SCV - Smart Contract Verification (x402)

io.github.PolkovnikVasinBPublished by GitHub account PolkovnikVasinBv1.7.1Updated Oct 26, 2026

Honeypot & rug-pull detection, token risk feed, wallet risk, approvals audit. x402 USDC on Base.

VerifiedStreamable HTTPWeb executableFinanceSecurity & Monitoring

Overview

AI-generated overview

Remote MCP server for EVM token and wallet risk checks — rug-pull scans, honeypot detection, fresh-token feed, wallet risk and approvals audits — paid per…

What you can do
  • Scan an EVM contract for rug-pull risk, returning a 0-100 score, verdict and flags such as mint, pause, blacklist, tax, proxy and ownership
  • Check whether a token can be sold or is a honeypot, with trading gate, blacklist probe, taxes and a verdict
  • Browse a feed of newest tokens creating liquidity pairs, with market data and instant risk scores
  • Check a wallet for drainer and phishing blacklists, on-chain profile and optional token relations
  • Audit a wallet's active ERC-20 approvals and flag unlimited or unknown spenders
When to use it
Useful when an assistant is asked to vet a token or wallet before trading, or to explain approval risks and suspicious contracts. Each call costs a small USDC payment, so it suits occasional due-diligence checks rather than bulk scanning.
Requirements
A remote streamable HTTP endpoint; no local install. A wallet able to sign EIP-3009 USDC payments on Base, since every tool is paid per call (0.005-0.01 USDC). The client must handle the x402 flow: an unpaid call returns payment requirements, then the call is retried with a PAYMENT-SIGNATURE header.
Before you install
Every tool spends real money in USDC on Base, so an assistant can incur charges without a separate confirmation step. The x402 flow requires signing EIP-3009 payment authorizations with a wallet key; keep that key scoped and funded minimally. Addresses queried are sent to a third-party service. Risk verdicts are heuristic and should not be treated as investment advice.

Installation

In SourceWeft

  1. Open SCV - Smart Contract Verification (x402) in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.github.PolkovnikVasinB%2Fscv/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "scv-smart-contract-verification-x402": {
      "type": "http",
      "url": "https://scv-agent.online/mcp"
    }
  }
}

Tools

5

scv_scan

Paid rug-pull risk scan of an EVM contract ($0.005 USDC via x402). Returns score 0-100, verdict, flags (mint/pause/blacklist/tax/proxy/ownership).

Parametersverifyaddressrequirednetwork

scv_feed

Paid fresh-token feed with instant risk scores ($0.005 USDC via x402): newest tokens creating liquidity pairs, market data included.

Parameterscountnetworkmin_liquidity

scv_wallet_risk

Paid wallet risk check ($0.01 USDC via x402): drainer/phishing blacklists (ScamSniffer+MEW), on-chain profile, optional token relation.

Parameterstokenwalletrequirednetwork

scv_approvals

Paid token approvals audit ($0.01 USDC via x402): active ERC-20 approvals of a wallet, unlimited/unknown spender detection.

Parameterswalletrequirednetwork

scv_honeypot

Paid honeypot check ($0.005 USDC via x402): can this token be sold, or is it a trap? Trading gate, on-chain blacklist probe, taxes, mint/pause, proxy. Verdict HONEYPOT_LIKELY/SUSPICIOUS/CAUTION/UNLIKELY.

Parametersaddressrequirednetwork

Version history

1
  1. v1.7.1LatestOct 26, 2026

Score

83% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts

    Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.

  • LicenseNot applicable

    A hosted service is used under its provider's terms, so no license is expected here. This check is left out of the percentage.