io.github.baianomarceloeduardo-jpgPublished by GitHub account baianomarceloeduardo-jpgv2.0.2Updated Oct 25, 2026
Base L2 token safety for AI agents: honeypot scans, swap simulation, approval and liquidity risk.
An MCP server for checking Base L2 token safety: honeypot scans, swap simulation, approval and liquidity risk, plus signed attestations and utility tools.
Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.
Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.
Read https://sourceweft.com/mcp/io.github.baianomarceloeduardo-jpg%2Fautomaton-token-safety-mcp/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.Add this to your client's mcpServers config.
{
"mcpServers": {
"automaton-token-safety": {
"type": "http",
"url": "https://api.automaton-sovereign.workers.dev/mcp"
}
}
}This repository has no README.
FREE, runs locally. Lint any x402 paid endpoint for protocol conformance: HTTP 402 challenge, x402Version, accepts[] (exact scheme), Base network and addresses, EIP-712 domain, and rejection of malformed, forged, expired, underpaid and wrong-recipient EIP-3009 payments. Returns verdict, grade and per-check results.
urlrequiredFREE, runs locally against Base Mainnet RPC. Dry-run a transaction before sending it: eth_call + eth_estimateGas at the latest block. Predicts whether it will revert and decodes the reason (Error(string), Panic(uint256) codes, custom-error selector, or node rejection such as insufficient funds). Returns { ok, willRevert, revertReason, estimatedGas, returnData }.
torequireddatafromvaluePAID 0.001 USDC/call, or free trial (3/day/IP). Bytecode security scan of a Base token contract: honeypot opcodes, mint/blacklist/pause/tax capabilities, a risk score and a verdict. Read-only — no transaction is sent. On 402, pay the accepts[] terms then retry with the payment tx hash. (Exposed as `security_scan` on older clients.)
addressrequiredpaymentPAID 0.01 USDC/call, or free trial (3/day/IP). Read-only buy/sell simulation of a Base token through the Uniswap V2 WETH pool: returns reverts, the MEASURED transfer tax and a honeypot verdict. No transaction is sent. On 402, pay the accepts[] terms then retry with the payment tx hash. (Not the same tool as simulate_base_transaction, which dry-runs arbitrary calldata for free.)
siderequiredtokenrequiredamountrequiredwalletrequiredpaymentPAID 0.01 USDC/call, or free trial (3/day/IP). Read-only audit of the ERC-20 approvals an owner granted for a token: spender, allowance, contract vs EOA, verified flag, drainable amount and a drain-risk verdict. On 402, pay the accepts[] terms then retry with the payment tx hash.
ownerrequiredtokenrequiredpaymentspendersPAID 0.01 USDC/call, or free trial (3/day/IP). One-block liquidity audit of a Base token: Uniswap V3 / Aerodrome pools, the USD needed to move the price 1/2/5/10%, holder concentration, LP burn evidence and explicit coverage gaps. On 402, pay the accepts[] terms then retry with the payment tx hash.
pairtokenrequiredpaymentPAID 0.001 USDC/call, or free trial (3/day/IP). Newest liquidity pools created on Base (Uniswap v3/v4, Aerodrome) with a bytecode risk score per new token. Filters are optional. On 402, pay the accepts[] terms then retry with the payment tx hash.
dexlimitsincemaxRiskminRiskpaymentLEGACY NAME of token_scan — same route, same arguments, kept so clients written against this server keep working. PAID 0.001 USDC/call, or free trial (3/day/IP). Base token safety analysis: honeypot detection, mint traps, selfdestruct/delegatecall, proxy and tax risks from contract bytecode, with a risk score and signed verdict. On 402, pay the accepts[] terms then retry with the payment tx hash.
addressrequiredpaymentCreate a SIGNED, hash-chained, append-only attestation (verifiable proof-of-existence) for a payload. PAID: 0.05 USDC/call, or free trial (3/day/IP). On 402, pay the accepts[] terms then retry with the payment tx hash.
datarequiredpaymentFREE. Verify a ledger entry by index or by data hash: recomputes hash, checks ECDSA signature and chain link.
indexdataHashFREE. Get the ECDSA P-256 public key (PEM) and keyId used to sign ledger entries.
Takes no parameters.
FREE. Read the attestation ledger (paginated).
fromlimitPAID 0.001 USDC/call. Get real-time Base L2 gas estimates and asset prices (ETH, USDC, cbBTC, AERO, VIRTUAL) with an ECDSA P-256 digital signature from the sovereign agent.
paymentPAID 0.001 USDC/call. Generate a cryptographic Merkle inclusion proof for a list of items and target element.
itemsrequiredtargetpaymentFREE. Verify a cryptographic Merkle inclusion proof against a root.
itemrequiredrootrequiredproofrequiredPAID 0.001 USDC/call. Web3 token risk, security checks, and sentiment scoring with signed verdict.
assetrequiredpaymentPAID 0.001 USDC/call. SHA-256 hex of a string.
inputrequiredpaymentPAID 0.001 USDC/call. Generate a UUIDv4.
paymentFREE. Full pricing terms, endpoints, and payment mechanics.
Takes no parameters.
FREE. Service liveness and version.
Takes no parameters.
75% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.
Declare a license in the repository or the registry entry.