Cerberus Index

com.cerberusindexPublished by cerberusindex.comOfficial publisherv1.0.0Updated Oct 24, 2026

XRPL token rug-checks, issuer reputation & AMM data for AI agents. Pay-per-call USDC via x402.

VerifiedStreamable HTTPWeb executableFinanceSecurity & MonitoringData & Analytics

Overview

AI-generated overview

Remote MCP server giving AI assistants XRPL token rug-checks, issuer reputation, address risk and AMM market data, paid per call in USDC.

What you can do
  • Check XRPL tokens for clawback, freeze, issuer blackhole status, liquidity and blocklist history, plus holder concentration and issuer domain verification
  • Screen addresses and unsigned transactions across EVM chains and XRPL, and assess third-party MCP endpoints and tools before connecting
  • Resolve token identity across chains, verify prices and peg integrity, and flag impostor tokens
  • Explore tokens, new AMM pools and OHLC candles, quote AMM swaps, find safest executable routes, and read technical trend analysis
  • Watch tokens for danger and collect alerts, verify signed attestations, and submit feature requests
When to use it
Useful when an assistant needs to vet XRPL tokens, issuers, wallets or transactions before acting, or wants market and AMM data on XRPL assets. Also relevant for screening third-party MCP endpoints before an agent trusts them.
Requirements
Runs as a remote streamable HTTP endpoint; no local package or environment variables. Most tools are pay-per-call in USDC via x402, so a funded wallet capable of x402 payments is needed. watch_token returns a subscriber_key required for check_alerts.
Before you install
Many tools cost USDC per call (for example 0.001 to 0.010 USDC), so repeated use spends real money. Verdicts and reputation data are third-party assessments, not guarantees. watch_token and submit_feedback create server-side state tied to your keys; keep the subscriber_key private.

Installation

In SourceWeft

  1. Open Cerberus Index in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/com.cerberusindex%2Fcerberus-index/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "cerberus-index": {
      "type": "http",
      "url": "https://cerberusindex.com/mcp"
    }
  }
}

Tools

20

check_xrpl_token

Live safety verdict for an XRPL token: clawback & global-freeze hard rejects, issuer blackhole status (can supply ever be re-minted?), NoFreeze, pool depth & trading fee, LP-burn fraction (is liquidity locked?), plus Cerberus's proprietary rug blocklist & detection history. Verdicts: unsafe | caution | likely_safe | unknown, with reasons. Covers BOTH XRPL fungible-token standards. `currency` may be a 3-char or 40-char hex trust-line code, OR a 48-char MPTokenIssuanceID — pass an issuance ID and the token is screened as a Multi-Purpose Token instead (issuance locked, clawback, freeze power, allow-listing, transferability, mint headroom and transfer fee), with `issuer` ignored because the issuance ID already identifies it. Price: $0.005 USDC. Missing something? Call `submit_feedback` (free) to request it. Pass `attest=true` to also get an Ed25519-SIGNED attestation of this verdict — portable proof you can log, hand to a counterparty, or verify later with `verify_attestation` (free) or the published key.

Parametersattestissuerrequiredcurrencyrequired

check_issuer_reputation

Reputation for an XRPL issuer: blocklist status + historical detection outcomes. Price: $0.002 USDC. Missing something? Call `submit_feedback` (free) to request it.

Parametersissuerrequired

check_address

Cross-chain address & counterparty risk — one call before you send to, approve, or trust an address. EVM chains (ethereum, base, bsc, polygon, arbitrum, optimism, avalanche, …): sanctions, mixer, phishing, drainer, money-laundering & cybercrime flags aggregated from GoPlus, told whether it's a contract or a wallet. XRP Ledger (r-addresses): Cerberus's own engine — the production rug blocklist, live clawback/global-freeze flags (can this address seize or freeze tokens it issues?), burn-address detection, and prior launch history — coverage no incumbent offers. Chain is auto-detected; pass `chain` to pick the EVM network (default ethereum). Verdict: high_risk | caution | safe | unknown, source named. Price: $0.008 USDC. Missing something? Call `submit_feedback` (free) to request it. Pass `attest=true` to also get an Ed25519-SIGNED attestation of this verdict — portable proof you can log, hand to a counterparty, or verify later with `verify_attestation` (free) or the published key.

Parameterschainattestaddressrequired

check_transaction

Simulate an unsigned XRPL transaction and tell you what it will ACTUALLY do — before you sign it. Pass the transaction JSON; get back (1) its intent in plain language, (2) a live-ledger dry-run (`simulate`): would it succeed, and the exact balance changes per account — computed, never submitted, never signed — and (3) drain vectors flagged: handing over your signing key (SetRegularKey / SignerListSet), disabling your master key, enabling clawback, partial-payment tricks, trustlines to blocklisted issuers, sends to flagged addresses. Verdict: danger | caution | safe | unknown. A transaction that would fail on-chain is reported as such. Price: $0.010 USDC. Missing something? Call `submit_feedback` (free) to request it. Pass `attest=true` to also get an Ed25519-SIGNED attestation of this verdict — portable proof you can log, hand to a counterparty, or verify later with `verify_attestation` (free) or the published key.

Parametersattestaccounttransactionrequired

check_endpoint

Endpoint & tool trust — one call before an agent connects to a third-party MCP server or HTTP tool. Pass the endpoint `url` (and, to unlock the strongest check, its `tools`: the name/description/inputSchema the agent is about to trust). Returns three signals behind one verdict: (1) transport & TLS identity — encrypted, valid chain, not expired or self-signed; (2) domain age via RDAP — freshly-registered hosts are a scam tell; (3) a TOOL-POISONING scan of the tool definitions for the hidden directives that hijack agents — instruction overrides, 'don't tell the user', data exfiltration, secret harvesting, tool-shadowing, and invisible-unicode / homoglyph steganography that a human reviewer can't see. Nobody else screens tool descriptions for injection. Verdict: trusted | caution | untrusted | unknown, with per-finding evidence. Price: $0.008 USDC. Missing something? Call `submit_feedback` (free) to request it. Pass `attest=true` to also get an Ed25519-SIGNED attestation of this verdict — portable proof you can log, hand to a counterparty, or verify later with `verify_attestation` (free) or the published key.

Parametersurlrequiredtoolsattest

token_holders

Holder distribution & concentration risk for an XRPL token: holder count, top-1 and top-10 share of circulating supply, AMM pool excluded from whale math. Flags single-wallet dump risk. Best for newer tokens (large tokens report 'unknown_large' honestly rather than guessing). Price: $0.008 USDC. Missing something? Call `submit_feedback` (free) to request it.

Parametersissuerrequiredcurrencyrequired

verify_issuer_domain

Bidirectional domain verification for an XRPL issuer: decodes the on-chain Domain field and checks the domain's /.well-known/xrp-ledger.toml actually claims the issuer back. verified true/false with reasons — a strong legitimacy signal (its absence is a yellow flag). Price: $0.003 USDC. Missing something? Call `submit_feedback` (free) to request it.

Parametersissuerrequired

resolve_asset

Cross-chain identity for an XRPL token — 'what is this, everywhere it exists?' Resolves the token's real identity across chains and catches IMPOSTORS: a token using a famous symbol (USDC, WBTC, SOLO…) from an issuer that is NOT that asset's canonical deployment is flagged — a fake USDC is a fake USDC on every chain, and a single-chain check misses it. Combines XRPLMeta (the XRPL registry: name, issuer, trust_level), CoinGecko (the canonical multi-chain asset and every chain it lives on), and Cerberus's rug blocklist. Verdict: verified_crosschain | native_xrpl | impostor_suspected | unverified | unknown. Price: $0.008 USDC. Missing something? Call `submit_feedback` (free) to request it. Pass `attest=true` to also get an Ed25519-SIGNED attestation of this verdict — portable proof you can log, hand to a counterparty, or verify later with `verify_attestation` (free) or the published key.

Parametersattestissuerrequiredcurrencyrequired

verify_price

Cross-chain value truth for an XRPL token — 'is the price real?' Reconstructs the token's USD price on XRPL (XRPLMeta price × live XRP/USD) and checks it two ways: for a stablecoin, whether the PEG still holds (is USDC actually ~$1 here?); for any cross-chain asset, whether the XRPL price has DIVERGED from its canonical price elsewhere (manipulation, stale liquidity, or arbitrage). Weighs it against real 24h volume — a price on a dead pool is a number, not a market. Verdict: price_consistent | price_divergent | depegged | thin_liquidity | native_no_reference | unknown. Price: $0.008 USDC. Missing something? Call `submit_feedback` (free) to request it. Pass `attest=true` to also get an Ed25519-SIGNED attestation of this verdict — portable proof you can log, hand to a counterparty, or verify later with `verify_attestation` (free) or the published key.

Parametersattestissuerrequiredcurrencyrequired

get_new_pools

Recently detected XRPL AMM pools (newest first, max 100), enriched: readable name, age, initial liquidity and fee, plus an honest launch-time screening label. Price: $0.010 USDC. Missing something? Call `submit_feedback` (free) to request it.

Parameterslimit

explore_tokens

Discover XRPL tokens — a DexScreener-style feed over 160k+ tokens. Rank by `sort` (volume_24h | marketcap | holders | trustlines | price), `query` to search by name, `limit`/`offset` to page, `trust_only` for XRPLMeta-trusted only. Each row returns name, icon, USD price, 24h volume, market cap, holder count, XRPLMeta trust level, AND our rug-blocklist flag — discovery with a trust signal built in. Run check_xrpl_token on any row for the full verdict. Price: $0.004 USDC. Missing something? Call `submit_feedback` (free) to request it.

