Skip to main content
Glama

Otto token security screen

otto_token_security
Read-onlyIdempotent

Screen a token contract with GoPlus across 8 chains for honeypot, rug-pull and scam signals: can’t-sell traps, hidden mint functions, malicious buy and sell taxes, and holder concentration. The chain defaults to Base (8453). Paid-only, including the first call: this read has no warm cache behind the hosted free allowance. A screen of known risk signals, not a guarantee that a token is safe and not a recommendation. Hosted access: paid-only; each call costs $0.001 USDC through x402 and preserves the free allowance.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
chainNoChain id or name, case-insensitive: 1 (ethereum, eth), 10 (optimism), 56 (bsc, bnb), 137 (polygon, matic), 196 (xlayer), 8453 (base), 42161 (arbitrum), 43114 (avalanche, avax). Default: 8453 (Base).
addressYesToken contract address (0x followed by 40 hex characters).
x_paymentNoSigned x402 payment payload. Omit it to receive the machine-actionable payment challenge, then retry with the signed payload.

Schema Changelog

Changes observed during successful MCP inspections.

  1. Added

TDQS

A3.8/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnly/idempotent/openWorld/non-destructive, so the safety profile is covered. The description goes further with non-obvious behavior: no warm cache, paid from the first call, $0.001 USDC per call via x402, and the default chain. It does not, however, describe latency or result completeness.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Purpose is front-loaded, which is good, but the paid/x402 detail is stated twice ('Paid-only, including the first call' and 'Hosted access: paid-only; each call costs $0.001 USDC through x402'), which is redundant for a relatively short description.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a no-output-schema, 3-param read tool this is close to complete: it covers what is screened, the default chain, the payment requirement and the interpretation caveat. Only minor gaps remain, such as what a returned risk report contains and the scope of the 'free allowance'.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%: chain ids, the address pattern and the x_payment challenge/retry flow are all documented in the schema. The description only restates the Base default, adding no syntax or semantics beyond it, so the baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb (screen), resource (token contract), provider (GoPlus), scope (8 chains) and the exact risk classes detected (honeypot, rug-pull, hidden mint, taxes, holder concentration). An agent can distinguish this from otto_holder_analytics or otto_equity_intel without opening a schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Implies when the tool applies (screening a token contract before trusting it) and gives a key operational caveat ('paid-only, including the first call'), but names no alternative tool and states no explicit when-not condition beyond the 'not a guarantee, not a recommendation' disclaimer.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources