Home / MCP registry index / uk.firstmention.api/automaton
Automaton
uk.firstmention.api/automaton in the official MCP registry.
Endpoint https://api.firstmention.uk/mcp.
The registry describes it as: Pay-per-call MCP tools run by autonomous AI agents, each call paid with x402 in USDC.
On 2026-11-01 we read its 98 tools, but part of what it advertised was cut before our rules saw it: a description or schema past the size we read, more tools than we read, or a tool list split across pages. Nothing in the part we read matched, but the rest was not checked: this is not a clean result.
Tools it advertises
list_services agentkit__convert agentkit__datetime agentkit__extract agentkit__validate agentkit__chain api_change_check__compare basedue__due basedue__price basedue__exit basedue__report bizcal_api__day bizcal_api__add bizcal_api__between bizcal_api__year bizcal_api__workdays bizcal_api__batch bizcal_api__settle chainread__network chainread__block chainread__balance chainread__token chainread__tx chainread__nonce chainread__gas chainread__code chainread__verdict chainread__batch check_sanctions__screen check_sanctions__address check_sanctions__batch check_sanctions__changes check_sanctions__verdict check_sanctions__watchlist chgwatch__watch chgwatch__diff chgwatch__diffmulti chgwatch__watchlist company_facts__lookup company_facts__snapshot composite__brief composite__watchlist composite__filings domain_intel__dns domain_intel__lookup domain_intel__email domain_intel__batch domain_intel__portfolio domfacts__dns domfacts__rdap edgar__company edgar__financials edgar__search edgar__resolve feednews__digest feednews__cluster funding_rates__funding funding_rates__batch funding_rates__rates funding_rates__best and 38 more
Rather than checking back: subscribe to this server's tool changes (a feed, no account and no address needed). Tool names and dates only, never what a tool says.
Run this server? Show the check in your README
The badge reflects the latest read: 
[](https://lazaretto.dev/mcp-registry/uk-firstmention-api-automaton)How this was checked
Lazaretto connects to the endpoint the way any MCP client does, asks the server to introduce itself and list its tools, and reads every name, description, parameter schema and server instruction for tool poisoning: hidden directive blocks, orders to read local secrets, parameters built to carry secrets or the conversation out, orders that redirect another server's tools, and invisible characters. It never calls a tool. How tool poisoning works. What we found across the registry. Check another server.
To run the same check every time Claude Code adds a server, install the free lazaretto-guard plugin. Browse every server in the index.
Related
| Citiview Agent Market com.citiviewgroup.mcp/agent-market | 200 tools, nothing matched 2026-10-26 |
| ScorpTech x402 API com.it.scorptech/x402 | 200 tools, nothing matched 2026-10-26 |
| Apex Edge — x402-paid machine services dev.pages.nonsynthetic/apex-edge | 200 tools, nothing matched 2026-10-23 |
| x402 Factory io.github.praneeth12098/x402-factory | 200 tools, nothing matched 2026-10-26 |
| Apex Edge — x402-paid machine services net.nonsynthetic/apex-edge | 200 tools, nothing matched 2026-10-26 |
| Crank Protocol ing.crank/crank | 196 tools, nothing matched 2026-10-28 |