RiskDataApi — Insider Cluster Detection for Solana Tokens
This MCP server provides Solana token risk assessment for AI agents, including safety scoring, insider wallet cluster detection, and historical trend analysis. Key capabilities:
Single token risk check (
check_token_risk): Returns a 0–100 safety score, detects insider wallet clusters (wallets sharing a first funder), checks mint/freeze authority status, analyzes holder concentration, and provides live price, liquidity, and volume for a given Solana token mint.Batch token risk check (
check_token_risk_batch): Evaluates up to 25 mints in a single request with the same comprehensive risk data. Each mint counts as a separate call, and the entire batch is rejected if quota cannot cover all.Historical risk retrieval (
get_token_risk_history): Fetches hourly historical data (safety score, insider clusters, holder count, price, liquidity, volume) for up to 90 days. This tool does not consume call quota as it reads stored data.
Provides tools for analyzing Solana token risk, including safety scoring, insider wallet cluster detection, and historical data, enabling AI agents to assess token risk on the Solana blockchain.
RiskDataApi — Solana token risk, 5 MCP calls free
RiskDataApi is the risk layer for Solana trading bots and AI agents. One call on a mint returns a safety score (0–100), insider clusters (wallets that share a first funder), honeypot, and LP lock. Scanners count wallets. We trace who funded them.
Connect with no key. MCP: https://www.tnt-audit.com/api/mcp
Paste that URL into Glama Inspector, Claude, or Cursor and call check_token_risk. 5 calls/day, no email.
After that: email key 15/day, x402 at $0.02/call with no account, or a $45/5000-call subscription for volume. Humans on the site get 3 free checks with no signup at tnt-audit.com/risk-api.
This repository hosts a remote Model Context Protocol (MCP) server exposing the RiskDataApi engine as tools for AI agents (Claude, Cursor, and any other MCP-compatible client). See the MCP Server section below.
Getting Started (3 steps)
Try it now, no signup — no API key needed for your first 5 MCP calls/day (no signup at all). Three ways, pick whichever is easiest:
⚡ Glama's MCP Inspector (fastest, zero setup, real MCP call) — go to glama.ai/mcp/inspector, paste
https://tnt-audit.com/api/mcpas the server URL, and callcheck_token_riskright in your browser — no install needed.Claude Desktop / Cursor — paste this into your MCP config, no key required:
{ "mcpServers": { "tnt-risk-data-api": { "command": "npx", "args": ["-y", "mcp-remote", "https://tnt-audit.com/api/mcp"] } } }Browser, raw REST preview — open a live example directly, no install, no signup. ⚠️ This is a REST preview of the underlying data, not the MCP tool itself — for the real MCP tool, use the Inspector above.
Want more? — get a free API key in seconds at tnt-audit.com/risk-api (email only, no card).
Need higher volume? — on the same page, paste your key into the pricing section to pay per-call, by subscription, or via x402 (autonomous agents, no key at all).
Related MCP server: Rug Munch Intelligence
Tech Stack
Next.js 14 (App Router) + React 18 + TypeScript
Tailwind CSS
Supabase (auth, billing, key storage)
Helius (Solana RPC) + RugCheck + DexScreener (market/risk data)
Vercel (hosting, cron via QStash)
MCP Server — Risk-Data API
This repository includes a remote Model Context Protocol (MCP) server, built with the official @modelcontextprotocol/sdk (TypeScript), exposing Solana token risk data as tools for AI agents.
Source:
app/api/mcp/route.tsDocs:
app/api/mcp/README.mdEndpoint:
https://tnt-audit.com/api/mcp(Streamable HTTP transport)Auth:
Authorization: Bearer <api_key>— free key at tnt-audit.com/risk-api
Tools
Registered via server.registerTool(...):
Tool | Description |
| Safety score, insider wallet cluster detection, mint/freeze authority, holder concentration, live price/liquidity/volume for one Solana token mint |
| Same as above for up to 25 mints in one call |
| Hourly historical risk/price data for a mint over up to 90 days |
Full tool schemas and input parameters: app/api/mcp/README.md.
Local Development
npm install
npm run devDeployment
Vercel-ready. Connected to this repo's main branch for auto-deploys.
Links: X @RiskDataApiSol | Risk-Data API | Telegram
Available Tools
3 toolscheck_token_riskCheck Solana token riskA
Returns a 0-100 safety score, on-chain insider wallet clusters (wallets sharing a first funder), mint/freeze authority status, holder concentration, and live price/liquidity/volume for a single Solana token mint. Use before recommending or executing a trade on any Solana token. 5 free MCP calls/day, no signup. Then email key or x402.
| Name | Required | Description | Default |
|---|---|---|---|
| mint | Yes | The Solana token mint address to check |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden and discloses the free-tier limit and auth path ('5 free MCP calls/day, no signup. Then email key or x402'). It also implies a read-only data check via 'Returns', though it doesn't explicitly state the absence of side effects.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The core behavior is front-loaded in one dense sentence, followed by a one-line usage instruction and a rate-limit note. The final fragment 'Then email key or x402' is cryptic but concise overall.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
In the absence of an output schema, the description enumerates all major output categories and the usage timing, plus rate-limit/auth context. The ambiguity of 'email key or x402' and the lack of explicit read-only confirmation are minor gaps.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100% and already documents the mint parameter as 'The Solana token mint address to check'. The description adds only the 'single Solana token mint' cardinality, which is useful but not a substantive semantic addition.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a concrete verb ('Returns') and enumerates specific data categories (0-100 safety score, insider clusters, authority status, holder concentration, price/liquidity/volume) for a single Solana token mint. The word 'single' differentiates it from the sibling check_token_risk_batch.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly instructs 'Use before recommending or executing a trade on any Solana token', providing a clear trigger context. It does not mention sibling alternatives or exclusion conditions, but the single-token scope gives adequate guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
check_token_risk_batchCheck risk for multiple Solana tokens at onceA
Same as check_token_risk but for up to 25 mints in one call — N mints charged as N calls, same per-call economics as check_token_risk, no bulk discount. All-or-nothing: if the batch can't be fully covered by remaining quota/credit, the whole batch is rejected rather than partially processed.
| Name | Required | Description | Default |
|---|---|---|---|
| mints | Yes | 1-25 Solana token mint addresses |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries full responsibility for behavioral disclosure. It reveals critical behaviors: up to 25 mints per call, per-mint billing equivalent to check_token_risk, no bulk discount, and an all-or-nothing rejection policy when quota/credit cannot cover the full batch. This is rich, decision-relevant context.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences with zero filler. The first sentence establishes the tool's purpose and relationship to check_token_risk; the second explains the all-or-nothing batch policy. Every phrase earns its place and the structure is front-loaded.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple one-parameter tool with no output schema, the description covers capacity limits, billing, and atomicity. It relies on the reference to check_token_risk for baseline return behavior, which is a reasonable shortcut given sibling context, but it does not explicitly describe the batch return format or ordering. This is a minor gap rather than a major omission.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema already fully describes the single 'mints' parameter with minItems, maxItems, and item description ('1-25 Solana token mint addresses'). The description adds batching and pricing context but does not enhance the parameter's intrinsic meaning beyond what the schema provides, so the baseline score of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool checks risk for multiple Solana tokens at once, with a specific verb ('check') and resource ('risk for multiple Solana tokens'). It distinguishes itself from the sibling check_token_risk by explicitly noting the batch capability of up to 25 mints.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description says 'Same as check_token_risk but for up to 25 mints in one call', which clearly indicates when to use this tool over the single-mint alternative. It also adds usage-relevant details about billing and quota, though it does not explicitly mention get_token_risk_history or list strict 'when not to use' conditions.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_token_risk_historyGet historical risk trend for a Solana tokenA
Returns hourly historical data points (safety_score, insider_cluster_count, holder_count, price, liquidity, volume) for a mint over the last N days (max 90). Free and unmetered — no quota, works with or without an API key — pure read from stored history, no live upstream call.
| Name | Required | Description | Default |
|---|---|---|---|
| days | No | How many days of history to return (default 30, max 90) | |
| mint | Yes | The Solana token mint address |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden and does so well: it discloses that the call is free, unmetered, has no quota, works with or without an API key, performs no live upstream call, and is a pure read from stored history. This materially tells an agent what side effects and constraints to expect without needing annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, with the core behavior and return contents front-loaded, followed by essential operational context (free, unmetered, no auth needed, no live upstream call). Every clause adds distinct information and none is redundant with the schema.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
This is a simple two-parameter read-only tool, and the description fully covers what an agent needs to call it correctly: the parameters are schema-documented, the return values are enumerated, and the operational traits (cost, auth, quota, live-call behavior) are disclosed. The lack of an output schema is mitigated by the explicit field list.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the baseline is 3, but the description adds value beyond the schema by specifying the hourly granularity, the exact returned data fields, and the 90-day cap context. It does not repeat schema descriptions, making it a genuine semantic supplement rather than a restatement.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description names a specific action ('Returns hourly historical data points'), a concrete resource (a mint), and a precise time window (last N days, max 90). The enumerated fields (safety_score, insider_cluster_count, holder_count, price, liquidity, volume) make the tool's output unmistakable, and the phrase 'historical risk trend' clearly distinguishes it from current-risk checkers.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description clearly positions this as the tool for historical trends rather than current checks, and the sibling names check_token_risk and check_token_risk_batch reinforce that contrast. It does not explicitly say 'use this instead of X', but the historical-vs-current distinction is sufficiently clear from the description and title.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
TDQS
The three tools are clearly distinct: check_token_risk covers a single token snapshot, check_token_risk_batch explicitly handles multiple mints, and get_token_risk_history addresses historical data. There is no meaningful overlap or ambiguity between current risk checking, batch risk checking, and historical trends.
All tool names follow a consistent snake_case verb_noun pattern: check_token_risk, check_token_risk_batch, and get_token_risk_history. The shared token_risk core with clear qualifiers makes the toolset predictable and easy to navigate.
Three tools is appropriately scoped for a focused insider-cluster risk API: single-token checks, batch checks, and historical data. Each tool serves a distinct and necessary purpose without redundancy or bloat.
The toolset covers the core domain completely: immediate single-token risk assessment, scaled batch assessment, and historical trend analysis. Since the API is read-only risk intelligence, no create/update/delete operations are expected, and no significant capability gap is apparent.
Maintenance
Related MCP Connectors
Solana onchain intelligence for AI agents: wallet risk, due-diligence, perps funding, smart money.
Solana token safety for AI agents — rug-pull, honeypot & Token-2022 trap detection before you buy.
Solana on-chain intelligence — token scans, wallet profiling, bundle detection, 19 MCP tools.
Solana address risk grades and token scans for AI agents. Pay-per-call via x402 (USDC on Base).
Related MCP Servers
- AlicenseNot gradedqualityDmaintenanceAn MCP server that detects potential risks in Solana meme tokens, helping AI agents avoid rug pulls and unsafe projects.21MIT
- AlicenseBqualityFmaintenance19 tools for crypto token risk intelligence. Detect rug pulls, honeypots, and scams before your agent transacts. Works with Claude Desktop, Cursor, Windsurf, and any MCP-compatible client.191MIT
- AlicenseNot gradedqualityBmaintenancePre-trade risk validation and position sizing for AI trading agents via G-formula and Iron Fist.2MIT

zarq-risk-intelligenceofficial
AlicenseNot gradedqualityDmaintenanceReal-time crypto risk scoring for AI agents. Trust Score, crash probability, and distance-to-default for 205 tokens. Free, no API key needed.MIT
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/menantonio83-hue/tnt-house'
If you have feedback or need assistance with the MCP directory API, please join our Discord server