# Agent Risk Desk

> Pay-per-call data and risk checks on EVM and NEAR addresses for AI agents and backends.
> Paid per call in USDC on Base (eip155:8453) with x402 v2. No account, no API key.

An unpaid request answers HTTP 402 with the payment terms in the PAYMENT-REQUIRED header (base64 JSON) and a JSON body.
An x402 client (for example @x402/fetch, @x402/axios, x402-python or an agent wallet) signs a USDC authorization and retries with PAYMENT-SIGNATURE.
The answer carries the settlement receipt in PAYMENT-RESPONSE. Invalid input (400), unknown transactions (404) and upstream outages (503) are not charged.

## Endpoints

- EVM address enrichment: `POST https://x402-services.soldano.workers.dev/v1/enrich/address` ($0.01 USDC; MCP tool `enrich_evm_address`)
  Profile of an EVM address on Base, Ethereum, OP Mainnet or Arbitrum in one call: EOA, contract or EIP-7702 account, age, transactions sent, native and major token balances (USDC, USDT, EURC, DAI, WETH, BTC), Sourcify-verified source and name, proxy and implementation, token metadata, labels (OFAC SDN, Chainalysis oracle, known issuers) and a risk verdict with reasons. Useful to know who an address is before paying, listing or trusting it.
  Example body: `{"address":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","chain":"base"}`
- EVM counterparty risk: `POST https://x402-services.soldano.workers.dev/v1/risk/evm` ($0.02 USDC; MCP tool `counterparty_risk_evm`)
  Counterparty-risk verdict (allow, warn or block, with reasons) for an EVM address on Base, Ethereum, OP Mainnet, Arbitrum or Base Sepolia, for use before paying, approving or trusting it. Checks the OFAC SDN list and the Chainalysis sanctions oracle, account age, EOA or contract, EIP-7702 delegation, upgradeable proxies and code changes in the last 72 h, and token controls (mint, blacklist, pause, fees, owner).
  Example body: `{"address":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","chain":"base"}`
- NEAR counterparty risk: `POST https://x402-services.soldano.workers.dev/v1/risk/near` ($0.02 USDC; MCP tool `counterparty_risk_near`)
  Counterparty-risk verdict (allow, warn or block, with reasons) for a NEAR account, for use before paying it. Checks the OFAC SDN list and operator deny-lists, whether the account exists, its age, its contract code and code changes in the last 72 h, global contracts whose publisher can change them, and, with an Allowance vault, the vault denylist and payment history.
  Example body: `{"account":"intents.near"}`
- Allowance receipt verification (NEAR): `POST https://x402-services.soldano.workers.dev/v1/receipt/verify-near` ($0.005 USDC; MCP tool `verify_allowance_receipt`)
  Seller-side check that an Allowance vault receipt on NEAR paid a given account at least a given amount, bound to the seller request hash, at final finality. Returns valid or the reason (not paid yet, wrong payee, amount, asset or request, unknown receipt, not a vault) and the vault code hash read at the same block.
  Example body: `{"vault":"vault.alice.near","receiptId":3,"payee":"api.example.near","minAmount":"20000000000000000000000","requestHash":"n4bQgYhMfWWaL+qgxVrQFaO/TxsrC4Is0V1sFbDwCgg="}`
- Transaction screening: `POST https://x402-services.soldano.workers.dev/v1/screen/tx` ($0.04 USDC; MCP tool `screen_transaction`)
  Plain-language explanation of an EVM or NEAR transaction: status, method, native and token transfers, approvals (unlimited ones flagged), fee, and a risk verdict for each counterparty, with a one-line summary. Covers Base, Ethereum, OP Mainnet, Arbitrum, Base Sepolia and NEAR. Useful to check what a payment or approval really did.
  Example body: `{"chain":"base","txHash":"0x0b5b1d0c38f1c4b0f0d3d93e5ff3c0e0f2e6b3b9a7f1c2d3e4f5a6b7c8d9e0f1"}`

## MCP

Streamable HTTP, stateless: `https://x402-services.soldano.workers.dev/mcp`. Paid tools return the x402 PaymentRequired as a tool error;
x402-aware MCP clients (@x402/mcp, Cloudflare Agents withX402Client) pay with `_meta["x402/payment"]` and retry. `list_services` is free.

## Machine-readable

- OpenAPI 3.1: https://x402-services.soldano.workers.dev/openapi.json
- x402 manifest: https://x402-services.soldano.workers.dev/.well-known/x402
- MCP server card: https://x402-services.soldano.workers.dev/.well-known/mcp/server-card.json
- Status and prices: https://x402-services.soldano.workers.dev/health

## Payment

- Protocol: x402 v2, scheme exact
- Asset: USDC 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913 on Base
- Pay to: 0xbC005B343D98c458F457d21d99969cd267370B26

## Sources and limits

Public data only: the OFAC SDN list (refreshed every 6 hours), the Chainalysis on-chain sanctions oracle, public and keyed EVM RPC nodes,
Sourcify verified sources, NEAR RPC and the FastNear API. Verdicts are heuristic signals for automated decisions, not legal or compliance advice.