100pro Token Risk

dev.rendraputraPublished by rendraputra.devOfficial publisherv1.0.4Updated Oct 24, 2026

Read-only risk tools: token screen, contract source, wallet. $0.10 USDC on Base.

VerifiedStreamable HTTPWeb executableFinanceSecurity & Monitoring

Overview

AI-generated overview

Remote MCP server that runs read-only pre-trade risk screens on EVM tokens, contract source verification and wallets, paid per call in USDC on Base.

What you can do
Screen tokens: honeypot, tax and owner flags, LP-lock state, mint and freeze authority, transfer fee or hook, holder concentration, liquidity depth, wash-trade signals and a one-line verdict for EVM contracts or Solana SPL mints across six chains, up to five addresses per call in a batch report format. Check contract source: whether an EVM contract is verified, by which route, fully or partially, whether deployed bytecode still matches the source, and proxy and implementation details. Screen wallets: EOA versus contract, age from first transaction, activity counters, native balance, funding source, contracts deployed, and Blockscout and GoPlus reputation and security flags.
When to use it
Useful when an assistant needs a quick due-diligence check on a token, contract or wallet before a trade or interaction, and you are willing to pay a small per-call fee instead of using a free, rate-limited scanner.
Requirements
A remote streamable HTTP endpoint; no account or API key. Each call costs $0.10 USDC for one token or $0.25 for a 2-5 token batch on Base, paid via x402; an unpaid call returns HTTP 402 with a payment challenge that must be settled and retried. A stdio bridge option needs Python 3.9+ or uv.
Before you install
Every call spends real USDC on Base, so an assistant could incur charges without a clear budget; payment is settled on-chain and logged. The tools are described as read-only, but the server receives the addresses you submit and forwards them to third-party data sources. Reports are risk signals, not investment advice.

Installation

In SourceWeft

  1. Open 100pro Token Risk in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/dev.rendraputra%2F100pro-token-risk/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "100pro-token-risk": {
      "type": "http",
      "url": "https://x402.rendraputra.dev/mcp"
    }
  }
}

README

100pro Token Risk Screen — MCP server

[100pro-token-risk MCP connector]

Pre-trade risk screening for EVM token contracts and Solana SPL mints, exposed as a remote MCP tool. Honeypot/tax/owner flags, LP-lock state, mint & freeze authority, transfer fee/hook, holder concentration, liquidity depth, wash-trade signals — ending in a one-line Verdict.

  • Endpoint: https://x402.rendraputra.dev/mcp (MCP streamable HTTP, JSON-RPC 2.0)
  • Tool: token_risk_screen (token, chain) — read-only, up to 5 comma-separated addresses per call
  • Chains: base, ethereum, bsc, polygon, arbitrum, solana
  • Price: $0.10 USDC per single token, $0.25 for a 2-5 token batch, on Base, paid with x402 v2 — no account, no API key, no subscription. An unpaid call answers HTTP 402 with the payment challenge; pay it and retry. Free metadata: /llms.txt, /openapi.json, /.well-known/x402.

Use it as a remote MCP server (no install)

json
{  "mcpServers": {    "100pro-token-risk": {      "type": "http",      "url": "https://x402.rendraputra.dev/mcp"    }  }}

Use it through this stdio bridge

Some clients only speak stdio. This tiny proxy forwards initialize, tools/list and tools/call to the remote endpoint (stdlib only, no dependencies):

json
{  "mcpServers": {    "100pro-token-risk": {      "command": "python3",      "args": ["/absolute/path/to/100pro_mcp.py"]    }  }}

or straight from the repo, if you use uv:

json
{  "mcpServers": {    "100pro-token-risk": {      "command": "uvx",      "args": ["--from", "git+https://github.com/rndrpp/100pro-mcp", "100pro-mcp"]    }  }}

What a call returns

A markdown report per token, e.g.:

text
## 0x8335…2913 (base)**Verdict: PASS — no blocking risk signal found.**...

If the call is unpaid the server answers with the x402 payment challenge (HTTP 402). Pay $0.10 USDC (single token) or $0.25 (2-5 token batch) on Base to the payTo in the challenge and retry; the response carries a PAYMENT-RESPONSE receipt naming the settled transaction.

Why paying beats a free scanner

Free scanners are the product being sold elsewhere: rate-limited, delay-baiting, or an upsell funnel. This one is a single priced call with a fail-closed guarantee — the report is generated and returned only after the USDC transfer is confirmed on Base, and every settle attempt is logged with the on-chain verdict.

Links

MIT licensed.

Repo layout

  • 100pro_mcp.py — repo-root entry point (python3 100pro_mcp.py, and the file container checkers execute after cloning); it bootstraps pro100/bridge.py.
  • pro100/bridge.py — the actual stdio bridge: answers initialize / tools/list locally (so introspection needs no network) and forwards tools/call to the hosted endpoint.
  • pyproject.toml — packages pro100, console script 100pro-mcp (so uvx --from git+https://github.com/rndrpp/100pro-mcp 100pro-mcp works).

Python 3.9+, standard library only — nothing to install for the plain-script path.

Source: README.md at commit e8494c4

Tools

3

token_risk_screen

Token risk screen (EVM + Solana, read-only)

Pre-trade risk screen for an EVM token contract or a Solana SPL mint (Base, Ethereum, BSC, Polygon, Arbitrum, Solana). Returns a markdown report: honeypot/tax/owner flags, LP-lock state, mint and freeze authority, transfer fee/hook, holder concentration, liquidity depth, wash-trade flags, and a final **Verdict** line. Up to 5 comma-separated tokens per call. $0.1 USDC for a single token contract / SPL mint, $0.25 for a 2-5 address batch, on Base (x402 v2, no account, no API key). An unpaid call answers HTTP 402 with the payment challenge; sign it and retry with the payment in the call `_meta`. Read-only: it never signs, transfers, or approves anything on the caller's behalf.

Parameterschaintokenrequired

contract_source_check

Contract source check (EVM, read-only)

Contract-level due diligence for an EVM contract address: whether the source is verified and through which route (sourcify / verifier-alliance / eth-bytecode-db), fully vs partially verified, whether the deployed bytecode still matches the verified source, proxy pattern and implementation address, deployer address and creation tx, contract age, and a capability scan of the verified source (and of the proxy implementation) for mint, pause, blacklist, selfdestruct and delegatecall. Returns markdown ending in a **Verdict** line. Up to 5 comma-separated addresses per call. $0.1 USDC for a single contract address, $0.25 for a 2-5 address batch, on Base (x402 v2, no account, no API key). An unpaid call answers HTTP 402 with the payment challenge; sign it and retry with the payment in the call `_meta`. Read-only: it never signs, transfers, or approves anything on the caller's behalf.

Parameterschainaddressrequired

wallet_risk_screen

Wallet risk screen (EVM, read-only)

Wallet-level due diligence for an EVM address: externally-owned account vs contract (and proxy type), age from its first transaction, activity counters, native balance, funding source, how many contracts it has deployed, Blockscout scam/reputation/tags, and GoPlus address-security flags (sanctioned, phishing, mixer, money laundering, honeypot-related, malicious contracts created). Returns markdown with a **Verdict** and a flag list. Up to 5 comma-separated addresses per call. $0.1 USDC for a single wallet address, $0.25 for a 2-5 address batch, on Base (x402 v2, no account, no API key). An unpaid call answers HTTP 402 with the payment challenge; sign it and retry with the payment in the call `_meta`. Read-only: it never signs, transfers, or approves anything on the caller's behalf.

Parameterschainaddressrequired

Version history

1
  1. v1.0.4LatestSep 23, 2026

Score

100% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts