 1, 10, 100 ETH): current pool balance, contract code presence, and an approximate anonymity set = balance divided by denomination (deposits not yet withdrawn, if nothing else moved the balance). Ethereum pools only; no relayer or multi-chain data. Sanctioned protocol data, read for its public on-chain state. Price: $0.002 in USDC per successful call, paid with x402 (Ba …crypto_uniswap_v3_ticks — Uniswap V3 liquidity distribution for an Ethereum pool, read on-chain: tokens, fee tier, tick spacing, current tick and price (both directions, decimals applied), in-range liquidity, and every initialized tick within a window around the price with its price, liquidityNet and the active liquidity of the range above it — the shape of concentrated liquidity. Default pool: USDC/WETH 0.05%. Price: $0.0 …crypto_whale_alert_transfers — Bitcoin large transactions in the latest block from mempool.space: total output in BTC, fee, txid and block height, filtered by minBtc. Bitcoin only (no ETH or SOL). Covers the first 25 transactions of the tip block; output total includes change, so it is transaction size, not one wallet's transfer. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are n …crypto_zapper_token_balances — Token balances of an EVM wallet across chains from Blockscout explorers: native coin and ERC-20 holdings with amount, USD price and USD value (largest first), plus per-chain and overall USD totals. Ethereum, Optimism and Gnosis by default; Base, Arbitrum and Polygon when the operator's free Blockscout key is set. Prices are Blockscout's; airdropped tokens can be spam. Price: $0.002 in USDC per suc …crypto_zerion_dna_feed — On-chain wallet portfolio and performance from Zerion across 40+ EVM chains and Solana: total value in USD, split by position type (wallet, deposited, borrowed, locked, staked) and by chain, 1-day change, lifetime PnL (realized, unrealized, total gain and %, invested, fees) and, with a period, the value history chart (up to 60 points). Price: $0.002 in USDC per successful call, paid with x402 (Bas …crypto_zksync_era_hyperchains — zkSync Era rollup batches from the public block explorer API: the newest N batches (1 to 20) with batch number, time, status (sealed, committed, proven, executed), L1 and L2 transaction counts, and the chain ids where each step was posted. Hyperchain (other zkSync chains) data is not included. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not cha …dev_investing_com_economic_calendar — Investing.com economic calendar for a date range (up to 7 days): each release with UTC time, country, currency, event name, category, importance (low/medium/high), reference period, actual, forecast and previous values with unit, Investing's actual-vs-forecast verdict, preliminary flag and the publishing source. Filter by country code, currency or minimum importance. Read from the API the Investin …dev_morningstar — Morningstar quote page data for a US stock, ETF or mutual fund: name, ticker, Morningstar star rating, key statistics shown free on the page (stocks: previous close, day and 52-week range, bid/ask, market cap, P/E, P/S, dividend yield, sector, industry, style box, employees), top-10 holdings with weight, market value and sector plus portfolio date (ETFs/funds), and the analyst report headline. Sub …finance_alpha_vantage_public — Alpha Vantage global quote for one stock or ETF ticker: price, open/high/low, volume, previous close and change, from Alpha Vantage's free API. Needs a free Alpha Vantage API key (ALPHAVANTAGE_API_KEY); free keys are rate limited. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.finance_asian_dev_bank_data — Asian Development Bank financing (loans, grants, technical assistance) from ADB's official IATI data via d-portal.org: IATI activity id, ADB project number and link, title, recipient country, status, start/end dates, committed and disbursed USD, description. Filter by country (ISO2) and title words; newest start first. Open data, no key. Price: $0.002 in USDC per successful call, paid with x402 (B …finance_bank_of_england_iadb — Bank of England official daily statistics (IADB) for one series code (default XUDLUSS) over the last N days, from the Bank's CSV download. Values as published; no interpretation of the series. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.finance_bcb_brazil_central_bank — Brazil Central Bank (BCB) SGS time series: the latest N values of one series number (default 12), with dates and values as published. Series numbers are listed in the BCB SGS catalogue. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.finance_binance_prices — Binance spot last price for one trading pair (for example BTCUSDT), from Binance's public ticker endpoint. Only the last price is returned; no order book or history. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.finance_bitfinex_tickers — Bitfinex spot ticker for one or more pairs (e.g. tBTCUSD,tETHUSD): bid, ask, last, 24h change and volume, from Bitfinex's public v2 ticker endpoint. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.finance_bitget_tickers — Bitget spot ticker for one pair (e.g. BTCUSDT): last price, bid/ask, 24h high/low, volumes and 24h change, from Bitget's public v2 market endpoint. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.finance_bitstamp_tickers — Bitstamp spot ticker for one pair (e.g. btcusd, btceur): last, bid, ask, 24h open/high/low, volume and VWAP, from Bitstamp's public ticker endpoint. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.finance_bitvavo_tickers — Bitvavo (Dutch exchange) last price for one market such as BTC-EUR, from Bitvavo's public ticker endpoint. Last price only. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.finance_bstock — B-Stock wholesale liquidation auctions (US marketplace, all sellers): total live lots and 20 per page with listing id, title, storefront (seller), categories, condition, inventory type, units, pallets, manufacturers, current / opening bid, next minimum bid, number of bids, typical selling price, currency, start and end time, seller city/state/zip, shipment type, manifest flag, image and auction li …finance_coinbase_assets — Currency list from Coinbase's public v2 API: currency code, name and minimum size, optionally filtered by a name or code fragment. Reference data only; no prices. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.finance_coinbase_exchange_products — Coinbase Exchange trading products (pairs) with status and minimum order sizes, filtered by quote currency (default USD). Lists what can be traded; no prices. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.finance_coinbase_orderbook_candles — Coinbase Exchange OHLCV candles for one product (e.g. BTC-USD) at 1m, 5m, 15m, 1h, 6h or 1d granularity, plus the current best bid and ask. Latest candles only (Coinbase returns up to 300 per call). Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.finance_coincap_rates — Exchange rates against the US dollar for about 170 fiat currencies and 400+ cryptocurrencies (Coinbase public rates): symbol, name, fiat or crypto, USD value of one unit and units per USD. All rates, a fiat/crypto filter, or one currency by symbol (EUR, BTC, TRY) or name (euro, bitcoin, turkish-lira). Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are …finance_coingecko — CoinGecko spot prices for up to 10 coins (by CoinGecko id, e.g. bitcoin,ethereum) in one currency, with 24h change. Prices are CoinGecko's aggregated spot prices; no history. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.finance_coinlore_crypto — CoinLore ranked crypto list: USD price, market cap, 24h volume and 1h/24h/7d changes for the top N coins (N from 1 to 100). Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.finance_coinmarketcap — CoinMarketCap ranked crypto listing: name, symbol, USD price, market cap, 24h volume and 24h change for the top N coins. Read from the JSON that coinmarketcap.com itself loads (undocumented; can change without notice). Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.finance_coinpaprika_tickers — CoinPaprika top crypto tickers by market rank: USD price, 24h volume, market cap and percent changes (1h, 24h, 7d). The first N coins by rank, N from 1 to 100. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.finance_cryptorank_projects — CryptoRank top crypto projects by rank: name, symbol, type, price, market cap, fully diluted valuation, 24h volume, 24h high/low, supply and all-time high, from CryptoRank's API v2. Up to the top 100. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.finance_curve_finance_pools — Curve Finance pools on Ethereum (all but the tiniest, as Curve's 'big' list): pool name, total USD value locked in the pool, and each coin with its USD price and balance, sorted by pool size. Optional name filter. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.finance_dataroma_superinvestors — Dataroma superinvestor portfolios: manager and firm name, portfolio value, number of stocks and the top holdings' tickers, read from Dataroma's public manager table. Snapshot of the public page; not investment advice. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.finance_defirate_yields — DeFi lending and liquidity pool yields from DefiLlama: APY, base and reward APY, TVL, for pools filtered by chain or project, sorted by TVL. Data is DefiLlama's own estimates and changes often. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.finance_dia_crypto_oracle — DIA crypto price oracle: current USD price for one asset symbol (e.g. BTC, ETH), yesterday's price and volume, from DIA's public quotation endpoint. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.finance_etf_com — ETF.com profile for a US-listed ETF: name, issuer, one-line strategy description, inception date, expense ratio, assets under management, benchmark, index tracked, category and fee note. From etf.com's public fund pages (their structured data) via a residential proxy. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.finance_fdic_bank — FDIC-insured bank institutions in one US state from the FDIC BankFind API: name, certificate number, address, ZIP, charter class and whether the bank is active. Institution data only; no financial statements. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.finance_fec_campaign_finance_contributions — US federal campaign contributions (FEC Schedule A itemized receipts) from the official OpenFEC API, by contributor name, employer, committee ID or state for a two-year cycle: contributor, employer, occupation, city/state/ZIP, amount, date, committee, receipt type, memo and filing image link, newest first, with total count. FEC law forbids using contributor names for solicitation or commercial purp …finance_ffiec_bank_institutions — US FDIC-insured banks (FDIC BankFind call-report data): name, FDIC cert, Fed RSSD ID, location, total assets, deposits and net income (USD), ROA and ROE, report date, charter class, regulator, office counts, holding company, website, established date, active flag and closing date. Search by name, filter by state and active status, sort by assets, deposits, name or age; or look up one bank by cert. …finance_finviz — Finviz quote snapshot for one stock ticker: the key statistics table as label and value pairs (market cap, P/E, price, change, volume and similar), read from the public quote page. Values are as Finviz shows them, possibly delayed. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.finance_gemini_tickers — Gemini crypto exchange public ticker for one market (e.g. btcusd): bid, ask, last price and 24h volume. Market data only; no order book or history. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.finance_gov_uk_bank_holidays — UK public (bank) holidays from GOV.UK for England and Wales, Scotland or Northern Ireland, optionally for one year. Official list published by GOV.UK; dates only, no working-day calculation. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.finance_huobi_tickers — HTX (formerly Huobi) 24h ticker for one market (e.g. btcusdt): open, high, low, close, bid/ask, base and quote volume and trade count, from HTX's public market tickers endpoint. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.finance_hyperliquid_perp_funding — Hyperliquid perpetual futures snapshot for one coin (e.g. BTC): mark, oracle and mid price, hourly funding rate, open interest and 24h volume, from Hyperliquid's public info API. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.finance_iex_cloud_public — Real-time US stock, ETF or index quote (replacement for the closed IEX Cloud public quote): company name, exchange, last sale price, net and % change, bid/ask price and size, volume, last trade time, market status (pre-market, open, after-hours, closed) with the regular-session close, day high/low, 52-week range and upcoming earnings date. Data from Nasdaq.com's public quote API. Price: $0.002 in …The signed observations, every earlier tool set and a diff of each change: this page with scripts on, or /api/v1/servers/a40a0d3c72d82899.
Read → digest → label → append → sign → compare
Six steps, every one of them checkable by someone who does not trust HISTOR. The only thing you have to take on faith is that the observation happened when the label says it did — and the log makes it impossible to change that story afterwards.
Remote endpoints in the official MCP registry: initialize, then tools/list, drained across every page; no tool is called, and private addresses are refused before the connection opens. npm and PyPI packages: installed and started in the sandbox described below, with no route out.
The tool set is reduced to name, description, input and output schema, sorted by UTF-16 code units and hashed over its RFC 8785 canonical form. Anyone holding the same tools gets the same digest — which is what makes a comparison possible.
Four MTL/1 methods, one signed AWR/2 document each: what was observed, what the WARDEN pattern set matched, whether the definitions changed since the last label, and whether the name is on a threat list. No score, ever.
Every label becomes a leaf of an RFC 9162 Merkle tree: leaf hash = SHA-256(0x00 ‖ JCS(label)). The label you download is the leaf input, so you can recompute its hash yourself.
After each crawl HISTOR signs a tree head: the size and the root. Keep yesterday's head; ask for a consistency proof to today's; if anything was removed or rewritten, the proof fails.
Each day a continuity label compares the new digest with the last one. Equal: "unchanged since". Different: a change, with the date and a per-tool diff. A client that checks what it received adds the view no crawler has.
Where an npm or PyPI package is run
A package observation is true for these conditions, and no others. Every package page names the exact image it ran in and any configuration it was given.
Linux x86_64, inside gVisor (runsc): the package talks to a kernel written for sandboxing, not to the host's. An unprivileged user, no capabilities, a read-only root.
npm packages in histor-node:22, PyPI packages in histor-python:3.12: the official node:22-bookworm-slim and python:3.12-slim images plus bash, git, Python 3 or Node 22 and a Java 21 runtime — never Docker — built when a sandbox host is installed. A package whose Requires-Python excludes 3.12 runs on histor-python:3.13 or 3.14; one that requires a newer Node runs again on histor-node:24. The exact image a package ran in is on its page.
npm with --ignore-scripts, then the install scripts in a traced stage of their own. PyPI: wheels only — a package that ships only source is reported, never built.
