# Cybercentry

> Pay-per-call security verification for wallets, tokens, smart contracts, AI
> agents and web applications. Every call is settled in USDC over the x402
> protocol on Base or Solana. There is no account, no API key and no
> subscription minimum: an agent that holds a wallet can call any service
> directly and pay for exactly what it uses.

Cybercentry Limited is a UK company. We co-authored the Ethereum standards
ERC-8126 (AI Agent Verification) and ERC-8196 (AI Agent Authenticated Wallet),
both Final, and ERC-8376 on token launch abuse.

## How to call it

- MCP server (recommended for agents): `https://centry.cybercentry.co.uk/api/mcp`, transport
  streamable-http. Registered in the official MCP Registry as
  `uk.co.cybercentry/verification`. Twelve tools, two of them free.
- REST: `POST https://centry.cybercentry.co.uk/api/services/{service}`. Returns HTTP 402 with an
  x402 payment challenge; pay and retry.
- OpenAPI description: [openapi.json](https://centry.cybercentry.co.uk/openapi.json)
- Full walkthrough: [How it works](https://centry.cybercentry.co.uk/guide)

Payment is verified before the work runs and settled after it succeeds, so a
call that fails is not charged.

## Free, no payment required

- `list_services`: the catalogue with live prices.
- `recent_exploits`: recent real-world exploits with losses and attack vectors.
  Also published as RSS at [exploits.xml](https://centry.cybercentry.co.uk/feed/exploits.xml).

## Paid services ($1.00 per call)

- [Base Token Verification](https://centry.cybercentry.co.uk/services/base_token_verification): Check a Base token contract before buying: detects honeypots, armed freeze-and-seize, a live pause, fake B20s and ticker-impersonation copycats, and separately discloses issuer controls (admin centralisation, supply cap, transfer policy, rebase) so a legitimate token is not mistaken for a scam. $1.00 per call.
- [Cyber Security Consultant](https://centry.cybercentry.co.uk/services/cyber_security_consultant): Ask a cyber security question and get an expert answer backed by real-time threat intelligence, covering current threats, best practice and compliance. $1.00 per call.
- [Ethereum Token Verification](https://centry.cybercentry.co.uk/services/ethereum_token_verification): Check an Ethereum or EVM token contract before buying: rug pull, hidden tax, liquidity legitimacy and holder concentration risk. Token due diligence returned as a scan report. $1.00 per call.
- [Media Content Verification](https://centry.cybercentry.co.uk/services/media_content_verification): Check whether an image or video is authentic and where it came from: C2PA content credentials, provenance and metadata extraction, with an avatar and logo impersonation check. Detect AI-generated or tampered media before trusting it. $1.00 per call.
- [OpenClaw AI Agent Verification](https://centry.cybercentry.co.uk/services/openclaw_ai_agent_verification): Audit an AI agent configuration for security holes: prompt injection exposure, missing authentication, over-broad tool permissions and unsafe gateway settings. Check an agent before you trust it or connect to it. $1.00 per call.
- [Private Data Verification](https://centry.cybercentry.co.uk/services/private_data_verification): Prove a fact about private data without revealing the data: validates text integrity and returns a zero-knowledge proof (ZKP) with a verification ID and URL. $1.00 per call.
- [Quantum Cryptography Verification](https://centry.cybercentry.co.uk/services/quantum_cryptography_verification): Encrypt text with quantum-resistant (post-quantum) cryptography, for secrets that must outlast classical encryption. Returns a record ID and a decrypt URL. $1.00 per call.
- [Solidity Code Verification](https://centry.cybercentry.co.uk/services/solidity_code_verification): Audit Solidity smart contract source for vulnerabilities before you deploy or call it. Returns findings with a clear risk level. $1.00 per call.
- [Wallet Verification](https://centry.cybercentry.co.uk/services/wallet_verification): Screen a wallet address for sanctions and risk: OFAC SDN sanctions screening, risk scoring and suspicious-activity detection across 35 EVM chains. Check a counterparty before you transact with it. $1.00 per call.
- [Web Application Verification](https://centry.cybercentry.co.uk/services/web_application_verification): Scan a website or dApp frontend for vulnerabilities using OWASP checks, before connecting a wallet to it or trusting it with user data. $1.00 per call.

Wallet verification covers 35 EVM chains and screens against
the OFAC SDN list.

## What a verification result is

A verification informs a decision. It does not block a transaction, and it is
not a guarantee: a clean result means the checks we ran found nothing, not that
nothing is there. Scanned third-party URLs are reported, never linked.

## More

- [Standards we co-authored](https://centry.cybercentry.co.uk/standards)
- [Subscriptions](https://centry.cybercentry.co.uk/subscriptions) for clients that cannot pay per call
- [Terms](https://centry.cybercentry.co.uk/terms) · [Privacy](https://centry.cybercentry.co.uk/privacy)
- Source for the MCP server: https://github.com/Cybercentry/verification-mcp