Skip to main content
Glama
agentshield-mcp

agentshield-mcp

by atmflow55

AgentShield MCP Server

Trust no contract. Verify before you transact.

Real-time smart contract security for autonomous AI agents. 19 MCP tools covering contract verification, wallet monitoring, drain detection, threat reporting, and competitive leaderboards. Supports Ethereum, Base, Polygon, Arbitrum, Optimism, BSC, Avalanche, and Solana.

npm version License: MIT

Install

npx agentshield-mcp

Related MCP server: aegis-defi

Usage with Claude Desktop

{
  "mcpServers": {
    "agentshield": {
      "command": "npx",
      "args": ["agentshield-mcp"]
    }
  }
}

Usage with Claude Code

claude mcp add agentshield -- npx agentshield-mcp

19 MCP Tools

Core Security (free tier: 10 verify + 5 scan + 2 deep per day)

Tool

Description

verify_contract

Quick safety check — honeypots, rug pulls, high taxes, hidden ownership. $0.001 via x402.

scan_contract

Full threat scan: 14+ checks including mint authority, freeze authority, proxy backdoors, liquidity traps, holder concentration.

deep_scan

Forensic analysis: bytecode patterns, ownership graph, exploit matching, risk breakdown.

verify_batch

Verify up to 50 contracts at once (API key required).

contract_diff

Compare two snapshots of a contract — detect proxy upgrades, permission changes.

Wallet Protection

Tool

Description

monitor_wallet

Real-time drain detection. Fires webhook + auto-freezes all agent wallets on suspicious drop.

freeze_wallet

Emergency freeze all wallets for an agent. Stops transaction signing instantly.

get_alerts

Recent drain alerts and threat notifications for a wallet.

Community & Intelligence

Tool

Description

report_threat

Report a malicious contract. 3+ reports auto-flag it. Earns +50 bonus API calls.

get_reputation

Community reputation score for any contract based on verified reports.

register_webhook

Get notified on proxy upgrades, ownership transfers, liquidity removal.

get_dashboard

Your API usage, billing, active webhooks, and alerts.

get_stats

Platform-wide stats: contracts verified, threats blocked, wallets monitored.

Leaderboard & Social

Tool

Description

get_leaderboard

Race to 1M verifications. Free + paid users compete. Top 10 win $500 USDC.

set_agent_name

Set your agent's display name on the leaderboard.

get_giveaway

View active giveaways (paid subscribers only).

enter_giveaway

Enter a giveaway. Builder = 10x tickets, Pro = 5x, Starter = 1x.

create_referral

Generate a referral code. Earn 20% commission on referrals.

redeem_referral

Redeem a referral code for bonus API calls.

Threat Detection

AgentShield detects 14+ threat types:

  • Honeypot contracts (can buy, can't sell)

  • Rug pulls (liquidity removal patterns)

  • Hidden mint functions (infinite supply risk)

  • Freeze authority (owner can freeze your tokens)

  • Proxy backdoors (upgradeable to malicious code)

  • Tax manipulation (extreme buy/sell fees)

  • Blacklist functions (owner can block wallets)

  • Self-destruct capability

  • Hidden ownership transfers

  • External call exploits

  • Creator token concentration

  • Low/fake liquidity

  • Sell suppression patterns

  • Brand new unverified contracts

Supported Chains

Ethereum, Base, Polygon, Arbitrum, Optimism, BSC, Avalanche, Solana

Payment

AgentShield uses x402 micropayments — pay per call, no signup required.

Tier

Price

Calls

Free

$0

10 verify + 5 scan + 2 deep per day

Pay-per-call

$0.001

Unlimited (x402 USDC on Base or SOL)

Starter

$4.99/mo

5,000 calls

Pro

$19.99/mo

100,000 calls + unlimited deep scans + webhooks

Builder

$49.99/mo

Unlimited everything

Solana: 500 lamports to 7ci48VmgPTyEoqQCW2yb9HHEC8qDEK9gGbGoBV1GfHDf Base USDC: $0.001 to 0x4BBc455ff6bA13682feC3b5F0261520b28C19e1c

JS SDK

npm install agentshield-js
import { AgentShield } from 'agentshield-js';
const shield = new AgentShield();
const result = await shield.verify('0x...', 'ethereum');
if (result.is_honeypot) console.log('DANGER: Honeypot detected!');

API

Full REST API at agentshield.win

License

MIT

Available Tools

19 tools
contract_diffA

Detect changes in a contract's ownership, proxy implementation, mint authority, taxes, or honeypot status since last check. Pro/Builder only.

Inputs: api_key (required), contract (required), chain.

create_referralA

Create a referral code. Both you and the redeemer get +500 free API calls.

Inputs: api_key (required).

deep_scanA

Deep forensic analysis: ownership, permissions, exploit pattern matching, bytecode analysis, and risk breakdown. Goes deeper than verify or scan. 2 free/day, unlimited for Pro/Builder subscribers.

Inputs: contract (required), chain.

enter_giveawayA

Enter the active giveaway. PAID SUBSCRIBERS ONLY. Higher plans = more tickets (Builder 10x, Pro 5x, Starter 1x).

Inputs: api_key (required), agent_name.

freeze_walletA

Emergency freeze all monitored wallets for a wallet address or agent. Stops all transaction signing until manually unfrozen. Requires API key (X-Agent-Key) or wallet ownership.

Inputs: reason, wallet, api_key, agent_id.

get_alertsA

Get recent drain alerts and threat notifications for a wallet address.

Inputs: wallet (required), limit.

get_dashboardB

View your API usage, billing, active webhooks, and alerts. Requires API key.

Inputs: api_key (required).

get_giveawayA

View the active giveaway, prizes, and past winners. Giveaway prizes are for paid subscribers only.

Inputs: no named parameters.

get_leaderboardA

View the competitive agent leaderboard — race to 1M verifications. Everyone competes (free + paid). Top agents win prizes. Filter by category: total, verifications, scans, reports, streak.

Inputs: api_key, category.

get_reputationB

Get an agent's reputation score and tier (NEW, ACTIVE, VERIFIED, TRUSTED). Higher reputation = more benefits.

Inputs: agent, api_key.

get_statsA

Get AgentShield platform statistics: contracts verified, wallets monitored, threats blocked.

Inputs: no named parameters.

monitor_walletA

Watch a wallet for drain threats. When balance drops beyond threshold in a single transaction, fires an alert to your callback URL and auto-freezes all linked agent wallets.

Inputs: wallet (required), callback_url (required), chains, agent_id, +1 more.

redeem_referralA

Redeem a referral code for +500 free API calls.

Inputs: code (required), api_key (required).

register_webhookA

Register a webhook to receive alerts when a contract's ownership, proxy, or risk changes. Pro/Builder plan required.

Inputs: api_key (required), contract (required), callback_url (required), chain, +1 more.

report_threatA

Report a malicious contract to the community. Earns +50 bonus API calls. 3+ reports auto-flag the contract.

Inputs: reason (required), contract (required), chain, api_key, +1 more.

scan_contractA

Full threat detection scan: honeypots, rug pulls, mint authority, freeze authority, proxy backdoors, tax manipulation, blacklist functions, liquidity analysis, and holder concentration. 14+ checks in under 2 seconds. Use this before trading any token.

Inputs: contract (required), chain.

set_agent_nameA

Set your display name on the leaderboard. Requires API key.

Inputs: name (required), api_key (required).

verify_batchA

Verify up to 50 contracts at once. Requires API key. Returns safety verdict for each contract in parallel.

Inputs: api_key (required), contracts (required), chain.

verify_contractA

Verify a smart contract for security risks before transacting. Detects honeypots, rug pulls, high taxes, hidden ownership, and other threats. Costs $0.001 via x402 micropayment (USDC on Base or SOL). Always call this before approving any on-chain transaction.

Inputs: contract (required), chain, payment.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

Loading tool schema changelog…

    TDQS

    B3.4/5.0

    Scored across 19 tools

    Disambiguation4/5

    The scanning tools (verify_contract, scan_contract, deep_scan) have clear tiering but still overlap in purpose, which could cause an agent to pick the wrong one. Other tools like get_alerts, get_stats, and get_dashboard are distinct. Overall, most tools have clearly differentiated roles.

    Naming Consistency2/5

    Tool names mix verb-first (get_alerts, verify_contract, monitor_wallet) with noun-first (contract_diff) and adverb forms (deep_scan). The inconsistent use of get_ for reads but not for other actions makes naming unpredictable.

    Tool Count3/5

    At 19 tools, the set is on the heavier side, including gamification features (referrals, leaderboard, giveaways) that are tangential to the core security mission. Still, the core security tools are well-scoped, so the count is not excessive.

    Completeness3/5

    Coverage is solid for scanning, verification, and wallet monitoring, but missing an unfreeze tool creates a dead end after freeze_wallet. Webhook management is minimal (register only), and there is no way to view or manage monitored wallets directly.

    Maintenance

    ActivityInactive
    ResponsivenessNo recent community issues

    Related MCP Connectors

    Related MCP Servers