OneKeyAway: who controls this contract

com.appin60.onekeyawayPublished by onekeyaway.appin60.comOfficial publisherv1.0.0Updated Oct 24, 2026

Who can change an EVM contract or Safe: proxy admin, owner, Safe signers, timelock. Free alerts.

VerifiedStreamable HTTPWeb executableFinanceSecurity & Monitoring

Overview

AI-generated overview

Lets an assistant map who controls an EVM contract or Safe and set up free email alerts when that control changes.

What you can do
The control_map tool traces the on-chain control path of an EVM contract or Safe: proxy type and implementation, proxy admin, beacon owner, owner(), DEFAULT_ADMIN_ROLE holders, Aave PoolAddressesProvider owner, and Morpho vault curator, guardian and timelock, each resolved through ProxyAdmin, Safe threshold and signers, or timelock delay. The watch_contract tool sends a confirmation email and then alerts when the implementation, proxy admin, owner, admin role holders, Safe signers, threshold, modules or guard, or Morpho vault timelock change. Watches are checked about every 15 minutes.
When to use it
Useful when assessing the upgrade and admin risk of a deployed contract or Safe, or when you want to be notified if control of a contract you rely on changes hands.
Requirements
A remote streamable HTTP endpoint; no authentication, environment variables or headers are declared. watch_contract needs an email address to send the confirmation and alerts to.
Before you install
watch_contract sends email to the address you give it, so only use your own address; it allows up to 3 watched contracts per email. Alerts are checked about every 15 minutes, so they are not real-time.

Installation

In SourceWeft

  1. Open OneKeyAway: who controls this contract in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/com.appin60.onekeyaway%2Fcontrol/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "onekeyaway-who-controls-this-contract": {
      "type": "http",
      "url": "https://onekeyaway.appin60.com/mcp"
    }
  }
}

Tools

2

control_map

Who controls this contract

On-chain control path of an EVM contract or Safe: proxy type and implementation; proxy admin, beacon owner, owner(), DEFAULT_ADMIN_ROLE holders, Aave PoolAddressesProvider owner, Morpho vault curator/guardian/timelock; each resolved through ProxyAdmin, Safe threshold and signers, timelock delay or Avocado wallet; plus a verdict (SINGLE KEY, MULTISIG NO TIMELOCK, TIMELOCKED, UNRESOLVED). For a Safe address: signers, threshold, modules, guard, fallback handler, singleton. Chains: ethereum (1), optimism (10), bsc (56), unichain (130), polygon (137), sonic (146), zksync (324), hyperevm (999), base (8453), arbitrum (42161), avalanche (43114), linea (59144), berachain (80094), blast (81457), katana (747474). Free, 100 calls/day.

Parameterschainrequiredaddressrequired

watch_contract

Email me if control of this contract changes

Free alerts (up to 3 contracts per email): sends a confirmation email, then an alert when the implementation, proxy admin, owner, DEFAULT_ADMIN_ROLE holders, Safe signers/threshold/modules/guard or Morpho vault timelock change. Checked about every 15 minutes. Only use with the user's own email address and their explicit consent.

Parameterschainrequiredemailrequiredaddressrequired

Version history

1
  1. v1.0.0LatestOct 13, 2026

Score

72% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts

    Publish an icon in the registry entry.

  • Documentation15 pts

    Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.

  • LicenseNot applicable

    A hosted service is used under its provider's terms, so no license is expected here. This check is left out of the percentage.