io.github.gl1tchbased-pixel由 GitHub 账号 gl1tchbased-pixel 发布v1.0.0更新于 Oct 29, 2026
Token rug-risk scans, Know Your Agent wallet checks and deployer reputation for AI agents.
远程 MCP 服务器，让助手在交易前执行只读的代币安全扫描、查询钱包信任评分和部署者信誉。
Web executable，通过 Streamable HTTP。 远程服务在工作区中配置后即可从网页运行时运行。
把这段提示词粘贴到 Claude Code、Codex、Cursor 等智能体，或 SourceWeft 对话中。智能体会读取该服务器的安装指南，先向你展示发布者、端点和登录方式，经你同意后再把它添加到你的客户端。密钥不会写进任何命令。
阅读 https://sourceweft.com/mcp/io.github.gl1tchbased-pixel%2Fgl1tch/install.md，并按其中说明把这个 MCP 服务器接入我的客户端。修改任何配置之前，先告诉我它的发布者、端点和登录方式，等我确认。不要把 API 密钥写进命令或我会提交的文件；问我密钥应从哪里获取。把它添加到你客户端的 mcpServers 配置中。
{
"mcpServers": {
"gl1tch-token-safety": {
"type": "http",
"url": "https://gl1tchbased.xyz/api/mcp"
}
}
}A free, open-source token safety scanner for Solana (plus 15 EVM chains). Paste any token and get a 0–100 risk score with a plain-language reason for every check, in seconds. Read-only: it never asks for a signature, never touches a wallet, and costs nothing to use.
mobile/Most tokens launched on Pump.fun collapse shortly after launch (Solidus Labs counted 98.6% of 7M+ tokens from Jan 2024 to Mar 2025 as pump-and-dumps). The warning signs sit in on-chain state that buyers can't read: a live mint authority, a freeze authority, a hidden Token-2022 transfer fee, unlocked liquidity, bundled sniper wallets, a deployer with a history of rugs. GL1TCH reads that state, explains it in plain words, and gives it away for free.
A token whose volume is botted, or whose holders are mostly one linked network, can't read better than CAUTION,
whatever its contract looks like. The scan also flags a token that has fallen 85% or more from its peak, and paid
DexScreener promotion. EVM chains use GoPlus for honeypot, sell tax, mintable, ownership, pausable and blacklist
checks, plus the same trading-activity check.
Every scan also feeds the Signal Graph, a cross-scan memory of deployers, so a serial
rugger's next token is flagged. Scoring changes are logged in
docs/scoring-changelog.md.
Verdicts: CLEAN, LOW RISK, CAUTION, HIGH RISK, RUG-SHAPED, UNKNOWN. The API is rate
limited per IP (40 requests/min), the same for every caller. If you are building an integration
that needs more, ask at [email protected]; it stays free.
Embed a live badge that links to the full report:
Machine-readable docs for agents: https://gl1tchbased.xyz/llms.txt.
A working mobile-first Android prototype (mobile/, MIT) built for Solana Seeker and Android devices:
mobile/README.md.Requires Node.js 22.
CI type-checks and tests the site and the bot on every push, and a security workflow runs a secret scan, a dependency audit and a check that no code ever requests a fund-moving or approval signature.
SECURITY.md to report a vulnerability, and
docs/threat-model.md.docs/verdict-anchoring.md./api/stats returns user, auto and splitSince, or a 503 while the counter is unreachable,
never a made-up 0). Automated means Rug Radar, Watchtower, link previews, badge renders and our own
pages' self-checks of $GL1TCH. Those self-checks were at first miscounted as people's scans, so the
split restarted once that was fixed (splitSince is the restart).The project also has a community token, $GL1TCH
(3HQJwwHvzy8pGkPqGQcb4thZCH88MUCHVVSNtHn6pump), launched on Pump.fun on 29 May 2026:
Token-2022, mint and freeze authority revoked, 0% tax, fixed 1B supply, liquidity in the Pump.fun bonding curve.
More: whitepaper · token page · Quantum Core and verifiable randomness.
Issues and pull requests are welcome. See CONTRIBUTING.md.
来源：README.md，提交 10c82e5
Scan a token for rug risk
Pre-trade token safety check (Solana and EVM): rug-pull and honeypot verdict, 0-100 safety score, mint/freeze authority, LP lock, buy/sell tax, holder concentration, deployer history and bot-volume flags.
mint必填chainKnow Your Agent: trust-check a wallet
Trust score and level for an AI-agent wallet (or any wallet) before you transact with it: signature-verified identity plus its on-chain track record in GL1TCH scans.
chainaddress必填Token deployer reputation
How many tokens a deployer wallet launched and how many scanned as high risk or rug-shaped (serial rugger check), from the GL1TCH Signal Graph.
chainaddress必填已满足适用检查项的 100%
该评分衡量此收录条目的完整程度，依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价，也不表示服务器安全或当前可用：可连通性是带日期的检查结果，评分也不包含安装量或用户评价。
// Full safety report for one tokenconst r = await fetch("https://gl1tchbased.xyz/api/scan?mint=<address>&chain=solana");const report = await r.json(); // { verdict, score, confidence, checks[], meta, bottomLine, ... }
// Search by name or symbol across chainsconst s = await fetch("https://gl1tchbased.xyz/api/scan?q=bonk").then((x) => x.json()); // { candidates }<a href="https://gl1tchbased.xyz/scan/solana-<address>"> <img src="https://gl1tchbased.xyz/api/badge?t=solana-<address>" alt="Scanned by GL1TCH" /></a>flowchart LR U[Browser · Telegram · API caller] --> S["/api/scan (Next.js on Vercel)"] S --> RPC[Solana RPC: mint, authorities, holders, deployer balance] S --> RC[RugCheck: LP lock, insiders, deployer] S --> MK[DexScreener / GeckoTerminal: market] S --> GP[GoPlus: EVM checks] S --> BOT[(Bot on an Oracle Cloud VM: Signal Graph, counters, Watchtower)] BOT --> TG[Telegram alerts]npm installcp .env.example .env.local # optional: a private Solana RPC in SCAN_RPC; public RPCs work for light usenpm run dev # http://localhost:3000/scannpm test # unit tests (vitest)
cd bot && npm install && npm test # the Telegram bot has its own package and tests