Skip to main content
Glama

Token Security Decision

token_security_decision
Read-only

Evaluate a crypto token for agent interaction using security evidence from GoPlus (primary) and Honeypot.is (complementary, EVM chains only) and return a STRAELO decision that is deterministic for the same observed provider evidence; provider evidence can change between calls and external provider calls may affect latency and availability. There is no tool-specific rate limit. USE WHEN: an agent needs a machine-readable security decision before interacting with a token on Base, Ethereum, BSC, or Solana. DO NOT USE WHEN: the agent needs a guarantee that a token is safe, legitimate, scam-free, or risk-free; provider evidence may be unavailable or incomplete. Returns ALLOW, REVIEW, AVOID, or INCOMPLETE with supporting evidence. Missing or insufficient provider evidence fails closed and never produces ALLOW.

Input Schema

NameRequiredDescriptionDefault
chainYesBlockchain containing the token. Accepts base, ethereum, bsc, or solana. Input is normalized to lowercase.
token_addressYesToken identifier to evaluate. For base, ethereum, or bsc, provide an EVM contract address (0x followed by 40 hexadecimal characters). For solana, provide the token mint address as a base58 public key.

Output Schema

NameRequiredDescriptionDefault
chainYesBlockchain network queried.
productYesProduct identifier.
reasonsYesShort, objective, machine-readable reasons supporting the decision.
decisionYesToken security decision: ALLOW, REVIEW, AVOID or INCOMPLETE.
evidenceYesProvider evidence that supported the decision.
confidenceYesConfidence in the decision.
risk_scoreYesRisk score from 0 to 100.
observed_atYesUTC timestamp of the decision.
token_addressYesToken address/mint inspected.

Schema Changelog

Changes observed during successful MCP inspections.

  1. Changed2 schema fields changed
    • changedInput schema / properties / chain / description
      Previous value: -"Blockchain network where the token is deployed."New value: +"Blockchain containing the token. Accepts base, ethereum, bsc, or solana. Input is normalized to lowercase."
    • changedInput schema / properties / token_address / description
      Previous value: -"Token contract address (EVM) or token mint address (Solana)."New value: +"Token identifier to evaluate. For base, ethereum, or bsc, provide an EVM contract address (0x followed by 40 hexadecimal characters). For solana, provide the token mint address as a base58 public key."
  2. Added

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Goes well beyond the annotations: declares the decision is deterministic for identical evidence, that evidence can change between calls (consistent with idempotentHint=false), that external provider latency/availability is a factor, that there is no tool-specific rate limit, and that insufficient evidence fails closed and never yields ALLOW. That failure-mode disclosure is exactly the context annotations cannot express.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Dense but purposeful, with usage and exclusion blocks clearly labeled. Slight cost: the opening sentence carries nested parentheticals, and the closing 'fails closed / never produces ALLOW' partially restates the earlier evidence-availability warning, so it is a sentence longer than strictly needed.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a read-only, open-world decision tool with an output schema, the description supplies the missing pieces: provider provenance, determinism semantics, chain coverage, failure behavior, and explicit non-guarantees. An agent can decide whether to call it and how to interpret INCOMPLETE without further context.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% and the schema already documents chain normalization and the address format per chain, so the code-level semantics are covered. The description adds only a provider-level nuance (Honeypot.is is EVM-only, GoPlus primary), without per-parameter format or constraint detail beyond the schema. Baseline 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb+resource ('Evaluate a crypto token for agent interaction'), names the evidence providers, the supported chains, and the exact output vocabulary (ALLOW/REVIEW/AVOID/INCOMPLETE). This clearly separates it from sibling tools, which are all *other* decision types (domain_risk_trust_decision, x402_payment_preflight_decision, etc.).

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicit 'USE WHEN' names the triggering condition and the four chains; explicit 'DO NOT USE WHEN' excludes safety/legitimacy guarantees and warns about unavailable or incomplete evidence. That is the full when/when-not pair an agent needs to route correctly.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources