RugShield 402

io.github.ak10082247-maxPublished by GitHub account ak10082247-maxv1.0.0Updated Oct 24, 2026

Real-time token contract safety scanner and honeypot auditor via x402 on Base.

VerifiedStreamable HTTPWeb executableFinanceSecurity & Monitoring

Overview

AI-generated overview

RugShield 402 is a hosted MCP server that lets an assistant screen Solana and Base tokens for honeypots, taxes, liquidity locks and holder clusters before…

What you can do
  • Simulate buys and sells to detect honeypots, transfer limits and exact tax rates in basis points
  • Check LP lock status, pool liquidity depth and unwrap risk across Aerodrome, Uniswap and lock services
  • Map top holders, sybil clusters, dev concentration and 24h buyer/seller segments
  • Screen trending tokens and track smart-money and whale netflows and DEX trades
  • Profile wallets for balances, USD value, win rate and drainer or OFAC taint
  • Produce a combined audit report covering bytecode, taxes, LP proofs, clusters and bridge risk
When to use it
Useful when an assistant or trading agent needs a quick safety check on a Solana or Base token before a swap, or wants holder, smart-money and wallet-risk context for due diligence. Less relevant if you do not work with on-chain tokens.
Requirements
Remote streamable HTTP endpoint; no account or API key is declared. Each tool call is paid per use in USDC on Base or Solana Mainnet, so a funded wallet and x402 payment handling (for example a private key supplied to the SDK client) are needed. Local stdio use requires cloning the repository and Node.js.
Before you install
Every tool call costs USDC, so automated loops can spend money. The documented SDK flow asks for an agent wallet private key in an environment variable or client argument; use a dedicated low-balance wallet. Token addresses and wallet addresses are sent to the hosted service and its upstream RPC and DEX data sources. Results are simulations and risk scores, not guarantees.

Installation

In SourceWeft

  1. Open RugShield 402 in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.github.ak10082247-max%2Frugshield-402/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "rugshield-402": {
      "type": "http",
      "url": "https://rugshield-402.onrender.com/mcp"
    }
  }
}

README

RugShield 402 🛡️ — Open-Source MCP Server for DEX Security & Honeypot Detection

[License: MIT] [MCP Standard] [TypeScript] [Base Mainnet] [x402 Protocol] [Glama]

This repository contains the complete open-source Model Context Protocol (MCP) server implementation of RugShield 402. It equips LLMs, autonomous trading agents, and IDEs (Claude Desktop, Cursor, Windsurf) with tools to simulate token buys/sells, analyze honeypot traps, calculate exact transfer tax rates, and verify DEX liquidity depth on Base and EVM networks.


🛠️ MCP Tools Implemented

This MCP server provides the following tools via standard stdio and streamable HTTP transports:

Tool NameDescriptionKey Parameters
rugshield_pre_swap_scanComprehensive pre-trade swap simulation: detects honeypots, malicious transfer limits, and liquidity drain traps.token_address (string, 42-char hex), simulate_sell (boolean, default: true)
check_honeypotDecompiles token bytecode and executes buy/sell test against Base RPC. Returns exact buy/sell tax in basis points (bps), blacklist checks, and risk score.token_address (string, 42-char hex)
verify_liquidity_lockAnalyzes DEX pool reserves (Uniswap v3, Aerodrome), LP token lock status, bonding curve state, and total USD liquidity depth.token_address (string, 42-char hex)
detect_holder_clustersMaps top token holder distributions, detects Sybil wallet clusters, and computes developer concentration risk.token_address (string, 42-char hex)

🚀 Running from Source (Local Stdio Transport)

You can run this MCP server locally on your machine from source code using Node.js and the Model Context Protocol SDK.

1. Installation & Build

bash
# Clone the open-source repositorygit clone https://github.com/ak10082247-max/rugshield-402.gitcd rugshield-402
# Install dependenciesnpm install
# Build the TypeScript source codenpm run build

2. Configure with Claude Desktop

Add this server to your claude_desktop_config.json:

  • macOS: ~/Library/Application Support/Claude/claude_desktop_config.json
  • Windows: %APPDATA%\Claude\claude_desktop_config.json
json
{  "mcpServers": {    "rugshield-402": {      "command": "node",      "args": [        "/absolute/path/to/rugshield-402/dist/mcp/server.js"      ]    }  }}

Or run directly with tsx during development without building:

json
{  "mcpServers": {    "rugshield-402": {      "command": "npx",      "args": [        "-y",        "tsx",        "/absolute/path/to/rugshield-402/src/mcp/server.ts"      ]    }  }}

3. Configure with Cursor or Windsurf

Add to your workspace .cursor/mcp.json or Windsurf MCP settings:

json
{  "mcpServers": {    "rugshield-402": {      "command": "node",      "args": ["dist/mcp/server.js"]    }  }}

🌐 Connecting to the Hosted Remote MCP Endpoint

If you prefer connecting to a hosted cloud instance without local dependencies, RugShield is deployed 24/7 on high-availability cloud infrastructure:

  • Remote MCP URL: https://rugshield-402.onrender.com/mcp
  • Protocol: Model Context Protocol (Streamable HTTP / SSE JSON-RPC 2.0)
  • Discovery Manifest: https://rugshield-402.onrender.com/.well-known/mcp/server-card.json
  • x402 Manifest: https://rugshield-402.onrender.com/.well-known/x402.json

🏛️ Simulation Engine Architecture

mermaid
sequenceDiagram    autonumber    actor LLM as Claude / Agent / Cursor    participant MCP as RugShield MCP Server (Local / Remote)    participant Simulator as EVM Bytecode Simulator    participant Base as Base Mainnet RPC    participant DEX as Aerodrome / Uniswap v3
    LLM->>MCP: tools/call ("rugshield_pre_swap_scan", { token_address })    MCP->>Simulator: Fork State & Simulate Buy/Sell    Simulator->>Base: Fetch Bytecode, Balances & Storage Slots    Simulator->>DEX: Simulate Swap on Liquidity Pool    Simulator-->>MCP: Honeypot Verdict, Tax Rates, Risk Score    MCP-->>LLM: Structured JSON Analysis & Safety Attestation

📦 Developer SDK & Framework Integrations

RugShield is packaged for automated multi-agent frameworks with 100% gasless autonomous payment settlement ($0 ETH / $0 SOL required):

1. Autonomous Agent Auto-Pay Quickstart (TypeScript)

Wrap standard fetch with @x402/fetch to automatically handle HTTP 402 challenges, sign EIP-712 transfer authorizations on Base, and retry in under 15ms:

bash
npm install @x402/fetch @x402/core @x402/evm viem
typescript
import { wrapFetchWithPayment } from "@x402/fetch";import { x402Client } from "@x402/core/client";import { ExactEvmScheme } from "@x402/evm/exact/client";import { privateKeyToAccount } from "viem/accounts";
const account = privateKeyToAccount(process.env.AGENT_PRIVATE_KEY as `0x${string}`);const client = new x402Client();client.register("eip155:8453", new ExactEvmScheme(account));
// 1-line wrapper automatically signs & unlocks full 100% honeypot simulationconst xFetch = wrapFetchWithPayment(fetch, client);const res = await xFetch("https://rugshield-402.onrender.com/v1/scan", {  method: "POST",  headers: { "Content-Type": "application/json" },  body: JSON.stringify({ token_address: "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913", simulate_sell: true }),});const report = await res.json();console.log("Full Verified Analysis:", report);

2. Autonomous Agent Auto-Pay Quickstart (Python)

Using the built-in Python client (sdk/python/rugshield.py):

python
from rugshield import RugShieldClient
# Pass your agent wallet private key - automatically handles 402 challenges & EIP-712 signingclient = RugShieldClient(private_key="0xYOUR_AGENT_PRIVATE_KEY")report = client.scan_token("0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913")
print(f"Honeypot: {report.get('is_honeypot')}")print(f"Exact Sell Tax: {report.get('sell_tax_bps')} bps")

3. ElizaOS Autonomous Agent Plugin

bash
npm install @kurox_real/plugin-rugshield-402
typescript
import { rugshieldPlugin } from "@kurox_real/plugin-rugshield-402";
export const character = {  name: "AutonomousDeFiTrader",  plugins: [rugshieldPlugin],};

4. Coinbase AgentKit (LangChain / Python / TS)

bash
npm install @kurox_real/agentkit-rugshield-402
typescript
import { rugshieldActionProvider } from "@kurox_real/agentkit-rugshield-402";import { AgentKit } from "@coinbase/agentkit";
const agentKit = await AgentKit.from({  actionProviders: [rugshieldActionProvider()],});

5. Direct REST API (cURL)

bash
# Returns 402 with structured 50% free preview + unlock instructions:curl -X POST https://rugshield-402.onrender.com/v1/scan \  -H "Content-Type: application/json" \  -d '{"token_address": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913", "simulate_sell": true}'

💳 Optional Cloud Subscriptions (MCPize / Apify)

For teams seeking turnkey managed infrastructure with flat monthly credit card billing rather than self-hosting:


📄 License

This open-source project is licensed under the MIT License — see the LICENSE file for details.

Source: README.md at commit 039885c

Tools

14

analyze_liquidity

Verifies DEX LP token locking, vesting schedules, pool liquidity depth, and unwrap risks across Aerodrome and Uniswap. Cost: 0.020 USDC on Base & Solana Mainnet.

Parameterstoken_addressrequired

check_honeypot

Instant honeypot verification and transfer fee detection for autonomous AI trading agents. Cost: 0.010 USDC on Base & Solana Mainnet.

Parameterstoken_addressrequired

rugshield_pre_swap_scan

Simulates buy/sell orders via state overrides to detect honeypots, compute exact transfer taxes in bps, and verify pool liquidity depth. Cost: 0.010 USDC on Base & Solana Mainnet.

Parameterstoken_addressrequired

rugshield_audit_liquidity_lock_verify

Verifies LP token ownership across Uncx, Team.Finance, and Aerodrome slipstream pools to prove liquidity cannot be pulled. Cost: 0.020 USDC on Base & Solana Mainnet.

Parameterstoken_addressrequired

rugshield_audit_holder_cluster_map

Analyzes on-chain funding origins for the top 50 token holders to detect sybil clusters, dev dump risks, and wash-trading rings. Cost: 0.020 USDC on Base & Solana Mainnet.

Parameterstoken_addressrequired

rugshield_audit_swap_simulation_proof

Executes state-override simulation of $1k, $10k, and $50k swap orders on Base Mainnet, calculating exact slippage, gas overhead, and MEV frontrun exposure. Cost: 0.020 USDC on Base & Solana Mainnet.

Parametersamount_usdtoken_addressrequired

rugshield_audit_cross_chain_bridge_risk

Audits canonical Base bridge and CCIP/LayerZero endpoints for message replay vulnerabilities, unbacked wrapped collateral, and admin multisig latency. Cost: 0.020 USDC on Base & Solana Mainnet.

Parameterstoken_addressrequired

rugshield_risk_institutional_token_report

Generates an end-to-end cryptographic audit report covering bytecode decompilation, honeypot tax simulation, LP lock proofs, holder clusters, and bridge risk. Cost: 0.020 USDC on Base & Solana Mainnet.

Parameterstoken_addressrequired

rugshield_token_screener

Screens trending Solana (Pump.fun/Raydium) and Base (Aerodrome/Uniswap V3) tokens with pre-verified honeypot, tax, and liquidity depth metrics. Cost: 0.010 USDC on Base & Solana Mainnet.

Parameterstoken_addressrequired

rugshield_smart_money_netflow

Tracks institutional and high-win-rate whale wallet net inflows and outflows across Solana SPL and Base ERC-20 tokens. Cost: 0.010 USDC on Base & Solana Mainnet.

Parameterstoken_addressrequired

rugshield_smart_money_dex_trades

Returns real-time DEX trades executed by labeled smart-money and whale wallets on Solana and Base with pre-trade honeypot verification. Cost: 0.010 USDC on Base & Solana Mainnet.

Parameterstoken_addressrequired

rugshield_tgm_who_bought_sold

Analyzes who bought and sold a specific Solana or Base token over the last 24h, segmented by Smart Money, Whales, Fresh Wallets, and Dev Clusters. Cost: 0.010 USDC on Base & Solana Mainnet.

Parameterstoken_addressrequired

rugshield_tgm_holders

Returns top-10/top-50 holder distribution, LP lock percentage, and coordinated sybil cluster detection for any Solana or Base token. Cost: 0.010 USDC on Base & Solana Mainnet.

Parameterstoken_addressrequired

rugshield_profiler_address_current_balance

Profiles any Solana or Base wallet address for current token balances, USD valuation, historical win-rate, and drainer/OFAC taint. Cost: 0.010 USDC on Base & Solana Mainnet.

Parameterstoken_addressrequired

Version history

1
  1. v1.0.0LatestOct 15, 2026

Score

100% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts