Income Machine — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Income Machine (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
An MCP server that exposes 8 AI-powered legal document analysis tools, each billed per call in USDC on Base via the x402 payment protocol. No accounts, no subscriptions — agents pay only for what they use.
Live endpoint: https://income-machine-production.up.railway.app/mcp Health check: https://income-machine-production.up.railway.app/health Transport: HTTP (Streamable HTTP / MCP 2025-11-25)
| Tool | Description | Price |
|---|---|---|
extract_clauses | Extract and categorize all clauses from a contract | $0.02 USDC |
identify_risks | Identify legal risks, red flags, and unfavorable terms | $0.05 USDC |
compare_contracts | Compare two contracts and highlight differences | $0.05 USDC |
extract_parties | Extract all parties, roles, and contact info | $0.01 USDC |
summarize_contract | Generate an executive summary for non-lawyers | $0.02 USDC |
check_compliance | Check compliance with GDPR, CCPA, SOX, and others | $0.05 USDC |
extract_obligations | Extract all obligations, deadlines, and deliverables | $0.02 USDC |
calculate_penalty_exposure | Calculate maximum financial penalty exposure | $0.05 USDC |
Prices auto-adjust downward if call volume drops below the 7-day average.
Payments use the x402 HTTP payment standard:
payment_header → server returns a 402 Payment Required response with PaymentRequirements0xF4641f6AF6cc32c588Fa948ff64dBC0974F7D290payment_header and retries the callNetwork: Base (Coinbase L2) Token: USDC (0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913) Receiver: 0xF4641f6AF6cc32c588Fa948ff64dBC0974F7D290
Add to your claude_desktop_config.json:
{
"mcpServers": {
"legal-doc-intelligence": {
"url": "https://income-machine-production.up.railway.app/mcp",
"transport": "http"
}
}
}You will need a Base wallet with USDC to pay for tool calls. Compatible wallets: Coinbase Wallet, MetaMask with Base network.
import { Client } from "@modelcontextprotocol/sdk/client/index.js";
import { StreamableHTTPClientTransport } from "@modelcontextprotocol/sdk/client/streamableHttp.js";
const client = new Client({ name: "my-agent", version: "1.0.0" });
await client.connect(
new StreamableHTTPClientTransport(
new URL("https://income-machine-production.up.railway.app/mcp")
)
);
// First call returns payment requirements
const result = await client.callTool("identify_risks", {
contract_text: "...",
jurisdiction: "EU",
});
// If result contains x402: true, construct payment and retry with payment_headerANTHROPIC_API_KEY= # Claude API key for AI processing
CDP_PRIVATE_KEY= # Private key of the Base wallet (0x...)
WALLET_ADDRESS= # Public address of the same wallet
KRAKEN_API_KEY= # Optional: auto-convert USDC → EUR via Kraken
KRAKEN_API_SECRET= # Optional
KRAKEN_DEPOSIT_ADDRESS= # Optional: your Kraken USDC deposit address on Base
TELEGRAM_BOT_TOKEN= # Optional: alerts
TELEGRAM_CHAT_ID= # Optional
DASHBOARD_PASSWORD= # Password for the private /dashboard endpoint
PORT=3000
BASE_URL= # Your public URL, e.g. https://your-app.railway.appnpm install
npm run build
npm start@modelcontextprotocol/sdk, HTTP transportx402 npm package for verify + settle on BaseMIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.