RugShield 402

io.github.ak10082247-max由 GitHub 帳號 ak10082247-max 發布v1.0.0更新於 Oct 24, 2026

Real-time token contract safety scanner and honeypot auditor via x402 on Base.

已驗證Streamable HTTP可網頁執行金融安全與監控

概覽

AI 產生的概覽

RugShield 402 是託管型 MCP 伺服器,讓助手在交易前篩檢 Solana 與 Base 代幣的蜜罐、稅費、流動性鎖定與持幣叢集。

可以做什麼
  • 模擬買入賣出,偵測蜜罐、轉帳限制與以基點計的精確稅率
  • 查核 Aerodrome、Uniswap 及鎖倉服務的 LP 鎖定狀態、池子流動性深度與解鎖風險
  • 梳理前 50 持幣者、女巫叢集、開發者集中度及 24 小時買賣方分層
  • 篩選熱門代幣,追蹤聰明錢與巨鯨的資金淨流入流出和 DEX 交易
  • 分析錢包餘額、美元估值、歷史勝率以及混幣器或 OFAC 汙點
  • 產出涵蓋位元碼、稅費、LP 證明、持幣叢集與跨鏈橋風險的完整稽核報告
適用情境
適合助手或交易代理在兌換 Solana 或 Base 代幣前做快速安全查核,或需要持幣分布、聰明錢動向與錢包風險背景做盡職調查時使用。若不涉及鏈上代幣則意義不大。
執行需求
遠端 streamable HTTP 端點,未宣告需要帳號或 API 金鑰。每次工具呼叫按次以 USDC 在 Base 或 Solana 主網付費,因此需要已儲值錢包與 x402 付款處理(例如向 SDK 用戶端提供私鑰)。本機 stdio 執行需複製儲存庫並安裝 Node.js。
安裝前請注意
每次工具呼叫都會花費 USDC,自動化迴圈可能持續花錢。文件中的 SDK 流程要求在環境變數或用戶端參數中提供代理錢包私鑰,建議使用專用的低餘額錢包。代幣地址與錢包地址會傳送給託管服務及其上游 RPC 與 DEX 資料來源。結果僅為模擬與風險評分,並非保證。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 RugShield 402,將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Web executable,透過 Streamable HTTP。 遠端服務在工作區中設定後即可從網頁執行環境執行。

交給代理程式安裝

把這段提示詞貼上到 Claude Code、Codex、Cursor 等代理程式,或 SourceWeft 對話中。代理程式會讀取該伺服器的安裝指南,先向你展示發布者、端點和登入方式,經你同意後再把它新增到你的客戶端。金鑰不會寫進任何命令。

閱讀 https://sourceweft.com/mcp/io.github.ak10082247-max%2Frugshield-402/install.md,並按其中說明把這個 MCP 伺服器接入我的客戶端。修改任何設定之前,先告訴我它的發布者、端點和登入方式,等我確認。不要把 API 金鑰寫進命令或我會提交的檔案;問我金鑰應從哪裡取得。

檢視代理程式所依據的安裝指南

其他 MCP 客戶端

把它新增到你客戶端的 mcpServers 設定中。

{
  "mcpServers": {
    "rugshield-402": {
      "type": "http",
      "url": "https://rugshield-402.onrender.com/mcp"
    }
  }
}

README

RugShield 402 🛡️ — Open-Source MCP Server for DEX Security & Honeypot Detection

[License: MIT] [MCP Standard] [TypeScript] [Base Mainnet] [x402 Protocol] [Glama]

This repository contains the complete open-source Model Context Protocol (MCP) server implementation of RugShield 402. It equips LLMs, autonomous trading agents, and IDEs (Claude Desktop, Cursor, Windsurf) with tools to simulate token buys/sells, analyze honeypot traps, calculate exact transfer tax rates, and verify DEX liquidity depth on Base and EVM networks.


🛠️ MCP Tools Implemented

This MCP server provides the following tools via standard stdio and streamable HTTP transports:

Tool NameDescriptionKey Parameters
rugshield_pre_swap_scanComprehensive pre-trade swap simulation: detects honeypots, malicious transfer limits, and liquidity drain traps.token_address (string, 42-char hex), simulate_sell (boolean, default: true)
check_honeypotDecompiles token bytecode and executes buy/sell test against Base RPC. Returns exact buy/sell tax in basis points (bps), blacklist checks, and risk score.token_address (string, 42-char hex)
verify_liquidity_lockAnalyzes DEX pool reserves (Uniswap v3, Aerodrome), LP token lock status, bonding curve state, and total USD liquidity depth.token_address (string, 42-char hex)
detect_holder_clustersMaps top token holder distributions, detects Sybil wallet clusters, and computes developer concentration risk.token_address (string, 42-char hex)

🚀 Running from Source (Local Stdio Transport)

You can run this MCP server locally on your machine from source code using Node.js and the Model Context Protocol SDK.

1. Installation & Build

bash
# Clone the open-source repositorygit clone https://github.com/ak10082247-max/rugshield-402.gitcd rugshield-402
# Install dependenciesnpm install
# Build the TypeScript source codenpm run build

2. Configure with Claude Desktop

Add this server to your claude_desktop_config.json:

  • macOS: ~/Library/Application Support/Claude/claude_desktop_config.json
  • Windows: %APPDATA%\Claude\claude_desktop_config.json
json
{  "mcpServers": {    "rugshield-402": {      "command": "node",      "args": [        "/absolute/path/to/rugshield-402/dist/mcp/server.js"      ]    }  }}

Or run directly with tsx during development without building:

json
{  "mcpServers": {    "rugshield-402": {      "command": "npx",      "args": [        "-y",        "tsx",        "/absolute/path/to/rugshield-402/src/mcp/server.ts"      ]    }  }}

3. Configure with Cursor or Windsurf

Add to your workspace .cursor/mcp.json or Windsurf MCP settings:

json
{  "mcpServers": {    "rugshield-402": {      "command": "node",      "args": ["dist/mcp/server.js"]    }  }}

🌐 Connecting to the Hosted Remote MCP Endpoint

If you prefer connecting to a hosted cloud instance without local dependencies, RugShield is deployed 24/7 on high-availability cloud infrastructure:

  • Remote MCP URL: https://rugshield-402.onrender.com/mcp
  • Protocol: Model Context Protocol (Streamable HTTP / SSE JSON-RPC 2.0)
  • Discovery Manifest: https://rugshield-402.onrender.com/.well-known/mcp/server-card.json
  • x402 Manifest: https://rugshield-402.onrender.com/.well-known/x402.json

🏛️ Simulation Engine Architecture

mermaid
sequenceDiagram    autonumber    actor LLM as Claude / Agent / Cursor    participant MCP as RugShield MCP Server (Local / Remote)    participant Simulator as EVM Bytecode Simulator    participant Base as Base Mainnet RPC    participant DEX as Aerodrome / Uniswap v3
    LLM->>MCP: tools/call ("rugshield_pre_swap_scan", { token_address })    MCP->>Simulator: Fork State & Simulate Buy/Sell    Simulator->>Base: Fetch Bytecode, Balances & Storage Slots    Simulator->>DEX: Simulate Swap on Liquidity Pool    Simulator-->>MCP: Honeypot Verdict, Tax Rates, Risk Score    MCP-->>LLM: Structured JSON Analysis & Safety Attestation

📦 Developer SDK & Framework Integrations

RugShield is packaged for automated multi-agent frameworks with 100% gasless autonomous payment settlement ($0 ETH / $0 SOL required):

1. Autonomous Agent Auto-Pay Quickstart (TypeScript)

Wrap standard fetch with @x402/fetch to automatically handle HTTP 402 challenges, sign EIP-712 transfer authorizations on Base, and retry in under 15ms:

bash
npm install @x402/fetch @x402/core @x402/evm viem
typescript
import { wrapFetchWithPayment } from "@x402/fetch";import { x402Client } from "@x402/core/client";import { ExactEvmScheme } from "@x402/evm/exact/client";import { privateKeyToAccount } from "viem/accounts";
const account = privateKeyToAccount(process.env.AGENT_PRIVATE_KEY as `0x${string}`);const client = new x402Client();client.register("eip155:8453", new ExactEvmScheme(account));
// 1-line wrapper automatically signs & unlocks full 100% honeypot simulationconst xFetch = wrapFetchWithPayment(fetch, client);const res = await xFetch("https://rugshield-402.onrender.com/v1/scan", {  method: "POST",  headers: { "Content-Type": "application/json" },  body: JSON.stringify({ token_address: "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913", simulate_sell: true }),});const report = await res.json();console.log("Full Verified Analysis:", report);

2. Autonomous Agent Auto-Pay Quickstart (Python)

Using the built-in Python client (sdk/python/rugshield.py):

python
from rugshield import RugShieldClient
# Pass your agent wallet private key - automatically handles 402 challenges & EIP-712 signingclient = RugShieldClient(private_key="0xYOUR_AGENT_PRIVATE_KEY")report = client.scan_token("0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913")
print(f"Honeypot: {report.get('is_honeypot')}")print(f"Exact Sell Tax: {report.get('sell_tax_bps')} bps")

3. ElizaOS Autonomous Agent Plugin

bash
npm install @kurox_real/plugin-rugshield-402
typescript
import { rugshieldPlugin } from "@kurox_real/plugin-rugshield-402";
export const character = {  name: "AutonomousDeFiTrader",  plugins: [rugshieldPlugin],};

4. Coinbase AgentKit (LangChain / Python / TS)

bash
npm install @kurox_real/agentkit-rugshield-402
typescript
import { rugshieldActionProvider } from "@kurox_real/agentkit-rugshield-402";import { AgentKit } from "@coinbase/agentkit";
const agentKit = await AgentKit.from({  actionProviders: [rugshieldActionProvider()],});

5. Direct REST API (cURL)

bash
# Returns 402 with structured 50% free preview + unlock instructions:curl -X POST https://rugshield-402.onrender.com/v1/scan \  -H "Content-Type: application/json" \  -d '{"token_address": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913", "simulate_sell": true}'

💳 Optional Cloud Subscriptions (MCPize / Apify)

For teams seeking turnkey managed infrastructure with flat monthly credit card billing rather than self-hosting:


📄 License

This open-source project is licensed under the MIT License — see the LICENSE file for details.

來源:README.md,提交 039885c

工具

14

analyze_liquidity

Verifies DEX LP token locking, vesting schedules, pool liquidity depth, and unwrap risks across Aerodrome and Uniswap. Cost: 0.020 USDC on Base & Solana Mainnet.

輸入參數token_address必填

check_honeypot

Instant honeypot verification and transfer fee detection for autonomous AI trading agents. Cost: 0.010 USDC on Base & Solana Mainnet.

輸入參數token_address必填

rugshield_pre_swap_scan

Simulates buy/sell orders via state overrides to detect honeypots, compute exact transfer taxes in bps, and verify pool liquidity depth. Cost: 0.010 USDC on Base & Solana Mainnet.

輸入參數token_address必填

rugshield_audit_liquidity_lock_verify

Verifies LP token ownership across Uncx, Team.Finance, and Aerodrome slipstream pools to prove liquidity cannot be pulled. Cost: 0.020 USDC on Base & Solana Mainnet.

輸入參數token_address必填

rugshield_audit_holder_cluster_map

Analyzes on-chain funding origins for the top 50 token holders to detect sybil clusters, dev dump risks, and wash-trading rings. Cost: 0.020 USDC on Base & Solana Mainnet.

輸入參數token_address必填

rugshield_audit_swap_simulation_proof

Executes state-override simulation of $1k, $10k, and $50k swap orders on Base Mainnet, calculating exact slippage, gas overhead, and MEV frontrun exposure. Cost: 0.020 USDC on Base & Solana Mainnet.

輸入參數amount_usdtoken_address必填

rugshield_audit_cross_chain_bridge_risk

Audits canonical Base bridge and CCIP/LayerZero endpoints for message replay vulnerabilities, unbacked wrapped collateral, and admin multisig latency. Cost: 0.020 USDC on Base & Solana Mainnet.

輸入參數token_address必填

rugshield_risk_institutional_token_report

Generates an end-to-end cryptographic audit report covering bytecode decompilation, honeypot tax simulation, LP lock proofs, holder clusters, and bridge risk. Cost: 0.020 USDC on Base & Solana Mainnet.

輸入參數token_address必填

rugshield_token_screener

Screens trending Solana (Pump.fun/Raydium) and Base (Aerodrome/Uniswap V3) tokens with pre-verified honeypot, tax, and liquidity depth metrics. Cost: 0.010 USDC on Base & Solana Mainnet.

輸入參數token_address必填

rugshield_smart_money_netflow

Tracks institutional and high-win-rate whale wallet net inflows and outflows across Solana SPL and Base ERC-20 tokens. Cost: 0.010 USDC on Base & Solana Mainnet.

輸入參數token_address必填

rugshield_smart_money_dex_trades

Returns real-time DEX trades executed by labeled smart-money and whale wallets on Solana and Base with pre-trade honeypot verification. Cost: 0.010 USDC on Base & Solana Mainnet.

輸入參數token_address必填

rugshield_tgm_who_bought_sold

Analyzes who bought and sold a specific Solana or Base token over the last 24h, segmented by Smart Money, Whales, Fresh Wallets, and Dev Clusters. Cost: 0.010 USDC on Base & Solana Mainnet.

輸入參數token_address必填

rugshield_tgm_holders

Returns top-10/top-50 holder distribution, LP lock percentage, and coordinated sybil cluster detection for any Solana or Base token. Cost: 0.010 USDC on Base & Solana Mainnet.

輸入參數token_address必填

rugshield_profiler_address_current_balance

Profiles any Solana or Base wallet address for current token balances, USD valuation, historical win-rate, and drainer/OFAC taint. Cost: 0.010 USDC on Base & Solana Mainnet.

輸入參數token_address必填

版本歷史

1
  1. v1.0.0最新Oct 15, 2026

評分

已滿足適用檢查項的 100%

該評分衡量此收錄條目的完整程度,依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價,也不表示伺服器安全或目前可用:可連通性是帶日期的檢查結果,評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通必需25 分
  • 已宣告認證方式必需10 分
  • 已列出工具必需15 分
  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分