Trust Check

io.github.gmahar82-stackPublished by GitHub account gmahar82-stackv1.1.0Updated Oct 24, 2026

Base crypto safety for agents: honeypot/tax test, address poisoning, rug feed, creator record.

The publisher's own server: check.tattoo: tattoo size and placement guide

VerifiedStreamable HTTPWeb executableFinanceSecurity & Monitoring

Overview

AI-generated overview

Remote MCP server that lets an assistant run Base-chain crypto safety checks on tokens, addresses and token creators before buying or sending funds.

What you can do
  • Simulate a token buy and sell to detect honeypots and hidden taxes, and read owner powers, whale concentration, liquidity locks and scam lists
  • Check a destination address for scam blacklists, address poisoning, contract and burn addresses, and never-used wallets
  • List recent Base tokens whose pool liquidity collapsed, with peak and remaining liquidity and the creator wallet
  • Check a token creator's record of earlier tokens and how many collapsed
  • Produce a full due-diligence report combining token check, creator record, wallet check, first funder, owner wallet, liquidity history and domain age
When to use it
Useful when an assistant helps with Base-chain trading or payments and needs a quick risk verdict before buying a token, sending crypto to an address, or trusting a newly launched token's creator.
Requirements
Runs as a remote streamable HTTP endpoint; no package, environment variables or headers are declared. Some tools are limited to 5 free calls per day, after which paid calls are billed per call via x402.
Before you install
Several tools are metered: 5 free calls per day, then paid per call via x402, so usage can cost money. Verdicts are risk signals, not guarantees, and the server reports on third-party on-chain data. It does not itself move funds, but acting on its output involves real crypto transactions.

Installation

In SourceWeft

  1. Open Trust Check in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.github.gmahar82-stack%2Ftrust-check/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "trust-check": {
      "type": "http",
      "url": "https://trust-check.gm-tools.workers.dev/mcp"
    }
  }
}

Tools

5

check_token_safety

Check if a token is safe to buy (Base)

Before buying a token on Base, check it: simulates a real buy and sell (honeypot and hidden-tax test), reads owner powers (mint, blacklist, fee changes, pause), whale concentration, liquidity lock and scam lists. Returns a verdict (scam / high_risk / caution / low_risk) with plain-language reasons. 5 free checks per day, then $0.002 per check via x402 (USDC on Base).

Parametersaddressrequired

check_address_safety

Check if an address is safe to send funds to (Base)

Before sending crypto on Base, check the destination: scam blacklists, address poisoning (a look-alike of an address you really use; pass `from` = your wallet), token contracts and burn addresses where funds are lost, never-used addresses. Returns a verdict with reasons. 5 free checks per day, then $0.002 per check via x402 (USDC on Base).

Parametersfromknownaddressrequired

recent_liquidity_collapses

Recent rug pulls and dumps on Base

New Base tokens whose pool liquidity collapsed (fell 90%+ from its peak: a rug pull or a heavy dump) in the last hours, newest first, with peak and remaining liquidity, hours from launch and the creator wallet. Use it to exit positions and blocklist serial creators. 5 free calls per day, then $0.002 per call via x402 (USDC on Base).

Parametershours

check_token_creator

Has this token creator rugged before? (Base)

Before buying a newly launched Base token, check the wallet that deployed it: how many of its earlier tokens Rug Watch followed, and how many collapsed (rug pull or dump). Verdict: serial_collapser / collapsed_before / no_collapses_seen / unknown. 5 free calls per day, then $0.002 per call via x402 (USDC on Base).

Parametersaddressrequired

deep_token_safety_report

Deep Safety Report on a token (Base)

Full due diligence before a bigger buy of a Base token: the token check (buy/sell simulation, taxes, owner powers, whales, liquidity, scam lists) plus the creator's Rug Watch record, wallet check and first funder, the owner wallet, the token's liquidity history, website domain age, how often new Base tokens collapse, an AI summary and a what-to-do list. $2 per report via x402 (USDC on Base), no free calls; failures are not charged.

Parametersaddressrequired

Version history

2
  1. v1.1.0LatestOct 12, 2026
  2. v1.0.0Sep 27, 2026

Score

83% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts

    Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.

  • LicenseNot applicable

    A hosted service is used under its provider's terms, so no license is expected here. This check is left out of the percentage.

Other Check integrations

check.tattoo: tattoo size and placement guide

tattoo.checkOfficial publisher

check.tattoo: tattoo size and placement guide's hosted MCP server, published by check.tattoo; no sign-in required; Streamable HTTP; 5 tools.

Streamable HTTPWeb executable
5 toolsOct 24, 2026

iva.pt — EU VAT check (VIES) and Portuguese VAT law

pt.ivaOfficial publisher

Validates EU VAT numbers against VIES and returns Portuguese VAT Code (CIVA) and RITI articles, in Portuguese or English.

Streamable HTTPWeb executable
Finance4 toolsOct 30, 2026

Agent Data Tools: Company and VAT check

Published by GitHub account Nutshell2000

Pay-per-call company checks: EU VAT validation, Nordic and French company registers, LEI lookup and OFAC sanctions screening.

Streamable HTTPWeb executable
Finance10 toolsNov 14, 2026

Sanctions Check

Published by GitHub account chomkaevan

Screens crypto wallet addresses and person or company names against US Treasury OFAC sanctions lists, with per-call payment via x402.

Streamable HTTPWeb executable
Finance3 toolsNov 14, 2026

Property Risk Check

Published by GitHub account chomkaevan

Remote MCP server that returns a one-call natural hazard report for a US address or coordinates, including FEMA flood zone and hazard ratings.

Streamable HTTPWeb executable
Location & Lifestyle1 toolNov 14, 2026