HubVibe: Pay-per-Call Agent Tools: Web Search, Email Verify, Contact Screening,…
개요
제작자가 쓴 설명(영어 원문)
75 paid agent tools: website audits and research; BM25, MiniLM vector and hybrid discovery are free.
PopNx MCP의 세 기둥
이 세 가지는 절대 하나의 점수로 합치지 않아요. 의견, 측정, 인기는 서로 다른 것이니까요.
- 사용자 의견i아직 리뷰가 없어요리뷰는 다음 단계에서 계정 기능과 함께 열려요
- 우리의 기본 점검i3개 중 3개 통과공개된 정보로 점검했으며, 코드는 아직 스캔하지 않았어요
- 사용 정도i아주 새로움★ –
할 수 있는 일
이 서버는 아직 쉬운 말로 된 요약을 쓰지 못했어요. 아래는 레지스트리에서 읽어 온 사실이에요.
- 연결 방식: 클라우드에서 실행
- 전송 방식: Streamable HTTP
- 카테고리: 검색 및 AI 기억
- 입력해야 할 값: X-API-Key
설치
쓰고 있는 AI 앱을 고른 다음 설정을 복사하세요.
설치하기 전에
- 기본 점검: 3개 중 3개 통과
- 제작자의 서버에서 실행돼요. 내가 요청한 내용은 제작자의 서버를 거쳐요.
- 할 수 있는 일 60가지(도구) audit_wcag, audit_seo, audit_security, audit_performance …
- 직접 입력할 값:
X-API-Key
비밀로 표시된 값은 내 계정의 열쇠예요. 절대 다른 사람과 공유하거나 채팅에 붙여 넣지 마세요.
필요한 것
- 클라우드에서 실행설치할 것 없음. 인터넷으로 연결돼요
어떤 앱을 쓰세요?
위에서 앱을 고르세요. 기억해 두었다가 다음부터는 버튼에 “…에 설치”라고 표시해요.
이 주소는 요청 header에 키가 필요한데, 커넥터 추가 메뉴에서는 넣을 수 없어요. 대신 Claude Code, Cursor, VS Code를 쓰세요.
터미널에서 이 명령어를 실행하세요
claude mcp add --transport http hubvibe https://hubvibe-io.com/mcp --header 'X-API-Key: your-value'실행하기 전에 빈 값을 채워 주세요.
또는 설정을 직접 복사하기
프로젝트의 .cursor/mcp.json 또는 ~/.cursor/mcp.json에 붙여 넣으세요
{
"mcpServers": {
"hubvibe": {
"url": "https://hubvibe-io.com/mcp",
"headers": {
"X-API-Key": "your-value"
}
}
}
}브라우저가 앱을 열지 물어본 다음, 앱이 설정을 보여 주고 확인을 요청해요. 키 값은 비워 두니 직접 입력하세요.
또는 설정을 직접 복사하기
프로젝트의 .vscode/mcp.json에 붙여 넣으세요
{
"servers": {
"hubvibe": {
"type": "http",
"url": "https://hubvibe-io.com/mcp",
"headers": {
"X-API-Key": "your-value"
}
}
}
}브라우저가 앱을 열지 물어본 다음, 앱이 설정을 보여 주고 확인을 요청해요. 키 값은 비워 두니 직접 입력하세요.
이 주소는 요청 header에 키가 필요한데, 커넥터 추가 메뉴에서는 넣을 수 없어요. 대신 Claude Code, Cursor, VS Code를 쓰세요.
선택한 앱은 이 기기의 쿠키에만 저장돼요. 계정은 필요 없어요.
직접 입력할 값
X-API-Key비밀 HTTP headerOptional prepaid key from https://hubvibe-io.com/start. MCP tool discovery is free. Semantic, vector and hybrid service search is free at https://hubvibe-io.com/discover; the linked repository includ…
이 설정은 제작자의 레지스트리 정보로 만들었어요. README와 다르면 README를 따르세요.
할 수 있는 일
도구 이름과 설명은 서버가 2026년 11월 6일에 알려 준 그대로예요. 우리가 아니라 제작자가 쓴 글이고, 일반 텍스트로만 보여 드려요.
audit_wcagWebsite accessibility audit (a11y, WCAG compliance check): WCAG 2.1 level A and AA conformance of any live URL or raw HTML, tested with axe-core in a real headless browser. Returns every violation with rule id, impact, help text and affected node count. Deterministic rules; a che
audit_seoSEO audit of a web page (on-page SEO check) for any live URL or raw HTML: title tag, meta description, H1 heading structure, canonical link, OpenGraph and social tags, JSON-LD structured data, html lang attribute. Rule-by-rule findings with severity and what is missing or malform
audit_securitySecurity headers check for a website: audits HTTPS, HSTS, Content- Security-Policy (CSP), X-Content-Type-Options, X-Frame-Options / clickjacking protection, Referrer-Policy and CORS from the real HTTP response of any live URL. Findings with severity for what is missing. Header po
audit_performancePage speed and page weight audit of a web page from one real browser load: total bytes transferred, HTTP request count and DOM node count, measured rather than estimated, with findings when the page is heavy. Page-weight signals, not Core Web Vitals. $0.05 per call. Returns: pass
audit_bundleFull website audit in one call: accessibility (WCAG 2.1 A/AA via axe-core), on-page SEO, HTTP security headers and page speed / page weight, from a single browser load of one URL. Cheaper than four separate calls; if any part cannot run, nothing is billed. Use a single audit rout
hubvibe_predictive_probability_enginePredictive probability and regression engine: least-squares linear regression with standard errors, confidence and prediction intervals, a fitted normal distribution with quantiles and probability queries (P(y > t)), exact Student t and Jarque-Bera p-values. Points inline or from
hubvibe_chain_networkBase network status and gas price: current block height and gas price (wei and gwei), live from a Base mainnet RPC node. Use it to check Base is moving, time an on-chain action or estimate gas before sending a transaction. Keyless, pay per call. No input needed. $0.10 per call. R
hubvibe_chain_addressBase wallet lookup / address balance: ETH balance, transaction count (nonce) and whether the address is a smart contract or an ordinary wallet (EOA), live from Base mainnet in one call. Use it to check a counterparty, deposit address or contract before paying it. Input: address (
hubvibe_chain_transactionBase transaction lookup by hash: sender, recipient, ETH value, block, success or failure, gas used and log count, with the receipt folded in, live from Base mainnet. Use it to confirm a payment or transfer landed on-chain. Input: hash (the 0x transaction hash). For the raw receip
hubvibe_market_quoteCrypto price / live coin quote: spot price, 24-hour change and 24-hour volume for Bitcoin, Ethereum, Solana or any Coinbase product (BTC-USD, ETH-USD, SOL-USD...), read at call time from Coinbase's public market data. Use it when an agent needs a current cryptocurrency price. Inp
hubvibe_market_predictionPrediction market odds: live Polymarket markets on any topic (elections, Fed rate cuts, crypto, sports, AI, geopolitics) with the probability each outcome implies as a percentage, plus volume, liquidity and end date. Search by topic words or tickers (BTC, 'fed rate cut') or take
hubvibe_extract_pageWeb scraping / web page to clean text: any URL rendered in a real browser (JavaScript pages included) and returned as readable text with title, description and links. Use it to read an article, docs page or product page before summarising or extracting. Input: url. Raw status, he
hubvibe_llm_analyzeQuestion answering over your own text: ask a question about material you supply and get an answer grounded only in that text (Gemini). If the text does not contain the answer it says so instead of guessing. Use it for summaries, Q&A and checks over documents, emails and pages. In
hubvibe_llm_extractStructured data extraction / text to JSON: pull the fields you name out of any text into a JSON object with exactly those keys, null where the text does not state a value (Gemini, no invented values). Use it to turn emails, invoices, pages or documents into clean records. Input:
hubvibe_data_queryBigQuery SQL: run a read-only SQL query, including against Google's public datasets (Wikipedia, GitHub, blockchains, weather, census and more), and get columns and rows back as JSON with the bytes processed. Every query is dry-run first and refused above the scan ceiling, so cost
hubvibe_data_questionAsk a database in plain English (text to SQL): any BigQuery table, including Google's public datasets. The SQL is written for you, run under a byte ceiling, and the rows are read back into a written answer, returned with the SQL, columns and rows it used. Use it for analytics que
hubvibe_research_briefSummarize and analyze a web page: the URL is rendered in a real browser, its content extracted, and a written brief answering your question returned, grounded in that page only and saying so when the page does not answer. Use it for competitor pages, docs, articles and listings.
hubvibe_research_page_factsStructured facts from a web page / scrape to JSON: name the fields you need (pricing, plans, contact, product names, anything) and get exactly those keys back as JSON from the live page rendered in a real browser, null where the page does not say. Use it for price monitoring, lea
hubvibe_market_intelCrypto market sentiment in one call: live Coinbase spot price, live Polymarket probabilities and recent news headlines (GDELT) on the same subject, analysed together in a written summary that says what the numbers do and do not support. Use it for a quick read on Bitcoin, Ethereu
hubvibe_search_webWeb search with an answer: real-time search of Brave's independent web index, answered from the current results only, with every source URL and title returned, never the model's memory. Use it when an agent needs up-to-date information, latest news, prices or facts from the web.
hubvibe_llm_generateLLM text generation / chat completion: a raw completion from your prompt with optional system message, max_tokens and temperature; Gemini by default, other configured models by provider and model. Use it for drafting, rewriting, translation, classification or any prompt, paid per
hubvibe_code_executeRun Python code in a sandbox: execute Python in Google's hosted sandbox (not on this service's machines) and get the code, its printed output and the outcome back. Use it for calculations, data transforms and checks an agent should not do in its head. Input: code. Questions over
hubvibe_image_generateAI image generation / text to image: one image from a text prompt with Google Imagen 4, returned as base64 image bytes with its MIME type. Use it for illustrations, thumbnails, product mockups and social images. Input: prompt; optional aspect_ratio. $0.50 per call. Returns: promp
hubvibe_speech_synthesizeText to speech (TTS): convert text to natural spoken MP3 audio with Google Cloud Text-to-Speech, returned as base64. Use it for voice replies, narration, audio versions of text and accessibility. Input: text; optional voice name. $0.25 per call. Returns: text_chars, voice, audio_
hubvibe_speech_transcribeSpeech to text / audio transcription: transcribe up to 60 seconds or 10 MB of audio with Google Cloud Speech-to-Text and get the transcript with its confidence and detected language. Use it for voice notes, call snippets and clips. Input: audio_base64; optional language_code. Lon
hubvibe_data_forecastTime-series forecasting: forecast any BigQuery table with Google's pretrained TimesFM model (AI.FORECAST), nothing to train. Point it at the table, timestamp column and value column and get forecast rows with bounds for the horizon you set, per series with id_cols. Use it for sal
hubvibe_data_anomaliesAnomaly detection on a time series: score recent periods against history with BigQuery AI.DETECT_ANOMALIES (TimesFM). Give one table and its latest periods are scored against its own history, or a history and a target table. Returns every checked row with bounds, anomaly flag and
hubvibe_verify_claimsFact check claims against sources: up to 10 claims checked against up to 4 source URLs you name; each comes back SUPPORTED, CONTRADICTED or UNSUPPORTED with the exact quote the verdict rests on. Use it to verify AI output, citations or statements before publishing. Input: claims[
hubvibe_research_webDeep web research with citations: search the live web for your question, read the top sources in full, and get a written answer with every claim tied to a numbered source. Use it when an agent needs a sourced answer, not a list of links. Input: question; optional max_sources. Qui
hubvibe_research_companyCompany research report: what a company does, its products and anything notable, from the live web (official site and Wikipedia first) and recent GDELT news, every claim cited to a numbered source, thin or conflicting evidence disclosed. Use it for due diligence, sales prep and c
hubvibe_agent_taskHubVibe Agent (quick): hand it any task in plain words and get the finished result in one call. Research a company or a person of interest, check a website, screen a name, read the markets, compare options, pull the facts: you get a headline, the key points, the full answer, its
hubvibe_agent_task_proHubVibe Agent (pro): hand it any task in plain words and get the finished result in one call. Research a company or a person of interest, check a website, screen a name, read the markets, compare options, pull the facts: you get a headline, the key points, the full answer, its so
