Token Honeypot & EVM Pre-Flight Audit MCP

io.github.ralf9090Published by GitHub account ralf9090v1.0.0Updated Nov 12, 2026

Token honeypot detector, 360 rug-pull audit, EVM transaction simulator & OFAC compliance MCP.

The publisher's own server: audit.domains - Domain Valuation

VerifiedStreamable HTTPWeb executableWeb Search & ScrapingFinanceSecurity & Monitoring

Overview

AI-generated overview

Remote MCP server for crypto token safety checks, DeFi market intelligence and EVM transaction pre-flight, paid per call in USDC on Base.

What you can do
  • Audit tokens and URLs for honeypot, tax, phishing and prompt-injection risk, and screen wallets for sanctions and AML flags
  • Analyze DEX order flow, liquidity, whale portfolios, DeFi yields, perp funding spreads, prediction-market odds and macro indicators
  • Build swap and bridge calldata and simulate EVM transactions, gas and allowances before signing
  • Search social discussions and academic papers, extract web pages, look up domains, GitHub repos and package CVEs
  • Generate combined due-diligence and B2B dossiers, and buy a prepaid API pass or test x402 payment settlement
When to use it
Useful when an assistant needs to vet a token or wallet before a trade or transfer, compare DeFi yields and market signals, or prepare and simulate an EVM transaction. Also handy for quick social, academic, domain and package research from one endpoint.
Requirements
Remote Streamable-HTTP endpoint; no local install needed, though a Node.js 18+ npx/stdio setup is documented. No account or key for a free tier of two calls per day; higher volume needs an ak_live prepaid pass key or per-call x402 USDC payment on Base.
Before you install
Most tools beyond the free daily quota cost USDC on Base, and the prepaid pass is a paid purchase. The swap-quote tool returns ready-to-sign transaction calldata, so calldata and targets should be verified before signing. Queries about tokens, wallets and URLs are sent to third-party data providers such as GoPlus, DexScreener, LI.FI and ParaSwap. A pass key passed in a URL query string can leak into logs.

Installation

In SourceWeft

  1. Open Token Honeypot & EVM Pre-Flight Audit MCP in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.github.ralf9090%2Ftoken-honeypot-audit-mcp/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "token-honeypot-evm-pre-flight-audit": {
      "type": "http",
      "url": "https://agent-kiosk.vercel.app/mcp"
    }
  }
}

README

Token Honeypot Detector, Smart Contract Audit & AML MCP Server

[MCP Compatible] [Zero Dependencies] [Free Tier] [Unlimited Pass] [License: MIT]

Pre-flight 0x token honeypot & tax scanner, OFAC/sanctions wallet AML screening, DEX order-flow alpha, 3-in-1 token due diligence & executable Base swap calldata MCP.

Searching for a Token Honeypot MCP, Smart Contract Security Audit MCP, or Base DeFi Safety MCP server? token-honeypot-audit-mcp protects AI wallets and crypto researchers from rugpulls, hidden sell taxes, malicious URLs, and sanctioned addresses — while delivering live DexScreener order-flow alpha and executable DEX swap quotes.

Why Use token-honeypot-audit-mcp?

  • Honeypot, Tax & Drainer Scanner (security_audit) — Audits any 0x... contract on Base, Ethereum, Arbitrum, BSC, Polygon, or Optimism (GoPlus + DexScreener) OR scans web URLs for phishing/prompt-injection traps.
  • OFAC & Sanctions AML Check (compliance_check) — Screens wallet addresses and entities against sanctions & high-risk compliance lists before signing transactions.
  • DEX Order-Flow & Institutional Due Diligence (token_alpha, token_due_diligence) — Buy/sell pressure, liquidity depth, FDV velocity, plus a composite A–F investment grade combining on-chain security + DEX liquidity + social sentiment.
  • Free Executable DEX Swap Quotes (defi_swap_quote) — Generates live cross-chain/same-chain EVM swap calldata via Relay Instant Solver.
  • 2 Free Calls / Day Out of the Box — Works immediately with zero configuration and no API key required.
  • Instant Unlimited Upgrade — Need high-volume production calls? Grab an instant API key at https://agent-kiosk.vercel.app/buy ($1 Starter 7-Day Pass or $5 Pro 30-Day Pass) or pay per request natively via x402 (USDC on Base).

