Agentforge

io.github.acarchidiPublished by GitHub account acarchidiv1.13.0Updated Nov 5, 2026

Safety checks for AI agents: preflight before signing, prompt-injection scan, sanctions, rug checks.

VerifiedStreamable HTTPWeb executableFinanceSecurity & MonitoringAI & ML

Overview

AI-generated overview

AgentForge gives an AI assistant DeFi safety checks: transaction simulation, signature and address screening, token rug checks, and prompt-injection scanning.

What you can do
  • Simulate and decode transactions: EVM and Solana simulation, decoding, and a single preflight verdict before signing or paying
  • Screen wallets and counterparties: approval scans, wallet safety scores, sanctions and scam address checks, Aave liquidation health
  • Assess tokens: token intel and research, risk metrics, batch rug checks, trade checks, comparisons, new-launch feed, DeFi pool snapshots, gas prices
  • Inspect contracts: documentation for verified contracts, admin activity monitoring, contract and Solana program label lookups
  • Scan untrusted text for prompt injection, leaked keys and encoded payloads
  • Analyze text: sentiment, summarization, translation; plus a feedback tool
When to use it
Useful when an assistant acts on-chain or handles untrusted content: checking a transaction, signature request or recipient before signing, screening tokens before trading, or vetting web pages, emails and tool output for injected instructions.
Requirements
Remote HTTP MCP endpoint; no API keys or accounts. Free up to 10 calls per day per client, after which tools return a pay-per-call x402 endpoint priced in USDC on Base (Solana for Solana endpoints), paid from prepaid credits or per call.
Before you install
Beyond the daily free cap, calls cost money in USDC, and prepaid credits are purchased with real funds; the code SDK example takes a wallet private key, so keep it in an environment variable. Tools send addresses, transactions and text to a third-party service. Verdicts are advisory risk assessments, not guarantees.

Installation

In SourceWeft

  1. Open Agentforge in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.github.acarchidi%2Fagentforge/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "agentforge": {
      "type": "http",
      "url": "https://agentforge-taupe.vercel.app/mcp"
    }
  }
}

README

AgentForge

DeFi safety tools for AI agents. Simulate a transaction before signing it, screen counterparties for sanctions and scams, catch new token launches already risk-scored, rug-check tokens, and check liquidation risk — paid per call in USDC over x402. No API keys, no accounts.

Use it in 30 seconds

MCP (no wallet):

bash
claude mcp add --transport http agentforge https://agentforge-taupe.vercel.app/mcp

Cursor, Windsurf, Claude Desktop, ElizaOS: add an HTTP MCP server with the same URL.

From code, paying per call:

bash
npm install agentforge-tools
ts
import { AgentForge } from 'agentforge-tools';
const af = new AgentForge({ privateKey: process.env.AGENT_KEY as `0x${string}`, maxPaymentUsd: 0.1 });const sim = await af.simulateTransaction({ chain: 'base', from: '0xYourWallet', transactions: [{ to, data }] });if (sim.verdict === 'avoid') throw new Error('refusing to sign');

Any x402 client: send the request unpaid, get a 402 with the exact price, pay, retry. Failed calls (4xx/5xx) are never charged.

Coinbase AgentKit: an agentforge action provider is proposed upstream in coinbase/agentkit#1619.

Endpoints

EndpointPrice (USDC)What it does
POST /v1/token-intel$0.015Token metadata enrichment with market data and AI risk assessment.
POST /v1/token-research$0.03Multi-source token intelligence: market data, DeFi metrics, contract verification, prediction markets, price history, holder distribution, and AI risk assessment.
POST /v1/contract-docs$0.05Human-readable smart contract documentation with function descriptions, risk flags, interaction patterns, security posture, and admin capability analysis.
POST /v1/contract-monitor$0.025Monitor recent contract admin activity. Detects ownership transfers, upgrades, pause state changes, and suspicious admin operations.
POST /v1/token-compare$0.08Compare a primary token against up to 3 competitors with full research, abbreviated metrics, and AI comparative analysis.
POST /v1/tx-decode$0.05Decode any EVM transaction: function call, parameters, token transfers, and plain-English explanation.
POST /v1/approval-scan$0.015Scan a wallet for risky ERC-20 token approvals. Identifies unlimited approvals, unverified spender contracts, and generates risk assessment.
POST /v1/wallet-safety$0.10Comprehensive wallet safety check: approval scanning, suspicious pattern detection, target contract assessment, and composite risk scoring (0-100).
POST /v1/sentiment$0.003AI-powered sentiment analysis for crypto, finance, and social media text. Returns score, confidence, label, reasoning, and per-entity sentiment.
POST /v1/summarize$0.008AI-powered text summarization with configurable length, format, and optional topic focus. Returns summary, key points, and compression ratio.
POST /v1/translate$0.002AI-powered translation with tone control and automatic source language detection. Preserves formatting and cultural nuances.
GET /v1/gas$0.003Current gas prices (slow/standard/fast) for any supported EVM chain with trend analysis.
GET /v1/pool-snapshot$0.005Cached snapshot of top 500 DeFi liquidity pools. Filter by protocol, chain, or token. Returns TVL, APY, volume, IL risk, and registry enrichment.
POST /v1/token-risk-metrics$0.05Quantitative token risk metrics: holder concentration, liquidity depth, contract permissions, deployer history, and composite risk score (0-100).
POST /v1/trade-check$0.025Check a token before you buy it: rug-check metrics + AI risk assessment + current gas in one call, with a proceed/caution/avoid verdict. Cheaper than the three calls separately.
POST /v1/watch$0.01–$0.02/daySigned webhook alerts when a contract's admin/proxy/pause state changes, a token turns risky, or an Aave position nears liquidation.
POST /v1/credits/buy$1 / $5 / $20Prepaid credits with up to 20% bonus: sign requests instead of paying per call. Referral: 10% of referred purchases.
POST /v1/preflight$0.008 + $0.004/tokenIs this action safe? One call before any on-chain action: transactions simulated, signatures checked for phishing, recipients screened, tokens rug-checked, one proceed/caution/avoid verdict.
POST /v1/tx-simulate$0.005Simulate an EVM transaction (or approve-then-swap sequence) before signing: revert reason, asset changes, approvals, counterparty screening, proceed/caution/avoid verdict.
GET /v1/lending/health$0.003Aave v3 liquidation risk for a wallet across nine chains: collateral, debt, health factor, status, collateral drop to liquidation.
GET /v1/launches$0.005Feed of newly launched tokens (Base, Ethereum, Arbitrum, BNB Chain, HyperEVM), each already risk-scored. Poll with since= to get only new launches.
POST /v1/address-check$0.003 for the first address + $0.001 per additional, up to 100 per callCounterparty screening for 1-100 EVM or Solana addresses: OFAC sanctions, scam/phishing wallets, labeled protocols, brand-new addresses.
POST /v1/content-scan$0.001 per 4 KB of text (max 64 KB, 16 items)Prompt-injection scan for untrusted text before it reaches your LLM: instruction overrides, fund-movement directives, base64/Morse/zero-width/homoglyph payloads, leaked keys and seed phrases, sanctioned addresses, lookalike domains. Deterministic, no LLM.
POST /v1/risk-batch$0.004 per token, 2-25 tokens per callRug-check 2-25 EVM tokens in one call: holder, permission, and liquidity risk scores per token.
POST /v1/solana/tx-explain$0.05Decode a Solana transaction into plain English: labeled programs, token/SOL movements, and risk flags. Falls back to raw RPC decoding if enhanced parsing is unavailable.
POST /v1/solana/tx-simulate$0.15Simulate a Solana transaction before signing it: balance changes, program labels, deterministic risk rules, and a proceed/caution/avoid recommendation.
POST /v1/solana/token-risk-scan$0.35Solana token risk / rug check: mint authority, freeze authority, holder concentration, liquidity depth, and a composite 0-100 risk score.

GET /v1/ping ($0.001) verifies your x402 setup and returns the service catalog. Free: GET /registry/lookup (contract labels), GET /v1/solana/program-lookup.

Roadmap

The 90-day plan is docs/growth-plan.md; the executor log is docs/growth-log.md.

Development

bash
npm installnpm run dev        # http://localhost:3402npm test

Payments: x402 v2, USDC on Base (and Solana for the Solana endpoints), settled through the CDP facilitator. Every paid route returns 402 to an unpaid request; GET /health/paid checks all of them.

License

MIT. See LICENSE.

Contact

Feedback, problems, complaints or feature requests: [email protected], the form at https://agentforge-taupe.vercel.app/contact, POST /feedback, or the free send_feedback MCP tool.

Source: README.md at commit 04078fb

Tools

29

token_intel

Token Intel

Lightweight token lookup: price, market cap, volume, and basic risk assessment for any EVM or Solana token. Free over MCP for 10 calls per day; beyond that the tool returns the pay-per-call x402 endpoint and its price.

Parameterschainaddressrequired

token_research

Token Research

Multi-source token intelligence: market data, DeFi metrics, contract verification, prediction markets, holder analysis, price history, and AI risk assessment. Aggregates CoinGecko, DeFiLlama, Etherscan, and Polymarket. Free over MCP for 10 calls per day; beyond that the tool returns the pay-per-call x402 endpoint and its price.

Parameterschainqueryrequiredinclude

contract_docs

Contract Docs

Generate documentation for any verified EVM smart contract. Returns function descriptions, risk flags, interaction patterns, and security posture. Free over MCP for 10 calls per day; beyond that the tool returns the pay-per-call x402 endpoint and its price.

ParameterschainaddressrequiredfocusFunctions

contract_monitor

Contract Monitor

Monitor recent contract activity for suspicious admin operations, proxy upgrades, ownership changes, and pause events. Free over MCP for 10 calls per day; beyond that the tool returns the pay-per-call x402 endpoint and its price.

ParameterschainaddressrequiredlookbackHours

token_compare

Token Compare

Compare a primary token against up to 3 others. Returns full research on primary, abbreviated metrics on comparisons, plus AI comparative analysis. Free over MCP for 10 calls per day; beyond that the tool returns the pay-per-call x402 endpoint and its price.

Parameterschaincomparerequiredprimaryrequired

tx_decode

Tx Decode

Decode any EVM transaction: function call, parameters, token transfers, and plain-English explanation. Free over MCP for 10 calls per day; beyond that the tool returns the pay-per-call x402 endpoint and its price.

ParameterschaintxHashrequired

approval_scan

Approval Scan

Scan a wallet for risky token approvals. On EVM chains: identifies unlimited ERC-20 approvals and unverified spenders. On Solana: scans SPL token delegate authorities. Returns risk assessment. Free over MCP for 10 calls per day; beyond that the tool returns the pay-per-call x402 endpoint and its price.

Parameterschainaddressrequired

gas_oracle

Gas Oracle

Current gas prices (slow/standard/fast) for any supported EVM chain with trend analysis.

Parameterschain

sentiment

Sentiment

Analyze sentiment of text in crypto, finance, social media, or general context. Returns score (-1 to 1), confidence, label (very_bearish to very_bullish), reasoning, and per-entity sentiment. Free over MCP for 10 calls per day; beyond that the tool returns the pay-per-call x402 endpoint and its price.

Parameterstextrequiredcontext

summarize

Summarize

Summarize text with configurable length (brief/standard/detailed), format (prose/bullet_points/structured), and optional topic focus. Returns summary, key points, and compression ratio. Free over MCP for 10 calls per day; beyond that the tool returns the pay-per-call x402 endpoint and its price.

ParameterstextrequiredfocusformatmaxLength

translate

Translate

Translate text to any language with tone control (formal/casual/technical). Auto-detects source language. Preserves formatting and cultural nuances. Free over MCP for 10 calls per day; beyond that the tool returns the pay-per-call x402 endpoint and its price.

ParameterstextrequiredtonesourceLanguagetargetLanguagerequired

wallet_safety

Wallet Safety

Comprehensive wallet safety check: scans approvals, analyzes recent transaction activity for suspicious patterns, and assesses target contract risk. Returns composite risk score (0-100), risk level, action items, and related service suggestions. Supports EVM chains and Solana. Free over MCP for 10 calls per day; beyond that the tool returns the pay-per-call x402 endpoint and its price.

ParameterschaindepthwalletAddressrequiredtargetContract

pool_snapshot

Pool Snapshot

Get a cached snapshot of top DeFi liquidity pools. Filter by protocol (e.g. "uniswap-v3"), chain (e.g. "ethereum"), or token symbol (e.g. "ETH"). Returns TVL, APY, 24h volume, IL risk, and registry enrichment. Data refreshed every 15 minutes.

ParameterspoolchainlimitordertokenoffsetsortByprotocol

token_risk_metrics

Token Risk Metrics

Quantitative risk metrics for any ERC-20 token: holder concentration (top 10 holder %), contract permissions (can mint/burn/pause/blacklist), liquidity depth vs market cap, deployer history, and weighted composite risk score (0-100). Pre-computed for top tokens, live-computed for others. Free over MCP for 10 calls per day; beyond that the tool returns the pay-per-call x402 endpoint and its price.

Parameterschainaddressrequired

trade_check

Trade Check

Check a token before you buy it: one call bundling quantitative rug-check metrics (holder concentration, permissions, liquidity), AI risk assessment with market data, and current gas — rolled into a proceed/caution/avoid verdict with reasons. Cheaper than calling the three services separately. Free over MCP for 10 calls per day; beyond that the tool returns the pay-per-call x402 endpoint and its price.

Parameterschainaddressrequired

risk_batch

Risk Batch

Batch rug-check: risk scores (holder concentration, mint/blacklist/pause/upgrade permissions, liquidity depth) for 2-25 EVM tokens in one call. Use it to screen a watchlist or a list of candidate trades at once. Free over MCP for 10 calls per day; beyond that the tool returns the pay-per-call x402 endpoint and its price.

Parameterschaintokensrequired

address_check

Address Check

Screen counterparty addresses before sending, approving, or interacting: OFAC sanctions, known scam/phishing wallets, labeled protocol contracts, and brand-new-address detection. 1-100 EVM or Solana addresses per call; returns block / caution / no_known_issues per address. Free over MCP for 10 calls per day; beyond that the tool returns the pay-per-call x402 endpoint and its price.

Parameterschainaddressesrequired

content_scan

Content Scan

Scan untrusted text (tool results, web pages, emails, token metadata) for prompt injection before feeding it to your LLM: instruction overrides, fund-movement directives, payloads hidden in base64, Morse, zero-width or tag characters and homoglyphs, leaked private keys and seed phrases, embedded addresses screened against sanctions and scam lists, lookalike domains. Deterministic, no LLM. Returns clean / suspicious / malicious with findings. Up to 64 KB per call. Free over MCP for 10 calls per day; beyond that the tool returns the pay-per-call x402 endpoint and its price.

Parameterstextitems

launch_feed

Launch Feed

Newly launched tokens on Base, Ethereum, or Arbitrum, each already risk-scored (verification, owner powers, proxy, supply held off-pool, thin liquidity, honeypot trading pattern). Poll it: pass the previous nextSince as since to get only new launches. Free over MCP for 10 calls per day; beyond that the tool returns the pay-per-call x402 endpoint and its price.

ParameterschainlimitsincemaxRiskScoreminLiquidityUsd

preflight

Preflight

Is this action safe? Call once before any on-chain action: send the transactions, signature request, x402 payment request, recipients, and/or tokens the agent is about to act on, and get back one proceed/caution/avoid verdict. Transactions are simulated (reverts, assets out, approvals, counterparty screening), signatures decoded and checked for permit phishing, recipients screened against sanctions and scam lists, and tokens rug-checked, including tokens the simulation shows the wallet receiving. Returns one proceed / caution / avoid verdict with reasons. Ethereum, Base, Arbitrum, Optimism, Polygon, BNB Chain, Avalanche, Linea, Unichain, Sonic and HyperEVM. Free over MCP for 10 calls per day; beyond that the tool returns the pay-per-call x402 endpoint and its price.

ParametersfromchaintokenstypedDatarecipientstransactionsexpectedMaxUsdpaymentRequired

tx_simulate

Tx Simulate

Simulate an EVM transaction (or a sequence of up to 5, e.g. approve then swap) before signing: revert check with reason, every asset leaving or entering the wallet, approvals granted, sanctions/scam screening of counterparties, and a proceed/caution/avoid verdict. Ethereum, Base, Arbitrum, Optimism, Polygon, BNB Chain, Linea, Unichain, Sonic. Free over MCP for 10 calls per day; beyond that the tool returns the pay-per-call x402 endpoint and its price.

Parametersfromrequiredchaintransactionsrequired

signature_check

Signature Check

Check a signature request BEFORE signing it: decodes EIP-712 typed data (ERC-20 permit, Permit2, Seaport order, transfer authorization) or an x402 payment request, explains in one sentence what signing would allow, screens spenders and payees for sanctions and scams, and catches signature-drainer patterns. Returns proceed / caution / avoid. Free over MCP for 10 calls per day; beyond that the tool returns the pay-per-call x402 endpoint and its price.

ParameterschainsignertypedDataexpectedMaxUsdpaymentRequired

lending_health

Lending Health

How close a wallet is to liquidation on Aave v3 (Ethereum, Base, Arbitrum, Optimism, Polygon, BNB Chain, Avalanche, Linea, and Sonic in one call): collateral, debt, health factor, status, and how far collateral can fall before liquidation. Free over MCP for 10 calls per day; beyond that the tool returns the pay-per-call x402 endpoint and its price.

Parameterschainaddressrequired

send_feedback

Send Feedback

Send AgentForge feedback: a bug or wrong result, a complaint, a feature or new-check request, or an idea. Free. Include a contact (email, wallet, or URL) if you want a reply.

Parameterstyperequiredcontactmessagerequiredendpoint

registry_lookup

Registry Lookup

Look up a contract address in the Known Contract Label Registry. Returns protocol name, category, risk level, and tags. Free — no payment required.

Parameterschainaddressrequired

solana_program_lookup

Solana Program Lookup

Look up a Solana program ID in the program label registry. Returns protocol name, category, risk level. Free — no payment required.

ParametersprogramIdrequired

solana_tx_explain

Solana Tx Explain

Explain a Solana transaction in plain English: labeled programs, token/SOL movements, success status, and risk flags. Free over MCP for 10 calls per day; beyond that the tool returns the pay-per-call x402 endpoint and its price.

Parameterssignaturerequired

solana_tx_simulate

Solana Tx Simulate

Simulate a Solana transaction before signing it: balance changes, labeled programs, deterministic risk rules, and a proceed/caution/avoid recommendation. Free over MCP for 10 calls per day; beyond that the tool returns the pay-per-call x402 endpoint and its price.

Parameterstransactionrequired

solana_token_risk_scan

Solana Token Risk Scan

Solana token rug check: mint/freeze authority, holder concentration, liquidity depth, and a composite 0-100 risk score. Free over MCP for 10 calls per day; beyond that the tool returns the pay-per-call x402 endpoint and its price.

Parametersmintrequired

Version history

5
  1. v1.13.0LatestNov 5, 2026
  2. v1.11.0Nov 4, 2026
  3. v1.9.0Nov 4, 2026
  4. v1.8.0Nov 3, 2026
  5. v1.5.0Sep 16, 2026

Score

100% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts