SML Risk Firewall
Pre-trade risk checks for agent trades: orders vs your limits, signed receipts.
Description from the maker (original English)
Website and company intel for agents: DNS, WHOIS, SSL, tech stack, email security, profiles
These three are never merged into one score: opinions, measurements and popularity are different things.
We have not written a plain-language summary for this one yet. Below are the facts we read from the registry.
Pick the AI app you use, then copy the settings.
AuthorizationValues marked secret are keys to your account. Never share them or paste them into a chat.
You need
Which app do you use?
Pick your app above. We remember it, so next time the button says “Install in …”.
This address needs a key in a request header, which the add-connector menu cannot set. Use Claude Code, Cursor or VS Code instead.
Run this in your terminal
claude mcp add --transport http aipaygen https://mcp.aipaygen.com/mcp --header 'Authorization: your-value'Fill in the empty values before running it.
Paste into .cursor/mcp.json in your project, or ~/.cursor/mcp.json
{
"mcpServers": {
"aipaygen": {
"url": "https://mcp.aipaygen.com/mcp",
"headers": {
"Authorization": "your-value"
}
}
}
}Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.
Paste into .vscode/mcp.json in your project
{
"servers": {
"aipaygen": {
"type": "http",
"url": "https://mcp.aipaygen.com/mcp",
"headers": {
"Authorization": "your-value"
}
}
}
}Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.
This address needs a key in a request header, which the add-connector menu cannot set. Use Claude Code, Cursor or VS Code instead.
Your choice stays on this device in a cookie; no account needed.
Authorization secret HTTP headerThese settings are generated from the maker’s registry entry. If the README says otherwise, follow the README.
Tool names and descriptions exactly as the server reported them on Nov 7, 2026. The maker wrote them, not us; we show them as plain text.
dns_lookupResolve DNS records for a domain (A, AAAA, CNAME, MX, NS, TXT, SOA, CAA) and identify its DNS host and email provider. Price: $0.001 per call.
security_headersGrade a website's HTTP security headers (HSTS, CSP, X-Frame-Options, Referrer-Policy and more) A-F, list what is missing, and flag exposed server version info. Price: $0.001 per call.
domain_whoisLook up who registered a domain and when: registrar, creation and expiry dates, domain age, status codes, nameservers and DNSSEC, via RDAP (the modern WHOIS). Price: $0.002 per call.
email_securityAudit a domain's email security: SPF, DMARC policy, DKIM keys, MX/email provider, MTA-STS, TLS-RPT and BIMI, with an A-F grade, a spoofability verdict and plain-English issues. Price: $0.002 per call.
site_metadataExtract a website's title, description, language, social profiles, public contact emails and phones, key pages (contact, pricing, careers, docs), RSS feeds and schema.org organization data. Price: $0.002 per call.
page_to_markdownFetch a web page and return its main content as clean Markdown (navigation, ads, scripts and cookie banners removed), ready for an LLM to read. Price: $0.002 per call.
ssl_certificatesCheck a domain's TLS certificates from Certificate Transparency logs: current certificate, issuer, days until expiry, and every subdomain that has appeared on a certificate. Price: $0.003 per call.
tech_stackDetect what a website is built with: framework, CMS or site builder, hosting/CDN, web server, analytics, ad pixels, payments, chat, auth and more (90+ technologies), with the evidence for each. Price: $0.003 per call.
company_profileBuild a company profile from just a domain: name, description, logo, location, social profiles, public contact info, domain age, email and hosting providers, key tech stack, and business signals (takes payments, hiring, runs ads...). One call instead of six. Price: $0.01 per call
domain_reportEverything about a domain in one call: DNS, registration, certificates and subdomains, email security grade, HTTP security headers grade, tech stack and website metadata, plus an overall summary. Price: $0.02 per call.
pricingList every tool with its price per call and the accepted payment methods. Free.
create_api_keyCreate an AIPayGen API key with $0.05 of free trial credits. Free. Store the key: it is shown only once.
account_balanceShow the remaining credit balance of the API key sent with this request. Free.
We check information anyone can see; we have not read the code. Checks that do not apply are left out of the count. · Checked Nov 7, 2026
The registry name was verified with the GitHub account Damien829, which owns the repo
We have not read this repo from GitHub yet
We have not read this repo from GitHub yet
Responded in 315 ms (HTTP 200)
No sign-in needed
Read 13 tool descriptions and found no hidden instructions to the AI
Compared with every active server in this category in the registry. Stars count only when the publisher owns the repo.
It passed 3 of 3 applicable basic checks. We have not read the code. Before adding a key or token, see what access the server asks for and use a key with only the permissions you need.
You need to fill in: Authorization
It runs in the maker’s cloud. Connect over the internet with nothing to install, but what you send passes through the maker’s servers.
The GitHub repo last changed –, and the latest version (2.0.0) reached the registry 15 days ago.
Apps that support MCP, such as Claude Desktop, Claude Code, Cursor and VS Code. It connects by URL, so apps that accept remote MCP servers work too, such as ChatGPT in developer mode.
In the same category: SML Risk Firewall, ipdata MCP by usefulapi, MaxMind minFraud MCP by usefulapi
Servers in the same category from other makers, sorted by stars.
Reading a card:★ GitHub starsiThree pillars: reviews · checks · usageiUpdated = latest version published to the registryi
Pre-trade risk checks for agent trades: orders vs your limits, signed receipts.
Look up location, network, company and threat data for IP addresses and ASNs in ipdata.
MCP server for MaxMind minFraud — score transactions for fraud risk from your AI assistant.
Copied from the maker’s repo as written. PopNx MCP has not reviewed or endorsed it. HTML, images and scripts are removed. Links lead off this site.
Pay-per-call website and company intelligence for AI agents, served over MCP and a plain HTTP API, paid with prepaid credits or x402 USDC. Runs on Cloudflare Workers: no server to keep alive.
| Tool | What it does | Price |
|---|---|---|
dns_lookup | DNS records, DNS host, email provider | $0.001 |
security_headers | HTTP security headers grade A–F | $0.001 |
domain_whois | Registrar, created/expiry dates, age (RDAP) | $0.002 |
email_security | SPF / DMARC / DKIM / MTA-STS grade, spoofability | $0.002 |
site_metadata | Title, socials, contact emails, key pages, schema.org org | $0.002 |
page_to_markdown | Main page content as clean Markdown | $0.002 |
ssl_certificates | Current cert, expiry, every subdomain from CT logs | $0.003 |
tech_stack | 90+ technologies with evidence | $0.003 |
company_profile | One-call company enrichment from a domain | $0.01 |
domain_report | Everything above in one report | $0.02 |
Free: pricing, create_api_key, account_balance. Failed calls are never charged.
# Free key with trial credits
curl -X POST https://aipaygen.com/v1/keys
curl "https://aipaygen.com/v1/company_profile?domain=figma.com" -H "Authorization: Bearer apg_..."
claude mcp add --transport http aipaygen https://mcp.aipaygen.com/mcp --header "Authorization: Bearer apg_..."
Without a key, paid endpoints answer 402 Payment Required with x402 v2 requirements (PAYMENT-REQUIRED header); x402 clients pay and retry with PAYMENT-SIGNATURE. Over MCP the payment goes in _meta["x402/payment"].
Requires Node.js 22+.
npm install
npm run db:migrate:local npm run dev # http://127.0.0.1:8787 npm test # unit tests npm run typecheck
npx wrangler login
npx wrangler d1 create aipaygen # paste the database_id into wrangler.jsonc npm run db:migrate:remote npx wrangler secret put ADMIN_TOKEN npm run deploy
Then set in wrangler.jsonc → vars:
PUBLIC_URL: https://aipaygen.comPAY_TO: your wallet address (enables x402)X402_NETWORK: eip155:84532 (Base Sepolia testnet) or eip155:8453 (Base mainnet; needs a mainnet facilitator)Uncomment the routes block to serve aipaygen.com, and add mcp.aipaygen.com / api.aipaygen.com custom domains so existing directory listings keep working.
Card top-ups: set STRIPE_SECRET_KEY and STRIPE_WEBHOOK_SECRET secrets and point a Stripe webhook (checkout.session.completed) at /billing/webhook.
src/index.ts routes + MCP handler
src/mcp.ts MCP server (stateless, MCP 2026-07-28 + 2025 clients) src/http.ts /v1 HTTP API with x402 headers src/billing/ API keys + credits (D1), x402, Stripe src/tools/ the Site Intel tools src/pages.ts landing, docs, billing, llms.txt, OpenAPI, server card migrations/ D1 schema test/ Vitest unit tests
The previous Python version (v1) lives on in the git history of the GitHub repo.