Prototype · Preview: every server in the official registry, synced every 30 minutes. Reviews and accounts come in a later step.
PopNx MCPMCP servers for people who use AI · explained in plain words

ERC-8126 Scan

by Cybercentryversion 1.0.1i★ –iRuns in the cloud
Registry nameuk.co.cybercentry/erc-8126-scan

Install

Overview

Description from the maker (original English)

378k+ ERC-8004 agents and their security verifications. Two tools free, the rest USDC over x402.

PopNx MCP’s three pillars

These three are never merged into one score: opinions, measurements and popularity are different things.

What you can do with it

We have not written a plain-language summary for this one yet. Below are the facts we read from the registry.

  • Connection: Runs in the cloud
  • Transport: Streamable HTTP
  • Category: Cybersecurity
  • You need to fill in: Authorization

Install

Pick the AI app you use, then copy the settings.

Before you install

Values marked secret are keys to your account. Never share them or paste them into a chat.

You need

Which app do you use?

Pick your app above. We remember it, so next time the button says “Install in …”.

This address needs a key in a request header, which the add-connector menu cannot set. Use Claude Code, Cursor or VS Code instead.

Run this in your terminal

claude mcp add --transport http erc-8126-scan https://erc8126scan.ai/api/mcp --header 'Authorization: your-value'

Fill in the empty values before running it.

Open in Cursor

Or copy the settings yourself

Paste into .cursor/mcp.json in your project, or ~/.cursor/mcp.json

{
  "mcpServers": {
    "erc-8126-scan": {
      "url": "https://erc8126scan.ai/api/mcp",
      "headers": {
        "Authorization": "your-value"
      }
    }
  }
}

Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.

Open in VS Code

Or copy the settings yourself

Paste into .vscode/mcp.json in your project

{
  "servers": {
    "erc-8126-scan": {
      "type": "http",
      "url": "https://erc8126scan.ai/api/mcp",
      "headers": {
        "Authorization": "your-value"
      }
    }
  }
}

Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.

This address needs a key in a request header, which the add-connector menu cannot set. Use Claude Code, Cursor or VS Code instead.

Your choice stays on this device in a cookie; no account needed.

Values you fill in

  • Authorization secret HTTP header
    Optional. Bearer token using an erc8126_ API key from https://erc8126scan.ai/my-api-keys, drawing on a plan quota instead of paying per call. Omit it to pay per call in USDC over x402, or to use the…

These settings are generated from the maker’s registry entry. If the README says otherwise, follow the README.

What it can do

Tool names and descriptions exactly as the server reported them on Nov 10, 2026. The maker wrote them, not us; we show them as plain text.

  • list_services

    Free. The catalogue: every tool on this server, what it returns, what it costs per call, and how to read the risk fields. Call this first — it is authoritative about pricing, needs no payment, key or wallet, and answers most questions about what this server can do without spendin

  • get_index_stats

    Free. How much of the ERC-8004 agent population this index covers: total agents synced from the on-chain Identity Registry, and how many carry verification results. Use it to judge whether the index is likely to know about the agent you care about before paying to look it up.

  • search_agents

    Search and filter scanned ERC-8004 agents by chain, risk score range, and verification status. Returns a paginated list with per-dimension scores (ETV, MCV, SCV, WAV, WV) and an overall risk score. Pass `wallet` or `id` to look up a single agent directly. IMPORTANT: read `risk_le

  • get_agent

    Fetch the full detail record for a single agent by UUID, including verification state and metadata. Judge the agent by `risk_level`, not the raw overall_risk_score: 'not_verified' means nobody has paid to assess it yet and scores 100 by presumption, which is not a finding against

  • get_agent_activity

    Fetch on-chain activity and liveness signals for one agent, including whether it is currently active and when it was last checked. Costs $0.002 USDC per call when paying with x402.

  • get_agent_report

    Fetch the full security assessment report for one agent: per-dimension findings, evidence and recommendations. Returns data only for agents owned by the caller — the wallet bound to your API key, or the wallet that paid via x402. Other agents return FORBIDDEN_NOT_OWNER. Use get_a

Basic checksi

We check information anyone can see; we have not read the code. Checks that do not apply are left out of the count. · Checked Nov 10, 2026

  • ✓ Pass

    Maker matches the repo

    The registry name was verified against the domain cybercentry.co.uk (the registry checks domain ownership)

  • … Not checked yet

    Still maintained

    We have not read this repo from GitHub yet

  • … Not checked yet

    Has a licence

    We have not read this repo from GitHub yet

  • ✓ Pass

    Endpoint responds

    Responded in 131 ms (HTTP 200)

  • – Not applicable

    Sign-in with OAuth

    No sign-in needed

  • ✓ Pass

    No hidden instructions in tool descriptions

    Read 6 tool descriptions and found no hidden instructions to the AI

Compared with others in Cybersecurityi

  • More stars than 0% of the other 1010 servers in this category
  • Published to the registry more recently than 37% of the other 1010 servers in this category
  • Basic checks equal to or better than 100% of the other 1010 servers in this category

Compared with every active server in this category in the registry. Stars count only when the publisher owns the repo.

Common questions

Is ERC-8126 Scan safe?

It passed 3 of 3 applicable basic checks. We have not read the code. Before adding a key or token, see what access the server asks for and use a key with only the permissions you need.

What keys or codes does it need?

You need to fill in: Authorization

Does it run on my computer or in the cloud?

It runs in the maker’s cloud. Connect over the internet with nothing to install, but what you send passes through the maker’s servers.

Is it still maintained?

The GitHub repo last changed –, and the latest version (1.0.1) reached the registry 3 months ago.

Which apps can use it?

Apps that support MCP, such as Claude Desktop, Claude Code, Cursor and VS Code. It connects by URL, so apps that accept remote MCP servers work too, such as ChatGPT in developer mode.

What can I use instead?

In the same category: Keeper Security MCP, Panda Web Security Tools, BarzelVault: AI Action Authorization Firewall

Alternatives

Servers in the same category from other makers, sorted by stars.

Reading a card:↓ Downloads per weeki★ GitHub starsiThree pillars: reviews · checks · usageiUpdated = latest version published to the registryi

Keeper Security MCP

Read-only Keeper MSP posture across every client, with history, a change feed and no path to a

by servosityVery newUpdated today

Runs on your computer

Panda Web Security Tools

Site/email/agent safety from public data: SPF/DKIM, SEO, monitor, hidden-AI, WHOIS, links (6).

by pandadad0214Very newUpdated today

Runs on your computer

README from the maker

Open the README

Copied from the maker’s repo as written. PopNx MCP has not reviewed or endorsed it. HTML, images and scripts are removed. Links lead off this site.

ERC-8126 Scan MCP Server

Security intelligence for ERC-8004 agents: search the on-chain agent index and read verification results.

Nothing to install. This is a remote MCP server — connect to the URL and the tools appear.

Endpointhttps://erc8126scan.ai/api/mcp
Transportstreamable-http
Registryuk.co.cybercentry/erc-8126-scan
Websitehttps://erc8126scan.ai

What it is

Every agent minted in the ERC-8004 Identity Registry is indexed automatically — 378,000+ and counting. Each one carries verification results across five dimensions, produced by the Cybercentry verification services:

DimensionWhat it covers
ETVToken verificationThe agent's token contract
SCVSolidity code verificationThe staking contract source
MCVMedia content verificationC2PA provenance of the agent's image
WAVWeb application verificationThe agent's live site or dApp frontend
WVWallet verificationOFAC sanctions screening and funding-chain risk

This server exposes that index. It does not run verifications — it serves results already computed and stored.

Connect

Claude (Desktop or claude.ai)

Remote servers are added as connectors, not through claude_desktop_config.json — that file is for local servers that run a command.

  1. Settings → Connectors
  2. Add → Add custom connector
  3. Paste https://erc8126scan.ai/api/mcp
Other clients

Anything that speaks MCP over streamable HTTP can connect. Point it at:

https://erc8126scan.ai/api/mcp

Check your client's own documentation for where a remote MCP server URL goes — some use a settings pane, some a config file. If yours takes a config file, the field is the server URL rather than a command.

Tools

Six tools, all read-only. None of them mints, writes on-chain, or spends your credits.

Two are free — no payment, wallet or account:

ToolWhat it returns
list_servicesThe catalogue: every tool, its price, and how to read the risk fields
get_index_statsHow many agents are indexed, so you can judge coverage before paying

The other four are paid:

ToolWhat it returnsPer callPlan
search_agentsFilter the index by chain, risk score range and verification status; paginated$0.001Starter
get_agentFull detail for one agent by UUID$0.001Starter
get_agent_activityOn-chain activity and liveness for one agent$0.002Starter
get_agent_reportFull security assessment: per-dimension findings and evidence$0.05Pro

Call list_services first. It is free, and authoritative about current pricing.

get_agent_report returns data only for agents owned by the wallet bound to your API key. Other agents return FORBIDDEN_NOT_OWNER. Public scores for any agent are available through get_agent.

Tools you cannot reach on your plan are hidden from tools/list rather than listed and refused.

Reading the scores

Judge an agent by `risk_level`, not `overall_risk_score`.

Scoring presumes risk: a check that applies to an agent but has not been verified counts as 100. So an agent nobody has paid to assess scores exactly the same as one assessed and found dangerous. Most of the index is the former.

risk_level separates them:

ValueMeaning
not_verifiedNobody has assessed this agent yet. Not a finding against it.
not_assessedNo score recorded
low / moderate / elevated / highVerified, scoring in that band
criticalVerified and genuinely high risk

Treating a not_verified agent as dangerous is the most common way to misread this data.

Paying

Two free tools, then two ways to pay for the rest. tools/list is public, so an agent can see everything on offer and what it costs before deciding to pay for anything.

x402 — no account, no key. The client is quoted a price, pays in USDC, and retries. Pay on whichever chain you hold funds on:

Base     eip155:8453    USDC

Solana mainnet USDC

ToolPer call
list_servicesfree
get_index_statsfree
search_agents$0.001
get_agent$0.001
get_agent_activity$0.002
get_agent_report$0.05

An unpaid call returns a JSON-RPC error with code 402, carrying the payment requirements in error.data — the same shape as the Cybercentry verification server.

API key — for volume, or clients that do not speak x402 yet. Pass an erc8126_ key as a bearer token:

Authorization: Bearer erc8126_...

Keys come from erc8126scan.ai/my-api-keys. Calls draw on your plan's daily quota instead of being paid for individually, and tool availability and page sizes follow your tier. A key that is presented but invalid is rejected outright rather than quietly falling back to per-call billing.

Either way, get_agent_report is scoped to agents owned by the caller — the wallet bound to your key, or the wallet that paid.

Standards

  • ERC-8004 — Trustless Agents, the Identity Registry this index reads
  • ERC-8126 — AI Agent Verification (Final)
  • ERC-8196 — AI Agent Authenticated Wallet (Final)

Links

  • Endpoint — https://erc8126scan.ai/api/mcp
  • Site — https://erc8126scan.ai
  • API keys — https://erc8126scan.ai/my-api-keys
  • Cybercentry verification MCP — https://github.com/Cybercentry/verification-mcp

Cybercentry Limited

Ask PopNx