RugShield 402

io.github.ak10082247-max由 GitHub 账号 ak10082247-max 发布v1.0.0更新于 Oct 24, 2026

Real-time token contract safety scanner and honeypot auditor via x402 on Base.

已验证Streamable HTTP可网页运行金融安全与监控

概览

AI 生成的概览

RugShield 402 是一个托管型 MCP 服务器,让助手在交易前筛查 Solana 与 Base 代币的蜜罐、税费、流动性锁定和持币集群。

可以做什么
  • 模拟买入卖出,检测蜜罐、转账限制与以基点计的精确税率
  • 核查 Aerodrome、Uniswap 及锁仓服务的 LP 锁定状态、池子流动性深度与解锁风险
  • 梳理前 50 持币者、女巫集群、开发者集中度及 24 小时买卖方分层
  • 筛选热门代币,追踪聪明钱与巨鲸的资金净流入流出和 DEX 交易
  • 分析钱包余额、美元估值、历史胜率以及混币器或 OFAC 污点
  • 生成涵盖字节码、税费、LP 证明、持币集群与跨链桥风险的完整审计报告
适用场景
适合助手或交易代理在兑换 Solana 或 Base 代币前做快速安全核查,或需要持币分布、聪明钱动向和钱包风险背景做尽调时使用。若不涉及链上代币则意义不大。
运行要求
远程 streamable HTTP 端点,未声明需要账号或 API 密钥。每次工具调用按次以 USDC 在 Base 或 Solana 主网付费,因此需要已充值钱包和 x402 支付处理(例如向 SDK 客户端提供私钥)。本地 stdio 运行需克隆仓库并安装 Node.js。
安装前请注意
每次工具调用都会花费 USDC,自动化循环可能持续花钱。文档中的 SDK 流程要求在环境变量或客户端参数中提供代理钱包私钥,建议使用专用的低余额钱包。代币地址和钱包地址会发送给托管服务及其上游 RPC 与 DEX 数据源。结果只是模拟与风险评分,并非保证。

安装

在 SourceWeft 中

  1. 打开 控制台中的 RugShield 402,将其添加到工作区。
  2. 为需要使用其工具的对话启用该服务。

Web executable,通过 Streamable HTTP。 远程服务在工作区中配置后即可从网页运行时运行。

交给智能体安装

把这段提示词粘贴到 Claude Code、Codex、Cursor 等智能体,或 SourceWeft 对话中。智能体会读取该服务器的安装指南,先向你展示发布者、端点和登录方式,经你同意后再把它添加到你的客户端。密钥不会写进任何命令。

阅读 https://sourceweft.com/mcp/io.github.ak10082247-max%2Frugshield-402/install.md,并按其中说明把这个 MCP 服务器接入我的客户端。修改任何配置之前,先告诉我它的发布者、端点和登录方式,等我确认。不要把 API 密钥写进命令或我会提交的文件;问我密钥应从哪里获取。

查看智能体所依据的安装指南

其他 MCP 客户端

把它添加到你客户端的 mcpServers 配置中。

{
  "mcpServers": {
    "rugshield-402": {
      "type": "http",
      "url": "https://rugshield-402.onrender.com/mcp"
    }
  }
}

README

RugShield 402 🛡️ — Open-Source MCP Server for DEX Security & Honeypot Detection

[License: MIT] [MCP Standard] [TypeScript] [Base Mainnet] [x402 Protocol] [Glama]

This repository contains the complete open-source Model Context Protocol (MCP) server implementation of RugShield 402. It equips LLMs, autonomous trading agents, and IDEs (Claude Desktop, Cursor, Windsurf) with tools to simulate token buys/sells, analyze honeypot traps, calculate exact transfer tax rates, and verify DEX liquidity depth on Base and EVM networks.


🛠️ MCP Tools Implemented

This MCP server provides the following tools via standard stdio and streamable HTTP transports:

Tool NameDescriptionKey Parameters
rugshield_pre_swap_scanComprehensive pre-trade swap simulation: detects honeypots, malicious transfer limits, and liquidity drain traps.token_address (string, 42-char hex), simulate_sell (boolean, default: true)
check_honeypotDecompiles token bytecode and executes buy/sell test against Base RPC. Returns exact buy/sell tax in basis points (bps), blacklist checks, and risk score.token_address (string, 42-char hex)
verify_liquidity_lockAnalyzes DEX pool reserves (Uniswap v3, Aerodrome), LP token lock status, bonding curve state, and total USD liquidity depth.token_address (string, 42-char hex)
detect_holder_clustersMaps top token holder distributions, detects Sybil wallet clusters, and computes developer concentration risk.token_address (string, 42-char hex)

🚀 Running from Source (Local Stdio Transport)

You can run this MCP server locally on your machine from source code using Node.js and the Model Context Protocol SDK.

1. Installation & Build

bash
# Clone the open-source repositorygit clone https://github.com/ak10082247-max/rugshield-402.gitcd rugshield-402
# Install dependenciesnpm install
# Build the TypeScript source codenpm run build

2. Configure with Claude Desktop

Add this server to your claude_desktop_config.json:

  • macOS: ~/Library/Application Support/Claude/claude_desktop_config.json
  • Windows: %APPDATA%\Claude\claude_desktop_config.json
json
{  "mcpServers": {    "rugshield-402": {      "command": "node",      "args": [        "/absolute/path/to/rugshield-402/dist/mcp/server.js"      ]    }  }}

Or run directly with tsx during development without building:

json
{  "mcpServers": {    "rugshield-402": {      "command": "npx",      "args": [        "-y",        "tsx",        "/absolute/path/to/rugshield-402/src/mcp/server.ts"      ]    }  }}

3. Configure with Cursor or Windsurf

Add to your workspace .cursor/mcp.json or Windsurf MCP settings:

json
{  "mcpServers": {    "rugshield-402": {      "command": "node",      "args": ["dist/mcp/server.js"]    }  }}

🌐 Connecting to the Hosted Remote MCP Endpoint

If you prefer connecting to a hosted cloud instance without local dependencies, RugShield is deployed 24/7 on high-availability cloud infrastructure:

  • Remote MCP URL: https://rugshield-402.onrender.com/mcp
  • Protocol: Model Context Protocol (Streamable HTTP / SSE JSON-RPC 2.0)
  • Discovery Manifest: https://rugshield-402.onrender.com/.well-known/mcp/server-card.json
  • x402 Manifest: https://rugshield-402.onrender.com/.well-known/x402.json

🏛️ Simulation Engine Architecture

mermaid
sequenceDiagram    autonumber    actor LLM as Claude / Agent / Cursor    participant MCP as RugShield MCP Server (Local / Remote)    participant Simulator as EVM Bytecode Simulator    participant Base as Base Mainnet RPC    participant DEX as Aerodrome / Uniswap v3
    LLM->>MCP: tools/call ("rugshield_pre_swap_scan", { token_address })    MCP->>Simulator: Fork State & Simulate Buy/Sell    Simulator->>Base: Fetch Bytecode, Balances & Storage Slots    Simulator->>DEX: Simulate Swap on Liquidity Pool    Simulator-->>MCP: Honeypot Verdict, Tax Rates, Risk Score    MCP-->>LLM: Structured JSON Analysis & Safety Attestation

📦 Developer SDK & Framework Integrations

RugShield is packaged for automated multi-agent frameworks with 100% gasless autonomous payment settlement ($0 ETH / $0 SOL required):

1. Autonomous Agent Auto-Pay Quickstart (TypeScript)

Wrap standard fetch with @x402/fetch to automatically handle HTTP 402 challenges, sign EIP-712 transfer authorizations on Base, and retry in under 15ms:

bash
npm install @x402/fetch @x402/core @x402/evm viem
typescript
import { wrapFetchWithPayment } from "@x402/fetch";import { x402Client } from "@x402/core/client";import { ExactEvmScheme } from "@x402/evm/exact/client";import { privateKeyToAccount } from "viem/accounts";
const account = privateKeyToAccount(process.env.AGENT_PRIVATE_KEY as `0x${string}`);const client = new x402Client();client.register("eip155:8453", new ExactEvmScheme(account));
// 1-line wrapper automatically signs & unlocks full 100% honeypot simulationconst xFetch = wrapFetchWithPayment(fetch, client);const res = await xFetch("https://rugshield-402.onrender.com/v1/scan", {  method: "POST",  headers: { "Content-Type": "application/json" },  body: JSON.stringify({ token_address: "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913", simulate_sell: true }),});const report = await res.json();console.log("Full Verified Analysis:", report);

2. Autonomous Agent Auto-Pay Quickstart (Python)

Using the built-in Python client (sdk/python/rugshield.py):

python
from rugshield import RugShieldClient
# Pass your agent wallet private key - automatically handles 402 challenges & EIP-712 signingclient = RugShieldClient(private_key="0xYOUR_AGENT_PRIVATE_KEY")report = client.scan_token("0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913")
print(f"Honeypot: {report.get('is_honeypot')}")print(f"Exact Sell Tax: {report.get('sell_tax_bps')} bps")

3. ElizaOS Autonomous Agent Plugin

bash
npm install @kurox_real/plugin-rugshield-402
typescript
import { rugshieldPlugin } from "@kurox_real/plugin-rugshield-402";
export const character = {  name: "AutonomousDeFiTrader",  plugins: [rugshieldPlugin],};

4. Coinbase AgentKit (LangChain / Python / TS)

bash
npm install @kurox_real/agentkit-rugshield-402
typescript
import { rugshieldActionProvider } from "@kurox_real/agentkit-rugshield-402";import { AgentKit } from "@coinbase/agentkit";
const agentKit = await AgentKit.from({  actionProviders: [rugshieldActionProvider()],});

5. Direct REST API (cURL)

bash
# Returns 402 with structured 50% free preview + unlock instructions:curl -X POST https://rugshield-402.onrender.com/v1/scan \  -H "Content-Type: application/json" \  -d '{"token_address": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913", "simulate_sell": true}'

💳 Optional Cloud Subscriptions (MCPize / Apify)

For teams seeking turnkey managed infrastructure with flat monthly credit card billing rather than self-hosting:


📄 License

This open-source project is licensed under the MIT License — see the LICENSE file for details.

