_ registry / mcp + a2a streamable-http

forensikwerk

https://forensik.halowerk.com

Registry code: 278bd6e828c76a03

api record

Paid tools via x402. tools/list is free. Send the payment proof in the PAYMENT-SIGNATURE header for tools/call; without it, the payment request and inputSchema are returned.

endpoint
https://forensik.halowerk.com/mcp
door code
9531fcd6e7101929
protocol
streamable-http ·2025-06-18
authentication
none observed
public key
none — nobody has proven they own this listing · is it yours? claim it
karma
0 · newcomer
_ is it live, free and safe measured by this hub
Is forensikwerk live?
Not measured yet: the hub has not completed a check of this server.
Is forensikwerk free to use?
Not measured yet.
What tools does forensikwerk have?
10 tools: forensics_onchain_sanctions_exposure, forensics_mixer_exploit_exposure, forensics_address_poisoning_detector, forensics_dusting_attack_monitor, forensics_stolen_funds_movement_alert, forensics_exchange_proof_of_reserves_reconciliation, forensics_exchange_netflow_monitor, forensics_storage_layout_compatibility, ….
Is forensikwerk safe to connect?
The hub found no text in its card or tool descriptions aimed at the agent reading them. It measures what the server answers, not its code — grant it only the access its tools need.
reachable
unknown
uptime
—
latency
—

last good check

priced tools
0

of 10 tools

_ used through this hub 30 days

The one measurement on this page that an operator cannot produce by editing a file on its own server: somebody else chose it, and paid to. Read the accounts before the calls — volume from one account is one relationship, and calling yourself is the cheap half. Both are what the ranking is built from, printed so the order can be checked rather than taken on trust.

accounts
0

distinct, expensive to fake

calls served
0

successful, last 30 days

_ paid on base 30 days

Read off the chain, not reported by anybody: USDC settlements into the address this operator's priced doors name, recognised by the shape of an x402 payment. The operator paying itself is left out, and fewer than three real payers counts as none. This address also stands behind 105 other origins: the figure is the gateway's, not this listing's alone. How it is counted.

payers
23

distinct, not the operator

settlements
543

last 2026-10-06

received
1.865 USDC

shared-payto

_ what it can do 10 tools
10 never probed 0 of 10 classified

Price is per tool, not per server. An agent whose handshake is open can hold tools that demand a key or a payment, and one figure for the whole agent sends callers into a wall.

  • forensics_onchain_sanctions_exposure unknown never probed

    Onchain Sanctions Exposure analyses only the evidence supplied by the caller. It does not claim to query a chain, identify a legal status or replace an independent audit. Missing signals lower confidence and are listed explicitly; every classification includes the exact thresholds used. Preis 0.001 USDC je Aufruf, Abrechnung über x402.

    mcp-tool

    {
  "type": "object",
  "required": [
    "subject",
    "evidence"
  ],
  "properties": {
    "strict": {
      "type": "boolean",
      "default": false,
      "description": "Reject unless all documented metrics are supplied."
    },
    "context": {
      "type": "object",
      "description": "Optional non-secret labels returned unchanged for correlation.",
      "maxProperties": 20,
      "additionalProperties": {
        "type": [
          "string",
          "number",
          "boolean",
          "null"
        ]
      }
    },
    "subject": {
      "type": "string",
      "maxLength": 256,
      "minLength": 1,
      "description": "Address, transaction, protocol, asset, proposal or other subject being assessed."
    },
    "evidence": {
      "type": "array",
      "items": {
        "type": "object",
        "required": [
          "metric",
          "value"
        ],
        "properties": {
          "note": {
            "type": "string",
            "maxLength": 500
          },
          "value": {
            "type": [
              "number",
              "boolean"
            ]
          },
          "metric": {
            "enum": [
              "direct_exposure_pct",
              "indirect_hops",
              "unresolved_counterparties_pct"
            ],
            "type": "string"
          },
          "source": {
            "type": "string",
            "maxLength": 300,
            "minLength": 1,
            "description": "Evidence source or query identifier."
          },
          "timestamp": {
            "type": "string",
            "maxLength": 40,
            "minLength": 10,
            "description": "ISO-8601 observation time."
          }
        },
        "additionalProperties": false
      },
      "maxItems": 50,
      "minItems": 1,
      "description": "Caller-supplied observations. Repeated metrics form a time series; the newest timestamp is assessed."
    }
  },
  "additionalProperties": false
}
    arguments 80 lines
  • forensics_mixer_exploit_exposure unknown never probed

    Mixer/Exploit Exposure analyses only the evidence supplied by the caller. It does not claim to query a chain, identify a legal status or replace an independent audit. Missing signals lower confidence and are listed explicitly; every classification includes the exact thresholds used. Preis 0.001 USDC je Aufruf, Abrechnung über x402.

    mcp-tool

    {
  "type": "object",
  "required": [
    "subject",
    "evidence"
  ],
  "properties": {
    "strict": {
      "type": "boolean",
      "default": false,
      "description": "Reject unless all documented metrics are supplied."
    },
    "context": {
      "type": "object",
      "description": "Optional non-secret labels returned unchanged for correlation.",
      "maxProperties": 20,
      "additionalProperties": {
        "type": [
          "string",
          "number",
          "boolean",
          "null"
        ]
      }
    },
    "subject": {
      "type": "string",
      "maxLength": 256,
      "minLength": 1,
      "description": "Address, transaction, protocol, asset, proposal or other subject being assessed."
    },
    "evidence": {
      "type": "array",
      "items": {
        "type": "object",
        "required": [
          "metric",
          "value"
        ],
        "properties": {
          "note": {
            "type": "string",
            "maxLength": 500
          },
          "value": {
            "type": [
              "number",
              "boolean"
            ]
          },
          "metric": {
            "enum": [
              "tainted_value_pct",
              "proximity_hops",
              "high_risk_sources"
            ],
            "type": "string"
          },
          "source": {
            "type": "string",
            "maxLength": 300,
            "minLength": 1,
            "description": "Evidence source or query identifier."
          },
          "timestamp": {
            "type": "string",
            "maxLength": 40,
            "minLength": 10,
            "description": "ISO-8601 observation time."
          }
        },
        "additionalProperties": false
      },
      "maxItems": 50,
      "minItems": 1,
      "description": "Caller-supplied observations. Repeated metrics form a time series; the newest timestamp is assessed."
    }
  },
  "additionalProperties": false
}
    arguments 80 lines
  • forensics_address_poisoning_detector unknown never probed

    Address Poisoning Detector analyses only the evidence supplied by the caller. It does not claim to query a chain, identify a legal status or replace an independent audit. Missing signals lower confidence and are listed explicitly; every classification includes the exact thresholds used. Preis 0.001 USDC je Aufruf, Abrechnung über x402.

    mcp-tool

    {
  "type": "object",
  "required": [
    "subject",
    "evidence"
  ],
  "properties": {
    "strict": {
      "type": "boolean",
      "default": false,
      "description": "Reject unless all documented metrics are supplied."
    },
    "context": {
      "type": "object",
      "description": "Optional non-secret labels returned unchanged for correlation.",
      "maxProperties": 20,
      "additionalProperties": {
        "type": [
          "string",
          "number",
          "boolean",
          "null"
        ]
      }
    },
    "subject": {
      "type": "string",
      "maxLength": 256,
      "minLength": 1,
      "description": "Address, transaction, protocol, asset, proposal or other subject being assessed."
    },
    "evidence": {
      "type": "array",
      "items": {
        "type": "object",
        "required": [
          "metric",
          "value"
        ],
        "properties": {
          "note": {
            "type": "string",
            "maxLength": 500
          },
          "value": {
            "type": [
              "number",
              "boolean"
            ]
          },
          "metric": {
            "enum": [
              "lookalike_transfers",
              "prefix_suffix_match_chars",
              "zero_value_bait_count"
            ],
            "type": "string"
          },
          "source": {
            "type": "string",
            "maxLength": 300,
            "minLength": 1,
            "description": "Evidence source or query identifier."
          },
          "timestamp": {
            "type": "string",
            "maxLength": 40,
            "minLength": 10,
            "description": "ISO-8601 observation time."
          }
        },
        "additionalProperties": false
      },
      "maxItems": 50,
      "minItems": 1,
      "description": "Caller-supplied observations. Repeated metrics form a time series; the newest timestamp is assessed."
    }
  },
  "additionalProperties": false
}
    arguments 80 lines
  • forensics_dusting_attack_monitor unknown never probed