Parameterssortlimitqueryoffsettrust_only

get_token_ohlc

OHLC price-history candles for an XRPL token — open/high/low/close plus volume per interval, the series behind a candlestick chart. `interval` is 5 | 15 | 60 | 240 | D | W (minutes, or Day/Week); `bars` is how many candles (max 1000); prices are quoted in XRP, or pass `fx="USD"` for USD. Sourced from the XRPL DEX/AMM; returns ok:false with a reason when the pair is unknown or the source is unreachable — never invented prices. Price: $0.004 USDC. Missing something? Call `submit_feedback` (free) to request it.

Parametersfxbarsissuerrequiredcurrencyrequiredinterval

get_wallet_activity

A readable, risk-annotated history of what an XRPL wallet did: recent transactions turned into plain language (sent/received amounts with token names, trustlines, DEX/AMM ops), with counterparties on the Cerberus rug blocklist flagged, new trustlines to blocklisted issuers flagged, and account-takeover transactions (SetRegularKey, SignerListSet, master-key disable) surfaced as notable — watching your OWN wallet is compromise detection. Returns XRP balance, a summary (in/out counts, distinct and flagged counterparties, notable events), and a `marker` to page further back. Read-only. Price: $0.008 USDC. Missing something? Call `submit_feedback` (free) to request it.

Parameterslimitaddressrequired

analyze_token_trend

A data-driven technical read on an XRPL token. Computes real indicators from OHLC — trend (9/21 EMA), RSI momentum, support/resistance, volatility, volume trend — with a plain-language assessment, and (when the server has an LLM configured) an AI-written outlook plus a genuine counter-argument. `interval` is 5|15|60|240|D|W, `bars` how many candles. Returns `ai_available` so you know whether the narrative is live. Always an informational signal, NEVER financial advice or a price target. Price: $0.020 USDC. Missing something? Call `submit_feedback` (free) to request it.

Parametersbarsissuerrequiredcurrencyrequiredinterval

quote_amm

Quote an XRP->token swap against the live XLS-30 AMM pool: tokens out, spot vs effective price, price impact. Price: $0.001 USDC. Missing something? Call `submit_feedback` (free) to request it.

Parametersissuerrequiredxrp_incurrencyrequired

find_best_path

Find the safest EXECUTABLE route to acquire an XRPL token and screen every hop. Unlike quote_amm (one direct AMM pool), this asks the ledger for real payment paths (order books + AMM + multi-hop) and runs the rug-safety engine over every issuer and gateway the route touches — a clean token reached through a hop that can freeze or claw back mid-route is a trap a destination-only check misses. Returns the cheapest route, its effective price, hop count, and a verdict: route_safe | route_caution | route_unsafe | no_route, with the risk on each hop. Pass your `account` for routes specific to your trustlines, or omit it for an indicative route. Price: $0.006 USDC. Missing something? Call `submit_feedback` (free) to request it.

Parametersaccountto_amountto_issuerrequiredfrom_issuerto_currencyrequiredfrom_currency

watch_token

Monitor an XRPL token you hold and get alerted when it turns dangerous. A one-time check can't catch a rug that happens later — this watches the chain continuously for: AMM pool destroyed (completed rug), liquidity drained past your threshold, clawback enabled, global freeze set, issuer un-blackholed (supply re-mintable), issuer blocklisted, LP lock weakened. Returns a `subscriber_key` — STORE IT — then poll `check_alerts` (free). Registration is refused (with the reason) for tokens that are ALREADY compromised — blocklisted, clawback-enabled, frozen, or a husk pool — since those need a verdict now, not monitoring later. Sold as packages by monitoring window (`duration_days`): 1d $0.005 · 3d $0.012 · 7d $0.020 · 14d $0.035 · 21d $0.048 · 30d $0.060 USDC (longer = cheaper per day). The x402 payment demand lists every tier; pay the one you want and the watch length is set by what you pay. Calling again renews (extends) the watch. Missing something? Call `submit_feedback` (free) to request it.

Parametersissuerrequiredcurrencyrequiredrebaselineduration_dayssubscriber_keydrain_threshold_pct

check_alerts

Collect alerts raised by your `watch_token` watches: what changed, how severe (critical | warning | info), and the on-chain numbers behind it — plus the status of every watch you own. Requires the `subscriber_key` from watch_token. Each alert is delivered once. FREE — poll it as often as every couple of minutes.

Parameterslimitsubscriber_keyrequired

verify_attestation

Verify a signed Cerberus attestation (from any tool called with `attest=true`). Recomputes the canonical claim and checks the Ed25519 signature against this server's published key. Returns valid true/false with the claim. FREE — and you can verify independently with the public key at /api/attestation; this is a convenience, not a trust bottleneck.

Parametersattestationrequired

submit_feedback

Request a tool/feature or report an issue. FREE. High-volume requests get built first — this is how you shape Cerberus's roadmap.

Parameterstoolmessagerequiredrequested_capability

Version history

1
  1. v1.0.0LatestSep 16, 2026

Score

72% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts

    Publish an icon in the registry entry.

  • Documentation15 pts

    Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.

  • LicenseNot applicable

    A hosted service is used under its provider's terms, so no license is expected here. This check is left out of the percentage.