
Pay-per-call smart-contract security: scans, tx simulation, and token risk via x402 (USDC on Base).
Public tool metadata for what this MCP can expose to an agent.
preflight_checkMCP tool for the single-file security scan, listed in the MCP server (src/preflight/mcp/) section.MCP tool for the single-file security scan, listed in the MCP server (src/preflight/mcp/) section.
No parameter schema in public metadata yet.
preflight_simMCP tool for transaction pre-flight simulation, listed in the MCP server (src/preflight/mcp/) section.MCP tool for transaction pre-flight simulation, listed in the MCP server (src/preflight/mcp/) section.
No parameter schema in public metadata yet.
preflight_pricingNo parameter schema in public metadata yet.
Sponsors
Pay-per-call security scans and transaction simulations for AI agents.
POST Solidity source or a transaction, receive a severity-scored,
EIP-712-attested verdict: looks_ok | review | block.
Payments over the x402 protocol (HTTP 402 + real USDC on Base mainnet).
Built from the product plan in dud3-vault/LLM/2026-11-08 - x402 Product Plans.md
by hermes + omp + crush + opencode in a 4-pane Herdr session.
# no wallet needed (server DEV_MODE=1):
uv run uvicorn preflight.api.app:app --port 8000 &
uv run python client/pay_client.py --dev
# real x402 payment (funded burner, $0.01):
uv run python client/pay_client.py
# the handshake, by hand:
curl -i -X POST http://127.0.0.1:8000/v1/scan -H 'Content-Type: application/json' \
-d '{"source":"contract A {}"}'
# → 402, PAYMENT-REQUIRED header (base64 JSON requirements)
# → retry with PAYMENT-SIGNATURE header → verdict + PAYMENT-RESPONSE