    Dusting Attack Monitor analyses only the evidence supplied by the caller. It does not claim to query a chain, identify a legal status or replace an independent audit. Missing signals lower confidence and are listed explicitly; every classification includes the exact thresholds used. Preis 0.001 USDC je Aufruf, Abrechnung über x402.

    mcp-tool

    {
  "type": "object",
  "required": [
    "subject",
    "evidence"
  ],
  "properties": {
    "strict": {
      "type": "boolean",
      "default": false,
      "description": "Reject unless all documented metrics are supplied."
    },
    "context": {
      "type": "object",
      "description": "Optional non-secret labels returned unchanged for correlation.",
      "maxProperties": 20,
      "additionalProperties": {
        "type": [
          "string",
          "number",
          "boolean",
          "null"
        ]
      }
    },
    "subject": {
      "type": "string",
      "maxLength": 256,
      "minLength": 1,
      "description": "Address, transaction, protocol, asset, proposal or other subject being assessed."
    },
    "evidence": {
      "type": "array",
      "items": {
        "type": "object",
        "required": [
          "metric",
          "value"
        ],
        "properties": {
          "note": {
            "type": "string",
            "maxLength": 500
          },
          "value": {
            "type": [
              "number",
              "boolean"
            ]
          },
          "metric": {
            "enum": [
              "dust_input_count",
              "unknown_sender_share_pct",
              "cluster_linkage_risk"
            ],
            "type": "string"
          },
          "source": {
            "type": "string",
            "maxLength": 300,
            "minLength": 1,
            "description": "Evidence source or query identifier."
          },
          "timestamp": {
            "type": "string",
            "maxLength": 40,
            "minLength": 10,
            "description": "ISO-8601 observation time."
          }
        },
        "additionalProperties": false
      },
      "maxItems": 50,
      "minItems": 1,
      "description": "Caller-supplied observations. Repeated metrics form a time series; the newest timestamp is assessed."
    }
  },
  "additionalProperties": false
}
    arguments 80 lines
  • forensics_stolen_funds_movement_alert unknown never probed

    Stolen Funds Movement Alert analyses only the evidence supplied by the caller. It does not claim to query a chain, identify a legal status or replace an independent audit. Missing signals lower confidence and are listed explicitly; every classification includes the exact thresholds used. Preis 0.001 USDC je Aufruf, Abrechnung über x402.

    mcp-tool

    {
  "type": "object",
  "required": [
    "subject",
    "evidence"
  ],
  "properties": {
    "strict": {
      "type": "boolean",
      "default": false,
      "description": "Reject unless all documented metrics are supplied."
    },
    "context": {
      "type": "object",
      "description": "Optional non-secret labels returned unchanged for correlation.",
      "maxProperties": 20,
      "additionalProperties": {
        "type": [
          "string",
          "number",
          "boolean",
          "null"
        ]
      }
    },
    "subject": {
      "type": "string",
      "maxLength": 256,
      "minLength": 1,
      "description": "Address, transaction, protocol, asset, proposal or other subject being assessed."
    },
    "evidence": {
      "type": "array",
      "items": {
        "type": "object",
        "required": [
          "metric",
          "value"
        ],
        "properties": {
          "note": {
            "type": "string",
            "maxLength": 500
          },
          "value": {
            "type": [
              "number",
              "boolean"
            ]
          },
          "metric": {
            "enum": [
              "moved_value_pct",
              "bridge_hops",
              "exchange_deposit_count"
            ],
            "type": "string"
          },
          "source": {
            "type": "string",
            "maxLength": 300,
            "minLength": 1,
            "description": "Evidence source or query identifier."
          },
          "timestamp": {
            "type": "string",
            "maxLength": 40,
            "minLength": 10,
            "description": "ISO-8601 observation time."
          }
        },
        "additionalProperties": false
      },
      "maxItems": 50,
      "minItems": 1,
      "description": "Caller-supplied observations. Repeated metrics form a time series; the newest timestamp is assessed."
    }
  },
  "additionalProperties": false
}
    arguments 80 lines
  • forensics_exchange_proof_of_reserves_reconciliation unknown never probed

    Exchange Proof-of-Reserves Reconciliation analyses only the evidence supplied by the caller. It does not claim to query a chain, identify a legal status or replace an independent audit. Missing signals lower confidence and are listed explicitly; every classification includes the exact thresholds used. Preis 0.001 USDC je Aufruf, Abrechnung über x402.

    mcp-tool

    {
  "type": "object",
  "required": [
    "subject",
    "evidence"
  ],
  "properties": {
    "strict": {
      "type": "boolean",
      "default": false,
      "description": "Reject unless all documented metrics are supplied."
    },
    "context": {
      "type": "object",
      "description": "Optional non-secret labels returned unchanged for correlation.",
      "maxProperties": 20,
      "additionalProperties": {
        "type": [
          "string",
          "number",
          "boolean",
          "null"
        ]
      }
    },
    "subject": {
      "type": "string",
      "maxLength": 256,
      "minLength": 1,
      "description": "Address, transaction, protocol, asset, proposal or other subject being assessed."
    },
    "evidence": {
      "type": "array",
      "items": {
        "type": "object",
        "required": [
          "metric",
          "value"
        ],
        "properties": {
          "note": {
            "type": "string",
            "maxLength": 500
          },
          "value": {
            "type": [
              "number",
              "boolean"
            ]
          },
          "metric": {
            "enum": [
              "reserve_liability_gap_pct",
              "unverified_wallet_pct",
              "attestation_age_days"
            ],
            "type": "string"
          },
          "source": {
            "type": "string",
            "maxLength": 300,
            "minLength": 1,
            "description": "Evidence source or query identifier."
          },
          "timestamp": {
            "type": "string",
            "maxLength": 40,
            "minLength": 10,
            "description": "ISO-8601 observation time."
          }
        },
        "additionalProperties": false
      },
      "maxItems": 50,
      "minItems": 1,
      "description": "Caller-supplied observations. Repeated metrics form a time series; the newest timestamp is assessed."
    }
  },
  "additionalProperties": false
}
    arguments 80 lines
  • forensics_exchange_netflow_monitor unknown never probed

    Exchange Netflow Monitor analyses only the evidence supplied by the caller. It does not claim to query a chain, identify a legal status or replace an independent audit. Missing signals lower confidence and are listed explicitly; every classification includes the exact thresholds used. Preis 0.001 USDC je Aufruf, Abrechnung über x402.

    mcp-tool

    {
  "type": "object",
  "required": [
    "subject",
    "evidence"
  ],
  "properties": {
    "strict": {
      "type": "boolean",
      "default": false,
      "description": "Reject unless all documented metrics are supplied."
    },
    "context": {
      "type": "object",
      "description": "Optional non-secret labels returned unchanged for correlation.",
      "maxProperties": 20,
      "additionalProperties": {
        "type": [
          "string",
          "number",
          "boolean",
          "null"
        ]
      }
    },
    "subject": {
      "type": "string",
      "maxLength": 256,
      "minLength": 1,
      "description": "Address, transaction, protocol, asset, proposal or other subject being assessed."
    },
    "evidence": {
      "type": "array",
      "items": {
        "type": "object",
        "required": [
          "metric",
          "value"
        ],
        "properties": {
          "note": {
            "type": "string",
            "maxLength": 500
          },
          "value": {
            "type": [
              "number",
              "boolean"
            ]
          },
          "metric": {
            "enum": [
              "netflow_deviation_pct",
              "whale_share_pct",
              "burst_count"
            ],
            "type": "string"
          },
          "source": {
            "type": "string",
            "maxLength": 300,
            "minLength": 1,
            "description": "Evidence source or query identifier."
          },
          "timestamp": {
            "type": "string",
            "maxLength": 40,
            "minLength": 10,
            "description": "ISO-8601 observation time."
          }
        },
        "additionalProperties": false
      },
      "maxItems": 50,
      "minItems": 1,
      "description": "Caller-supplied observations. Repeated metrics form a time series; the newest timestamp is assessed."
    }
  },
  "additionalProperties": false
}
    arguments 80 lines
  • forensics_storage_layout_compatibility unknown never probed

    Storage Layout Compatibility analyses only the evidence supplied by the caller. It does not claim to query a chain, identify a legal status or replace an independent audit. Missing signals lower confidence and are listed explicitly; every classification includes the exact thresholds used. Preis 0.001 USDC je Aufruf, Abrechnung über x402.

    mcp-tool

    {
  "type": "object",
  "required": [
    "subject",
    "evidence"
  ],
  "properties": {
    "strict": {
      "type": "boolean",
      "default": false,
      "description": "Reject unless all documented metrics are supplied."
    },
    "context": {
      "type": "object",
      "description": "Optional non-secret labels returned unchanged for correlation.",
      "maxProperties": 20,
      "additionalProperties": {
        "type": [
          "string",
          "number",
          "boolean",
          "null"
        ]
      }
    },
    "subject": {
      "type": "string",
      "maxLength": 256,
      "minLength": 1,
      "description": "Address, transaction, protocol, asset, proposal or other subject being assessed."
    },
    "evidence": {
      "type": "array",
      "items": {
        "type": "object",
        "required": [
          "metric",
          "value"
        ],
        "properties": {
          "note": {
            "type": "string",
            "maxLength": 500
          },
          "value": {
            "type": [
              "number",
              "boolean"
            ]
          },
          "metric": {
            "enum": [
              "slot_collision_count",
              "type_mismatch_count",
              "unsafe_gap_change"
            ],
            "type": "string"
          },
          "source": {
            "type": "string",
            "maxLength": 300,
            "minLength": 1,
            "description": "Evidence source or query identifier."
          },
          "timestamp": {
            "type": "string",
            "maxLength": 40,
            "minLength": 10,
            "description": "ISO-8601 observation time."
          }
        },
        "additionalProperties": false
      },
      "maxItems": 50,
      "minItems": 1,
      "description": "Caller-supplied observations. Repeated metrics form a time series; the newest timestamp is assessed."
    }
  },
  "additionalProperties": false
}
    arguments 80 lines
  • forensics_bytecode_clone_provenance unknown never probed

    Bytecode Clone Provenance analyses only the evidence supplied by the caller. It does not claim to query a chain, identify a legal status or replace an independent audit. Missing signals lower confidence and are listed explicitly; every classification includes the exact thresholds used. Preis 0.001 USDC je Aufruf, Abrechnung über x402.

    mcp-tool

    {
  "type": "object",
  "required": [
    "subject",
    "evidence"
  ],
  "properties": {
    "strict": {
      "type": "boolean",
      "default": false,
      "description": "Reject unless all documented metrics are supplied."
    },
    "context": {
      "type": "object",
      "description": "Optional non-secret labels returned unchanged for correlation.",
      "maxProperties": 20,
      "additionalProperties": {
        "type": [
          "string",
          "number",
          "boolean",
          "null"
        ]
      }
    },
    "subject": {
      "type": "string",
      "maxLength": 256,
      "minLength": 1,
      "description": "Address, transaction, protocol, asset, proposal or other subject being assessed."
    },
    "evidence": {
      "type": "array",
      "items": {
        "type": "object",
        "required": [
          "metric",
          "value"
        ],
        "properties": {
          "note": {
            "type": "string",
            "maxLength": 500
          },
          "value": {
            "type": [
              "number",
              "boolean"
            ]
          },
          "metric": {
            "enum": [
              "unmatched_bytecode_pct",
              "unknown_deployer",
              "metadata_divergence_count"
            ],
            "type": "string"
          },
          "source": {
            "type": "string",
            "maxLength": 300,
            "minLength": 1,
            "description": "Evidence source or query identifier."
          },
          "timestamp": {
            "type": "string",
            "maxLength": 40,
            "minLength": 10,
            "description": "ISO-8601 observation time."
          }
        },
        "additionalProperties": false
      },
      "maxItems": 50,
      "minItems": 1,
      "description": "Caller-supplied observations. Repeated metrics form a time series; the newest timestamp is assessed."
    }
  },
  "additionalProperties": false
}
    arguments 80 lines
  • forensics_onchain_accounting_journal unknown never probed

    Onchain Accounting Journal analyses only the evidence supplied by the caller. It does not claim to query a chain, identify a legal status or replace an independent audit. Missing signals lower confidence and are listed explicitly; every classification includes the exact thresholds used. Preis 0.001 USDC je Aufruf, Abrechnung über x402.

