Doormat Capital's paid x402 safety tools (token scan, HTTP security headers) for AI agents.
Connect Remote server
claude mcp add --transport http tools https://mcpgateway.sebastiaan-ba3.workers.dev/mcp
{
"mcpServers": {
"tools": {
"url": "https://mcpgateway.sebastiaan-ba3.workers.dev/mcp"
}
}
}
{
"servers": {
"tools": {
"type": "http",
"url": "https://mcpgateway.sebastiaan-ba3.workers.dev/mcp"
}
}
}
Settings > Connectors > Add custom connector
URL: https://mcpgateway.sebastiaan-ba3.workers.dev/mcp
Tools 4 found in our last check
apecheck_reportPaid (x402, USDC on Base). Full safety report for a Base ERC-20 token contract: metadata, raw owner address, mint-selector heuristic, approximate recent-activity signal. Call without 'tx' first to receive the exact x402 payment challenge (amount, asset, payTo address, chain); pa…
secheaders_reportPaid (x402, USDC on Base). Full HTTP security-headers report for a URL: every header checked, raw values, remediation detail. Call without 'tx' first to receive the exact x402 payment challenge; pay, then call again with the transaction hash in 'tx' to receive the full report.
llmstxt_checkFREE, no payment required. Checks whether a site has a valid llms.txt file (the emerging convention for telling AI crawlers/agents what a site is and how to use it): fetches it, reports status and any errors/warnings.
crawlercheck_checkFREE, no payment required. Checks a site's robots.txt against a list of known AI crawlers (GPTBot, ClaudeBot, Google-Extended, etc.) and reports which are allowed or blocked.
Details
| Endpoint | https://mcpgateway.sebastiaan-ba3.workers.dev/mcp (Streamable HTTP) |
| First published | 7 Oct 2026 |
| Last updated | 7 Oct 2026 |
| Registry name | dev.workers.sebastiaan-ba3.mcpgateway/tools |
More security servers See all
Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.
