
Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
deadchannel-mcp
Advanced tools
Check an x402 endpoint before you pay it. Returns a verdict (live, degraded, trap, testnet, dead), a 0-100 risk score and the specific problems found, for $0.005 in USDC on Base. No signup, no API key.
Check an x402 endpoint before you pay it.
An agent with a wallet can now buy from strangers. Nothing checks the stranger.
deadchannel_probe grades an endpoint for $0.005 in USDC on Base — less
than the smallest payment it protects — and returns a verdict, a risk score,
and the specific findings behind both.
live answers, settles, priced as listed
degraded answers, but something is wrong
trap takes payment and returns nothing usable
testnet a testnet address advertised as mainnet
dead does not answer at all
{
"mcpServers": {
"deadchannel": {
"command": "npx",
"args": ["-y", "deadchannel-mcp"],
"env": { "DEADCHANNEL_PRIVATE_KEY": "0x..." }
}
}
}
The key signs payments locally and never leaves the machine; only a signature
is sent. Point it at a wallet holding a little USDC on Base — a dollar buys a
thousand checks. deadchannel_health needs no key at all, so you can tell "the
service is down" apart from "my key is wrong" before spending anything.
| Tool | Cost | What it answers |
|---|---|---|
deadchannel_probe | $0.005 | Is this endpoint safe to pay? |
deadchannel_health | free | Is deadchannel itself up? |
No signup, no API key, no account. MIT licensed — github.com/plus8bit/deadchannel.
FAQs
Check an x402 endpoint before you pay it. Returns a verdict (live, degraded, trap, testnet, dead), a 0-100 risk score and the specific problems found, for $0.005 in USDC on Base. No signup, no API key.
We found that deadchannel-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.