Haris Guardian - Solana Token Risk Check

io.github.fitness9991Published by GitHub account fitness9991v1.0.1Updated Nov 4, 2026

Read-only Solana SPL/Token-2022 rug-risk check: 0-100 score (higher=riskier) with reasons.

The publisher's own server: check.tattoo: tattoo size and placement guide

VerifiedStreamable HTTPWeb executableFinanceSecurity & Monitoring

Overview

AI-generated overview

Read-only Solana token risk checker that scores SPL and Token-2022 mints 0-100 for scam and rug risk, with paid deep, batch and diff checks.

What you can do
  • Check a Solana mint for rug risk: score, verdict and plain-English flags on authorities, Token-2022 traps, holder concentration, liquidity and a simulated buy/sell
  • Run a paid deep check on holder concentration, wallets linked by a shared funder, creator-funded and fresh wallets, and LP lock status
  • Batch-check up to 20 mints in one paid call
  • Diff a token against a previous result to get alerts on changed authorities, unlocked LP, pulled liquidity or new red flags
When to use it
Useful when an assistant needs a quick, read-only risk signal on a Solana token before discussing or acting on it, or when monitoring a token for changes over time. The free tier covers occasional single checks; paid tiers suit deeper holder analysis or bulk screening.
Requirements
Remote streamable-HTTP endpoint; no account, API key or environment variables declared. Free tier is limited to 3 checks per day per IP; paid tools require an x402 payment in USDC on Solana, so a wallet able to pay is needed. Network access to the hosted API.
Before you install
Paid tools cost money: $0.01 USDC per check, $0.10 for deep check, $0.10 per batch of up to 20 mints, $0.02 for diff, paid via x402 to a stated Solana address. The server is read-only and never signs or trades, but payment flows involve a wallet. Scores are heuristic signals, not financial advice or a safety guarantee. Mint addresses are sent to a third-party API.

Installation

In SourceWeft

  1. Open Haris Guardian - Solana Token Risk Check in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.github.fitness9991%2Fharis-guardian/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "haris-guardian-solana-token-risk-check": {
      "type": "http",
      "url": "https://haris-api.vercel.app/mcp"
    }
  }
}

README

[Haris Guardian logo]

Haris Guardian — Solana token risk check (MCP + REST + x402)

Read-only scam/rug-risk checks for Solana SPL and Token-2022 tokens. Give it a mint address; get a 0–100 risk score (higher = riskier), a verdict, and plain-English reasons. It never signs, trades, or holds keys.

What it checks

  • Mint and freeze authority
  • Token-2022 traps: permanent delegate, transfer hooks, transfer fees
  • Holder concentration
  • Liquidity, LP burn/lock %, Streamflow locks
  • Simulated buy + sell (honeypot test)

Endpoints

InterfaceURL
MCP (streamable-http)https://haris-api.vercel.app/mcp — tools check_solana_token, diff_solana_token, deep_check_solana_token, batch_check_solana_tokens
REST (free, 3/day)GET https://haris-api.vercel.app/v1/check/{mint}
REST (paid, x402)POST https://haris-api.vercel.app/v1/paid/check · GET /v1/paid/check/{mint}
Deep check (x402)POST https://haris-api.vercel.app/v1/paid/deep-check {"mint"}
Batch check (x402)POST https://haris-api.vercel.app/v1/paid/batch-check {"mints": [up to 20]}
Watch/diff (x402)POST https://haris-api.vercel.app/v1/paid/diff {"mint", "previous"}
OpenAPIhttps://haris-api.vercel.app/openapi.json
Docshttps://haris-api.vercel.app/docs
A2A agent cardhttps://haris-api.vercel.app/.well-known/agent.json

Pricing

  • 3 free checks per day per IP.
  • After that: $0.01 USDC per check on Solana via x402 (HTTP 402 → pay → retry). Payments go to 7ZpBTGZ7mBm81esAq77FFm293zAuGM3Hi249fKPnVDfJ.
  • Deep check $0.10: holder concentration (top1/top5/top10 %), top wallets linked by a shared funder (bundles/insiders), creator-funded and fresh wallets, LP lock/burn, authorities, score + reasons.
  • Batch check $0.10 per batch of up to 20 mints (charged only if at least one mint is checked).
  • Watch/diff $0.02: send a previous result, get alerts on what changed (authority re-enabled, LP unlocked, liquidity pulled, sell blocked). Stateless.
  • Failed calls are never charged. See docs/API.md.

Quick start

bash
curl https://haris-api.vercel.app/v1/check/DezXAZ8z7PnrnRJjz3wXBoRgixCa6xjnB7YaB1pPB263

MCP client config:

json
{ "mcpServers": { "haris-guardian": { "type": "http", "url": "https://haris-api.vercel.app/mcp" } } }

Limits / honesty

A score is a heuristic signal, not financial advice or a guarantee. A low score does not mean a token is safe or will go up.

Links

Website https://harisguardian.netlify.app · X @HarisGuard_SOL · Telegram bot: Haris Guardian · Contact [email protected]

Source: README.md at commit 4545c44

Tools

4

check_solana_token

Scam/rug risk check for a Solana SPL or Token-2022 token mint. Returns a 0-100 risk score (HIGHER = RISKIER), a verdict, and flags with plain-English reasons: mint/freeze authority, permanent delegate, transfer hooks/fees, holder concentration, liquidity, LP burn/lock %, Streamflow locks and a simulated buy+sell (honeypot test). Read-only; never signs or trades.

Parametersmintrequired

deep_check_solana_token

Deep Solana token risk check (PAID, x402 over REST): holder concentration (top1/top5/top10 % of supply), top wallets linked by a shared funder (bundles/insiders), creator-funded holders, fresh wallets, LP lock/burn status, authorities, score + reasons. This tool returns exact x402 payment instructions for POST /v1/paid/deep-check; pay with any x402 client.

Parametersmintrequired

batch_check_solana_tokens

Batch Solana token risk check (PAID, x402 over REST): up to 20 mints in one call for one flat price. This tool returns exact x402 payment instructions for POST /v1/paid/batch-check.

Parametersmintsrequired

diff_solana_token

Watch/diff a Solana token: pass the mint and a previous Haris result (from check_solana_token or an earlier diff); returns alerts on what changed (authority re-enabled, LP unlocked, liquidity pulled, sell blocked, new red flags) plus the fresh result. Shares the free tier with check_solana_token; then x402 via POST /v1/paid/diff.

Parametersmintrequiredpreviousrequired

Version history

1
  1. v1.0.1LatestNov 4, 2026

Score

90% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts

    Declare a license in the repository or the registry entry.

Other Check integrations

check.tattoo: tattoo size and placement guide

tattoo.checkOfficial publisher

check.tattoo: tattoo size and placement guide's hosted MCP server, published by check.tattoo; no sign-in required; Streamable HTTP; 5 tools.

Streamable HTTPWeb executable
5 toolsOct 24, 2026

iva.pt — EU VAT check (VIES) and Portuguese VAT law

pt.ivaOfficial publisher

Validates EU VAT numbers against VIES and returns Portuguese VAT Code (CIVA) and RITI articles, in Portuguese or English.

Streamable HTTPWeb executable
Business & Commerce4 toolsOct 30, 2026

Dirtsmith Evidence Quote Check

Published by GitHub account throttler300

A local MCP server that binds an assistant's citations to admitted source text with spans and can reject stale-hash references.

STDIODesktop only
Knowledge & MemoryNot validated yetNov 7, 2026

HTTP Header Policy Check — HSTS, CSP & Frame Declarations

Published by GitHub account kriton-dev

Remote Apify-hosted MCP server that lets an assistant check seven declared HTTP security header families on a site, without returning raw header values.

Streamable HTTPWeb executableAuth
Security & MonitoringCredential requiredNov 7, 2026

VOOPA Render Check

Published by GitHub account Voopa-Corp

Reviews a completed AI-generated video against its brief and recommends whether to edit, retry once, or change approach before paying for another render.

Streamable HTTPWeb executable
AI & ML2 toolsNov 7, 2026