Skip to main content
Glama

CryptoGuard

Crypto risk scanner that detected every major crash in backtesting — 27 days early, on average.

Scan any token by name, ticker, or contract address. Get a deterministic verdict: PROCEED / CAUTION / BLOCK.

Version: 0.6.0  |  Live API: https://gpartin--cryptoguard-api-fastapi-app.modal.run  |  Free tier: 5 calls/day  |  MCP: 7 tools


Backtest Results

Tested against 7 historical crypto crashes (LUNA, FTX, Celsius, 3AC, UST, SOL/FTX, TITAN) and 4 calm-market control periods. Full methodology and data: CryptoGuard backtest.

Method

Recall

Avg Lead Time

False Positive Rate

CryptoGuard (WaveGuard engine)

100% (7/7)

27.4 days

6.1%

Z-score baseline

100% (7/7)

28.4 days

29.9%

Rolling volatility

86% (6/7)

15.5 days

4.0%

5× fewer false alarms than statistical baselines with the same recall.

Example: FTX Collapse (November 2022)

On October 16, 2022, FTT was trading at $23.73. Z-score analysis saw nothing (score 1.20, PROCEED).

CryptoGuard flagged CAUTION (anomaly score 4.72). The next day it escalated to BLOCK.

23 days later, FTX collapsed. FTT fell 94%.


Related MCP server: aegis-defi

Install

pip install CryptoGuardClient

Quick Start

from cryptoguard import CryptoGuardClient

client = CryptoGuardClient()

# Validate a trade — primary use case
result = client.validate_trade("bitcoin", action="buy", amount_usd=1000)
print(result["verdict"])  # PROCEED / CAUTION / BLOCK

# Scan a token
scan = client.scan("solana")
print(scan["risk_level"])

# Rug pull check
rug = client.rug_check("solana", "0xabc123...")
print(rug["risk_score"])

# Check free tier remaining
print(client.free_tier())

Primary Endpoint

curl -X POST https://gpartin--cryptoguard-api-fastapi-app.modal.run/v1/validate-trade \
  -H "Content-Type: application/json" \
  -d '{"token": "solana", "action": "buy", "amount_usd": 500}'

First 5 calls/day are free. After that: $0.05/call via x402 USDC, or via RapidAPI.

MCP Integration (Claude Desktop / AI Agents)

CryptoGuard is an MCP server with 7 tools. Works with Claude Desktop, Cursor, or any MCP client.

Option 1: Remote HTTP (no install)

{
  "mcpServers": {
    "cryptoguard": {
      "url": "https://gpartin--cryptoguard-api-fastapi-app.modal.run/mcp",
      "transport": "http"
    }
  }
}

Option 2: uvx

{
  "mcpServers": {
    "cryptoguard": {
      "command": "uvx",
      "args": ["--from", "CryptoGuardClient", "cryptoguard-mcp"]
    }
  }
}

Option 3: pip install

{
  "mcpServers": {
    "cryptoguard": {
      "command": "python",
      "args": ["-m", "mcp_server.server"]
    }
  }
}

MCP Tools

Tool

Description

cryptoguard_validate_trade

Validate a trade → PROCEED / CAUTION / BLOCK

cryptoguard_scan_token

Anomaly scan for any token

cryptoguard_validate_trade_plus

Premium stateless decision bundle with what-if analysis

cryptoguard_counterfactual_trade

What-if sensitivity analysis with tipping-point guidance

cryptoguard_rug_check

DEX pair rug pull risk assessment

cryptoguard_search

Search tokens by name/symbol/address

cryptoguard_health

Service health check

All Endpoints

Method

Endpoint

Price

Description

POST

/v1/validate-trade

5 free/day, then $0.05

Primary — single verdict for AI agents

POST

/v1/validate-trades

5 free/day, then $0.05

Batch validate up to 20 trades

GET

/v1/scan/{coin_id}

5 free/day, then $0.05

Single token anomaly scan

POST

/v1/portfolio/scan

5 free/day, then $0.05

Portfolio batch scan (up to 50 tokens)

GET

/v1/scan/{coin_id}/history

5 free/day, then $0.05

Historical self-comparison

GET

/v1/rug-check/{chain}/{pair_address}

5 free/day, then $0.05

Rug pull risk assessment

GET

/v1/dex/new-pairs

5 free/day, then $0.05

New DEX pair discovery

GET

/v1/dex/search

5 free/day, then $0.05

DexScreener pair search

GET

/v1/dex/pair/{chain}/{pair_address}

5 free/day, then $0.05

DEX pair details

GET

/v1/dex/token/{token_address}

5 free/day, then $0.05

DEX token info

POST

/v1/intel/validate-trade-plus

$0.10/call

Premium stateless decision bundle

POST

/v1/intel/counterfactual-trade

$0.08/call

What-if sensitivity analysis

GET

/v1/track-record

Free

Historical prediction track record

POST

/v1/trend-detect

5 free/day, then $0.05

Physics-based trend detection

POST

/v1/regime-detect

5 free/day, then $0.05

Regime change detection

POST

/v1/correlation-scan

5 free/day, then $0.05

Anomalous correlation detection

POST

/v1/volatility-forecast

5 free/day, then $0.05

Physics-based volatility forecast

POST

/v1/spectral-scan

5 free/day, then $0.05

Hidden periodicity detection

POST

/v1/whale-detector

5 free/day, then $0.05

Whale activity detection

POST

/v1/momentum-pulse

5 free/day, then $0.05

Momentum pulse detection

GET

/v1/search?q=...

Free

Search tokens by name

GET

/v1/free-tier

Free

Check remaining free calls

GET

/v1/pricing

Free

Pricing details

GET

/v1/stats

Free

Service statistics

GET

/health

Free

Health check

POST

/mcp

Free

MCP endpoint (JSON-RPC 2.0)

GET

/mcp/tools

Free

List MCP tools

GET

/v1/agent/tools

Free

Agent tool catalog

GET

/v1/agent/mcp

Free

MCP server metadata

How It Works

  1. Resolves token input — CoinGecko ID, ticker symbol, or contract address (7 chains)

  2. Fetches live market data from CoinGecko + DexScreener

  3. Builds baseline from tier-matched peers (microcaps vs microcaps, large caps vs large caps)

  4. Extracts 10 time-series features per day (price ratios, volume dynamics, momentum, volatility)

  5. Runs anomaly detection — GPU-accelerated WaveGuard engine scores each token against its peer baseline

  6. Multi-check pipeline: peer scan + rug pull + history + CEX/DEX spread + concentration risk

  7. Returns verdict: PROCEED / CAUTION / BLOCK with anomaly scores and top contributing features

CryptoGuard's core scanner is powered by WaveGuard, a general-purpose anomaly detection engine that uses GPU-accelerated wave simulations instead of machine learning. Your token's feature vector is encoded onto a 3D lattice and evolved through coupled wave equations. Normal data produces stable wave patterns; anomalous data produces divergent ones.

The advantage over statistical methods: WaveGuard captures non-linear interactions between features that simple threshold checks miss. This is why it flagged FTT 13 days before z-score analysis in backtesting.

No model training, no drift, no retraining. Deterministic for the same input.

Key Features (v0.6.0)

  • Backtested: 100% recall on 7 historical crashes with 27-day average lead time

  • Free tier: 5 calls/day per IP, no signup required

  • 2 payment options: x402 USDC per-scan ($0.05) or RapidAPI plans

  • Deterministic: Same input always produces same verdict

  • MCP server: 7 tools for AI agent integration (stdio + HTTP)

  • Python SDK: pip install CryptoGuardClient with typed exceptions

  • Physics Intelligence: 7 endpoints for trend/regime/volatility/spectral/whale/momentum analysis

  • Intel endpoints: Premium validate-trade-plus ($0.10) and counterfactual-trade ($0.08)

  • Contract resolution: Accepts name, ticker, or contract address across 7 chains

  • Batch validation: Up to 20 trades or 50 tokens per call

  • Rug pull detection: DexScreener-powered liquidity and holder analysis

  • 30 REST endpoints: Complete crypto risk intelligence API

Pricing

Tier

Cost

Limit

Auth

Free

$0

5 calls/day per IP

None

Per-scan

$0.05/call

Unlimited

x402 USDC micropayment

RapidAPI Basic

$0/mo

500K requests

RapidAPI proxy key

RapidAPI Pro

$9.99/mo

10K requests

RapidAPI proxy key

RapidAPI Ultra

$29.99/mo

100K requests

RapidAPI proxy key

Architecture

AI Agent / User
    |
    v
CryptoGuard API (Modal, stateless)
    |-- MCP endpoint (7 tools, JSON-RPC 2.0)
    |-- Auth: RapidAPI → API key → x402 (USDC) → Free tier
    |-- Token resolution (name/ticker/address → CoinGecko ID, 7 chains)
    |-- Market data (CoinGecko + DexScreener, cached)
    |-- Physics Intelligence (trend, regime, correlation, volatility, spectral, whale, momentum)
    |-- Intel (validate-trade-plus, counterfactual-trade)
    +-- WaveGuard anomaly engine (GPU-accelerated)

License

MIT

Available Tools

5 tools
cryptoguard_healthA
Read-onlyIdempotent

Check CryptoGuard API health, version, and service status. No payment required. Use this to verify the service is running.

ParametersJSON Schema
NameRequiredDescriptionDefault
verboseNoReturn detailed health info including uptime and version details (default: false).

TDQS

A4.3/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare read-only, idempotent, and non-destructive behavior. The description adds 'No payment required' and specifies what is checked (health, version, status), providing useful context beyond the annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is concise with two short sentences. The first states the core purpose, and the second adds usage guidance. No unnecessary words or repetition.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple health check tool with one optional parameter, strong annotations, and no output schema, the description sufficiently covers purpose, usage, and constraints. Nothing essential is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema has 100% coverage, including a description of the 'verbose' parameter. The tool description adds no additional parameter guidance, so a baseline score of 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool checks CryptoGuard API health, version, and service status, with a specific verb and resource. It is easily distinguished from sibling tools that handle trade validation, token scanning, and searches.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It explicitly says to use this to verify the service is running, providing clear usage context. It does not mention alternatives, but the health check is unique among siblings, so this is sufficient.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

cryptoguard_rug_checkA
Read-onlyIdempotent

Assess rug pull risk for a specific DEX trading pair. Scores 6 risk factors (0-100): liquidity depth, pair age, volume/liquidity ratio, price action, buy/sell imbalance, and metadata.

Example: check if a new Solana pair is a potential rug pull.

ParametersJSON Schema
NameRequiredDescriptionDefault
chainYesBlockchain (solana, ethereum, base, bsc).
pair_addressYesDEX pair contract address.

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, idempotentHint, and destructiveHint=false, establishing safety. The description adds behavioral detail by specifying the six risk factors and the 0-100 scoring scale, which informs the agent what the tool will compute. No contradictions with annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two concise sentences: the first states the purpose and output details, the second gives a practical example. No wasted words, and the most important information is front-loaded.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With strong annotations, complete schema, and a description that names the six risk factors and scoring range, the tool is adequately specified for selection and invocation. The lack of an output schema is partially compensated by the description's reference to 0-100 scores, though exact return structure is not specified.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, with both 'chain' and 'pair_address' already described. The description's example ('new Solana pair') reinforces the parameters but does not add substantive new meaning beyond the schema, so the baseline of 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's purpose: 'Assess rug pull risk for a specific DEX trading pair.' It identifies the resource (DEX pair) and the specific action (rug risk assessment), and the list of six risk factors differentiates it from siblings like validate_trade or scan_token.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides clear context: it is used to evaluate a DEX pair's rug pull risk, with an explicit example ('check if a new Solana pair is a potential rug pull'). It does not name alternatives or state when not to use it, but the use case is sufficiently clear from the tool's focus.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

cryptoguard_scan_tokenA
Read-onlyIdempotent

Scan a single token for anomalous market behavior using WaveGuard physics-based anomaly detection. Compares the token to TIER-MATCHED peers (microcaps vs microcaps, large-caps vs large-caps). Returns anomaly scores, risk level, and explanations.

Example: scan 'solana' to check if its metrics are unusual.

ParametersJSON Schema
NameRequiredDescriptionDefault
coin_idYesCoinGecko coin ID (e.g., 'bitcoin', 'solana', 'pepe').
sensitivityNoAnomaly sensitivity multiplier (default: 1.0). Higher = more sensitive.

TDQS

A4.4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Beyond the readOnlyHint and destructiveHint annotations, the description adds meaningful behavioral context: it performs peer-tier comparison and returns anomaly scores, risk level, and explanations. This goes beyond the safety profile already declared by annotations, giving the agent a clearer picture of the tool's operation and output.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is highly concise, consisting of two sentences plus an example. Every sentence contributes meaningful information: the core functionality, the tier-matching behavior, and the output summary. No fluff or redundancy.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given there is no output schema, the description compensates by listing the return types (anomaly scores, risk level, explanations). It adequately explains the input and the comparison logic, making the tool understandable for a read-only scan operation. It lacks details on rate limits or edge cases, but for this complexity level, it is sufficient.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema already covers both parameters with clear descriptions (coin_id and sensitivity). The description enhances this by providing a concrete example ('scan solana') that demonstrates parameter usage in context, adding value beyond the schema definitions.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool scans a single token for anomalous market behavior using a specific method (WaveGuard physics-based anomaly detection). It also distinguishes itself from sibling tools by specifying tier-matched peer comparison, making it unique among the listed siblings.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The example 'scan solana' provides a concrete use case, making it clear when to use the tool. It implies the tool is for checking anomaly metrics on a single token, but it does not explicitly contrast with alternatives like rug_check or validate_trade, so it lacks explicit exclusions.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

cryptoguard_validate_tradeA
Read-onlyIdempotent

Validate a crypto trade BEFORE execution. Returns a verdict: PROCEED, CAUTION, or BLOCK. Runs 5 checks: peer anomaly scan via WaveGuard physics engine, self-history comparison, rug pull risk assessment, CEX/DEX price cross-check, and concentration risk analysis. Accepts token name, symbol, or contract address.

Example: validate buying $500 of PEPE before executing.

ParametersJSON Schema
NameRequiredDescriptionDefault
tokenYesToken to validate. Can be a name (bitcoin), symbol (BTC), or contract address (0x...).
actionNoTrade action type (default: buy).
chainNoBlockchain for contract address resolution (ethereum, solana, base, bsc, polygon, avalanche, arbitrum).
pair_addressNoDEX pair address for rug pull check.
amount_usdNoTrade amount in USD for concentration risk analysis.

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already establish read-only, idempotent, non-destructive behavior, and the description adds a concrete behavioral model: five named checks and a tri-state verdict. It also implies no state mutation by focusing on pre-execution validation. No contradiction with annotations found.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two concise sentences plus a one-line example, with the core purpose stated first. It lists the five checks efficiently and the example illustrates usage without redundancy. Every word contributes informational value.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a tool with five parameters and no output schema, the description gives enough context to select and invoke it correctly: it explains the verdict output, the checks performed, and the accepted token formats from the schema. It could be slightly stronger by noting that certain parameters like pair_address are conditionally used for one of the five checks, but the overall picture is sufficient.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema provides 100% parameter descriptions, so the baseline is 3. The description adds a concrete example ('buying $500 of PEPE') that maps token and amount_usd, but it doesn't explain parameter-specific formats or dependencies (e.g., that pair_address is needed for the rug pull check) beyond the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with a specific verb ('Validate') and resource ('a crypto trade'), immediately distinguishing this as a pre-execution validation tool. It enumerates the five checks and names the output verdict (PROCEED/CAUTION/BLOCK), clearly differentiating it from the rug_check sibling and signaling that this is the comprehensive trade validation tool.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The instruction to 'validate BEFORE execution' gives clear usage context, and the example ('before executing') reinforces the intended timing. However, it doesn't explicitly exclude alternatives like rug_check for specialized checks or mention validate_trade_plus for potentially deeper validation, so it stops short of a full when/when-not guide.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 5 tool updatesv0.5.0
    • First observedcryptoguard_health
    • First observedcryptoguard_rug_check
    • First observedcryptoguard_scan_token
    • First observedcryptoguard_search
    • First observedcryptoguard_validate_trade

TDQS

A4.4/5.0

Scored across 5 tools

Disambiguation5/5

Each tool has a clearly distinct purpose with no overlap: health check, rug pull risk assessment, token anomaly scanning, token search, and trade validation. The descriptions explicitly differentiate their functions, making it easy for an agent to select the right tool.

Naming Consistency5/5

All tools follow a consistent 'cryptoguard_' prefix with descriptive suffixes (health, rug_check, scan_token, search, validate_trade). This uniform pattern enhances readability and predictability across the toolset.

Tool Count5/5

With 5 tools, this server is well-scoped for crypto security analysis, covering essential functions from health checks to trade validation. Each tool serves a unique and necessary role without bloat or redundancy.

Completeness5/5

The toolset provides complete coverage for crypto risk assessment workflows: service verification, token search, risk scanning, rug pull detection, and trade validation. There are no obvious gaps, enabling agents to handle end-to-end security analysis.

Maintenance

ActivityInactive
ResponsivenessNo issues

Related MCP Connectors

Related MCP Servers

  • A
    license
    A
    quality
    C
    maintenance
    Enables AI agents to scan crypto tokens for rug pulls, scams, and risk using a six-agent consensus system. It provides real-time security audits and risk scoring for tokens on Solana, Ethereum, Base, and BSC.
    6
    40 PyPI
    2
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Provides post-deploy Solana threat intelligence, enabling AI agents to check operators, tokens, and network stats for detecting rug pulls and malicious activity.
    5
    16 npm
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Security layer for AI agents that evaluates transaction intents and returns verdicts (ALLOW/WARN/DENY) using deterministic rules, on-chain checks, and simulation.
    4 npm
    MIT