@true402.dev/mcp-server
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| SERVER_URL | No | true402 API base. Override to point at a self-hosted instance. | https://true402.dev/api |
| WALLET_PRIVATE_KEY | No | A funded Base wallet private key used to sign x402 payments. Needs USDC (gas is sponsored by the facilitator — no ETH required). Without it, paid tools return the 402 requirements instead of paying. |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Features and capabilities supported by this server
Protocol revision2025-11-25
| Capability | Details |
|---|---|
| tools | {
"listChanged": true
} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| list_modelsA | List every LLM model available through true402's pay-per-call inference, with live per-token pricing (3% over provider cost, min $0.0001/request). Returns each model's id, provider, and input/output token prices across OpenAI, Anthropic, Google, Groq, Mistral and Together — so an agent can pick a model and know the exact cost before paying via x402 (USDC on Base, no account or API key). |
| chatA | Send a chat completion request to an LLM via true402 (PAID x402 service, USDC on Base). Requires a funded wallet (WALLET_PRIVATE_KEY) on the MCP server. |
| seo_audit | Audit web pages for SEO + GEO (generative-engine optimization). POST |
| web_extract | Fetch a web page and return clean readable text + light markdown + title/description/links. POST |
| link_preview | Fetch a URL and return its Open Graph card (title, description, image, site name, favicon, canonical). POST |
| screenshot | Render a web page in headless Chromium and return a PNG screenshot as base64 JSON. POST |
| quant | Deterministic finance calculators in one dispatch endpoint. POST |
| prediction_markets | Keyword-search live prediction markets across Polymarket, Limitless, and Manifold; returns normalized markets (probability outcomes, USD volume, close date). POST |
| defi_yields | Filter + rank live DeFi lending/staking pool APYs across every protocol/chain (DefiLlama, ~15k pools). POST |
| backlinks | A domain's backlink profile: referring domains and pages, the dofollow split that carries authority, authority rank, spam score, broken backlinks, and link composition by TLD, type, attribute and country. POST |
| keyword_volume | Monthly search volume, CPC and competition for a batch of keywords, with a 12-month trend per term. Send up to 200 keywords in ONE call — they are priced per call, not per keyword. POST |
| ranked_keywords | Which keywords a domain already ranks for in organic search, with position, search volume, CPC and competition. POST |
| serp | Live Google organic results for one query: the top 10–30 results with position, domain, URL, title and snippet, the SERP features present, and — with |
| keyword_ideas | Related and long-tail keyword ideas for a seed term, each with search volume, CPC, competition and search intent. POST |
| robots_check | Fetch a site's robots.txt + llms.txt and report whether the major AI crawlers are allowed/blocked, plus sitemaps. POST |
| headers_check | Fetch a URL and analyse its HTTP security headers (HSTS, CSP, X-Frame-Options, …) into present/missing + a 0–100 score. POST |
| token_safety | Rug/honeypot safety check for an ERC-20 token on Base (from on-chain reads — no API key): ERC-20 conformance, ownership renounce, mint-capability, WETH/USDC liquidity depth across Uniswap V3 + Aerodrome, and a buy/sell honeypot simulation (a gas-free eth_call that round-trips a tiny WETH→token→WETH trade to detect tokens you can buy but not sell). Returns a 0–100 score + risk flags. POST |
| new_pairs | Recently-created Base DEX pairs (Uniswap V3 + Aerodrome) from a background log-watcher — fresh token launches for trading agents/snipers. POST |
| liquidity_pulls | Liquidity-pull / rug alerts on Base — Burn (liquidity-removal) events on recently-launched DEX pools (the new-pairs watcher's set). POST |
| liquidity_history | Observed liquidity history for a Base token, from our own DEX archive. POST |
| tx_preflight | Check a Base transaction BEFORE signing it. POST an UNSIGNED transaction |
| whale_swaps | Recent large ($-value) DEX Swap events (Uniswap V3 + Aerodrome) on the Base pools the new-pairs watcher tracks — a whale-following / copy-trading signal. POST |
| token_dossier | Everything we know about a Base ERC-20, in one call. Contains the full Token Report (ERC-20 conformance, ownership, mint-capability, liquidity depth, buy/sell honeypot simulation, live rug + whale activity, avoid|caution|ok verdict) PLUS two sections the cheaper report cannot carry: the deployer's reputation (wallet age, prior deployments) and the durable liquidity archive for this token (every pool, every removal with amount/block/tx, and the other tokens drained in the SAME transaction — operator linkage). Those two are what distinguish a bad token from a serial rugger. Each section reports its own status and |
| token_report | The flagship composite for a Base ERC-20 — one call instead of five. Runs the full token-safety check (ERC-20 conformance, ownership, mint-capability, WETH/USDC liquidity depth, buy/sell honeypot simulation), enriches it with the live recent liquidity-removal (rug) + whale-swap activity on the token, and returns a single avoid|caution|ok verdict with reasons plus the underlying reports. POST |
| address_safety | Structural safety profile for ANY Base address — an EOA or an arbitrary contract — before an agent sends funds to it, approves it, or calls it. Returns contract-vs-EOA, ETH + USDC balance, tx-count (activity), and for contracts: whether it is a recognised ERC-20, ownership state, a mint() selector, and whether it is an EIP-1967 upgradeable proxy (its logic can be swapped after you trust it). Coarse risk band + flags. On-chain reads only — no API key. POST |
| deployer_check | Resolves the deployer of a Base token and profiles that wallet's reputation: age (tx-count), balance, and whether it is a FRESH throwaway spun up for the launch (a common rug setup) — the discriminating caution. Reputation context a structural/honeypot check can't see. The creator is resolved from the chain itself (its creation receipt), so no explorer is needed. On Base the contracts-shipped count and deep mode are unavailable for now: both need an explorer's list of the contracts a wallet created, which Base lacks today, so contractsCreated comes back null and the answer's |
| token_safety_ethereum | Rug/honeypot safety check for an ERC-20 token on Ethereum (from on-chain reads — no API key): ERC-20 conformance, ownership renounce, mint-capability, WETH/USDC liquidity depth across uniswap-v3 + uniswap-v2, and a buy/sell honeypot simulation (a gas-free eth_call that round-trips a tiny WETH→token→WETH trade to detect tokens you can buy but not sell). Returns a 0–100 score + risk flags. POST |
| token_report_ethereum | The flagship composite for an Ethereum ERC-20 — one call instead of five. Runs the full token-safety check (ERC-20 conformance, ownership, mint-capability, WETH/USDC liquidity depth, buy/sell honeypot simulation), and returns a single avoid|caution|ok verdict with reasons plus the underlying reports. POST |
| address_safety_ethereum | Structural safety profile for ANY Ethereum address — an EOA or an arbitrary contract — before an agent sends funds to it, approves it, or calls it. Returns contract-vs-EOA, ETH + USDC balance, tx-count (activity), and for contracts: whether it is a recognised ERC-20, ownership state, a mint() selector, and whether it is an EIP-1967 upgradeable proxy (its logic can be swapped after you trust it). Coarse risk band + flags. On-chain reads only — no API key. POST |
| deployer_check_ethereum | Resolves the deployer of an Ethereum token and profiles that wallet's reputation: age (tx-count), balance, and whether it is a FRESH throwaway spun up for the launch (a common rug setup) — the discriminating caution. Reputation context a structural/honeypot check can't see. POST |
| token_safety_bsc | Rug/honeypot safety check for an ERC-20 token on BNB Smart Chain (BSC) (from on-chain reads — no API key): ERC-20 conformance, ownership renounce, mint-capability, WBNB/USDC liquidity depth across pancakeswap-v3 + pancakeswap-v2, and a buy/sell honeypot simulation (a gas-free eth_call that round-trips a tiny WETH→token→WETH trade to detect tokens you can buy but not sell). Returns a 0–100 score + risk flags. POST |
| token_report_bsc | The flagship composite for a BNB Smart Chain (BSC) ERC-20 — one call instead of five. Runs the full token-safety check (ERC-20 conformance, ownership, mint-capability, WBNB/USDC liquidity depth, buy/sell honeypot simulation), and returns a single avoid|caution|ok verdict with reasons plus the underlying reports. POST |
| address_safety_bsc | Structural safety profile for ANY BNB Smart Chain (BSC) address — an EOA or an arbitrary contract — before an agent sends funds to it, approves it, or calls it. Returns contract-vs-EOA, ETH + USDC balance, tx-count (activity), and for contracts: whether it is a recognised ERC-20, ownership state, a mint() selector, and whether it is an EIP-1967 upgradeable proxy (its logic can be swapped after you trust it). Coarse risk band + flags. On-chain reads only — no API key. POST |
| token_safety_solana | Rug/trap safety check for a Solana SPL or Token-2022 token: mint authority (supply inflation), freeze authority (the Solana honeypot — the issuer can freeze your token account so you cannot sell), Token-2022 extensions (permanentDelegate = tokens can be moved out of your wallet, transferHook = issuer code can reject your transfer, transferFee) and pool liquidity depth. Returns a 0–100 score + risk flags. POST |
| honeypot | Same check and price as the |
| address_risk | Same check and price as the |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
TDQS
Scored across 14 tools
Each tool targets a distinct operation: address safety, deployer reputation, web checks, token analysis, on-chain monitoring, and LLM inference. There is no functional overlap between any two tools.
Most tools use a descriptive verb_noun pattern (e.g., address_safety, token_report). The exception is 'chat', which breaks the pattern but is still clear and functional.
14 tools is well-scoped for a server covering blockchain safety, web diagnostics, and LLM services. Each tool addresses a specific need without unnecessary redundancy.
The set covers the full lifecycle of its domain: individual checks (address, token, deployer), aggregated reports (token_report), on-chain monitoring (new_pairs, liquidity_pulls, whale_swaps), web analysis (link_preview, seo_audit, headers_check, robots_check), and LLM capabilities (chat, list_models). No obvious gaps.