
Chainward
io.github.saltxdPublished by GitHub account saltxdv0.2.3Updated Oct 24, 2026
Check a Base or BNB Chain address before you pay it: on-chain risk reports, EAS attestations.
Overview
Read-only MCP server that lets an assistant check Base or BNB Chain addresses and tokens for risk, and query ChainWard's data on AI-agent wallets.
- What you can do
- Check a counterparty address before paying it, with a pay/hold/unknown verdict, reasons, flags and any EAS attestation on Base
- Run a rug check on a Base token, with launch facts such as the launch wallet, token sends, later mints and sanctions status
- Look up whether an address is a known AI agent and pull its profile, balance, gas, recent transactions and economics
- Browse ecosystem statistics, top-agent leaderboards, recent labeled-agent activity and published Decodes
- Find Decodes that reference a specific address
- When to use it
- Useful when an assistant is about to pay, transact with, or buy a token from an unfamiliar address on Base or BNB Chain and you want a quick on-chain risk read before acting. Also handy for research on AI-agent wallets and ChainWard's published investigations.
- Requirements
- Runs locally via npx (Node.js) over stdio, or as a local HTTP server with CHAINWARD_MCP_TRANSPORT and PORT. A hosted endpoint is also offered. Defaults to ChainWard's public API at CHAINWARD_API_URL with no authentication; CHAINWARD_API_KEY is optional.
Installation
In SourceWeft
- Open Chainward in the dashboard and add it to a workspace.
- Enable the server for the chats that should use its tools.
Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.
Other MCP clients
Follow the launch instructions in the repository.
README
chainward-mcp-server
Model Context Protocol server for ChainWard: check an address on Base or BNB Chain before you pay it, and query ChainWard's intelligence on AI-agent wallets on Base.
ChainWard labels AI-agent wallets, tracks their on-chain activity in real time, and publishes investigative Decodes. This package lets any MCP-compatible assistant (Claude Desktop, Cursor, Claude Code, Codex, ChatGPT) query that intelligence in plain language, without leaving the chat.
This is the standalone distribution path. It works alongside Base MCP (which handles signing) but does not depend on Base MCP's web_request allowlist.
Tools
All tools default to ChainWard's public endpoints (no auth). Setting CHAINWARD_API_KEY enables future authenticated tools.
Install + run
Claude Desktop / Cursor / Claude Code (stdio)
Remote HTTP transport
Then point your client at http://your-host:3300/mcp.
Hosted endpoint (no install)
We run one, so you do not have to:
Same tools, no API key, nothing to install. It speaks Streamable HTTP, so the
request needs Accept: application/json, text/event-stream; a plain GET in a
browser answers 406 and that is correct, not an outage.
Run the package yourself instead when you want to pin a version, keep traffic
inside your own network, or point it at a different CHAINWARD_API_URL.
Env vars
Pair with Base MCP
This server is read-only. To act on what you learn (swap, lend, etc.), install Base MCP alongside this server. Recommended assistant prompt pattern:
Before paying or transacting with any unfamiliar address, call ChainWard's
check_counterparty(andlookup_agentfor agents). Before buying a token, callrug_check. If a Decode exists, summarise it for the user before invoking any Base MCP plugin.
License
MIT
Source: packages/mcp-server/README.md at commit f0ddfa2
Tools
0Version history
3- v0.2.3LatestOct 12, 2026
- v0.2.1Oct 4, 2026
- v0.2.0Sep 29, 2026
Score
50% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
- Reached in the last 30 days25 pts
Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.
- Auth declared10 pts
Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.
- Tools listed15 pts
Answer tools/list without a credential, or ship a package that starts in a sandbox without one.
- DescriptionRequired15 pts
- Logo10 pts
- Documentation15 pts
- License10 pts