presign-guard

Pre-sign risk check ($0.01 via x402)

presign_check

Read-only

Paid ($0.01 USDC via x402 on Base or Solana): call this before you sign. Send the transaction, token approval or EIP-712 signature (Permit, Permit2, EIP-3009 x402 payment, Seaport) your agent is about to sign; get back green, orange or red with reason codes: who gets access, whether the spender or recipient is flagged, sanctioned (OFAC SDN) or unverified, unlimited allowances, and the token itself (honeypot, fake look-alike, high tax). On Solana (type solana, the base64 wire transaction): every instruction decoded and the transaction simulated (token account takeovers, System Assign, unlimited delegates, durable nonces, hidden owner or delegate changes). On the XRP Ledger (type xrpl, the unsigned tx JSON): account takeovers (SetRegularKey, SignerListSet, disabling the master key), fake RLUSD, partial payments, missing destination tags, trust-line and issuer risks, and DEX offers far below market. On Algorand (type algorand, base64 msgpack transaction or group in transactions): rekeys, closing the account or an asset to someone else, clawbacks, fake USDC, app update/delete/clear, simulated. Only proceed on green; on orange ask your user; never sign on red. Same as POST /v1/check. The answer carries a signed receipt (EIP-191, bound to your arguments) that proves later which verdict you got.

Input Schema

TableJSON Schema

Name	Required	Description
`to`	No	transaction: the target contract
`tx`	No	xrpl: the unsigned transaction JSON (TransactionType, Account, Destination, Amount, …)
`data`	No	transaction: 0x-prefixed calldata
`from`	No	transaction or message, optional: your wallet address; the transaction is then simulated (what really leaves and arrives; orange HIDDEN_APPROVAL, SIMULATION_NFT_OUT, SIMULATION_FAILS) and its recipients are compared with who this wallet paid before (red ADDRESS_POISONING for a look-alike)
`type`	Yes	What the agent is about to sign; message = a plain personal_sign / eth_sign message in message; solana = a Solana transaction in transaction; xrpl = an unsigned XRP Ledger transaction in tx; algorand = an Algorand transaction in transaction, or a group in transactions
`x402`	No	optional, EIP-3009 payments only: the x402 payment requirements you are paying ({ accepted: { scheme, network, amount, asset, payTo, maxTimeoutSeconds, extra } }, one entry of the 402's accepts); red when the signature pays more, someone else, another token or chain
`token`	No	approval: the token contract
`value`	No	transaction: native value in wei
`amount`	No	approval: amount in base units (0 = revoke)
`intent`	No	optional: what you are trying to do, in one sentence (e.g. "swap 10 USDC for ETH on Uniswap"); orange INTENT_MISMATCH when signing would do more or something else
`method`	No	message: how it is signed (default personal_sign); eth_sign is always red
`origin`	No	optional: the site asking for the signature or transaction (URL or hostname); a domain under 30 days old is orange
`chainId`	No	EVM chain id, required for approval, transaction and signature: 1, 10, 56, 137, 8453, 42161 (8453 = Base); optional for message
`message`	No	message: the text or 0x-hex about to be signed; a Sign-In with Ethereum message for another site than origin is red, unreadable bytes are orange
`network`	No	xrpl: xrpl:0 (mainnet, default) or xrpl:1 (testnet)
`spender`	No	approval: who gets the allowance
`typedData`	No	signature: the exact eth_signTypedData_v4 payload (Permit, Permit2, EIP-3009 x402 payment, Seaport)
`transaction`	No	solana: the base64 wire transaction about to be signed; decoded and simulated (red SOLANA_TOKEN_ACCOUNT_TAKEOVER, SOLANA_ACCOUNT_ASSIGN; orange SOLANA_UNLIMITED_DELEGATE, SOLANA_DURABLE_NONCE, HIDDEN_APPROVAL, SIMULATION_FAILS). algorand: one base64 msgpack transaction (unsigned or signed); red ALGORAND_REKEY, ALGORAND_CLOSE_ACCOUNT, ALGORAND_ASSET_CLOSE, ALGORAND_FAKE_STABLECOIN; simulated
`transactions`	No	algorand: an atomic group, each a base64 msgpack transaction; send the whole group so every transaction is checked

Output Schema

TableJSON Schema

Name	Required	Description
`accepts`	No	Only on an unpaid call: the x402 payment options
`reasons`	No	Why the verdict is what it is
`receipt`	No	Signed receipt (EIP-191) binding the verdict to your arguments
`verdict`	No	green: go ahead; orange: ask the user; red: do not sign or buy (absent on the payment requirement)
`version`	No

Schema Changelog

Changes observed during successful MCP inspections.

Changed1 schema field changedOct 12, 2026

changedOutput schema / properties / reasons / anyOf

Previous value: -[
-  {
-    "description": "Why the verdict is what it is",
-    "items": {
-      "additionalProperties": true,
-      "properties": {
-        "code": {
-          "description": "Reason code, e.g. SPENDER_FLAGGED, UNLIMITED_ALLOWANCE, TOKEN_HONEYPOT",
-          "type": "string"
-        },
-        "severity": {
-          "description": "info, warn or critical",
-          "type": "string"
-        },
-        "subject": {
-          "description": "The address or item the reason is about",
-          "type": "string"
-        }
-      },
-      "required": [
-        "code"
-      ],
-      "type": "object"
-    },
-    "type": "array"
-  },
-  {
-    "type": "null"
-  }
-]New value: +[
+  {
+    "description": "Why the verdict is what it is",
+    "items": {
+      "additionalProperties": true,
+      "properties": {
+        "code": {
+          "description": "Reason code, e.g. SPENDER_FLAGGED, UNLIMITED_ALLOWANCE, TOKEN_HONEYPOT",
+          "type": "string"
+        },
+        "severity": {
+          "description": "info, warn or critical",
+          "type": "string"
+        },
+        "subject": {
+          "description": "The address or item the reason is about (null or absent when it is about the whole request)",
+          "type": [
+            "string",
+            "null"
+          ]
+        }
+      },
+      "required": [
+        "code"
+      ],
+      "type": "object"
+    },
+    "type": "array"
+  },
+  {
+    "type": "null"
+  }
+]

Changed5 schema fields changedOct 11, 2026

changedInput schema / properties / transaction / description

Previous value: -"solana: the base64 wire transaction about to be signed; decoded and simulated (red SOLANA_TOKEN_ACCOUNT_TAKEOVER, SOLANA_ACCOUNT_ASSIGN; orange SOLANA_UNLIMITED_DELEGATE, SOLANA_DURABLE_NONCE, HIDDEN_APPROVAL, SIMULATION_FAILS)"New value: +"solana: the base64 wire transaction about to be signed; decoded and simulated (red SOLANA_TOKEN_ACCOUNT_TAKEOVER, SOLANA_ACCOUNT_ASSIGN; orange SOLANA_UNLIMITED_DELEGATE, SOLANA_DURABLE_NONCE, HIDDEN_APPROVAL, SIMULATION_FAILS). algorand: one base64 msgpack transaction (unsigned or signed); red ALGORAND_REKEY, ALGORAND_CLOSE_ACCOUNT, ALGORAND_ASSET_CLOSE, ALGORAND_FAKE_STABLECOIN; simulated"

changedInput schema / properties / transaction / maxLength
```
Previous value: -2400New value: +12000
```

addedInput schema / properties / transactions

Added value: +{
+  "description": "algorand: an atomic group, each a base64 msgpack transaction; send the whole group so every transaction is checked",
+  "items": {
+    "maxLength": 12000,
+    "type": "string"
+  },
+  "maxItems": 16,
+  "type": "array"
+}

changedInput schema / properties / type / description

Previous value: -"What the agent is about to sign; message = a plain personal_sign / eth_sign message in message; solana = a Solana transaction in transaction; xrpl = an unsigned XRP Ledger transaction in tx"New value: +"What the agent is about to sign; message = a plain personal_sign / eth_sign message in message; solana = a Solana transaction in transaction; xrpl = an unsigned XRP Ledger transaction in tx; algorand = an Algorand transaction in transaction, or a group in transactions"

changedInput schema / properties / type / enum

Previous value: -[
-  "approval",
-  "transaction",
-  "signature",
-  "message",
-  "solana",
-  "xrpl"
-]New value: +[
+  "approval",
+  "transaction",
+  "signature",
+  "message",
+  "solana",
+  "xrpl",
+  "algorand"
+]

Changed7 schema fields changedOct 11, 2026

changedInput schema / properties / chainId / description

Previous value: -"EVM chain id, required for approval, transaction and signature: 1, 10, 56, 137, 8453, 42161 (8453 = Base)"New value: +"EVM chain id, required for approval, transaction and signature: 1, 10, 56, 137, 8453, 42161 (8453 = Base); optional for message"

changedInput schema / properties / from / description

Previous value: -"transaction, optional: your wallet address; the transaction is then simulated (what really leaves and arrives; orange HIDDEN_APPROVAL, SIMULATION_NFT_OUT, SIMULATION_FAILS)"New value: +"transaction or message, optional: your wallet address; the transaction is then simulated (what really leaves and arrives; orange HIDDEN_APPROVAL, SIMULATION_NFT_OUT, SIMULATION_FAILS) and its recipients are compared with who this wallet paid before (red ADDRESS_POISONING for a look-alike)"

addedInput schema / properties / message

Added value: +{
+  "description": "message: the text or 0x-hex about to be signed; a Sign-In with Ethereum message for another site than origin is red, unreadable bytes are orange",
+  "maxLength": 16384,
+  "type": "string"
+}

addedInput schema / properties / method

Added value: +{
+  "description": "message: how it is signed (default personal_sign); eth_sign is always red",
+  "enum": [
+    "personal_sign",
+    "eth_sign"
+  ],
+  "type": "string"
+}

addedInput schema / properties / transaction

Added value: +{
+  "description": "solana: the base64 wire transaction about to be signed; decoded and simulated (red SOLANA_TOKEN_ACCOUNT_TAKEOVER, SOLANA_ACCOUNT_ASSIGN; orange SOLANA_UNLIMITED_DELEGATE, SOLANA_DURABLE_NONCE, HIDDEN_APPROVAL, SIMULATION_FAILS)",
+  "maxLength": 2400,
+  "type": "string"
+}

changedInput schema / properties / type / description

Previous value: -"What the agent is about to sign; xrpl = an unsigned XRP Ledger transaction in tx"New value: +"What the agent is about to sign; message = a plain personal_sign / eth_sign message in message; solana = a Solana transaction in transaction; xrpl = an unsigned XRP Ledger transaction in tx"

changedInput schema / properties / type / enum

Previous value: -[
-  "approval",
-  "transaction",
-  "signature",
-  "xrpl"
-]New value: +[
+  "approval",
+  "transaction",
+  "signature",
+  "message",
+  "solana",
+  "xrpl"
+]

Changed2 schema fields changedOct 10, 2026

addedInput schema / properties / from

Added value: +{
+  "description": "transaction, optional: your wallet address; the transaction is then simulated (what really leaves and arrives; orange HIDDEN_APPROVAL, SIMULATION_NFT_OUT, SIMULATION_FAILS)",
+  "type": "string"
+}

addedInput schema / properties / x402

Added value: +{
+  "additionalProperties": {},
+  "description": "optional, EIP-3009 payments only: the x402 payment requirements you are paying ({ accepted: { scheme, network, amount, asset, payTo, maxTimeoutSeconds, extra } }, one entry of the 402's accepts); red when the signature pays more, someone else, another token or chain",
+  "type": "object"
+}

Changed1 schema field changedOct 10, 2026

addedInput schema / properties / intent

Added value: +{
+  "description": "optional: what you are trying to do, in one sentence (e.g. \"swap 10 USDC for ETH on Uniswap\"); orange INTENT_MISMATCH when signing would do more or something else",
+  "maxLength": 500,
+  "type": "string"
+}

Changed1 schema field changedOct 9, 2026

changedOutput schema / (root)

Previous value: -nullNew value: +{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "additionalProperties": true,
+  "properties": {
+    "accepts": {
+      "anyOf": [
+        {
+          "items": {
+            "additionalProperties": {},
+            "type": "object"
+          },
+          "type": "array"
+        },
+        {
+          "type": "null"
+        }
+      ],
+      "description": "Only on an unpaid call: the x402 payment options"
+    },
+    "reasons": {
+      "anyOf": [
+        {
+          "description": "Why the verdict is what it is",
+          "items": {
+            "additionalProperties": true,
+            "properties": {
+              "code": {
+                "description": "Reason code, e.g. SPENDER_FLAGGED, UNLIMITED_ALLOWANCE, TOKEN_HONEYPOT",
+                "type": "string"
+              },
+              "severity": {
+                "description": "info, warn or critical",
+                "type": "string"
+              },
+              "subject": {
+                "description": "The address or item the reason is about",
+                "type": "string"
+              }
+            },
+            "required": [
+              "code"
+            ],
+            "type": "object"
+          },
+          "type": "array"
+        },
+        {
+          "type": "null"
+        }
+      ],
+      "description": "Why the verdict is what it is"
+    },
+    "receipt": {
+      "anyOf": [
+        {
+          "additionalProperties": {},
+          "description": "Signed receipt (EIP-191) binding the verdict to your arguments",
+          "type": "object"
+        },
+        {
+          "type": "null"
+        }
+      ],
+      "description": "Signed receipt (EIP-191) binding the verdict to your arguments"
+    },
+    "verdict": {
+      "anyOf": [
+        {
+          "description": "green: go ahead; orange: ask the user; red: do not sign or buy",
+          "enum": [
+            "green",
+            "orange",
+            "red"
+          ],
+          "type": "string"
+        },
+        {
+          "type": "null"
+        }
+      ],
+      "description": "green: go ahead; orange: ask the user; red: do not sign or buy (absent on the payment requirement)"
+    },
+    "version": {
+      "type": [
+        "string",
+        "null"
+      ]
+    }
+  },
+  "type": "object"
+}

Changed6 schema fields changedOct 7, 2026

changedInput schema / properties / chainId / description

Previous value: -"EVM chain id: 1, 10, 56, 137, 8453, 42161 (8453 = Base)"New value: +"EVM chain id, required for approval, transaction and signature: 1, 10, 56, 137, 8453, 42161 (8453 = Base)"

addedInput schema / properties / network

Added value: +{
+  "description": "xrpl: xrpl:0 (mainnet, default) or xrpl:1 (testnet)",
+  "enum": [
+    "xrpl:0",
+    "xrpl:1"
+  ],
+  "type": "string"
+}

addedInput schema / properties / tx

Added value: +{
+  "additionalProperties": {},
+  "description": "xrpl: the unsigned transaction JSON (TransactionType, Account, Destination, Amount, …)",
+  "type": "object"
+}

changedInput schema / properties / type / description

Previous value: -"What the agent is about to sign"New value: +"What the agent is about to sign; xrpl = an unsigned XRP Ledger transaction in tx"

changedInput schema / properties / type / enum

Previous value: -[
-  "approval",
-  "transaction",
-  "signature"
-]New value: +[
+  "approval",
+  "transaction",
+  "signature",
+  "xrpl"
+]

changedInput schema / required

Previous value: -[
-  "type",
-  "chainId"
-]New value: +[
+  "type"
+]

Changed1 schema field changedSep 25, 2026

addedInput schema / properties / origin

Added value: +{
+  "description": "optional: the site asking for the signature or transaction (URL or hostname); a domain under 30 days old is orange",
+  "type": "string"
+}

First observedSep 25, 2026

TDQS

Score is being calculated.

All presign-guard tools Inspect

Try in Browser

One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

Glama MCP Gateway

Add one secure layer between your agents and this server.

Pre-sign risk check ($0.01 via x402)

Input Schema

Output Schema

Schema Changelog

TDQS

Glama MCP Gateway

Resources