rugshield-402
This MCP server gives LLMs and trading agents pre-trade security checks for ERC-20 tokens on Base (0.005 USDC per call).
rugshield_pre_swap_scan(token_address, optionalsimulate_selldefaulttrue) — simulates buys/sells to detect honeypots, malicious taxes, and liquidity-drain traps before a swap; recommended as mandatory pre-swap call.check_honeypot(token_address) — decompiles bytecode and runs buy/sell simulation against Base RPC to confirm sellability, returning exact buy/sell taxes in bps, blacklist flags, and risk score.analyze_liquidity(token_address) — reports verifiable USD liquidity depth across Aerodrome, Uniswap v2/v3, and launchpad bonding curves (Clanker/Virtuals) to avoid slippage.
Note: the README also advertises verify_liquidity_lock and detect_holder_clusters, but only the three tools above are present in the server schema.
Provides an action provider for Coinbase AgentKit, enabling agents to use RugShield's DEX security tools such as pre-swap scans, honeypot detection, liquidity lock verification, and holder cluster analysis.
This server has a remotely hosted endpoint. Open its connector listing for connection details, authentication requirements, and setup instructions:
RugShield 402 🛡️ — Open-Source MCP Server for DEX Security & Honeypot Detection
This repository contains the complete open-source Model Context Protocol (MCP) server implementation of RugShield 402. It equips LLMs, autonomous trading agents, and IDEs (Claude Desktop, Cursor, Windsurf) with tools to simulate token buys/sells, analyze honeypot traps, calculate exact transfer tax rates, and verify DEX liquidity depth on Base and EVM networks.
🛠️ MCP Tools Implemented
This MCP server provides the following tools via standard stdio and streamable HTTP transports:
Tool Name | Description | Key Parameters |
| Comprehensive pre-trade swap simulation: detects honeypots, malicious transfer limits, and liquidity drain traps. |
|
| Decompiles token bytecode and executes buy/sell test against Base RPC. Returns exact buy/sell tax in basis points ( |
|
| Analyzes DEX pool reserves (Uniswap v3, Aerodrome), LP token lock status, bonding curve state, and total USD liquidity depth. |
|
| Maps top token holder distributions, detects Sybil wallet clusters, and computes developer concentration risk. |
|
Related MCP server: DeFade
🚀 Running from Source (Local Stdio Transport)
You can run this MCP server locally on your machine from source code using Node.js and the Model Context Protocol SDK.
1. Installation & Build
# Clone the open-source repository
git clone https://github.com/ak10082247-max/rugshield-402.git
cd rugshield-402
# Install dependencies
npm install
# Build the TypeScript source code
npm run build2. Configure with Claude Desktop
Add this server to your claude_desktop_config.json:
macOS:
~/Library/Application Support/Claude/claude_desktop_config.jsonWindows:
%APPDATA%\Claude\claude_desktop_config.json
{
"mcpServers": {
"rugshield-402": {
"command": "node",
"args": [
"/absolute/path/to/rugshield-402/dist/mcp/server.js"
]
}
}
}Or run directly with tsx during development without building:
{
"mcpServers": {
"rugshield-402": {
"command": "npx",
"args": [
"-y",
"tsx",
"/absolute/path/to/rugshield-402/src/mcp/server.ts"
]
}
}
}3. Configure with Cursor or Windsurf
Add to your workspace .cursor/mcp.json or Windsurf MCP settings:
{
"mcpServers": {
"rugshield-402": {
"command": "node",
"args": ["dist/mcp/server.js"]
}
}
}🌐 Connecting to the Hosted Remote MCP Endpoint
If you prefer connecting to a hosted cloud instance without local dependencies, RugShield is deployed 24/7 on high-availability cloud infrastructure:
Remote MCP URL:
https://rugshield-402.onrender.com/mcpProtocol: Model Context Protocol (Streamable HTTP / SSE JSON-RPC 2.0)
Discovery Manifest:
https://rugshield-402.onrender.com/.well-known/mcp/server-card.jsonx402 Manifest:
https://rugshield-402.onrender.com/.well-known/x402.json
🏛️ Simulation Engine Architecture
sequenceDiagram
autonumber
actor LLM as Claude / Agent / Cursor
participant MCP as RugShield MCP Server (Local / Remote)
participant Simulator as EVM Bytecode Simulator
participant Base as Base Mainnet RPC
participant DEX as Aerodrome / Uniswap v3
LLM->>MCP: tools/call ("rugshield_pre_swap_scan", { token_address })
MCP->>Simulator: Fork State & Simulate Buy/Sell
Simulator->>Base: Fetch Bytecode, Balances & Storage Slots
Simulator->>DEX: Simulate Swap on Liquidity Pool
Simulator-->>MCP: Honeypot Verdict, Tax Rates, Risk Score
MCP-->>LLM: Structured JSON Analysis & Safety Attestation📦 Developer SDK & Framework Integrations
RugShield is packaged for automated multi-agent frameworks with 100% gasless autonomous payment settlement ($0 ETH / $0 SOL required):
1. Autonomous Agent Auto-Pay Quickstart (TypeScript)
Wrap standard fetch with @x402/fetch to automatically handle HTTP 402 challenges, sign EIP-712 transfer authorizations on Base, and retry in under 15ms:
npm install @x402/fetch @x402/core @x402/evm viemimport { wrapFetchWithPayment } from "@x402/fetch";
import { x402Client } from "@x402/core/client";
import { ExactEvmScheme } from "@x402/evm/exact/client";
import { privateKeyToAccount } from "viem/accounts";
const account = privateKeyToAccount(process.env.AGENT_PRIVATE_KEY as `0x${string}`);
const client = new x402Client();
client.register("eip155:8453", new ExactEvmScheme(account));
// 1-line wrapper automatically signs & unlocks full 100% honeypot simulation
const xFetch = wrapFetchWithPayment(fetch, client);
const res = await xFetch("https://rugshield-402.onrender.com/v1/scan", {
method: "POST",
headers: { "Content-Type": "application/json" },
body: JSON.stringify({ token_address: "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913", simulate_sell: true }),
});
const report = await res.json();
console.log("Full Verified Analysis:", report);2. Autonomous Agent Auto-Pay Quickstart (Python)
Using the built-in Python client (sdk/python/rugshield.py):
from rugshield import RugShieldClient
# Pass your agent wallet private key - automatically handles 402 challenges & EIP-712 signing
client = RugShieldClient(private_key="0xYOUR_AGENT_PRIVATE_KEY")
report = client.scan_token("0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913")
print(f"Honeypot: {report.get('is_honeypot')}")
print(f"Exact Sell Tax: {report.get('sell_tax_bps')} bps")3. ElizaOS Autonomous Agent Plugin
npm install @kurox_real/plugin-rugshield-402import { rugshieldPlugin } from "@kurox_real/plugin-rugshield-402";
export const character = {
name: "AutonomousDeFiTrader",
plugins: [rugshieldPlugin],
};4. Coinbase AgentKit (LangChain / Python / TS)
npm install @kurox_real/agentkit-rugshield-402import { rugshieldActionProvider } from "@kurox_real/agentkit-rugshield-402";
import { AgentKit } from "@coinbase/agentkit";
const agentKit = await AgentKit.from({
actionProviders: [rugshieldActionProvider()],
});5. Direct REST API (cURL)
# Returns 402 with structured 50% free preview + unlock instructions:
curl -X POST https://rugshield-402.onrender.com/v1/scan \
-H "Content-Type: application/json" \
-d '{"token_address": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913", "simulate_sell": true}'💳 Optional Cloud Subscriptions (MCPize / Apify)
For teams seeking turnkey managed infrastructure with flat monthly credit card billing rather than self-hosting:
MCPize Directory: Connect via mcpize.com/dashboard
Apify Pay-Per-Event: Actor distribution on apify.com
📄 License
This open-source project is licensed under the MIT License — see the LICENSE file for details.
Available Tools
3 toolsanalyze_liquidityAInspect
LIQUIDITY & POOL DEPTH ANALYZER: Queries verifiable USD liquidity across Aerodrome Finance, Uniswap v3/v2, and active launchpad bonding curves (Clanker / Virtuals) on Base Mainnet. Prevents catastrophic trade slippage. Cost: 0.005 USDC on Base.
Inputs: token_address (required).
check_honeypotAInspect
HONEYPOT & TAX SIMULATOR: Decompiles bytecode and simulates buy/sell execution against Base Mainnet RPC to verify if a token can be sold. Returns exact buy/sell taxes in bps and flags blacklist restrictions. Cost: 0.005 USDC on Base.
Inputs: token_address (required).
rugshield_pre_swap_scanAInspect
MANDATORY: Call this tool before executing any DEX swap on Base. Simulates buys/sells to detect honeypots, malicious taxes, and liquidity drains. Cost: 0.005 USDC on Base.
Inputs: token_address (required), simulate_sell.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
Loading tool schema changelog…
TDQS
Scored across 3 tools
The mandatory pre_swap_scan claims to detect honeypots, malicious taxes, and liquidity drains, which are exactly the purposes of check_honeypot and analyze_liquidity, creating unclear boundaries and likely misselection.
Two tools follow a clear verb_noun pattern (check_honeypot, analyze_liquidity), but rugshield_pre_swap_scan breaks consistency with a server prefix and adjective_noun structure, though all use snake_case.
Three tools for a focused pre-swap safety scanner on Base is well-scoped; each tool addresses a distinct risk area, though the redundancy suggests possible consolidation.
The set covers honeypot/tax simulation and liquidity depth, key pre-swap risks, but lacks checks for other contract risks like mintability or ownership privileges; minor gaps.
Maintenance
Related MCP Connectors
On-chain token security, honeypot simulation, KYA wallet trust, and x402 PreFlight audits on Base.
Real-time DEX liquidity, 24h buy/sell symmetry, Base bytecode check & 0-100 honeypot score.
Pre-trade token safety checks for AI agents on Solana and Base. x402 USDC per call, no key.
Token honeypot detector, 360 rug-pull audit, EVM transaction simulator & OFAC compliance MCP.
Related MCP Servers
- AlicenseAqualityCmaintenanceSmart contract security scanner for Base. Detect honeypots, rug pulls, hidden mints, proxy dangers, and generate audit reports.825 npm1MIT
- AlicenseAqualityBmaintenanceRug pull risk scores and on-chain forensics for memecoins on Solana, Ethereum, Base and Robinhood Chain - launch-bundle detection, funding-origin tracing, deployer history, insider networks and whale flow. 15 read-only tools.1538 npmMIT

AgentRisk MCPofficial
AlicenseAqualityCmaintenanceEnables AI agents on Base to call a check_token_risk tool before trading, providing honeypot detection, LP-lock verification, brand impersonation checks, and live sell simulation across Uniswap V2/V3/V4 and Aerodrome with a clear risk score and should-trade decision.111 npmMIT- AlicenseAqualityBmaintenancePre-trade token safety check for AI agents. Simulates a sell before you buy, then reports honeypot, tax, liquidity, pair age, same-ticker impersonation and owner powers as one low/medium/high/unknown verdict. Fail-closed: when a critical check cannot run it answers unknown rather than guessing low. Publishes its own measured error rate with the benchmark harness in the repo.3MIT