FabTally Safe

io.github.zvmzaretskyPublished by GitHub account zvmzaretskyv1.0.0Updated Oct 24, 2026

Read-only crypto safety: token honeypot checks, EIP-712 signature decode, approval scans.

The publisher's own server: Tally

VerifiedStreamable HTTPWeb executableFinanceSecurity & Monitoring

Overview

AI-generated overview

Read-only crypto safety server that checks tokens for honeypots, decodes EIP-712 signatures and scans wallet approvals before an assistant signs anything.

What you can do
  • Check tokens for honeypot, tax and privilege risks with a 0-100 score and reasons
  • Decode EIP-712 typed data (Permit, Permit2, Seaport) into plain English with risk flags
  • Scan a wallet's ERC-20/721 approvals ranked by exposure and return revoke calldata
  • Run keyless pre-sign transaction analysis with revert checks and predicted effects
  • Use free teaser versions of all four checks, or paid versions for full breakdowns
When to use it
Useful when an assistant helps a user evaluate a token, review a signature request or audit wallet approvals on Ethereum, Base, BSC, Polygon, Arbitrum or Optimism, and needs descriptive risk facts rather than execution.
Requirements
Remote endpoint at safe.fabtally.com over streamable HTTP, or a local Node.js process for stdio. No wallet or private key is needed. Paid tools require x402 payment in USDC on Base via an x_payment token, or a prepaid X-FabTally-Key credit header on the HTTP API. Optional FABTALLY_SAFE_BASE overrides the API base.
Before you install
Four tools cost money per call ($0.01-$0.02 in USDC on Base) and require an x402 payment authorization or a prepaid credit key; the free variants return only partial results. Addresses and transaction data are sent to the FabTally Safe API, which aggregates third-party sources such as GoPlus and honeypot.is. Outputs are descriptive facts, not financial advice, and revoke calldata must be executed by the user.

Installation

In SourceWeft

  1. Open FabTally Safe in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.github.zvmzaretsky%2Fcrypto-safety/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "fabtally-safe": {
      "type": "http",
      "url": "https://safe.fabtally.com/mcp"
    }
  }
}

README

FabTally Safe — MCP server

Read-only crypto safety + "what am I signing" verification for AI agents and wallets. Fronts the FabTally Safe HTTP API (https://safe.fabtally.com).

  • Read-only. Never holds, moves, signs for, or broadcasts funds. No private key. Outputs are descriptive facts from public sources — not financial advice.
  • 8 tools: 4 free teasers + 4 paid (x402, USDC on Base).

Tools

ToolTierWhat it does
token_safetypaid $0.02Multi-chain token honeypot/rug check — aggregates GoPlus + honeypot.is into a 0-100 risk score with explainable reasons.
decode_signaturepaid $0.01"What am I signing" — decode EIP-712 / Permit / Permit2 / Seaport typed-data into plain English + risk flags (unlimited approval, malicious spender, expiry, NFT-drain).
approvalspaid $0.01Wallet approval-risk scan ranked by exposure + address-poisoning "revoke bait" detection + the revoke calldata you execute yourself.
simulatepaid $0.02Keyless pre-sign transaction analysis: eth_call revert check + static delta prediction + risk flags.
token_safety_free · decode_signature_free · approvals_free · simulate_freefreeReal teaser results, no wallet.

Chains: ethereum, base, bsc, polygon, arbitrum, optimism (honeypot.is signals on ethereum/base/bsc).

Payment

Paid tools use x402 (USDC on Base, eip155:8453). Call a paid tool with no x_payment to receive the decoded 402 challenge (price, network, asset, payTo); build an x402 authorization and call again with the token in x_payment. Humans can instead prepay by card and use an X-FabTally-Key credit header on the HTTP API.

Transports

  • stdio (default): node index.js — for Claude Desktop and local MCP clients.
  • streamable-http: MCP_HTTP_PORT=8113 node http.js — hosted at https://safe.fabtally.com/mcp.

Config

  • FABTALLY_SAFE_BASE — API base (default https://safe.fabtally.com).

Operator: Sunstone Soft · https://fabtally.com · Not financial advice · read-only.

Source: README.md at commit b9b1d77

Tools

8

token_safety

Token honeypot / rug safety check (paid $0.02)

PAID $0.02 (x402, USDC on Base). Multi-chain token honeypot/rug check aggregating GoPlus token-security + honeypot.is buy/sell-tax simulation into a normalized 0-100 risk score with explainable reasons: honeypot/can't-sell, buy/sell tax, mint/blacklist/pausable/ownership privileges, top-holder concentration, LP-lock, contract verified/bytecode. Descriptive facts only — NOT a buy/sell signal. Without payment returns the x402 challenge; pass x_payment to settle. Free teaser: token_safety_free.

Parameterschainrequiredaddressrequiredx_payment

token_safety_free

Token safety — score band + top-line flags (FREE)

FREE. Score band + top-line honeypot/tax/privilege flags for a token {address, chain}. Real result, no wallet. Upgrade to token_safety for the full numeric breakdown.

Parameterschainrequiredaddressrequired

decode_signature

Decode 'what am I signing' EIP-712 signature (paid $0.01)

PAID $0.01 (x402, USDC on Base). Decode an off-chain EIP-712 typed-data signature (Permit / Permit2 / Seaport / generic) into plain English with risk flags: unlimited approval, unknown/known-malicious spender, never-expiring or already-expired deadlines, zero-consideration NFT-drain orders. Off-chain signatures are the top wallet-drainer vector. Pure offline decode — never signs/broadcasts. Without payment returns the x402 challenge; pass x_payment. Free teaser: decode_signature_free.

Parameterschainx_paymenttyped_datarequired

decode_signature_free

Signature decode — type + summary + risk level (FREE)

FREE. Type + plain-English summary + risk level for an EIP-712 `typed_data`. Real result, no wallet. Upgrade to decode_signature for the full field-by-field decode + all risk flags + malicious-spender screening.

Parameterschaintyped_datarequired

approvals

Wallet approval-risk scan + revoke calldata (paid $0.01)

PAID $0.01 (x402, USDC on Base). Scan a wallet's ERC-20/721 approvals ranked by exposure; flags unlimited amounts, unverified/known-malicious spenders, and address-poisoning 'fake-approval revoke bait'; returns the exact revoke calldata you execute YOURSELF (never executed/broadcast by us). Without payment returns the x402 challenge; pass x_payment. Free teaser: approvals_free.

Parameterschainrequiredaddressrequiredx_payment

approvals_free

Approvals — counts + top-3 risks (FREE)

FREE. Approval counts + top-3 riskiest spenders for {address, chain}. Real result, no wallet. Upgrade to approvals for EVERY approval ranked + revoke calldata.

Parameterschainrequiredaddressrequired

simulate

Keyless pre-sign transaction simulation (paid $0.02)

PAID $0.02 (x402, USDC on Base). Keyless pre-sign analysis of {chain, from?, to, data, value?}: public-RPC eth_call revert check + static calldata decode predicting approval/transfer deltas + risk flags (unlimited approval, approval-for-all, reverts). Honest keyless limitation stated in the response (no full fork trace). Without payment returns the x402 challenge; pass x_payment. Free teaser: simulate_free.

Parameterstorequireddatafromchainrequiredvaluex_payment

simulate_free

Simulate — method + revert + risk level (FREE)

FREE. Method + revert flag + risk level + predicted effect types for a transaction. Real result, no wallet. Upgrade to simulate for the full predicted deltas + all risk flags.

Parameterstorequireddatafromchainrequiredvalue

Version history

1
  1. v1.0.0LatestSep 16, 2026

Score

100% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts

Other Tally integrations

Tally

markets.tallyOfficial publisher

Tally is a remote MCP server that keeps a private trading journal — theses, evidence, exit criteria and decision history — for AI-assisted trading, with no…

Streamable HTTPWeb executableAuth
FinanceCredential requiredOct 27, 2026

Zovo Tally Import

Published by GitHub account theluckystrike

Converts bank statements into Tally XML vouchers that can be imported into TallyPrime or Tally ERP 9.

Streamable HTTPWeb executable
Finance2 toolsNov 8, 2026

Tally Mcp

Published by GitHub account mrfentmen

Query Tally (key; set TALLY_API_KEY, Bearer): forms, form details, submissions.

STDIODesktop only
Not validated yetOct 24, 2026

ComplyEaze Bridge

Published by GitHub account ComplyEaze

Claude Desktop extension that reads a local TallyPrime book and proposes Payment, Receipt and Contra vouchers from Indian bank statement PDFs.

STDIODesktop only
Files & StorageNot validated · the package type cannot run in the sandboxNov 6, 2026

FabTally Utility Belt

Published by GitHub account zvmzaretsky

A remote MCP server offering 13 deterministic utilities — unit conversion, hashing, encoding, IDs, regex, time zones, cron, RRULE, currency, diff, JSON Schema —

Streamable HTTPWeb executable
Developer Tools13 toolsOct 24, 2026