Security & Testing

fingersai.co

Provides tools for verifying entities, checking payee legitimacy, and assessing merchant trust scores.

x402 supported1 endpoint50 known toolsFirst detected August 23, 2026Last detected August 27, 2026

ENDPOINT 1

https://fingersai.co/mcp

No auth detected

MCP server metadata

Name: fingers
Version: 1.0.0

Capabilities

tools

Server instructions

Call `verify` before acting on anything you can't be sure of. Branch on recommended_action; anything other than 'proceed' means do not act yet.

Known tools 50

verify

Verify what is actually TRUE about something before you act on it.

Inferred read-only

x402_verdict

Check an x402 payee BEFORE paying it.

Inferred read-only

x402_leaderboard

The honest x402 trust index: merchants ranked by real unique payers (facilitator-verified), not raw volume.

Inferred read-only

x402_profile

Full free trust profile for one x402 merchant: identity/origin, demand, reputation, safety flags, and what could not be verified.

Inferred read-only

x402_fair_price

Is this price fair for what the service does?

Inferred read-only

x402_best_value

Best bang-for-your-buck x402 services BY CATEGORY.

Inferred read-only

resolve_entity

FIRST STOP for a name/entity question: 'what is X', 'when did X come out / launch', 'is X legit / a rug', 'who is X', or a bare proper noun / ticker.

Inferred read-only

onchain_lookup

Basic onchain picture of an address on any supported EVM chain: contract or not, code size, native balance, and whether it's an EIP-1967 upgradeable proxy (and its implementation).

Inferred read-only

read_contract

Call a view/pure function to resolve an exact fact on any supported EVM chain.

Inferred read-only

etherscan_lookup

Etherscan verified-source metadata for a contract: its ACTUAL name (e.g.

Inferred read-only

nft_floor_price

LIVE floor price of an NFT collection, fetched right now from Alchemy (OpenSea + LooksRare).

Inferred read-only

nft_info

NFT COLLECTION info (name, standard, total supply, holder count) for a chain that has NO marketplace floor source, ESPECIALLY ROBINHOOD CHAIN.

Inferred read-only

find_collections

Resolve a collection NAME to the right CONTRACT via CoinGecko's curated NFT index.

Inferred read-only

token_price

LIVE price + market snapshot for a crypto TOKEN/coin (not an NFT) from CoinGecko: current USD price, 24h and 7d change, market cap, 24h volume, all-time high and how far below it is.

Inferred read-only

price_history

Recent price MOVEMENT of a crypto token over the last N days: price path, high/low, net change, range, how many intervals moved down, biggest drawdown, and a sparkline.

Inferred read-only

nft_floor_history

Historical NFT FLOOR over the last N days from CoinGecko, for one collection or a COMPARISON of two.

Inferred read-only

dex_token

LIVE price, 24h change, volume and liquidity for ANY token trading on a DEX, across ~all chains INCLUDING SOLANA and ROBINHOOD CHAIN (ethereum, base, arbitrum, optimism, polygon, bsc, solana, robinhood), by contract address or by name/ticker.

Inferred read-only

project_links

Find and VERIFY a project's WEBSITE, SOCIALS, and CODE REPOS from every free source (DexScreener + GeckoTerminal + CoinGecko) and check each repo's liveness (GitHub / GitLab / Bitbucket: stars, last push, archived).

Inferred read-only

market_movers

Scan and RANK a whole chain's most-traded tokens by 24h price move — the biggest GAINERS or LOSERS right now.

Inferred read-only

prediction_market

LIVE prediction-market data from Polymarket (the biggest prediction market).

Inferred read-only

token_security

LIVE token SAFETY/rug-risk profile from GoPlus for a fungible token: honeypot, buy/sell tax, open-source, proxy, mintable, can-take-back-ownership, hidden owner, transfer-pausable, blacklist power, owner/creator holdings %, holder count, top-10 holder concentration, total liquidity, and how much of the LP is locked or burned (the #1 rug signal).

Potential side effects

nft_security

LIVE NFT COLLECTION safety/rug-risk.

Inferred read-only

stock_quote

LIVE US stock/equity quote from Financial Modeling Prep, by ticker OR company name (e.g.

Inferred read-only

tokenized_stock

Verify a TOKENIZED STOCK on ROBINHOOD CHAIN against Robinhood's OWN issuer registry: is this the GENUINE Robinhood-issued token (matched to the exact contract in api.robinhood.com/rhj) or a same-name COPYCAT/impersonator, is it TRACKING the real equity (healthy peg, multiplier-aware) or DE-PEGGED, and the disclosure that these are tokenized DEBT not equity.

Inferred read-only

robinhood_token_safety

Full safety scan for a ROBINHOOD-CHAIN token by 0x address, reconciling THREE sources: GoPlus (HONEYPOT, buy/sell tax, can't-sell-all, blacklist, pausable, mintable -- the sellability verdict), Blockscout (verified source, holders, top-holder CONCENTRATION, creator), and the DEX (liquidity).

Inferred read-only

robinhood_honeypot_sim

REAL-TIME honeypot check for a ROBINHOOD-CHAIN token: SIMULATES an actual buy then sell against the token's own V3 pool (no funds move) and reports whether SELLING REVERTS (a honeypot) plus the round-trip tax.

Inferred read-only

robinhood_movers

LIVE Robinhood-chain token discovery -- what's moving on Robinhood right now.

Inferred read-only

robinhood_clones

Find COPYCAT tokens on Robinhood Chain that share a name/symbol -- the 'runner' problem where a hit token or stock ticker gets cloned many times so buyers hit an imposter (we've seen 19 tokens named 'GP').

Inferred read-only

deployer_reputation

Has this WALLET rugged before?

Inferred read-only

token_outcome

Did this token survive or RUG?

Inferred read-only

robinhood_authenticity

Real-vs-FAKE checker for Robinhood Chain: is a DOMAIN the official explorer/docs or a phishing lookalike, and is a 'Robinhood Chain token / airdrop / snapshot / claim' real?

Inferred read-only

robinhood_nft_check

Safety check for a ROBINHOOD-CHAIN NFT collection (Anvil marketplace, Howl Street, etc).

Inferred read-only

robinhood_nft_value

Value the ASSETS HELD INSIDE a Robinhood-chain NFT (ERC-6551 token-bound account).

Inferred read-only

stock_safety

Stock RISK/safety profile from Financial Modeling Prep: actively trading vs delisted, exchange (OTC/pink-sheet = risk), penny-stock and micro-cap flags, Altman-Z bankruptcy score (<1.8 = distress, >3 = safe) and Piotroski fundamental-health score (0-9).

Inferred read-only

stock_movers

LIVE top stock movers for the current/most-recent US session from Financial Modeling Prep: biggest gainers, biggest losers, or most-active by volume.

Inferred read-only

address_security

Wallet/address REPUTATION from GoPlus threat feeds (SlowMist/BlockSec etc.): flags phishing, drainer/stealing attacks, money laundering, mixer use, sanctions, fake-KYC, honeypot deployment, and how many malicious contracts the address has created.

Inferred read-only

deployer_check

Due diligence on the WALLET/DEPLOYER behind a token, NFT, or mint: how many contracts it has deployed before and when (its TRACK RECORD), how old the wallet is, plus its scam/abuse reputation.

Inferred read-only

wallet_nfts

What NFTs a WALLET holds / has minted or collected across the main OpenSea chains (ethereum, polygon, base, arbitrum, optimism), and how active it is.

Inferred read-only

wallet_funds

FOLLOW THE MONEY: a wallet's balance and WHERE its funds moved -- the top addresses it WITHDREW to and was funded by (native ETH + internal txs + ERC-20).

Inferred read-only

collection_team

WHO is behind an OpenSea collection / mint: the creator-owner wallet, the PAYOUT recipient wallet(s) where mint + royalty money goes, the contract, verification status, and socials.

Inferred read-only

rug_check

One-call MARKETPLACE RUG-RISK scorecard for an NFT mint / collection: resolves the team, vets the creator/payout wallet (scam flags, wallet age, prior deployed-contract track record), follows the mint proceeds, checks contract safety, and flags the classic launchpad-scam patterns.

Inferred read-only

counterparty_check

Should you PAY or INTERACT with this ADDRESS?

Potential side effects

tx_check

SIMULATE a transaction BEFORE signing it: what does it ACTUALLY do to your funds?

Inferred read-only

agent_card_check

VERIFY ANOTHER AI AGENT before trusting or paying it.

Inferred read-only

check_instruction

Is this CONTENT safe for an agent to ACT ON?

Inferred read-only

rugcheck

SOLANA rug analysis from RugCheck.xyz (the Solana-native tool traders actually use): risk flags, LP lock %, mint/freeze authority revoked, top-holder concentration, a rugged flag, AND BUNDLE / INSIDER detection (insider_holdings_pct = share held by coordinated insider/bundled wallets, insider_networks, creator_balance) -- the memecoin rug tell traders check on every buy.

Inferred read-only

pump_status

pump.fun GRADUATION + bonding-curve status for a SOLANA token: has it graduated to a real Raydium market (graduated), how far along its bonding curve (bonding_curve_progress_pct), market cap, creator.

Inferred read-only

defillama

DeFi protocol due-diligence from DeFiLlama (keyless): TVL, category, chains, and a check against DeFiLlama's HACKS database of known past exploits (amount lost, technique, date).

Inferred read-only

sec_filings

SEC EDGAR filings for a US-listed STOCK (keyless, official primary source): recent 10-K (annual), 10-Q (quarterly), 8-K (material events), S-1, proxy filings, plus recent insider Form-4 trades.

Inferred read-only

domain_check

Domain registration age via RDAP.

Inferred read-only

CONNECT WITH APPROVAL

Client installation

Review this server and its permissions before adding it. Secret placeholders must be set locally.

Codex

~/.codex/config.toml

[mcp_servers.fingers]
url = "https://fingersai.co/mcp"
enabled = true

Claude Code

.mcp.json

{
  "mcpServers": {
    "fingers": {
      "type": "http",
      "url": "https://fingersai.co/mcp"
    }
  }
}

Claude Desktop

Settings → Connectors → Add custom connector

Name: fingers
Remote MCP URL: https://fingersai.co/mcp

Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.

Cursor

.cursor/mcp.json

{
  "mcpServers": {
    "fingers": {
      "url": "https://fingersai.co/mcp"
    }
  }
}

Visual Studio Code

.vscode/mcp.json

Add to Visual Studio Code

{
  "servers": {
    "fingers": {
      "type": "http",
      "url": "https://fingersai.co/mcp"
    }
  }
}

Generic MCP

Client-specific MCP configuration

{
  "name": "fingers",
  "transport": "streamable-http",
  "url": "https://fingersai.co/mcp"
}

MCP Inspector

Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.

TRUST AND VERIFICATION EVIDENCE

Trust Data Available

BuiltWith Trust API v2 evidence for fingersai.co was fetched 2026-08-29T14:06:05.496Z.

Trust status Neutral

fingersai.co is assessed as Neutral: No suspicious signals found, but no strong positive signal either

Indexed

Evidence is source-attributed and does not guarantee that a third-party server is safe. Risk labels are conservative metadata heuristics.