100pro Token Risk

dev.rendraputra由 rendraputra.dev 发布官方发布者v1.0.4更新于 Oct 24, 2026

Read-only risk tools: token screen, contract source, wallet. $0.10 USDC on Base.

已验证Streamable HTTP可网页运行金融安全与监控

概览

AI 生成的概览

远程 MCP 服务器，对 EVM 代币、合约源码和钱包做只读的盘前风险筛查，按次以 Base 上的 USDC 付费。

可以做什么
代币筛查：针对六条链上的 EVM 合约或 Solana SPL mint，给出蜜罐、税费与所有者标记、LP 锁定状态、mint 与冻结权限、转账费或钩子、持仓集中度、流动性深度、刷量信号及一行结论，单次最多五个地址并以批量报告返回。合约源码核查：判断 EVM 合约是否已验证、通过哪条途径、完全或部分验证、部署字节码是否仍与源码一致，以及代理与实现地址信息。钱包筛查：区分外部账户与合约、首次交易以来的年龄、活动计数、原生余额、资金来源、已部署合约数量，以及 Blockscout 与 GoPlus 的信誉和安全标记。
适用场景
适合在交易或交互前需要快速核查某个代币、合约或钱包，并愿意按次支付小额费用而不使用免费但限流的扫描器时使用。
运行要求
远程 streamable HTTP 端点，无需账户或 API 密钥。每次调用单个代币 0.10 USDC，2 至 5 个代币批量 0.25 USDC，在 Base 上通过 x402 支付；未付费调用返回 HTTP 402 及支付挑战，需完成支付后重试。stdio 桥接方式需要 Python 3.9 以上或 uv。
安装前请注意
每次调用都会在 Base 上花费真实 USDC，助手可能在缺乏明确预算的情况下产生费用；支付在链上结算并记录。工具虽标为只读，但服务器会接收提交的地址并转发给第三方数据源。报告只是风险信号，不构成投资建议。

安装

在 SourceWeft 中

  1. 打开 控制台中的 100pro Token Risk，将其添加到工作区。
  2. 为需要使用其工具的对话启用该服务。

Web executable，通过 Streamable HTTP。 远程服务在工作区中配置后即可从网页运行时运行。

交给智能体安装

把这段提示词粘贴到 Claude Code、Codex、Cursor 等智能体，或 SourceWeft 对话中。智能体会读取该服务器的安装指南，先向你展示发布者、端点和登录方式，经你同意后再把它添加到你的客户端。密钥不会写进任何命令。

阅读 https://sourceweft.com/mcp/dev.rendraputra%2F100pro-token-risk/install.md，并按其中说明把这个 MCP 服务器接入我的客户端。修改任何配置之前，先告诉我它的发布者、端点和登录方式，等我确认。不要把 API 密钥写进命令或我会提交的文件；问我密钥应从哪里获取。

查看智能体所依据的安装指南

其他 MCP 客户端

把它添加到你客户端的 mcpServers 配置中。

{
  "mcpServers": {
    "100pro-token-risk": {
      "type": "http",
      "url": "https://x402.rendraputra.dev/mcp"
    }
  }
}

README

100pro Token Risk Screen — MCP server

[100pro-token-risk MCP connector]

Pre-trade risk screening for EVM token contracts and Solana SPL mints, exposed as a remote MCP tool. Honeypot/tax/owner flags, LP-lock state, mint & freeze authority, transfer fee/hook, holder concentration, liquidity depth, wash-trade signals — ending in a one-line Verdict.

  • Endpoint: https://x402.rendraputra.dev/mcp (MCP streamable HTTP, JSON-RPC 2.0)
  • Tool: token_risk_screen (token, chain) — read-only, up to 5 comma-separated addresses per call
  • Chains: base, ethereum, bsc, polygon, arbitrum, solana
  • Price: $0.10 USDC per single token, $0.25 for a 2-5 token batch, on Base, paid with x402 v2 — no account, no API key, no subscription. An unpaid call answers HTTP 402 with the payment challenge; pay it and retry. Free metadata: /llms.txt, /openapi.json, /.well-known/x402.

Use it as a remote MCP server (no install)

json
{  "mcpServers": {    "100pro-token-risk": {      "type": "http",      "url": "https://x402.rendraputra.dev/mcp"    }  }}

Use it through this stdio bridge

Some clients only speak stdio. This tiny proxy forwards initialize, tools/list and tools/call to the remote endpoint (stdlib only, no dependencies):

json
{  "mcpServers": {    "100pro-token-risk": {      "command": "python3",      "args": ["/absolute/path/to/100pro_mcp.py"]    }  }}

or straight from the repo, if you use uv:

json
{  "mcpServers": {    "100pro-token-risk": {      "command": "uvx",      "args": ["--from", "git+https://github.com/rndrpp/100pro-mcp", "100pro-mcp"]    }  }}

What a call returns

A markdown report per token, e.g.:

text
## 0x8335…2913 (base)**Verdict: PASS — no blocking risk signal found.**...

