Skip to main content
Glama

Trust Check

Server Details

Crypto safety for agents on Base: token honeypot/tax test and safe-to-send address poisoning check.

If you are the author of this connector, you can claim ownership with GitHub, an HTTP challenge, or a DNS record. Claimed connector authors can inspect health checks, view analytics, and manage their listing.
Status
Healthy
Last Tested
Transport
Streamable HTTP · MCP 2025-11-25
URL

TDQS

A4.4/5.0

Scored across 2 tools

Disambiguation5/5

The two tools target clearly distinct objects—an address versus a token—and perform different checks. There is no meaningful overlap or risk of an agent selecting the wrong one.

Naming Consistency5/5

Both tools follow the same `check_<object>_safety` verb-noun pattern, making the resource and action immediately clear. The naming is fully consistent.

Tool Count4/5

At two tools, the server is slightly below the typical 3-15 range, but the narrow scope (address and token safety checks on Base) makes the count feel reasonable rather than thin. Each tool covers a substantial, non-trivial use case.

Completeness5/5

Within the stated domain of pre-transaction safety checks on Base, the surface is complete: address risks and token risks are both covered with detailed checks like scam lists, address poisoning, honeypots, owner powers, and liquidity. No obvious dead-end gap remains for the stated purpose.

Available Tools

2 tools
check_address_safetyCheck if an address is safe to send funds to (Base)A
Read-only
Inspect

Before sending crypto on Base, check the destination: scam blacklists, address poisoning (a look-alike of an address you really use; pass from = your wallet), token contracts and burn addresses where funds are lost, never-used addresses. Returns a verdict with reasons. 5 free checks per day, then $0.002 per check via x402 (USDC on Base).

ParametersJSON Schema
NameRequiredDescriptionDefault
fromNoYour sending wallet, to detect look-alikes of addresses you recently used
knownNoAddresses you trust, for the look-alike check
addressYesDestination address

TDQS

A4.4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true and openWorldHint=true, so the read-only nature is covered. The description adds valuable behavioral context beyond annotations: the check covers specific risk categories, requires passing `from` to detect look-alikes, returns a verdict with reasons, and exposes a cost model (5 free checks/day, then $0.002 via x402). This is strong supplemental disclosure.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is three tightly packed sentences with no filler. The core usage directive is front-loaded ('Before sending crypto on Base, check the destination'), followed by concrete risk categories, parameter guidance, and pricing. Every sentence earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a tool with no output schema, the description covers key operational details: what is checked, how to enable the poisoning check, what the return looks like, and the pricing model. It is slightly light on describing the exact verdict format, but the annotation set already covers read-only and open-world behavior, making the description adequate for selecting and invoking the tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3. The description additionally clarifies the real-world purpose of the `from` parameter by linking it to address poisoning ('pass `from` = your wallet'), which enriches the schema description. It does not mention `known` explicitly, but the schema already documents it, so no significant gap exists.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the verb ('check'), the resource ('the destination' / address safety), and the specific scope (Base) in the first sentence. It enumerates distinct threat categories (scam blacklists, address poisoning, token contracts, burn addresses, never-used addresses) and explicitly says it returns a verdict with reasons, making the purpose unambiguous and distinct from the sibling check_token_safety.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives an explicit when-to-use directive: 'Before sending crypto on Base, check the destination.' It also explains how to use the `from` parameter for the address-poisoning check. However, it does not explicitly contrast this tool with the sibling check_token_safety or state when not to use it, so a small guidance gap remains.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

check_token_safetyCheck if a token is safe to buy (Base)A
Read-only
Inspect

Before buying a token on Base, check it: simulates a real buy and sell (honeypot and hidden-tax test), reads owner powers (mint, blacklist, fee changes, pause), whale concentration, liquidity lock and scam lists. Returns a verdict (scam / high_risk / caution / low_risk) with plain-language reasons. 5 free checks per day, then $0.003 per check via x402 (USDC on Base).

ParametersJSON Schema
NameRequiredDescriptionDefault
addressYesToken contract address on Base

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint and openWorldHint, so the safety profile is covered by structured data. The description adds genuine value on top: it discloses that the tool simulates a buy/sell rather than executing one, exposes the cost model and daily quota, and states the verdict output format. No contradictions with annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three dense sentences with zero filler: the first front-loads the user-facing intent and the full list of checks, the second states the return format, and the third states cost and payment method. Every clause earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a single-parameter, read-only check tool this is nearly complete: the schema documents the input, the description documents the checks performed, the verdict categories, and the pricing, while annotations carry the safety profile. Minor gaps — no failure/error behavior (e.g., invalid or non-token contract) and no explicit sibling routing — keep it from a 5.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% — the single 'address' parameter already has a pattern and a description ('Token contract address on Base'). The description adds no parameter-level detail beyond what the schema provides, so the baseline 3 for high coverage applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Description uses a specific verb ('check') and resource (token on Base) and enumerates exactly what is evaluated: honeypot/hidden-tax simulation, owner powers, whale concentration, liquidity lock, scam lists. The '(Base)' qualifier in the title and the token-specific checks clearly distinguish it from the sibling check_address_safety, which targets addresses rather than tokens.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

'Before buying a token on Base, check it' gives a clear trigger condition for when to call the tool, and the 5-free-checks/day then $0.003 quota guides volume. However, it never names alternatives or exclusion conditions (e.g., when check_address_safety would be the right choice instead), so it stops short of full when/when-not guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 2 tool updates
    • First observedcheck_address_safety
    • First observedcheck_token_safety

Related MCP Connectors

Related MCP Servers

  • A
    license
    A
    quality
    C
    maintenance
    Enables AI agents on Base to call a check_token_risk tool before trading, providing honeypot detection, LP-lock verification, brand impersonation checks, and live sell simulation across Uniswap V2/V3/V4 and Aerodrome with a clear risk score and should-trade decision.
    1
    10 npm
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    basescope is a read-only onchain safety layer for AI agents: it answers "is this token/contract/approval safe?" on Base and EVM chains (honeypot/rug checks, risky-approval detection, verified-source lookup, balances, ENS/Basenames, gas, prices), with no private keys and no required API keys.
    13
    7 npm
    MIT
Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources