Lion Mcp Public — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Lion Mcp Public (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
<p align="center"><img src="assets/lion-logo-400.png" alt="LION" width="150"></p>
LION is a keyless, account-less MCP server that gives AI agents pay-per-call access to real-world business & crypto data. Agents pay per call in USDC on Base via the x402 protocol (HTTP 402 + EIP-3009) — no API key, no signup, no subscription. Payment is the only gate.
Every response is cryptographically Ed25519-attested: an agent can verify offline that the data was not tampered with — provable, not self-reported. Verify it yourself with the zero-dependency package in verify/ (@lionx402/receipt-verifier, Node + browser + CLI). Check x402 client compatibility in CLIENT_COMPAT.md.
🚀 New here? → [QUICKSTART.md](./QUICKSTART.md) — real attested data free in 10 seconds (no wallet), then your first paid call in 2 minutes.
https://lionx402.com/api/mcphttps://lionx402.com/.well-known/x402.json?wallet=0x...; or start with the free lion_declare_need / lion_quick_intel tools.eip155:8453), asset 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913.{
"mcpServers": {
"lionx402": { "url": "https://lionx402.com/api/mcp" }
}
}Then ask your agent: "Use the lionx402 tools — call `lion_quick_intel` for coinbase.com, then `lion_cpg_product_intel` with barcode 5449000000996."
| Tool | Price (USDC) | What it returns |
|---|---|---|
lion_declare_need | free | Quick-intel sample + the exact paid call to make |
lion_quick_intel | free | Lightweight entity signal (attention/momentum) |
lion_enrich_v1 | $0.002/field | Company firmographics + SEC financials (Apollo-style org enrich), pay-per-field, Ed25519-attested |
lion_cpg_product_intel | $0.004 | CPG/retail product + crowdsourced shop prices (Open Food Facts + Open Prices) |
lion_composite_bundle | $0.005 | Enrichment + attested tx context + Base RPC in one call |
lion_sec_financials | $0.005 | SEC EDGAR financials |
lion_token_risk_indicators | $0.01 | Base/Ethereum/Solana token risk score + itemized flags |
lion_ofac_sanctions_screen | $0.005 | OFAC sanctions screening |
lion_vat_validation | $0.005 | EU VAT validation |
lion_domain_intel | $0.005 | Domain trust signals |
lion_keyless_base_rpc | from $0.001 | Multi-chain Base/Ethereum JSON-RPC reads |
Full live catalog: /api/x402/catalog · /.well-known/x402.json
GET a paid route → server replies HTTP 402 with the payment requirements (accepts[]: asset, amount in micro-USDC, EIP-712 domain).Payment-Signature header and retry → 200 + data.Complete keyless reference clients: examples/pay-lion.mjs (Node) and examples/pay_lion.py (Python). A runnable end-to-end agent — counterparty due-diligence (firmographics + OFAC + token risk, with attestation verified) — is in examples/agents/.
Each paid response includes an attestation block:
"attestation": {
"alg": "ed25519",
"signer": "<base64url public key>",
"payload_sha256": "<sha256 of canonical body without the attestation field>",
"signature": "<base64url ed25519 signature>"
}Recompute SHA-256(canonical sorted-key JSON of the body without the attestation field) and verify the Ed25519 signature against the published signer. Ready-made verifiers (browser / Node / zero-dep Python) are in examples/verify/ — open index.html to paste-and-verify offline. Live helper: GET https://lionx402.com/api/x402/enrich-v1-json?verify_helper=1.
MIT — see LICENSE.
Public data only; no PII. Mechanical lookups from open sources. Not financial, investment, audit, or legal advice. Verify independently.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.