Veriql Risk

app.veriqlPublished by veriql.appv1.1.0Updated Nov 1, 2026

Rug, honeypot and wallet-approval risk checks on Solana and EVM, with every penalty driver shown.

VerifiedSTDIODesktop onlyFinanceSecurity & Monitoring

Overview

AI-generated overview

Veriql Risk checks crypto wallets, tokens, launches and signatures for scams, sanctions and frozen funds, returning scored risk verdicts to an assistant.

What you can do
  • Scan a public wallet address for risky token approvals across five EVM chains, with a 0-100 score and USD value at risk
  • Check a token contract for honeypot, tax, mintable supply, hidden owner and proxy risks
  • Score a token or mint launch for safety with itemised penalty drivers
  • Screen a payee address for OFAC sanctions, Drain Watch listings and Tether or Circle freezes before sending funds
  • Decode an approve, Permit, Permit2, EIP-7702, transfer or revoke signature and return block, warn or allow
  • Check whether Tether or Circle froze an address and whether it received USDT from a frozen address
When to use it
Useful when an assistant helps with on-chain due diligence: vetting a wallet before interacting with it, checking a token before buying, screening a recipient before a transfer, or reviewing a transaction signature before signing. It suits crypto users who want plain-English risk flags rather than raw chain data.
Requirements
Runs locally via npx from the npm package veriql-mcp over stdio. Requires a Veriql Risk API key in the VERIQL_API_KEY environment variable; a free key is issued at the provider's site. VERIQL_BASE_URL is optional and only needed for self-hosting. Network access to the Veriql API is required.
Before you install
The API key is a secret passed in VERIQL_API_KEY. Wallet addresses, token contracts and signature payloads you submit are sent to the Veriql service. Results are advisory: an incomplete payee answer is not a clean result, and undecodable signatures are blocked by default. Freeze and exposure findings indicate exposure, not guilt. The freeze check is free and needs no key.

Installation

In SourceWeft

  1. Open Veriql Risk in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Tools

6

veriql_scan

Veriql wallet scan

Scan a public wallet address for risky token approvals across 5 EVM chains (Ethereum, BNB Chain, Polygon, Arbitrum, Base). Returns a 0-100 Security Score with itemised drivers, every risky approval, and a best-effort USD value-at-risk.

Parametersaddressrequired

veriql_token

Veriql token check

Check a token contract for honeypot, punishing taxes, mintable supply, hidden owner and proxy risks, each surfaced as a plain-English flag. EVM chains + Tron.

ParametersaddressrequiredchainId

veriql_launch

Veriql launch-safety score

A transparent 0-100 launch-safety score for a token/mint with itemised penalty drivers and full metrics. EVM chains + Tron + Solana.

ParametersaddressrequiredchainId

veriql_payee

Veriql payee check

Before sending money to an address: is it OFAC-sanctioned, on Drain Watch, or frozen by Tether or Circle (funds sent there can never leave). Answers do_not_pay, no_known_risk or incomplete, and incomplete is not a clean result. EVM, Bitcoin, Solana, Tron.

Parametersaddressrequired

veriql_signature

Veriql signature check

Before signing: decodes an approve, Permit, Permit2, EIP-7702 delegation, transfer or revoke, checks who gains the power against OFAC and Drain Watch, and answers block, warn or allow. Anything it cannot decode is block.

Parameterspayloadrequired

veriql_freeze

Veriql freeze check

Has Tether or Circle frozen this address, read straight off the issuer's contract, and did it receive USDT directly from an address Tether froze (exposure, not guilt). EVM and Tron. Free, no key needed.

Parametersaddressrequired

Version history

3
  1. v1.1.0LatestOct 31, 2026
  2. v1.0.2Oct 29, 2026
  3. v1.0.1Oct 10, 2026

Score

65% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts
  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts

    Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.

  • License10 pts

    Declare a license in the repository or the registry entry.