Base Approval Risk Check
Server Details
Find risky ERC-20 approvals on a Base wallet and get revoke calldata. Paid x402 report.
- Status
- Healthy
- Last Tested
- Transport
- Streamable HTTP · MCP 2025-11-25
- URL
- ChatGPT
- –
- Claude
- –
TDQS
Scored across 2 tools
The two tools serve clearly separate purposes: one validates/classifies a 0x address before payment, the other returns pricing and the x402 purchase URL. An agent can trivially tell which to call at each step, and there is no overlap.
Both tools use a consistent snake_case 'approvals_' prefix, making the namespace obvious. The suffix style differs slightly (check_address is verb_noun while quote is a bare noun/verb), a minor deviation from a strict pattern.
Two tools is thin, but the server's scope is a narrow paid x402 report service where pre-check plus quote is genuinely all the MCP layer needs. It is well-scoped rather than padded, though it sits at the low end.
The pre-purchase lifecycle (validate address, get price/URL) is covered, but there is no tool to retrieve the purchased report, check payment/order status, or batch-check multiple wallets. Agents must leave the MCP surface to complete the transaction, which is a notable gap.
Available Tools
2 toolsapprovals_check_addressValidate an addressAInspect
Free: checks the 0x address format and whether it is an EOA or contract on Base before you pay.
| Name | Required | Description | Default |
|---|---|---|---|
| address | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden. It usefully discloses that the call is free, scoped to Base, and performs format plus EOA/contract detection, but says nothing about failure behavior for malformed addresses, latency, or what the response looks like, which matters since there is no output schema.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
One sentence, front-loaded with the 'Free:' qualifier and the scope, with zero filler. Slightly dense and could separate the chain scope from the cost note, but nothing is wasted.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a single-parameter validation tool with no output schema, the description covers the essentials: cost, chain, and the two things checked. It falls short only on return-value shape and invalid-input behavior.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must compensate for the single 'address' parameter. It adds real meaning by specifying a 0x-format address on Base, but says nothing about whether the 0x prefix is required, case sensitivity, or checksum handling.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb and resource: it checks the 0x address format and whether the address is an EOA or contract on Base. That is far more specific than the title 'Validate an address,' and 'before you pay' implicitly separates it from the paid approvals_quote sibling.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
'before you pay' conveys sequencing relative to the paid quote tool, so the intended usage is implied rather than stated. There is no explicit 'use this when...' statement or exclusion, leaving the agent to infer that this is the pre-flight step for approvals_quote.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
approvals_quoteQuote an approval risk checkBInspect
Free: price, payTo and the exact x402 URL to buy a Base ERC-20 approval risk report (unlimited/over-balance approvals + revoke calldata) for a wallet.
| Name | Required | Description | Default |
|---|---|---|---|
| address | Yes | Base/EVM 0x wallet |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description does useful work by disclosing that the call is free and that the response feeds an x402 payment flow with a payTo address. It still omits auth requirements, whether the quote expires, and any rate limits, so the behavioral picture is partial.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
One dense sentence that front-loads the key selling point ('Free:') and then lists the payload. Slightly compressed in phrasing ('the exact x402 URL') but no wasted words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With one simple parameter and no output schema, the description carries the return-value burden and does list the three components returned along with the report's contents and the chain. Adequate for a low-complexity quote endpoint; only the payment-flow sequencing is left implicit.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% and the sole parameter's own description ('Base/EVM 0x wallet') is at least as informative as the description's trailing 'for a wallet'. No format, chain, or validation detail is added beyond the schema, so this falls below the baseline.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description names a specific action and enumerates exactly what the caller receives: price, payTo, and the x402 purchase URL for a Base ERC-20 approval risk report. It is clearly a pre-purchase quote rather than the risk check itself, though it never names the sibling approvals_check_address to make that split explicit.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Use is only implied by the word 'Free' and 'to buy' — an agent can infer this is the step taken before paying for a report, but the description never states when to call this instead of approvals_check_address or what to do with the returned URL.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
2 tool updates
- First observed
approvals_check_address - First observed
approvals_quote
Related MCP Connectors
Honeypot & rug-pull detection, token risk feed, wallet risk, approvals audit. x402 USDC on Base.
Paid x402 crypto safety tools (Base/ETH/BSC): tx, approvals, contract risk, token deep scan.
Agent-readiness score for a Base wallet: gas, USDC float, activity. Paid x402 report.
21x402-paid on-chain tools: wallet report, contract scan, token risk, gas, address labels (USDC/Base)
Related MCP Servers
- FlicenseNot gradedqualityDmaintenanceAI-synthesized 3-bullet DeFi risk dossier for any Base wallet. Pre-trade counterparty vetting for MEV and arbitrage bots via x402 ($0.10 USDC per query).-
- AlicenseNot gradedqualityDmaintenancePay-per-call x402 crypto research and Base address/approval risk checks, capped wallet.MIT
- FlicenseNot gradedqualityDmaintenancePay-per-use AI security and research tools for autonomous agents on Base, enabling honeypot detection, risk assessment, wallet analysis, and yield optimization via the x402 protocol.1-
- AlicenseAqualityCmaintenanceSmart contract security scanner for Base. Detect honeypots, rug pulls, hidden mints, proxy dangers, and generate audit reports.825 npm1MIT
Glama MCP Gateway
Add one secure layer between your agents and this server.