Security & Testing

onyx-actions.onrender.com

Provides signed verification and auditing services for agent economy metrics, registry, liveness, AI visibility, and security attestations.

1 endpoint33 known toolsFirst detected July 25, 2026Last detected August 29, 2026

ENDPOINT 1

https://onyx-actions.onrender.com/mcp

No auth detected

MCP server metadata

Name: onyx-actions
Version: 1.26.0

Capabilities

experimentaltools

Known tools 33

onyx_agent_economy_index

Signed Agent-Economy Index — the neutral referee for how big the agent economy REALLY is, by segment.

Inferred read-only

onyx_agent_registry

Signed verified-registry audit.

Inferred read-only

onyx_agent_verify

Signed agent liveness + authenticity oracle.

Inferred read-only

onyx_ai_visibility

AI answer-engine visibility (GEO) oracle.

Inferred read-only

onyx_attestation_verify

Verify an Onyx-signed security verdict.

Inferred read-only

onyx_contract_audit

Full smart-contract security audit for any Base address — source + DEPLOYED reality + AI, SIGNED.

Inferred read-only

onyx_ecosystem_intel

Signed snapshot of the agentic ecosystem 0n1x observes: our own live citizen + signed fact-layer counts, a live census pulled from Coinbase's public CDP x402 discovery API (service count + top categories), and a curated, honestly-labeled competitor map (x402 preflight/trust-score/oracle peers — what each verifies, where known, marked unverified where not).

Inferred read-only

onyx_intel_exchange

0n1x Intel Exchange in one tool (io.

Inferred read-only

onyx_mail_check

Check your Onyx mailbox — the async messages other agents left for you.

Inferred read-only

onyx_mail_send

Leave an async message in another agent's Onyx mailbox.

Potential side effects

onyx_market_rank

Signed, conflict-free rating of any agent/x402 service — 'Moody's for the agentic web'.

Inferred read-only

onyx_merchant_fact_check

Pre-checkout merchant fact oracle.

Inferred read-only

onyx_aeo_score

0n1x AEO Score: the SIGNED, auditable answer-engine visibility number for a brand/product/agent.

Inferred read-only

onyx_erc8004_lookup

Signed on-chain read of the ERC-8004 'Trustless Agents' registries (Identity + Reputation singletons, live on Base mainnet).

Inferred read-only

onyx_perm_check

Check whether an agent's proposed action stays inside its declared permission grant (allowed action, allowed merchant/domain, spend cap, rolling-window + velocity + per-counterparty budgets, expiry, principal, consent).

Inferred read-only

onyx_perm_grant

Mint a signed permission grant (onyx-perm-grant/v0) for an agent: a portable, Ed25519-notarized declaration of the scope it may act within (allowed_actions, allowed_merchants/domains, spend_max_usdc, principal, consent_ref, expires_at).

Inferred read-only

onyx_security_flags

Return the signed security posture of an agent: a list of OBSERVED, offline-verifiable security flags (insecure transport, no permission scope/principal/consent, no spend cap, unsigned identity, counterparty-blind, injection surface, unbounded skills).

Inferred read-only

onyx_payment_gate

Pre-payment clearance for agents.

Potential side effects

onyx_preflight

Preflight safety check for an x402-gated endpoint, BEFORE you pay it.

Potential side effects

onyx_research_intel

Research intel — has someone solved X already?

Inferred read-only

onyx_retail_price_check

Ground-truth retail oracle.

Inferred read-only

rhinogent_identity

Rhinogent identity card: give a self-custody Base (EVM) address, get back a signed, verifiable identity — deterministic callsign, did:pkh, and the agent's earned 0n1x-Verified credential.

Inferred read-only

rhinogent_mandate

Author a signed spend mandate for an agent: per-action and rolling-window USDC caps, merchant/domain allowlists, velocity limit and expiry — issued as a signed PERM_v0 grant the agent adopts.

Inferred read-only

rhinogent_verify_counterparty

Know-your-counterparty for agents.

Inferred read-only

onyx_secure_payment

Secure-transaction RAIL: one signed clearance before an agent sends funds.

Inferred read-only

onyx_signature_guard

Pre-signature firewall for OFF-CHAIN drains — the check before your agent signs an EIP-712 typed-data message (Permit, Permit2, Seaport order).

Potential side effects

onyx_token_risk

Signed token-security oracle.

Inferred read-only

onyx_track_record

Onyx's measured precision — the proof no other x402 security tool can show.

Inferred read-only

onyx_tx_guard

Pre-payment security firewall.

Potential side effects

onyx_tx_preflight

Universal pre-sign firewall — the check before your agent signs ANY transaction.

Inferred read-only

onyx_verified_issue

Get your domain Onyx Verified.

Inferred read-only

onyx_verify_explain

Diagnose a failing x402 v2 /verify.

Inferred read-only

onyx_x402_receipt_verify

Verify an x402 USDC settlement on Base or Base Sepolia.

Inferred read-only

CONNECT WITH APPROVAL

Client installation

Review this server and its permissions before adding it. Secret placeholders must be set locally.

Codex

~/.codex/config.toml

[mcp_servers.onyx-actions]
url = "https://onyx-actions.onrender.com/mcp"
enabled = true

Claude Code

.mcp.json

{
  "mcpServers": {
    "onyx-actions": {
      "type": "http",
      "url": "https://onyx-actions.onrender.com/mcp"
    }
  }
}

Claude Desktop

Settings → Connectors → Add custom connector

Name: onyx-actions
Remote MCP URL: https://onyx-actions.onrender.com/mcp

Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.

Cursor

.cursor/mcp.json

{
  "mcpServers": {
    "onyx-actions": {
      "url": "https://onyx-actions.onrender.com/mcp"
    }
  }
}

Visual Studio Code

.vscode/mcp.json

Add to Visual Studio Code

{
  "servers": {
    "onyx-actions": {
      "type": "http",
      "url": "https://onyx-actions.onrender.com/mcp"
    }
  }
}

Generic MCP

Client-specific MCP configuration

{
  "name": "onyx-actions",
  "transport": "streamable-http",
  "url": "https://onyx-actions.onrender.com/mcp"
}

MCP Inspector

Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.

TRUST AND VERIFICATION EVIDENCE

Trust Data Available

BuiltWith Trust API v2 evidence for onrender.com was fetched 2026-08-26T09:29:14.059Z.

Trust status Trusted

onrender.com is assessed as Trusted: Domain has an established technology history spanning over a year.

Indexed

Evidence is source-attributed and does not guarantee that a third-party server is safe. Risk labels are conservative metadata heuristics.