RugRadar

io.github.jimmybr-PDXPublished by GitHub account jimmybr-PDXv1.1.0Updated Oct 27, 2026

Solana token danger warnings: rug, token-safety and honeypot checks $0.01; watch alerts $0.05/24h.

VerifiedStreamable HTTPWeb executableFinanceSecurity & Monitoring

Overview

AI-generated overview

RugRadar scores crypto token risk (rug pull, safety, honeypot) and watches Solana tokens, charging about $0.01 per check via x402.

What you can do
  • Run a rug-pull risk check on a token across Solana (including pump.fun), BNB, Base, Ethereum or Arbitrum, returning a 0-100 score with plain reasons and a buyer summary
  • Inspect token safety details: mint/freeze authority, holder concentration, liquidity, age, deployer history, dev holdings and sold amounts, snipers, bundles, volume versus market cap, socials
  • Test whether a token can be sold, using simulated buy/sell and tax on EVM chains and a live Jupiter sell quote plus authority and token-2022 transfer controls on Solana
  • Start a 24h or 48h watch on one Solana token, re-checked roughly every 10 minutes, with a signed webhook alert on dev sells, liquidity drops, new authority, or a…
When to use it
Useful when an assistant is asked to vet a token before buying or recommending it, to explain why a token looks risky, or to keep an eye on a Solana position for a day or two. Each call is a paid API request, so it suits occasional due-diligence checks rather than bulk screening.
Requirements
Remote streamable HTTP endpoint; no local install. Payment is per call in USDC over x402 on Base, Polygon, Arbitrum, Solana, Avalanche or Sei, so an x402-capable client with a funded wallet is needed. An optional prepaid credit key can be sent in the X-RugRadar-Key header; without it each tool returns its payment requirement.
Before you install
Calls cost money: about $0.01 per check and $0.05 or $0.10 for a 24h or 48h watch, paid in USDC from a wallet the client signs with. The X-RugRadar-Key header is a secret and should be kept private. Watch alerts send data to a webhook you supply. Risk scores are third-party heuristics, not investment advice, and coverage gaps exist (for example some Solana AMMs are not covered).

Installation

In SourceWeft

  1. Open RugRadar in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.github.jimmybr-PDX%2Frugradar/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "rugradar": {
      "type": "http",
      "url": "https://x402-seller-pmlm.onrender.com/mcp"
    }
  }
}

README

Agent Research Tools — pay-per-call x402 APIs (USDC on Base, Polygon, Arbitrum, Solana, Avalanche, Sei)

Live: https://x402-seller-pmlm.onrender.com · Agent guide: /llms.txt · OpenAPI: /openapi.json · Discovery: /.well-known/x402

No API key, no signup. AI agents pay per request in USDC on Base (eip155:8453), Polygon (eip155:137), Arbitrum (eip155:42161), Solana mainnet (CDP facilitator) or Avalanche (eip155:43114) and Sei (eip155:1329) (free PayAI facilitator) using the x402 protocol, settled through the Coinbase CDP facilitator and listed in the CDP x402 Bazaar.

EndpointPriceUse it whenReturns
GET /report?q=<question>$0.01You need a quick, cited answer or background on a topic1-3 sentence answer, key_points tied to source ids, sources[] (typically 1-5: Wikipedia first, plus Stack Overflow, GitHub, Crossref papers, official docs when they match; off-topic sources dropped) with URLs, dates and supporting quotes, confidence
GET /read?url=<https url>$0.005You have a URL and need its text for an LLMtitle, description, publishedAt, clean markdown, wordCount, headings[], links[]
GET /check?url=<x402 endpoint>$0.005You are about to pay for or list an x402 APIreadiness score, per-check results, fixes[] (one unpaid probe; never pays the target)
GET /news?q=<keywords>$0.005You need what happened on a topic in the last 1-7 daysarticles[] (title, url, outlet, publishedAt, match score, partialMatch), outlets, provider status. Optional hours (1-168, default 72), limit (1-25). Headlines + links only
GET /price?token=<symbol, 0x address or Solana mint>$0.002You need a verifiable USD price + 24h change for a tokenpriceUsd, change24hPct + priceUsd24hAgo (EVM), confidence, poolSpreadPct, totalDepthUsd, pools[] with explorer links, block/slot. Optional chain (ethereum, base, arbitrum, polygon, solana)
GET /solana-price?token=<symbol or mint>$0.002You need a Solana token price (incl. pump.fun / PumpSwap tokens)priceUsd, confidence, thinLiquidity, pools[] (Orca Whirlpool, Raydium CLMM, PumpSwap, pump.fun curve) with depth, poolSpreadPct, solUsd, slot
GET /balance?address=<0x, name.eth or Solana address>$0.003You need what a wallet holds and what it is worthper-chain native + tokens[] (balance, price, USD) and totalUsd; EVM = Ethereum, Base, Arbitrum, Polygon in one call. Optional chain, tokens (extra contracts/mints)
GET /tx?hash=<0x hash or Solana signature>$0.003You need to know if a tx/payment landed and what it didstatus, timestamp, confirmations, from/to, decoded method (flags x402 / EIP-3009 USDC payments), fee in USD, decoded tokenTransfers[] (EVM) or SOL/token balance changes (Solana). Optional chain
GET /gas[?chain=]$0.002You need current fees before sending a txbase fee, slow/standard/fast priority fees, maxFeePerGas, USD cost of a transfer / ERC-20 transfer / swap per EVM chain, Solana priority fees, cheapestEvmForErc20Transfer

Never charged for errors: 400 bad input, 422 nothing found / target unreachable, 503 unavailable. The x402 middleware only settles a payment when the handler returns 2xx.

Call it

bash
# 1. Unpaid call -> 402 with base64 JSON challenge in the PAYMENT-REQUIRED headercurl -i "https://x402-seller-pmlm.onrender.com/report?q=history+of+the+transistor"
# 2. Pay with any x402 client, e.g. @x402/fetch
ts
import { wrapFetchWithPayment } from "@x402/fetch";// ... create an x402 client with an EVM signer holding a little Base USDCconst res = await fetchWithPayment("https://x402-seller-pmlm.onrender.com/report?q=what+is+RAG");console.log(await res.json()); // { summary, bullets, sources, ... }

Run it yourself

Node 22+, a CDP API key (https://portal.cdp.coinbase.com), and a Base receive address.

bash
cp .env.example .env   # fill CDP_API_KEY_ID / CDP_API_KEY_SECRET / X402_PAY_TOnpm ci && npm run dev  # http://localhost:8402
EnvDefaultNotes
X402_ENVdevelopmentproduction = Base, Polygon, Arbitrum, Solana (CDP) + Avalanche, Sei (PayAI); development = Base Sepolia + Solana Devnet
X402_NETWORKSper X402_ENVOptional comma-separated CAIP-2 override, e.g. eip155:8453,eip155:137 (supported: 8453, 137, 42161, 43114, 1329, 84532, Solana mainnet/devnet). Same X402_PAY_TO on every EVM chain
X402_SOLANA_PAY_TObuilt-in public addressSolana receive address (public key only; the secret never lives in this repo)
PAYAI_FACILITATOR_URLhttps://facilitator.payai.networkFacilitator for Avalanche/Sei (free tier, no API key)
X402_PAY_TO—Your EVM receive address (else CDP provisions one; needs CDP_WALLET_SECRET)
REPORT_PRICE / READ_PRICE / CHECK_PRICE / NEWS_PRICE / TOKEN_PRICE$0.01 / $0.005 / $0.005 / $0.005 / $0.002Per-call prices
SOL_PRICE / BALANCE_PRICE / TX_PRICE / GAS_PRICE$0.002 / $0.003 / $0.003 / $0.002Per-call prices for /solana-price, /balance, /tx, /gas
NEWS_GKG_HOURS24Hours of the GDELT GKG 15-minute news index kept in memory (0 = off). ~2.5 MB download per 15 min, ~50k headlines/day, ~60 MB RAM
NEWS_GDELT_APIoff1 = also query the GDELT DOC API (rate-limited; adds latency)
TRAFFIC_FILE./data/traffic.jsonWhere /stats counts are saved (every 10 min + on shutdown). off = memory only. Render free has no persistent disk, so counts reset on each deploy unless you mount a disk here
SOLANA_RPC_URLSSolana Foundation + PublicNodeComma-separated Solana RPC URLs (first healthy one wins)
PUBLIC_URLRender URLUsed in discovery docs
DAILY_SPEND_CAP_USD50Runaway guard on confirmed settlements per UTC day
GROK_API_KEY or OPENAI_API_KEY—Optional: LLM synthesis over the cited sources; without it /report is extractive
SERPER_API_KEY—Optional: Serper (Google results API) as the first /search source (5 s timeout); on error/quota or if unset, falls back to Brave → DuckDuckGo → Bing → Bing RSS → Wikipedia, topping up short result lists

Free routes: /health, /stats, /examples, /llms.txt, /openapi.json, /.well-known/x402, /robots.txt, /icon.png (/icon.svg).

Answer permalinks (/a/<id>)

Every paid /report answer gets a free shareable page at /a/<id> (clean HTML; ?format=json for the stored JSON) with a footer link back to the service. Stored in memory only (max 500, 30 days), so links reset on each Render deploy/restart. Only the answer is stored (question, answer, sources), never IP, user agent or payer. /a/example-mcp is a pinned demo. The paid response leads with bot-friendly fields: answer, answer_citations, key_points[{text,citations}], sources with publisher, published, quote, confidence + confidence_why, checked_at, permalink; the original fields (summary, bullets, ...) are unchanged.

Interest tracker (/stats)

Open /stats in a browser (or /stats?view=simple) for a plain-English page: one headline sentence, a per-tool table (looked at price / paid / bots-crawlers), Pacific times. Programs get JSON (default, or ?format=json). Payments signed by our own test wallet (SELF_PAYERS, default 0x4862…4940) and the unpaid probe just before them from the same visitor are tagged self and excluded from buyer counts (selfPaid shows them).

Per paid route and per hour / UTC day: unpaid 402s, paid 200s, settle failures, rejected payments, uncharged errors and unique visitors, split by visitor class: client (anyone who sends a payment, or a non-bot user agent such as node, python, curl, a browser), crawler (CDP Bazaar, x402scan, 402index, other x402 directories), pinger (cron-job.org, UptimeRobot, ...), bot (search/AI crawlers, scanners, empty UA), head (HEAD/OPTIONS) and self (scripts/rank-check.mjs). Visitors are sha256(random daily salt + IP + UA); raw IPs are never stored and the salt never leaves memory. /health carries a compact traffic block; /stats has today, yesterday, last 7 days, 48 hourly and 35 daily buckets, top user agents and definitions. Memory use is a few hundred KB.

Discovery and ranking

  • Every paid route declares extensions.bazaar (input schema + example, typed output schema + example) and resource.serviceName / tags / iconUrl / mimeType, per the x402 Bazaar spec.
  • CDP Bazaar indexes a route after its first CDP-settled payment and refreshes ranking every ~6 h (30-day calls, unique payers, metadata quality, availability). Routes with no settlement for 30 days drop out.
  • node scripts/rank-check.mjs prints the recurring checklist (live status, Bazaar listing + rank per query with and without the Base filter, CDP validate, on-chain sales, /stats interest tracker, x402scan presence).
  • What moves Bazaar search order (CDP docs + observed rankings): relevance of serviceName, tags and description to the query (hybrid text + semantic search), blended with 30-day unique buyers, settled calls, recency and metadata completeness; recomputed about every 6 h; results are capped per domain; indexed metadata only refreshes after a new CDP-settled payment.

Guard rails

  • Settlements are logged to payments.jsonl (gitignored) only after the facilitator confirms, with payer + tx hash.
  • Circuit breaker: 3 failed settlements (verified payment, settle failed) in 10 minutes -> 503 (uncharged) for paid calls.
  • /news sources: the GDELT GKG 15-minute files (open data, cite gdeltproject.org; indexed in memory so no API rate limits), Hacker News (Algolia API) and ~26 publisher RSS/Atom feeds (cached 10 min). Only headlines, links, outlet and time are returned, never article text.
  • /price reads Uniswap v3 pool state (slot0, reserves) straight from public RPC nodes via Multicall: no third-party price API, so every number is verifiable onchain at the returned block. Pools under $25k quote-side depth are ignored; no qualifying pool -> 422 (uncharged). 24h change comes from the deepest pool's own TWAP oracle (observe) or an archive slot0 read ~24 h of blocks back. Cached 30 s.
  • /solana-price (and /price for Solana) derives Orca Whirlpool, Raydium CLMM, PumpSwap and pump.fun bonding-curve accounts by PDA and reads them from public Solana RPC (no indexer, no API key). Not covered: Raydium AMM v4, Meteora. No 24h change on Solana (public RPC keeps no price history). Under $5k depth -> 422; under $25k -> thinLiquidity.
  • /balance, /tx, /gas read public RPC nodes only (Multicall3 on EVM). Balances cover native + a curated list of major tokens per chain plus any tokens= you pass (public RPC does not index every token a wallet holds).
  • /read and /check only fetch public https hosts (private/loopback/link-local IPs blocked, redirects re-checked, 3 MB / 15 s caps).

MIT-style: use freely. No secrets in this repo; never commit .env.

Source: README.md at commit 1b973f9

Tools

4

rug_check

RugRadar rug check / rug pull checker: 0-100 risk score with plain reasons and a buyer summary for a token on Solana (incl. pump.fun), BNB, Base, Ethereum or Arbitrum. $0.01 per check: 45+ data points per token, including 16 signals RugCheck's free report doesn't show (dev-sold %, sniper and launch-bundle share, a live can-you-sell quote, the creator's past launches, volume vs market cap, bot-trading score), across 5 chains.

Parameterschaintokenrequiredapi_key

token_safety

RugRadar token safety check: mint/freeze authority, holder concentration, liquidity, age, deployer history, dev holding/sold, snipers, bundles, volume vs market cap, socials; 0-100 risk score. $0.01 per check: 45+ data points per token, including 16 signals RugCheck's free report doesn't show (dev-sold %, sniper and launch-bundle share, a live can-you-sell quote, the creator's past launches, volume vs market cap, bot-trading score), across 5 chains.

Parameterschaintokenrequiredapi_key

honeypot_check

RugRadar honeypot check: can I sell this token? Simulated buy/sell and tax on EVM chains, live Jupiter sell quote plus freeze/mint authority and token-2022 transfer controls on Solana; 0-100 risk score. $0.01 per check: 45+ data points per token, including 16 signals RugCheck's free report doesn't show (dev-sold %, sniper and launch-bundle share, a live can-you-sell quote, the creator's past launches, volume vs market cap, bot-trading score), across 5 chains.

Parameterschaintokenrequiredapi_key

watch_token

RugRadar Watch + Alert: watch one Solana token for 24h ($0.05 = 5 credits) or 48h ($0.10 = 10 credits). Re-checked about every 10 min with the RugRadar engine; signed webhook alert when the dev sells, liquidity drops 30%+, mint/freeze authority appears, risk score jumps 20+ points, or it can't be sold. Pass a RugRadar credit key; without one the tool returns the x402 payment requirement for GET /watch.

Parametershourstokenrequiredapi_keywebhook_urltelegram_chat_id

Version history

2
  1. v1.1.0LatestOct 19, 2026
  2. v1.0.0Oct 14, 2026

Score

90% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts

    Declare a license in the repository or the registry entry.