No route out. Every name the package looks up resolves to HISTOR's own traps, which record what was sent and forward nothing. A server that needs the internet to start shows that here.
None are real. Decoy credentials sit in HOME and a decoy .env in the working directory. A variable the package says it needs gets a placeholder; where the placeholder was sent is recorded.
512 MB of memory, one CPU, 64 MB of /tmp. 360 s to install, 150 s to start and answer; up to 15 tools called once each with canary arguments, 8 s per call.
Only names: required variables its registry entry declares or that it printed when it exited, and a start argument such as serve when its usage text offers one. Never a value from anyone else.
The profile HISTOR implements forbids the words safe, secure, audited, certified, approved and trusted. Here is why, in the terms of what the log can and cannot show.
A pattern match is a reason to read a definition, not a finding. Three of the four methods can never return fail. There is no score to rank by, because no score HISTOR could compute would mean what a reader takes it to mean.
Labels are about advertised text. A remote endpoint's source is never read and its tools are never invoked; a package runs only in the sandbox, against nothing real. A server can keep identical definitions and behave differently for real users; the log cannot see that, and says so inside every label.
A version bump changes definitions too. A change is shown as a date and a diff, in amber, never red. What you do with it is yours: re-read, re-approve, or pin the old digest.
An npm or PyPI server is observed under the test conditions above: Linux, no internet, placeholder keys. One that needs Windows, a real account or the network may show fewer tools or none; its page says why it exited.
Today one party runs the log. A second observer on another network is the next step, and any AIMarket hub can run one. Until then, what the key proves is who said it — not that it is true.
Endpoints that require authentication answer 401 to everyone without a key, including HISTOR. They are counted and listed as not observed, never dropped from the numbers.
For clients, registries and server authors
Before your agent trusts a server, send the tools it received. The answer is signed by the log's did:key and names the tree head it was given under.
curl -sS https://histor.modelmarket.dev/api/v1/check \
-H 'Content-Type: application/json' \
-d '{"endpoint":"https://example.com/mcp","tools":[ …tools/list result… ],"contribute":true}'
# -> {"type":"histor.check/v1","match":"same"|"different"|"previously-observed"|…,
# "observed":{"unchangedSince":"…","changes":0}, "patternScan":{…}, "signature":{…}}
# README badge for your server
[](https://histor.modelmarket.dev/s/<id>)
# Atom feed of every observed change
https://histor.modelmarket.dev/feed.xml
No. The server list is the log's index: every remote endpoint in the official MCP registry, with what HISTOR could observe about it. Nothing here is for sale and nothing is ranked by quality.
No, and it never will. It tells you what a server advertised, whether that changed, and which published patterns matched the text. Whether to trust the server is your decision — HISTOR makes sure you decide on the same facts as everyone else.
Most remote MCP endpoints require a login (they answer 401 to anyone without a key), some use the legacy SSE transport or need per-user values in the URL, and some are simply down. They stay on the list with the reason, so the numbers never hide them.
Open the Check tab, paste the server's endpoint and the tools/list result your client received, and press Check. You get back, signed, whether HISTOR observed the same definitions — or different ones, or an older set.
Find your endpoint on the Servers tab, open it, and copy the Markdown snippet under the facts. The badge shows the date your definitions were pinned or last changed, and links to the full history.
You do not have to. Every label and every tree head is signed with one published key; the Log tab proves in your browser that the log only grew; and the command-line auditor does the same from any machine. What remains is that one operator runs it today — a second, independent observer is the next step.
Looking things up, the badges, the feed and /check are free. HISTOR also offers histor.check@v1 to the AIMarket Hub, so agents can reach it through the market.
Once a day: initialize, notifications/initialized and tools/list — never a tool call, never a redirect followed, at most two connections per host, from a User-Agent that starts with histor/. To be left out, open an issue on the histor repository with your endpoint or host; it is then listed as not observed (operator-opt-out), with the reason, rather than silently dropped. Labels already in the log stay: the log only grows.