Trust Check
Server Details
Base crypto safety for agents: honeypot/tax test, address poisoning, rug feed, creator record.
- Status
- Healthy
- Uptime
- 100.0% over 39 days
- Last Tested
- Transport
- Streamable HTTP · MCP 2025-11-25
- URL
- ChatGPT
- –
- Claude
- –
TDQS
Scored across 5 tools
The five tools target mostly distinct objects: an address, a token, a token creator, a deeper combined report, and recent liquidity collapses. The main overlap is between check_token_safety and deep_token_safety_report, but their descriptions clearly distinguish a quick check from full due diligence.
Three tools use a clear check_* verb-noun pattern, but deep_token_safety_report and recent_liquidity_collapses use adjective/noun report-style names. The names are still readable and descriptive, but the set does not follow one uniform convention.
Five tools is well-scoped for a read-only crypto safety service. Each tool covers a distinct check or monitoring need, and there is no obvious bloat or missing count-level functionality.
The surface covers the core pre-trade checks (address, token, creator), an aggregated deep report, and recent collapse monitoring. Minor gaps remain around batch checks, ongoing monitoring/alerting, or more granular historical lookups, but core workflows are covered.
Available Tools
5 toolscheck_address_safetyCheck if an address is safe to send funds to (Base)ARead-onlyInspect
Before sending crypto on Base, check the destination: scam blacklists, address poisoning (a look-alike of an address you really use; pass from = your wallet), token contracts and burn addresses where funds are lost, never-used addresses. Returns a verdict with reasons. 5 free checks per day, then $0.002 per check via x402 (USDC on Base).
| Name | Required | Description | Default |
|---|---|---|---|
| from | No | Your sending wallet, to detect look-alikes of addresses you recently used | |
| known | No | Addresses you trust, for the look-alike check | |
| address | Yes | Destination address |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true and openWorldHint=true, so the read-only nature is covered. The description adds valuable behavioral context beyond annotations: the check covers specific risk categories, requires passing `from` to detect look-alikes, returns a verdict with reasons, and exposes a cost model (5 free checks/day, then $0.002 via x402). This is strong supplemental disclosure.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is three tightly packed sentences with no filler. The core usage directive is front-loaded ('Before sending crypto on Base, check the destination'), followed by concrete risk categories, parameter guidance, and pricing. Every sentence earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with no output schema, the description covers key operational details: what is checked, how to enable the poisoning check, what the return looks like, and the pricing model. It is slightly light on describing the exact verdict format, but the annotation set already covers read-only and open-world behavior, making the description adequate for selecting and invoking the tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the baseline is 3. The description additionally clarifies the real-world purpose of the `from` parameter by linking it to address poisoning ('pass `from` = your wallet'), which enriches the schema description. It does not mention `known` explicitly, but the schema already documents it, so no significant gap exists.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb ('check'), the resource ('the destination' / address safety), and the specific scope (Base) in the first sentence. It enumerates distinct threat categories (scam blacklists, address poisoning, token contracts, burn addresses, never-used addresses) and explicitly says it returns a verdict with reasons, making the purpose unambiguous and distinct from the sibling check_token_safety.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives an explicit when-to-use directive: 'Before sending crypto on Base, check the destination.' It also explains how to use the `from` parameter for the address-poisoning check. However, it does not explicitly contrast this tool with the sibling check_token_safety or state when not to use it, so a small guidance gap remains.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
check_token_creatorHas this token creator rugged before? (Base)ARead-onlyInspect
Before buying a newly launched Base token, check the wallet that deployed it: how many of its earlier tokens Rug Watch followed, and how many collapsed (rug pull or dump). Verdict: serial_collapser / collapsed_before / no_collapses_seen / unknown. 5 free calls per day, then $0.002 per call via x402 (USDC on Base).
| Name | Required | Description | Default |
|---|---|---|---|
| address | Yes | Creator (deployer) wallet on Base |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint and openWorldHint, but the description adds material context they cannot carry: the rate limit (5 free calls/day), the paid fallback ($0.002 via x402 USDC on Base), and the verdict vocabulary. That cost and quota disclosure is genuinely useful for an agent deciding whether to call it.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Front-loads the purpose, then the verdict enum, then pricing; every sentence carries information. Slightly dense but free of waste.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no output schema, the description usefully enumerates the return verdicts (serial_collapser / collapsed_before / no_collapses_seen / unknown) and the underlying metrics, and it discloses billing. Complete enough for a single-parameter read tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% and the single address parameter is fully documented with a pattern and label. The description restates the input as 'the wallet that deployed it' but adds no format or sourcing detail beyond the schema, so baseline 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb (check) and resource (the wallet that deployed a newly launched Base token), plus the exact data returned: number of earlier tokens followed and how many collapsed. It is clearly distinct from siblings like check_token_safety and check_address_safety.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Gives a clear situational trigger ('before buying a newly launched Base token'), which is exactly the decision point an agent would need. It does not explicitly name or exclude the sibling tools, so it falls short of a full when-not/alternatives statement.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
check_token_safetyCheck if a token is safe to buy (Base)ARead-onlyInspect
Before buying a token on Base, check it: simulates a real buy and sell (honeypot and hidden-tax test), reads owner powers (mint, blacklist, fee changes, pause), whale concentration, liquidity lock and scam lists. Returns a verdict (scam / high_risk / caution / low_risk) with plain-language reasons. 5 free checks per day, then $0.002 per check via x402 (USDC on Base).
| Name | Required | Description | Default |
|---|---|---|---|
| address | Yes | Token contract address on Base |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint and openWorldHint, so the safety profile is covered. The description adds genuinely useful behavioral context the annotations do not: off-chain buy/sell simulation, the return verdict taxonomy, and concrete cost/rate-limit terms (5 free checks/day, then $0.002 via x402 USDC on Base). It omits failure/timeout behavior on unsupported tokens, keeping it short of a 5.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Front-loaded with the action and its trigger, then what is tested, then the return shape, then pricing – a logical order with no filler sentences. It is somewhat dense with parenthetical lists, but every clause carries information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no output schema, the description correctly explains the return value (verdict levels plus plain-language reasons), and it covers payment and rate limits. For a one-parameter tool this is nearly complete, though it does not address error or unsupported-token cases.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
There is a single parameter with 100% schema description coverage, so the schema already documents 'address' as a Base token contract address with a hex pattern. The description adds no syntax or format detail beyond that, so the high-coverage baseline of 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description names a specific verb and resource ('check it' a token on Base) and enumerates exactly what is tested: honeypot/hidden-tax simulation, owner powers, whale concentration, liquidity lock, scam lists. It is clearly distinguishable from siblings like check_token_creator (creator vs. token) and check_address_safety (address vs. token) without opening a schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It gives explicit timing guidance ('Before buying a token on Base, check it'), which tells the agent the triggering context. However, it never names the sibling tools or states when to prefer check_token_creator or check_address_safety instead, so routing among alternatives is left to inference.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
deep_token_safety_reportDeep Safety Report on a token (Base)ARead-onlyInspect
Full due diligence before a bigger buy of a Base token: the token check (buy/sell simulation, taxes, owner powers, whales, liquidity, scam lists) plus the creator's Rug Watch record, wallet check and first funder, the owner wallet, the token's liquidity history, website domain age, how often new Base tokens collapse, an AI summary and a what-to-do list. $0.10 per report via x402 (USDC on Base), no free calls; failures are not charged.
| Name | Required | Description | Default |
|---|---|---|---|
| address | Yes | Token contract address on Base |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the read-only and open-world annotations, it discloses the exact $0.10 charge, x402 payment mechanism, USDC-on-Base settlement, absence of free calls, and no charge for failures. It also clarifies that buy/sell testing is a simulation and that the report includes an AI summary and action list.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description front-loads the purpose, then covers report scope and commercial terms without filler. Its many components are packed into one dense sentence, which slightly reduces scanability.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a one-parameter report, it supplies the network, decision context, report contents, pricing, payment requirements, and failure-billing behavior. Despite the absence of an output schema, the component inventory, AI summary, and what-to-do list give the agent a reasonable expectation of the result.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema fully documents the sole address parameter, including its Base token-contract meaning and 0x address pattern. The description adds no further parameter validation or handling details, so the high-schema-coverage baseline applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
It clearly defines a comprehensive due-diligence report for a Base token and enumerates its token, creator, wallet, liquidity, domain, and market-collapse checks. The 'token check ... plus' framing distinguishes this aggregate report from narrower siblings such as check_token_safety and check_token_creator.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
'Before a bigger buy' provides a concrete use case, while the price and 'no free calls' warning discourage casual invocation. It does not explicitly direct agents to cheaper sibling tools for narrower checks, so alternative-selection guidance remains incomplete.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
recent_liquidity_collapsesRecent rug pulls and dumps on BaseARead-onlyInspect
New Base tokens whose pool liquidity collapsed (fell 90%+ from its peak: a rug pull or a heavy dump) in the last hours, newest first, with peak and remaining liquidity, hours from launch and the creator wallet. Use it to exit positions and blocklist serial creators. 5 free calls per day, then $0.002 per call via x402 (USDC on Base).
| Name | Required | Description | Default |
|---|---|---|---|
| hours | No | Look-back window in hours (default 24) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations only declare readOnlyHint and openWorldHint, but the description adds materially more: the detection heuristic (90%+ drop from peak = rug or dump), the ordering, and a real operational constraint — 5 free calls/day then $0.002 per call via x402 USDC on Base. Cost and rate-limit disclosure is exactly the kind of behavior an agent must know before calling.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, no filler. The core definition and ordering are front-loaded, the usage line and the pricing caveat follow, and every clause (threshold, ordering, fields, price) carries information the agent needs.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
There is no output schema, so the description carries the burden of describing the return — and it does: peak and remaining liquidity, hours from launch, creator wallet. Combined with the single well-documented parameter and the read-only annotation, nothing needed to call it correctly is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%: the single `hours` parameter already documents its default (24) and 1–168 range. The description's phrase 'in the last hours' merely restates the window concept without adding format or edge-case guidance, so baseline 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific resource (new Base tokens whose pool liquidity collapsed 90%+ from peak) plus ordering (newest first) and the returned fields. The signal is a market-wide collapse feed, which is clearly distinct from the sibling tools check_address_safety / check_token_safety / check_token_creator that evaluate one address or token at a time.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Gives explicit intended uses: 'exit positions and blocklist serial creators', which tells the agent the decision context. It does not, however, name an alternative tool or state when this feed is the wrong choice (e.g. for vetting a single token before buying, where check_token_safety fits).
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
1 tool update
- Added
deep_token_safety_report
2 tool updates
- Added
check_token_creator - Added
recent_liquidity_collapses
2 tool updates
- First observed
check_address_safety - First observed
check_token_safety
Related MCP Connectors
Token rug-risk scans, Know Your Agent wallet checks and deployer reputation for AI agents.
Solana pre-trade safety for agents: rug check, honeypot sell-sim, drainer scan, tx preflight.
Base L2 token safety for AI agents: honeypot scans, swap simulation, approval and liquidity risk.
Safety checks for AI agents: preflight before signing, prompt-injection scan, sanctions, rug checks.
Related MCP Servers
- AlicenseAqualityDmaintenanceSafety layer for autonomous DeFi agents. Scans contracts for exploit patterns, simulates transactions, blocks honeypots.49 npm1MIT
- AlicenseBqualityCmaintenanceEnables AI agents to perform token security audits, honeypot detection, liquidity analysis, and risk scoring to avoid crypto scams.1ISC
- AlicenseNot gradedqualityCmaintenanceChecks token contract safety for honeypot, tax, proxy, blacklist, ownership risks, and returns a risk score, enabling rug-pull protection for agents via pay-per-call x402 micropayments.MIT
- AlicenseNot gradedqualityDmaintenanceToken safety oracle for AI agents. Honeypot detection, 17 scam pattern checks, LP lock verification across 6 EVM chains. Score 0-100 with risk flags. ERC Token Safety Score standard.1MIT
Glama MCP Gateway
Add one secure layer between your agents and this server.