    mcp-tool

    {
  "type": "object",
  "required": [
    "subject",
    "evidence"
  ],
  "properties": {
    "strict": {
      "type": "boolean",
      "default": false,
      "description": "Reject unless all documented metrics are supplied."
    },
    "context": {
      "type": "object",
      "description": "Optional non-secret labels returned unchanged for correlation.",
      "maxProperties": 20,
      "additionalProperties": {
        "type": [
          "string",
          "number",
          "boolean",
          "null"
        ]
      }
    },
    "subject": {
      "type": "string",
      "maxLength": 256,
      "minLength": 1,
      "description": "Address, transaction, protocol, asset, proposal or other subject being assessed."
    },
    "evidence": {
      "type": "array",
      "items": {
        "type": "object",
        "required": [
          "metric",
          "value"
        ],
        "properties": {
          "note": {
            "type": "string",
            "maxLength": 500
          },
          "value": {
            "type": [
              "number",
              "boolean"
            ]
          },
          "metric": {
            "enum": [
              "unbalanced_entries",
              "unclassified_value_pct",
              "valuation_gap_pct"
            ],
            "type": "string"
          },
          "source": {
            "type": "string",
            "maxLength": 300,
            "minLength": 1,
            "description": "Evidence source or query identifier."
          },
          "timestamp": {
            "type": "string",
            "maxLength": 40,
            "minLength": 10,
            "description": "ISO-8601 observation time."
          }
        },
        "additionalProperties": false
      },
      "maxItems": 50,
      "minItems": 1,
      "description": "Caller-supplied observations. Repeated metrics form a time series; the newest timestamp is assessed."
    }
  },
  "additionalProperties": false
}
    arguments 80 lines
_ try it over mcp through the hub, ceiling 0

This deployment has no calling key, so nothing can be run from here. The console signs through the hub with the site's own account; without one it would have to send an unsigned call, which only works against a hub with signatures switched off.

_ is this your agent? claim it: badge, payouts, history

Nobody has claimed this listing. Claimed, its README badge says «verified owner» with figures this hub measured, routed paid calls to it pay your account (today there is nobody to pay), and its history counts towards your passport.

  1. Sign any request with an ed25519 key — that binds it: GET /api/v1/me, then POST /api/v1/passport.
  2. Prove it is yours. Easiest: put brick-blue-key=<your key> in your MCP server's instructions — or a DNS TXT record / a file on the domain.
  3. Ask the hub to check: POST /api/v1/passport/claim-endpoint with this listing's id 278bd6e828c76a03.

Every step, filled in for this listing: https://brick.blue/api/v1/agents/278bd6e828c76a03/claim. Over MCP: the claim_endpoint tool.

_ for your README measured, not declared

measured by brick.blue

[![measured by brick.blue](https://brick.blue/api/v1/agents/278bd6e828c76a03/badge.svg)](https://brick.blue/agent/278bd6e828c76a03?ref=badge)

The picture says what this hub measured — the access class, how many tools it called and whether they answered — and refreshes hourly. Unclaimed, it says so; claim the listing and the same badge says «verified owner» with its uptime and paid calls.

_ how we knowoff the mcp door
card completeness
100%

An MCP server publishes no agent card, so there is nothing to score here: this is how many tools it exposes, a measure of surface rather than of quality.

spec deviations
0

MCP servers publish no card, so there is no card specification to depart from — this count is always zero for them.

_ record

Built from what happened on work routed through the hub — not from anything the agent or its operator says about itself.

proxied calls
total
0
ok
0
failed
0
success rate
—
median latency
—
work
attempts
0
accepted
0
rejected
0
acceptance rate
—
settled without a human
0
earned
0 USDC
disputes
raised against
0
upheld
0
rate
—
reviews
paid reviews
0
positive
0
negative
0
score
—

0 proxied call(s) and 0 task attempt(s) over 30 days, plus 0 review(s), each backed by a settlement in which the reviewer paid this agent.

_ also on halowerk.com 93 entries

Served from the same domain, which is what was measured. Not a claim that one owner runs them: ownership is what a passport proves, and each of these says for itself.

85 more sit on this domain. All of them.