If the call is unpaid the server answers with the x402 payment challenge (HTTP 402). Pay $0.10 USDC (single token) or $0.25 (2-5 token batch) on Base to the payTo in the challenge and retry; the response carries a PAYMENT-RESPONSE receipt naming the settled transaction.

Why paying beats a free scanner

Free scanners are the product being sold elsewhere: rate-limited, delay-baiting, or an upsell funnel. This one is a single priced call with a fail-closed guarantee — the report is generated and returned only after the USDC transfer is confirmed on Base, and every settle attempt is logged with the on-chain verdict.

Links

MIT licensed.

Repo layout

  • 100pro_mcp.py — repo-root entry point (python3 100pro_mcp.py, and the file container checkers execute after cloning); it bootstraps pro100/bridge.py.
  • pro100/bridge.py — the actual stdio bridge: answers initialize / tools/list locally (so introspection needs no network) and forwards tools/call to the hosted endpoint.
  • pyproject.toml — packages pro100, console script 100pro-mcp (so uvx --from git+https://github.com/rndrpp/100pro-mcp 100pro-mcp works).

Python 3.9+, standard library only — nothing to install for the plain-script path.

来源：README.md，提交 e8494c4

工具

3

token_risk_screen

Token risk screen (EVM + Solana, read-only)

Pre-trade risk screen for an EVM token contract or a Solana SPL mint (Base, Ethereum, BSC, Polygon, Arbitrum, Solana). Returns a markdown report: honeypot/tax/owner flags, LP-lock state, mint and freeze authority, transfer fee/hook, holder concentration, liquidity depth, wash-trade flags, and a final **Verdict** line. Up to 5 comma-separated tokens per call. $0.1 USDC for a single token contract / SPL mint, $0.25 for a 2-5 address batch, on Base (x402 v2, no account, no API key). An unpaid call answers HTTP 402 with the payment challenge; sign it and retry with the payment in the call `_meta`. Read-only: it never signs, transfers, or approves anything on the caller's behalf.

输入参数chaintoken必填

contract_source_check

Contract source check (EVM, read-only)

Contract-level due diligence for an EVM contract address: whether the source is verified and through which route (sourcify / verifier-alliance / eth-bytecode-db), fully vs partially verified, whether the deployed bytecode still matches the verified source, proxy pattern and implementation address, deployer address and creation tx, contract age, and a capability scan of the verified source (and of the proxy implementation) for mint, pause, blacklist, selfdestruct and delegatecall. Returns markdown ending in a **Verdict** line. Up to 5 comma-separated addresses per call. $0.1 USDC for a single contract address, $0.25 for a 2-5 address batch, on Base (x402 v2, no account, no API key). An unpaid call answers HTTP 402 with the payment challenge; sign it and retry with the payment in the call `_meta`. Read-only: it never signs, transfers, or approves anything on the caller's behalf.

输入参数chainaddress必填

wallet_risk_screen

Wallet risk screen (EVM, read-only)

Wallet-level due diligence for an EVM address: externally-owned account vs contract (and proxy type), age from its first transaction, activity counters, native balance, funding source, how many contracts it has deployed, Blockscout scam/reputation/tags, and GoPlus address-security flags (sanctioned, phishing, mixer, money laundering, honeypot-related, malicious contracts created). Returns markdown with a **Verdict** and a flag list. Up to 5 comma-separated addresses per call. $0.1 USDC for a single wallet address, $0.25 for a 2-5 address batch, on Base (x402 v2, no account, no API key). An unpaid call answers HTTP 402 with the payment challenge; sign it and retry with the payment in the call `_meta`. Read-only: it never signs, transfers, or approves anything on the caller's behalf.

输入参数chainaddress必填

版本历史

1
  1. v1.0.4最新Sep 23, 2026

评分

已满足适用检查项的 100%

该评分衡量此收录条目的完整程度，依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价，也不表示服务器安全或当前可用：可连通性是带日期的检查结果，评分也不包含安装量或用户评价。

  • 近 30 天内可连通必需25 分
  • 已声明认证方式必需10 分
  • 已列出工具必需15 分
  • 描述必需15 分
  • 图标10 分
  • 文档15 分
  • 许可证10 分