Next free-source huntWe check for new free data every weekday.
FinancialMCP serverFirst audited Nov 13, 2026

DDG Agent Services

Pay-per-call x402 gateway: agent tools, OpenAI-compatible LLM, market data, RPC, security audits.The vendor's description, from its MCP Registry listing.

Passed, with 1 warningAudited Nov 13, 2026
  • Warning: 54 of 54 tools do not say whether they can change things.

Nothing failed, but there is something to know or fix. Public audit: we connect as an AI client would, list the tools and check what they say. We do not run them. How we audit

Does it work?
YesConnected in 211 ms.
Sign-up?
None neededIt answered without any account or key.
Can it change things?
Doesn't sayIts tools do not say whether they only read, so treat them as able to change things.
Endpointhttps://mcp.daedalusdevelopmentgroup.com/mcp

Source code Website Streamable HTTP · protocol 2025-11-25 · server version 1.28.0

What we checked, the evidence, and the tools it offers.

What we checked

Security

  • Passed: Connections are encrypted (HTTPS).

  • Passed: No hidden instructions found in tool text.

Safety labels

  • Warning: 54 of 54 tools do not say whether they can change things.

    MCP lets a server label each tool as read-only or destructive, so clients can ask the user before risky calls. Unlabelled tools are treated as able to change things.

    • ddg_mcp_security_profile
    • ddg_public_resource_index
    • ddg_fetch_public_resource
    • ddg_agent_distribution_targets
    • ddg_x402_bazaar_readiness
    • ddg_x402scan_status
    • ddg_x402_supported_chains
    • ddg_direct_crypto_addresses
    • and 46 more

Tools

  • Passed: 54 tools listed.

  • Passed: Every tool describes its inputs with a valid schema.

Protocol

  • Passed: The MCP handshake works (Streamable HTTP).

  • Passed: Protocol version 2025-11-25 (latest).

  • Passed: Unknown requests are refused.

Connection

  • Passed: The server responds.

Tools (54)

As the server describes them. The labels are the server's own: it says whether each tool only reads or can change things.

  • ddg_mcp_security_profileReturn this MCP wrapper's local security controls and publication gates.Doesn't say
  • ddg_public_resource_indexList allowlisted DDG public manifests/docs available as MCP resources.Doesn't say
  • ddg_fetch_public_resourceFetch an allowlisted DDG public manifest/doc by id or ddg:// URI with redaction and size caps.Doesn't say
  • ddg_agent_distribution_targetsReturn the AI-agent radar surfaces DDG is targeting and their current go-live gates.Doesn't say
  • ddg_x402_bazaar_readinessReturn CDP x402 Bazaar candidate resources, schema metadata, and settlement indexing gates.Doesn't say
  • ddg_x402scan_statusReturn DDG's x402scan registration status, resource URLs, and runtime probe guardrails.Doesn't say
  • ddg_x402_supported_chainsReturn all x402/direct-crypto chains DDG supports for AI-agent payment routing.Doesn't say
  • ddg_direct_crypto_addressesReturn DDG's public direct-crypto receiving addresses for manual/beta payment routing.Doesn't say
  • ddg_micro_swarm_previewRun the free DDG micro-model-swarm preview with a local Ollama mini-model.Doesn't say
  • ddg_ethereum_rpc_queryProxy a free read-only Ethereum JSON-RPC query through DDG's private Reth node (sync-gated).Doesn't say
  • ddg_search_servicesFind DDG agent-callable services matching a natural-language NEED. Returns the best-matching services (service_id, path, price, description) so an agent planner can pick the right one and th…Doesn't say
  • ddg_callInvoke any DDG service by service_id or /v1/ path with JSON args. Generic executor over the whole DDG catalog. Free/free-trial services return results directly; paid services return a struct…Doesn't say
  • ddg_list_servicesList DDG live/manual services from the public pricing and catalog surfaces.Doesn't say
  • ddg_list_modelsList local/free Ollama models and queryable paid/account-backed route labels.Doesn't say
  • ddg_list_local_runtime_optionsList free-seat status plus requestable local runtimes such as Ollama, llama.cpp, LM Studio, OpenAI-compatible servers, and vLLM.Doesn't say
  • ddg_quote_paymentReturn the payment challenge for a supported DDG protected route without executing backend compute.Doesn't say
  • ddg_run_paid_modelRun a paid model/chat or agent-run route after caller supplies valid payment headers.Doesn't say
  • ddg_submit_orderSubmit a paid operator-reviewed DDG order after caller supplies valid payment headers/proof.Doesn't say
  • ddg_request_ollama_modelQueue a local model/runtime request. This never auto-downloads by public request.Doesn't say
  • ddg_checkout_conformanceReturn DDG's public checkout conformance profile without spending money.Doesn't say
  • ddg_agent_statusReturn DDG's machine-readable service/rail/MCP status document.Doesn't say
  • ddg_skill_safety_scanRun the free static-only DDG AI skill/workflow safety scan. The scan never executes submitted code and redacts secret-like evidence. Doesn't say
  • ddg_order_statusPoll an agent-scoped DDG order status URL.Doesn't say
  • ddg_order_artifactFetch an agent-scoped DDG order artifact when ready.Doesn't say
  • ddg_receipt_verify_designDescribe the planned free receipt-verification tool contract. This is intentionally marked not-live until `/v1/receipt-verify` is implemented and backed by payment-edge audit/state reconcili…Doesn't say
  • ddg_security_service_catalogReturn DDG's AI-agent cybersecurity service catalog.Doesn't say
  • ddg_tx_smoke_testExercise the one-cent DDG transaction smoke-test route with caller-supplied payment headers.Doesn't say
  • ddg_data_queryCall an allowlisted DDG paid data endpoint (prediction-markets, dex-pairs, model-catalog, price-feed, dns-lookup, web-search, contract-abi, etc.). Call with no payment_headers to receive the x40…Doesn't say
  • ddg_html_to_structuredExtract structured JSON from raw HTML via CSS selectors ($0.002). selectors={'name': 'css'}.Doesn't say
  • ddg_table_extractExtract HTML tables as JSON rows or CSV ($0.003).Doesn't say
  • ddg_regex_builderNamed regex template (email, url, eth_address, tx_hash, ...) with live matching, or test a pattern against samples with ReDoS risk ($0.002).Doesn't say
  • ddg_card_fingerprintBIN/IIN fingerprint: network, expected length, Luhn validation. Masked output ($0.002).Doesn't say
  • ddg_address_validateUS street address parse + normalize with completeness score ($0.003).Doesn't say
  • ddg_calendar_parseParse 20+ datetime formats -> ISO/UTC + epoch + day-of-week, optional ICS ($0.001).Doesn't say
  • ddg_phone_intelPhone parse/validate: E.164, country, line type, carrier hint ($0.002).Doesn't say
  • ddg_domain_ageWHOIS domain creation date + age + trust band ($0.001).Doesn't say
  • ddg_agent_reputation_lookupReputation for an agent id / seller endpoint / payTo: DDG-rail settlement history + public signals, explainable score ($0.002).Doesn't say
  • ddg_seller_trust_badgeLive conformance check of a seller endpoint -> gold/silver/bronze badge ($0.003). Checks discovery manifest, real 402, challenge shape, payTo consistency.Doesn't say
  • ddg_dispute_evidence_packBundle DDG receipt lookups + Base on-chain tx proofs into a sha256-pinned evidence file ($0.05).Doesn't say
  • ddg_receipt_escrow_releaseOpen an escrow case: DDG holds the release decision until a completion receipt validates ($0.01, operator-verified).Doesn't say
  • ddg_robot_fleet_quota_auditRobot fleet spend-quota audit: per-robot caps, aggregate cap, unique ids, rate bound ($0.01).Doesn't say
  • ddg_robot_geo_fence_auditPhysical/geographic authority audit: geofence, vertical bounds, outdoor scoping, speed cap ($0.01).Doesn't say
  • ddg_robot_human_takeover_auditHuman handback audit: pause signal, handover latency, operator ack, resume policy ($0.01).Doesn't say
  • ddg_robot_delegation_chain_auditMulti-robot delegation-contract audit: monotone caps, per-hop expiry + revocation, chain aggregate ($0.01).Doesn't say
  • ddg_model_compareSame prompt to 2-3 LOCAL models (Ollama) with agreement score ($0.01). Account-backed models are rejected.Doesn't say
  • ddg_token_estimateDeterministic token estimates per model family before a metered call ($0.001).Doesn't say
  • ddg_prompt_cost_budgetCost ladder for a workload across DDG routes, cheapest first ($0.002).Doesn't say
  • ddg_eth_gasGas price, base fee trend, priority bands, simple-transfer cost USD ($0.001). Chains: ethereum/base/arbitrum/optimism.Doesn't say
  • ddg_wallet_snapshotNative + USDC balance (+optional extra ERC-20s) for an address ($0.002).Doesn't say
  • ddg_tx_statusTransaction receipt: mined?, success?, block, gas, cost ($0.001).Doesn't say
  • ddg_token_metaERC-20 metadata: name, symbol, decimals, total supply ($0.001).Doesn't say
  • ddg_crypto_priceUSD prices for eth/usdc/usdt/wbtc/aero/degen etc. 60s cached ($0.001).Doesn't say
  • ddg_gas_multiGas + transfer cost across ethereum/base/arbitrum/optimism in one call ($0.002).Doesn't say
  • ddg_crypto_portfolioConsolidated USD value of 1-10 addresses (native + USDC on ethereum/base) ($0.003).Doesn't say

Audit history

  1. Nov 13Warnings

What we sent

Every request in this audit, with the answer and how long it took. We never send credentials and never call a tool.

RequestAnswerTime
initializeHTTP 200211 ms
initializedHTTP 202105 ms
tools/listHTTP 200222 ms
resources/listHTTP 200120 ms
prompts/listHTTP 20087 ms
unknown-methodHTTP 20086 ms

Run this server, or disagree with the result?

Fix the issue and it shows in the next weekly audit, or email us to ask for a re-audit or to dispute a finding. Read how we audit for what each check means.