Skip to main content
Glama

Official Crypto Exchange Address Check

crypto_exchange_check
Read-onlyIdempotent

Check whether a domain or link is the official address of a crypto exchange, wallet or dApp — Korean exchanges (Upbit, Bithumb, Coinone, GOPAX, DigitalX/Korbit) and major global exchanges, wallets and dApps — compared with the addresses the companies publish themselves (the Korean exchanges' council member list, app store developer websites, verified GitHub organisations). Verdicts: official, danger (not official and the phishing check found impersonation evidence), not_official (uses a name but is not an official address — the name alone is not impersonation), not_exchange. A domain that uses a name also gets its registration date, the first certificate DechoNet saw for it, and a phishing check of its front page (which may render it). Read-only; no API key; rate-limited.

Input Schema

NameRequiredDescriptionDefault
domainYesDomain or link to check (e.g. 'upbit-event.example' or 'https://…')

Output Schema

NameRequiredDescriptionDefault
kpisNoKey metrics as label/value pairs
gradeNoLetter grade (A+ to F) when the tool grades the target
scoreNo0-100 score when the tool scores the target
issuesNoDetected problems, severity-rated
statusYesOverall verdict, e.g. 'good' | 'warning' | 'bad' | 'info' | 'unknown'
actionsNoRecommended next actions, most important first
summaryNoOne-paragraph interpretation of the result
receiptsNoSigned observation receipts behind this result, one per lookup: when, from where and under which rules version DechoNet observed it. Each url shows the record and checks its Ed25519 signature.
reportUrlYesHuman-facing interactive report for this exact lookup on dechonet.com
observationNoHow much was actually observed and when. A partial observation means some checks did not answer: missing parts are not verified, never clean.

Schema Changelog

Changes observed during successful MCP inspections.

  1. Added

TDQS

A4.4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Beyond the annotations (readOnly, idempotent, non-destructive) it discloses several operationally important traits: no API key required, rate-limited, and that the phishing check of a front page 'may render it' - a real side effect an agent should know about. The remaining gap is that it does not say how rate limits manifest (error vs. throttle) or how long a check takes, but the added context is substantive.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

One front-loaded sentence that leads with the core question, then parenthetically expands scope and verdict meanings - efficient for the amount of decision-relevant information packed in. The exchange-name parenthetical list is slightly baggy but is genuinely useful for matching, so the length is largely earned.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Even though an output schema exists, the description pre-explains the four verdicts precisely (including the subtle official/danger/not_official distinction, where a name alone is not impersonation), which is the exact ambiguity an agent would otherwise mis-handle. With the side-effect disclosure and source-of-truth description, an agent has everything needed to call it and interpret results correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% with a single required 'domain' parameter, so the schema already carries the baseline. The description still adds value by clarifying that a link/URL is also acceptable input and by explaining what happens for a domain that embeds an exchange name (registration date, first certificate, phishing check).

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Check whether a domain or link is the official address of a crypto exchange, wallet or dApp') and enumerates the coverage (Korean exchanges, global exchanges, wallets, dApps). It clearly distinguishes itself from neighbors like phishing_link_check and wallet_address_check by naming the exact verdict vocabulary and the reference sources it compares against.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The enumerated domain types (exchange / wallet / dApp) and the four verdicts give strong implied guidance about when this tool is the right one, and the 'compared with the addresses the companies publish themselves' clause explains how the judgment is made. It stops short of explicitly naming an alternative (e.g., phishing_link_check for non-exchange links) or a when-not-to-use condition, so it does not reach 5.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources