Skip to main content
Glama

DexScreener DeFi Token Liquidity & Pair Security Audit

Server Details

Audit on-chain DEX token liquidity pairs, volume, price action, and FDV via DexScreener.

If you are the author of this connector, you can claim ownership by verifying the domain or GitHub account it belongs to. Claimed connector authors can inspect health checks, view analytics, and manage their listing.
Status
Healthy
Last Tested
Transport
Streamable HTTP · MCP 2025-03-26
URL
ChatGPT
–
Claude
–

TDQS

C2.9/5.0

Scored across 4 tools

Disambiguation3/5

The four tools target different corpora/actions, but package_health_pulse and security_cve_audit both concern package risk and could easily be confused when an agent wants 'is this dependency safe?'. The two FTS5 search tools (gcp_catalog_search and vault_knowledge_search) are distinguishable only by their data source, not by any stated verb or output semantics.

Naming Consistency3/5

All names are snake_case and readable, but the internal grammar is mixed: some end in an action verb (gcp_catalog_search, vault_knowledge_search) while others end in a noun (package_health_pulse, security_cve_audit). There is no consistent verb_noun pattern an agent can predict from.

Tool Count3/5

Four tools is a thin but workable surface for a read-only search/audit server. However, for a server advertised as a DeFi token liquidity and pair security audit, the small set is entirely mismatched to the implied scope, leaving the count looking arbitrary rather than well-scoped.

Completeness2/5

The stated domain (DEX pair liquidity and token security) is completely uncovered: no tools for pairs, prices, liquidity, or on-chain token checks. Even within the actual tool domains, there are dead ends — search and aggregate audit exist, but no get/detail operations to drill into a specific package, advisory, or service record.

Available Tools

4 tools
package_health_pulseC
Read-only
Inspect

Parallel health pulse inspection across NPM and PyPI ecosystems.

NameRequiredDescriptionDefault
package_nameYesTarget package name

TDQS

C2.8/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true, openWorldHint=true, and destructiveHint=false, so the safety profile is covered. The description does add that the call fans out across two registries in parallel, which tells the agent to expect aggregated cross-ecosystem results rather than a single-registry lookup. It says nothing about partial failures (e.g., package missing on PyPI) or rate-limit behavior for an open-world remote call.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

A single ten-word sentence with no filler and the ecosystem scope front-loaded. It is efficient, though efficiency here reflects under-specification rather than tight editing.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema, the description is the only place the agent could learn what a "pulse" result contains, and it does not say. For an open-world tool hitting two external registries, the missing return-shape and partial-failure behavior leave a real gap despite the simple one-parameter surface.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% for the single required parameter, so "Target package name" is already documented structurally. The description adds no meaning about naming conventions – scoped NPM names like @scope/pkg versus PyPI normalization – which is the one piece of semantics an agent actually needs here. Baseline 3 applies when the schema carries the weight.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose3/5

Does the description clearly state what the tool does and how it differs from similar tools?

"Parallel health pulse inspection across NPM and PyPI ecosystems" names the two registries it queries and implies a read-only diagnostic, but "health pulse inspection" is undefined jargon – an agent cannot tell whether this returns downloads, version freshness, deprecation status, or a composite score. It also does no work to distinguish itself from security_cve_audit, which plausibly overlaps on package risk.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no statement of when to call this versus the sibling tools (security_cve_audit in particular), no prerequisites, and no indication of what to do when a package name exists on one registry but not the other. The word "parallel" hints that both ecosystems are checked in one call, but that is inference, not guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

security_cve_auditB
Read-only
Inspect

Audit package vulnerabilities and CVE advisories via OSV.dev database.

NameRequiredDescriptionDefault
packageYesPackage name (e.g. 'jinja2', 'requests')
versionNoSpecific version string (optional)
ecosystemNoEcosystem (PyPI, npm, Go, etc.)PyPI

TDQS

B3.2/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true, openWorldHint=true, and destructiveHint=false, so the safety profile is fully covered elsewhere. The description's only additive context is naming OSV.dev as the external source, which reinforces the open-world nature of the query. It says nothing about whether a version is needed for meaningful results or how advisories are ranked/returned, leaving gaps for a lookup tool.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

A single front-loaded sentence with no filler or redundancy. It is efficient, though the terseness borders on under-specification for a tool whose siblings need disambiguating.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple three-parameter read-only lookup with annotations and full schema coverage, the description is minimally sufficient to pick and invoke the tool. It stops short of covering result expectations (severity, advisory count) and the behavioral effect of the optional version parameter, which is the one thing an agent would most want clarified.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so all three parameters (package, version, ecosystem with PyPI default) are already documented in the schema. The description adds no meaning beyond that—it does not say that omitting version returns all known advisories or how the ecosystem string should be matched.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb ("Audit") and resource ("package vulnerabilities and CVE advisories") plus the underlying data source (OSV.dev), so the agent knows exactly what the call returns in kind. It does not distinguish itself from the nearest sibling, package_health_pulse, which an agent could plausibly confuse with this vulnerability lookup.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives no when-to-use guidance, no prerequisites, and no exclusions relative to package_health_pulse, gcp_catalog_search, or vault_knowledge_search. The agent must infer from the word "CVE" alone when this audit is the right choice.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 4 tool updates
    • First observedgcp_catalog_search
    • First observedpackage_health_pulse
    • First observedsecurity_cve_audit
    • First observedvault_knowledge_search

Related MCP Connectors

Related MCP Servers

  • A
    license
    A
    quality
    A
    maintenance
    Rug pull risk scores and on-chain forensics for memecoins on Solana, Ethereum, Base and Robinhood Chain - launch-bundle detection, funding-origin tracing, deployer history, insider networks and whale flow. 15 read-only tools.
    15
    32 npm
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Enables read-only on-chain analysis to spot trending and new memecoin pools, evaluate rug risk, and surface early buyer wallets across Solana, Base, and Ethereum.
    5
    ISC
  • A
    license
    A
    quality
    C
    maintenance
    On-chain Solana token safety for trading agents — traces coordinated wallet funding, same-block Jito bundles, serial-rug deployers and live coordinated dumps into one Exit-Liquidity Risk verdict before a swap. Free tier, then $0.02 USDC/query via x402.
    1
    53 npm
    2
    MIT
Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources