Skip to main content
Glama

Server Details

Read-only XRP Ledger token-risk, issuer-authenticity and wallet-security checks.

If you are the author of this connector, you can claim ownership by verifying the domain or GitHub account it belongs to. Claimed connector authors can inspect health checks, view analytics, and manage their listing.
Status
Healthy
Uptime
100.0% over 21 days
Last Tested
Transport
Streamable HTTP · MCP 2025-11-25
URL
Repository
Riehnbean/xrpl-token-guard
GitHub Stars
0
Server Listing
XRPL Token Guard
ChatGPT
–
Claude
–

TDQS

A3.9/5.0

Scored across 3 tools

Disambiguation4/5

check_wallet_security is clearly distinct, but check_token_safety and is_it_the_real_token overlap on the question of token legitimacy. The descriptions help distinguish them: one is a live ledger-risk check for any token, while the other is an instant verified-issuer lookup for famous tickers.

Naming Consistency3/5

Two tools follow a check_<object>_<aspect> pattern, but is_it_the_real_token breaks the convention with a full question-style name. The mixed style is still readable and purpose-indicative.

Tool Count5/5

Three tools is well-scoped for a focused XRPL safety checker, and each tool covers a distinct check: token safety, wallet signer security, and official-token verification. There is no obvious padding or missing core operation at this size.

Completeness4/5

The surface covers token risk, wallet signer risk, and official issuer verification, which are the main guard workflows. Minor gaps remain, such as no batch scan of all tokens held by a wallet or broader issuer/account investigation beyond the token safety verdict.

Available Tools

3 tools
check_token_safetyCheck an XRPL token's safetyA
Read-onlyIdempotent
Inspect

Live safety check of an XRP Ledger token (issued currency). Detects fake look-alikes of famous tokens (e.g. a fake RLUSD), issuers that can still mint, freeze or claw back, global freezes, transfer fees, unverified domains, whale concentration, thin AMM liquidity and brand-new issuers. Returns a verdict (High risk / Caution / No red flags found / Not enough data), the reasons behind it with the exact ledger facts, and a one-sentence spoken summary.

NameRequiredDescriptionDefault
issuerYesThe token issuer's XRPL address (starts with r).
currencyYesToken ticker as shown in wallets (e.g. RLUSD, SOLO) or its 40-character hex currency code.

Output Schema

NameRequiredDescription
factsYes
scoreYes0-100 mechanical score; not a safety probability. Clawback is a high-risk control-policy failure.
tokenYes
reasonsYesThe top reasons behind the verdict, most important first.
verdictYes
findingsYes
checked_atYes
disclaimerYes
ledger_indexYes
more_info_urlYes
verdict_labelYes
spoken_summaryYesOne or two sentences ready for text-to-speech.

TDQS

A3.8/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already cover the safety profile (readOnly, idempotent, non-destructive, openWorld), and the description goes further by disclosing the detection surface (mint/freeze/clawback capability, global freezes, transfer fees, unverified domains, whale concentration, AMM liquidity, brand-new issuers). Some of this is return-shape information that the existing output schema may already carry, which keeps it from a 5.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with purpose, then a dense but well-ordered enumeration of detections, then the return summary. Slightly long for two sentences, but every clause adds a distinct fact rather than filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a complex analysis tool, the description names the input domain, the detection surface, and the verdict vocabulary an agent will see. With an output schema present and annotations covering safety traits, nothing essential to correct invocation is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100% and both parameters are documented there (issuer format, currency ticker-or-hex). The description adds no parameter-level detail such as issuer/currency consistency or hex-encoding rules, so the baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

Specific verb and resource: 'Live safety check of an XRP Ledger token (issued currency)', plus an enumerated list of what it detects (fake look-alikes, mint/freeze/clawback issuers, thin AMM liquidity). It does not name or contrast itself with the sibling is_it_the_real_token, which overlaps on the 'fake token' detection ground, so differentiation is left to inference.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Usage is only implied by the phrase 'Live safety check' – an agent can infer this is a pre-trade/pre-interaction screening step. There is no explicit when-to-use, no when-not-to-use, and no routing to check_wallet_security or is_it_the_real_token despite clear topical overlap with the latter.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

check_wallet_securityCheck an XRPL wallet for takeover signsA
Read-onlyIdempotent
Inspect

Checks whether anyone besides the owner can sign for an XRPL wallet: an unexpected regular key or multisig signer list (the classic drainer setup), and flags changes made in the last 7 days as urgent. Read-only.

NameRequiredDescriptionDefault
addressYesThe wallet's XRPL address (starts with r).

Output Schema

NameRequiredDescription
factsYes
addressYes
verdictYes
findingsYes
checked_atYes
disclaimerYes
verdict_labelYes
spoken_summaryYes

TDQS

A4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, destructiveHint=false and idempotentHint, so the 'Read-only' clause is largely redundant. However, the description adds real behavioral context beyond the structured fields: the specific detection heuristic (unexpected regular key / multisig signer list) and the urgency rule that changes in the last 7 days are flagged urgent.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

One dense sentence with zero filler: it leads with the core check, names the concrete threat pattern, and ends with the urgency rule and read-only status. Nothing could be removed without losing information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With an output schema present, return values need not be explained, and the description covers what is inspected and how findings are prioritized. It stops short of stating anything about failure modes (e.g., invalid address, network errors) or result interpretation, which would round it out.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

There is a single address parameter with 100% schema description coverage, so the schema already documents format and constraints. The description adds no extra parameter meaning, which is the correct baseline when the schema does the work.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource (checks whether anyone besides the owner can sign for an XRPL wallet) and enumerates the exact signals it inspects: unexpected regular key or multisig signer list. The wallet-focused scope cleanly separates it from the token-oriented siblings check_token_safety and is_it_the_real_token.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description makes the use case implied (detecting takeover/drainer setups) but never says when to call this versus the sibling token-checking tools, nor any prerequisites or exclusions. Usage is inferable but not stated.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

is_it_the_real_tokenIs this the real token?A
Read-onlyIdempotent
Inspect

Answers "is this the real RLUSD / USDC / SOLO?" using the verified official issuers (RLUSD: rMxCKbEDwqr76QuheSUMdEGf4B9xJ8m5De; USDC: rGm7WCVp9gb4jZHWTEtGUr4dd74z2XuWhE; SOLO: rsoLo2S1kiGeCcn6hCUXVrCpGMWLrRrLZz). Give the ticker alone to learn the official issuer, or ticker + issuer to confirm or expose an imitation. Instant, no ledger call.

NameRequiredDescriptionDefault
issuerNoOptional issuer address to verify.
tickerYesThe token name or ticker the user mentioned, e.g. RLUSD.

Output Schema

NameRequiredDescription
tickerYes
messageYes
officialYes
is_officialYes
known_brandYes
spoken_summaryYes

TDQS

A4.3/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnly, idempotent, non-destructive, closed-world behavior, so the bar is lower. The description still adds real value: 'Instant, no ledger call' discloses the lookup is against a hardcoded issuer list rather than a live ledger query, which explains latency and failure modes.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Opens with the question it answers, then gives the issuer list and the two usage modes. The inline addresses make the sentence dense, but they are load-bearing reference data and the overall text is front-loaded with no filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return values need not be described, and both call modes are covered. The one omission is scope: it does not say the verified list is limited to RLUSD/USDC/SOLO, so an agent could wrongly assume it validates arbitrary tokens.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so a 3 is the baseline, but the description goes beyond the schema by explaining the interaction between the two parameters: omitting issuer yields the official issuer, while supplying it turns the call into a confirmation/imitation check. That is semantic meaning the schema's 'Optional issuer address to verify' does not convey.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific question it answers ('is this the real RLUSD / USDC / SOLO?') and names the verification basis (verified official issuers). This is clearly distinct from the siblings check_token_safety and check_wallet_security, which address safety/security rather than issuer authenticity.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives explicit invocation modes: 'Give the ticker alone to learn the official issuer, or ticker + issuer to confirm or expose an imitation.' That is clear when-and-how guidance for the two call shapes, though it never states when to prefer a sibling tool over this one.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 1 tool update
    • Changedcheck_token_safety1 field changed
      • changedOutput schema / properties / score / description
        Previous value: -"0-100, higher is safer. A rough guide only."New value: +"0-100 mechanical score; not a safety probability. Clawback is a high-risk control-policy failure."
  2. 3 tool updates
    • First observedcheck_token_safety
    • First observedcheck_wallet_security
    • First observedis_it_the_real_token

Related MCP Connectors

Related MCP Servers

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.