Nightshift Labs: link, token & signature pre-checks
dev.workers.nightshift-labs.nightshift-x402/agent-safety
MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/ad90e9f2-11f3-448b-b270-593df783e11e/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "dev.workers.nightshift-labs.nightshift-x402/agent-safety"
title: "Nightshift Labs: link, token & signature pre-checks"
description: "Paid x402 pre-checks for agents: phishing links, Base tokens, EIP-712 permits, calldata, DNS."
version: "1.0.1"
homepage_url: "https://nightshift-x402.nightshift-labs.workers.dev/llms.txt"
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "dev.workers.nightshift-labs.nightshift-x402"
display_name: "dev.workers.nightshift-labs.nightshift-x402"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository{5}
url: "https://github.com/nightshift-labs-ai/nightshift-x402"
provider: "github"
owner: "nightshift-labs-ai"
name: "nightshift-x402"
verified: false
packages[0]
transports[1]
0{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://nightshift-x402.nightshift-labs.workers.dev/mcp"
endpoint_host: "nightshift-x402.nightshift-labs.workers.dev"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "legacy"
negotiated_version: "2025-11-25"
supported_versions[0]
transport_type: "streamable-http"
tools[18]
0{9}
name: "base_balance"
title: null
effect: "READ"
effect_confidence: 0.32
capabilities[0]
risk_severity: "INFO"
fingerprint: "6645859cc7988ff85b05b08d017b5511f3c645fc6fe262be2d3680d98e2ba945"
input_schema_fingerprint: "4b20b18cd6abfe9400b1e0aee181d20be51916dfa5ce5baece1f3c20ae7acec4"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: true
1{9}
name: "base_gas"
title: null
effect: "READ"
effect_confidence: 0.32
capabilities[0]
risk_severity: "INFO"
fingerprint: "fb1ba43db11f32ddd8768dc2cc62ab948b014a36eba498fe7441771779629a79"
input_schema_fingerprint: "12e92e272e109365b6e81c32d8a326ba8a6450023c0a9416d61b4573a5f2a2c4"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: true
2{9}
name: "base_portfolio"
title: null
effect: "UNKNOWN"
effect_confidence: 0.2
capabilities[0]
risk_severity: "LOW"
fingerprint: "f4cb8e810cd957505b8d2a66f5986b27c8f10d2412a0538cac779014619f2446"
input_schema_fingerprint: "296eac72ac1f5b98884c05e757418569534d9a4adb7d015ccfd7deb40c5e8f2d"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: true
3{9}
name: "base_token_check"
title: null
effect: "READ"
effect_confidence: 0.524
capabilities[0]
risk_severity: "INFO"
fingerprint: "f08b76213140a801f7d6a8e5784fd05518d75127c2872eb389ad58efdf886f0d"
input_schema_fingerprint: "8ea38d1aa4149148524067e21a5ebb1a00bcdb2e8b3e41bb0cf50302d93aa27c"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: true
4{9}
name: "base_token_price"
title: null
effect: "READ"
effect_confidence: 0.422
capabilities[0]
risk_severity: "INFO"
fingerprint: "60b2f5b8088b09f9e5491387d8596e741655df1aacc60a8f7b528ef49e9243a1"
input_schema_fingerprint: "8ea38d1aa4149148524067e21a5ebb1a00bcdb2e8b3e41bb0cf50302d93aa27c"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: true
5{9}
name: "base_tx"
title: null
effect: "READ"
effect_confidence: 0.626
capabilities[0]
risk_severity: "INFO"
fingerprint: "e61657c0b71ca79cd5707720b7bb4bc318ae48ba8c0c5d33d6e092d0f0fe4509"
input_schema_fingerprint: "d6775cc75fc8258cb91f7b43016facb826f135c41f292f83d84fad237ed25245"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: true
6{9}
name: "domain_dns"
title: null
effect: "READ"
effect_confidence: 0.422
capabilities[1]
0{2}
capability: "CLOUD_INFRASTRUCTURE"
confidence: 0.862
risk_severity: "INFO"
fingerprint: "866440b04b2675f631a69330fedc335a57d0e39f4a045b0f0f01040a6f8c072b"
input_schema_fingerprint: "5bad90df9c135059671c30eba4602ae2ec4ee8f6448fc4f7e14588aa481cc838"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: true
7{9}
name: "domain_email_check"
title: null
effect: "READ"
effect_confidence: 0.524
capabilities[3]
0{2}
capability: "CLOUD_INFRASTRUCTURE"
confidence: 0.618
1{2}
capability: "EMAIL"
confidence: 0.847
2{2}
capability: "PERSONAL_DATA"
confidence: 0.6
risk_severity: "MEDIUM"
fingerprint: "cfc8adb568743aaba469bf36a305a195f1f1c45789aeaf68a950dcfa1cfb706a"
input_schema_fingerprint: "a9294cd87365cf264738b5798c31b257236ee6addc7c7bb41c403ac05a7adec5"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: true
8{9}
name: "domain_whois"
title: null
effect: "READ"
effect_confidence: 0.32
capabilities[0]
risk_severity: "INFO"
fingerprint: "373bcbeb9d599af31cc4211b6e69821dc2ca039a9a9a2fcf78569dd1bedaf609"
input_schema_fingerprint: "de0156e0b1ba1709d449f1b6a5347ae2e9d0b88f5ec8e41b998cebeaca2081d7"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: true
9{9}
name: "ens_resolve"
title: null
effect: "READ"
effect_confidence: 0.78
capabilities[1]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.618
risk_severity: "INFO"
fingerprint: "98fd3593c426ae08fcaa89ae5db657031b0260ed9a3a48187f8497207ab213cc"
input_schema_fingerprint: "bd4c606787cec46b9791b33af602e8dfbfb5b37cb2c16d61b9ec56962aa1b582"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: true
10{9}
name: "evm_decode_calldata"
title: null
effect: "READ"
effect_confidence: 0.813
capabilities[0]
risk_severity: "INFO"
fingerprint: "a5d28776440a506c510cdab21c9692b7f7b27b8307012e62dd63482394037b9f"
input_schema_fingerprint: "7e0d63c88bce09dadfad43a6a4141c935af009c7aed0fad2bb608d697bbd2402"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: true
11{9}
name: "evm_typed_data_check"
title: null
effect: "READ"
effect_confidence: 0.777
capabilities[2]
0{2}
capability: "LEGAL"
confidence: 0.567
1{2}
capability: "PERMISSION_MANAGEMENT"
confidence: 0.567
risk_severity: "INFO"
fingerprint: "f928b017af64d2290c051197cb3df7ad8b7a588d47b9a40d959f6b8b12868dee"
input_schema_fingerprint: "085a23fda788b115e1d8a5c481cca2b77171201a1992f0a6165dc8ed2a72a423"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: true
12{9}
name: "wallet_screen"
title: null
effect: "READ"
effect_confidence: 0.32
capabilities[0]
risk_severity: "INFO"
fingerprint: "d36b0630faf0a80256da72c2b43263a8ee03237ad1b5872098cf43f1bf6431c0"
input_schema_fingerprint: "8153cafa95f628a482990cc0fd25fdae75bb0a74ef09ffea4953fb829f5cf960"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: true
13{9}
name: "web_brand"
title: null
effect: "READ"
effect_confidence: 0.32
capabilities[1]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.701
risk_severity: "INFO"
fingerprint: "da64d93b689202458ce097e122fc73a31e74d234664c73ec22058210e6454ee1"
input_schema_fingerprint: "9da1a42e9fc240b413c711dc8287a53d31270e7d7379be6588728f826bbc9e81"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: true
14{9}
name: "web_extract"
title: null
effect: "READ"
effect_confidence: 0.813
capabilities[1]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.746
risk_severity: "INFO"
fingerprint: "37f815c6b78f227bc9628639179963b90db6f215283c3ac3228c175d2d417181"
input_schema_fingerprint: "49ef24ed2a9818449fd8231981d2da1c3b45d4907d1cc084f9f0d991771de99f"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: true
15{9}
name: "web_link_check"
title: null
effect: "WRITE"
effect_confidence: 0.533
capabilities[1]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.865
risk_severity: "MEDIUM"
fingerprint: "7a8be6dd372b1d5dc9c1c7418ab07fb95a2dd8554f0cfbe7e4ce5678af25e5f1"
input_schema_fingerprint: "ea317bf7f3d38363906915dad37641f1f85de177e07616dd58163ab58d9bbf5b"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: true
16{9}
name: "web_security_headers"
title: null
effect: "READ"
effect_confidence: 0.32
capabilities[2]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.648
1{2}
capability: "SECURITY_CONTROL"
confidence: 0.908
risk_severity: "INFO"
fingerprint: "20e5ab46907f2ff864c231047944af02c99da2c6c525695944f77a8338377b3d"
input_schema_fingerprint: "ac7ee281454619d52f6a55f78cbf66d26e769ad0d31bd325ebe0baa9f7837109"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: true
17{9}
name: "x402_preflight"
title: null
effect: "READ"
effect_confidence: 0.32
capabilities[1]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.76
risk_severity: "INFO"
fingerprint: "1dd068c932f89be9c01c5588d0ff43954daf711a2ac321bfa3cfc8581bdf20c2"
input_schema_fingerprint: "2714a4a0dad1ba78f5176b90cc6a4c44a08ac4832cca3c755114401d2df06308"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: null
openWorldHint: true
resources[0]
prompts[0]
extensions[0]
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "nightshift-x402.nightshift-labs.workers.dev"
registrable_domain: "nightshift-labs.workers.dev"
source: "transport"
findings[4]
0{6}
check_id: "SQ-CONFORMANCE-MODERN-FAILURE"
category: "conformance"
severity: "LOW"
title: "Protocol conformance checks failed"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-SERVER-AUTH-NONE-WRITE"
category: "authentication"
severity: "MEDIUM"
title: "State-changing tools available without authentication"
subject_type: "server"
subject_name: null
2{6}
check_id: "SQ-TOOL-ANNOTATION-UNDERCLAIM"
category: "annotations"
severity: "LOW"
title: "Annotations understate what the tool does"
subject_type: "tool"
subject_name: "web_link_check"
3{6}
check_id: "SQ-TOOL-META-INSUFFICIENT"
category: "tool_design"
severity: "LOW"
title: "Description too thin to determine behavior"
subject_type: "tool"
subject_name: "base_portfolio"
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "unverified"
source_provenance: "unknown"
security_scan: "no_critical_findings"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "dev.workers.nightshift-labs.nightshift-x402/agent-safety"
registry_content_sha256: "6ebdba5a36f4cfa2675072ccb9ac5be101e01f63e390d040facedde30e5f977f"
scan_snapshot_fingerprint: "8972e267d4188d1c714cc0a9acf86d70aa0ac2d2b5a058b23b44130517fff2b6"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T05:37:14.582Z"
observed_at: "2026-11-06T10:45:20.696+00:00"
registry_published_at: "2026-11-06T09:50:07.141641+00:00"
registry_updated_at: null