SafeRoute

io.github.crystalsignalPublished by GitHub account crystalsignalv0.18.1Updated Oct 25, 2026

Noncustodial Base x402 payment control and seller settlement recovery

VerifiedStreamable HTTPWeb executableFinanceSecurity & Monitoring

Overview

AI-generated overview

SafeRoute is a remote MCP server for noncustodial Base payment safety: pre-payment checks, swap and transaction preflights, and signed receipts before an agent,

What you can do
Run pre-payment ALLOW/BLOCK checks with duplicate-safe ID binding and optional settlement verification via protect_payment, which is free and rate-limited; the buyer signs and pays. Check Base swap safety without a wallet and get safety-checked noncustodial swap quotes. Assess wallet risk and approved-token risk and liquidity. Decode and simulate approved ERC-20 calldata or the official ERC-8004 registration, and prepare bounded, simulated unsigned token transfers. Guard trades before signing, verify mined transactions against buyer intent, and verify swap execution against a signed receipt. Prepare a bounded route to a payer-owned USDC target for x402 payments, and list the seven approved B
When to use it
Use it when an AI agent is about to make or sign a payment or swap on Base and you want a pre-signing safety check, a risk verdict, or a signed receipt. Also useful for verifying after the fact that a mined transaction matched the intended action.
Requirements
A remote streamable HTTP endpoint; no local package, environment variables or headers are declared. Most tools are paid per call in USDC on Base (from $0.001 to $0.12), and the buyer signs and broadcasts transactions.
Before you install
Several tools cost USDC per call, so an agent can spend money. The server is noncustodial and the buyer signs and pays, but it handles payment and transaction data, so review what is sent. protect_payment is free and rate-limited; referral payouts are disabled.

Installation

In SourceWeft

  1. Open SafeRoute in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.github.crystalsignal%2Fsaferoute/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "saferoute": {
      "type": "http",
      "url": "https://api.usesaferoute.com/mcp"
    }
  }
}

README

This repository has no README.

Tools

13

protect_payment

One automatic x402 payment-safety front door: pre-payment ALLOW/BLOCK, duplicate-safe ID binding, policy risk reasons, and optional mined-settlement verification. Free and rate-limited; the buyer signs and pays.

ParameterspaymentrequiredsettlementidempotencyKeyrequired

check_base_swap

Wallet-free approved-token Base swap safety preflight. Costs $0.001 USDC.

ParameterstorequiredfromrequiredamountrequiredintentIdreferralCodesourceAgentId

get_safe_swap_quote

Safety-checked noncustodial Base swap quote. Costs $0.01 USDC; the buyer signs and broadcasts.

ParameterstorequiredfromrequiredamountrequiredwalletrequiredintentIdreferralCodeexecutionModesourceAgentId

prove_safe_action

Create a signed pre-sign ALLOW, BLOCK, or REVIEW receipt. Costs $0.05 USDC.

ParameterstofromtokenactionrequiredamountwalletintentIdtransactionreferralCodeexecutionModesourceAgentId

check_wallet_risk

Read-only Base wallet account-posture check. Costs $0.01 USDC.

ParameterswalletrequiredintentIdreferralCodesourceAgentId

check_token_risk

Approved Base token risk and liquidity check. Costs $0.03 USDC.

ParameterstokenrequiredintentIdreferralCodesourceAgentId

preflight_transaction

Decode and simulate approved Base ERC-20 calldata or SafeRoute's exact official ERC-8004 registration. Costs $0.05 USDC.

ParametersintentIdtransactionrequiredreferralCodesourceAgentId

prepare_token_transfer

Prepare a bounded, simulated unsigned Base token transfer. Costs $0.10 USDC.

ParameterstokenrequiredamountrequiredsenderrequiredintentIdrecipientrequiredreferralCodesourceAgentId

guard_base_trade

Complete pre-sign trade guard with route and simulation evidence. Costs $0.12 USDC.

ParameterstorequiredfromrequiredamountrequiredwalletrequiredintentIdreferralCodeexecutionModesourceAgentId

verify_transaction_intent

Compare a mined Base transaction with buyer intent. Costs $0.05 USDC.

ParametersintentrequiredintentIdreferralCodesourceAgentIdtransactionHashrequired

verify_swap_execution

Verify a standard-mode SafeRoute Base execution against its signed receipt. Free; referral payouts remain disabled.

ParametersreceiptrequiredtransactionHashrequiredreceiptSignaturerequired

route_agent_payment

Prepare a bounded, simulated exact-buy route to a payer-owned Base USDC target covering the x402 payment and optional buffer. Costs $0.05 USDC; buyer confirms funding, then retries standard x402 once.

Parametersrequestrequired

list_supported_assets

List SafeRoute's seven approved Base assets, limits, fees, and execution modes. Free.

Takes no parameters.

Version history

1
  1. v0.18.1LatestSep 16, 2026

Score

75% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts

    Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.

  • License10 pts

    Declare a license in the repository or the registry entry.