XRPL Token Guard
Server Details
Read-only XRP Ledger token-risk, issuer-authenticity and wallet-security checks.
- Status
- Healthy
- Uptime
- 100.0% over 21 days
- Last Tested
- Transport
- Streamable HTTP · MCP 2025-11-25
- URL
- Repository
- Riehnbean/xrpl-token-guard
- GitHub Stars
- 0
- Server Listing
- XRPL Token Guard
- ChatGPT
- –
- Claude
- –
TDQS
Scored across 3 tools
check_wallet_security is clearly distinct, but check_token_safety and is_it_the_real_token overlap on the question of token legitimacy. The descriptions help distinguish them: one is a live ledger-risk check for any token, while the other is an instant verified-issuer lookup for famous tickers.
Two tools follow a check_<object>_<aspect> pattern, but is_it_the_real_token breaks the convention with a full question-style name. The mixed style is still readable and purpose-indicative.
Three tools is well-scoped for a focused XRPL safety checker, and each tool covers a distinct check: token safety, wallet signer security, and official-token verification. There is no obvious padding or missing core operation at this size.
The surface covers token risk, wallet signer risk, and official issuer verification, which are the main guard workflows. Minor gaps remain, such as no batch scan of all tokens held by a wallet or broader issuer/account investigation beyond the token safety verdict.
Available Tools
3 toolscheck_token_safetyCheck an XRPL token's safetyARead-onlyIdempotentInspect
Live safety check of an XRP Ledger token (issued currency). Detects fake look-alikes of famous tokens (e.g. a fake RLUSD), issuers that can still mint, freeze or claw back, global freezes, transfer fees, unverified domains, whale concentration, thin AMM liquidity and brand-new issuers. Returns a verdict (High risk / Caution / No red flags found / Not enough data), the reasons behind it with the exact ledger facts, and a one-sentence spoken summary.
| Name | Required | Description | Default |
|---|---|---|---|
| issuer | Yes | The token issuer's XRPL address (starts with r). | |
| currency | Yes | Token ticker as shown in wallets (e.g. RLUSD, SOLO) or its 40-character hex currency code. |
Output Schema
| Name | Required | Description |
|---|---|---|
| facts | Yes | |
| score | Yes | 0-100 mechanical score; not a safety probability. Clawback is a high-risk control-policy failure. |
| token | Yes | |
| reasons | Yes | The top reasons behind the verdict, most important first. |
| verdict | Yes | |
| findings | Yes | |
| checked_at | Yes | |
| disclaimer | Yes | |
| ledger_index | Yes | |
| more_info_url | Yes | |
| verdict_label | Yes | |
| spoken_summary | Yes | One or two sentences ready for text-to-speech. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover the safety profile (readOnly, idempotent, non-destructive, openWorld), and the description goes further by disclosing the detection surface (mint/freeze/clawback capability, global freezes, transfer fees, unverified domains, whale concentration, AMM liquidity, brand-new issuers). Some of this is return-shape information that the existing output schema may already carry, which keeps it from a 5.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Front-loaded with purpose, then a dense but well-ordered enumeration of detections, then the return summary. Slightly long for two sentences, but every clause adds a distinct fact rather than filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a complex analysis tool, the description names the input domain, the detection surface, and the verdict vocabulary an agent will see. With an output schema present and annotations covering safety traits, nothing essential to correct invocation is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100% and both parameters are documented there (issuer format, currency ticker-or-hex). The description adds no parameter-level detail such as issuer/currency consistency or hex-encoding rules, so the baseline 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Specific verb and resource: 'Live safety check of an XRP Ledger token (issued currency)', plus an enumerated list of what it detects (fake look-alikes, mint/freeze/clawback issuers, thin AMM liquidity). It does not name or contrast itself with the sibling is_it_the_real_token, which overlaps on the 'fake token' detection ground, so differentiation is left to inference.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Usage is only implied by the phrase 'Live safety check' – an agent can infer this is a pre-trade/pre-interaction screening step. There is no explicit when-to-use, no when-not-to-use, and no routing to check_wallet_security or is_it_the_real_token despite clear topical overlap with the latter.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
check_wallet_securityCheck an XRPL wallet for takeover signsARead-onlyIdempotentInspect
Checks whether anyone besides the owner can sign for an XRPL wallet: an unexpected regular key or multisig signer list (the classic drainer setup), and flags changes made in the last 7 days as urgent. Read-only.
| Name | Required | Description | Default |
|---|---|---|---|
| address | Yes | The wallet's XRPL address (starts with r). |
Output Schema
| Name | Required | Description |
|---|---|---|
| facts | Yes | |
| address | Yes | |
| verdict | Yes | |
| findings | Yes | |
| checked_at | Yes | |
| disclaimer | Yes | |
| verdict_label | Yes | |
| spoken_summary | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, destructiveHint=false and idempotentHint, so the 'Read-only' clause is largely redundant. However, the description adds real behavioral context beyond the structured fields: the specific detection heuristic (unexpected regular key / multisig signer list) and the urgency rule that changes in the last 7 days are flagged urgent.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
One dense sentence with zero filler: it leads with the core check, names the concrete threat pattern, and ends with the urgency rule and read-only status. Nothing could be removed without losing information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With an output schema present, return values need not be explained, and the description covers what is inspected and how findings are prioritized. It stops short of stating anything about failure modes (e.g., invalid address, network errors) or result interpretation, which would round it out.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
There is a single address parameter with 100% schema description coverage, so the schema already documents format and constraints. The description adds no extra parameter meaning, which is the correct baseline when the schema does the work.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource (checks whether anyone besides the owner can sign for an XRPL wallet) and enumerates the exact signals it inspects: unexpected regular key or multisig signer list. The wallet-focused scope cleanly separates it from the token-oriented siblings check_token_safety and is_it_the_real_token.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description makes the use case implied (detecting takeover/drainer setups) but never says when to call this versus the sibling token-checking tools, nor any prerequisites or exclusions. Usage is inferable but not stated.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
is_it_the_real_tokenIs this the real token?ARead-onlyIdempotentInspect
Answers "is this the real RLUSD / USDC / SOLO?" using the verified official issuers (RLUSD: rMxCKbEDwqr76QuheSUMdEGf4B9xJ8m5De; USDC: rGm7WCVp9gb4jZHWTEtGUr4dd74z2XuWhE; SOLO: rsoLo2S1kiGeCcn6hCUXVrCpGMWLrRrLZz). Give the ticker alone to learn the official issuer, or ticker + issuer to confirm or expose an imitation. Instant, no ledger call.
| Name | Required | Description | Default |
|---|---|---|---|
| issuer | No | Optional issuer address to verify. | |
| ticker | Yes | The token name or ticker the user mentioned, e.g. RLUSD. |
Output Schema
| Name | Required | Description |
|---|---|---|
| ticker | Yes | |
| message | Yes | |
| official | Yes | |
| is_official | Yes | |
| known_brand | Yes | |
| spoken_summary | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, idempotent, non-destructive, closed-world behavior, so the bar is lower. The description still adds real value: 'Instant, no ledger call' discloses the lookup is against a hardcoded issuer list rather than a live ledger query, which explains latency and failure modes.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Opens with the question it answers, then gives the issuer list and the two usage modes. The inline addresses make the sentence dense, but they are load-bearing reference data and the overall text is front-loaded with no filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
An output schema exists, so return values need not be described, and both call modes are covered. The one omission is scope: it does not say the verified list is limited to RLUSD/USDC/SOLO, so an agent could wrongly assume it validates arbitrary tokens.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so a 3 is the baseline, but the description goes beyond the schema by explaining the interaction between the two parameters: omitting issuer yields the official issuer, while supplying it turns the call into a confirmation/imitation check. That is semantic meaning the schema's 'Optional issuer address to verify' does not convey.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific question it answers ('is this the real RLUSD / USDC / SOLO?') and names the verification basis (verified official issuers). This is clearly distinct from the siblings check_token_safety and check_wallet_security, which address safety/security rather than issuer authenticity.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Gives explicit invocation modes: 'Give the ticker alone to learn the official issuer, or ticker + issuer to confirm or expose an imitation.' That is clear when-and-how guidance for the two call shapes, though it never states when to prefer a sibling tool over this one.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
1 tool update
- Changed
check_token_safety1 field changed- changed
Output schema / properties / score / descriptionPrevious value: -"0-100, higher is safer. A rough guide only."New value: +"0-100 mechanical score; not a safety probability. Clawback is a high-risk control-policy failure."
3 tool updates
- First observed
check_token_safety - First observed
check_wallet_security - First observed
is_it_the_real_token
Related MCP Connectors
XRPL wallet scores, wallet permissions, batch send, MPT risk, screening, pre-checks. Never signs.
XRPL token rug-checks, issuer reputation & AMM data for AI agents. Pay-per-call USDC via x402.
Read-only crypto safety: token honeypot checks, EIP-712 signature decode, approval scans.
Read-only honeypot, holder and liquidity scam checks for tokens across 64 networks.
Related MCP Servers
- AlicenseBqualityCmaintenanceProvides on-chain forensic checks for evaluating transaction risks, including token verification, rug-pull detection, and fund tracing, using public blockchain endpoints.1237 npmMIT

fingersofficial
AlicenseNot gradedqualityDmaintenanceRead-only checks on tokens, NFTs, wallets, contracts and tokenized stocks before an agent acts. Honeypot, peg, copycat, wallet risk. Deep Robinhood Chain coverage. Never your keys.MIT- AlicenseNot gradedqualityBmaintenanceRead-only XRP Ledger analytics — signed snapshots, AMM pools, token volume, whale activity, NFT tracking. Proof-annotated. Public beta 2026-09.MIT
- AlicenseAqualityDmaintenanceProvides read-only access to the XRP Ledger for querying accounts, transactions, NFTs, DEX order books, and more.12MIT
Glama MCP Gateway
Add one secure layer between your agents and this server.