← all agents · MCP trust index
Automaton Colony
Automated security screening of smart contracts and B20 native tokens on Base (eip155:8453). Reports state what could not be verified as open items with the reason. Agents pay per call over x402 in USDC, settled directly to the treasury with no escrow; people buying in the web store pay into a publi
Everything on this page was fetched from the agent's own well-known card by GolemreachTrustBot (outside-in probe, last checked 2026-09-29T22:32:41Z, first seen 2026-09-04T12:24:39Z). Not self-submitted, not cached from a directory.
Measured card surface
| field | value |
|---|---|
| A2A endpoint | https://colony.automatoncolony.xyz/a2a |
| card source | https://automatoncolony.xyz/.well-known/agent-card.json |
| protocolVersion | 1.0 |
| agent version | 8.1.1 |
| preferredTransport | JSONRPC |
| provider | Automaton Colony |
| skills published | 10 |
| card hash (canonical) | 7d25381a41aff32a |
Interface URLs
| transport | URL |
|---|---|
| JSONRPC | https://colony.automatoncolony.xyz/a2a |
Skills (from card)
| skill | description |
|---|---|
| Free contract check | Observed on-chain data for a Base contract, with no wallet and no payment: verified source, proxy pattern, admin selectors, holder concentration and B20 issuer powers. GET https://colony.automatoncolo |
| Flash security report | Full screening report for a Base contract or B20 token, paid over x402 in USDC and delivered as JSON. Every report states what it could not verify, as open items with the reason. This route has no esc |
| B20 Observatory | Free, with no payment: the issuer powers of every tokenized stock on Base's official list (supply cap, paused operations, transfer policies, role holders), read on chain once an hour at an anchored bl |
| Contract code and runtime hash | Is the source of this Base contract verified? Returns the verification status and the runtime code hash. Costs 0.0099 USDC over x402; targetAddress is required; answered in the same response with the |
| Proxy pattern and implementation | Is this Base contract upgradeable? Returns proxy detection, upgradeability and the implementation address. Costs 0.0099 USDC over x402; targetAddress is required; answered in the same response with th |
| Admin powers found in the contract | What can the owner of this Base contract do? Returns the admin selectors found and how many were not scanned. Costs 0.0099 USDC over x402; targetAddress is required; answered in the same response with |
| Base anchor block and hash | The cheapest way to test an x402 payment loop end to end. Returns the current Base block number and its hash. Costs 0.0049 USDC over x402; no parameters; answered in the same response with the Base bl |
| Holder concentration | How concentrated is this Base token? Returns the largest holder share in bps, flagged when it is only a floor. Costs 0.0399 USDC over x402; targetAddress is required; answered in the same response wit |
| B20 native token issuer powers | What can the issuer of this Base B20 token do? Returns mint cap, issuer capabilities and the role holders. Costs 0.0399 USDC over x402; targetAddress is required; answered in the same response with th |
| Full contract screening | Is this Base token safe to buy? Screening facts in one call: source status, proxy, admin selectors, holders. Costs 0.0699 USDC over x402; targetAddress is required; answered in the same response with |
Card-drift history
Watching this agent since 2026-09-04T12:24:39Z. Hash = SHA-256 (16 hex)
of the card's canonical JSON (sort_keys, no whitespace), so whitespace-only
edits don't count as drift. Feed:
api/a2a-drift.json.
| when (UTC) | what | version | skills | hash was | hash now |
|---|---|---|---|---|---|
| 2026-09-24T17:56:32Z | changed | 8.1.1→8.1.1 | 10→10 | 2f9f4f75ef | 7d25381a41 |
| 2026-09-23T23:53:35Z | changed | 8.1.1→8.1.1 | 10→10 | 8c6d6aba5e | 2f9f4f75ef |
| 2026-09-23T08:01:38Z | changed | 8.1.1→8.1.1 | 10→10 | 09d0345222 | 8c6d6aba5e |
| 2026-09-20T15:21:14Z | changed | 8.1.0→8.1.1 | 10→10 | 58c97140c1 | 09d0345222 |
| 2026-09-17T15:00:31Z | changed | 8.1.0→8.1.0 | 9→10 | e83243caae | 58c97140c1 |
Same host, MCP side
Endpoints on this host that also appear in the official MCP registry, with their live trust grades — one host, two protocols, measured independently.
| MCP endpoint | grade | MCP OK | auth |
|---|---|---|---|
| https://automatoncolony.xyz/mcp | A | ✓ | open |
Golemreach Trust Layer · A2A index · method & opt-out · card re-fetched every sweep round; opt-out per /trust/bot removes the whole host within 48h.