Skip to main content
Glama

threat_intel

Flux Threat Intel — scam wallet and token findings on X1. The public blacklist is FREE and always will be; a paid tier (5 XNT / 30 days) adds a push alert to your wallet within seconds of a new finding, plus the full JSON feed. Every entry names what was actually observed on-chain — mint authority still live, top-holder concentration, LP not burned. Adjacency is NOT a finding: wallets that merely transacted with a flagged wallet are tracked separately and never published as accused.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
walletNoYour X1 wallet — checks whether it has an active subscription.

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observed

TDQS

C2.8/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full disclosure burden. It does add valuable behavioral context: findings reflect observed on-chain facts, adjacency is explicitly excluded from accusations, and the free/paid feed distinction is stated. But it never discloses side effects, permissions, rate limits, or whether calling the tool is read-only, leaving important operational behavior unstated.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is front-loaded with the core domain, and each sentence earns its place by explaining scope, pricing/feed behavior, evidence quality, and the adjacency caveat. It is slightly long for a one-parameter tool, but it is structured and not redundant.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The tool has no output schema and no annotations, so the description must explain what a call returns and what happens with or without the wallet parameter. It does not state the response format beyond a vague mention of a JSON feed and blacklist, nor clarify whether invocation requires a subscription. This is a meaningful gap for an agent deciding how to call and interpret the tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% and the single wallet parameter is already described as checking active subscription. The description adds some context by linking wallets to the paid push-alert tier, but it does not materially improve on the schema's parameter explanation.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose3/5

Does the description clearly state what the tool does and how it differs from similar tools?

The opening phrase 'Flux Threat Intel — scam wallet and token findings on X1' identifies the domain and resource, and later sentences clarify that it provides blacklist/finding data. However, the description never uses a concrete verb such as 'retrieves,' 'checks,' or 'lists,' and it blurs the tool's behavior with marketing about the paid subscription tier, so the agent must infer the actual operation.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No explicit when-to-use guidance is given, and no alternatives are named. The description implies the tool is for accessing scam findings and subscription alerts, but it does not tell the agent when to choose threat_intel over siblings like bulk_screener or token_lookup, nor any exclusions.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources