MCP Observatory
github re-analysis due

0xdirectping/app

github

Agent-to-agent escrow on Base. Post quests with ETH/USDC bounties and settle on-chain.

maintainer
0xdirectping
license
—
first seen
2026-06-03
last seen
2026-06-03
releases · 30d
0
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools
transport streamable-http · http verified reported listed in the official MCP registry counts 0 tools · 0 res · 0 prompts permission surface via code analysis

no tools enumerated yet for this server.

skills & danger signals github-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 9f15b93 · analyzer v17 · 3d ago

danger signals1

code evidence vHEAD · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

filesystem 4

  • fs 0xdirectping-app-9f15b93/packages/api/src/x402/replay-guard.ts :1 import { readFileSync, writeFileSync, existsSync } from "node:fs";
  • fs 0xdirectping-app-9f15b93/packages/worker/src/loop.ts :1 import { writeFileSync } from "node:fs";
  • fs 0xdirectping-app-9f15b93/packages/worker/src/state.ts :1 import { readFileSync, writeFileSync, existsSync } from "node:fs";
  • fs 0xdirectping-app-9f15b93/scripts/deploy.ts :4 import { readFileSync } from "fs";

network 1

  • net 0xdirectping-app-9f15b93/src/app/leaderboard/page.tsx :22 const res = await fetch("http://127.0.0.1:4021/api/leaderboard", {

secrets 2

  • secrets 0xdirectping-app-9f15b93/packages/worker/src/config.ts :27 process.env.XMTP_WALLET_KEY = walletKey;
  • secrets 0xdirectping-app-9f15b93/scripts/deploy.ts :6 const PRIVATE_KEY = process.env.DEPLOYER_PRIVATE_KEY as `0x${string}`;

tool registrations 10

  • get_quest 0xdirectping-app-9f15b93/packages/api/src/mcp/server.ts :276
  • list_open_quests 0xdirectping-app-9f15b93/packages/api/src/mcp/server.ts :279
  • get_agent 0xdirectping-app-9f15b93/packages/api/src/mcp/server.ts :282
  • get_stats 0xdirectping-app-9f15b93/packages/api/src/mcp/server.ts :285
  • complete_quest 0xdirectping-app-9f15b93/packages/api/src/mcp/server.ts :289
  • cancel_quest 0xdirectping-app-9f15b93/packages/api/src/mcp/server.ts :292
  • prepare_accept_quest 0xdirectping-app-9f15b93/packages/api/src/mcp/server.ts :296
  • prepare_register_agent 0xdirectping-app-9f15b93/packages/api/src/mcp/server.ts :299
  • prepare_open_dispute 0xdirectping-app-9f15b93/packages/api/src/mcp/server.ts :302
  • suggest_deadline 0xdirectping-app-9f15b93/packages/api/src/mcp/server.ts :306

declared dependencies 17

  • @rainbow-me/rainbowkit@^2.2.10
  • @tanstack/react-query@^5.90.21
  • @xmtp/browser-sdk@^6.3.0
  • lucide-react@^0.575.0
  • next@16.1.6
  • react@19.2.3
  • react-dom@19.2.3
  • viem@^2.46.2
  • wagmi@^2.19.5
  • @tailwindcss/postcss@^4
  • @types/node@^20
  • @types/react@^19
  • @types/react-dom@^19
  • eslint@^9
  • eslint-config-next@16.1.6
  • tailwindcss@^4
  • typescript@^5