orbit Token Risk

dev.workers.orbit-builder.token-riskPublished by token-risk.orbit-builder.workers.devOfficial publisherv1.2.0Updated Oct 24, 2026

Rug check & honeypot flags for Base/Solana tokens. Free preview; full $0.0009/token via x402.

VerifiedStreamable HTTPWeb executableFinanceSecurity & Monitoring

Overview

AI-generated overview

Remote MCP server that gives an assistant free rug-check, honeypot and scam-token previews for Base or Solana tokens, with paid full reports via x402.

What you can do
  • Check a single Base or Solana token for rug, honeypot and scam risk, returning a risk level, pass/warn/fail counts and four headline flags with raw values.
  • Run the same preview with an explicit chain and address instead of a combined token identifier.
  • Get the x402 payment URL for the full report alongside each free preview.
When to use it
Useful when an assistant needs a quick safety screen on a memecoin or pump.fun-style token on Base or Solana before discussing or acting on it, and when a paid full report is acceptable.
Requirements
A remote streamable HTTP endpoint; no local package, environment variables or headers are declared. Full reports require paying in USDC on Base through x402.
Before you install
The free tools only return a preview; the full report costs $0.0009 per token (or $0.015 for 1-10 tokens) in USDC on Base, so an assistant could trigger spending. Risk flags are third-party signals, not investment advice, and token addresses are sent to the remote service.

Installation

In SourceWeft

  1. Open orbit Token Risk in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/dev.workers.orbit-builder.token-risk%2Ftoken-risk/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "orbit-token-risk": {
      "type": "http",
      "url": "https://token-risk.orbit-builder.workers.dev/mcp"
    }
  }
}

Tools

2

check_token

Token risk check (rug check, honeypot, scam token, memecoin / pump.fun safety) for one Base or Solana token. Free tool: returns risk_level, pass/warn/fail counts and 4 headline flags with raw values, plus the x402 URL for the full report ($0.0009 USDC on Base: GET /v1/check?token=chain:address; cheapest single-token x402 risk check we've found, vs $0.00098-$0.02 for others we checked, Oct 23 2026).

Parameterschaintokenaddress

check_token_risk

Same as check_token with explicit chain + address: free token risk preview (rug check / honeypot / scam screen) for one Base or Solana token. Full report via x402: $0.0009 per token (GET /v1/check) or $0.015 for 1-10 tokens (POST /v1/risk).

Parameterschainrequiredaddressrequired

Version history

1
  1. v1.2.0LatestOct 23, 2026

Score

72% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts

    Publish an icon in the registry entry.

  • Documentation15 pts

    Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.

  • LicenseNot applicable

    A hosted service is used under its provider's terms, so no license is expected here. This check is left out of the percentage.