来源:README.md,提交 039885c

工具

14

analyze_liquidity

Verifies DEX LP token locking, vesting schedules, pool liquidity depth, and unwrap risks across Aerodrome and Uniswap. Cost: 0.020 USDC on Base & Solana Mainnet.

输入参数token_address必填

check_honeypot

Instant honeypot verification and transfer fee detection for autonomous AI trading agents. Cost: 0.010 USDC on Base & Solana Mainnet.

输入参数token_address必填

rugshield_pre_swap_scan

Simulates buy/sell orders via state overrides to detect honeypots, compute exact transfer taxes in bps, and verify pool liquidity depth. Cost: 0.010 USDC on Base & Solana Mainnet.

输入参数token_address必填

rugshield_audit_liquidity_lock_verify

Verifies LP token ownership across Uncx, Team.Finance, and Aerodrome slipstream pools to prove liquidity cannot be pulled. Cost: 0.020 USDC on Base & Solana Mainnet.

输入参数token_address必填

rugshield_audit_holder_cluster_map

Analyzes on-chain funding origins for the top 50 token holders to detect sybil clusters, dev dump risks, and wash-trading rings. Cost: 0.020 USDC on Base & Solana Mainnet.

输入参数token_address必填

rugshield_audit_swap_simulation_proof

Executes state-override simulation of $1k, $10k, and $50k swap orders on Base Mainnet, calculating exact slippage, gas overhead, and MEV frontrun exposure. Cost: 0.020 USDC on Base & Solana Mainnet.

输入参数amount_usdtoken_address必填

rugshield_audit_cross_chain_bridge_risk

Audits canonical Base bridge and CCIP/LayerZero endpoints for message replay vulnerabilities, unbacked wrapped collateral, and admin multisig latency. Cost: 0.020 USDC on Base & Solana Mainnet.

输入参数token_address必填

rugshield_risk_institutional_token_report

Generates an end-to-end cryptographic audit report covering bytecode decompilation, honeypot tax simulation, LP lock proofs, holder clusters, and bridge risk. Cost: 0.020 USDC on Base & Solana Mainnet.

输入参数token_address必填

rugshield_token_screener

Screens trending Solana (Pump.fun/Raydium) and Base (Aerodrome/Uniswap V3) tokens with pre-verified honeypot, tax, and liquidity depth metrics. Cost: 0.010 USDC on Base & Solana Mainnet.

输入参数token_address必填

rugshield_smart_money_netflow

Tracks institutional and high-win-rate whale wallet net inflows and outflows across Solana SPL and Base ERC-20 tokens. Cost: 0.010 USDC on Base & Solana Mainnet.

输入参数token_address必填

rugshield_smart_money_dex_trades

Returns real-time DEX trades executed by labeled smart-money and whale wallets on Solana and Base with pre-trade honeypot verification. Cost: 0.010 USDC on Base & Solana Mainnet.

输入参数token_address必填

rugshield_tgm_who_bought_sold

Analyzes who bought and sold a specific Solana or Base token over the last 24h, segmented by Smart Money, Whales, Fresh Wallets, and Dev Clusters. Cost: 0.010 USDC on Base & Solana Mainnet.

输入参数token_address必填

rugshield_tgm_holders

Returns top-10/top-50 holder distribution, LP lock percentage, and coordinated sybil cluster detection for any Solana or Base token. Cost: 0.010 USDC on Base & Solana Mainnet.

输入参数token_address必填

rugshield_profiler_address_current_balance

Profiles any Solana or Base wallet address for current token balances, USD valuation, historical win-rate, and drainer/OFAC taint. Cost: 0.010 USDC on Base & Solana Mainnet.

输入参数token_address必填

版本历史

1
  1. v1.0.0最新Oct 15, 2026

评分

已满足适用检查项的 100%

该评分衡量此收录条目的完整程度,依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价,也不表示服务器安全或当前可用:可连通性是带日期的检查结果,评分也不包含安装量或用户评价。

  • 近 30 天内可连通必需25 分
  • 已声明认证方式必需10 分
  • 已列出工具必需15 分
  • 描述必需15 分
  • 图标10 分
  • 文档15 分
  • 许可证10 分