Skip to main content
Glama

Token safety & rug check ($0.01)

token_safety
Read-onlyIdempotent

PAID ($0.01 USDC via x402). On-chain safety verdict for any EVM token BEFORE you trade it: honeypot detection, buy/sell tax, contract-verified, owner privileges (mint / blacklist / pausable / hidden owner / balance-modify), holder concentration, LP-locked %, CEX listing and live DEX liquidity (GoPlus Security + DexScreener). Returns verdict safe|caution|danger with the exact risks. Without payment this returns the 402 challenge; the fiatdock-mcp npm package (AGENT_PRIVATE_KEY) pays automatically. Not financial advice.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
chainNoChain slug: base (default), ethereum, polygon, arbitrum, optimism, bsc, avalanche
tokenYesERC-20 contract address (0x…) to screen
paymentNoBase64 of a single x402 v2 PaymentPayload (EIP-3009 transferWithAuthorization on Base USDC). OMIT it on the first call: the 402 you get back carries `howToPay.payloadTemplate` — the exact envelope to fill in — plus the price and the EIP-712 domain. Send it on the second call to complete the purchase; it is forwarded as the PAYMENT-SIGNATURE header, never as body data. Nothing is charged for the 402 itself, and a call that fails after payment settles nothing.

Output Schema

TableJSON Schema
NameRequiredDescriptionDefault
asOfYesISO 8601 time the verdict was computed
nameNoToken name
noteNoHuman-readable caveat about the verdict, if any
chainNoChain the token was screened on
queryNoThe resolved lookup this verdict answers
risksYesEach detected risk: level (danger|caution), flag, detail
tokenNoContract address that was screened
sourceYesData source (e.g. GoPlus Security + DexScreener)
symbolNoToken symbol
isProxyNoUpgradeable proxy contract
verdictYesOverall risk verdict
priceUsdNoCurrent USD price, when a liquid pair exists
buyTaxPctYesBuy tax %
isHoneypotYesToken cannot be sold (honeypot)
isMintableNoSupply can be minted
sellTaxPctYesSell tax %
holderCountNoNumber of holders
lpLockedPctNoLiquidity-pool tokens locked, %
isOpenSourceYesContract source verified/open
liquidityUsdNoDEX liquidity in USD
topHolderPctNoTop holder's share of supply, %
verdictReasonYesPlain-language explanation of the verdict

TDQS

A4.4/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations (readOnly, idempotent, openWorld) cover the safety profile, and the description adds what annotations cannot: the $0.01 paid cost, the 402 challenge on non-payment, the automatic payment via the npm package, and the exact returns. The 'a call that fails after payment settles nothing' (in the payment param schema) and 'returns verdict with exact risks' complement the no-mutation hints. No contradiction with annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with the most critical gate ('PAID ($0.01 USDC via x402)') before the purpose, which is the right priority for a paid tool. The feature list is dense but each item is information-bearing, and the payment-flow sentence earns its place. Slightly verb-heavy near the end ('Not financial advice'), but every sentence contributes signal.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Complete for a complex, paid, two-step tool. Output schema covers return values, schema covers all params at 100%, and the description covers cost, payment flow, verdict format, and auto-pay. The riskiest part — the 402→payment handshake — is fully described in both description and schema, so an agent has everything needed to call this correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, and the schema already documents all three params thoroughly — the payment param in particular is extensively described (EIP-3009 payload, howToPay payloadTemplate, PAYMENT-SIGNATURE header). The description adds little param-specific meaning beyond what the schema provides, which matches the baseline-3 expectation when the schema does the heavy lifting.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Clear verb+resource: 'On-chain safety verdict for any EVM token' with specific deliverables (verdict safe|caution|danger). The feature list (honeypot, taxes, owner privileges, LP lock, liquidity) crisply distinguishes it from siblings like token_metadata and token_price, and the 'BEFORE you trade it' framing sets the exact scope. The verdict output is a distinct deliverable that differentiates it from token_report.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Strong context: 'BEFORE you trade it' tells the agent when this is the right tool, and the cost is front-gated. The payment guidance is explicit about the two-step 402-then-payment flow. However, it never names sibling alternatives (token_report, token_metadata) or states a when-not condition, so some routing is left to the agent rather than being explicit.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

TDQS

A4/5.0
Disambiguation4/5

Most tools are clearly separated by resource and action, but a few intentional bundles create mild selection overlap: token_report duplicates the data from token_price + token_safety, and address_intel overlaps eth_balance/usdc_balance plus safety. The descriptions explain the trade-offs well, so this is a minor rather than severe issue.

Naming Consistency4/5

Data-query tools follow a solid subject_metric pattern (token_price, usdc_balance, tx_status), while state-changing tools use verb_object (create_onramp_session, call_service). The pattern is readable and mostly consistent, but not a single uniform verb_noun convention throughout, so it falls just short of perfect.

Tool Count4/5

18 tools is above the typical 3-15 well-scoped range, but the server genuinely spans Base chain primitives, token intelligence, fiat ramps, and a marketplace. Each tool has a purpose, and the count is reasonable rather than bloated.

Completeness4/5

Core workflows are covered end-to-end: quote -> create on/off-ramp session -> order status; token price/safety/metadata/report; marketplace search/get/call; chain/tx primitives. Minor gaps exist, such as no order cancellation, no list-all-services endpoint, and no supported-country/method endpoint despite those details living in descriptions.