hubvibe_agent_task_maxHubVibe Agent (max): hand it any task in plain words and get the finished result in one call. Research a company or a person of interest, check a website, screen a name, read the markets, compare options, pull the facts: you get a headline, the key points, the full answer, its so
hubvibe_monitor_snapshotWebsite change monitoring, step one: fetch a page and store it as the baseline to compare against later. Use it to watch pricing pages, terms, job boards or competitors. Input: url. Then call monitor.check to learn whether and how it changed. $0.50 per call. Returns: url, title,
hubvibe_monitor_checkWebsite change detection, step two: re-fetch a page saved with monitor.snapshot and get whether it changed, how old the baseline is, and a written summary of what changed. Use it to track price changes, terms updates, new job posts or competitor moves. Input: url; optional langua
hubvibe_commerce_availabilityProduct availability and price check: is it in stock and buyable right now, at what price, in which options (sizes, colours, dates, rooms), which option matches the variant you name, quantity and ship-to eligibility where the page states them, with evidence and a checked_at stamp
hubvibe_market_stockStock price / live stock quote for any US ticker: last price, change, day range, volume and market state, plus daily OHLCV history (1d to 5y), read at call time from Nasdaq's public data with Yahoo Finance as fallback. Every answer names its source, the source's timestamp, its de
hubvibe_market_fundamentalsSEC filings / company fundamentals: revenue, net income, diluted EPS, operating income, assets, liabilities, equity, cash and shares outstanding by quarter and year (10-K, 10-Q) as the company reported them to the SEC, from EDGAR's official XBRL API at call time. Name any other X
hubvibe_market_insidersInsider trading (SEC Form 4): what a company's officers, directors and 10% owners bought and sold, parsed from their Form 4 filings at call time from EDGAR. Each trade: insider, role, date, code and meaning, shares, price, value, holdings after, 10b5-1 plan flag, filing link. Sum
hubvibe_finance_analyticsTrading and portfolio math: returns and CAGR, volatility, Sharpe and Sortino, max drawdown, VaR/CVaR, beta, alpha and correlation vs a benchmark, SMA/EMA, RSI, Bollinger bands, Black-Scholes option price with Greeks, and the Kelly fraction, over prices you send or a ticker fetche
hubvibe_opendata_searchGovernment open data search across 16 national portals in one call: Korea (data.go.kr), Japan, Hong Kong, Australia, UK, Canada, the EU catalog (139,000+ datasets), Germany, Italy, Ireland, Switzerland, Netherlands, Israel and Chile. Query in any language; each match returns orga
hubvibe_opendata_tableDataset file to JSON rows: a CSV, TSV, XLSX or JSON link from any portal, an e-Stat (Japan) download or a data.go.kr (Korea) dataset page. Encoding detected (Korean, Japanese, Chinese, UTF and Western code pages), header row found, numbers typed, XLSX sheets selectable, large fil
hubvibe_search_resultsWeb search API / SERP results: raw web and news results from Brave's independent index in any language and country, with title, URL, description, age and extra snippets (headline, source and age for news). Filter by country, language and freshness (day, week, month, year). Result
hubvibe_news_searchNews search API: current news on any topic in any language from the GDELT Project, which reads the world's press every 15 minutes. Titles matched in their original script, newest first, with publisher, language and link; filter to one language; a US stock ticker searches the comp
hubvibe_data_macroEconomic data / macro indicators for any country, live: GDP, growth, GDP per capita, inflation (CPI), unemployment, population, interest rates, exchange rate, debt, trade, FDI or any World Bank indicator code. Annual for 200+ economies from the World Bank; monthly EU inflation an
hubvibe_email_verifyEmail verification / email validation: will mail to this address arrive? Checked live at the source: syntax, the domain's DNS (MX, null MX, no such domain) and its own mail server, asked whether the mailbox exists and whether it accepts any address (catch-all). No message sent. F
hubvibe_property_contextReal estate data for any US address: FEMA flood and 17 other hazard risk ratings with expected annual loss, median home value, rent, income, ownership and vacancy (Census), price trend (FHFA), fair market rents (HUD), nearby public schools (NCES), walkability (EPA) and Superfund
hubvibe_travel_flight_statusFlight status and airport delays, live: by airport code, FAA ground stops and delay programs with average and max delay (US), live departure and arrival boards with gates and status (Norway), current METAR and TAF weather (any ICAO airport) and aircraft overhead; by callsign, the
hubvibe_company_enrichCompany enrichment / firmographics by domain or name: legal and common name, founded, headcount with date, industries, headquarters, parent, CEO and founders, stock listings, LEI, SEC CIK, registration number, legal form and status, official social accounts and logo. Sources: Wik
hubvibe_sanctions_screenSanctions screening (AML/KYC): screen a person, company, vessel or aircraft against the OFAC SDN and consolidated lists, the UK Sanctions List and the EU financial sanctions list, read from the governments' own files with each list's date returned. Fuzzy and word-order free: alia
hubvibe_phone_parsePhone number validation and lookup: valid or not, country and area, the carrier the range was issued to, line type (mobile, landline, toll-free, VoIP, premium), time zones and E.164, international and national formats, from Google's libphonenumber numbering plans. Nothing is dial
hubvibe_ip_lookupIP geolocation / IP address lookup: city, region, country and coordinates, the network's ASN and organisation, reverse DNS, and whether the address is public, private or reserved. IPv4 and IPv6. Location data from DB-IP Lite (CC BY 4.0, credited), updated monthly; location is the
hubvibe_domain_dnsDNS lookup and domain health check: A, AAAA, CNAME, MX, NS, TXT, CAA and SOA records asked of the source, SPF and DMARC email policy parsed, and the HTTPS certificate verified like a browser (issuer, names, expiry, days left, TLS version). Flags missing SPF or DMARC, duplicate SP
hubvibe_identity_checkNon-government identity intelligence: email/DNS/wallet challenge proofs, GitHub and Bluesky public profiles, GLEIF/SEC business records, signed A2A cards and the canonical Base ERC-8004 registry. Separates ownership from public-record matches and unverified claims, with evidence,
hubvibe_contact_screenScreen a name against sanctions lists, evaluate email deliverability and disposable signals, validate a phone number's numbering plan and inspect IP geography/network. Returns findings, per-check completion, and a screening risk indicator. Never proves document authenticity, owne
hubvibe_lead_qualifyLead qualification in one call from a business website, fetched once by plain HTTP (no browser): SEO and security-header findings, static accessibility signals (images without alt, unlabelled fields, empty links), platform and marketing tags (WordPress, Shopify, Wix, Google Analy
hubvibe_commerce_shippingShipping cost and delivery check for any Shopify store: the variant goes into a real cart session and the store quotes its shipping options to your destination. Returns options with prices and days, eligibility (or the store's reason, or the address fields still needed), subtotal
hubvibe_traffic_routeTravel time with live traffic between two places, from the Google Routes API at call time: duration with traffic, duration without, the delay, distance, route description, warnings and advisories. Places as addresses, names or 'lat,lng'. Use it for ETAs, delivery windows and trip
hubvibe_video_youtubeYouTube search and video stats, live: search YouTube or look up videos by id, each with title, channel, upload time, duration, views, likes, comments, live flag and thumbnail from the YouTube Data API at call time. Sort by relevance, date, views or rating; filter by upload date,
hubvibe_social_blueskyBluesky data, live and keyless: a profile with its latest posts and engagement (likes, reposts, replies, quotes), an account search, or a post thread with its replies, from the public AppView. Use it for social listening and influencer checks on Bluesky. Input: mode (profile, sea
기본 점검i
누구나 볼 수 있는 정보를 점검했고, 코드는 읽지 않았어요. 해당하지 않는 항목은 개수에서 뺐어요. · 2026년 11월 10일 점검
- ✓ 통과
제작자와 저장소 일치
레지스트리 이름이 GitHub 계정 Its-fortunatefolly 기준으로 확인되었고, 이 계정이 저장소를 소유하고 있어요
- … 아직 점검 안 함
계속 관리되고 있음
아직 GitHub에서 이 저장소를 읽어 오지 않았어요
- … 아직 점검 안 함
라이선스 있음
아직 GitHub에서 이 저장소를 읽어 오지 않았어요
- ✓ 통과
엔드포인트 응답
916ms 만에 응답(HTTP 200)
- – 해당 없음
OAuth로 로그인
로그인 필요 없음
- ✓ 통과
도구 설명에 숨겨진 지시 없음
도구 설명 60개를 읽었고, AI에게 보내는 숨겨진 지시는 없었어요
검색 및 AI 기억 카테고리의 다른 서버와 비교i
- 이 카테고리의 다른 서버 5849개 중 0%보다 스타가 많아요
- 이 카테고리의 다른 서버 5849개 중 88%보다 최근에 레지스트리에 공개됐어요
- 기본 점검 결과가 이 카테고리의 다른 서버 5849개 중 100%와 같거나 더 좋아요
레지스트리에서 이 카테고리의 활성 서버 전체와 비교했어요. 스타는 게시자가 저장소를 소유한 경우에만 세요.
자주 묻는 질문
HubVibe: Pay-per-Call Agent Tools: Web Search, Email Verify, Contact Screening,…, 안전한가요?
