Skip to main content
Glama
token-honeypot-audit-mcp

token-honeypot-audit-mcp

Token Honeypot Detector, Smart Contract Audit & AML MCP Server

MCP Compatible Zero Dependencies Free Tier Unlimited Pass License: MIT

Pre-flight 0x token honeypot & tax scanner, OFAC/sanctions wallet AML screening, DEX order-flow alpha, 3-in-1 token due diligence & executable Base swap calldata MCP.

Searching for a Token Honeypot MCP, Smart Contract Security Audit MCP, or Base DeFi Safety MCP server? token-honeypot-audit-mcp protects AI wallets and crypto researchers from rugpulls, hidden sell taxes, malicious URLs, and sanctioned addresses — while delivering live DexScreener order-flow alpha and executable DEX swap quotes.


Why Use token-honeypot-audit-mcp?

  • Honeypot, Tax & Drainer Scanner (security_audit) — Audits any 0x... contract on Base, Ethereum, Arbitrum, BSC, Polygon, or Optimism (GoPlus + DexScreener) OR scans web URLs for phishing/prompt-injection traps.

  • OFAC & Sanctions AML Check (compliance_check) — Screens wallet addresses and entities against sanctions & high-risk compliance lists before signing transactions.

  • DEX Order-Flow & Institutional Due Diligence (token_alpha, token_due_diligence) — Buy/sell pressure, liquidity depth, FDV velocity, plus a composite A–F investment grade combining on-chain security + DEX liquidity + social sentiment.

  • Free Executable DEX Swap Quotes (defi_swap_quote) — Generates live cross-chain/same-chain EVM swap calldata via Relay Instant Solver.

  • 2 Free Calls / Day Out of the Box — Works immediately with zero configuration and no API key required.

  • Instant Unlimited Upgrade — Need high-volume production calls? Grab an instant API key at https://agent-kiosk.vercel.app/buy ($1 Starter 7-Day Pass or $5 Pro 30-Day Pass) or pay per request natively via x402 (USDC on Base).


Related MCP server: evmSDK MCP Server

Option 1: Zero-Install Remote MCP URL (Fastest)

Connect directly via Streamable-HTTP MCP without installing anything locally:

  • Free Tier (2 Free Calls/Day, Zero Config):

    https://agent-kiosk.vercel.app/mcp
  • Paid Unlimited URL (With Prepaid Pass Key):

    https://agent-kiosk.vercel.app/mcp?api_key=ak_live_YOUR_KEY_HERE

Get an Instant API Key in 10 Seconds: https://agent-kiosk.vercel.app/buy

  • $1.00 USDC — 7-Day Starter Pass (Instant ak_live_... key)

  • $5.00 USDC — 30-Day Pro Pass (Full unmasked datasets across all endpoints)


Option 2: Local npx / Stdio Setup (Claude Desktop, Cursor, Codex)

This package is pure Node.js >= 18 with zero external npm dependencies, exposing only the 5 focused tools for this workflow so your LLM context window stays lean.

Claude Desktop (claude_desktop_config.json)

{
  "mcpServers": {
    "token-honeypot-audit-mcp": {
      "command": "npx",
      "args": ["-y", "github:ralf9090/token-honeypot-audit-mcp"],
      "env": {
        "AGENT_KIOSK_API_KEY": ""
      }
    }
  }
}

(Leave AGENT_KIOSK_API_KEY empty for 2 free calls/day, or paste your ak_live_... key from agent-kiosk.vercel.app/buy for unlimited access.)

Cursor (.cursor/mcp.json)

{
  "mcpServers": {
    "token-honeypot-audit-mcp": {
      "command": "npx",
      "args": ["-y", "github:ralf9090/token-honeypot-audit-mcp"],
      "env": {
        "AGENT_KIOSK_API_KEY": "ak_live_OPTIONAL_PASS_KEY"
      }
    }
  }
}

OpenAI Codex CLI (~/.codex/config.toml)

[mcp_servers.token_honeypot_audit_mcp]
command = "npx"
args = ["-y", "github:ralf9090/token-honeypot-audit-mcp"]
env = { AGENT_KIOSK_API_KEY = "" }

Run Directly via git clone + node index.js

git clone https://github.com/ralf9090/token-honeypot-audit-mcp.git
cd token-honeypot-audit-mcp
node index.js

Included MCP Tools (5)

security_audit

Pre-flight security and scam radar for AI agents. Audits 0x smart contracts/tokens (honeypot check, buy/sell tax, mintable risk, DEX liquidity via GoPlus & DexScreener) or web URLs (phishing, wallet drainers, prompt injection).

Parameter

Type

Required

Description

target

string

Yes

0x... token/contract address OR https://... URL to audit

chain

base | ethereum | bsc | arbitrum | polygon | optimism

No

Blockchain network when target is a 0x address (default: 'base')

x_api_key

string

No

Optional ak_live_... 30-day Prepaid API Pass key to unlock the full unmasked dataset

compliance_check

Institutional AML, Sanctions (OFAC), Phishing, Mixer, and Malicious Counterparty Compliance Screening ($0.05 USDC). Screens any 0x EVM address against GoPlus Security (Base + Ethereum) and 4-chain RPC footprint before autonomous agents execute transfers.

Parameter

Type

Required

Description

address

string

Yes

0x... 40-hex EVM wallet or contract address to screen for AML/sanctions

x_api_key

string

No

Optional ak_live_... 30-day Prepaid API Pass key to unlock the full unmasked dataset

token_alpha

Real-time crypto & DeFi order-flow intelligence. Analyzes buy vs. sell transaction pressure, liquidity depth, volume velocity, FDV, and top DEX pools for any token ticker or contract address.

Parameter

Type

Required

Description

query

string

Yes

Token symbol (e.g., 'AERO', 'PEPE', 'VIRTUAL') or contract address (0x...)

chain

all | base | ethereum | solana | arbitrum | bsc

No

Optional chain filter (default: 'all')

x_api_key

string

No

Optional ak_live_... 30-day Prepaid API Pass key to unlock the full unmasked dataset

token_due_diligence

Institutional 3-in-1 Token Due Diligence Report ($0.10 USDC). Combines GoPlus on-chain honeypot/tax security audit, DexScreener DEX order-flow alpha & liquidity depth, and live Reddit/HN social sentiment into a composite investment grade (A-F).

Parameter

Type

Required

Description

query

string

Yes

Token symbol (e.g., 'AERO', 'VIRTUAL', 'PEPE') or 0x contract address

chain

base | ethereum | solana | arbitrum | bsc | all

No

Blockchain network (default: 'base')

x_api_key

string

No

Optional ak_live_... 30-day Prepaid API Pass key to unlock the full unmasked dataset

defi_swap_quote

Executable DeFi Swap & Cross-Chain Bridge Action Calldata Builder ($0.05 USDC). Queries LI.FI and ParaSwap aggregators to compute the best DEX/Bridge route and returns ready-to-sign EVM transaction calldata (to, data, value, gasLimit) on Base, Ethereum, Arbitrum, Polygon, and Optimism.

Parameter

Type

Required

Description

from_token

string

Yes

Source token symbol (e.g., 'USDC', 'ETH', 'AERO') or 0x contract address

to_token

string

Yes

Destination token symbol (e.g., 'ETH', 'USDC', 'AERO', 'cbBTC') or 0x address

amount

string

No

Amount of from_token to swap (human-readable e.g. '10' or atomic units)

from_chain

base | ethereum | arbitrum | polygon | optimism

No

Source blockchain network (default: 'base')

to_chain

base | ethereum | arbitrum | polygon | optimism

No

Destination blockchain network (default: same as from_chain)

wallet

string

No

Optional 0x sender wallet address for transaction simulation

x_api_key

string

No

Optional ak_live_... 30-day Prepaid API Pass key to unlock the full unmasked dataset


Example Prompts

  • "Audit 0x940181a94A35A4569E4529A3CDfB74e38FD98631 on Base for honeypot risk, buy/sell taxes, and mint permissions."

  • "Run a full 3-in-1 token_due_diligence report on VIRTUAL on Base and give me its safety grade."

  • "Check compliance_check on wallet 0xd8dA6BF26964aF9D7eEd9e03E53415D37aA96045 and quote a 100 USDC -> WETH swap on Base."


Pricing & Rate Limits

Tier

Cost

Quota

Setup

Free Trial

$0

2 Free Calls / Day

Zero config — works out of the box

Starter Pass

$1 USDC

7 Days Unlimited

Get ak_live_... at agent-kiosk.vercel.app/buy

Pro Pass

$5 USDC

30 Days Unlimited

Get ak_live_... at agent-kiosk.vercel.app/buy

x402 Pay-Per-Call

$0.008–$0.10

Unlimited autonomous

Pass payment_signature (Base USDC EIP-3009)


License

MIT © ralf9090 — Powered by Agent Kiosk (Upgrade / Buy API Key).

Available Tools

5 tools
compliance_checkA
Read-onlyIdempotent
Inspect

Institutional AML, Sanctions (OFAC), Phishing, Mixer, and Malicious Counterparty Compliance Screening ($0.05 USDC). Screens any 0x EVM address against GoPlus Security (Base + Ethereum) and 4-chain RPC footprint before autonomous agents execute transfers.

Inputs: address (required), x_api_key, payment_signature.

defi_swap_quoteA
Read-onlyIdempotent
Inspect

Executable DeFi Swap & Cross-Chain Bridge Action Calldata Builder ($0.05 USDC). Queries LI.FI and ParaSwap aggregators to compute the best DEX/Bridge route and returns ready-to-sign EVM transaction calldata (to, data, value, gasLimit) on Base, Ethereum, Arbitrum, Polygon, and Optimism.

Inputs: to_token (required), from_token (required), amount, wallet, +4 more.

security_auditB
Read-onlyIdempotent
Inspect

Pre-flight security and scam radar for AI agents. Audits 0x smart contracts/tokens (honeypot check, buy/sell tax, mintable risk, DEX liquidity via GoPlus & DexScreener) or web URLs (phishing, wallet drainers, prompt injection).

Inputs: target (required), chain, x_api_key, payment_signature.

token_alphaB
Read-onlyIdempotent
Inspect

Real-time crypto & DeFi order-flow intelligence. Analyzes buy vs. sell transaction pressure, liquidity depth, volume velocity, FDV, and top DEX pools for any token ticker or contract address.

Inputs: query (required), chain, x_api_key, payment_signature.

token_due_diligenceA
Read-onlyIdempotent
Inspect

Institutional 3-in-1 Token Due Diligence Report ($0.10 USDC). Combines GoPlus on-chain honeypot/tax security audit, DexScreener DEX order-flow alpha & liquidity depth, and live Reddit/HN social sentiment into a composite investment grade (A-F).

Inputs: query (required), chain, x_api_key, payment_signature.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

Loading tool schema changelog…

    TDQS

    A3.7/5.0

    Scored across 5 tools

    Disambiguation4/5

    Most tools target distinct actions: address compliance screening, order-flow analysis, and swap calldata building are clearly separate. The main overlap is token_due_diligence, which bundles a security_audit and token_alpha-style analysis into a composite report, so an agent could hesitate between the single-purpose tools and the bundled one. Descriptions do clarify the paid composite nature, keeping confusion limited.

    Naming Consistency4/5

    All names use snake_case noun phrases and are readable, but prefixes are inconsistent: security_audit and compliance_check lack the domain prefix used by token_alpha, token_due_diligence, and defi_swap_quote. The mix of action-oriented names (audit, check) with descriptive names (alpha, quote) is a minor deviation rather than a real inconsistency.

    Tool Count5/5

    Five tools is well-scoped for a token audit and DeFi intelligence server. Each tool maps to a distinct workflow: security inspection, compliance screening, market alpha, bundled due diligence, and executable swap quoting. No tool feels redundant enough to remove.

    Completeness4/5

    The surface covers core audit, compliance, market intelligence, due diligence, and execution-preparation workflows for EVM tokens. Minor gaps include no batch auditing, no direct token metadata or price lookup, and no historical or portfolio views, but these are not blocking for the stated honeypot/audit purpose.

    Maintenance

    ActivityMaintained
    ResponsivenessNo recent community issues

    Related MCP Connectors

    Related MCP Servers

    • A
      license
      A
      quality
      D
      maintenance
      Non-custodial agent wallet with a transaction preflight that decodes an unsigned EVM tx and flags drain patterns (unlimited/large approval, approve-all, token & NFT transferFrom, proxy upgrade, on-chain permit, approvals hidden in multicall) before signing.
      9
      110 PyPI
      1
      MIT
    • F
      license
      Not graded
      quality
      B
      maintenance
      Enables agents to interact with Ethereum, Base and configurable EVM chains over stdio using the shared command catalog, covering contract reads, prepared and policy-guarded execution, wallet management, Socket swaps and bridging, simulation, monitoring and saved contracts.
      -
    • A
      license
      Not graded
      quality
      B
      maintenance
      Exposes typed crypto-security tools — token risk scoring, wallet forensics, deployer reputation, sentiment, and report generation — to MCP-capable agents over streamable HTTP or stdio. Gates premium calls behind per-request x402 crypto micropayments, delegating verification and settlement to a self-hosted facilitator and failing closed when payment cannot be confirmed.
      MIT
    • A
      license
      Not graded
      quality
      C
      maintenance
      Exposes read-only local analysis tools for source auditing, web traffic review, binary reverse engineering, exploit scaffolding, OSINT, and reporting via JSON-RPC over stdio, enabling LLMs to orchestrate evidence-based security workflows without executing targets or sending network requests.
      1
      MIT