token-honeypot-audit-mcp
Enables honeypot and tax security audits for Ethereum token/contract addresses, AML/sanctions screening for Ethereum addresses, DEX order-flow and due-diligence reports, and executable Ethereum swap quote calldata.
Supports pre-flight security audits of 0x contracts and executable DEX swap quote calldata on Optimism.
Supports pre-flight security audits of 0x contracts and executable DEX swap quote calldata on Polygon.
Supplies live Reddit social sentiment data as part of the token_due_diligence composite investment grade.
Provides token order-flow intelligence and 3-in-1 token due-diligence reports for Solana tokens.
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@token-honeypot-audit-mcp Audit this Base token for honeypot risk: 0x4200000000000000000000000000000000000006"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
Token Honeypot Detector, Smart Contract Audit & AML MCP Server
Pre-flight 0x token honeypot & tax scanner, OFAC/sanctions wallet AML screening, DEX order-flow alpha, 3-in-1 token due diligence & executable Base swap calldata MCP.
Searching for a Token Honeypot MCP, Smart Contract Security Audit MCP, or Base DeFi Safety MCP server? token-honeypot-audit-mcp protects AI wallets and crypto researchers from rugpulls, hidden sell taxes, malicious URLs, and sanctioned addresses — while delivering live DexScreener order-flow alpha and executable DEX swap quotes.
Why Use token-honeypot-audit-mcp?
Honeypot, Tax & Drainer Scanner (
security_audit) — Audits any0x...contract on Base, Ethereum, Arbitrum, BSC, Polygon, or Optimism (GoPlus + DexScreener) OR scans web URLs for phishing/prompt-injection traps.OFAC & Sanctions AML Check (
compliance_check) — Screens wallet addresses and entities against sanctions & high-risk compliance lists before signing transactions.DEX Order-Flow & Institutional Due Diligence (
token_alpha,token_due_diligence) — Buy/sell pressure, liquidity depth, FDV velocity, plus a composite A–F investment grade combining on-chain security + DEX liquidity + social sentiment.Free Executable DEX Swap Quotes (
defi_swap_quote) — Generates live cross-chain/same-chain EVM swap calldata via Relay Instant Solver.2 Free Calls / Day Out of the Box — Works immediately with zero configuration and no API key required.
Instant Unlimited Upgrade — Need high-volume production calls? Grab an instant API key at https://agent-kiosk.vercel.app/buy ($1 Starter 7-Day Pass or $5 Pro 30-Day Pass) or pay per request natively via x402 (USDC on Base).
Related MCP server: evmSDK MCP Server
Option 1: Zero-Install Remote MCP URL (Fastest)
Connect directly via Streamable-HTTP MCP without installing anything locally:
Free Tier (2 Free Calls/Day, Zero Config):
https://agent-kiosk.vercel.app/mcpPaid Unlimited URL (With Prepaid Pass Key):
https://agent-kiosk.vercel.app/mcp?api_key=ak_live_YOUR_KEY_HERE
Get an Instant API Key in 10 Seconds: https://agent-kiosk.vercel.app/buy
$1.00 USDC — 7-Day Starter Pass (Instant
ak_live_...key)$5.00 USDC — 30-Day Pro Pass (Full unmasked datasets across all endpoints)
Option 2: Local npx / Stdio Setup (Claude Desktop, Cursor, Codex)
This package is pure Node.js >= 18 with zero external npm dependencies, exposing only the 5 focused tools for this workflow so your LLM context window stays lean.
Claude Desktop (claude_desktop_config.json)
{
"mcpServers": {
"token-honeypot-audit-mcp": {
"command": "npx",
"args": ["-y", "github:ralf9090/token-honeypot-audit-mcp"],
"env": {
"AGENT_KIOSK_API_KEY": ""
}
}
}
}(Leave AGENT_KIOSK_API_KEY empty for 2 free calls/day, or paste your ak_live_... key from agent-kiosk.vercel.app/buy for unlimited access.)
Cursor (.cursor/mcp.json)
{
"mcpServers": {
"token-honeypot-audit-mcp": {
"command": "npx",
"args": ["-y", "github:ralf9090/token-honeypot-audit-mcp"],
"env": {
"AGENT_KIOSK_API_KEY": "ak_live_OPTIONAL_PASS_KEY"
}
}
}
}OpenAI Codex CLI (~/.codex/config.toml)
[mcp_servers.token_honeypot_audit_mcp]
command = "npx"
args = ["-y", "github:ralf9090/token-honeypot-audit-mcp"]
env = { AGENT_KIOSK_API_KEY = "" }Run Directly via git clone + node index.js
git clone https://github.com/ralf9090/token-honeypot-audit-mcp.git
cd token-honeypot-audit-mcp
node index.jsIncluded MCP Tools (5)
security_audit
Pre-flight security and scam radar for AI agents. Audits 0x smart contracts/tokens (honeypot check, buy/sell tax, mintable risk, DEX liquidity via GoPlus & DexScreener) or web URLs (phishing, wallet drainers, prompt injection).
Parameter | Type | Required | Description |
|
| Yes | 0x... token/contract address OR https://... URL to audit |
|
| No | Blockchain network when target is a 0x address (default: 'base') |
|
| No | Optional ak_live_... 30-day Prepaid API Pass key to unlock the full unmasked dataset |
compliance_check
Institutional AML, Sanctions (OFAC), Phishing, Mixer, and Malicious Counterparty Compliance Screening ($0.05 USDC). Screens any 0x EVM address against GoPlus Security (Base + Ethereum) and 4-chain RPC footprint before autonomous agents execute transfers.
Parameter | Type | Required | Description |
|
| Yes | 0x... 40-hex EVM wallet or contract address to screen for AML/sanctions |
|
| No | Optional ak_live_... 30-day Prepaid API Pass key to unlock the full unmasked dataset |
token_alpha
Real-time crypto & DeFi order-flow intelligence. Analyzes buy vs. sell transaction pressure, liquidity depth, volume velocity, FDV, and top DEX pools for any token ticker or contract address.
Parameter | Type | Required | Description |
|
| Yes | Token symbol (e.g., 'AERO', 'PEPE', 'VIRTUAL') or contract address (0x...) |
|
| No | Optional chain filter (default: 'all') |
|
| No | Optional ak_live_... 30-day Prepaid API Pass key to unlock the full unmasked dataset |
token_due_diligence
Institutional 3-in-1 Token Due Diligence Report ($0.10 USDC). Combines GoPlus on-chain honeypot/tax security audit, DexScreener DEX order-flow alpha & liquidity depth, and live Reddit/HN social sentiment into a composite investment grade (A-F).
Parameter | Type | Required | Description |
|
| Yes | Token symbol (e.g., 'AERO', 'VIRTUAL', 'PEPE') or 0x contract address |
|
| No | Blockchain network (default: 'base') |
|
| No | Optional ak_live_... 30-day Prepaid API Pass key to unlock the full unmasked dataset |
defi_swap_quote
Executable DeFi Swap & Cross-Chain Bridge Action Calldata Builder ($0.05 USDC). Queries LI.FI and ParaSwap aggregators to compute the best DEX/Bridge route and returns ready-to-sign EVM transaction calldata (to, data, value, gasLimit) on Base, Ethereum, Arbitrum, Polygon, and Optimism.
Parameter | Type | Required | Description |
|
| Yes | Source token symbol (e.g., 'USDC', 'ETH', 'AERO') or 0x contract address |
|
| Yes | Destination token symbol (e.g., 'ETH', 'USDC', 'AERO', 'cbBTC') or 0x address |
|
| No | Amount of from_token to swap (human-readable e.g. '10' or atomic units) |
|
| No | Source blockchain network (default: 'base') |
|
| No | Destination blockchain network (default: same as from_chain) |
|
| No | Optional 0x sender wallet address for transaction simulation |
|
| No | Optional ak_live_... 30-day Prepaid API Pass key to unlock the full unmasked dataset |
Example Prompts
"Audit 0x940181a94A35A4569E4529A3CDfB74e38FD98631 on Base for honeypot risk, buy/sell taxes, and mint permissions."
"Run a full 3-in-1 token_due_diligence report on VIRTUAL on Base and give me its safety grade."
"Check compliance_check on wallet 0xd8dA6BF26964aF9D7eEd9e03E53415D37aA96045 and quote a 100 USDC -> WETH swap on Base."
Pricing & Rate Limits
Tier | Cost | Quota | Setup |
Free Trial | $0 | 2 Free Calls / Day | Zero config — works out of the box |
Starter Pass | $1 USDC | 7 Days Unlimited | Get |
Pro Pass | $5 USDC | 30 Days Unlimited | Get |
x402 Pay-Per-Call | $0.008–$0.10 | Unlimited autonomous | Pass |
License
MIT © ralf9090 — Powered by Agent Kiosk (Upgrade / Buy API Key).
Available Tools
5 toolscompliance_checkARead-onlyIdempotentInspect
Institutional AML, Sanctions (OFAC), Phishing, Mixer, and Malicious Counterparty Compliance Screening ($0.05 USDC). Screens any 0x EVM address against GoPlus Security (Base + Ethereum) and 4-chain RPC footprint before autonomous agents execute transfers.
Inputs: address (required), x_api_key, payment_signature.
defi_swap_quoteARead-onlyIdempotentInspect
Executable DeFi Swap & Cross-Chain Bridge Action Calldata Builder ($0.05 USDC). Queries LI.FI and ParaSwap aggregators to compute the best DEX/Bridge route and returns ready-to-sign EVM transaction calldata (to, data, value, gasLimit) on Base, Ethereum, Arbitrum, Polygon, and Optimism.
Inputs: to_token (required), from_token (required), amount, wallet, +4 more.
security_auditBRead-onlyIdempotentInspect
Pre-flight security and scam radar for AI agents. Audits 0x smart contracts/tokens (honeypot check, buy/sell tax, mintable risk, DEX liquidity via GoPlus & DexScreener) or web URLs (phishing, wallet drainers, prompt injection).
Inputs: target (required), chain, x_api_key, payment_signature.
token_alphaBRead-onlyIdempotentInspect
Real-time crypto & DeFi order-flow intelligence. Analyzes buy vs. sell transaction pressure, liquidity depth, volume velocity, FDV, and top DEX pools for any token ticker or contract address.
Inputs: query (required), chain, x_api_key, payment_signature.
token_due_diligenceARead-onlyIdempotentInspect
Institutional 3-in-1 Token Due Diligence Report ($0.10 USDC). Combines GoPlus on-chain honeypot/tax security audit, DexScreener DEX order-flow alpha & liquidity depth, and live Reddit/HN social sentiment into a composite investment grade (A-F).
Inputs: query (required), chain, x_api_key, payment_signature.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
Loading tool schema changelog…
TDQS
Scored across 5 tools
Most tools target distinct actions: address compliance screening, order-flow analysis, and swap calldata building are clearly separate. The main overlap is token_due_diligence, which bundles a security_audit and token_alpha-style analysis into a composite report, so an agent could hesitate between the single-purpose tools and the bundled one. Descriptions do clarify the paid composite nature, keeping confusion limited.
All names use snake_case noun phrases and are readable, but prefixes are inconsistent: security_audit and compliance_check lack the domain prefix used by token_alpha, token_due_diligence, and defi_swap_quote. The mix of action-oriented names (audit, check) with descriptive names (alpha, quote) is a minor deviation rather than a real inconsistency.
Five tools is well-scoped for a token audit and DeFi intelligence server. Each tool maps to a distinct workflow: security inspection, compliance screening, market alpha, bundled due diligence, and executable swap quoting. No tool feels redundant enough to remove.
The surface covers core audit, compliance, market intelligence, due diligence, and execution-preparation workflows for EVM tokens. Minor gaps include no batch auditing, no direct token metadata or price lookup, and no historical or portfolio views, but these are not blocking for the stated honeypot/audit purpose.
Maintenance
Related MCP Connectors
Safety checks before you sign, pay or install: contract, token and package scans, phishing, OFAC.
Pre-trade safety + wallets: Solana/EVM token risk, honeypots, counterparties, balances, txs, CVEs.
Pre-trade safety + wallets: Solana/EVM token risk, honeypots, counterparties, balances, txs, CVEs.
Pre-trade token safety check for AI agents. Simulates a sell before you buy, then returns one low/medium/high/unknown verdict with the signals behind it: sellability, buy/sell tax, liquidity depth, pair age, same-ticker impersonation, owner powers from bytecode. Ethereum, BSC, Base, Solana. Fail-closed - a check that cannot run answers unknown, never low. Publishes its own measured error rate with the benchmark harness in the repo. Free, no signup, no API key, MIT.
Related MCP Servers
- AlicenseAqualityDmaintenanceNon-custodial agent wallet with a transaction preflight that decodes an unsigned EVM tx and flags drain patterns (unlimited/large approval, approve-all, token & NFT transferFrom, proxy upgrade, on-chain permit, approvals hidden in multicall) before signing.9110 PyPI1MIT
- FlicenseNot gradedqualityBmaintenanceEnables agents to interact with Ethereum, Base and configurable EVM chains over stdio using the shared command catalog, covering contract reads, prepared and policy-guarded execution, wallet management, Socket swaps and bridging, simulation, monitoring and saved contracts.-
- AlicenseNot gradedqualityBmaintenanceExposes typed crypto-security tools — token risk scoring, wallet forensics, deployer reputation, sentiment, and report generation — to MCP-capable agents over streamable HTTP or stdio. Gates premium calls behind per-request x402 crypto micropayments, delegating verification and settlement to a self-hosted facilitator and failing closed when payment cannot be confirmed.MIT
- AlicenseNot gradedqualityCmaintenanceExposes read-only local analysis tools for source auditing, web traffic review, binary reverse engineering, exploit scaffolding, OSINT, and reporting via JSON-RPC over stdio, enabling LLMs to orchestrate evidence-based security workflows without executing targets or sending network requests.1MIT