Backed: NEAR solvency checks
Server Details
Check if a NEAR protocol holds the tokens it owes, read at one block. Read-only.
- Status
- Healthy
- Last Tested
- Transport
- Streamable HTTP · MCP 2025-11-25
- URL
TDQS
Scored across 3 tools
The three tools target distinct tiers: a live on-chain computation (check_backing), a stored verdict lookup (checker_status), and an aggregate daily scan for one specific protocol (intents_backing_summary). The only mild overlap is between check_backing and checker_status, since both answer 'is this pair backed?', but the live-vs-recorded distinction is spelled out.
All names are snake_case, which helps, but the patterns differ: verb_noun (check_backing), noun_noun (checker_status), and a prefixed noun compound (intents_backing_summary). Readable, but an agent cannot infer a naming convention to guess a fourth tool.
Three tools is lean but proportionate for a narrow, single-purpose solvency-checking server. Each tool covers a genuinely different need (on-demand check, recorded status, ecosystem-wide scan), so nothing feels padded.
The core read paths are covered, but there is no discovery surface: no tool to list supported protocols/tokens or to enumerate all token balances for an arbitrary protocol (the aggregate scan is hard-coded to intents.near). No historical or batch-per-token checking exists either, forcing per-token calls once an address is known.
Available Tools
3 toolscheck_backingARead-onlyInspect
Read what a NEAR protocol owes (its own accounting view) and what it holds (each token's ft_balance_of) at the same block, so the answer is exact. Use before depositing into a protocol. Works for intents.near, contract.main.burrow.near (Rhea lending) and any contract implementing backed_solvency.
| Name | Required | Description | Default |
|---|---|---|---|
| target | Yes | Protocol account, e.g. intents.near | |
| tokens | Yes | NEP-141 token contracts, e.g. usdt.tether-token.near | |
| adapter | No | How to read 'owed'. Guessed for intents.near and contract.main.burrow.near; default backed (backed_solvency). |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Read-only and open-world are already declared in annotations, so the description's added value is the same-block atomicity guarantee (owed and held read at one block, avoiding skew), the adapter auto-guessing behavior, and the applicability limit to backed_solvency contracts. The main undisclosed trait is the response shape, which matters since there is no output schema.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three short sentences, front-loaded with the core comparison, then the usage trigger, then the supported scope. Slightly padded by the explanatory aside "so the answer is exact," but no sentence is wasted.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a 3-parameter read tool with full schema coverage and safety annotations, the description covers purpose, trigger, atomicity, and supported protocols. The gap is that with no output schema, the agent is not told what the returned owed-vs-held comparison looks like, which is the one thing left to inference.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so baseline would be 3; the description earns above that by adding applicability constraints on `target` (must implement backed_solvency) and clarifying that `adapter` is auto-selected for the two known protocols with `backed` as fallback. It does not add anything about the tokens array or the 10-token cap.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource pair: reads a protocol's owed accounting view versus its held ft_balance_of for each token, at a single block. That is far more precise than the name alone and tells an agent exactly what question it answers. It does not, however, distinguish itself from sibling intents_backing_summary, so 4 rather than 5.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
"Use before depositing into a protocol" gives a clear triggering condition, and the supported-targets sentence scopes where it applies (intents.near, contract.main.burrow.near, any backed_solvency implementer). There is no explicit when-not guidance and no mention of the sibling summary/status tools as alternatives, which keeps it out of 5 territory.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
checker_statusBRead-onlyInspect
What the on-chain Backed checker contract last recorded for a (protocol, token) pair: Healthy, Suspected or Confirmed breach, with owed, held and block.
| Name | Required | Description | Default |
|---|---|---|---|
| token | Yes | ||
| target | Yes | ||
| checker | No | Checker contract account. Default: the testnet deployment. | |
| network | No | Default: testnet |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true and openWorldHint=true, so the safety profile is covered. The description contributes real context by saying the values are what the contract 'last recorded' (i.e. stored state, not a live evaluation) and by enumerating the status categories, but it says nothing about freshness/staleness of that record or what 'owed', 'held' and 'block' represent.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single front-loaded sentence that packs the resource, the identity pair, the status enum and the returned fields with no filler. Nothing in it is redundant with the tool name or title.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a four-parameter read tool with no output schema, the description covers the resource and result categories but omits how the returned values should be interpreted (units/types of owed and held, meaning of block) and gives no guidance on the optional checker/network overrides. It is adequate but leaves real gaps for correct interpretation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is only 50%: 'checker' and 'network' are documented in the schema, while 'token' and 'target' are bare. The description partly compensates by framing the input as a '(protocol, token) pair', implying target is the protocol identifier, but it leaves the meaning of 'owed', 'held' and 'block' unexplained and adds nothing about the default checker/network behavior.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description names a specific verb+resource: reading what the on-chain Backed checker contract last recorded for a (protocol, token) pair, plus the exact result domain (Healthy/Suspected/Confirmed breach). It is clear on its own, but it never mentions the sibling tools check_backing or intents_backing_summary, so the agent gets no explicit differentiation between this recorded-status read and the live backing check.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no statement of when to use this tool versus check_backing or intents_backing_summary, and no prerequisites or exclusions. The phrase 'last recorded' hints that this returns cached on-chain state rather than a computed answer, which could be a differentiator, but the reader must infer that and it is never spelled out.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
intents_backing_summaryARead-onlyInspect
The latest daily scan of every NEP-141 token in NEAR Intents (intents.near): how many are backed, which are under-backed and by how much, and why.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true and openWorldHint=true, so the safety profile is covered. The description adds genuinely non-structured context: the data comes from a 'latest daily scan', telling the agent results may be up to a day stale rather than a live on-chain read — important for interpreting output. It stops short of describing latency, caching, or what happens if a scan is missing.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single sentence with zero filler that front-loads the scope ('latest daily scan of every NEP-141 token') before enumerating the three returned facts. Nothing is repeated from the title or schema, and every clause earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no parameters and no output schema, the description must carry the burden of saying what comes back, and it does: backed count, under-backed tokens with magnitudes, and reasons. The remaining gap is scope of history — whether only the latest scan is available or prior days can be retrieved — which matters for an agent deciding if this tool can answer a trend question.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool takes zero parameters, so the baseline is 4 and there is nothing for the description to disambiguate. The description correctly implies no inputs are needed by framing the result as a fixed, global daily scan.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific resource and scope: 'the latest daily scan of every NEP-141 token in NEAR Intents', plus the three things it reports (count backed, under-backed amounts, reasons). It is clearly an aggregate/overview tool, which implicitly separates it from the per-token sibling check_backing, but it never names or contrasts with siblings explicitly.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Usage is only implied: 'every NEP-141 token' signals a broad overview use case, versus check_backing for a single token. There is no explicit when-to-use/when-not-to-use statement, no mention of checker_status, and no guidance on whether to call this first before drilling into an individual token.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
3 tool updates
- First observed
check_backing - First observed
checker_status - First observed
intents_backing_summary
Related MCP Connectors
Read-only honeypot, holder and liquidity scam checks for tokens across 64 networks.
Paid read-only reports for 1–5 EVM addresses across four networks; 0.02 supported stablecoin direct.
Read-only XRP Ledger token-risk, issuer-authenticity and wallet-security checks.
Verify crypto payments really settled and how much arrived. 20 chains. Read only, no API key.
Related MCP Servers
- AlicenseNot gradedqualityBmaintenanceEnables MCP clients to retrieve read-only SpeedyIndex account balances, including token, indexer, and checker wallets with an observation timestamp.MIT
- AlicenseNot gradedqualityCmaintenanceRead-only MCP server for NEAR blockchain wallet data, providing account summaries, transaction history, token transfers, and activity reports via the NearBlocks API.MIT
- AlicenseNot gradedqualityAmaintenanceEnables users to inspect Solana token mint accounts, preflight transfer actions, and verify outcome receipts without holding any keys or signing transactions.1Apache 2.0

QoreChain MCPofficial
AlicenseNot gradedqualityBmaintenanceGives AI agents and developer tools read access to a blockchain network's blocks, transactions, accounts, validators, staking tiers, contract reads and fee estimates, plus post-quantum signature status checks and unsigned transfers for the user's own wallet to sign. It never signs, holds keys, or broadcasts.Apache 2.0
Glama MCP Gateway
Add one secure layer between your agents and this server.