Automaton Token Safety

io.github.baianomarceloeduardo-jpg由 GitHub 账号 baianomarceloeduardo-jpg 发布v2.0.2更新于 Oct 25, 2026

Base L2 token safety for AI agents: honeypot scans, swap simulation, approval and liquidity risk.

已验证Streamable HTTP可网页运行金融安全与监控数据与分析

概览

AI 生成的概览

用于检查 Base L2 代币安全性的 MCP 服务器：蜜罐扫描、兑换模拟、授权与流动性风险，以及签名存证和实用工具。

可以做什么
扫描 Base 代币合约的蜜罐、增发、黑名单、暂停和税费风险，并通过 Uniswap 池进行只读买卖模拟，测量转账税和蜜罐行为。审计 ERC-20 授权和单区块流动性，包括价格影响估算和持仓集中度。列出 Base 上新建的流动性池及每个代币的风险评分，并在发送前对 Base 主网交易进行试运行。创建、验证和读取带签名的哈希链存证，生成或验证 Merkle 证明。获取带签名的 Gas 和资产价格数据、代币情绪评分、SHA-256 哈希、UUID、定价条款和服务健康状态。
适用场景
适合在助手交易或与某个 Base 代币交互前进行审查、检查授权或流动性头寸是否有风险，或需要生成可验证的证明与存证时使用。免费工具（一致性检查、交易模拟、存证验证、Merkle 验证、定价、健康检查）无需付费即可使用。
运行要求
可作为远程端点运行，也可作为本地 npm 包通过 stdio 运行。需要设置 VALUE_API_BASE 环境变量指向 Automaton Token Safety API。付费工具需要将 ALLOWOUT_SPEND 设为 1、在 AUTOMATON_MCP_PAYER_KEY 中提供付款钱包私钥，并可选地通过 AUTOMATON_MCP_MAX_AMOUNT_UNITS 和 AUTOMATON_MCP_TOTAL_CAP_UNITS 设置单次和总限额。需要访问 Base 主网 RPC 和该 API 的网络连接。
安装前请注意
付费工具按次收取 USDC（0.001 至 0.05），并需要在 AUTOMATON_MCP_PAYER_KEY 中提供钱包私钥；请设置支出上限以控制风险。服务器只签署 EIP-3009 授权而不发送交易，但签名仍会动用资金。免费试用按 IP 限制次数。结果只是风险提示而非保证，调用会将代币和地址数据发送给第三方 API。

安装

在 SourceWeft 中

  1. 打开 控制台中的 Automaton Token Safety，将其添加到工作区。
  2. 为需要使用其工具的对话启用该服务。

Web executable，通过 Streamable HTTP。 远程服务在工作区中配置后即可从网页运行时运行。

交给智能体安装

把这段提示词粘贴到 Claude Code、Codex、Cursor 等智能体，或 SourceWeft 对话中。智能体会读取该服务器的安装指南，先向你展示发布者、端点和登录方式，经你同意后再把它添加到你的客户端。密钥不会写进任何命令。

阅读 https://sourceweft.com/mcp/io.github.baianomarceloeduardo-jpg%2Fautomaton-token-safety-mcp/install.md，并按其中说明把这个 MCP 服务器接入我的客户端。修改任何配置之前，先告诉我它的发布者、端点和登录方式，等我确认。不要把 API 密钥写进命令或我会提交的文件；问我密钥应从哪里获取。

查看智能体所依据的安装指南

其他 MCP 客户端

把它添加到你客户端的 mcpServers 配置中。

{
  "mcpServers": {
    "automaton-token-safety": {
      "type": "http",
      "url": "https://api.automaton-sovereign.workers.dev/mcp"
    }
  }
}

README

该仓库没有 README。

工具

20

x402_conformance_check

FREE, runs locally. Lint any x402 paid endpoint for protocol conformance: HTTP 402 challenge, x402Version, accepts[] (exact scheme), Base network and addresses, EIP-712 domain, and rejection of malformed, forged, expired, underpaid and wrong-recipient EIP-3009 payments. Returns verdict, grade and per-check results.

输入参数url必填

simulate_base_transaction

FREE, runs locally against Base Mainnet RPC. Dry-run a transaction before sending it: eth_call + eth_estimateGas at the latest block. Predicts whether it will revert and decodes the reason (Error(string), Panic(uint256) codes, custom-error selector, or node rejection such as insufficient funds). Returns { ok, willRevert, revertReason, estimatedGas, returnData }.

输入参数to必填datafromvalue

token_scan

PAID 0.001 USDC/call, or free trial (3/day/IP). Bytecode security scan of a Base token contract: honeypot opcodes, mint/blacklist/pause/tax capabilities, a risk score and a verdict. Read-only — no transaction is sent. On 402, pay the accepts[] terms then retry with the payment tx hash. (Exposed as `security_scan` on older clients.)

输入参数address必填payment

tx_simulate

PAID 0.01 USDC/call, or free trial (3/day/IP). Read-only buy/sell simulation of a Base token through the Uniswap V2 WETH pool: returns reverts, the MEASURED transfer tax and a honeypot verdict. No transaction is sent. On 402, pay the accepts[] terms then retry with the payment tx hash. (Not the same tool as simulate_base_transaction, which dry-runs arbitrary calldata for free.)

输入参数side必填token必填amount必填wallet必填payment

approval_risk

PAID 0.01 USDC/call, or free trial (3/day/IP). Read-only audit of the ERC-20 approvals an owner granted for a token: spender, allowance, contract vs EOA, verified flag, drainable amount and a drain-risk verdict. On 402, pay the accepts[] terms then retry with the payment tx hash.

输入参数owner必填token必填paymentspenders

liquidity_risk

PAID 0.01 USDC/call, or free trial (3/day/IP). One-block liquidity audit of a Base token: Uniswap V3 / Aerodrome pools, the USD needed to move the price 1/2/5/10%, holder concentration, LP burn evidence and explicit coverage gaps. On 402, pay the accepts[] terms then retry with the payment tx hash.

输入参数pairtoken必填payment

sentinel_latest

PAID 0.001 USDC/call, or free trial (3/day/IP). Newest liquidity pools created on Base (Uniswap v3/v4, Aerodrome) with a bytecode risk score per new token. Filters are optional. On 402, pay the accepts[] terms then retry with the payment tx hash.

输入参数dexlimitsincemaxRiskminRiskpayment

security_scan

LEGACY NAME of token_scan — same route, same arguments, kept so clients written against this server keep working. PAID 0.001 USDC/call, or free trial (3/day/IP). Base token safety analysis: honeypot detection, mint traps, selfdestruct/delegatecall, proxy and tax risks from contract bytecode, with a risk score and signed verdict. On 402, pay the accepts[] terms then retry with the payment tx hash.

输入参数address必填payment

attest

Create a SIGNED, hash-chained, append-only attestation (verifiable proof-of-existence) for a payload. PAID: 0.05 USDC/call, or free trial (3/day/IP). On 402, pay the accepts[] terms then retry with the payment tx hash.

输入参数data必填payment

verify_attestation

FREE. Verify a ledger entry by index or by data hash: recomputes hash, checks ECDSA signature and chain link.

输入参数indexdataHash

attestation_pubkey

FREE. Get the ECDSA P-256 public key (PEM) and keyId used to sign ledger entries.

无需输入参数。

read_ledger

FREE. Read the attestation ledger (paginated).

输入参数fromlimit

oracle_base

PAID 0.001 USDC/call. Get real-time Base L2 gas estimates and asset prices (ETH, USDC, cbBTC, AERO, VIRTUAL) with an ECDSA P-256 digital signature from the sovereign agent.

输入参数payment

merkle_prove

PAID 0.001 USDC/call. Generate a cryptographic Merkle inclusion proof for a list of items and target element.

输入参数items必填targetpayment

merkle_verify

FREE. Verify a cryptographic Merkle inclusion proof against a root.

输入参数item必填root必填proof必填

sentiment_analysis

PAID 0.001 USDC/call. Web3 token risk, security checks, and sentiment scoring with signed verdict.

输入参数asset必填payment

hash_sha256

PAID 0.001 USDC/call. SHA-256 hex of a string.

输入参数input必填payment

uuid

PAID 0.001 USDC/call. Generate a UUIDv4.

输入参数payment

pricing

FREE. Full pricing terms, endpoints, and payment mechanics.

无需输入参数。

health

FREE. Service liveness and version.

无需输入参数。

版本历史

2
  1. v2.0.2最新Sep 29, 2026
  2. v2.0.1Sep 27, 2026

评分

已满足适用检查项的 75%

该评分衡量此收录条目的完整程度，依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价，也不表示服务器安全或当前可用：可连通性是带日期的检查结果，评分也不包含安装量或用户评价。

  • 近 30 天内可连通必需25 分
  • 已声明认证方式必需10 分
  • 已列出工具必需15 分
  • 描述必需15 分
  • 图标10 分
  • 文档15 分

    请声明包含 README 的 GitHub 仓库，或在 OAuth 受保护资源元数据中提供 resource_documentation。

  • 许可证10 分

    请在仓库或注册中心条目中声明许可证。