해당하는 기본 점검 3개 중 3개를 통과했어요. 코드는 읽지 않았어요. 키나 토큰을 넣기 전에 서버가 어떤 권한을 요구하는지 확인하고, 꼭 필요한 권한만 있는 키를 쓰세요.
어떤 키나 코드가 필요한가요?
입력해야 할 값: X-API-Key
내 컴퓨터에서 실행되나요, 클라우드에서 실행되나요?
제작자의 클라우드에서 실행돼요. 설치 없이 인터넷으로 연결하지만, 보내는 내용은 제작자의 서버를 거쳐요.
아직 관리되고 있나요?
GitHub 저장소는 마지막으로 – 변경됐고, 최신 버전(1.35.0)은 5일 전 레지스트리에 올라왔어요.
어떤 앱에서 쓸 수 있나요?
Claude Desktop, Claude Code, Cursor, VS Code처럼 MCP를 지원하는 앱에서 쓸 수 있어요. URL로 연결되기 때문에, 원격 MCP 서버를 지원하는 앱(예: 개발자 모드의 ChatGPT)에서도 쓸 수 있어요.
대신 쓸 수 있는 건 뭐가 있나요?
같은 카테고리에는: Context7, Codebase Memory, Exa
대안
같은 카테고리에서 다른 제작자가 만든 서버예요. 스타 순으로 정렬했어요.
카드 보는 법:↓ 주간 다운로드i★ GitHub 스타i세 기둥: 리뷰 · 점검 · 사용 정도i업데이트 = 최신 버전을 레지스트리에 공개한 날i
Codebase Memory
Codebase knowledge graph for AI agents — 162 languages, sub-ms queries, 99% fewer tokens.
Exa
Connect AI agents to Exa for web search, content fetching, and multi-step research.
제작자의 README
README 열기
제작자의 저장소에서 쓰인 그대로 가져왔어요. PopNx MCP가 검토하거나 보증한 내용이 아니에요. HTML, 이미지, 스크립트는 제거했어요. 링크를 누르면 이 사이트를 벗어나요.
HubVibe
One node, 75 machine-payable jobs, one price per call, one receipt per job. HubVibe sells work to autonomous agents over HTTP 402: 70 workers under /work/* — LLM inference, live web search and page extraction, Base chain reads, spot and prediction-market data, BigQuery analysis and forecasting, deterministic regression and probability statistics, image/speech/video generation, sandboxed Python, maps, and cited research, verification and company briefs that compose several of them in one call — plus 5 deterministic site audits (WCAG 2.1 A/AA, SEO, security headers, performance, bundle). Pay with x402 (USDC on Base) or an MPP transfer-hash credential. No account, no human in the loop, and every delivered job has a machine-verifiable receipt at /work/receipts/{id}.
Live: https://hubvibe-io.com
Building an agent platform? HubVibe also delivers custom agent discovery and purchasing infrastructure: lexical, semantic, vector and hybrid catalog routers, MCP/A2A integration, verifiable receipts, idempotency, spend limits and anti-loop controls. This is scoped professional work, separate from the pay-per-call tools below.
This public repository contains the buyer-side clients, schemas, integrations, and registry metadata needed to discover and call HubVibe. The production workers, provider configuration, payment ledger, deployment configuration, credentials, and customer data remain in the private production repository.
Every check is a deterministic rule run against the live page. Nothing here is a language model judging whether a site looks compliant, and a check that could not run is returned as an error, never as a passing result.
There are two ways in. Both take under a minute.
1 — Gate your CI on it: one step, nothing to install
- uses: Its-fortunatefolly/HubVibe@v1
with: url: https://staging.example.com wallet-key: ${{ secrets.HUBVIBE_WALLET_KEY }}
That is the entire integration. Every pull request now runs the full compliance bundle against your deployed preview and fails the build on the regression that caused it — not in an audit six months later.
- Findings render in the job summary: rule, impact, nodes hit, link to the fix.
- A check that failed to *execute* is an error, never a silent pass — a green build means the checks actually ran.
fail-on-error: falsekeeps our outage from ever blocking your deploy; your real regressions still gate it.- $0.15 per PR for all four checks as one bundle, $0.05 for a single check. A repo running 100 paid bundle audits a month spends $15. No subscription, no seat licence, no minimum.
Gate a promotion on it:
- name: Audit staging
id: audit uses: Its-fortunatefolly/HubVibe@v1 with: url: https://staging.example.com wallet-key: ${{ secrets.HUBVIBE_WALLET_KEY }}
- name: Promote to production if: steps.audit.outputs.passed == 'true' run: ./deploy-production.sh
wallet-key is an EVM private key funded with USDC on Base. The step reads the 402, signs, and pays for its own run — no account, no checkout, nothing to provision first. max-price-usd (default 0.15) is a hard ceiling the client refuses to sign above, so fund the address like petty cash rather than a treasury. It needs no ETH: x402 signs the transfer off-chain and the facilitator pays the gas.
If you already hold a prepaid API key, pass api-key: instead of wallet-key: and the step spends that.
2 — Point your agent at it: no key, no signup, pay per call
An unauthenticated call is not an error here. It is the price sheet:
curl -i -X POST https://hubvibe-io.com/audit/wcag \
-H "Content-Type: application/json" \ -d '{"url":"https://example.com"}'
HTTP/1.1 402 Payment Required PAYMENT-REQUIRED:
{ "x402Version": 1, "error": "payment_required", "price_usd": 0.05, "accepts": [ { "scheme": "exact", "network": "base", "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913", "payTo": "0x837C40E2B4e976f43Ffb4451eE281A00fA9477dd", "maxAmountRequired": "50000", "resource": "https://hubvibe-io.com/audit/wcag", ... } ], "extensions": { "bazaar": { ... } }, "docs": "https://hubvibe-io.com/.well-known/agent.json" }
An agent reads the 402, signs an x402 payment (USDC on Base, or on Solana from the v2 header), retries with X-PAYMENT (v1) or PAYMENT-SIGNATURE (v2), and gets the audit. Payment is verified before the audit runs and settled only after it produces a result — a failed audit is never charged: x402 is settled only once the audit has run (and a settlement the facilitator refuses withholds the result and charges nothing), a prepaid key is refunded, and an MPP credential a failed audit consumed is accepted again on the retry.
For Python agents and swarms, the bundled tollbooth client does the whole loop — challenge, budget check, signing, retry — with two hard spending limits enforced *before* anything is signed:
from integrations.hubvibe_tollbooth import HubVibeTollbooth
booth = HubVibeTollbooth.from_env() # HUBVIBE_WALLET_KEY or HUBVIBE_API_KEY result = booth.audit("https://example.com") # full bundle, $0.15 result = booth.audit("https://example.com", endpoint="wcag") # $0.05
accepts lists only the payment rails that can genuinely settle on this deployment. A rail that is not configured is omitted rather than advertised with a null recipient, so a paying agent never builds a payment that cannot land.
How machines find this node without being told the URL: every 402 carries x402 Bazaar discovery data, so the facilitator catalogs this node by capability and price on the payment that settles through it — the spec has no other ingestion path; the /mcp endpoint is published in the official MCP registry as io.github.Its-fortunatefolly/hubvibe; A2A agents read /.well-known/agent-card.json; and /.well-known/agent.json is generated from the same catalog the routes charge from, so the advertised price is the charged price by construction.
Endpoints
| Route | Price | Checks |
|---|---|---|
POST /audit/wcag | $0.05 | WCAG 2.1 A/AA via axe-core, against the rendered page |
POST /audit/seo | $0.05 | Title, meta description, H1s, canonical, OpenGraph, structured data, lang |
POST /audit/security | $0.05 | HTTPS, HSTS, CSP, X-Content-Type-Options, clickjacking, Referrer-Policy, CORS |
POST /audit/performance | $0.05 | DOM nodes, transferred bytes, request count from one real page load |
POST /audit/bundle | $0.15 | All four against one URL, billed once |
Body is {"url": "..."}; wcag and seo also accept raw {"html": "..."}.
Worker network (/work/*)
The same payment gate sells a wider catalog beside the audits — each worker validated for free before any payment is read, never billed for a call that produced no result, with per-provider retries, exponential backoff, failover and a circuit breaker behind it. All 70 are in the catalog; every one the node can serve is live on the public node at hubvibe-io.com (GET /work lists them, free). On any other deployment a worker whose provider is not configured is absent, with a specific reason, until it is.
| Worker | Price | Capability |
|---|---|---|
chain.network / chain.address / chain.transaction | $0.05–0.10 | Base mainnet reads: block/gas, address report, transaction + receipt |
chain.rpc | $0.05 | Generic allowlisted JSON-RPC passthrough on Base |
market.quote / market.rates / market.ticker | $0.10 | Coinbase spot price, exchange rates, bid/ask/volume |
market.prediction / prediction.market / prediction.events | $0.05 | Polymarket odds — top-volume, by slug, or by event |
market.stock / market.fundamentals | $0.05 | Live equity quote + daily history (Nasdaq, Yahoo fallback); SEC EDGAR XBRL fundamentals by period |
finance.analytics | $0.50 | Deterministic trading math: returns, volatility, Sharpe/Sortino, drawdown, VaR/CVaR, beta, SMA/EMA/RSI/Bollinger, Black-Scholes Greeks, Kelly |
extract.page / fetch.raw | $0.10 | Rendered-page extraction, or raw status/headers/body |
search.web | $0.10 | Live web search, grounded via Gemini's Google Search tool |
opendata.search | $0.10 | Asia-Pacific open-data portals (AU, JP national + Tokyo, HK) searched in one call, any language, with download URLs |
traffic.route | $0.10 | Traffic-aware travel time and distance between two places (Google Routes API): live and static duration, delay, distance, warnings; DRIVE/TWO_WHEELER/WALK/BICYCLE/TRANSIT, optional future departure_time, as_of + checked_at |
video.youtube | $0.05 | YouTube search or lookup by id, every item with live views, likes, comments, duration and thumbnail (YouTube Data API v3) |
social.bluesky / social.mastodon | $0.05 | Keyless social reads: Bluesky profile/posts/actor search/thread; Mastodon hashtag timeline/account/search/trends on any public instance |
social.x_pulse | $0.50 | X (Twitter) topic pulse as aggregates only: volume per hour/day, engagement totals and rate, language mix, top hashtags (no posts or profiles returned) |
llm.analyze / llm.extract | $0.25 | Gemini: answer-from-material / structured-field extraction |
llm.generate | $0.25 | Raw completion from your prompt — Gemini by default, provider and model selectable |
code.execute | $0.25 | Python, run in Google's own hosted sandbox |
image.generate | $0.50 | Imagen 4 |
speech.synthesize / speech.transcribe | $0.25 | Cloud Text-to-Speech / Speech-to-Text v2 (sync, ≤60s) |
data.query | $0.50 | Read-only BigQuery SQL, dry-run cost-gated |
data.question / data.forecast / data.anomalies | $5–10 | BigQuery: NL→SQL→answer, AI.FORECAST, AI.DETECT_ANOMALIES |
market.intel | $5.00 | Spot + prediction odds, reconciled by Gemini |
research.brief / research.page_facts | $5.00 | One URL → cited brief / caller-named fields |
research.web / verify.claims / security.mcp_inspect | $5.00 | Web-search brief with citations; claims-vs-sources fact check; MCP endpoint audit |
research.company | $10.00 | Company research brief from live web sources, cited |
monitor.snapshot / monitor.check | $0.50 | Baseline a page, then get a diff summary later |
commerce.availability | $0.50 | Live buy/book check on any product or booking page: availability, price, options, quantity and ship-to eligibility, with evidence and checked_at |
maps.places / maps.route / maps.weather | $0.10 | Google's managed Maps Grounding Lite MCP server |
video.generate | $10.00 | Veo, 4-second clip |
A worker whose provider is not configured is absent — no route, no price, no tool, no manifest entry — the same rule the payment rails follow. See deploy/vps/.env.example for every provider key. GET /work (free) lists what is live on this deployment and why anything else is not.
Prices are flat per call and published where the audits' are: the 402 challenge, /.well-known/agent.json, /openapi.json, and the MCP tool list. Callers can send Idempotency-Key to make retries of one request return the first delivery instead of buying the work twice.
Paying
Three rails, all fail-closed — no valid credential means no job runs:
- `X-PAYMENT` / `PAYMENT-SIGNATURE` — x402 v2,
exactscheme, USDC on Base, settled through the Coinbase facilitator. This is the primary rail. - `Authorization: Payment ...` — MPP
evmmethod,hashcredential: the payer sends the exact USDC amount to the recipient itself and presents the transaction hash. No signature is verified, so smart-wallet payers (Coinbase Base Account and other EIP-7702 / ERC-433
앞부분만 보여 드려요. 나머지는 저장소에서 읽어 보세요