Option 1: Zero-Install Remote MCP URL (Fastest)

Connect directly via Streamable-HTTP MCP without installing anything locally:

  • Free Tier (2 Free Calls/Day, Zero Config):
    text
    https://agent-kiosk.vercel.app/mcp
  • Paid Unlimited URL (With Prepaid Pass Key):
    text
    https://agent-kiosk.vercel.app/mcp?api_key=ak_live_YOUR_KEY_HERE

Get an Instant API Key in 10 Seconds: https://agent-kiosk.vercel.app/buy

  • $1.00 USDC — 7-Day Starter Pass (Instant ak_live_... key)
  • $5.00 USDC — 30-Day Pro Pass (Full unmasked datasets across all endpoints)

Option 2: Local npx / Stdio Setup (Claude Desktop, Cursor, Codex)

This package is pure Node.js >= 18 with zero external npm dependencies, exposing only the 5 focused tools for this workflow so your LLM context window stays lean.

Claude Desktop (claude_desktop_config.json)

json
{  "mcpServers": {    "token-honeypot-audit-mcp": {      "command": "npx",      "args": ["-y", "github:ralf9090/token-honeypot-audit-mcp"],      "env": {        "AGENT_KIOSK_API_KEY": ""      }    }  }}

(Leave AGENT_KIOSK_API_KEY empty for 2 free calls/day, or paste your ak_live_... key from agent-kiosk.vercel.app/buy for unlimited access.)

Cursor (.cursor/mcp.json)

json
{  "mcpServers": {    "token-honeypot-audit-mcp": {      "command": "npx",      "args": ["-y", "github:ralf9090/token-honeypot-audit-mcp"],      "env": {        "AGENT_KIOSK_API_KEY": "ak_live_OPTIONAL_PASS_KEY"      }    }  }}

OpenAI Codex CLI (~/.codex/config.toml)

toml
[mcp_servers.token_honeypot_audit_mcp]command = "npx"args = ["-y", "github:ralf9090/token-honeypot-audit-mcp"]env = { AGENT_KIOSK_API_KEY = "" }

Run Directly via git clone + node index.js

bash
git clone https://github.com/ralf9090/token-honeypot-audit-mcp.gitcd token-honeypot-audit-mcpnode index.js

Included MCP Tools (5)

security_audit

Pre-flight security and scam radar for AI agents. Audits 0x smart contracts/tokens (honeypot check, buy/sell tax, mintable risk, DEX liquidity via GoPlus & DexScreener) or web URLs (phishing, wallet drainers, prompt injection).

ParameterTypeRequiredDescription
targetstringYes0x... token/contract address OR https://... URL to audit
chainbase | ethereum | bsc | arbitrum | polygon | optimismNoBlockchain network when target is a 0x address (default: 'base')
x_api_keystringNoOptional ak_live_... 30-day Prepaid API Pass key to unlock the full unmasked dataset

compliance_check

Institutional AML, Sanctions (OFAC), Phishing, Mixer, and Malicious Counterparty Compliance Screening ($0.05 USDC). Screens any 0x EVM address against GoPlus Security (Base + Ethereum) and 4-chain RPC footprint before autonomous agents execute transfers.

ParameterTypeRequiredDescription
addressstringYes0x... 40-hex EVM wallet or contract address to screen for AML/sanctions
x_api_keystringNoOptional ak_live_... 30-day Prepaid API Pass key to unlock the full unmasked dataset

token_alpha

Real-time crypto & DeFi order-flow intelligence. Analyzes buy vs. sell transaction pressure, liquidity depth, volume velocity, FDV, and top DEX pools for any token ticker or contract address.

ParameterTypeRequiredDescription
querystringYesToken symbol (e.g., 'AERO', 'PEPE', 'VIRTUAL') or contract address (0x...)
chainall | base | ethereum | solana | arbitrum | bscNoOptional chain filter (default: 'all')
x_api_keystringNoOptional ak_live_... 30-day Prepaid API Pass key to unlock the full unmasked dataset

token_due_diligence

Institutional 3-in-1 Token Due Diligence Report ($0.10 USDC). Combines GoPlus on-chain honeypot/tax security audit, DexScreener DEX order-flow alpha & liquidity depth, and live Reddit/HN social sentiment into a composite investment grade (A-F).

ParameterTypeRequiredDescription
querystringYesToken symbol (e.g., 'AERO', 'VIRTUAL', 'PEPE') or 0x contract address
chainbase | ethereum | solana | arbitrum | bsc | allNoBlockchain network (default: 'base')
x_api_keystringNoOptional ak_live_... 30-day Prepaid API Pass key to unlock the full unmasked dataset

defi_swap_quote

Executable DeFi Swap & Cross-Chain Bridge Action Calldata Builder ($0.05 USDC). Queries LI.FI and ParaSwap aggregators to compute the best DEX/Bridge route and returns ready-to-sign EVM transaction calldata (to, data, value, gasLimit) on Base, Ethereum, Arbitrum, Polygon, and Optimism.

ParameterTypeRequiredDescription
from_tokenstringYesSource token symbol (e.g., 'USDC', 'ETH', 'AERO') or 0x contract address
to_tokenstringYesDestination token symbol (e.g., 'ETH', 'USDC', 'AERO', 'cbBTC') or 0x address
amountstringNoAmount of from_token to swap (human-readable e.g. '10' or atomic units)
from_chainbase | ethereum | arbitrum | polygon | optimismNoSource blockchain network (default: 'base')
to_chainbase | ethereum | arbitrum | polygon | optimismNoDestination blockchain network (default: same as from_chain)
walletstringNoOptional 0x sender wallet address for transaction simulation
x_api_keystringNoOptional ak_live_... 30-day Prepaid API Pass key to unlock the full unmasked dataset

Example Prompts

  • "Audit 0x940181a94A35A4569E4529A3CDfB74e38FD98631 on Base for honeypot risk, buy/sell taxes, and mint permissions."
  • "Run a full 3-in-1 token_due_diligence report on VIRTUAL on Base and give me its safety grade."
  • "Check compliance_check on wallet 0xd8dA6BF26964aF9D7eEd9e03E53415D37aA96045 and quote a 100 USDC -> WETH swap on Base."

Pricing & Rate Limits

TierCostQuotaSetup
Free Trial$02 Free Calls / DayZero config — works out of the box
Starter Pass$1 USDC7 Days UnlimitedGet ak_live_... at agent-kiosk.vercel.app/buy
Pro Pass$5 USDC30 Days UnlimitedGet ak_live_... at agent-kiosk.vercel.app/buy
x402 Pay-Per-Call$0.008–$0.10Unlimited autonomousPass payment_signature (Base USDC EIP-3009)

License

MIT © ralf9090 — Powered by Agent Kiosk (Upgrade / Buy API Key).

Source: README.md at commit 89556d4

Tools

24

maps_leads

Maps Leads

Find local businesses, companies, and places in any city worldwide. Extracts business name, phone number, website URL, address, opening hours, and GPS coordinates for lead generation and verification.

Parameterslimitqueryrequiredlocationx_api_keypayment_signature

web_extract

Web Extract

Extract clean, LLM-ready Markdown from any web URL while automatically scanning the page for hidden Prompt Injection traps targeting AI agents.

Parametersurlrequiredx_api_keymax_lengthpayment_signature

security_audit

Security Audit

Pre-flight security and scam radar for AI agents. Audits 0x smart contracts/tokens (honeypot check, buy/sell tax, mintable risk, DEX liquidity via GoPlus & DexScreener) or web URLs (phishing, wallet drainers, prompt injection).

Parameterschaintargetrequiredx_api_keypayment_signature

token_alpha

Token Alpha

Real-time crypto & DeFi order-flow intelligence. Analyzes buy vs. sell transaction pressure, liquidity depth, volume velocity, FDV, and top DEX pools for any token ticker or contract address.

Parameterschainqueryrequiredx_api_keypayment_signature

domain_intel

Domain Intel

B2B company & domain infrastructure intelligence. Resolves DNS records (A, MX, TXT, NS), identifies email provider (Google Workspace, M365, etc.), detects SaaS tech stack from TXT verification records, queries RDAP registration dates, and discovers active subdomains.

Parametersdomainrequiredx_api_keypayment_signature

package_audit

Package Audit

Open-source package & CVE security scanner for coding agents. Checks npm, PyPI, or Rust crates against Google OSV.dev for known security vulnerabilities, deprecation status, and latest stable version.

Parametersnamerequiredversionecosystemx_api_keypayment_signature

wallet_profiler

Wallet Profiler

Multi-chain whale & wallet portfolio profiler across Base, Ethereum, Arbitrum, and Polygon. Returns live USDC and native ETH/POL balances, total outgoing transaction counts (nonce), wallet tier (Whale/Trader/Retail), and smart contract vs EOA detection.

Parametersaddressrequiredx_api_keypayment_signature

prediction_markets

Prediction Markets

Query live prediction market odds & real-money implied probabilities (%) from Polymarket and Manifold Markets for any crypto, macro-economic, political, or technology event.

Parameterslimitqueryrequiredx_api_keypayment_signature

defi_yields

Defi Yields

DeFi highest APY & yield radar powered by DeFiLlama. Finds top lending and liquidity pools for any token (USDC, ETH, USDT, WBTC) filtered by blockchain and minimum TVL.

Parameterschainlimitsymbolx_api_keymin_tvl_usdpayment_signature

github_intel

Github Intel

GitHub repository & open-source competitive intelligence. Pass 'owner/repo' for deep repository metrics and latest releases, or a keyword topic to find the fastest-growing repositories.

Parameterslimitqueryrequiredx_api_keypayment_signature

token_due_diligence

Token Due Diligence

Institutional 3-in-1 Token Due Diligence Report ($0.10 USDC). Combines GoPlus on-chain honeypot/tax security audit, DexScreener DEX order-flow alpha & liquidity depth, and live Reddit/HN social sentiment into a composite investment grade (A-F).

Parameterschainqueryrequiredx_api_keypayment_signature

b2b_company_dossier

B2b Company Dossier

Complete 4-in-1 B2B Sales & Competitive Intelligence Dossier ($0.10 USDC). Combines DNS/MX/SaaS tech stack infrastructure, clean website extraction, local business contact/phone leads, and live social mentions.

Parametersdomainrequiredcompanylocationx_api_keypayment_signature

whale_alpha_radar

Whale Alpha Radar

Complete Multi-Chain Whale Portfolio & DeFi Yield Optimizer Report ($0.10 USDC). Profiles any 0x wallet across 4 EVM chains (Base, Ethereum, Arbitrum, Polygon), matches idle USDC/ETH balances against top DeFiLlama yield pools, and calculates projected annual yield.

Parametersaddressrequiredx_api_keypayment_signature

compliance_check

Compliance Check

Institutional AML, Sanctions (OFAC), Phishing, Mixer, and Malicious Counterparty Compliance Screening ($0.05 USDC). Screens any 0x EVM address against GoPlus Security (Base + Ethereum) and 4-chain RPC footprint before autonomous agents execute transfers.

Parametersaddressrequiredx_api_keypayment_signature

defi_swap_quote

Defi Swap Quote

Executable DeFi Swap & Cross-Chain Bridge Action Calldata Builder ($0.05 USDC). Queries LI.FI and ParaSwap aggregators to compute the best DEX/Bridge route and returns ready-to-sign EVM transaction calldata (to, data, value, gasLimit) on Base, Ethereum, Arbitrum, Polygon, and Optimism.

Parametersamountwalletto_chainto_tokenrequiredx_api_keyfrom_chainfrom_tokenrequiredpayment_signature

evm_tx_simulator

Evm Tx Simulator

Pre-flight EVM Transaction Simulator, Gas Estimator, Revert Reason Decoder, ERC-20 Allowance Checker & EIP-1967 Proxy Detector ($0.005 USDC). Simulates any transaction via eth_call & eth_estimateGas across Base, Ethereum, Arbitrum, Optimism, and Polygon before signing.

Parameterstodatafromchaintokenvaluespendertx_hashx_api_keypayment_signature

perp_funding_arbitrage

Perp Funding Arbitrage

Real-time Cross-Exchange Perpetual Funding Rate Arbitrage, Annualized Basis Spread (APR), Open Interest & Crowded Positioning Radar ($0.008 USDC) across Hyperliquid and dYdX v4.

Parameterslimitsymbolx_api_keypayment_signature

tradfi_macro_radar

Tradfi Macro Radar

Global TradFi, Macro & DeFi Capital Flow Intelligence Radar ($0.008 USDC). Returns live S&P 500, Nasdaq, CBOE VIX Volatility, US Dollar Index (DXY), US 10Y Treasury Yield, Gold, WTI Crude Oil, Crypto Fear & Greed Index, BTC Dominance, and top DeFi chain TVL.

Parametersfocusx_api_keypayment_signature

kalshi_polymarket_arb

Kalshi Polymarket Arb

Unified Kalshi, Polymarket & Manifold Prediction Market Aggregator and Cross-Venue Probability Spread / Arbitrage Scanner ($0.015 USDC).

Parameterslimitqueryrequiredx_api_keypayment_signature

llm_chat_completions

Llm Chat Completions

OpenAI-compatible LLM Chat Completions Gateway ($0.002 USDC/call). Drop-in replacement for /v1/chat/completions settled in Base USDC via x402 with zero account or API key required.

Parametersmodelpromptmessagesx_api_keypayment_signature

buy_prepaid_pass

Buy Prepaid Pass

Mint a 30-Day Prepaid API Key Pass (ak_live_...) for $5.00 USDC on Base via x402. Unlocks all 23 paid per-call Agent Kiosk REST & MCP intelligence tools for 30 days via the X-API-KEY header without per-call x402 signing (ideal for LangChain, n8n, Make.com, OpenAI Actions, and Python/JS bots).

Parametersx_api_keyagent_namepayment_signature

x402_ping

X402 Ping

Ultra-low-cost ($0.001 USDC) x402 v2 & v1 wallet verification ping, payment settlement test, latency check, and round-trip echo endpoint on Base Mainnet.

Parametersmessagex_api_keypayment_signature

Version history

1
  1. v1.0.0LatestNov 12, 2026

Score

100% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts

Other Audit integrations

audit.domains - Domain Valuation

domains.auditOfficial publisher

Deterministic domain-name valuation: fair-value intervals, comparable recorded sales, availability checks, and a verified for-sale listing market.

Streamable HTTPWeb executable
Web Search & Scraping27 toolsNov 1, 2026

Revenue Agent — OpenAPI Audit & Change Detection

news.prhOfficial publisher

A remote MCP endpoint that audits OpenAPI specifications and detects API changes, charging $0.10 USDC per analysis via x402 on Base.

Streamable HTTPWeb executable
Finance2 toolsOct 24, 2026

SEO Audit Tool: on-page SEO checks, graded for every URL

Published by GitHub account bepolabs

SEO Audit Tool: on-page SEO checks, graded for every URL's hosted MCP server; credential required; Streamable HTTP.

Streamable HTTPWeb executableAuth
Credential requiredNov 12, 2026

Agent Audit AI

Published by GitHub account michaelvereb

Autonomous AI agent readiness, crawler reachability, and 30-point audit specification engine.

Streamable HTTPWeb executable
Security & MonitoringNot indexed yetNov 12, 2026

Apify Site audit

Published by GitHub account AHMEDFOUAAD

Apify-hosted MCP preset that gives an assistant three public-web site-audit tools: sitemap URL extraction, bulk link/status checks and dataset dedup.

Streamable HTTPWeb executableAuth
Web Search & ScrapingCredential requiredNov 11, 2026